last executing test programs: 35m56.673426383s ago: executing program 2 (id=5884): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea018512babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7acbf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000005d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd353646000000000000000000002b0000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4092140faed0c329be610c30180000000000000c03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3e16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e2e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981179186e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54ae54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db55474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1386f5800"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 35m55.791705765s ago: executing program 2 (id=5886): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x6, 0x4, 0x599, 0xa, 0x0, 0x1}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)}], 0x1, 0x0, 0x0, 0x900}, 0x60) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f00000003c0)={&(0x7f0000000040)=@in6={0xa, 0x4e23, 0xd, @local, 0x7}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="f1", 0x1}], 0x1}, 0x40040) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff229, 0x1, @perf_config_ext={0x80000001, 0x1}, 0x8041, 0x7, 0x0, 0x0, 0x0, 0x7, 0x200, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$kcm(0x21, 0x2, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000280)=ANY=[@ANYBLOB='b *:4\trr\nD'], 0xa) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d000a847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb9040220080406037c09e8fe55a10a0015400600142603600e122f00160006000400a8000600200003400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) 35m54.683511713s ago: executing program 2 (id=5889): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0xc2ba, 0x5, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_type(r2, &(0x7f0000000380), 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000200142603600e1208000b0000000401a8001600a400014005000200036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r4 = socket$kcm(0x29, 0x0, 0x0) sendmsg(r3, &(0x7f0000000340)={&(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x2, 0x0, 0x0, 0x0, {0xa, 0x4e20, 0xcc44, @empty, 0x9}}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000240)="2ed1a796dd8ddda780eb436bd9546afde83f1ec95bdd5cbea0ac85538351051a7f80c41f384d21f8a55f07b0a8f01419cd5f22f3d6c5509592be1d679886e0e15362549a8d08d0104de9687ed841b036fa0b7b867f4214bd40ed0e", 0x5b}, {&(0x7f0000000140)}, {&(0x7f00000002c0)="c8577ebac0068d129ef564a92710d5937c83d5170befebcc71d9804bb37caf74e7d532933ab004c5a8a7161dcd548d9a877cf5bf79fed49202", 0x39}], 0x3}, 0x30004004) 35m53.391716502s ago: executing program 2 (id=5893): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x40305839, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) close(r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'ip6gretap0\x00', 0x400}) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) r5 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r4}, 0x8) close(r5) sendmsg$inet(r2, &(0x7f0000000580)={&(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000280)="6979d8ed166fb5f5bc0808671a4911b0703f9f265abfc59c904f3a72517e079f65614d87ce700298ec9b0dea", 0x2c}, {&(0x7f0000000740)="8d29e4a8b0d58aa2ae3b84e886a763405c8918fcacd0899fe0642bfe966b6b118464b0f97f514bbb233a1a62daeda46d0a425f87d8f952a4b3c1f7482f58e94f39cae25aa7ac338fb73a5b5eb8e1c089cb1be832a9adbe47720261a85aa6a60a9cf1a3052c269668db3d6dd14657273e2ae973d922597a64935418519fa822e57a23b41378e67895f36f7b267ca32558d25a101e6ba93fc4f6dbc5e7fddcac0403dc8ba0e4982c3ef463ff838f4dc090e08162047e519f4637a89ff9b810201ad2eff0e9904146328ce7835057b98f5bf8bad73b2dd7", 0xd6}, {&(0x7f0000000500)="86edc181b38a7a3387aefb7fcc45bce7619f91deb044d1420100d65c31d77aca5efc49facbd5592454a79be0ca27e97fd13ad85f9ad1c5e26718024030fe74d63c378a7ff2692f355200dc6d9f781b02afcc262f92d7bd92f31b1fcd2b", 0x5d}, {&(0x7f0000000a00)="7893b38fc58848a5d4f39838aac1de6fe20a575b6dd0fc51bfdb2a6c7564b9f8c81e6a0aff636be2adcd33d5936bc4989ded78fe003f8198263918d67260051bab9e34a7dd3173e1bce5e9a5232a874d08aa4b917a9db4db057b378b25f1fe522b7db0d8a80e5e390399d9266037d9cf42bccb2857d6aa543ab4e6f90f26ffded93d073851d7ab639db5af9219c7c24cbce0c629a8116f3ea1493699c87e21c3c6d1d03b51182ec3548b90eeb158025a5db435", 0xb3}], 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="64000000000000000000000007000000890fcf00000000ac1e00017f00000100832bade0000001ac14141aac1414aaffffffff01ac1414aa0a0101007f000001ac1414aa94040100441477a3ac1414bb00000005ac14143f000000040000000000140000000000000000000000010000000000200000000000800000000000000000000000070000008644000000010209035f324c28c49c060d1fb86a222e843f350e78220106e2f8c7dd0010d67ebe5f23e3beb4a838ad8a3591031271cf62739cf83fe00d9077013c4caa8444149170000007ff0000000700000a2300000002441408c1e000000100010000ac1414bbfffffff80100"/256], 0x100}, 0x804) close(0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) close(0x3) recvmsg$unix(r6, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) write$cgroup_int(r5, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat$cgroup(r4, &(0x7f0000000340)='syz1\x00', 0x200002, 0x0) ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x2, 0x80, 0xc5, 0xb, 0xdf, 0x0, 0x0, 0x7fffffffffffffff, 0x4086d, 0x5, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x0, 0xa2f}, 0x2, 0x207fa, 0x9, 0x9, 0x82, 0x0, 0x6, 0x0, 0x6, 0x0, 0x100}, r8, 0xa, r0, 0xa) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000300)=r9) 35m49.462108922s ago: executing program 2 (id=5905): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0xf, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf00}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 35m49.216258212s ago: executing program 2 (id=5909): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r2 = openat$cgroup_freezer_state(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_freezer_state(r2, &(0x7f0000000140)='FROZEN\x00', 0x7) mkdir(0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000800)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x6}, 0xffffffffffffffff, 0x0, r4, 0x0) r5 = openat$cgroup_procs(r3, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000005c0), 0x12) r6 = openat$cgroup_ro(r3, 0x0, 0x275a, 0x0) write$cgroup_int(r6, 0x0, 0x0) r7 = socket$kcm(0x10, 0x400000002, 0x0) r8 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') ioctl$TUNGETVNETHDRSZ(r8, 0xb701, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000005b80)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1}, 0x0) write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000430033b29396ee35e0e5c50002", @ANYRES32, @ANYRES8=r7], 0xfe33) r9 = openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) write$cgroup_freezer_state(r9, &(0x7f00000000c0)='THAWED\x00', 0x7) 35m33.99322926s ago: executing program 32 (id=5909): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r2 = openat$cgroup_freezer_state(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_freezer_state(r2, &(0x7f0000000140)='FROZEN\x00', 0x7) mkdir(0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000800)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x6}, 0xffffffffffffffff, 0x0, r4, 0x0) r5 = openat$cgroup_procs(r3, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000005c0), 0x12) r6 = openat$cgroup_ro(r3, 0x0, 0x275a, 0x0) write$cgroup_int(r6, 0x0, 0x0) r7 = socket$kcm(0x10, 0x400000002, 0x0) r8 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') ioctl$TUNGETVNETHDRSZ(r8, 0xb701, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000005b80)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1}, 0x0) write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000430033b29396ee35e0e5c50002", @ANYRES32, @ANYRES8=r7], 0xfe33) r9 = openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) write$cgroup_freezer_state(r9, &(0x7f00000000c0)='THAWED\x00', 0x7) 3m3.730159204s ago: executing program 1 (id=15909): r0 = socket$kcm(0x1e, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x11, 0x4, 0x4, 0x9}, 0x50) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_ext={0x1c, 0x6, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0xb1}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffff8}]}, &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x16, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x2, 0x2}, 0x8, 0x10, &(0x7f00000001c0)={0x2, 0x5, 0x80000001, 0xf795}, 0x10, 0x2b838, 0xffffffffffffffff, 0x7, &(0x7f0000000200)=[0x1, r1, r1, r1, r1, r1, r1, 0x1], &(0x7f0000000240)=[{0x1, 0x3, 0xd, 0xc}, {0x0, 0x5, 0xe, 0xb}, {0x2, 0x3, 0x2, 0x4}, {0x1, 0x2, 0xd}, {0x1, 0x3, 0x1, 0x5}, {0x2, 0x1, 0x8, 0x8}, {0x0, 0x5, 0x4, 0x5}], 0x10, 0x7f}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r2, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000380)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, &(0x7f00000003c0)=[0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x66, &(0x7f0000000440)=[{}, {}], 0x10, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0xc9, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r1, 0x58, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000002000000040000000100000000000000", @ANYRES32=r1, @ANYBLOB='\x00'/20, @ANYRES32=r3, @ANYRES32, @ANYBLOB="0000000000d3893699708f671a640400"/28], 0x50) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000001540)=@ll={0x11, 0x15, r3, 0x1, 0x6, 0x6, @local}, 0x80, 0x0}, 0x0) (async) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f95324fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 3m3.519708776s ago: executing program 1 (id=15911): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000005700)=""/4097, 0x1001}, {&(0x7f0000004580)=""/4081, 0xff1}, {&(0x7f0000003540)=""/4125, 0x101d}, {&(0x7f0000000280)=""/115, 0x73}, {&(0x7f0000000a80)=""/179, 0xb3}, {&(0x7f0000000840)=""/197, 0xc5}, {&(0x7f0000000500)=""/176, 0xb0}], 0x7}, 0x10100) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b9040a1d080220000000051296a1180002000000000000000e1208000f0100810401a8001600200001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="0bf600004e"], 0xfe33) r2 = gettid() r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x3, 0xc2bb, 0x0, 0x4000000, 0x0, 0xb9}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0x20, &(0x7f0000000380)={&(0x7f0000000780)=""/186, 0xba, 0x0, &(0x7f0000000940)=""/171, 0xab}}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad94ed406f21caf5adcf920569c00cc1199684fa75814709fea019af247c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c7160ec83070000020000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafedcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd89346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12282ce24463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f09000000000000004fc4bda3453602004535a976eacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a191852c9ae031db044b2353199546609f9f69a6cfefdf879d447df53f3b9b70d10355b00300000000000000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f58fab987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45b418a18217747ae442e31560e5b741445ea2a1acee2a81425ff000000d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51423b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f88735fce5115dc83ed73d8ee4a91322608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf5000000000000fa08ad0631c4b839688b22c4da2a6bc4cf45854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296bb2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692ba74b531b65c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652decbe579b03ed84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf5392882df78b0983e662dc0cb64b77f3f006b6b25443197ae93f0be6de5a703d003f00720943c0e4b33af00000000000000000021a688b2d7007fcc4b59f719afb0b3b7e0aee306ca70fe42bf4984a68f40e1fc043a03a17e4744359b87dc27c82d51cbeb64e52a28daeb6a78d6fe06181ecc840000"], &(0x7f0000000000)='GPL\x00', 0x5, 0xcd, &(0x7f0000000400)=""/205, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r4}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5) r6 = socket$kcm(0x2, 0x5, 0x84) socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r6, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)="5c00000014006b03000000d86e6c1d00028440fcffff564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4) recvmsg$kcm(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f00000022c0)=""/4096, 0x1000}], 0x2}, 0x20) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) sendmsg$inet(r9, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x21, &(0x7f0000000040), 0x4) recvmsg(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) close(r9) 3m2.738633473s ago: executing program 1 (id=15919): r0 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x208, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, 0x0, 0x5}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x1d3, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0xec, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000540)=0xffffffffffffffff, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r1, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000b80)=[0x0, 0x0], 0x0, 0x90, &(0x7f00000006c0), 0x0, 0x10, &(0x7f0000000700), 0x0, 0x0, 0x93, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000900)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x800, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x50) r7 = socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020031000b05d25a806f8c6394f90524fc602f0009000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000009c0)=@generic={&(0x7f0000000980)='./file0\x00', 0x0, 0x10}, 0x18) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0xc, 0x5, &(0x7f00000000c0)=@raw=[@btf_id={0x18, 0xb, 0x3, 0x0, 0x2}, @generic={0x4, 0x4, 0x1, 0xffff, 0xff}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x1}], &(0x7f0000000100)='GPL\x00', 0x7, 0x2c, &(0x7f00000001c0)=""/44, 0x0, 0x8, '\x00', r3, @fallback=0x24, r4, 0x8, &(0x7f0000000580)={0x4, 0x4}, 0x8, 0x10, &(0x7f00000005c0)={0x0, 0xb, 0x9, 0x400}, 0x10, r5, r2, 0x1, &(0x7f0000000a00)=[r6, r8, r9, 0xffffffffffffffff], &(0x7f0000000a40)=[{0x4, 0x4, 0x3, 0x5}]}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0xb5b3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x4}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="1b0000004a000000ce8d00000900000000100000", @ANYRES32, @ANYBLOB="0500"/20, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="052c1d1963a5b74ddec1000100"/42], 0x50) r10 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r11, 0x27, 0xe, 0x0, &(0x7f0000000240)="f8ad48cc02cb29dcc8007f5b88a8", 0x0, 0x3, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="02000000040000000800", @ANYRES32, @ANYBLOB="00ffffff0000e3ffffff00eac96d27885004fd00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000040000000200"/28], 0x50) r13 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r14, r13, 0x26}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x4}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}]}, &(0x7f0000000180)='syzkaller\x00', 0x7, 0x66, &(0x7f00000001c0)=""/102, 0xdd32ea07ac804f0c, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000580)={0x1, 0xc, 0x6, 0x400}, 0x10, r5, r1, 0x0, &(0x7f0000000780)=[0xffffffffffffffff, r10, r12, r0, r14], &(0x7f00000007c0), 0x10, 0x4b}, 0x94) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803003a000b12d25a80648c2594f90124fc60100c034002560100053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 3m2.161784907s ago: executing program 1 (id=15921): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x6, &(0x7f0000000040), 0x3) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0}, 0x10208, 0x0, 0x4, 0x9, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x4, 0x7fe2, 0x2}, 0x48) socket$kcm(0x2, 0x5, 0x84) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x0, 0x17, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, 0x0) sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000500)="d800000018008111e00212ba0d8105040a020000030f000b067c55a1bc000900b8000699030000000500160002008178a8001500070001400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ec3350568b31937cbdce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d839da9ee307f27260e97030000000000000000000000003341000000", 0xd8}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="180000003a000517d25a80648c63940d0324fc600b000000", 0x18}], 0x1, 0x0, 0x0, 0x6c000000}, 0x0) 3m1.651971174s ago: executing program 1 (id=15924): socket$kcm(0xa, 0x2, 0x88) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000007c0)="d80000004a0081064e007c05e8fe55a10a000404018b2d5ed48e9a4002020a600e41b0000900ac00060311000000160015000a87572a6ea28959b561c1d67f6f94007125cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370ed7dbe56192bb940450a721eabe30259703920723f9000000008af26c8b7b55f4", 0xd8}], 0x1}, 0x0) 3m1.477132182s ago: executing program 1 (id=15926): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1b) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x7, 0x22004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0a000000030000000700000006"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0x25) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000380)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[@ANYBLOB='N-N:N/NN'], 0x6a) syz_clone(0x4080b000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x50205100, 0x0, 0x0, 0x0, 0x0, 0x0) 2m46.242052553s ago: executing program 33 (id=15926): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1b) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x7, 0x22004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0a000000030000000700000006"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0x25) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000380)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[@ANYBLOB='N-N:N/NN'], 0x6a) syz_clone(0x4080b000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x50205100, 0x0, 0x0, 0x0, 0x0, 0x0) 13.934789701s ago: executing program 6 (id=16740): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0, 0x4}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open$cgroup(&(0x7f00000000c0)={0x3, 0x80, 0x0, 0x8, 0x1, 0x1, 0x0, 0xf1c, 0x10080, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x43, 0x4, @perf_config_ext={0xb7d, 0xfffffffffffffffc}, 0x100408, 0xfff, 0x7fffffff, 0x2, 0x3, 0xffffffff, 0x37, 0x0, 0x7fff, 0x0, 0x100000001}, 0xffffffffffffffff, 0xf, r0, 0x1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4d31, 0x2410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xe70, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, r1, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x8) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f94a24fc60", 0x14}], 0x1}, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300a8, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x13000, 0x1, 0x0, 0x0, 0x0, 0xfffff800, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x21, 0x2, 0xa) setsockopt$sock_attach_bpf(r3, 0x110, 0x2, &(0x7f0000000140), 0x16) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$cgroup_type(r4, 0x0, 0x2, 0x0) write$cgroup_type(r5, &(0x7f0000000280), 0x9) r6 = openat$cgroup_procs(r4, 0x0, 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000c40), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_subtree(r7, &(0x7f0000000140), 0x2, 0x0) syz_clone(0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) close(r8) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r9, r8}, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) 13.416882126s ago: executing program 6 (id=16744): r0 = socket$kcm(0x2b, 0x1, 0x0) close(r0) r1 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r1, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f0000001d00)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], 0x6b}, 0x0) close(r0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000100)="f4000900062b2c25fe80001a00000000dc8b850f23a266ccfec054abb64fc426fa766dd3f77a000000adaef867834388453979727ec63d47d4d09355273b20e7afbbd027", 0x44}], 0x1}, 0x0) 13.139473836s ago: executing program 6 (id=16748): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.numa_stat\x00', 0x26e1, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x15) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd, 0x40000000}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1bff11000000b605e2670b8ae9ebed972c00", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000fcffffff0000000080000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb00001400a39020", 0xfeec}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0x14, &(0x7f0000000000), 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x22, &(0x7f0000000280), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff0000000071100200000000009500000000000000"], &(0x7f0000000480)='GPL\x00'}, 0x80) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x0, '\x00', 0x0, r0, 0x0, 0x0, 0x1}, 0xfffffea1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000100007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r5, @ANYBLOB="0000000002000000b705000008000000850000005d00000095", @ANYRES16], &(0x7f0000000300)='GPL\x00', 0x2, 0x1002, &(0x7f0000002500)=""/4106, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffdf8, 0x10, 0x0, 0x34, 0x0, 0x0, 0xfffffffffffffe65}, 0x23) 12.78066182s ago: executing program 6 (id=16749): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='-0'], 0x9) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x51801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x204, 0x2, 0x0, 0x10000, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x0, 0x1, 0x0, 0x81, 0x0, 0x5ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000008, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x2, 0x0, 0x68d1}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000080)=@nfc_llcp={0x27, 0x0, 0x0, 0x6, 0xf, 0x7f, "f1ab934fde68447f01504ebf6eb72c22a935aea0704e63e9eebe922ea91d7c981292689631939bda089a7cd51c67cf88c8c676b5202b9762d8ab09c5391a6b", 0x1e}, 0x80, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="2800000e0000e4ff290000003292e46cf558a111c59f5a2aab8fc25c5ef763e1aec7c402109ba8c2f3809c008b491668e4b4cf8cc845f93921b5a1a575215e25970fad153daa4ed47cb300"/84], 0x28}, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={&(0x7f0000000800)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x101000, 0x7, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) close(0xffffffffffffffff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40042409, 0x0) r4 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000000)=@phonet={0x23, 0x0, 0xfc}, 0x80, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000080)="9b", 0x1}], 0x2}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000080)=@in6={0xa, 0x4e20, 0x0, @private0}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000000000002900000032000000977b3d2f56cfdf8bb5f2ac6dd52d09ebcb000000000000"], 0x28}, 0x0) mkdir(0x0, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(r5, &(0x7f0000000700)='notify_on_release\x00', 0x2, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000680)=@base={0xa, 0x16, 0xb4, 0x3}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@fallback=r5, 0x8, 0x0, 0x728b83fa, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)=[0x0]}, 0x40) bpf$ITER_CREATE(0x21, &(0x7f0000000400), 0x8) sendmsg$sock(r2, 0x0, 0x4000081) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) 11.438756605s ago: executing program 6 (id=16754): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="89000000120081ae08060cdc033156007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e281ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014006040400060404009bbc7a46e3988285dcdf12f213e6f768fec601955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 10.753295419s ago: executing program 6 (id=16757): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x25, 0x5, 0x0) recvmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x40002020) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r3) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f00000009c0)=ANY=[@ANYBLOB="180200007a0000000000000000000000850000008700000085000000a000000095", @ANYBLOB="b1e684b1bce77037cb91c50ed6f85c49b31ccf55178bdaba9835eb3dbcfa3bc14a2aa366322f3da4c37c2181df0fe054baeb64cab2274574486ee17a2cf168a0203c2238b60487e74d220d5e89451d38d2e97e27013a737df4a512d064cd5a6bc6fdec3dd88daa11790010e542c3ea34fec1274925ed45177ce7ed76bcfbdbe3da97329ec28615f939b137e2a29f42b1df7434915f5f265ea28fe5ba4132189f1cbb9ffea9e961a4fee65394c6de902483e42189b6c2e9ca7ae52a6185f113f824a138968a580000000000000000", @ANYRES8=r1], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) r6 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r6, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000340)}, 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f0000000500)={0x0, r5}, 0x8) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x3, &(0x7f0000000340)=ANY=[@ANYRESOCT=r5], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r7, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r8, &(0x7f0000000780)}, 0x20) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10c00, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={r0}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000186df4b1768c36153d42", @ANYRES32, @ANYBLOB="1c00000000000300000000000000010045"], 0x0}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x89f1, &(0x7f0000000080)) sendmsg$inet(r9, &(0x7f0000000700)={&(0x7f0000000080)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000000680)=[{&(0x7f00000001c0)="8521adb28608e5e43af71e79045ff55bc2868427025ae09a0828de9b315a69518b870f01bfc177e1ad19cd9d881504e70dc3ddf926b22d4ad35b08fd512cc3e913009f7b974b35df78802c25d5af596d1cb4b9dbccbd0a1be3622f4b749a08062a73b11006f7fbc804d6e4d7d8c15d0df5e5762a29e5dde612e6d3da0049c78b18074d7f47519a9fcb988ec417b536694c841d8c0efd359b4c911b91fda580aedb21a24b3cf4b6615f0b845d1c86ca6cc32f6329db4b7be224cdf57288a7eb98c93003f75413cf1c8893e7d6c987d725226bde77a17fd4e1c3cf4cd34c2e9e220e5fe2c042e66b0083dd58131d586e37937783452f6b", 0xf6}, {&(0x7f00000000c0)="22bc8f469d4cd234aac396e12e24e4645605ab52f3da74aab924e3342d7e1f7d2e894c1cde334a6df86aef12401ce6c3875e35d5e099137e02eeae67e8c337db5586bdb279f21967b4a90c90fd016da4f7cc3ff10b", 0x55}, {&(0x7f0000000440)="7153fb9bdc76f2319cd41c43971a05878869f5c74191953c64728262ce86c2389e9a75b05a50a5295a180fb5bc71b02229f6", 0x32}, {&(0x7f0000000540)="b13d61505dd22857f2198d4889b184c86c3f0307e1ba28d0d1ec", 0x1a}, {0x0}], 0x5}, 0x20000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) 4.564899947s ago: executing program 0 (id=16780): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x26, 0x2, [@array={0x0, 0x0, 0x0, 0x4, 0x3000000, {0x0, 0x6000000, 0x4}}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x2}]}}, 0xffffffffffffffff, 0x3e, 0xb1, 0x2}, 0x20) 4.407563498s ago: executing program 4 (id=16783): r0 = socket$kcm(0x2b, 0x1, 0x0) close(r0) r1 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r1, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d574256ef7f75552ff087a819e", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f0000001d00)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="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"], 0x6b}, 0x0) close(r0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000100)="f4000900062b2c25fe80001a00000000dc8b850f23a266ccfec054abb64fc426fa766dd3f77a000000adaef867834388453979727ec63d47d4d09355273b20e7afbbd027", 0x44}], 0x1}, 0x0) 4.227163895s ago: executing program 0 (id=16784): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.numa_stat\x00', 0x26e1, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x15) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd, 0x40000000}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1bff11000000b605e2670b8ae9ebed972c00", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000fcffffff0000000080000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb00001400a39020", 0xfeec}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x11, 0x2, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) setsockopt$sock_attach_bpf(r4, 0x1, 0x22, &(0x7f0000000280), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff0000000071100200000000009500000000000000"], &(0x7f0000000480)='GPL\x00'}, 0x80) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x0, '\x00', 0x0, r0, 0x0, 0x0, 0x1}, 0xfffffea1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000100007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r5, @ANYBLOB="0000000002000000b705000008000000850000005d00000095", @ANYRES16], &(0x7f0000000300)='GPL\x00', 0x2, 0x1002, &(0x7f0000002500)=""/4106, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffdf8, 0x10, 0x0, 0x34, 0x0, 0x0, 0xfffffffffffffe65}, 0x23) 4.15064663s ago: executing program 4 (id=16786): socket$kcm(0x23, 0x2, 0x0) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21428, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x8, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) socket$kcm(0x10, 0x2, 0x0) (rerun: 32) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000040), 0x4) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0x58, &(0x7f0000000440)}, 0x10) (async, rerun: 64) r0 = socket$kcm(0x2, 0x5, 0x84) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x82, &(0x7f0000000000)=r2, 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000061144c0000009500080000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[], 0x50) (async, rerun: 64) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e00000000000000fc00400009"], 0x50) (rerun: 64) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102032900fefd000e40000200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001140)={r3, 0xe0, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000e80)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, &(0x7f0000000ec0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000f00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x19, &(0x7f0000000f40)=[{}], 0x8, 0x10, &(0x7f0000000f80), &(0x7f0000000fc0), 0x8, 0xe9, 0x8, 0x8, &(0x7f0000001000)}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000011c0)=@bpf_lsm={0x1d, 0x2c, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000004000000000000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000c1c69b574aa8ddf2000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000009500000000000000b7080000000000007b8af8ff00000000b7080000070000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000018140000", @ANYRES32=r5, @ANYBLOB="000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200000000000085000000860000007891000017000000182b0000", @ANYRES32=r4, @ANYBLOB="00000000100000001848000001000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f00000009c0)='syzkaller\x00', 0x5, 0x3c, &(0x7f0000000d80)=""/60, 0x41000, 0x1, '\x00', 0x0, 0x1b, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r7, 0x0, 0x4, 0x0, &(0x7f0000001180)=[{0x5, 0x2, 0xa, 0xc}, {0x5, 0x4, 0x9, 0x3}, {0x2, 0x3, 0xb, 0x6}, {0x3, 0x3, 0x9, 0x6}]}, 0x94) r8 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r8, &(0x7f00000000c0)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10, 0x0}, 0x3000c085) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x23, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) r9 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r9, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) (async) close(0x4) 3.834502493s ago: executing program 0 (id=16789): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b9040a1d080220000000051296a1180002000000000000000e1208000f0100810401a8001600200001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="0bf600004e"], 0xfe33) r1 = gettid() perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x3, 0xc2bb, 0x0, 0x4000000, 0x0, 0xb9}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0x20, &(0x7f0000000380)={&(0x7f0000000780)=""/186, 0xba, 0x0, &(0x7f0000000940)=""/171, 0xab}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xcd, &(0x7f0000000400)=""/205, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2}, 0x94) r3 = socket$kcm(0x2, 0x5, 0x84) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000007f030010000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad01409bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33", 0x79}, {&(0x7f0000000000)="24e84b13d10b8197015df07dcf473260", 0x10}], 0x2}, 0x0) sendmsg$inet(r3, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)="5c00000014006b03000000d86e6c1d00028440fcffff564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4) recvmsg$kcm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f00000022c0)=""/4096, 0x1000}], 0x2}, 0x20) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040018}, 0x4040800) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={0xffffffffffffffff, 0x0, &(0x7f0000001300)=""/112}, 0x20) 3.571652385s ago: executing program 4 (id=16791): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000000000000850000007300000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080207000000040000a118000200e000000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x6, 0x4, 0x599, 0xa, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x0, &(0x7f0000000480), 0x0, 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa2}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'vxcan1\x00', @remote}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r6 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/189, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2e}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0, 0x20000000}, 0x200000c0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f375ffff86dd6317ce62070000000000000000431ccaf57b00000000000000000104"], 0xfe1b) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.390331331s ago: executing program 5 (id=16792): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0xa, 0x0, 0x5d31, 0x40000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffffffff, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1000001000, 0xb}, 0x0, 0xe, 0xffffffffffffffff, 0x0) 3.300433105s ago: executing program 3 (id=16793): r0 = perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x9, 0x4, 0x80, 0x9, 0x0, 0x33000000000000, 0x22ce0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_bp={&(0x7f00000000c0), 0x2}, 0x1004, 0x2, 0x80000001, 0x8, 0x64c, 0x6, 0x81, 0x0, 0x80}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa}, 0x10c002, 0xac5d}, 0x0, 0xfffffffffffffffe, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x1}, 0x2420, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r1, &(0x7f0000000080)='syz1\x00', 0x1ff) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d0002117ea6e070d6065e22000300000000250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 2.951564941s ago: executing program 5 (id=16794): write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000340), 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4000000}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={r4, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000640)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xb, &(0x7f0000000700)=[{}], 0x8, 0x10, &(0x7f0000000840), &(0x7f0000000880), 0x8, 0x4c, 0x8, 0x8, &(0x7f00000008c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x2000000000000063, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000fc07ffff0000000000000000850000004100000085000000070000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r5, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0x20, &(0x7f0000000440)={&(0x7f0000000500)=""/219, 0xdb, 0x0, &(0x7f0000001180)=""/4096, 0x1000}}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="050000000500000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r2, 0xffffffffffffffff}, 0x4) r9 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x10021, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4d, 0xe67}, 0x0, 0x0, 0x3, 0x5, 0xa17c, 0x40ff, 0x3, 0x0, 0x4, 0x0, 0x80}, 0x0, 0x2, 0xffffffffffffffff, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000300009116144f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d006a10000000e8fe55a1180015000600142603600e1209000a0044000000a80016000a", 0x35}], 0x1}, 0x800) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[], 0x33fe0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r11}, 0xc) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000680)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xb, 0xf, &(0x7f0000000040)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x3}], &(0x7f00000000c0)='syzkaller\x00', 0x152d8000, 0x3c, &(0x7f0000000100)=""/60, 0x40f00, 0x11, '\x00', r5, @fallback=0xa, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0x0, 0x3, 0x3}, 0x10, r6, r1, 0x0, &(0x7f0000000700)=[r7, r8, r12], 0x0, 0x10, 0xc}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r7}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', r5, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x2, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) 2.642505114s ago: executing program 0 (id=16795): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2000, 0x0, 0x0, 0x1, 0x40000, 0x0, 0xffff}, 0x0, 0x200, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xf6, 0x0, 0x8, 0x0, 0x0, 0x100000007f, 0x442, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x2000, 0x1000000200, 0x4, 0x1, 0x0, 0x400000a, 0x400, 0x0, 0x5, 0x0, 0x63}, 0x0, 0x1, r0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x23, &(0x7f0000000040), 0xcf) sendmsg$kcm(r1, &(0x7f0000001240)={&(0x7f0000000a00)=@in6={0xa, 0x4e23, 0xe, @empty, 0x7}, 0x80, 0x0, 0x0, 0x0, 0x0, 0xffffff97}, 0x0) 2.616211669s ago: executing program 3 (id=16796): r0 = socket$kcm(0x2b, 0x1, 0x0) close(r0) r1 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r1, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f0000001d00)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="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"], 0x6b}, 0x0) close(r0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000100)="f4000900062b2c25fe80001a00000000dc8b850f23a266ccfec054abb64fc426fa766dd3f77a000000adaef867834388453979727ec63d47d4d09355273b20e7afbbd027", 0x44}], 0x1}, 0x0) 2.491642287s ago: executing program 4 (id=16797): r0 = socket$kcm(0x10, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000005700)=""/4097, 0x1001}, {&(0x7f0000004580)=""/4081, 0xff1}, {&(0x7f0000003540)=""/4125, 0x101d}, {&(0x7f00000005c0)=""/120, 0x78}, {&(0x7f0000000a80)=""/162, 0xa8}, {&(0x7f0000000840)=""/197, 0xc5}, {&(0x7f0000000500)=""/176, 0xb0}], 0xffffffffffffebd}, 0x40010100) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f00000001c0)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r3, 0x18000000000002a0, 0x4f, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020786c250000000000202020db1af8ff51000000bda10000000000000000000008ffffffb702000008000000b70300000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000d00)=""/242, 0xf2}, {&(0x7f0000000640)=""/214, 0xd6}, {&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f0000000940)=""/199, 0xc7}, {&(0x7f0000000240)=""/235, 0xeb}, {&(0x7f0000002100)=""/4066, 0xfe2}, {&(0x7f00000007c0)=""/196, 0xc4}, {&(0x7f0000000480)=""/176, 0xb0}], 0x8}, 0x0) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) 2.295670881s ago: executing program 0 (id=16798): socketpair(0x28, 0x2, 0x28, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x5, 0x0, 0x7, 0x2, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x14690, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xb3b, 0xffffffffffbffff8}, 0x842, 0x0, 0x6, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001ec0)=ANY=[@ANYBLOB="13120000120091ef04e9befbbd00005c0a"], 0xfe33) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000008c0)=""/132, 0x84}, {&(0x7f00000003c0)=""/91, 0x5b}, {&(0x7f0000000600)=""/110, 0x6e}, {&(0x7f0000000680)=""/82, 0x52}], 0x4}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x36, 0x0, 0x4e}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000103000000000000000000000085000000c70000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x14090, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xb3b, 0xfffffffffffffff8}, 0x840, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x5) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xa0004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000002540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r2 = socket$kcm(0x21, 0x2, 0x2) r3 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r3, &(0x7f0000000380)={&(0x7f0000000800)=@in6={0xa, 0xffff, 0x0, @mcast2, 0x9}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000001c0)="fa755bf52faa4da279011d93c6b045b73ff940f137f54ec60939802db602e4c907c5982c0b19eda947a3bc6bfb868990be6ecf1cf217071948235a18b3ce881c1ebb493768e89a6f5562a715ac54ffd1503b6dd5a7d1caff7ec0938e5f8f8173f8dbf18388716c67b98d509fd74ff29a9162457b2d18c1c037", 0x79}], 0x1, 0x0, 0x0, 0x900}, 0x44000040) sendmsg$kcm(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0xfffe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x17, 0x6, &(0x7f0000000700)=ANY=[@ANYBLOB="05000000000000ff7111020000000000851000000200000085000005000000009500330020000004950096050000000003b153c053edce38081592ad086ff78cbfad02b2bef28f23b7c0f031389311d348f45718f7c594bfac76ad47a39e658464f88be9"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa4}, 0x70) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101}) 2.263310095s ago: executing program 5 (id=16799): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.numa_stat\x00', 0x26e1, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x15) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd, 0x40000000}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1bff11000000b605e2670b8ae9ebed972c00", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000fcffffff0000000080000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb00001400a39020", 0xfeec}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x11, 0x2, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) setsockopt$sock_attach_bpf(r4, 0x1, 0x22, &(0x7f0000000280), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff0000000071100200000000009500000000000000"], &(0x7f0000000480)='GPL\x00'}, 0x80) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x0, '\x00', 0x0, r0, 0x0, 0x0, 0x1}, 0xfffffea1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000100007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r5, @ANYBLOB="0000000002000000b705000008000000850000005d00000095", @ANYRES16], &(0x7f0000000300)='GPL\x00', 0x2, 0x1002, &(0x7f0000002500)=""/4106, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffdf8, 0x10, 0x0, 0x34, 0x0, 0x0, 0xfffffffffffffe65}, 0x23) 2.262635595s ago: executing program 3 (id=16800): recvmsg$unix(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x101c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], &(0x7f0000000840)=""/262, 0x37, 0x106, 0x1}, 0x20) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000004440)=@base={0x14, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x2, 0x1, 0x0, 0x80000}, 0x48) 2.011879839s ago: executing program 3 (id=16801): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0x400c78, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) close(0xffffffffffffffff) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35f022eb"], 0xcfa4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1e, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x24}, 0x94) (async) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r1 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r1, 0x1, 0x24, &(0x7f0000000000), 0x4) (async) socket$kcm(0x21, 0x2, 0x2) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) close(0xffffffffffffffff) (async, rerun: 64) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[], 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x67, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r4, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.885709016s ago: executing program 5 (id=16802): socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x4) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r0, 0x2000012, 0xdc0, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b9", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRESOCT, @ANYRES64=0x0, @ANYRESOCT=r1, @ANYRESOCT=0x0], 0x48) recvmsg$unix(0xffffffffffffffff, 0x0, 0x1c0) close(0x3) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001800)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0xfd) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x6, 0xf, 0x8, 0x41}, 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000007c0)=ANY=[@ANYRES32], 0x20) 1.74584371s ago: executing program 4 (id=16803): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21bef5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a835701bea8240399c56ce8f58df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.memory_pressure\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x161) sendmsg$inet(r3, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000000)='}', 0x1}], 0x1}, 0xfffe) 1.683829119s ago: executing program 5 (id=16804): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x1}, 0x1080, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x29, 0x5, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x16, 0x13, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000400000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000020000008500000086000000bf91000000000000b70200000100000085000000c6000000b70004000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000400)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200ff11000000000e1208000f0100810401a80016ea1f0008400304000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee40021146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4000000) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000006c0)=0x8) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x1c, &(0x7f0000000300)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9, 0xfff3}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r4}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x11, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x400}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@generic={0x6, 0x3, 0xd, 0x3}, @call={0x85, 0x0, 0x0, 0xd}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x59, &(0x7f00000002c0)=""/89, 0x41100, 0x49, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x5, 0xa, 0xd, 0x7ff}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000540)=[r2, r2, r2, r2, r2, r2], &(0x7f0000000580)=[{0x3, 0x4, 0xb, 0x4}], 0x10, 0x6}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r6) r7 = socket$kcm(0x15, 0x5, 0x0) sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000100)=@l2tp={0xa, 0x0, @private, 0xc0fe}, 0x80, 0x0}, 0x4000040) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d8000000180081054e81f782db4cb904021d0800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370401a8001600200001401c00010003580461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dcdf63951f215c3b8b6ad2cba0e2375ee535e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6f4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) 1.623729868s ago: executing program 3 (id=16805): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b9040a1d080220000000051296a1180002000000000000000e1208000f0100810401a8001600200001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="0bf600004e"], 0xfe33) r1 = gettid() perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x3, 0xc2bb, 0x0, 0x4000000, 0x0, 0xb9}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0x20, &(0x7f0000000380)={&(0x7f0000000780)=""/186, 0xba, 0x0, &(0x7f0000000940)=""/171, 0xab}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xcd, &(0x7f0000000400)=""/205, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2}, 0x94) r3 = socket$kcm(0x2, 0x5, 0x84) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000007f030010000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad01409bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33", 0x79}, {&(0x7f0000000000)="24e84b13d10b8197015df07dcf473260", 0x10}], 0x2}, 0x0) sendmsg$inet(r3, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)="5c00000014006b03000000d86e6c1d00028440fcffff564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4) recvmsg$kcm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f00000022c0)=""/4096, 0x1000}], 0x2}, 0x20) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040018}, 0x4040800) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={0xffffffffffffffff, 0x0, &(0x7f0000001300)=""/112}, 0x20) 1.491016753s ago: executing program 0 (id=16806): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r4}, &(0x7f0000000000), &(0x7f00000005c0)=r5}, 0x20) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r6 = socket$kcm(0x2, 0x200000000000001, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[@ANYRES16=r1, @ANYRES32=0x1, @ANYBLOB="80000000000200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000050000000400"/28], 0x50) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) socket$kcm(0x2, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000001580)=ANY=[@ANYBLOB], 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x5, 0x0, 0x0, 0x42810, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x40}, 0x10c002, 0xac5d, 0x0, 0x0, 0x6, 0x0, 0x401, 0x0, 0x80}, 0x0, 0x5, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000e1ff00000000000000008500000053000000850000002300000095", @ANYRES32], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f0000000640)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f0000000100)=r7, 0x4) syz_clone(0x630c0700, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0x2ee0}], 0x13, 0x0, 0x0, 0x10000000}, 0x12cd) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8921, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00l \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'vxcan1\x00', @remote}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r6 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1190e95fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f540df0099bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a202304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f949c479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee610be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3e12933410b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485f6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2e12ad99012a2e01ce79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd729fda6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f13dff7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe50151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa332482e6137e994d3f5259b7f51544cdc6d8cb4becc20dd3a57545b0c2621e4c5f94a23f73ee02c22ee7e27c2cc491a85947baac523c347c9b9ede5d6265997f2ad6e9719aafdb323988e62b7ec84545cd63b7a7"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/189, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2e}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0, 0x20000000}, 0x200000c0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f375ffff86dd6317ce62070000000000000000431ccaf57b00000000000000000104"], 0xfe1b) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.19959363s ago: executing program 5 (id=16808): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x8dc, 0x4, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r1, 0x2000012, 0x100e, 0x2, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r2 = socket$kcm(0x1e, 0x5, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe6, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc29a, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id, 0x80, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x8}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @sched_cls, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x1}, 0x8) 0s ago: executing program 3 (id=16809): socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x2, 0x1000000000000002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x240000, 0x4, @perf_bp={0x0}, 0x688, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x311b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="050000000f0000000800000040000000c0000000", @ANYRES32=0x1, @ANYBLOB="06f9ffffffedff00000000000300000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000080), 0x1003, r0}, 0x38) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup(r1, 0x0, 0x200002, 0x0) openat$cgroup(r2, 0x0, 0x200002, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x202, 0xac5d, 0x0, 0x7, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) recvmsg$unix(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0xfffffffffffffec9, &(0x7f0000000500)=[{&(0x7f0000000740)="d800000019008111e0020f060d8107040a60000000000000001e55a12a00090008000699e3ffffff14000500fe80817806000567b8b7b94002000009080016060000000000000000d67f6f9400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237e09000000b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b7b4338c9f1ac76efb42a9ecbee5de6ccd44242f4d643f6fd0f26187b51980dd6", 0xd8}], 0x1}, 0x4090) kernel console output (not intermixed with test programs): process `syz.5.15796'. [ 3260.682721][T24424] netlink: 'syz.5.15796': attribute type 13 has an invalid length. [ 3260.713863][T24424] netlink: 24859 bytes leftover after parsing attributes in process `syz.5.15796'. [ 3260.718004][T24437] netlink: 132 bytes leftover after parsing attributes in process `syz.0.15802'. [ 3260.734262][T24424] netlink: 24859 bytes leftover after parsing attributes in process `syz.5.15796'. [ 3261.553211][T24454] delete_channel: no stack [ 3262.218294][T24481] FAULT_INJECTION: forcing a failure. [ 3262.218294][T24481] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3262.263134][T24481] CPU: 1 PID: 24481 Comm: syz.5.15819 Not tainted syzkaller #0 [ 3262.265557][T24478] device syzkaller0 entered promiscuous mode [ 3262.271172][T24481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 3262.271194][T24481] Call Trace: [ 3262.271207][T24481] [ 3262.271222][T24481] dump_stack_lvl+0x188/0x24e [ 3262.271268][T24481] ? show_regs_print_info+0x12/0x12 [ 3262.271303][T24481] ? load_image+0x400/0x400 [ 3262.271350][T24481] ? __lock_acquire+0x7d10/0x7d10 [ 3262.271404][T24481] should_fail_ex+0x399/0x4d0 [ 3262.271457][T24481] _copy_from_user+0x2c/0x170 [ 3262.322870][T24481] iovec_from_user+0x143/0x360 [ 3262.327806][T24481] __import_iovec+0x6d/0x500 [ 3262.332486][T24481] import_iovec+0x6f/0xa0 [ 3262.336881][T24481] ___sys_sendmsg+0x252/0x360 [ 3262.341643][T24481] ? __sys_sendmsg+0x290/0x290 [ 3262.346542][T24481] ? __lock_acquire+0x7d10/0x7d10 [ 3262.351725][T24481] __se_sys_sendmsg+0x1bb/0x2a0 [ 3262.356655][T24481] ? __x64_sys_sendmsg+0x80/0x80 [ 3262.361717][T24481] ? lockdep_hardirqs_on+0x94/0x140 [ 3262.366998][T24481] do_syscall_64+0x4c/0xa0 [ 3262.371556][T24481] ? clear_bhb_loop+0x60/0xb0 [ 3262.376292][T24481] ? clear_bhb_loop+0x60/0xb0 [ 3262.381044][T24481] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3262.387000][T24481] RIP: 0033:0x7f8ad939c799 [ 3262.391467][T24481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3262.411130][T24481] RSP: 002b:00007f8ada2fe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3262.419618][T24481] RAX: ffffffffffffffda RBX: 00007f8ad9615fa0 RCX: 00007f8ad939c799 [ 3262.427652][T24481] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 3262.435849][T24481] RBP: 00007f8ada2fe090 R08: 0000000000000000 R09: 0000000000000000 [ 3262.443865][T24481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3262.451884][T24481] R13: 00007f8ad9616038 R14: 00007f8ad9615fa0 R15: 00007ffe5e3ad638 [ 3262.459980][T24481] [ 3262.807730][T15964] wlan1: Trigger new scan to find an IBSS to join [ 3264.277505][T24494] delete_channel: no stack [ 3265.849569][T15959] wlan1: Trigger new scan to find an IBSS to join [ 3266.240890][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 3266.248247][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 3266.484582][T24487] validate_nla: 34 callbacks suppressed [ 3266.484603][T24487] netlink: 'syz.4.15820': attribute type 2 has an invalid length. [ 3266.498946][T24487] netlink: 'syz.4.15820': attribute type 8 has an invalid length. [ 3266.507291][T24487] __nla_validate_parse: 27 callbacks suppressed [ 3266.507306][T24487] netlink: 132 bytes leftover after parsing attributes in process `syz.4.15820'. [ 3266.524716][T24495] netlink: 'syz.3.15824': attribute type 10 has an invalid length. [ 3266.815346][T24507] netlink: 'syz.4.15830': attribute type 10 has an invalid length. [ 3266.946912][T24504] delete_channel: no stack [ 3267.242160][T24525] device pim6reg1 entered promiscuous mode [ 3267.441124][T24533] netlink: 'syz.0.15839': attribute type 9 has an invalid length. [ 3267.485678][T24533] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.15839'. [ 3267.539800][T24533] netlink: 180900 bytes leftover after parsing attributes in process `syz.0.15839'. [ 3267.575779][T24533] openvswitch: netlink: Flow actions attr not present in new flow. [ 3267.683708][T24536] netlink: 'syz.4.15840': attribute type 2 has an invalid length. [ 3267.702254][T24536] netlink: 'syz.4.15840': attribute type 8 has an invalid length. [ 3267.710846][T24536] netlink: 132 bytes leftover after parsing attributes in process `syz.4.15840'. [ 3268.878875][T15959] wlan1: Trigger new scan to find an IBSS to join [ 3269.241659][T24543] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.15838'. [ 3269.446800][T24543] netlink: 'syz.5.15838': attribute type 10 has an invalid length. [ 3269.553445][T24543] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 3269.825780][T24581] netlink: 'syz.1.15853': attribute type 9 has an invalid length. [ 3269.852102][T24581] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.15853'. [ 3269.904685][T24581] netlink: 180900 bytes leftover after parsing attributes in process `syz.1.15853'. [ 3269.974057][T15960] wlan1: Creating new IBSS network, BSSID f6:e9:05:87:f4:86 [ 3270.021967][T24581] openvswitch: netlink: Flow actions attr not present in new flow. [ 3271.718632][T24624] netlink: 'syz.5.15869': attribute type 9 has an invalid length. [ 3271.745736][T24624] netlink: 126588 bytes leftover after parsing attributes in process `syz.5.15869'. [ 3271.834010][T24624] netlink: 180900 bytes leftover after parsing attributes in process `syz.5.15869'. [ 3271.957893][T24624] openvswitch: netlink: Flow actions attr not present in new flow. [ 3272.465804][T24628] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.15866'. [ 3272.599346][T24640] mac80211_hwsim hwsim360 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 3272.732541][T24623] netlink: 'syz.3.15866': attribute type 10 has an invalid length. [ 3273.046627][T24646] netlink: 'syz.1.15877': attribute type 2 has an invalid length. [ 3273.054966][T24646] netlink: 'syz.1.15877': attribute type 8 has an invalid length. [ 3273.105809][T24646] netlink: 132 bytes leftover after parsing attributes in process `syz.1.15877'. [ 3274.319882][T24673] netlink: 'syz.0.15886': attribute type 9 has an invalid length. [ 3274.328364][T24673] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.15886'. [ 3274.405006][T24673] netlink: 180900 bytes leftover after parsing attributes in process `syz.0.15886'. [ 3274.434402][T24673] openvswitch: netlink: Flow actions attr not present in new flow. [ 3274.765693][T24685] mac80211_hwsim hwsim362 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 3275.684889][T24699] netlink: 'syz.5.15896': attribute type 2 has an invalid length. [ 3275.693877][T24699] netlink: 'syz.5.15896': attribute type 8 has an invalid length. [ 3275.702330][T24699] netlink: 132 bytes leftover after parsing attributes in process `syz.5.15896'. [ 3276.008086][T24692] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.15893'. [ 3276.046338][T24716] netlink: 'syz.0.15893': attribute type 10 has an invalid length. [ 3276.363802][T24726] netlink: 'syz.3.15901': attribute type 9 has an invalid length. [ 3276.531528][T24726] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.15901'. [ 3276.660680][T24726] netlink: 180900 bytes leftover after parsing attributes in process `syz.3.15901'. [ 3276.685979][T24726] openvswitch: netlink: Flow actions attr not present in new flow. [ 3277.072646][T24744] mac80211_hwsim hwsim345 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 3277.084577][T24750] netlink: 'syz.1.15909': attribute type 3 has an invalid length. [ 3277.101337][T24750] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.15909'. [ 3277.231492][T24755] netlink: 'syz.0.15910': attribute type 2 has an invalid length. [ 3277.248549][T24755] netlink: 'syz.0.15910': attribute type 8 has an invalid length. [ 3277.274290][T24755] netlink: 132 bytes leftover after parsing attributes in process `syz.0.15910'. [ 3278.152790][T24781] netlink: 'syz.1.15919': attribute type 9 has an invalid length. [ 3278.224853][T24781] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.15919'. [ 3278.319711][T24781] netlink: 180900 bytes leftover after parsing attributes in process `syz.1.15919'. [ 3278.390127][T24781] openvswitch: netlink: Flow actions attr not present in new flow. [ 3278.555861][ T484] Bluetooth: hci3: command 0x0406 tx timeout [ 3278.805187][T24772] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.15914'. [ 3278.815194][T24791] IPv6: NLM_F_CREATE should be specified when creating new route [ 3278.863838][T24791] netlink: 1 bytes leftover after parsing attributes in process `syz.1.15921'. [ 3278.940168][T24789] netlink: 'syz.4.15914': attribute type 10 has an invalid length. [ 3279.678838][T24812] netlink: 'syz.3.15927': attribute type 10 has an invalid length. [ 3279.846985][T15971] wlan1: Trigger new scan to find an IBSS to join [ 3280.414112][T24823] netlink: 'syz.5.15932': attribute type 9 has an invalid length. [ 3280.422757][T24823] netlink: 126588 bytes leftover after parsing attributes in process `syz.5.15932'. [ 3280.483017][T24823] netlink: 180900 bytes leftover after parsing attributes in process `syz.5.15932'. [ 3280.518367][T24823] openvswitch: netlink: Flow actions attr not present in new flow. [ 3282.957644][T12362] wlan1: Trigger new scan to find an IBSS to join [ 3284.180984][T24852] netlink: 15998 bytes leftover after parsing attributes in process `syz.0.15943'. [ 3284.739461][T24863] netlink: 'syz.5.15946': attribute type 9 has an invalid length. [ 3284.807606][T24863] netlink: 126588 bytes leftover after parsing attributes in process `syz.5.15946'. [ 3284.998871][T24863] netlink: 180900 bytes leftover after parsing attributes in process `syz.5.15946'. [ 3285.127379][T24863] openvswitch: netlink: Flow actions attr not present in new flow. [ 3285.864571][T15964] wlan1: Creating new IBSS network, BSSID 72:4a:02:8d:28:8d [ 3285.982359][T24877] netlink: 'syz.3.15950': attribute type 10 has an invalid length. [ 3286.026766][T24876] delete_channel: no stack [ 3286.519730][T24894] netlink: 'syz.4.15956': attribute type 4 has an invalid length. [ 3286.543565][T24894] netlink: 'syz.4.15956': attribute type 1 has an invalid length. [ 3286.552764][T24894] netlink: 181400 bytes leftover after parsing attributes in process `syz.4.15956'. [ 3287.330692][T24913] netlink: 'syz.0.15962': attribute type 9 has an invalid length. [ 3287.372647][T24913] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.15962'. [ 3287.484957][T24913] netlink: 180900 bytes leftover after parsing attributes in process `syz.0.15962'. [ 3287.552230][T24913] openvswitch: netlink: Flow actions attr not present in new flow. [ 3289.650230][T24938] delete_channel: no stack [ 3289.684655][T24940] netlink: 'syz.5.15970': attribute type 10 has an invalid length. [ 3289.785187][T24953] netlink: 'syz.0.15975': attribute type 9 has an invalid length. [ 3289.866525][T24953] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.15975'. [ 3289.950825][T24954] netlink: 180900 bytes leftover after parsing attributes in process `syz.0.15975'. [ 3290.081414][T24954] openvswitch: netlink: Flow actions attr not present in new flow. [ 3291.124923][T24983] netlink: 'syz.0.15983': attribute type 11 has an invalid length. [ 3291.171415][T24983] netlink: 97172 bytes leftover after parsing attributes in process `syz.0.15983'. [ 3295.124501][T24992] netlink: 'syz.5.15986': attribute type 2 has an invalid length. [ 3295.135810][T24992] netlink: 'syz.5.15986': attribute type 8 has an invalid length. [ 3295.143812][T24992] netlink: 132 bytes leftover after parsing attributes in process `syz.5.15986'. [ 3295.694980][T25016] netlink: 'syz.5.15992': attribute type 9 has an invalid length. [ 3295.748287][T25016] netlink: 126588 bytes leftover after parsing attributes in process `syz.5.15992'. [ 3295.792395][T25016] netlink: 180900 bytes leftover after parsing attributes in process `syz.5.15992'. [ 3295.802542][T25011] delete_channel: no stack [ 3295.855991][T25016] openvswitch: netlink: Flow actions attr not present in new flow. [ 3296.051069][T12985] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 3296.084900][T12985] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 3296.096691][T12985] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 3296.104989][T12985] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 3296.113122][T12985] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 3296.120809][T12985] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 3297.388784][T25052] netlink: 83824 bytes leftover after parsing attributes in process `syz.4.15999'. [ 3297.537347][T25052] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 3297.602336][T25052] CPU: 1 PID: 25052 Comm: syz.4.15999 Not tainted syzkaller #0 [ 3297.609964][T25052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 3297.620062][T25052] Call Trace: [ 3297.623374][T25052] [ 3297.626327][T25052] dump_stack_lvl+0x188/0x24e [ 3297.631046][T25052] ? show_regs_print_info+0x12/0x12 [ 3297.636287][T25052] ? load_image+0x400/0x400 [ 3297.640826][T25052] ? kasan_save_alloc_info+0x7/0x30 [ 3297.646064][T25052] sysfs_warn_dup+0x8a/0xa0 [ 3297.650630][T25052] sysfs_do_create_link_sd+0xc0/0x110 [ 3297.656077][T25052] device_add+0x7ed/0xfb0 [ 3297.660460][T25052] wiphy_register+0x1d9f/0x2ac0 [ 3297.665365][T25052] ? cfg80211_event_work+0x40/0x40 [ 3297.670516][T25052] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 3297.676728][T25052] ? ieee80211_register_hw+0x28b7/0x39f0 [ 3297.682427][T25052] ieee80211_register_hw+0x2d00/0x39f0 [ 3297.687963][T25052] ? ieee80211_register_hw+0xee1/0x39f0 [ 3297.693564][T25052] ? ieee80211_register_hw+0xee1/0x39f0 [ 3297.699168][T25052] ? ieee80211_tasklet_handler+0x20/0x20 [ 3297.704840][T25052] ? lockdep_hardirqs_on+0x94/0x140 [ 3297.710080][T25052] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 3297.716304][T25052] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 3297.722065][T25052] hwsim_new_radio_nl+0xafa/0xce0 [ 3297.727128][T25052] genl_family_rcv_msg_doit+0x22a/0x330 [ 3297.732702][T25052] ? end_current_label_crit_section+0x170/0x170 [ 3297.738959][T25052] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 3297.744904][T25052] ? bpf_lsm_capable+0x5/0x10 [ 3297.749624][T25052] ? security_capable+0x85/0xb0 [ 3297.754531][T25052] genl_rcv_msg+0x604/0x790 [ 3297.759102][T25052] ? genl_bind+0x360/0x360 [ 3297.763566][T25052] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 3297.769959][T25052] netlink_rcv_skb+0x1fb/0x450 [ 3297.774778][T25052] ? genl_bind+0x360/0x360 [ 3297.779250][T25052] ? netlink_ack+0x1170/0x1170 [ 3297.784211][T25052] ? lockdep_hardirqs_on+0x94/0x140 [ 3297.789457][T25052] ? down_read+0x1a8/0x2d0 [ 3297.793923][T25052] genl_rcv+0x24/0x40 [ 3297.797945][T25052] netlink_unicast+0x74d/0x8d0 [ 3297.802852][T25052] netlink_sendmsg+0x8ad/0xbd0 [ 3297.807671][T25052] ? netlink_getsockopt+0x550/0x550 [ 3297.812924][T25052] ? netlink_getsockopt+0x550/0x550 [ 3297.818165][T25052] ____sys_sendmsg+0x5be/0x970 [ 3297.822988][T25052] ? __sys_sendmsg_sock+0x30/0x30 [ 3297.828077][T25052] ? import_iovec+0x6f/0xa0 [ 3297.832647][T25052] ___sys_sendmsg+0x2a2/0x360 [ 3297.837374][T25052] ? try_to_wake_up+0x6ae/0x1080 [ 3297.842361][T25052] ? __sys_sendmsg+0x290/0x290 [ 3297.847181][T25052] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 3297.853221][T25052] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 3297.859419][T25052] ? lockdep_hardirqs_on+0x94/0x140 [ 3297.864668][T25052] ? __se_sys_sendmsg+0xf4/0x2a0 [ 3297.869650][T25052] ? kasan_check_range+0x84/0x290 [ 3297.874728][T25052] __se_sys_sendmsg+0x1bb/0x2a0 [ 3297.879619][T25052] ? ct_nmi_exit+0x145/0x1c0 [ 3297.884252][T25052] ? __x64_sys_sendmsg+0x80/0x80 [ 3297.889285][T25052] ? lockdep_hardirqs_on+0x94/0x140 [ 3297.894570][T25052] do_syscall_64+0x4c/0xa0 [ 3297.899036][T25052] ? clear_bhb_loop+0x60/0xb0 [ 3297.903810][T25052] ? clear_bhb_loop+0x60/0xb0 [ 3297.908528][T25052] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3297.914457][T25052] RIP: 0033:0x7fcc99f9c799 [ 3297.918902][T25052] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3297.938630][T25052] RSP: 002b:00007fcc9adb7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3297.947095][T25052] RAX: ffffffffffffffda RBX: 00007fcc9a215fa0 RCX: 00007fcc99f9c799 [ 3297.955123][T25052] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 3297.963143][T25052] RBP: 00007fcc9a032bd9 R08: 0000000000000000 R09: 0000000000000000 [ 3297.971323][T25052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3297.979344][T25052] R13: 00007fcc9a216038 R14: 00007fcc9a215fa0 R15: 00007ffc17101e48 [ 3297.987377][T25052] [ 3298.090016][T25022] chnl_net:caif_netlink_parms(): no params data found [ 3298.161781][T12985] Bluetooth: hci6: command 0x0409 tx timeout [ 3298.388418][T25022] bridge0: port 1(bridge_slave_0) entered blocking state [ 3298.396084][T25022] bridge0: port 1(bridge_slave_0) entered disabled state [ 3298.404619][T25022] device bridge_slave_0 entered promiscuous mode [ 3298.416498][T25022] bridge0: port 2(bridge_slave_1) entered blocking state [ 3298.423664][T25022] bridge0: port 2(bridge_slave_1) entered disabled state [ 3298.432383][T25022] device bridge_slave_1 entered promiscuous mode [ 3298.461750][T25022] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3298.506708][T25022] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3298.598743][T25022] team0: Port device team_slave_0 added [ 3298.639065][T25022] team0: Port device team_slave_1 added [ 3298.786401][T25022] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3298.793412][T25022] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3298.882088][T25075] netlink: 'syz.3.16005': attribute type 9 has an invalid length. [ 3298.890805][T25022] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3298.901952][T25075] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.16005'. [ 3298.914407][T25022] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3298.928346][T25022] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3298.969806][T25075] netlink: 180900 bytes leftover after parsing attributes in process `syz.3.16005'. [ 3299.007505][T25075] openvswitch: netlink: Flow actions attr not present in new flow. [ 3299.075614][T25022] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3299.226943][T25077] delete_channel: no stack [ 3299.396292][T25022] device hsr_slave_0 entered promiscuous mode [ 3299.429972][T25022] device hsr_slave_1 entered promiscuous mode [ 3299.439530][T25022] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3299.447389][T25022] Cannot create hsr debugfs directory [ 3300.245278][T12985] Bluetooth: hci6: command 0x041b tx timeout [ 3300.578726][T25022] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 3300.678846][T25022] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 3300.767381][T25022] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 3300.856745][T25022] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 3301.020536][T25110] netlink: 83824 bytes leftover after parsing attributes in process `syz.3.16014'. [ 3302.022031][T25022] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3302.213208][T25022] 8021q: adding VLAN 0 to HW filter on device team0 [ 3302.315889][T15958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3302.325880][T12985] Bluetooth: hci6: command 0x040f tx timeout [ 3302.345886][T15958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3302.378729][T15958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3302.389072][T25126] netlink: 'syz.4.16018': attribute type 9 has an invalid length. [ 3302.500785][T25126] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.16018'. [ 3302.528159][T15958] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3302.593495][T15958] bridge0: port 1(bridge_slave_0) entered blocking state [ 3302.600710][T15958] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3302.641777][T25126] netlink: 180900 bytes leftover after parsing attributes in process `syz.4.16018'. [ 3302.706082][T15958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3302.809961][T15958] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3302.843928][T25126] openvswitch: netlink: Flow actions attr not present in new flow. [ 3302.996952][T15958] bridge0: port 2(bridge_slave_1) entered blocking state [ 3303.004117][T15958] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3303.066127][T15958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3303.119150][T15958] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3303.174229][T15958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3303.248597][T15958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3303.310412][T15958] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3303.386738][T15958] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3303.425024][T15958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3303.472301][T15958] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3303.484657][T15958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3303.531939][T15958] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3303.552505][T25022] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3303.571342][T25022] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3303.605023][T25141] mac80211_hwsim hwsim362 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 3303.637120][T15958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3303.646697][T15958] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3303.681498][T25124] IPv6: Can't replace route, no match found [ 3304.421190][T12985] Bluetooth: hci6: command 0x0419 tx timeout [ 3304.737501][T25160] delete_channel: no stack [ 3305.591128][T25177] netlink: 83824 bytes leftover after parsing attributes in process `syz.0.16029'. [ 3305.798513][T25176] netlink: 180900 bytes leftover after parsing attributes in process `syz.5.16031'. [ 3305.811967][T25177] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 3305.821064][T25176] openvswitch: netlink: Flow actions attr not present in new flow. [ 3306.047730][T25174] netlink: 'syz.5.16031': attribute type 9 has an invalid length. [ 3306.065597][T15971] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3306.085557][T25174] netlink: 126588 bytes leftover after parsing attributes in process `syz.5.16031'. [ 3306.156747][T15971] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3306.188655][T25022] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3306.690053][T25190] netlink: 126632 bytes leftover after parsing attributes in process `syz.5.16035'. [ 3308.088801][T25214] delete_channel: no stack [ 3308.095197][T15958] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3308.292048][T15958] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3308.451295][T15958] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3308.509807][T25225] delete_channel: no stack [ 3308.750966][T15958] bond0: (slave netdevsim0): Releasing backup interface [ 3308.851998][T15958] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3309.006631][T12362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3309.027856][T12362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3309.143077][T12362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3309.161622][T12362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3309.237808][T12362] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3309.257085][T12362] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3309.278849][T25022] device veth0_vlan entered promiscuous mode [ 3309.301955][T25243] netlink: 'syz.4.16046': attribute type 10 has an invalid length. [ 3309.473858][T25022] device veth1_vlan entered promiscuous mode [ 3309.598366][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3309.619079][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 3309.640652][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3309.678400][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3309.711591][T25022] device veth0_macvtap entered promiscuous mode [ 3309.768153][T25022] device veth1_macvtap entered promiscuous mode [ 3310.300058][T25022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3310.320553][T25022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3310.331080][T25022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3310.344234][T25022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3310.354435][T25022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3310.365141][T25022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3310.375565][T25022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3310.386760][T25022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3310.399937][T25022] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3310.493472][T12362] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3310.516455][T12362] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3310.538545][T12362] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3310.556874][T12362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3310.585815][T25022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3310.604883][T25022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3310.616078][T25022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3310.626969][T25022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3310.638672][T25022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3310.649494][T25022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3310.669716][T25022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3310.685628][T25022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3310.698023][T25022] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3310.741859][T25272] netlink: 'syz.0.16053': attribute type 10 has an invalid length. [ 3310.753952][T25272] netlink: 40 bytes leftover after parsing attributes in process `syz.0.16053'. [ 3310.778315][T25022] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3310.825446][T25022] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3310.845558][T25022] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3310.854335][T25022] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3310.907547][T12362] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3310.919253][T25282] FAULT_INJECTION: forcing a failure. [ 3310.919253][T25282] name failslab, interval 1, probability 0, space 0, times 0 [ 3310.926757][T12362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3310.948814][T25279] netlink: 'syz.4.16056': attribute type 9 has an invalid length. [ 3310.986294][T25279] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.16056'. [ 3310.996821][T25282] CPU: 0 PID: 25282 Comm: syz.5.16057 Not tainted syzkaller #0 [ 3311.004418][T25282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 3311.014501][T25282] Call Trace: [ 3311.017804][T25282] [ 3311.020758][T25282] dump_stack_lvl+0x188/0x24e [ 3311.025473][T25282] ? show_regs_print_info+0x12/0x12 [ 3311.030701][T25282] ? load_image+0x400/0x400 [ 3311.035255][T25282] ? __might_sleep+0xd0/0xd0 [ 3311.039898][T25282] ? __lock_acquire+0x7d10/0x7d10 [ 3311.045018][T25282] ? mark_lock+0x94/0x320 [ 3311.049404][T25282] should_fail_ex+0x399/0x4d0 [ 3311.054137][T25282] should_failslab+0x5/0x20 [ 3311.058681][T25282] slab_pre_alloc_hook+0x59/0x310 [ 3311.063761][T25282] ? __get_vm_area_node+0x122/0x330 [ 3311.069017][T25282] __kmem_cache_alloc_node+0x4f/0x260 [ 3311.074427][T25282] ? __get_vm_area_node+0x122/0x330 [ 3311.079665][T25282] kmalloc_node_trace+0x22/0xe0 [ 3311.084557][T25282] __get_vm_area_node+0x122/0x330 [ 3311.089622][T25282] __vmalloc_node_range+0x357/0x13b0 [ 3311.094938][T25282] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 3311.100569][T25282] ? free_vm_area+0x50/0x50 [ 3311.105118][T25282] ? end_current_label_crit_section+0x170/0x170 [ 3311.111400][T25282] ? __lock_acquire+0x7d10/0x7d10 [ 3311.116461][T25282] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 3311.122043][T25282] __vmalloc+0x76/0x80 [ 3311.126139][T25282] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 3311.131724][T25282] bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 3311.137128][T25282] ? bpf_lsm_capable+0x5/0x10 [ 3311.141837][T25282] bpf_prog_alloc+0x1c/0x1b0 [ 3311.146462][T25282] bpf_prog_load+0x7c9/0x1560 [ 3311.151188][T25282] ? map_freeze+0x390/0x390 [ 3311.155724][T25282] ? __might_fault+0xa6/0x120 [ 3311.160522][T25282] ? __might_fault+0xa6/0x120 [ 3311.165251][T25282] ? __might_fault+0xc2/0x120 [ 3311.170121][T25282] ? __might_fault+0xa6/0x120 [ 3311.174818][T25282] ? bpf_lsm_bpf+0x5/0x10 [ 3311.179174][T25282] ? security_bpf+0x7a/0xa0 [ 3311.183705][T25282] __sys_bpf+0x5b8/0x780 [ 3311.187979][T25282] ? bpf_link_show_fdinfo+0x380/0x380 [ 3311.193397][T25282] ? lock_chain_count+0x20/0x20 [ 3311.198287][T25282] __x64_sys_bpf+0x78/0x90 [ 3311.202730][T25282] do_syscall_64+0x4c/0xa0 [ 3311.207180][T25282] ? clear_bhb_loop+0x60/0xb0 [ 3311.211894][T25282] ? clear_bhb_loop+0x60/0xb0 [ 3311.216602][T25282] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3311.222523][T25282] RIP: 0033:0x7f8ad939c799 [ 3311.227082][T25282] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3311.246750][T25282] RSP: 002b:00007f8ada2fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3311.255290][T25282] RAX: ffffffffffffffda RBX: 00007f8ad9615fa0 RCX: 00007f8ad939c799 [ 3311.263290][T25282] RDX: 0000000000000021 RSI: 000020000000e000 RDI: 0000000000000005 [ 3311.271294][T25282] RBP: 00007f8ada2fe090 R08: 0000000000000000 R09: 0000000000000000 [ 3311.279287][T25282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3311.287278][T25282] R13: 00007f8ad9616038 R14: 00007f8ad9615fa0 R15: 00007ffe5e3ad638 [ 3311.295291][T25282] [ 3311.431359][T25278] delete_channel: no stack [ 3311.749376][T25298] netlink: 'syz.4.16059': attribute type 11 has an invalid length. [ 3311.795499][T25298] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.16059'. [ 3312.060920][T25288] device syzkaller0 entered promiscuous mode [ 3312.070049][T25282] syz.5.16057: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz5,mems_allowed=0-1 [ 3312.087199][T25282] CPU: 0 PID: 25282 Comm: syz.5.16057 Not tainted syzkaller #0 [ 3312.094833][T25282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 3312.104935][T25282] Call Trace: [ 3312.108255][T25282] [ 3312.111405][T25282] dump_stack_lvl+0x188/0x24e [ 3312.116121][T25282] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 3312.116160][T25282] ? show_regs_print_info+0x12/0x12 [ 3312.116187][T25282] ? load_image+0x400/0x400 [ 3312.116211][T25282] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 3312.116234][T25282] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 3312.116257][T25282] warn_alloc+0x242/0x330 [ 3312.116283][T25282] ? __get_vm_area_node+0x122/0x330 [ 3312.116316][T25282] ? zone_watermark_ok_safe+0x270/0x270 [ 3312.116341][T25282] ? rcu_is_watching+0x11/0xa0 [ 3312.116373][T25282] ? __get_vm_area_node+0x318/0x330 [ 3312.116404][T25282] __vmalloc_node_range+0x37c/0x13b0 [ 3312.116471][T25282] ? free_vm_area+0x50/0x50 [ 3312.116493][T25282] ? end_current_label_crit_section+0x170/0x170 [ 3312.116516][T25282] ? __lock_acquire+0x7d10/0x7d10 [ 3312.133779][T15972] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3312.139149][T25282] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 3312.139193][T25282] __vmalloc+0x76/0x80 [ 3312.139215][T25282] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 3312.139241][T25282] bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 3312.139266][T25282] ? bpf_lsm_capable+0x5/0x10 [ 3312.225105][T25282] bpf_prog_alloc+0x1c/0x1b0 [ 3312.229732][T25282] bpf_prog_load+0x7c9/0x1560 [ 3312.234435][T25282] ? map_freeze+0x390/0x390 [ 3312.239044][T25282] ? __might_fault+0xa6/0x120 [ 3312.243741][T25282] ? __might_fault+0xa6/0x120 [ 3312.248429][T25282] ? __might_fault+0xc2/0x120 [ 3312.253120][T25282] ? __might_fault+0xa6/0x120 [ 3312.257812][T25282] ? bpf_lsm_bpf+0x5/0x10 [ 3312.262151][T25282] ? security_bpf+0x7a/0xa0 [ 3312.266676][T25282] __sys_bpf+0x5b8/0x780 [ 3312.270939][T25282] ? bpf_link_show_fdinfo+0x380/0x380 [ 3312.276340][T25282] ? lock_chain_count+0x20/0x20 [ 3312.281213][T25282] __x64_sys_bpf+0x78/0x90 [ 3312.285645][T25282] do_syscall_64+0x4c/0xa0 [ 3312.290076][T25282] ? clear_bhb_loop+0x60/0xb0 [ 3312.294787][T25282] ? clear_bhb_loop+0x60/0xb0 [ 3312.299478][T25282] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3312.305386][T25282] RIP: 0033:0x7f8ad939c799 [ 3312.309821][T25282] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3312.329452][T25282] RSP: 002b:00007f8ada2fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3312.337893][T25282] RAX: ffffffffffffffda RBX: 00007f8ad9615fa0 RCX: 00007f8ad939c799 [ 3312.345886][T25282] RDX: 0000000000000021 RSI: 000020000000e000 RDI: 0000000000000005 [ 3312.353882][T25282] RBP: 00007f8ada2fe090 R08: 0000000000000000 R09: 0000000000000000 [ 3312.362059][T25282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3312.370063][T25282] R13: 00007f8ad9616038 R14: 00007f8ad9615fa0 R15: 00007ffe5e3ad638 [ 3312.378071][T25282] [ 3312.388867][T25282] Mem-Info: [ 3312.392124][T25282] active_anon:10591 inactive_anon:0 isolated_anon:0 [ 3312.392124][T25282] active_file:22123 inactive_file:41225 isolated_file:0 [ 3312.392124][T25282] unevictable:768 dirty:99 writeback:0 [ 3312.392124][T25282] slab_reclaimable:22793 slab_unreclaimable:104180 [ 3312.392124][T25282] mapped:38729 shmem:2750 pagetables:699 [ 3312.392124][T25282] sec_pagetables:0 bounce:0 [ 3312.392124][T25282] kernel_misc_reclaimable:0 [ 3312.392124][T25282] free:1295961 free_pcp:3503 free_cma:0 [ 3312.404733][T25292] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3312.451457][T15972] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3312.473752][T25282] Node 0 active_anon:43264kB inactive_anon:0kB active_file:88492kB inactive_file:164696kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:155716kB dirty:396kB writeback:0kB shmem:10364kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10692kB pagetables:2796kB sec_pagetables:0kB all_unreclaimable? no [ 3312.512284][T15957] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3312.546850][T25282] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 3312.586607][T25282] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3312.685045][T25282] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 3312.692087][T25282] Node 0 DMA32 free:1249328kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:48864kB inactive_anon:0kB active_file:88492kB inactive_file:164696kB unevictable:1536kB writepending:396kB present:3129332kB managed:2592980kB mlocked:0kB bounce:0kB free_pcp:12228kB local_pcp:8316kB free_cma:0kB [ 3312.805499][T25282] lowmem_reserve[]: 0 0 1 1 1 [ 3312.810396][T25282] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:12kB free_cma:0kB [ 3312.875590][T25282] lowmem_reserve[]: 0 0 0 0 0 [ 3312.880399][T25282] Node 1 Normal free:3912120kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:2880kB local_pcp:0kB free_cma:0kB [ 3312.913651][T25315] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.16062'. [ 3313.010134][T25282] lowmem_reserve[]: 0 0 0 0 0 [ 3313.014954][T25282] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 3313.075669][T25282] Node 0 DMA32: 2599*4kB (UE) 556*8kB (UE) 1734*16kB (UME) 1352*32kB (UME) 710*64kB (UME) 686*128kB (UME) 273*256kB (UME) 117*512kB (UME) 37*1024kB (UME) 17*2048kB (UME) 200*4096kB (UM) = 1240796kB [ 3313.115711][T25282] Node 0 Normal: 2*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 3313.159249][T25282] Node 1 Normal: 264*4kB (UME) 51*8kB (UME) 38*16kB (UE) 229*32kB (UME) 94*64kB (UME) 29*128kB (UME) 15*256kB (UM) 8*512kB (UME) 0*1024kB 1*2048kB (E) 948*4096kB (M) = 3912120kB [ 3313.219947][ T4292] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3313.236322][T25282] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3313.246041][ T4292] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3313.284585][T25282] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 3313.315116][T25282] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3313.332632][T25282] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 3313.342325][T12362] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3313.360197][T25282] 71257 total pagecache pages [ 3313.364988][T25282] 0 pages in swap cache [ 3313.375865][T25282] Free swap = 124996kB [ 3313.425613][T25282] Total swap = 124996kB [ 3313.429886][T25282] 2097051 pages RAM [ 3313.433723][T25282] 0 pages HighMem/MovableOnly [ 3313.465259][T25282] 415205 pages reserved [ 3313.475604][T25282] 0 pages cma reserved [ 3317.733873][T25334] netlink: 'syz.5.16068': attribute type 2 has an invalid length. [ 3317.746426][T25334] netlink: 'syz.5.16068': attribute type 8 has an invalid length. [ 3317.754310][T25334] netlink: 132 bytes leftover after parsing attributes in process `syz.5.16068'. [ 3318.079214][T15972] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 3318.716662][T25364] netlink: 'syz.5.16073': attribute type 10 has an invalid length. [ 3320.154181][T25403] netlink: 40 bytes leftover after parsing attributes in process `syz.6.16081'. [ 3320.245413][T25403] bridge0: port 1(bridge_slave_0) entered disabled state [ 3320.577864][T25403] device bridge_slave_0 left promiscuous mode [ 3320.591074][T25403] bridge0: port 1(bridge_slave_0) entered disabled state [ 3320.814363][T15958] device hsr_slave_0 left promiscuous mode [ 3320.842614][T15958] device hsr_slave_1 left promiscuous mode [ 3320.857067][T15958] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3320.865858][T15958] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3320.877570][T15958] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3320.888496][T15958] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3320.904427][T15958] device bridge_slave_1 left promiscuous mode [ 3320.923007][T15958] bridge0: port 2(bridge_slave_1) entered disabled state [ 3320.935346][T15958] device bridge_slave_0 left promiscuous mode [ 3320.942952][T25423] netlink: 'syz.0.16083': attribute type 1 has an invalid length. [ 3320.952706][T25423] netlink: 132 bytes leftover after parsing attributes in process `syz.0.16083'. [ 3320.978389][T15958] bridge0: port 1(bridge_slave_0) entered disabled state [ 3321.049913][T15958] device veth1_macvtap left promiscuous mode [ 3321.061955][T15958] device veth0_macvtap left promiscuous mode [ 3321.069685][T15958] device veth1_vlan left promiscuous mode [ 3321.082824][T15958] device veth0_vlan left promiscuous mode [ 3322.013448][T15958] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3322.070938][T15958] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3322.479125][T15958] bond0 (unregistering): Released all slaves [ 3322.586534][T25402] netlink: 40 bytes leftover after parsing attributes in process `syz.3.16079'. [ 3322.678102][T25410] netlink: 'syz.6.16081': attribute type 1 has an invalid length. [ 3322.686218][T25410] netlink: 4 bytes leftover after parsing attributes in process `syz.6.16081'. [ 3322.714943][T25418] bridge0: port 2(bridge_slave_1) entered disabled state [ 3322.722544][T25418] bridge0: port 1(bridge_slave_0) entered disabled state [ 3322.803362][T25424] device bridge_slave_1 left promiscuous mode [ 3322.835953][T25424] bridge0: port 2(bridge_slave_1) entered disabled state [ 3322.844476][T25424] device bridge_slave_0 left promiscuous mode [ 3322.875888][T25424] bridge0: port 1(bridge_slave_0) entered disabled state [ 3323.143324][T25430] netlink: 'syz.3.16086': attribute type 2 has an invalid length. [ 3323.180013][T25430] netlink: 'syz.3.16086': attribute type 8 has an invalid length. [ 3323.280008][T25430] netlink: 132 bytes leftover after parsing attributes in process `syz.3.16086'. [ 3325.306090][T25471] netlink: 40 bytes leftover after parsing attributes in process `syz.0.16096'. [ 3325.853997][T25495] netlink: 'syz.4.16099': attribute type 1 has an invalid length. [ 3325.863359][T25494] FAULT_INJECTION: forcing a failure. [ 3325.863359][T25494] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3326.010951][T25494] CPU: 1 PID: 25494 Comm: syz.6.16100 Not tainted syzkaller #0 [ 3326.018668][T25494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 3326.028748][T25494] Call Trace: [ 3326.032049][T25494] [ 3326.035004][T25494] dump_stack_lvl+0x188/0x24e [ 3326.039720][T25494] ? show_regs_print_info+0x12/0x12 [ 3326.044955][T25494] ? load_image+0x400/0x400 [ 3326.049493][T25494] ? __lock_acquire+0x7d10/0x7d10 [ 3326.054559][T25494] should_fail_ex+0x399/0x4d0 [ 3326.059380][T25494] _copy_from_user+0x2c/0x170 [ 3326.064185][T25494] __sys_bpf+0x2ea/0x780 [ 3326.068463][T25494] ? bpf_link_show_fdinfo+0x380/0x380 [ 3326.074092][T25494] ? lock_chain_count+0x20/0x20 [ 3326.079034][T25494] __x64_sys_bpf+0x78/0x90 [ 3326.083493][T25494] do_syscall_64+0x4c/0xa0 [ 3326.087940][T25494] ? clear_bhb_loop+0x60/0xb0 [ 3326.092741][T25494] ? clear_bhb_loop+0x60/0xb0 [ 3326.097444][T25494] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3326.103360][T25494] RIP: 0033:0x7fc93719c799 [ 3326.107802][T25494] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3326.127432][T25494] RSP: 002b:00007fc93807c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3326.135880][T25494] RAX: ffffffffffffffda RBX: 00007fc937415fa0 RCX: 00007fc93719c799 [ 3326.143884][T25494] RDX: 0000000000000094 RSI: 0000200000000080 RDI: 0000000000000005 [ 3326.151889][T25494] RBP: 00007fc93807c090 R08: 0000000000000000 R09: 0000000000000000 [ 3326.160056][T25494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3326.168139][T25494] R13: 00007fc937416038 R14: 00007fc937415fa0 R15: 00007ffcdac7df78 [ 3326.176154][T25494] [ 3326.185934][T25495] netlink: 132 bytes leftover after parsing attributes in process `syz.4.16099'. [ 3327.025875][T25514] netlink: 'syz.3.16105': attribute type 2 has an invalid length. [ 3327.065574][T25514] netlink: 'syz.3.16105': attribute type 8 has an invalid length. [ 3327.073635][T25514] netlink: 132 bytes leftover after parsing attributes in process `syz.3.16105'. [ 3327.683376][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 3327.689817][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 3327.850221][T25545] FAULT_INJECTION: forcing a failure. [ 3327.850221][T25545] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3327.875780][T25545] CPU: 0 PID: 25545 Comm: syz.4.16113 Not tainted syzkaller #0 [ 3327.883411][T25545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 3327.893526][T25545] Call Trace: [ 3327.896844][T25545] [ 3327.899816][T25545] dump_stack_lvl+0x188/0x24e [ 3327.904549][T25545] ? show_regs_print_info+0x12/0x12 [ 3327.909795][T25545] ? load_image+0x400/0x400 [ 3327.914347][T25545] ? __lock_acquire+0x7d10/0x7d10 [ 3327.919429][T25545] should_fail_ex+0x399/0x4d0 [ 3327.924164][T25545] _copy_from_iter+0x1c0/0x1130 [ 3327.929089][T25545] ? __lock_acquire+0x7d10/0x7d10 [ 3327.934167][T25545] ? sock_alloc_send_pskb+0x89d/0x9a0 [ 3327.939597][T25545] ? copyout_mc+0x110/0x110 [ 3327.944154][T25545] ? __virt_addr_valid+0x188/0x540 [ 3327.949311][T25545] ? __virt_addr_valid+0x188/0x540 [ 3327.954477][T25545] ? __virt_addr_valid+0x465/0x540 [ 3327.959639][T25545] ? __check_object_size+0x500/0xa40 [ 3327.964976][T25545] skb_copy_datagram_from_iter+0xef/0x690 [ 3327.970750][T25545] ? skb_put+0x117/0x210 [ 3327.975046][T25545] tun_get_user+0xb81/0x3c70 [ 3327.979709][T25545] ? rcu_read_unlock+0xa0/0xa0 [ 3327.984532][T25545] ? tun_get+0x1c/0x2e0 [ 3327.988752][T25545] ? __lock_acquire+0x7d10/0x7d10 [ 3327.993842][T25545] ? tun_get+0x1c/0x2e0 [ 3327.998079][T25545] tun_chr_write_iter+0x112/0x1f0 [ 3328.003251][T25545] vfs_write+0x4b1/0xa30 [ 3328.007551][T25545] ? file_end_write+0x250/0x250 [ 3328.012460][T25545] ? __fget_files+0x43d/0x4b0 [ 3328.017210][T25545] ? __fdget_pos+0x1d4/0x360 [ 3328.021841][T25545] ? ksys_write+0x71/0x250 [ 3328.026312][T25545] ksys_write+0x14c/0x250 [ 3328.030699][T25545] ? __ia32_sys_read+0x80/0x80 [ 3328.035522][T25545] ? lockdep_hardirqs_on+0x94/0x140 [ 3328.040778][T25545] do_syscall_64+0x4c/0xa0 [ 3328.045240][T25545] ? clear_bhb_loop+0x60/0xb0 [ 3328.049969][T25545] ? clear_bhb_loop+0x60/0xb0 [ 3328.054705][T25545] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3328.060640][T25545] RIP: 0033:0x7fcc99f9c799 [ 3328.065092][T25545] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3328.084741][T25545] RSP: 002b:00007fcc9adb7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3328.093223][T25545] RAX: ffffffffffffffda RBX: 00007fcc9a215fa0 RCX: 00007fcc99f9c799 [ 3328.101246][T25545] RDX: 000000000000fdef RSI: 0000200000000140 RDI: 00000000000000c8 [ 3328.109266][T25545] RBP: 00007fcc9adb7090 R08: 0000000000000000 R09: 0000000000000000 [ 3328.117289][T25545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3328.125315][T25545] R13: 00007fcc9a216038 R14: 00007fcc9a215fa0 R15: 00007ffc17101e48 [ 3328.133442][T25545] [ 3328.574711][T25557] bridge0: port 2(bridge_slave_1) entered disabled state [ 3328.716651][T25554] netlink: 'syz.6.16114': attribute type 1 has an invalid length. [ 3328.765080][T25557] device bridge_slave_1 left promiscuous mode [ 3328.805764][T25554] netlink: 132 bytes leftover after parsing attributes in process `syz.6.16114'. [ 3328.826130][T25557] bridge0: port 2(bridge_slave_1) entered disabled state [ 3329.052318][T25565] netlink: 40 bytes leftover after parsing attributes in process `syz.3.16116'. [ 3329.112340][T25562] netlink: 40 bytes leftover after parsing attributes in process `syz.4.16115'. [ 3329.741786][T25566] netlink: 'syz.3.16116': attribute type 1 has an invalid length. [ 3329.775500][T25566] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16116'. [ 3330.097733][T25593] netlink: 'syz.4.16120': attribute type 2 has an invalid length. [ 3330.118778][T25595] netlink: 'syz.5.16121': attribute type 9 has an invalid length. [ 3330.120672][T25593] netlink: 'syz.4.16120': attribute type 8 has an invalid length. [ 3330.171212][T25590] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.16122'. [ 3330.182610][T25593] netlink: 132 bytes leftover after parsing attributes in process `syz.4.16120'. [ 3330.238340][T25595] netlink: 126588 bytes leftover after parsing attributes in process `syz.5.16121'. [ 3330.271875][T25590] netlink: zone id is out of range [ 3330.305336][T25599] netlink: 'syz.0.16123': attribute type 10 has an invalid length. [ 3330.327960][T25590] netlink: zone id is out of range [ 3330.355010][T25599] netlink: 40 bytes leftover after parsing attributes in process `syz.0.16123'. [ 3330.380611][T25590] netlink: zone id is out of range [ 3330.415784][T25590] netlink: zone id is out of range [ 3330.423457][T25590] netlink: zone id is out of range [ 3330.453883][T25590] netlink: zone id is out of range [ 3330.464133][T25590] netlink: zone id is out of range [ 3330.475899][T25590] netlink: zone id is out of range [ 3330.504257][T25590] netlink: zone id is out of range [ 3330.515855][T25590] netlink: zone id is out of range [ 3330.722268][T25610] device macsec0 entered promiscuous mode [ 3331.104571][T25622] netlink: 'syz.0.16131': attribute type 12 has an invalid length. [ 3331.125708][T25622] netlink: 132 bytes leftover after parsing attributes in process `syz.0.16131'. [ 3331.173748][T25624] netlink: 'syz.4.16133': attribute type 3 has an invalid length. [ 3331.264791][T25624] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.16133'. [ 3331.613207][T25640] netlink: 'syz.4.16136': attribute type 9 has an invalid length. [ 3332.014704][T25646] netlink: 'syz.3.16138': attribute type 2 has an invalid length. [ 3333.992445][T25684] validate_nla: 1 callbacks suppressed [ 3333.992468][T25684] netlink: 'syz.6.16149': attribute type 9 has an invalid length. [ 3334.096403][T25684] __nla_validate_parse: 2 callbacks suppressed [ 3334.096425][T25684] netlink: 126588 bytes leftover after parsing attributes in process `syz.6.16149'. [ 3334.206272][T25689] netlink: 'syz.5.16152': attribute type 10 has an invalid length. [ 3335.970213][T25741] netlink: 'syz.4.16166': attribute type 9 has an invalid length. [ 3335.990102][T25741] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.16166'. [ 3336.550428][T25754] netlink: 144 bytes leftover after parsing attributes in process `syz.6.16168'. [ 3336.941763][T25767] bond0: (slave netdevsim0): Error: Slave device does not support XDP [ 3337.442466][T25780] delete_channel: no stack [ 3337.467753][T25780] delete_channel: no stack [ 3337.641891][T25786] netlink: 132 bytes leftover after parsing attributes in process `syz.3.16178'. [ 3337.770410][T25788] netlink: 'syz.4.16180': attribute type 9 has an invalid length. [ 3337.875865][T25788] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.16180'. [ 3338.132402][T25799] netlink: 60 bytes leftover after parsing attributes in process `syz.3.16182'. [ 3338.211056][T25799] netlink: 60 bytes leftover after parsing attributes in process `syz.3.16182'. [ 3338.375936][T25799] netlink: 13951 bytes leftover after parsing attributes in process `syz.3.16182'. [ 3338.424340][T25802] netlink: 60 bytes leftover after parsing attributes in process `syz.3.16182'. [ 3339.655209][T15958] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3339.851120][ T484] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 3339.861465][ T484] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 3339.870075][ T484] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 3339.907546][ T484] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 3339.917017][ T484] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 3339.925054][ T484] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 3339.967608][T15958] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3340.310946][T25848] netlink: 'syz.0.16194': attribute type 9 has an invalid length. [ 3340.357189][T15958] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3340.409109][T25848] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.16194'. [ 3340.618244][T15958] bond0: (slave netdevsim0): Releasing backup interface [ 3340.690576][T15958] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3341.252278][T25836] chnl_net:caif_netlink_parms(): no params data found [ 3341.865467][T25836] bridge0: port 1(bridge_slave_0) entered blocking state [ 3341.984263][T25836] bridge0: port 1(bridge_slave_0) entered disabled state [ 3341.995634][ T484] Bluetooth: hci1: command 0x0409 tx timeout [ 3342.140504][T25836] device bridge_slave_0 entered promiscuous mode [ 3342.406056][T25836] bridge0: port 2(bridge_slave_1) entered blocking state [ 3342.423523][T25836] bridge0: port 2(bridge_slave_1) entered disabled state [ 3342.443225][T25836] device bridge_slave_1 entered promiscuous mode [ 3342.948502][T25836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3342.978631][T25836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3343.246712][T25836] team0: Port device team_slave_0 added [ 3343.381448][T25911] netlink: 'syz.6.16206': attribute type 9 has an invalid length. [ 3343.409183][T25911] netlink: 126588 bytes leftover after parsing attributes in process `syz.6.16206'. [ 3343.430143][T25836] team0: Port device team_slave_1 added [ 3343.636637][T25836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3343.653986][T25836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3343.733655][T25836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3343.842451][T25836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3343.852061][T25836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3344.010756][T25836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3344.075712][ T484] Bluetooth: hci1: command 0x041b tx timeout [ 3344.374604][T25836] device hsr_slave_0 entered promiscuous mode [ 3344.390918][T25836] device hsr_slave_1 entered promiscuous mode [ 3344.800213][T25952] netlink: 'syz.0.16217': attribute type 9 has an invalid length. [ 3344.809280][T25952] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.16217'. [ 3345.625908][T15958] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3345.648467][T15958] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3345.692249][T15958] batman_adv: batadv0: Interface deactivated: vlan1 [ 3345.731301][T15958] batman_adv: batadv0: Removing interface: vlan1 [ 3345.854636][T15958] device veth1_macvtap left promiscuous mode [ 3345.885706][T15958] device veth1_vlan left promiscuous mode [ 3345.891917][T15958] device veth0_vlan left promiscuous mode [ 3346.159464][ T484] Bluetooth: hci1: command 0x040f tx timeout [ 3346.658242][T25971] delete_channel: no stack [ 3347.383513][T15958] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3347.446195][T15958] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3347.804517][T15958] bond0 (unregistering): Released all slaves [ 3347.885454][T25975] netlink: 'syz.3.16223': attribute type 10 has an invalid length. [ 3347.893498][T25985] netlink: 192 bytes leftover after parsing attributes in process `syz.5.16225'. [ 3348.198617][T25996] netlink: 'syz.5.16228': attribute type 9 has an invalid length. [ 3348.233941][T25996] netlink: 126588 bytes leftover after parsing attributes in process `syz.5.16228'. [ 3348.243400][ T484] Bluetooth: hci1: command 0x0419 tx timeout [ 3349.544315][T25836] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 3349.587166][T25836] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 3349.625120][T25836] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 3349.647238][T25836] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 3350.105159][T26037] netlink: 'syz.5.16237': attribute type 10 has an invalid length. [ 3350.184940][T26031] delete_channel: no stack [ 3350.258121][T25836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3350.294257][T15959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3350.318132][T15959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3350.332789][T25836] 8021q: adding VLAN 0 to HW filter on device team0 [ 3350.373293][T15959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3350.392913][T15959] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3350.417992][T15959] bridge0: port 1(bridge_slave_0) entered blocking state [ 3350.425208][T15959] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3350.481045][T15959] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3350.530076][T15959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3350.580002][T15959] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3350.632611][T15959] bridge0: port 2(bridge_slave_1) entered blocking state [ 3350.639839][T15959] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3350.726606][T26047] netlink: 'syz.3.16239': attribute type 9 has an invalid length. [ 3350.743201][T15957] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3350.768289][T26044] mac80211_hwsim hwsim360 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 3350.771906][T26047] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.16239'. [ 3350.859515][T15957] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3350.936954][T15957] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3350.969884][T15957] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3351.000952][T15957] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3351.057573][T26054] netlink: 'syz.0.16240': attribute type 10 has an invalid length. [ 3351.099232][T26048] delete_channel: no stack [ 3351.141050][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3351.178681][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3351.207011][T26064] FAULT_INJECTION: forcing a failure. [ 3351.207011][T26064] name failslab, interval 1, probability 0, space 0, times 0 [ 3351.241886][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3351.255772][T26064] CPU: 1 PID: 26064 Comm: syz.3.16243 Not tainted syzkaller #0 [ 3351.263385][T26064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 3351.273596][T26064] Call Trace: [ 3351.276926][T26064] [ 3351.277365][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3351.279873][T26064] dump_stack_lvl+0x188/0x24e [ 3351.292322][T26064] ? show_regs_print_info+0x12/0x12 [ 3351.297556][T26064] ? load_image+0x400/0x400 [ 3351.302093][T26064] ? __might_sleep+0xd0/0xd0 [ 3351.306717][T26064] ? __lock_acquire+0x7d10/0x7d10 [ 3351.311756][T26064] should_fail_ex+0x399/0x4d0 [ 3351.316454][T26064] should_failslab+0x5/0x20 [ 3351.320983][T26064] slab_pre_alloc_hook+0x59/0x310 [ 3351.326020][T26064] ? netlink_lookup+0x30/0x200 [ 3351.330805][T26064] ? genl_start+0x14f/0x4a0 [ 3351.335312][T26064] __kmem_cache_alloc_node+0x4f/0x260 [ 3351.340695][T26064] ? __lock_acquire+0x7d10/0x7d10 [ 3351.345747][T26064] ? genl_start+0x14f/0x4a0 [ 3351.350287][T26064] kmalloc_trace+0x26/0xe0 [ 3351.354730][T26064] genl_start+0x14f/0x4a0 [ 3351.359071][T26064] __netlink_dump_start+0x3f9/0x6f0 [ 3351.364293][T26064] genl_family_rcv_msg_dumpit+0x323/0x3c0 [ 3351.370030][T26064] ? genl_rcv_msg+0x790/0x790 [ 3351.374753][T26064] ? genl_family_rcv_msg_doit+0x330/0x330 [ 3351.380586][T26064] ? ovs_flow_cmd_get+0x610/0x610 [ 3351.385618][T26064] ? genl_lock_done+0xd0/0xd0 [ 3351.390305][T26064] ? memset+0x1e/0x40 [ 3351.394320][T26064] ? genl_get_cmd+0x452/0x8b0 [ 3351.399025][T26064] genl_rcv_msg+0x5cb/0x790 [ 3351.403547][T26064] ? genl_bind+0x360/0x360 [ 3351.407969][T26064] ? ovs_flow_cmd_del+0x870/0x870 [ 3351.412999][T26064] ? ovs_flow_cmd_get+0x610/0x610 [ 3351.418040][T26064] netlink_rcv_skb+0x1fb/0x450 [ 3351.422817][T26064] ? genl_bind+0x360/0x360 [ 3351.427247][T26064] ? netlink_ack+0x1170/0x1170 [ 3351.432031][T26064] ? down_read+0x1a8/0x2d0 [ 3351.436464][T26064] genl_rcv+0x24/0x40 [ 3351.440461][T26064] netlink_unicast+0x74d/0x8d0 [ 3351.445245][T26064] netlink_sendmsg+0x8ad/0xbd0 [ 3351.450034][T26064] ? netlink_getsockopt+0x550/0x550 [ 3351.455250][T26064] ? aa_sock_msg_perm+0x94/0x150 [ 3351.460194][T26064] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 3351.465497][T26064] ? security_socket_sendmsg+0x7c/0xa0 [ 3351.470983][T26064] ? netlink_getsockopt+0x550/0x550 [ 3351.476288][T26064] ____sys_sendmsg+0x5be/0x970 [ 3351.481076][T26064] ? __sys_sendmsg_sock+0x30/0x30 [ 3351.486114][T26064] ? __import_iovec+0x315/0x500 [ 3351.490982][T26064] ? import_iovec+0x6f/0xa0 [ 3351.495546][T26064] ___sys_sendmsg+0x2a2/0x360 [ 3351.500243][T26064] ? __sys_sendmsg+0x290/0x290 [ 3351.505038][T26064] ? __lock_acquire+0x7d10/0x7d10 [ 3351.510099][T26064] __se_sys_sendmsg+0x1bb/0x2a0 [ 3351.514968][T26064] ? __x64_sys_sendmsg+0x80/0x80 [ 3351.519939][T26064] ? lockdep_hardirqs_on+0x94/0x140 [ 3351.525148][T26064] do_syscall_64+0x4c/0xa0 [ 3351.529580][T26064] ? clear_bhb_loop+0x60/0xb0 [ 3351.534264][T26064] ? clear_bhb_loop+0x60/0xb0 [ 3351.538966][T26064] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3351.544867][T26064] RIP: 0033:0x7f6169b9c799 [ 3351.549293][T26064] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3351.568914][T26064] RSP: 002b:00007f616aad0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3351.577351][T26064] RAX: ffffffffffffffda RBX: 00007f6169e15fa0 RCX: 00007f6169b9c799 [ 3351.585329][T26064] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 3351.593410][T26064] RBP: 00007f616aad0090 R08: 0000000000000000 R09: 0000000000000000 [ 3351.601400][T26064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3351.609400][T26064] R13: 00007f6169e16038 R14: 00007f6169e15fa0 R15: 00007ffd35c9b168 [ 3351.617601][T26064] [ 3351.666444][T25836] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3351.729394][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3351.773969][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3352.248701][T26079] FAULT_INJECTION: forcing a failure. [ 3352.248701][T26079] name failslab, interval 1, probability 0, space 0, times 0 [ 3352.298219][T26079] CPU: 1 PID: 26079 Comm: syz.3.16246 Not tainted syzkaller #0 [ 3352.305851][T26079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 3352.316034][T26079] Call Trace: [ 3352.319345][T26079] [ 3352.322322][T26079] dump_stack_lvl+0x188/0x24e [ 3352.327135][T26079] ? show_regs_print_info+0x12/0x12 [ 3352.332368][T26079] ? load_image+0x400/0x400 [ 3352.336913][T26079] ? __might_sleep+0xd0/0xd0 [ 3352.341547][T26079] ? __lock_acquire+0x7d10/0x7d10 [ 3352.346621][T26079] should_fail_ex+0x399/0x4d0 [ 3352.351366][T26079] should_failslab+0x5/0x20 [ 3352.355944][T26079] slab_pre_alloc_hook+0x59/0x310 [ 3352.361005][T26079] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 3352.367023][T26079] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 3352.372787][T26079] __kmem_cache_alloc_node+0x4f/0x260 [ 3352.378198][T26079] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 3352.383960][T26079] __kmalloc+0xa0/0x240 [ 3352.388155][T26079] tomoyo_realpath_from_path+0xdf/0x5d0 [ 3352.393750][T26079] ? tomoyo_path_number_perm+0x205/0x650 [ 3352.399427][T26079] tomoyo_path_number_perm+0x22f/0x650 [ 3352.404941][T26079] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 3352.410457][T26079] ? perf_trace_preemptirq_template+0x268/0x320 [ 3352.416761][T26079] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 3352.422812][T26079] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 3352.429008][T26079] ? tomoyo_file_ioctl+0xd/0x30 [ 3352.433906][T26079] security_file_ioctl+0x6c/0xa0 [ 3352.439064][T26079] __se_sys_ioctl+0x48/0x170 [ 3352.443782][T26079] do_syscall_64+0x4c/0xa0 [ 3352.448228][T26079] ? clear_bhb_loop+0x60/0xb0 [ 3352.452945][T26079] ? clear_bhb_loop+0x60/0xb0 [ 3352.455746][T26083] netlink: 'syz.0.16247': attribute type 10 has an invalid length. [ 3352.457651][T26079] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3352.457688][T26079] RIP: 0033:0x7f6169b9c799 [ 3352.457710][T26079] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3352.457727][T26079] RSP: 002b:00007f616aad0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3352.457752][T26079] RAX: ffffffffffffffda RBX: 00007f6169e15fa0 RCX: 00007f6169b9c799 [ 3352.457768][T26079] RDX: 0000200000000000 RSI: 0000000000008b1b RDI: 0000000000000007 [ 3352.457782][T26079] RBP: 00007f616aad0090 R08: 0000000000000000 R09: 0000000000000000 [ 3352.457795][T26079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3352.457808][T26079] R13: 00007f6169e16038 R14: 00007f6169e15fa0 R15: 00007ffd35c9b168 [ 3352.457843][T26079] [ 3352.595594][T26079] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3353.769280][T26109] netlink: 'syz.3.16250': attribute type 10 has an invalid length. [ 3353.809606][T26109] netlink: 2 bytes leftover after parsing attributes in process `syz.3.16250'. [ 3353.872211][T26109] device bond0 entered promiscuous mode [ 3353.888040][T26109] device bond_slave_0 entered promiscuous mode [ 3353.941094][T26109] device bond_slave_1 entered promiscuous mode [ 3353.980901][T26109] device netdevsim0 entered promiscuous mode [ 3354.128500][T26109] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3354.208615][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3354.222645][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3354.258359][T26122] netlink: 192 bytes leftover after parsing attributes in process `syz.0.16255'. [ 3354.386255][T25836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3355.053201][T26126] netlink: 'syz.6.16253': attribute type 10 has an invalid length. [ 3355.726376][T26124] delete_channel: no stack [ 3357.376404][T26126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3357.396614][T26126] team0: Port device bond0 added [ 3358.109325][T26161] netlink: 'syz.6.16261': attribute type 9 has an invalid length. [ 3358.188537][T26161] netlink: 126588 bytes leftover after parsing attributes in process `syz.6.16261'. [ 3358.437796][T12362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3358.468999][T12362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3358.554645][T15958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3358.585147][T15958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3358.639480][T15958] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3358.679114][T15958] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3358.733900][T25836] device veth0_vlan entered promiscuous mode [ 3358.896372][T25836] device veth1_vlan entered promiscuous mode [ 3359.180655][T15958] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3359.196775][T15958] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 3359.226333][T15958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3359.260216][T15958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3359.291506][T25836] device veth0_macvtap entered promiscuous mode [ 3359.367536][T25836] device veth1_macvtap entered promiscuous mode [ 3359.447188][T15959] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3359.463371][T15959] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3359.506126][T25836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3359.537315][T25836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3359.555443][T25836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3359.566429][T25836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3359.583472][T25836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3359.599885][T25836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3359.626446][T25836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3359.655910][T26187] netlink: 'syz.5.16268': attribute type 10 has an invalid length. [ 3359.667943][T26185] delete_channel: no stack [ 3359.675123][T15959] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3359.724997][T15959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3359.757176][T25836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3359.788486][T25836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3359.823250][T25836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3359.862072][T25836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3359.923001][T25836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3359.951230][T25836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3360.010460][T25836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3360.065837][T25836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3360.119423][T25836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3360.199875][T15958] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3360.224269][T15958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3360.237257][T25836] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3360.246932][T25836] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3360.263859][T25836] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3360.281455][T25836] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3360.504497][T26216] netlink: 'syz.3.16275': attribute type 9 has an invalid length. [ 3360.527321][T26216] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.16275'. [ 3360.545655][T15959] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3360.553546][T15959] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3360.627069][T12362] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3360.691147][T15958] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3360.729957][T15958] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3360.772491][T12362] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3363.869672][T26246] FAULT_INJECTION: forcing a failure. [ 3363.869672][T26246] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3363.956074][T26246] CPU: 0 PID: 26246 Comm: syz.5.16281 Not tainted syzkaller #0 [ 3363.963727][T26246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 3363.973850][T26246] Call Trace: [ 3363.977185][T26246] [ 3363.980162][T26246] dump_stack_lvl+0x188/0x24e [ 3363.984906][T26246] ? show_regs_print_info+0x12/0x12 [ 3363.990163][T26246] ? load_image+0x400/0x400 [ 3363.994728][T26246] ? __lock_acquire+0x7d10/0x7d10 [ 3363.999834][T26246] should_fail_ex+0x399/0x4d0 [ 3364.004589][T26246] _copy_from_user+0x2c/0x170 [ 3364.009334][T26246] __copy_msghdr+0x3b7/0x580 [ 3364.013996][T26246] ___sys_sendmsg+0x210/0x360 [ 3364.018752][T26246] ? __sys_sendmsg+0x290/0x290 [ 3364.023654][T26246] ? __lock_acquire+0x7d10/0x7d10 [ 3364.028846][T26246] __se_sys_sendmsg+0x1bb/0x2a0 [ 3364.033874][T26246] ? __x64_sys_sendmsg+0x80/0x80 [ 3364.038940][T26246] ? lockdep_hardirqs_on+0x94/0x140 [ 3364.044204][T26246] do_syscall_64+0x4c/0xa0 [ 3364.048675][T26246] ? clear_bhb_loop+0x60/0xb0 [ 3364.053408][T26246] ? clear_bhb_loop+0x60/0xb0 [ 3364.058141][T26246] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3364.064079][T26246] RIP: 0033:0x7f8ad939c799 [ 3364.068638][T26246] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3364.088408][T26246] RSP: 002b:00007f8ada2fe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3364.096885][T26246] RAX: ffffffffffffffda RBX: 00007f8ad9615fa0 RCX: 00007f8ad939c799 [ 3364.104900][T26246] RDX: 000000003004c041 RSI: 0000200000000080 RDI: 0000000000000005 [ 3364.112914][T26246] RBP: 00007f8ada2fe090 R08: 0000000000000000 R09: 0000000000000000 [ 3364.120940][T26246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3364.128953][T26246] R13: 00007f8ad9616038 R14: 00007f8ad9615fa0 R15: 00007ffe5e3ad638 [ 3364.137116][T26246] [ 3364.627932][T26251] netlink: 'syz.6.16283': attribute type 10 has an invalid length. [ 3365.314351][T26249] delete_channel: no stack [ 3365.412986][T26253] netlink: 'syz.0.16284': attribute type 10 has an invalid length. [ 3365.432291][T26253] netlink: 2 bytes leftover after parsing attributes in process `syz.0.16284'. [ 3365.470602][T26253] device bond0 entered promiscuous mode [ 3365.500908][T26253] device bond_slave_0 entered promiscuous mode [ 3365.528969][T26253] device bond_slave_1 entered promiscuous mode [ 3365.559736][T26253] device netdevsim0 entered promiscuous mode [ 3365.587307][T26253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3365.753658][T26272] netlink: 'syz.6.16288': attribute type 9 has an invalid length. [ 3365.819336][T26272] netlink: 126588 bytes leftover after parsing attributes in process `syz.6.16288'. [ 3365.853819][T26278] netlink: 'syz.3.16292': attribute type 10 has an invalid length. [ 3365.879533][T26278] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3365.896921][T26278] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3366.184964][T26289] netlink: 'syz.6.16296': attribute type 2 has an invalid length. [ 3366.223957][T26289] netlink: 'syz.6.16296': attribute type 8 has an invalid length. [ 3366.257123][T26289] netlink: 132 bytes leftover after parsing attributes in process `syz.6.16296'. [ 3367.094148][T26305] netlink: 'syz.4.16299': attribute type 10 has an invalid length. [ 3367.490003][T26305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3367.600381][T26305] team0: Port device bond0 added [ 3367.624083][T26314] IPv6: Can't replace route, no match found [ 3367.640996][T26313] mac80211_hwsim hwsim353 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 3367.649332][T26304] delete_channel: no stack [ 3367.685561][T26321] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16301'. [ 3368.623039][T26351] netlink: 'syz.3.16310': attribute type 2 has an invalid length. [ 3368.652181][T26351] netlink: 'syz.3.16310': attribute type 8 has an invalid length. [ 3368.683766][T26351] netlink: 132 bytes leftover after parsing attributes in process `syz.3.16310'. [ 3370.775712][T26370] netlink: 'syz.5.16309': attribute type 2 has an invalid length. [ 3370.950129][T26370] netlink: 132 bytes leftover after parsing attributes in process `syz.5.16309'. [ 3371.122329][T26392] netlink: 192 bytes leftover after parsing attributes in process `syz.6.16317'. [ 3371.247018][T26399] netlink: 'syz.6.16317': attribute type 21 has an invalid length. [ 3371.350420][T26399] netlink: 132 bytes leftover after parsing attributes in process `syz.6.16317'. [ 3371.392722][T26399] netlink: 28 bytes leftover after parsing attributes in process `syz.6.16317'. [ 3373.270323][T26450] netlink: 'syz.6.16333': attribute type 10 has an invalid length. [ 3373.468604][T26449] netlink: 132 bytes leftover after parsing attributes in process `syz.0.16332'. [ 3373.736431][T26446] delete_channel: no stack [ 3376.347281][T26508] netlink: 'syz.6.16350': attribute type 10 has an invalid length. [ 3376.387101][T26503] netlink: 'syz.5.16348': attribute type 10 has an invalid length. [ 3376.450974][T26502] delete_channel: no stack [ 3376.724644][T26524] netlink: 'syz.3.16355': attribute type 4 has an invalid length. [ 3376.747557][T26524] netlink: 176 bytes leftover after parsing attributes in process `syz.3.16355'. [ 3377.007267][T26533] FAULT_INJECTION: forcing a failure. [ 3377.007267][T26533] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3377.031628][T26533] CPU: 1 PID: 26533 Comm: syz.4.16357 Not tainted syzkaller #0 [ 3377.039241][T26533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 3377.049324][T26533] Call Trace: [ 3377.052618][T26533] [ 3377.055556][T26533] dump_stack_lvl+0x188/0x24e [ 3377.060253][T26533] ? show_regs_print_info+0x12/0x12 [ 3377.065465][T26533] ? load_image+0x400/0x400 [ 3377.069977][T26533] ? __lock_acquire+0x7d10/0x7d10 [ 3377.075016][T26533] should_fail_ex+0x399/0x4d0 [ 3377.079710][T26533] _copy_from_user+0x2c/0x170 [ 3377.084423][T26533] ___sys_sendmsg+0x1c3/0x360 [ 3377.089146][T26533] ? __sys_sendmsg+0x290/0x290 [ 3377.093974][T26533] ? __lock_acquire+0x7d10/0x7d10 [ 3377.099036][T26533] __se_sys_sendmsg+0x1bb/0x2a0 [ 3377.103903][T26533] ? ct_nmi_exit+0x145/0x1c0 [ 3377.108503][T26533] ? __x64_sys_sendmsg+0x80/0x80 [ 3377.113472][T26533] ? lockdep_hardirqs_on+0x94/0x140 [ 3377.118679][T26533] do_syscall_64+0x4c/0xa0 [ 3377.123108][T26533] ? clear_bhb_loop+0x60/0xb0 [ 3377.127792][T26533] ? clear_bhb_loop+0x60/0xb0 [ 3377.132485][T26533] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3377.138387][T26533] RIP: 0033:0x7f217359c799 [ 3377.142815][T26533] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3377.162433][T26533] RSP: 002b:00007f217446f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3377.170865][T26533] RAX: ffffffffffffffda RBX: 00007f2173815fa0 RCX: 00007f217359c799 [ 3377.178844][T26533] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 3377.186819][T26533] RBP: 00007f217446f090 R08: 0000000000000000 R09: 0000000000000000 [ 3377.194798][T26533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3377.202772][T26533] R13: 00007f2173816038 R14: 00007f2173815fa0 R15: 00007fff5fee2218 [ 3377.210763][T26533] [ 3377.720148][T26545] netlink: 'syz.4.16361': attribute type 4 has an invalid length. [ 3377.744314][T26545] netlink: 176 bytes leftover after parsing attributes in process `syz.4.16361'. [ 3378.443943][T26549] netlink: 'syz.0.16362': attribute type 10 has an invalid length. [ 3379.064492][T26578] device syzkaller0 entered promiscuous mode [ 3379.101807][T26574] netlink: 'syz.3.16370': attribute type 10 has an invalid length. [ 3379.133769][T26574] device bond0 left promiscuous mode [ 3379.154506][T26574] device bond_slave_0 left promiscuous mode [ 3379.179791][T26574] device bond_slave_1 left promiscuous mode [ 3379.225317][T26574] device netdevsim0 left promiscuous mode [ 3379.364697][T26573] delete_channel: no stack [ 3379.541400][T26591] netlink: 'syz.4.16374': attribute type 2 has an invalid length. [ 3379.556210][T26591] netlink: 'syz.4.16374': attribute type 8 has an invalid length. [ 3379.609002][T26591] netlink: 132 bytes leftover after parsing attributes in process `syz.4.16374'. [ 3381.411315][T26624] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.16381'. [ 3383.705243][T26602] netlink: 132 bytes leftover after parsing attributes in process `syz.5.16375'. [ 3384.074564][T26636] netlink: 'syz.5.16386': attribute type 3 has an invalid length. [ 3384.141484][T26638] netlink: 'syz.6.16384': attribute type 10 has an invalid length. [ 3384.166478][T26636] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.16386'. [ 3384.198524][T26634] delete_channel: no stack [ 3384.528985][T26649] netlink: 'syz.3.16388': attribute type 10 has an invalid length. [ 3384.871842][T26661] netlink: 'syz.3.16394': attribute type 2 has an invalid length. [ 3384.890456][T26661] netlink: 'syz.3.16394': attribute type 8 has an invalid length. [ 3384.965861][T26661] netlink: 132 bytes leftover after parsing attributes in process `syz.3.16394'. [ 3385.012353][T26673] netlink: 'syz.6.16396': attribute type 10 has an invalid length. [ 3386.137132][T26700] netlink: 'syz.5.16403': attribute type 10 has an invalid length. [ 3386.170376][T26699] delete_channel: no stack [ 3386.251337][T26703] netlink: 14 bytes leftover after parsing attributes in process `syz.3.16405'. [ 3387.150317][T26703] bond0: (slave bond_slave_0): Releasing backup interface [ 3387.729544][T26732] netlink: 'syz.4.16412': attribute type 2 has an invalid length. [ 3387.756084][T26732] netlink: 'syz.4.16412': attribute type 8 has an invalid length. [ 3387.764238][T26732] netlink: 132 bytes leftover after parsing attributes in process `syz.4.16412'. [ 3388.667581][T26754] netlink: 'syz.5.16419': attribute type 10 has an invalid length. [ 3388.724046][T26753] delete_channel: no stack [ 3389.129220][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 3389.136097][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 3390.259488][T26783] netlink: 'syz.4.16426': attribute type 3 has an invalid length. [ 3390.295390][T26783] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.16426'. [ 3390.777137][T26804] FAULT_INJECTION: forcing a failure. [ 3390.777137][T26804] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3390.800658][T26804] CPU: 0 PID: 26804 Comm: syz.5.16429 Not tainted syzkaller #0 [ 3390.808272][T26804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 3390.818345][T26804] Call Trace: [ 3390.821630][T26804] [ 3390.824564][T26804] dump_stack_lvl+0x188/0x24e [ 3390.829260][T26804] ? show_regs_print_info+0x12/0x12 [ 3390.834467][T26804] ? load_image+0x400/0x400 [ 3390.839156][T26804] ? __lock_acquire+0x7d10/0x7d10 [ 3390.844194][T26804] should_fail_ex+0x399/0x4d0 [ 3390.848891][T26804] strncpy_from_user+0x32/0x350 [ 3390.853763][T26804] bpf_prog_load+0x1f3/0x1560 [ 3390.858473][T26804] ? map_freeze+0x390/0x390 [ 3390.862986][T26804] ? __might_fault+0xa6/0x120 [ 3390.867684][T26804] ? __might_fault+0xa6/0x120 [ 3390.872362][T26804] ? __might_fault+0xc2/0x120 [ 3390.877045][T26804] ? __might_fault+0xa6/0x120 [ 3390.881730][T26804] ? bpf_lsm_bpf+0x5/0x10 [ 3390.886151][T26804] ? security_bpf+0x7a/0xa0 [ 3390.890663][T26804] __sys_bpf+0x5b8/0x780 [ 3390.894921][T26804] ? bpf_link_show_fdinfo+0x380/0x380 [ 3390.900313][T26804] ? lock_chain_count+0x20/0x20 [ 3390.905178][T26804] __x64_sys_bpf+0x78/0x90 [ 3390.909604][T26804] do_syscall_64+0x4c/0xa0 [ 3390.914036][T26804] ? clear_bhb_loop+0x60/0xb0 [ 3390.918723][T26804] ? clear_bhb_loop+0x60/0xb0 [ 3390.923581][T26804] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3390.929479][T26804] RIP: 0033:0x7f8ad939c799 [ 3390.933901][T26804] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3390.953520][T26804] RSP: 002b:00007f8ada2fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3390.962006][T26804] RAX: ffffffffffffffda RBX: 00007f8ad9615fa0 RCX: 00007f8ad939c799 [ 3390.969987][T26804] RDX: 0000000000000094 RSI: 0000200000000080 RDI: 0000000000000005 [ 3390.977991][T26804] RBP: 00007f8ada2fe090 R08: 0000000000000000 R09: 0000000000000000 [ 3390.986068][T26804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3390.994045][T26804] R13: 00007f8ad9616038 R14: 00007f8ad9615fa0 R15: 00007ffe5e3ad638 [ 3391.002052][T26804] [ 3391.084512][T26805] netlink: 'syz.0.16428': attribute type 2 has an invalid length. [ 3391.103927][T26805] netlink: 'syz.0.16428': attribute type 8 has an invalid length. [ 3391.170839][T26805] netlink: 132 bytes leftover after parsing attributes in process `syz.0.16428'. [ 3391.341312][T26813] netlink: 'syz.3.16433': attribute type 3 has an invalid length. [ 3391.368756][T26813] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.16433'. [ 3391.462117][T26814] netlink: 'syz.6.16432': attribute type 10 has an invalid length. [ 3391.541467][T26808] delete_channel: no stack [ 3392.373937][T26832] FAULT_INJECTION: forcing a failure. [ 3392.373937][T26832] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3392.445823][T26832] CPU: 0 PID: 26832 Comm: syz.6.16440 Not tainted syzkaller #0 [ 3392.453472][T26832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 3392.463614][T26832] Call Trace: [ 3392.466925][T26832] [ 3392.469885][T26832] dump_stack_lvl+0x188/0x24e [ 3392.474606][T26832] ? show_regs_print_info+0x12/0x12 [ 3392.479832][T26832] ? load_image+0x400/0x400 [ 3392.484358][T26832] ? __lock_acquire+0x7d10/0x7d10 [ 3392.489400][T26832] ? perf_trace_lock+0x301/0x390 [ 3392.494364][T26832] should_fail_ex+0x399/0x4d0 [ 3392.499072][T26832] _copy_from_user+0x2c/0x170 [ 3392.503767][T26832] dev_ethtool+0xc2/0x12f0 [ 3392.508214][T26832] ? ethtool_get_module_eeprom_call+0x170/0x170 [ 3392.514474][T26832] ? __lock_acquire+0x7d10/0x7d10 [ 3392.519519][T26832] ? __kmem_cache_free+0xb6/0x1f0 [ 3392.524566][T26832] ? full_name_hash+0x8e/0xe0 [ 3392.529265][T26832] ? dev_load+0x1d/0x1e0 [ 3392.533609][T26832] ? dev_load+0x1d/0x1e0 [ 3392.537869][T26832] dev_ioctl+0x474/0xe80 [ 3392.542129][T26832] sock_do_ioctl+0x245/0x320 [ 3392.546747][T26832] ? sock_show_fdinfo+0xb0/0xb0 [ 3392.551639][T26832] sock_ioctl+0x4d2/0x710 [ 3392.555993][T26832] ? sock_poll+0x410/0x410 [ 3392.560445][T26832] ? bpf_lsm_file_ioctl+0x5/0x10 [ 3392.565399][T26832] ? security_file_ioctl+0x7c/0xa0 [ 3392.570613][T26832] ? sock_poll+0x410/0x410 [ 3392.575051][T26832] __se_sys_ioctl+0xfa/0x170 [ 3392.579750][T26832] do_syscall_64+0x4c/0xa0 [ 3392.584185][T26832] ? clear_bhb_loop+0x60/0xb0 [ 3392.588885][T26832] ? clear_bhb_loop+0x60/0xb0 [ 3392.593585][T26832] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3392.599494][T26832] RIP: 0033:0x7fc93719c799 [ 3392.604014][T26832] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3392.623641][T26832] RSP: 002b:00007fc93807c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3392.632078][T26832] RAX: ffffffffffffffda RBX: 00007fc937415fa0 RCX: 00007fc93719c799 [ 3392.640065][T26832] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000005 [ 3392.648048][T26832] RBP: 00007fc93807c090 R08: 0000000000000000 R09: 0000000000000000 [ 3392.656036][T26832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3392.664021][T26832] R13: 00007fc937416038 R14: 00007fc937415fa0 R15: 00007ffcdac7df78 [ 3392.672116][T26832] [ 3393.372498][T26852] netlink: 'syz.0.16448': attribute type 2 has an invalid length. [ 3393.410779][T26852] netlink: 'syz.0.16448': attribute type 8 has an invalid length. [ 3393.456594][T26852] netlink: 132 bytes leftover after parsing attributes in process `syz.0.16448'. [ 3394.163639][T26861] netlink: 'syz.5.16451': attribute type 10 has an invalid length. [ 3394.424254][T26856] delete_channel: no stack [ 3396.642655][T26883] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.16458'. [ 3397.430976][T26904] netlink: 'syz.4.16465': attribute type 3 has an invalid length. [ 3397.486075][T26904] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.16465'. [ 3397.680979][T26913] netlink: 'syz.0.16468': attribute type 2 has an invalid length. [ 3397.734431][T26913] netlink: 'syz.0.16468': attribute type 8 has an invalid length. [ 3397.844481][T26913] netlink: 132 bytes leftover after parsing attributes in process `syz.0.16468'. [ 3397.985611][T26914] netlink: 'syz.5.16467': attribute type 10 has an invalid length. [ 3398.038008][T26910] delete_channel: no stack [ 3398.391451][T26930] netlink: 'syz.4.16472': attribute type 1 has an invalid length. [ 3398.417243][T26930] netlink: 'syz.4.16472': attribute type 21 has an invalid length. [ 3398.435734][T26930] netlink: 132 bytes leftover after parsing attributes in process `syz.4.16472'. [ 3398.444985][T26930] netlink: 'syz.4.16472': attribute type 1 has an invalid length. [ 3398.777248][T26936] netlink: 144 bytes leftover after parsing attributes in process `syz.3.16476'. [ 3398.933928][T26935] netlink: 'syz.6.16474': attribute type 1 has an invalid length. [ 3398.990933][T26935] netlink: 105120 bytes leftover after parsing attributes in process `syz.6.16474'. [ 3399.842203][T26952] netlink: 'syz.6.16491': attribute type 10 has an invalid length. [ 3400.063351][T26952] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 3400.352343][T26970] netlink: 'syz.6.16486': attribute type 2 has an invalid length. [ 3400.368161][T26970] netlink: 132 bytes leftover after parsing attributes in process `syz.6.16486'. [ 3400.587517][T26965] device bond0 left promiscuous mode [ 3400.593362][T26965] device bond_slave_0 left promiscuous mode [ 3400.611786][T26965] device bond_slave_1 left promiscuous mode [ 3400.619027][T26965] device netdevsim0 left promiscuous mode [ 3400.658830][T26971] device pim6reg1 entered promiscuous mode [ 3400.695932][T26964] delete_channel: no stack [ 3401.117042][T26985] device syz_tun entered promiscuous mode [ 3401.138216][T26985] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 3401.924944][T27007] netlink: 132 bytes leftover after parsing attributes in process `syz.3.16503'. [ 3402.935816][T27028] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.16511'. [ 3403.874305][T27043] netlink: 830 bytes leftover after parsing attributes in process `syz.5.16515'. [ 3403.962522][T27052] validate_nla: 5 callbacks suppressed [ 3403.962545][T27052] netlink: 'syz.4.16519': attribute type 2 has an invalid length. [ 3404.137277][T27052] netlink: 'syz.4.16519': attribute type 8 has an invalid length. [ 3404.272777][T27052] netlink: 132 bytes leftover after parsing attributes in process `syz.4.16519'. [ 3406.967185][T27083] netlink: 'syz.3.16531': attribute type 41 has an invalid length. [ 3407.086657][T27084] netlink: 'syz.3.16531': attribute type 21 has an invalid length. [ 3407.186302][T27084] netlink: 'syz.3.16531': attribute type 4 has an invalid length. [ 3409.513164][T27097] platform regulatory.0: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 3409.671989][T27097] platform regulatory.0: Direct firmware load for regulatory.db.p7s failed with error -4 [ 3409.814934][T27097] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db.p7s [ 3410.855724][T27107] netlink: 'syz.4.16539': attribute type 2 has an invalid length. [ 3410.863698][T27107] netlink: 'syz.4.16539': attribute type 8 has an invalid length. [ 3411.223021][T27107] netlink: 132 bytes leftover after parsing attributes in process `syz.4.16539'. [ 3411.390943][T27108] device wg2 entered promiscuous mode [ 3411.769424][T27119] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.16541'. [ 3412.196918][T27130] FAULT_INJECTION: forcing a failure. [ 3412.196918][T27130] name failslab, interval 1, probability 0, space 0, times 0 [ 3412.211152][T27130] CPU: 0 PID: 27130 Comm: syz.5.16546 Not tainted syzkaller #0 [ 3412.218762][T27130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 3412.228844][T27130] Call Trace: [ 3412.232145][T27130] [ 3412.235100][T27130] dump_stack_lvl+0x188/0x24e [ 3412.239812][T27130] ? show_regs_print_info+0x12/0x12 [ 3412.245056][T27130] ? load_image+0x400/0x400 [ 3412.249596][T27130] ? __might_sleep+0xd0/0xd0 [ 3412.254206][T27130] ? __lock_acquire+0x7d10/0x7d10 [ 3412.259259][T27130] should_fail_ex+0x399/0x4d0 [ 3412.263975][T27130] should_failslab+0x5/0x20 [ 3412.268513][T27130] slab_pre_alloc_hook+0x59/0x310 [ 3412.273577][T27130] ? sctp_association_new+0x86/0x25d0 [ 3412.278982][T27130] __kmem_cache_alloc_node+0x4f/0x260 [ 3412.284376][T27130] ? sctp_association_new+0x86/0x25d0 [ 3412.289781][T27130] kmalloc_trace+0x26/0xe0 [ 3412.294229][T27130] sctp_association_new+0x86/0x25d0 [ 3412.299469][T27130] ? sctp_do_bind+0x6bd/0x990 [ 3412.304189][T27130] sctp_connect_new_asoc+0x2da/0x6a0 [ 3412.309517][T27130] ? __sctp_connect+0xd80/0xd80 [ 3412.314396][T27130] ? __local_bh_enable_ip+0x136/0x1c0 [ 3412.319804][T27130] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 3412.325376][T27130] ? security_sctp_bind_connect+0x85/0xb0 [ 3412.331120][T27130] sctp_sendmsg+0x15b0/0x2940 [ 3412.335843][T27130] ? sctp_getsockopt+0x8a0/0x8a0 [ 3412.340814][T27130] ? __lock_acquire+0x7d10/0x7d10 [ 3412.345869][T27130] ? aa_af_perm+0x340/0x340 [ 3412.350395][T27130] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 3412.356846][T27130] ? inet_sendmsg+0xe5/0x2f0 [ 3412.361471][T27130] ? inet_send_prepare+0x260/0x260 [ 3412.366605][T27130] ____sys_sendmsg+0x5be/0x970 [ 3412.371423][T27130] ? __sys_sendmsg_sock+0x30/0x30 [ 3412.376616][T27130] ? __import_iovec+0x315/0x500 [ 3412.381545][T27130] ? import_iovec+0x6f/0xa0 [ 3412.386074][T27130] ___sys_sendmsg+0x2a2/0x360 [ 3412.390808][T27130] ? __sys_sendmsg+0x290/0x290 [ 3412.395627][T27130] ? __lock_acquire+0x7d10/0x7d10 [ 3412.400719][T27130] __se_sys_sendmsg+0x1bb/0x2a0 [ 3412.405779][T27130] ? __x64_sys_sendmsg+0x80/0x80 [ 3412.410758][T27130] ? lockdep_hardirqs_on+0x94/0x140 [ 3412.415983][T27130] do_syscall_64+0x4c/0xa0 [ 3412.420426][T27130] ? clear_bhb_loop+0x60/0xb0 [ 3412.425124][T27130] ? clear_bhb_loop+0x60/0xb0 [ 3412.429827][T27130] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3412.435742][T27130] RIP: 0033:0x7f8ad939c799 [ 3412.440180][T27130] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3412.459808][T27130] RSP: 002b:00007f8ada2fe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3412.468252][T27130] RAX: ffffffffffffffda RBX: 00007f8ad9615fa0 RCX: 00007f8ad939c799 [ 3412.476248][T27130] RDX: 0000000000000041 RSI: 0000200000000600 RDI: 0000000000000003 [ 3412.484240][T27130] RBP: 00007f8ada2fe090 R08: 0000000000000000 R09: 0000000000000000 [ 3412.492233][T27130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3412.500219][T27130] R13: 00007f8ad9616038 R14: 00007f8ad9615fa0 R15: 00007ffe5e3ad638 [ 3412.508224][T27130] [ 3412.643778][T27125] netlink: 'syz.4.16543': attribute type 10 has an invalid length. [ 3412.849279][T27124] delete_channel: no stack [ 3413.305466][T27163] FAULT_INJECTION: forcing a failure. [ 3413.305466][T27163] name failslab, interval 1, probability 0, space 0, times 0 [ 3413.419105][T27163] CPU: 1 PID: 27163 Comm: syz.4.16552 Not tainted syzkaller #0 [ 3413.426738][T27163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 3413.436838][T27163] Call Trace: [ 3413.440155][T27163] [ 3413.443121][T27163] dump_stack_lvl+0x188/0x24e [ 3413.447855][T27163] ? show_regs_print_info+0x12/0x12 [ 3413.453100][T27163] ? load_image+0x400/0x400 [ 3413.457655][T27163] ? __might_sleep+0xd0/0xd0 [ 3413.462297][T27163] ? __lock_acquire+0x7d10/0x7d10 [ 3413.467377][T27163] should_fail_ex+0x399/0x4d0 [ 3413.472111][T27163] should_failslab+0x5/0x20 [ 3413.476663][T27163] slab_pre_alloc_hook+0x59/0x310 [ 3413.481741][T27163] ? __lock_acquire+0x7d10/0x7d10 [ 3413.486812][T27163] ? kvmalloc_node+0x6c/0x180 [ 3413.491539][T27163] __kmem_cache_alloc_node+0x4f/0x260 [ 3413.496962][T27163] ? schedule_delayed_monitor_work+0x160/0x160 [ 3413.503173][T27163] ? kvmalloc_node+0x6c/0x180 [ 3413.507901][T27163] __kmalloc_node+0xa0/0x240 [ 3413.512544][T27163] kvmalloc_node+0x6c/0x180 [ 3413.517099][T27163] bpf_test_run_xdp_live+0x1dd/0x1a90 [ 3413.522524][T27163] ? 0xffffffffa00041c0 [ 3413.526717][T27163] ? text_poke_copy+0x79/0x90 [ 3413.531436][T27163] ? 0xffffffffa00041c0 [ 3413.535609][T27163] ? 0xffffffffa00041c0 [ 3413.539777][T27163] ? bpf_dispatcher_change_prog+0xcbb/0xf10 [ 3413.545706][T27163] ? 0xffffffffa00041c0 [ 3413.549986][T27163] ? xdp_convert_md_to_buff+0x330/0x330 [ 3413.555577][T27163] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 3413.561835][T27163] ? bpf_test_init+0x119/0x140 [ 3413.566612][T27163] ? xdp_convert_md_to_buff+0x5b/0x330 [ 3413.572084][T27163] bpf_prog_test_run_xdp+0x736/0xf10 [ 3413.577398][T27163] ? dev_put+0x80/0x80 [ 3413.581492][T27163] ? dev_put+0x80/0x80 [ 3413.585573][T27163] bpf_prog_test_run+0x31e/0x390 [ 3413.590533][T27163] __sys_bpf+0x62b/0x780 [ 3413.594788][T27163] ? bpf_link_show_fdinfo+0x380/0x380 [ 3413.600195][T27163] ? lock_chain_count+0x20/0x20 [ 3413.605066][T27163] __x64_sys_bpf+0x78/0x90 [ 3413.609496][T27163] do_syscall_64+0x4c/0xa0 [ 3413.613927][T27163] ? clear_bhb_loop+0x60/0xb0 [ 3413.618613][T27163] ? clear_bhb_loop+0x60/0xb0 [ 3413.623300][T27163] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3413.629207][T27163] RIP: 0033:0x7f217359c799 [ 3413.633629][T27163] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3413.653252][T27163] RSP: 002b:00007f217446f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3413.661684][T27163] RAX: ffffffffffffffda RBX: 00007f2173815fa0 RCX: 00007f217359c799 [ 3413.669663][T27163] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 3413.677654][T27163] RBP: 00007f217446f090 R08: 0000000000000000 R09: 0000000000000000 [ 3413.685636][T27163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3413.693619][T27163] R13: 00007f2173816038 R14: 00007f2173815fa0 R15: 00007fff5fee2218 [ 3413.701610][T27163] [ 3414.017190][T27175] netlink: 'syz.5.16554': attribute type 2 has an invalid length. [ 3414.078913][T27175] netlink: 'syz.5.16554': attribute type 8 has an invalid length. [ 3414.108044][T27175] netlink: 132 bytes leftover after parsing attributes in process `syz.5.16554'. [ 3414.753767][T27192] mac80211_hwsim hwsim375 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 3415.161803][T27203] netlink: 132 bytes leftover after parsing attributes in process `syz.5.16565'. [ 3415.518469][T27211] netlink: 'syz.5.16569': attribute type 2 has an invalid length. [ 3415.545713][T27211] netlink: 'syz.5.16569': attribute type 8 has an invalid length. [ 3415.736334][T27211] netlink: 132 bytes leftover after parsing attributes in process `syz.5.16569'. [ 3416.699546][T27226] netlink: 160 bytes leftover after parsing attributes in process `syz.3.16572'. [ 3416.774941][T27226] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 3418.795511][ T4292] wlan1: Trigger new scan to find an IBSS to join [ 3418.946689][T27240] netlink: 177 bytes leftover after parsing attributes in process `syz.4.16578'. [ 3419.002479][T27242] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.16577'. [ 3419.064085][T27243] netlink: 'syz.5.16579': attribute type 11 has an invalid length. [ 3419.100248][T27243] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.16579'. [ 3419.597024][T27243] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3419.713851][T27258] netlink: 'syz.6.16583': attribute type 10 has an invalid length. [ 3419.745045][T27258] netlink: 2 bytes leftover after parsing attributes in process `syz.6.16583'. [ 3419.769230][T27258] device bond0 entered promiscuous mode [ 3419.775210][T27258] device bond_slave_0 entered promiscuous mode [ 3419.809752][T27258] device bond_slave_1 entered promiscuous mode [ 3419.832764][T27258] device netdevsim0 entered promiscuous mode [ 3419.956164][T27258] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3420.229309][T27258] team0: Port device bond0 removed [ 3420.277585][T27267] netlink: 'syz.5.16586': attribute type 2 has an invalid length. [ 3420.295755][T27267] netlink: 'syz.5.16586': attribute type 8 has an invalid length. [ 3420.334161][T27267] netlink: 132 bytes leftover after parsing attributes in process `syz.5.16586'. [ 3421.059199][T27280] netlink: 'syz.6.16590': attribute type 10 has an invalid length. [ 3421.897157][T27280] team0: Device hsr_slave_0 failed to register rx_handler [ 3421.915545][ T484] Bluetooth: hci6: command 0x0406 tx timeout [ 3421.958674][T27288] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.16593'. [ 3421.980775][T27290] netlink: 'syz.0.16592': attribute type 10 has an invalid length. [ 3422.013298][T27290] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 3422.403777][T27309] netlink: 'syz.5.16601': attribute type 10 has an invalid length. [ 3422.448104][T27309] netlink: 2 bytes leftover after parsing attributes in process `syz.5.16601'. [ 3422.465760][T27309] device bond0 entered promiscuous mode [ 3422.471921][T27309] device bond_slave_1 entered promiscuous mode [ 3422.482832][T27309] device netdevsim0 entered promiscuous mode [ 3422.534809][T27309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3422.553653][T27307] netlink: 'syz.6.16599': attribute type 10 has an invalid length. [ 3422.582531][T27307] device bond0 left promiscuous mode [ 3422.589177][T27307] device bond_slave_0 left promiscuous mode [ 3422.616345][T27307] device bond_slave_1 left promiscuous mode [ 3422.631367][T27307] device netdevsim0 left promiscuous mode [ 3422.718702][T27307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3422.793359][T27307] team0: Port device bond0 added [ 3422.829854][T27311] netlink: 'syz.0.16598': attribute type 10 has an invalid length. [ 3422.875873][T27158] wlan1: Trigger new scan to find an IBSS to join [ 3422.899105][T27310] delete_channel: no stack [ 3422.914235][T27304] delete_channel: no stack [ 3422.977510][T27158] wlan1: Creating new IBSS network, BSSID 36:59:60:66:ec:7f [ 3423.219206][T27322] device syzkaller0 entered promiscuous mode [ 3426.576364][T27359] netlink: 'syz.4.16615': attribute type 10 has an invalid length. [ 3426.590145][T27359] netlink: 2 bytes leftover after parsing attributes in process `syz.4.16615'. [ 3426.603200][T27359] device bond0 entered promiscuous mode [ 3426.612134][T27359] device bond_slave_0 entered promiscuous mode [ 3426.649398][T27359] device bond_slave_1 entered promiscuous mode [ 3426.673088][T27359] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3426.807597][T27359] team0: Port device bond0 removed [ 3426.877743][T27377] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.16618'. [ 3428.465375][T27409] sctp: [Deprecated]: syz.0.16631 (pid 27409) Use of int in max_burst socket option deprecated. [ 3428.465375][T27409] Use struct sctp_assoc_value instead [ 3428.541078][T27407] device syzkaller0 entered promiscuous mode [ 3429.189827][T27426] netlink: 'syz.6.16637': attribute type 9 has an invalid length. [ 3429.207333][T27426] netlink: 126588 bytes leftover after parsing attributes in process `syz.6.16637'. [ 3429.246523][T27426] netlink: 180900 bytes leftover after parsing attributes in process `syz.6.16637'. [ 3429.262952][T27426] net_ratelimit: 318 callbacks suppressed [ 3429.262978][T27426] openvswitch: netlink: Flow actions attr not present in new flow. [ 3429.483126][T27433] netlink: 'syz.6.16639': attribute type 29 has an invalid length. [ 3429.492028][T27434] FAULT_INJECTION: forcing a failure. [ 3429.492028][T27434] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3429.516596][T27434] CPU: 1 PID: 27434 Comm: syz.4.16640 Not tainted syzkaller #0 [ 3429.524319][T27434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 3429.534407][T27434] Call Trace: [ 3429.537711][T27434] [ 3429.540671][T27434] dump_stack_lvl+0x188/0x24e [ 3429.545400][T27434] ? show_regs_print_info+0x12/0x12 [ 3429.550637][T27434] ? load_image+0x400/0x400 [ 3429.555171][T27434] ? __lock_acquire+0x7d10/0x7d10 [ 3429.560230][T27434] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 3429.566086][T27434] should_fail_ex+0x399/0x4d0 [ 3429.570791][T27434] _copy_from_user+0x2c/0x170 [ 3429.575487][T27434] ___sys_sendmsg+0x1c3/0x360 [ 3429.580282][T27434] ? __sys_sendmsg+0x290/0x290 [ 3429.585095][T27434] ? __lock_acquire+0x7d10/0x7d10 [ 3429.590178][T27434] __se_sys_sendmsg+0x1bb/0x2a0 [ 3429.595052][T27434] ? __x64_sys_sendmsg+0x80/0x80 [ 3429.600033][T27434] ? lockdep_hardirqs_on+0x94/0x140 [ 3429.605254][T27434] do_syscall_64+0x4c/0xa0 [ 3429.609692][T27434] ? clear_bhb_loop+0x60/0xb0 [ 3429.614395][T27434] ? clear_bhb_loop+0x60/0xb0 [ 3429.619090][T27434] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3429.624995][T27434] RIP: 0033:0x7f217359c799 [ 3429.629429][T27434] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3429.649070][T27434] RSP: 002b:00007f217446f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3429.657500][T27434] RAX: ffffffffffffffda RBX: 00007f2173815fa0 RCX: 00007f217359c799 [ 3429.665484][T27434] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 3429.673471][T27434] RBP: 00007f217446f090 R08: 0000000000000000 R09: 0000000000000000 [ 3429.681456][T27434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3429.689439][T27434] R13: 00007f2173816038 R14: 00007f2173815fa0 R15: 00007fff5fee2218 [ 3429.697455][T27434] [ 3429.740473][T27434] netlink: 180900 bytes leftover after parsing attributes in process `syz.4.16640'. [ 3429.757337][T27434] openvswitch: netlink: Flow actions attr not present in new flow. [ 3430.007519][T27439] netlink: 'syz.4.16641': attribute type 9 has an invalid length. [ 3430.030594][T27439] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.16641'. [ 3432.821890][T27433] netlink: 'syz.6.16639': attribute type 29 has an invalid length. [ 3432.839962][T27454] IPv6: Can't replace route, no match found [ 3432.856559][T27455] mac80211_hwsim hwsim362 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 3432.926769][T27456] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16646'. [ 3433.153398][T27471] netlink: 156 bytes leftover after parsing attributes in process `syz.4.16649'. [ 3433.518474][T27461] sock: sock_set_timeout: `syz.5.16648' (pid 27461) tries to set negative timeout [ 3434.276435][T27494] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.16656'. [ 3434.340816][T27494] netlink: 180900 bytes leftover after parsing attributes in process `syz.4.16656'. [ 3434.381631][T27494] openvswitch: netlink: Flow actions attr not present in new flow. [ 3434.394421][T27496] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.16657'. [ 3434.768683][T27499] netlink: 'syz.3.16658': attribute type 10 has an invalid length. [ 3434.938134][T27499] device wlan1 left promiscuous mode [ 3435.820774][T27532] netlink: 15487 bytes leftover after parsing attributes in process `syz.6.16671'. [ 3436.044118][T27538] netlink: 132 bytes leftover after parsing attributes in process `syz.5.16673'. [ 3436.123159][T27540] netlink: 'syz.3.16674': attribute type 10 has an invalid length. [ 3436.443283][T27551] netlink: 'syz.0.16676': attribute type 4 has an invalid length. [ 3436.537072][T27551] netlink: 176 bytes leftover after parsing attributes in process `syz.0.16676'. [ 3436.811230][T27560] netlink: 'syz.4.16680': attribute type 2 has an invalid length. [ 3436.819712][T27560] netlink: 'syz.4.16680': attribute type 8 has an invalid length. [ 3436.828244][T27560] netlink: 132 bytes leftover after parsing attributes in process `syz.4.16680'. [ 3436.844561][T27550] netlink: 'syz.6.16678': attribute type 39 has an invalid length. [ 3437.502096][T27572] netlink: 'syz.4.16684': attribute type 13 has an invalid length. [ 3437.527677][T27572] netlink: 164 bytes leftover after parsing attributes in process `syz.4.16684'. [ 3437.556445][T27572] erspan0: refused to change device tx_queue_len [ 3437.656865][T27582] netlink: 'syz.5.16687': attribute type 10 has an invalid length. [ 3437.774141][T27586] netlink: 'syz.3.16689': attribute type 4 has an invalid length. [ 3437.801966][T27586] netlink: 176 bytes leftover after parsing attributes in process `syz.3.16689'. [ 3437.843323][T27590] FAULT_INJECTION: forcing a failure. [ 3437.843323][T27590] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3437.864183][T27590] CPU: 0 PID: 27590 Comm: syz.0.16690 Not tainted syzkaller #0 [ 3437.871801][T27590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 3437.881899][T27590] Call Trace: [ 3437.885211][T27590] [ 3437.888178][T27590] dump_stack_lvl+0x188/0x24e [ 3437.892905][T27590] ? show_regs_print_info+0x12/0x12 [ 3437.898147][T27590] ? load_image+0x400/0x400 [ 3437.902696][T27590] ? __lock_acquire+0x7d10/0x7d10 [ 3437.907777][T27590] should_fail_ex+0x399/0x4d0 [ 3437.912502][T27590] _copy_from_user+0x2c/0x170 [ 3437.917218][T27590] iovec_from_user+0x143/0x360 [ 3437.922025][T27590] __import_iovec+0x6d/0x500 [ 3437.926661][T27590] import_iovec+0x6f/0xa0 [ 3437.931021][T27590] ___sys_sendmsg+0x252/0x360 [ 3437.935741][T27590] ? __sys_sendmsg+0x290/0x290 [ 3437.940578][T27590] ? __lock_acquire+0x7d10/0x7d10 [ 3437.945678][T27590] __se_sys_sendmsg+0x1bb/0x2a0 [ 3437.950581][T27590] ? __x64_sys_sendmsg+0x80/0x80 [ 3437.955585][T27590] ? lockdep_hardirqs_on+0x94/0x140 [ 3437.960820][T27590] do_syscall_64+0x4c/0xa0 [ 3437.965273][T27590] ? clear_bhb_loop+0x60/0xb0 [ 3437.969987][T27590] ? clear_bhb_loop+0x60/0xb0 [ 3437.974706][T27590] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3437.980630][T27590] RIP: 0033:0x7f71dfd9c799 [ 3437.985077][T27590] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3438.004731][T27590] RSP: 002b:00007f71e0c65028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3438.013193][T27590] RAX: ffffffffffffffda RBX: 00007f71e0015fa0 RCX: 00007f71dfd9c799 [ 3438.021229][T27590] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 3438.029246][T27590] RBP: 00007f71e0c65090 R08: 0000000000000000 R09: 0000000000000000 [ 3438.037257][T27590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3438.045262][T27590] R13: 00007f71e0016038 R14: 00007f71e0015fa0 R15: 00007ffe6f78cdf8 [ 3438.053290][T27590] [ 3438.816376][T27589] device syzkaller0 entered promiscuous mode [ 3439.062201][T27597] netlink: 'syz.3.16694': attribute type 2 has an invalid length. [ 3439.073838][T27597] netlink: 'syz.3.16694': attribute type 8 has an invalid length. [ 3439.085622][T27597] netlink: 132 bytes leftover after parsing attributes in process `syz.3.16694'. [ 3439.099652][T27604] netlink: 'syz.5.16695': attribute type 4 has an invalid length. [ 3440.265061][T27627] FAULT_INJECTION: forcing a failure. [ 3440.265061][T27627] name failslab, interval 1, probability 0, space 0, times 0 [ 3440.296324][T27627] CPU: 0 PID: 27627 Comm: syz.3.16704 Not tainted syzkaller #0 [ 3440.303948][T27627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 3440.314049][T27627] Call Trace: [ 3440.317364][T27627] [ 3440.320327][T27627] dump_stack_lvl+0x188/0x24e [ 3440.325050][T27627] ? show_regs_print_info+0x12/0x12 [ 3440.330302][T27627] ? load_image+0x400/0x400 [ 3440.334854][T27627] ? __might_sleep+0xd0/0xd0 [ 3440.339480][T27627] ? __lock_acquire+0x7d10/0x7d10 [ 3440.344557][T27627] should_fail_ex+0x399/0x4d0 [ 3440.349292][T27627] should_failslab+0x5/0x20 [ 3440.353862][T27627] slab_pre_alloc_hook+0x59/0x310 [ 3440.358941][T27627] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 3440.364702][T27627] __kmem_cache_alloc_node+0x4f/0x260 [ 3440.370120][T27627] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 3440.375966][T27627] __kmalloc+0xa0/0x240 [ 3440.380146][T27627] tomoyo_realpath_from_path+0xdf/0x5d0 [ 3440.385722][T27627] ? tomoyo_path_number_perm+0x205/0x650 [ 3440.391364][T27627] tomoyo_path_number_perm+0x22f/0x650 [ 3440.396839][T27627] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 3440.402305][T27627] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 3440.408068][T27627] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 3440.414245][T27627] security_file_ioctl+0x6c/0xa0 [ 3440.419193][T27627] __se_sys_ioctl+0x48/0x170 [ 3440.423798][T27627] do_syscall_64+0x4c/0xa0 [ 3440.428221][T27627] ? clear_bhb_loop+0x60/0xb0 [ 3440.432924][T27627] ? clear_bhb_loop+0x60/0xb0 [ 3440.437620][T27627] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3440.443530][T27627] RIP: 0033:0x7f6169b9c799 [ 3440.447955][T27627] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3440.467572][T27627] RSP: 002b:00007f616aad0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3440.476003][T27627] RAX: ffffffffffffffda RBX: 00007f6169e15fa0 RCX: 00007f6169b9c799 [ 3440.483985][T27627] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000046 [ 3440.491961][T27627] RBP: 00007f616aad0090 R08: 0000000000000000 R09: 0000000000000000 [ 3440.499942][T27627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3440.507921][T27627] R13: 00007f6169e16038 R14: 00007f6169e15fa0 R15: 00007ffd35c9b168 [ 3440.515911][T27627] [ 3440.565293][T27627] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3444.004472][T27649] netlink: 'syz.3.16710': attribute type 2 has an invalid length. [ 3444.024826][T27649] netlink: 'syz.3.16710': attribute type 8 has an invalid length. [ 3444.062570][T27649] __nla_validate_parse: 1 callbacks suppressed [ 3444.062588][T27649] netlink: 132 bytes leftover after parsing attributes in process `syz.3.16710'. [ 3444.174655][T27669] netlink: 'syz.5.16714': attribute type 21 has an invalid length. [ 3444.195626][T27669] netlink: 'syz.5.16714': attribute type 6 has an invalid length. [ 3444.212858][T27669] netlink: 132 bytes leftover after parsing attributes in process `syz.5.16714'. [ 3444.673870][T27676] netlink: 'syz.6.16717': attribute type 10 has an invalid length. [ 3444.929847][T27676] team0: Port device wlan1 added [ 3445.734193][T27705] netlink: 'syz.4.16725': attribute type 2 has an invalid length. [ 3445.784247][T27705] netlink: 'syz.4.16725': attribute type 8 has an invalid length. [ 3445.845453][T27705] netlink: 132 bytes leftover after parsing attributes in process `syz.4.16725'. [ 3446.409344][T27730] netlink: 14 bytes leftover after parsing attributes in process `syz.6.16734'. [ 3446.427781][T27730] device syz_tun entered promiscuous mode [ 3446.718608][T27732] netlink: 'syz.5.16735': attribute type 10 has an invalid length. [ 3447.429298][T27757] netlink: 14 bytes leftover after parsing attributes in process `syz.0.16743'. [ 3447.587173][T27757] bond0: (slave bond_slave_0): Releasing backup interface [ 3447.790901][T27764] netlink: 55631 bytes leftover after parsing attributes in process `syz.5.16745'. [ 3447.826170][T27775] netlink: 'syz.4.16746': attribute type 3 has an invalid length. [ 3447.874255][T27775] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.16746'. [ 3447.887975][T27766] netlink: 'syz.4.16746': attribute type 19 has an invalid length. [ 3448.253625][T27784] FAULT_INJECTION: forcing a failure. [ 3448.253625][T27784] name failslab, interval 1, probability 0, space 0, times 0 [ 3448.309209][T27777] cgroup: fork rejected by pids controller in /syz6 [ 3448.322633][T27784] CPU: 1 PID: 27784 Comm: syz.0.16752 Not tainted syzkaller #0 [ 3448.330258][T27784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 3448.340353][T27784] Call Trace: [ 3448.343667][T27784] [ 3448.346621][T27784] dump_stack_lvl+0x188/0x24e [ 3448.351348][T27784] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 3448.357556][T27784] ? show_regs_print_info+0x12/0x12 [ 3448.362800][T27784] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 3448.369022][T27784] should_fail_ex+0x399/0x4d0 [ 3448.373756][T27784] should_failslab+0x5/0x20 [ 3448.378297][T27784] slab_pre_alloc_hook+0x59/0x310 [ 3448.383356][T27784] ? __lock_acquire+0x7d10/0x7d10 [ 3448.388433][T27784] ? kvmalloc_node+0x6c/0x180 [ 3448.393162][T27784] __kmem_cache_alloc_node+0x4f/0x260 [ 3448.398570][T27784] ? schedule_delayed_monitor_work+0x160/0x160 [ 3448.404773][T27784] ? kvmalloc_node+0x6c/0x180 [ 3448.409488][T27784] __kmalloc_node+0xa0/0x240 [ 3448.414137][T27784] kvmalloc_node+0x6c/0x180 [ 3448.418680][T27784] bpf_test_run_xdp_live+0x1dd/0x1a90 [ 3448.424080][T27784] ? 0xffffffffa00041c0 [ 3448.428250][T27784] ? text_poke_copy+0x79/0x90 [ 3448.432942][T27784] ? 0xffffffffa00041c0 [ 3448.437103][T27784] ? 0xffffffffa00041c0 [ 3448.441261][T27784] ? bpf_dispatcher_change_prog+0xcbb/0xf10 [ 3448.447168][T27784] ? 0xffffffffa00041c0 [ 3448.451329][T27784] ? xdp_convert_md_to_buff+0x330/0x330 [ 3448.456911][T27784] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 3448.463175][T27784] bpf_prog_test_run_xdp+0x736/0xf10 [ 3448.468485][T27784] ? dev_put+0x80/0x80 [ 3448.472578][T27784] ? dev_put+0x80/0x80 [ 3448.476674][T27784] bpf_prog_test_run+0x31e/0x390 [ 3448.481628][T27784] __sys_bpf+0x62b/0x780 [ 3448.485892][T27784] ? bpf_link_show_fdinfo+0x380/0x380 [ 3448.491290][T27784] ? lock_chain_count+0x20/0x20 [ 3448.496164][T27784] __x64_sys_bpf+0x78/0x90 [ 3448.500592][T27784] do_syscall_64+0x4c/0xa0 [ 3448.505020][T27784] ? clear_bhb_loop+0x60/0xb0 [ 3448.509707][T27784] ? clear_bhb_loop+0x60/0xb0 [ 3448.514426][T27784] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3448.520354][T27784] RIP: 0033:0x7f71dfd9c799 [ 3448.524778][T27784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3448.544393][T27784] RSP: 002b:00007f71e0c65028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3448.552842][T27784] RAX: ffffffffffffffda RBX: 00007f71e0015fa0 RCX: 00007f71dfd9c799 [ 3448.560823][T27784] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 3448.568894][T27784] RBP: 00007f71e0c65090 R08: 0000000000000000 R09: 0000000000000000 [ 3448.576874][T27784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3448.584853][T27784] R13: 00007f71e0016038 R14: 00007f71e0015fa0 R15: 00007ffe6f78cdf8 [ 3448.592857][T27784] [ 3450.206371][T27907] netlink: 'syz.0.16756': attribute type 10 has an invalid length. [ 3450.289212][T27910] netlink: 'syz.4.16766': attribute type 7 has an invalid length. [ 3450.452869][T27902] device syzkaller0 entered promiscuous mode [ 3450.560811][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 3450.567234][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 3451.182406][ T484] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 3451.227025][ T484] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 3451.249775][ T484] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 3451.281880][ T484] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 3451.302361][ T484] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 3451.322515][ T484] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 3451.492809][T27929] netlink: 'syz.5.16761': attribute type 2 has an invalid length. [ 3451.572872][T27929] netlink: 'syz.5.16761': attribute type 1 has an invalid length. [ 3451.605869][T27929] netlink: 170140 bytes leftover after parsing attributes in process `syz.5.16761'. [ 3451.818354][T27932] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.16763'. [ 3453.520738][T12985] Bluetooth: hci4: command 0x0409 tx timeout [ 3454.507470][T27165] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3454.533415][T27932] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.16763'. [ 3454.549611][T27942] netlink: 'syz.5.16765': attribute type 21 has an invalid length. [ 3454.575642][T27942] netlink: 128 bytes leftover after parsing attributes in process `syz.5.16765'. [ 3454.605259][T27942] netlink: 'syz.5.16765': attribute type 4 has an invalid length. [ 3454.614233][T27942] netlink: 'syz.5.16765': attribute type 5 has an invalid length. [ 3454.635549][T27942] netlink: 3 bytes leftover after parsing attributes in process `syz.5.16765'. [ 3454.738835][T27165] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3454.739692][T27949] netlink: 'syz.0.16768': attribute type 3 has an invalid length. [ 3454.835592][T27949] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.16768'. [ 3454.912843][T27165] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3455.123101][T27165] bond0: (slave netdevsim0): Releasing backup interface [ 3455.172634][T27165] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3455.200139][T27963] netlink: 'syz.3.16771': attribute type 21 has an invalid length. [ 3455.214316][T27963] netlink: 132 bytes leftover after parsing attributes in process `syz.3.16771'. [ 3455.221138][T27965] netlink: 60 bytes leftover after parsing attributes in process `syz.5.16773'. [ 3455.257960][T27965] netlink: 60 bytes leftover after parsing attributes in process `syz.5.16773'. [ 3455.308105][T27967] netlink: 60 bytes leftover after parsing attributes in process `syz.5.16773'. [ 3455.391547][T27926] chnl_net:caif_netlink_parms(): no params data found [ 3455.595467][T12985] Bluetooth: hci4: command 0x041b tx timeout [ 3455.842687][T27926] bridge0: port 1(bridge_slave_0) entered blocking state [ 3455.946683][T27926] bridge0: port 1(bridge_slave_0) entered disabled state [ 3456.017204][T27926] device bridge_slave_0 entered promiscuous mode [ 3456.034961][T27926] bridge0: port 2(bridge_slave_1) entered blocking state [ 3456.042469][T27926] bridge0: port 2(bridge_slave_1) entered disabled state [ 3456.075807][T27926] device bridge_slave_1 entered promiscuous mode [ 3456.183038][T27926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3456.206167][T27926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3456.662549][T27926] team0: Port device team_slave_0 added [ 3456.715251][T27926] team0: Port device team_slave_1 added [ 3457.278932][T27926] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3457.303471][T27926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3457.421894][T27926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3457.475695][T28029] netlink: 'syz.4.16791': attribute type 2 has an invalid length. [ 3457.585655][T28029] netlink: 'syz.4.16791': attribute type 8 has an invalid length. [ 3457.600709][T28029] __nla_validate_parse: 1 callbacks suppressed [ 3457.600728][T28029] netlink: 132 bytes leftover after parsing attributes in process `syz.4.16791'. [ 3457.675663][ T484] Bluetooth: hci4: command 0x040f tx timeout [ 3457.911743][T27926] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3457.925505][T27926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3458.002643][T27926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3458.230806][T28044] netlink: 'syz.5.16794': attribute type 10 has an invalid length. [ 3458.246651][T28044] netlink: 152 bytes leftover after parsing attributes in process `syz.5.16794'. [ 3458.385075][T27926] device hsr_slave_0 entered promiscuous mode [ 3458.426034][T27926] device hsr_slave_1 entered promiscuous mode [ 3458.433984][T27926] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3458.496188][T27926] Cannot create hsr debugfs directory [ 3458.529834][T28055] netlink: 'syz.4.16797': attribute type 29 has an invalid length. [ 3458.647488][T28055] netlink: 'syz.4.16797': attribute type 29 has an invalid length. [ 3458.680775][T28059] netlink: 'syz.4.16797': attribute type 29 has an invalid length. [ 3458.838972][T28053] netlink: 'syz.4.16797': attribute type 29 has an invalid length. [ 3459.199837][T28075] netlink: 132 bytes leftover after parsing attributes in process `syz.5.16804'. [ 3459.275749][T28075] netlink: 'syz.5.16804': attribute type 21 has an invalid length. [ 3459.322665][T28075] netlink: 132 bytes leftover after parsing attributes in process `syz.5.16804'. [ 3459.354997][T28075] netlink: 'syz.5.16804': attribute type 1 has an invalid length. [ 3459.432111][T28081] netlink: 'syz.4.16807': attribute type 2 has an invalid length. [ 3459.450810][T28081] netlink: 132 bytes leftover after parsing attributes in process `syz.4.16807'. [ 3459.755989][ T484] Bluetooth: hci4: command 0x0419 tx timeout [ 3459.976868][T27165] team0: Port device wlan1 removed [ 3463.483485][ T484] Bluetooth: hci1: command 0x0406 tx timeout [ 3486.398648][T25355] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 1-.... } 2629 jiffies s: 346365 root: 0x2/. [ 3486.434871][T25355] rcu: blocking rcu_node structures (internal RCU debug): [ 3486.459888][T25355] Sending NMI from CPU 0 to CPUs 1: [ 3486.465173][ C1] NMI backtrace for cpu 1 [ 3486.465185][ C1] CPU: 1 PID: 28094 Comm: syz.5.16808 Not tainted syzkaller #0 [ 3486.465202][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 3486.465210][ C1] RIP: 0010:strlen+0x59/0x60 [ 3486.465236][ C1] Code: ff c3 49 8d 47 01 42 80 7c 3f 01 00 75 de eb 19 89 d9 80 e1 07 38 c1 7c e6 49 89 fc 48 89 df e8 8d 1c b6 f7 4c 89 e7 eb d6 5b <41> 5c 41 5e 41 5f c3 55 41 57 41 56 41 55 41 54 53 48 c7 c0 f9 ff [ 3486.465249][ C1] RSP: 0018:ffffc900001dffe0 EFLAGS: 00000046 [ 3486.465263][ C1] RAX: 000000000000000d RBX: ffffffff8cb2d638 RCX: 000000008a8d2905 [ 3486.465274][ C1] RDX: 0000000000000000 RSI: ffffffff8cb2d620 RDI: ffffffff8a8d29e0 [ 3486.465284][ C1] RBP: ffffc900001e0100 R08: 0000000000000002 R09: 0000000000000000 [ 3486.465294][ C1] R10: dffffc0000000000 R11: fffffbfff1c3f9a6 R12: dffffc0000000000 [ 3486.465305][ C1] R13: 1ffff9200003c030 R14: dffffc0000000000 R15: 000000000000000c [ 3486.465315][ C1] FS: 00007f8ada2dd6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 3486.465329][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3486.465340][ C1] CR2: 00007fbef6a43fe8 CR3: 000000004255c000 CR4: 00000000003506e0 [ 3486.465357][ C1] DR0: 0000200000000300 DR1: 0000200000000300 DR2: 0000000000008d24 [ 3486.465369][ C1] DR3: 0000000000008d24 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 3486.465380][ C1] Call Trace: [ 3486.465387][ C1] [ 3486.465395][ C1] perf_trace_lock_acquire+0xd9/0x3e0 [ 3486.465421][ C1] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 3486.465440][ C1] ? __virt_addr_valid+0x465/0x540 [ 3486.465466][ C1] ? arch_irq_work_raise+0x82/0xd0 [ 3486.465484][ C1] ? irq_work_queue_on+0x198/0x260 [ 3486.465512][ C1] lock_acquire+0x452/0x4a0 [ 3486.465532][ C1] ? trace_call_bpf+0xbf/0x6b0 [ 3486.465558][ C1] ? read_lock_is_recursive+0x10/0x10 [ 3486.465589][ C1] trace_call_bpf+0xe0/0x6b0 [ 3486.465610][ C1] ? trace_call_bpf+0xbf/0x6b0 [ 3486.465629][ C1] ? trace_call_bpf+0xbf/0x6b0 [ 3486.465650][ C1] ? __bpf_trace_bpf_trace_printk+0x20/0x20 [ 3486.465672][ C1] ? kvm_sched_clock_read+0x14/0x40 [ 3486.465685][ C1] ? sched_clock_cpu+0x6e/0x260 [ 3486.465705][ C1] perf_trace_run_bpf_submit+0x79/0x1c0 [ 3486.465729][ C1] perf_trace_preemptirq_template+0x268/0x320 [ 3486.465750][ C1] ? asm_sysvec_irq_work+0x16/0x20 [ 3486.465776][ C1] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 3486.465797][ C1] ? __irq_exit_rcu+0x147/0x230 [ 3486.465812][ C1] ? irq_exit_rcu+0x20/0x20 [ 3486.465828][ C1] ? asm_sysvec_irq_work+0x16/0x20 [ 3486.465843][ C1] trace_irq_enable_rcuidle+0xd3/0x140 [ 3486.465864][ C1] trace_hardirqs_on+0x24/0x40 [ 3486.465881][ C1] asm_sysvec_irq_work+0x16/0x20 [ 3486.465896][ C1] RIP: 0010:rcu_read_unlock_special+0x7f/0x510 [ 3486.465912][ C1] Code: eb 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 2b 42 c7 44 2b 08 f8 f3 f3 f3 65 44 8b 35 92 31 95 7e 41 f7 c6 00 00 f0 00 74 40 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 42 c7 44 2b 08 [ 3486.465923][ C1] RSP: 0018:ffffc900001e0560 EFLAGS: 00000206 [ 3486.465935][ C1] RAX: 3c2a1f89e0e33900 RBX: 1ffff9200003c0b4 RCX: 3c2a1f89e0e33900 [ 3486.465946][ C1] RDX: dffffc0000000000 RSI: ffffffff8a8c1220 RDI: ffffffff8adf0de0 [ 3486.465956][ C1] RBP: ffffc900001e0660 R08: ffffffff90af530f R09: 1ffffffff215ea61 [ 3486.465967][ C1] R10: dffffc0000000000 R11: fffffbfff215ea62 R12: 0000000000000246 [ 3486.465977][ C1] R13: dffffc0000000000 R14: ffff8880b8f3b900 R15: 0000000000000002 [ 3486.465998][ C1] ? lockdep_next_lockchain+0x10/0x30 [ 3486.466019][ C1] ? __rcu_read_unlock+0xd0/0xd0 [ 3486.466032][ C1] ? __local_bh_enable_ip+0x136/0x1c0 [ 3486.466046][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 3486.466062][ C1] ? __local_bh_enable_ip+0x136/0x1c0 [ 3486.466075][ C1] ? _local_bh_enable+0xa0/0xa0 [ 3486.466093][ C1] __rcu_read_unlock+0x78/0xd0 [ 3486.466106][ C1] ? __icmp_send+0x212/0x1410 [ 3486.466124][ C1] __icmp_send+0x612/0x1410 [ 3486.466141][ C1] ? __bpf_trace_bpf_trace_printk+0x20/0x20 [ 3486.466163][ C1] ? __icmp_send+0x212/0x1410 [ 3486.466184][ C1] ? icmp_out_count+0x90/0x90 [ 3486.466213][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 3486.466230][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 3486.466260][ C1] ipv4_link_failure+0x667/0xa20 [ 3486.466281][ C1] ? ipv4_negative_advice+0x1a0/0x1a0 [ 3486.466301][ C1] ? ipv4_negative_advice+0x1a0/0x1a0 [ 3486.466315][ C1] arp_error_report+0x10e/0x160 [ 3486.466333][ C1] neigh_invalidate+0x22c/0x450 [ 3486.466358][ C1] neigh_timer_handler+0x911/0x1080 [ 3486.466379][ C1] call_timer_fn+0x1ac/0x670 [ 3486.466394][ C1] ? neigh_release+0x80/0x80 [ 3486.466409][ C1] ? call_timer_fn+0xcf/0x670 [ 3486.466423][ C1] ? __run_timers+0x800/0x800 [ 3486.466445][ C1] ? neigh_release+0x80/0x80 [ 3486.466462][ C1] __run_timers+0x53e/0x800 [ 3486.466484][ C1] ? detach_timer+0x350/0x350 [ 3486.466502][ C1] ? lock_chain_count+0x20/0x20 [ 3486.466525][ C1] run_timer_softirq+0x63/0xf0 [ 3486.466539][ C1] handle_softirqs+0x2a1/0x930 [ 3486.466558][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 3486.466575][ C1] ? do_softirq+0x210/0x210 [ 3486.466595][ C1] __irq_exit_rcu+0x13b/0x230 [ 3486.466608][ C1] ? irq_exit_rcu+0x20/0x20 [ 3486.466629][ C1] irq_exit_rcu+0x5/0x20 [ 3486.466642][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 3486.466663][ C1] [ 3486.466668][ C1] [ 3486.466673][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 3486.466696][ C1] RIP: 0010:check_mem_access+0x98e/0x19a0 [ 3486.466711][ C1] Code: 4d 8b 3f 31 ff 4c 89 fe e8 8f da ee ff 4d 85 ff 0f 84 65 04 00 00 e8 a1 d6 ee ff e9 02 07 00 00 e8 97 d6 ee ff e9 a8 07 00 00 <49> bf 00 00 00 00 00 fc ff df 43 80 3c 3e 00 48 8b 5c 24 48 74 08 [ 3486.466722][ C1] RSP: 0018:ffffc900035ff090 EFLAGS: 00000246 [ 3486.466734][ C1] RAX: ffffffff81939bd2 RBX: 0000000000000006 RCX: 0000000000000002 [ 3486.466744][ C1] RDX: ffff888018fed940 RSI: 0000000000000000 RDI: 0000000000000000 [ 3486.466759][ C1] RBP: 0000000000000004 R08: 0000000000000001 R09: 0000000000000001 [ 3486.466768][ C1] R10: 0000000000000006 R11: 0000000000000002 R12: 00000000fffffff0 [ 3486.466777][ C1] R13: 0000000000000001 R14: 1ffff11004c2b005 R15: 0000000000000000 [ 3486.466791][ C1] ? check_mem_access+0x6d2/0x19a0 [ 3486.466815][ C1] ? check_reg_arg+0x5b8/0xa70 [ 3486.466833][ C1] do_check_common+0x5a51/0xc6d0 [ 3486.466882][ C1] ? push_insn+0x670/0x670 [ 3486.466898][ C1] ? do_check_subprogs+0x345/0x390 [ 3486.466918][ C1] bpf_check+0xb08f/0x10db0 [ 3486.466949][ C1] ? verify_lock_unused+0x140/0x140 [ 3486.466970][ C1] ? bpf_get_btf_vmlinux+0x10/0x10 [ 3486.466983][ C1] ? perf_trace_lock+0xf8/0x390 [ 3486.467003][ C1] ? perf_trace_preemptirq_template+0xa8/0x320 [ 3486.467022][ C1] ? irqentry_enter+0x33/0x50 [ 3486.467038][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 3486.467060][ C1] ? mark_lock+0x94/0x320 [ 3486.467080][ C1] ? __lock_acquire+0x13cf/0x7d10 [ 3486.467098][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 3486.467125][ C1] ? finish_task_switch+0x26a/0x8f0 [ 3486.467148][ C1] ? verify_lock_unused+0x140/0x140 [ 3486.467170][ C1] ? perf_trace_lock+0xf8/0x390 [ 3486.467188][ C1] ? trace_event_raw_event_lock+0x250/0x250 [ 3486.467204][ C1] ? perf_trace_lock_acquire+0x100/0x3e0 [ 3486.467234][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 3486.467255][ C1] ? lock_chain_count+0x20/0x20 [ 3486.467275][ C1] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 3486.467293][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 3486.467306][ C1] ? ktime_get_with_offset+0xff/0x320 [ 3486.467322][ C1] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 3486.467339][ C1] ? ktime_get_real_ts64+0x440/0x440 [ 3486.467361][ C1] ? __might_fault+0xc2/0x120 [ 3486.467377][ C1] ? memset+0x1e/0x40 [ 3486.467391][ C1] ? bpf_obj_name_cpy+0x190/0x1d0 [ 3486.467411][ C1] bpf_prog_load+0x101a/0x1560 [ 3486.467437][ C1] ? map_freeze+0x390/0x390 [ 3486.467470][ C1] ? __sys_bpf+0x360/0x780 [ 3486.467490][ C1] __sys_bpf+0x5b8/0x780 [ 3486.467510][ C1] ? bpf_link_show_fdinfo+0x380/0x380 [ 3486.467538][ C1] ? lock_chain_count+0x20/0x20 [ 3486.467555][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 3486.467579][ C1] __x64_sys_bpf+0x78/0x90 [ 3486.467598][ C1] do_syscall_64+0x4c/0xa0 [ 3486.467614][ C1] ? clear_bhb_loop+0x60/0xb0 [ 3486.467630][ C1] ? clear_bhb_loop+0x60/0xb0 [ 3486.467647][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3486.467662][ C1] RIP: 0033:0x7f8ad939c799 [ 3486.467675][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3486.467686][ C1] RSP: 002b:00007f8ada2dd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3486.467700][ C1] RAX: ffffffffffffffda RBX: 00007f8ad9616090 RCX: 00007f8ad939c799 [ 3486.467711][ C1] RDX: 0000000000000042 RSI: 00002000000006c0 RDI: 0000000000000005 [ 3486.467720][ C1] RBP: 00007f8ad9432bd9 R08: 0000000000000000 R09: 0000000000000000 [ 3486.467729][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3486.467738][ C1] R13: 00007f8ad9616128 R14: 00007f8ad9616090 R15: 00007ffe5e3ad638 [ 3486.467765][ C1]