last executing test programs: 9m43.528335975s ago: executing program 0 (id=1005): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2c, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/27], 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f0000000400)=ANY=[@ANYBLOB="180000008f000000000007000b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf0900000000000055090100000000009500000000000000bd0a060000000000d500f4ff0100030018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010000006500000006000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0x2f}, 0x21) openat$tun(0xffffffffffffff9c, 0x0, 0x48000, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x10, 0x0, 0x1300) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) 9m43.380034512s ago: executing program 0 (id=1009): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6c69f68dc1cf3e78, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = getpid() r4 = perf_event_open$cgroup(&(0x7f0000000180)={0x1, 0x80, 0x3, 0x95, 0x21, 0x2, 0x0, 0x7, 0x5082e8c7550cf975, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff0000, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x1, 0x8, 0x51c, 0x8, 0xa4cd, 0x4, 0x7, 0x0, 0x7, 0x0, 0x8000000000000001}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x6, 0xb8, 0x7, 0x6, 0x0, 0x8, 0x80023, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xb42, 0x6}, 0x0, 0x4, 0x2, 0x0, 0x1, 0x3, 0xf800, 0x0, 0x0, 0x0, 0x800}, r3, 0x6, r4, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r5) syz_clone(0x32a0000, 0x0, 0x0, 0x0, 0x0, 0x0) 9m43.168042213s ago: executing program 0 (id=1011): socket$kcm(0x2c, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x14039, 0xba, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xb6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x85c, 0x0, @perf_config_ext={0x101}, 0x120ca, 0xeb, 0x0, 0x5, 0x59f4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x80) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x54}, 0x0, 0xffffffffffffdfff, 0xffffffffffffffff, 0x0) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x4, &(0x7f00000010c0)=ANY=[@ANYRES64=r2], &(0x7f0000000140)='GPL\x00', 0x0, 0x94, &(0x7f0000000180)=""/148, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000000)="9dace7489e9965c49858a59fa4b7", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_pressure(r5, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r6, &(0x7f0000000080)={'some', 0x20, 0x2000000005, 0x20, 0x10000000fffff}, 0x2f) r7 = openat$cgroup_pressure(r5, &(0x7f0000000180)='memory.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r7, &(0x7f0000000080)={'some', 0x20, 0x2000000005, 0x20, 0x10000000fffff}, 0x2f) close(r7) r8 = bpf$ITER_CREATE(0xb, &(0x7f00000002c0)={r3}, 0x8) write$cgroup_int(r8, &(0x7f00000001c0), 0xfffffdef) ioctl$TUNSETIFF(r8, 0x5421, 0x0) write$cgroup_subtree(r3, 0x0, 0x11) ioctl$TUNATTACHFILTER(r8, 0x401054d5, &(0x7f0000000b40)={0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) 9m41.285253738s ago: executing program 0 (id=1017): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f, 0x2, @perf_bp={0x0, 0x6}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff}, 0x0, 0x7, 0xffffffffffffffff, 0x1) syz_clone(0x10000, &(0x7f0000000180)="50001e97e67062f6d945638daa00756286c9b1f9d10b9b7c1b75e8039d9a3eb544ac11a6b837", 0x26, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)="e811e2472887aad31f6e64ae21fdb15e818978f5f3ffef3997ee6498398a0cab03c2b5c5a6e8704e93fdb65e439007eee1718e935738c26363cb5f32aea0a521be3f3ca9b216d4297a123f888bda1cdf08b5ae") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f97e24fc6004030e00bb740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x74000000}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x1}, 0x4000, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000001d00)=@qipcrtr, 0x80, 0x0}, 0x0) r2 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x80, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x100}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'veth0_to_bridge\x00', 0x8000}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89b0, &(0x7f0000000040)={'vlan0\x00', @random="18faff000020"}) 9m39.888348849s ago: executing program 0 (id=1026): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2c, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/27], 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f0000000400)=ANY=[@ANYBLOB="180000008f000000000010000b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf0900000000000055090100000000009500000000000000bd0a060000000000d500f4ff0100030018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010000006500000006000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0x2f}, 0x21) openat$tun(0xffffffffffffff9c, 0x0, 0x48000, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x10, 0x0, 0x1300) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) 9m39.559816175s ago: executing program 0 (id=1029): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002a0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x10102) sendmsg$inet(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)='ED', 0x2}], 0x1}, 0x4000040) close(r3) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a000000000d006110700000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe}, 0x82) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000001d71185e000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_type(r4, &(0x7f0000000040), 0x9) 9m24.386991401s ago: executing program 32 (id=1029): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002a0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x10102) sendmsg$inet(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)='ED', 0x2}], 0x1}, 0x4000040) close(r3) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a000000000d006110700000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe}, 0x82) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000001d71185e000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_type(r4, &(0x7f0000000040), 0x9) 6m43.25785276s ago: executing program 2 (id=2415): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_bp={0x0}, 0x10002, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xa5aa, 0x1, @perf_bp={0x0}, 0x100410, 0x7fffffff, 0x9, 0x1, 0x9, 0xab, 0xfffc, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xa5aa, 0x1, @perf_bp={0x0}, 0x100410, 0x7fffffff, 0x9, 0x1, 0x9, 0xab, 0xfffc, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x1000000}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) r4 = perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r5, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) (async) r6 = openat$cgroup_devices(r5, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r6, &(0x7f00000000c0)=ANY=[@ANYBLOB="63202a3a2a209a"], 0xa) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x100, 0x3}, 0x0, 0xffffffffffffffff, r4, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x100, 0x3}, 0x0, 0xffffffffffffffff, r4, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x533) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4d}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 6m42.310261258s ago: executing program 2 (id=2422): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000073014b00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="030000000100000004e4fffffff4e7d28a69bd33300cb98e00000000"], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000080)={r1, &(0x7f0000000380)="2d44ff42fc77d10dc228e0cef415e31f4a7b4a0f3f2b3113520ac53b0321432952c7400be67f05e339f80c8f7697841f55492af65488529fd036d49799308ce15f84d583c4dd2601a6142685ebdaa3c32d2c8abd98041f0aa94bb95b298040d6c2d80f4b41c92b2fe3f4300f830526dca780064f33ee", &(0x7f0000000400)=""/115, 0x4}, 0x20) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_service_bytes\x00', 0x26e1, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001700)={r2, 0x58, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001800)={{r2, 0xffffffffffffffff}, &(0x7f0000001780), &(0x7f00000017c0)='%pB \x00'}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x17, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7020000000000108500000017000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a40)={0x18, 0x0, 0x0, &(0x7f0000000640)='syzkaller\x00', 0x1, 0x1005, &(0x7f0000001b00)=""/4101, 0x40f00, 0x0, '\x00', r4, 0x0, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001740)={0x0, 0xf, 0x9, 0x1}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000001840)=[r1, r5, 0x1, r3, r6], &(0x7f0000001880)=[{0x1, 0x5, 0x4, 0x8}, {0x0, 0x3, 0x2, 0x7}, {0x2, 0x3, 0x8, 0x6}, {0x0, 0x5, 0xd}, {0x5, 0x4, 0x10, 0x5}, {0x1, 0x2, 0x2, 0x2}, {0x1, 0x3, 0x1, 0x2}, {0x5, 0x5, 0xd, 0xa}, {0x3, 0x2, 0x10, 0xa}, {0x1, 0x2, 0x1, 0x8}], 0x10, 0x7}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r8, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd631180fc000c2f00db5b686158bbcfe8875a060300000023000000000000000000000000ac1414aa3a2008"], 0xfdef) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x46c4, 0x0, r0, 0x80000000, '\x00', r4, r8, 0x1, 0x3, 0x4}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xc, 0x6, &(0x7f00000006c0)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x87}}, @exit], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', r9, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6m41.414147613s ago: executing program 2 (id=2428): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x0, 0x5}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="02000000040000183afc000001000000800040000e6d33d422d4e6508498493219545c90bdf92adea57348a0ebc2512d2f97"], 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x9, 0x0, r0, 0x7314, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x1}, 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)=@generic={&(0x7f0000000180)='./file0\x00', r1}, 0x18) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000046090100000003e71600000006000000180100002020702500000000002020207b9af8ff00000000ad9100000000000037010000f8ffffffb702000008000000b70300000000000024090000060000005c09000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6m41.338527877s ago: executing program 2 (id=2429): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$kcm(0x11, 0x200000000000002, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r1) (async) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="1e030a204d8c71ef2685634a8270e7123c00000000000000000000000000ac1414cf14"], 0xffdd) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0xffffffffffffffff, 0x100000000000000, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x4) (async) r2 = socket$kcm(0x10, 0x2, 0x4) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="16000000f48f8656beb879c8f0fc6db46478ed04000000040000200000010008080000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000003ffeeffff00"/28], 0x48) close(r2) socket$kcm(0x10, 0x400000002, 0x0) (async) socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000740)="5c00000013006bcc9e3be35c6e17aa33074b876c1d0000007ea60864160af36514000cc0080019000900000006001cc00200bc24eab5008000001e618294ff4051f60a84c9f4d4938037e786a6d00010000400000000000000c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4004004) 6m41.216467563s ago: executing program 2 (id=2435): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f0000000100)=@in={0x2, 0x4e21, @remote}, 0x80, &(0x7f0000000000)=[{&(0x7f00000006c0)='@', 0x1}], 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000800000000000000072dfff000000000020"], 0x38}, 0x41) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x1700e, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="12000000070000000800000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r1, &(0x7f0000000300), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710423000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000010) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_clone(0x61000600, 0x0, 0x0, 0x0, 0x0, 0x0) 6m40.803825664s ago: executing program 1 (id=2441): r0 = perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99, 0x0, @perf_config_ext={0x1}, 0x40}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000003300)={{}, &(0x7f0000003280), &(0x7f00000032c0)}, 0x20) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000033c0)={0x1e, 0x25, &(0x7f0000001380)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x10fff, 0xc4, &(0x7f00000014c0)=""/196, 0x41100, 0x2, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000003340)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000003380), 0x10, 0xa}, 0x94) (async, rerun: 64) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x8) (async, rerun: 64) socket$kcm(0x10, 0x95df4de6ce6bcde6, 0x10) (rerun: 64) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x2, 0x454, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x12, 0x5, 0x0, 0xe08ca72be36d9991, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0xc, @perf_bp={&(0x7f0000000100), 0xb586684df753bcc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) sendmsg$unix(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000007c0)='\'', 0x1}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) (async, rerun: 64) recvmsg$unix(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000680)=""/172, 0xac}], 0x1}, 0x10100) (async, rerun: 64) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async, rerun: 64) write$cgroup_subtree(r4, 0x0, 0xfdef) (async, rerun: 64) close(r4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async, rerun: 64) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x20000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x2, 0x9, 0x0, 0x20000, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 64) r5 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r5, 0x6, 0x19, &(0x7f0000000200)=r5, 0x21) (async, rerun: 32) close(0xffffffffffffffff) (async, rerun: 32) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) (async) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000140)) (async, rerun: 64) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) (rerun: 64) 6m40.723389068s ago: executing program 1 (id=2444): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x220001, 0x0) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f00000000c0)={'ip_vti0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="1e030800d3ff71ef288543"], 0xffdd) 6m40.645435292s ago: executing program 1 (id=2446): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@func={0x6, 0x600}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x2c}, 0x28) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="11000000430033"], 0xfe33) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffe00000000000}}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r1) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r3) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x101000, 0x7, 0x8, 0x0, 0x0, 0x2, 0xffff, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r5, 0x29, 0x30, &(0x7f0000000100), 0x120) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000000c0), 0xfffffffffffffec1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r6) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r8) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="08c6a1afc381b883468fa799212ea5d714d19136183b4d43ffe1d89500232148a6025cbab1d7504e4b6463a83554b0c148c4e8fa4a12f5e95d5e8deae7c8c16131e03aa2a9631672704bb05e1c5ce843af5ab9c51c878686f2a58b589c161247011fac3ad59915d8decc829c86881141b621253db0d5a45f88a8d8fb5c39fd69008670f246741592fe54df1af950995bc21af9da1240bc0caa83a189b55faefebea827514b673534043c499fccb4fbbfa797ad3faf771d1e13aa76f242fc9225347ece980ae9"], 0x48) setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x18, 0x80005, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r10) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r11, 0x10f, 0x87, &(0x7f0000000180), 0x127) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r12) close(r11) 6m40.399707555s ago: executing program 2 (id=2451): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0700000004000000180000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000001000000000000000000000002000000000000000000000000000200fa283dc0a3dc83864f17fb054bcf279dc8d1202298a9a65008cea5fbd15d08ecbfc2dbc37676148fceb00cd1730d7bb16df11a05a3f2835101de77bf0b9860abec51"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_clone(0xc2002000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x8, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000800000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) close(r2) recvmsg$unix(r1, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) r4 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r6, 0x6, 0x21, &(0x7f0000000200), 0x10) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r7) syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) 6m40.383387815s ago: executing program 1 (id=2452): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x6, &(0x7f0000000000)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x11, r1}}, @exit], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)=@o_path={&(0x7f0000000200)='./file0\x00', r1, 0x4000, r0}, 0x18) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0xd3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x0, 0x1, 0x0, 0x0, 0x80100, 0x2, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x75) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000013006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac00400020208000200030001002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000ffe000000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 6m40.183440815s ago: executing program 1 (id=2454): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x24, 0x4a, &(0x7f0000000680)="b9ff03076804268c989e14f088a847e089061416e0885a0400000000000081009fa72de2", 0x0, 0x400, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x3d) (async) r2 = socket$kcm(0x11, 0x2, 0x0) (async) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r3, 0x107, 0x12, &(0x7f00000000c0)=r2, 0x8) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000), 0x8) (async) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000006480)={0x0, 0x0, &(0x7f0000000440)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000a00)=""/97, 0x61}], 0x5}, 0x0) (async) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) (async) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) (async) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x1c0) (async) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001900)=@bpf_ext={0x1c, 0x21, &(0x7f0000001640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0xb}, [@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @ldst={0x2, 0x2, 0x1, 0x9, 0x3, 0xffffffffffffffff, 0xfffffffffffffffc}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1000}}]}, &(0x7f0000001780)='GPL\x00', 0xdf0, 0x1000, &(0x7f0000002a00)=""/4096, 0x40f00, 0x28, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000017c0)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000001800)={0x3, 0x1, 0xba7, 0xf69}, 0x10, 0x1d9bc, 0xffffffffffffffff, 0x7, &(0x7f0000001840)=[0x1], &(0x7f0000001880)=[{0x1, 0x3, 0xf, 0x2}, {0x4, 0x1, 0x10, 0x7}, {0x2, 0x3, 0x4, 0xa}, {0x5, 0x5, 0x7, 0xf}, {0x1, 0x3, 0xd, 0x5}, {0x3, 0x4, 0x1, 0x6}, {0x3, 0x1, 0xf}], 0x10, 0x6}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10, 0x0, r7}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a80)={r8, 0x39, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x1f, 0xf, &(0x7f00000015c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x107a654, 0x0, 0x0, 0x0, 0x1}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', r9, @fallback, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, r8, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) recvmsg$kcm(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x40) (async) recvmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)}, 0x0) 6m40.174994536s ago: executing program 1 (id=2455): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0x8}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x8}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x1, 0x8f54}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="1400000015000b63d25a80648c2594f90124fc60", 0x14}], 0x1}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0700000004000000180000000100000000000000", @ANYRES32, @ANYBLOB="00000000000000466431b3bbfa495959716af9d22b483261ad48fa965890b87d8204eaa4b4c770a8b4271027e411e8b794210777ef", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@generic={&(0x7f0000000240)='./file0\x00'}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r4, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6, &(0x7f00000002c0)=[0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xac, &(0x7f0000000380)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x40019, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x13, &(0x7f0000000640)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda107000000000007010000f8ffffffb702000008000000a3b703000000000000850000000500000018010000202070250000000000202020c31af8ffe1000000bda100000000000007010000f8ffffffb702000008000000b70300000000800085000000050000009500000000000000", @ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000004007ed38da0d2912487000b050000000f000000000000080100000005000000000000096b5ed1630c02000000002e2e00"], &(0x7f0000001040)=""/4096, 0x4c, 0x1000, 0x1, 0x40, 0x10000}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_ext={0x1c, 0x27, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_idx_val={0x18, 0x3, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0xe}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffc}, @exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='GPL\x00', 0xffffff53, 0x0, 0x0, 0x0, 0x0, '\x00', r5, 0x0, r6, 0x8, &(0x7f00000002c0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x1, 0x9, 0x3}, 0x10, 0x2c500, r0, 0x0, &(0x7f0000000380)=[r2, r2, r2, r2, r2], 0x0, 0x10, 0x68f}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r7) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) 6m24.854548339s ago: executing program 33 (id=2455): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0x8}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x8}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x1, 0x8f54}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="1400000015000b63d25a80648c2594f90124fc60", 0x14}], 0x1}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0700000004000000180000000100000000000000", @ANYRES32, @ANYBLOB="00000000000000466431b3bbfa495959716af9d22b483261ad48fa965890b87d8204eaa4b4c770a8b4271027e411e8b794210777ef", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@generic={&(0x7f0000000240)='./file0\x00'}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r4, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6, &(0x7f00000002c0)=[0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xac, &(0x7f0000000380)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x40019, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x13, &(0x7f0000000640)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda107000000000007010000f8ffffffb702000008000000a3b703000000000000850000000500000018010000202070250000000000202020c31af8ffe1000000bda100000000000007010000f8ffffffb702000008000000b70300000000800085000000050000009500000000000000", @ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000004007ed38da0d2912487000b050000000f000000000000080100000005000000000000096b5ed1630c02000000002e2e00"], &(0x7f0000001040)=""/4096, 0x4c, 0x1000, 0x1, 0x40, 0x10000}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_ext={0x1c, 0x27, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_idx_val={0x18, 0x3, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0xe}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffc}, @exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='GPL\x00', 0xffffff53, 0x0, 0x0, 0x0, 0x0, '\x00', r5, 0x0, r6, 0x8, &(0x7f00000002c0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x1, 0x9, 0x3}, 0x10, 0x2c500, r0, 0x0, &(0x7f0000000380)=[r2, r2, r2, r2, r2], 0x0, 0x10, 0x68f}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r7) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) 6m24.779334403s ago: executing program 34 (id=2451): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0700000004000000180000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000001000000000000000000000002000000000000000000000000000200fa283dc0a3dc83864f17fb054bcf279dc8d1202298a9a65008cea5fbd15d08ecbfc2dbc37676148fceb00cd1730d7bb16df11a05a3f2835101de77bf0b9860abec51"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_clone(0xc2002000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x8, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000800000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) close(r2) recvmsg$unix(r1, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) r4 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21ca0000cf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f9ac2f7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63bb20e1e0469f7615f67a9218cbace38f5236821314f76302b98afa93044b83989339ca10e6ae30e70e17a82f03e915b8425e8e7a91614306d2ae0bc3550d856f2d7293672b5673d264fc886b0c8bdf436a0fcd21bf9da7bdca98e34cd6e59b0a7ce4ba1b466561aaa35448dff47bb1d7df23d467689a66"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r6, 0x6, 0x21, &(0x7f0000000200), 0x10) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r7) syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) 3m26.127682268s ago: executing program 7 (id=3935): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2c, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/27], 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f0000000400)=ANY=[@ANYBLOB="180000008f000000000000000b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000004000b702000014000000b7030000000000008500000086000000bf0900000000000055090100000000009500000000000000bd0a060000000000d500f4ff0100030018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010000006500000006000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0x2f}, 0x21) openat$tun(0xffffffffffffff9c, 0x0, 0x48000, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x10, 0x0, 0x1300) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) 3m25.862316771s ago: executing program 7 (id=3939): socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c00000003f9010001"], 0x50) r1 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="140000000000000011"], 0x18}, 0xc) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000140)={r2}) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0xc8}, 0x2160) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x4}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f0000000080)) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x1d, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59a5a4d33f921921320000005e140602ffffffff0d0013000100000002800000121f", 0x2e}], 0x1}, 0x0) 3m25.307629679s ago: executing program 7 (id=3943): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000ac0)='S', 0x1}], 0x1}, 0x4) sendmsg$inet(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000cc0)="aa", 0x1}], 0x1}, 0x800) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x2a, &(0x7f0000000100)=r2, 0x4) write$cgroup_netprio_ifpriomap(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="77673032360039e395f8424e3e6d39480ee51393320984966cc35a4dcde8f33b90616ebf2a8d07e27b47f41acafb42a3f2833dc0f90c84ed6aae092d4af440fee17aa28f3d63d5fb03ce00000000000000003e864fa91c1a655fa791018ec4bf3f288dde56015ee03d1c3db9a3b7ab548abfd10a071c68e63d12b924fc639207854b7f320e09166c825d451ef4929eb6f1d44eccf2dc18ff65479414136f38"], 0x6) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc///\x00\x82q\xee\x00!\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, 0x0, 0x840, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x2000, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) close(0xffffffffffffffff) socket$kcm(0x2, 0x6, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b05, &(0x7f0000000000)={'wlan1\x00'}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) r5 = perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0xe, 0x0, 0x0, 0x7602, 0x0, 0x140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) recvmsg$kcm(r4, 0x0, 0x40000001) socket$kcm(0x11, 0x2, 0x0) r6 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r6, 0x107, 0x12, 0x0, 0x0) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000800)=@hci={0x1f, 0x0, 0x6}, 0x80, 0x0}, 0x4c081) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) socket$kcm(0xa, 0x2, 0x0) 3m24.531857339s ago: executing program 7 (id=3952): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x2a, &(0x7f0000000100)=r2, 0x4) (async) sendmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) recvmsg$unix(r0, &(0x7f0000000980)={0x0, 0xffffff82, 0x0}, 0x2020) (rerun: 32) 3m24.328580759s ago: executing program 7 (id=3956): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce2200182f"], 0xfdef) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x15, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x101048, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xa, 0x17, &(0x7f0000000200)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd79, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, 0x0, 0x4004800) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x4e, &(0x7f0000000100), 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000003000000003800000700000011000000", @ANYRES32, @ANYBLOB='\x00\x00\x00 \x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/20], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0), &(0x7f00000002c0), 0x4d, r3, 0x0, 0x1c000000007400}, 0x38) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd634936f2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x82, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x66) 3m23.764455697s ago: executing program 7 (id=3962): r0 = perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x7, 0x6, 0x0, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0x25) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f91b24fc602f020f000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x74000000}, 0x0) syz_clone(0x403ac400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r3, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000140)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x5, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x11, &(0x7f0000000200)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x16, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x2af044ab3ae7ad35, 0x9, 0x8, 0x10, 0x70240, 0xffffffffffffffff, 0x8000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x3}, 0x50) r6 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f0000000100)=r7, 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x3}, 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x1}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000680)={0x1}, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) recvmsg$unix(r8, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r10 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r10, 0x1, 0x41, &(0x7f0000000040)=r9, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)={0x1b, 0x0, 0x0, 0x1a95, 0x0, 0x1, 0xfffffff8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x1}, 0x50) 3m7.912107027s ago: executing program 35 (id=3962): r0 = perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x7, 0x6, 0x0, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0x25) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f91b24fc602f020f000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x74000000}, 0x0) syz_clone(0x403ac400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r3, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000140)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x5, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x11, &(0x7f0000000200)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x16, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x2af044ab3ae7ad35, 0x9, 0x8, 0x10, 0x70240, 0xffffffffffffffff, 0x8000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x3}, 0x50) r6 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f0000000100)=r7, 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x3}, 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x1}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000680)={0x1}, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) recvmsg$unix(r8, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r10 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r10, 0x1, 0x41, &(0x7f0000000040)=r9, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)={0x1b, 0x0, 0x0, 0x1a95, 0x0, 0x1, 0xfffffff8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x1}, 0x50) 4.15525782s ago: executing program 8 (id=5499): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0xd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x5}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000040000000400000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r1, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001240)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000001280)='blkio.bfq.sectors\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0], 0x0, 0xfa, &(0x7f00000003c0)=[{}], 0x8, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x1f, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x1}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=@base={0xf, 0x4, 0x8, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000018000000000000000000000000000000950000002304f866"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0xe1, &(0x7f0000000240)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe66}, 0x37) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28}, 0x20) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d8150001000000000000000000080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x400c044) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000040000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="000000000100"/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r8, 0x3, '\x00', 0x0, r6, 0x3, 0x80}, 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r9}, &(0x7f0000000240), &(0x7f0000000380)=r10}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{0x1, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r13, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x2000) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0x22, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@alu={0x4, 0x1, 0x1, 0x8, 0x9, 0xffffffffffffffc0, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @generic={0x1, 0x9, 0x8, 0x7, 0xf}, @map_fd={0x18, 0x1, 0x1, 0x0, 0x1}, @alu={0x7, 0x1, 0x0, 0x1, 0x3, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x8, 0x89, &(0x7f0000000240)=""/137, 0x41100, 0x22, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000640)={0x2, 0x7, 0x1, 0x6}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000800)=[r4, r5, r8, r9, r11, r12, 0xffffffffffffffff], &(0x7f0000000840)=[{0x2, 0x5, 0xc, 0x3}, {0x5, 0x3, 0xd, 0xa}, {0x1, 0x3, 0x9, 0x5}, {0x3, 0x2, 0x5, 0xc}, {0x5, 0x3, 0xb, 0x1}, {0x5, 0x5, 0x5, 0xa}, {0x3, 0x4, 0xe, 0x8}, {0x1, 0x5, 0x3, 0x5}], 0x10, 0x2}, 0x94) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2100, 0x0) close(r14) ioctl$SIOCSIFHWADDR(r14, 0x8922, &(0x7f0000002280)={'veth1_vlan\x00', @random="2b3f00004ec6"}) 3.56478233s ago: executing program 6 (id=5505): r0 = socket$kcm(0x10, 0x0, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@const={0x0, 0x0, 0x0, 0x9, 0x3}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @func_proto, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2}}]}}, 0x0, 0x5a}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f2, &(0x7f0000000080)) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000700)="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", 0x14f}, {&(0x7f0000000840)="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", 0x2f2}, {&(0x7f00000000c0)='\x00\x00\x00\x00'}, {&(0x7f0000000080)="5e8a7acb25f33c7449d6cef07cef3e7861e448e594e3490ad2797475a50ae3101cd6"}], 0x2, 0x0, 0x0, 0x5865}, 0x24000000) 3.445580565s ago: executing program 6 (id=5507): r0 = socket$kcm(0x2, 0x1, 0x106) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xe, 0x20000000000000c8, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000200000006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc6, &(0x7f00000002c0)=""/198, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x20}, 0x10}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00=\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r3) r4 = socket$kcm(0xa, 0x2, 0x88) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x3, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x9, 0x7fffffffffffffff}, 0x1, 0x3c, 0x13, 0x0, 0x23, 0x0, 0x5, 0x0, 0x9, 0x0, 0x9}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001240)=@o_path={0x0, r6, 0x4000, r5}, 0x18) sendmsg$kcm(r4, &(0x7f0000000340)={&(0x7f00000000c0)=@in6={0xa, 0x4e22, 0x0, @dev, 0x7}, 0x80, 0x0}, 0x200ce0c0) write$cgroup_subtree(r3, &(0x7f0000000280)=ANY=[], 0xfe33) perf_event_open$cgroup(&(0x7f00000014c0)={0x3, 0x80, 0x0, 0x7, 0x2, 0x8, 0x0, 0x2, 0x80040, 0x6, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1ff, 0x2, @perf_bp={0x0, 0x6}, 0x4, 0x924, 0xfffffff8, 0x0, 0x40, 0x3, 0x4, 0x0, 0x40, 0x0, 0x2}, r6, 0x2, 0xffffffffffffffff, 0x14) write$cgroup_devices(r3, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="038d53b471eddbb9bf624e1b", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) sendmsg$kcm(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="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"/285], 0x60}, 0x0) setsockopt$sock_attach_bpf(r0, 0x0, 0x19, 0x0, 0x0) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x2, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000004000017bb7f1a006600feff0000000095000c196d160b106bedf38b000000000000000000000000000000351cc6ce9481233c306c6b034ad51d0000"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x93, &(0x7f00000005c0)=""/147, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x110e22fff6) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8900, 0x0) ioctl$TUNSETOFFLOAD(r9, 0xc004743e, 0x110c232000) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="5c00000013006bec9e3be35c6e17aa31076b876c1d0000007ea20864160af3653c001ac00400020208000200030001001400000008b556a737c160f9555b4755bb05251e618200000051f60a84c9f4d4938037e786a6", 0x56}, {&(0x7f0000000140)="7e3f15d6d2ee", 0x6}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x3, 0x37, 0x9, 0xf4, 0x0, 0x7, 0x8000, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000080), 0xd}, 0x208002, 0x3ff, 0x2, 0x5, 0xffff, 0xe742, 0x9c, 0x0, 0x6, 0x0, 0xb1}, 0xffffffffffffffff, 0x2, r7, 0x3) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x40305829, &(0x7f0000000280)=0xffffffdffffffffd) 3.283523374s ago: executing program 8 (id=5509): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000000000000000000000000085000000080000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) (async) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfe103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x4, 0x8}, 0x2000, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) (async) syz_clone(0x40020000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4}, 0x50) (async) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x18}, 0x18) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) (async) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={0xffffffffffffffff, 0x2fb5, 0x18}, 0xc) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000040000000400000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r7, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x3, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000002000000000000000100008018150000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000530000001801000020756c2500000000002020207b1a00ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_serviced_recursive\x00', 0x26e1, 0x0) close(r9) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="12000000f9ff0003040000000200000000000000b2f8e52f89b24956af88af879753f6614900354e54d778618e8766e03f2272c47818293bf26b540d585600"/74, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r10}, &(0x7f0000000040), &(0x7f0000000280)=r9}, 0x20) (async) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="00206b6cdcfce88661221e46b647fc2dc900000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, r9}, 0x94) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xd, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x3}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0xb, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, [@map_val={0x18, 0x8, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x4b}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffff}, @ldst={0x3, 0x1, 0x1, 0x5, 0x8, 0x80, 0xfffffffffffffff0}, @map_fd={0x18, 0x2, 0x1, 0x0, r3}]}, &(0x7f0000000180)='syzkaller\x00', 0x4, 0x42, &(0x7f00000001c0)=""/66, 0x40f00, 0x34, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000340)=[r6, r7, r8, 0x1, 0xffffffffffffffff, r11, r12], &(0x7f0000000380)=[{0x4, 0x2, 0x10, 0x7}, {0x2, 0x5, 0xc, 0x5}, {0x2, 0x3, 0x5, 0xc}, {0x5, 0x2, 0x4, 0x6}, {0x1, 0x3, 0x5}, {0x0, 0x4, 0x1, 0x7}, {0x1, 0x1, 0x8, 0x7}, {0x1, 0x1, 0x10, 0xb}, {0x4, 0x5, 0x1, 0x7}], 0x10, 0x1}, 0x94) 3.262003795s ago: executing program 5 (id=5510): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'dvmrp0\x00', 0x2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x1, 0xfffff038}, {0x6, 0x4}]}) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x1c0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1f000801}, 0x200000000000000) 3.121819102s ago: executing program 8 (id=5511): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2c, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/27], 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f0000000400)=ANY=[@ANYBLOB="180000008f000000000000000b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000386000000bf0900000000000055090100000000009500000000000000bd0a060000000000d500f4ff0100030018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010000006500000006000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0x2f}, 0x21) openat$tun(0xffffffffffffff9c, 0x0, 0x48000, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x10, 0x0, 0x1300) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) 3.076726585s ago: executing program 6 (id=5512): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000140)='./file0\x00', 0x0, 0x20, r0}, 0x18) r2 = socket$kcm(0x29, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000680)={&(0x7f0000000240)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000380)="ad16ab38", 0x4}], 0x1}, 0x800) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef42d430f6296b72a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed40000000022278d00031e5388ee5c867ddd58211d6ece3ccb0cd2b6d3cffd962867a3a2f624f992daa94a6a556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff020000000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409e011f1264d43f153b3d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7000026a4e739c60f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf3f704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eedd9068ca1457870eb30d219e23ccc8e06dddeb61799257ab5000013c86ba99523d61a00000000c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb8629aeec90e6d1857da822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae200f279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522e8dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f34a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be10ba7dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2db484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b00ffffff7f000000000801f71d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cf0d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67856ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e2b8e7370baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b09000000d31df213c802d74797056fd3bca8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221fff0f0000705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f14fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008f3a20b49fe7636806867283e35cff8d00e7b251bab3cf6377a24f8e8d4bda7503674bc94bf7f4d2fa6f25944bf0a186436d9f6831995976328a1fdc78492c65c1434855dc35c3cf7cf9610c5387794443c99b304799114132362849c3fa85d6379729ff9094933db0cfbe8887c50b87e1469fdf454cef4cbc5f7bf384000000000000a4e8c1a25f47c440144a9776be6cb40aafdb9d3cc8f6a6050974e1c4000000000000008b753f4e1bef9556efcc087a99dbf231167013a4b2eaf6338a0b100c98a331dffc09"], &(0x7f0000000140)='GPL\x00'}, 0x48) r4 = socket$kcm(0x2, 0x3, 0x0) sendmsg$inet(r4, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r4, r3}) perf_event_open(&(0x7f0000000700)={0x2, 0x80, 0x7, 0x1, 0x6, 0x0, 0x0, 0x7ff0, 0x58044, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0x3, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, 0x0) r5 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r5, &(0x7f0000003c40)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xfe}, 0x6, 0x3}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000040)="817f0000", 0x4}, {&(0x7f00000000c0)="0f36ed34", 0x4}], 0x2}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x5411, &(0x7f0000000000)={0xffffffffffffffff}) r7 = socket$kcm(0x28, 0x1, 0x0) recvmsg(r7, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x10042) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x5761, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001d008104e00c80ecdb4cb9f207c804a00d00000088080efb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) r9 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@o_path={&(0x7f00000003c0)='./file0\x00', 0x0, 0x4000}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r0, 0x8, 0x1, 0x4, &(0x7f0000000240)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r11 = socket$kcm(0xa, 0x922000000003, 0x11) r12 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x43cd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r12, 0x40042408, r13) ioctl$sock_kcm_SIOCKCMUNATTACH(r11, 0x89e1, &(0x7f0000000500)={r11}) r14 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_tracing={0x1a, 0xe, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xaa46, 0x0, 0x0, 0x0, 0x7}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @exit, @btf_id={0x18, 0x6, 0x3, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @jmp={0x5, 0x0, 0x8, 0x3, 0x8, 0x100, 0x1}]}, &(0x7f00000004c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x5a, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x1, 0xe, 0x8, 0x9e4}, 0x10, 0x2081f, 0xffffffffffffffff, 0x5, &(0x7f0000000580)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff], &(0x7f00000005c0)=[{0x0, 0x2, 0x3, 0xe}, {0x4, 0x5, 0xa, 0x6}, {0x3, 0x4, 0x0, 0x4}, {0x2, 0x5, 0xc, 0xc}, {0x0, 0x1, 0x4, 0x8}], 0x10, 0x5ce5}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000380)={@fallback=r0, r1, 0x2, 0x0, r9, @void, @value=r14, @void, @void, r10}, 0x20) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) 2.933354882s ago: executing program 5 (id=5513): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1a210, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f97e24fc602f000e0040740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x74000000}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="b9ff03316844268cb89e14f00800", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = getpid() perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0xfc, 0x0, 0xfc, 0x0, 0x4, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x2, @perf_config_ext={0x2, 0x7f}, 0x0, 0x4, 0x0, 0x0, 0x10, 0x10000a, 0x4, 0x0, 0xfffffffd}, r3, 0xfffffffffffffffc, 0xffffffffffffffff, 0x8) setsockopt$sock_attach_bpf(r0, 0x29, 0x23, &(0x7f0000000040), 0xcf) sendmsg$kcm(r0, &(0x7f0000001240)={&(0x7f0000000940)=@generic={0xa, "8ab77fa26849ff263ef30c98b353011a5990650042e2dacdc165ececece6be1862e2adacd2737d00ad6f9fa9f3d7145e15dd9fb1a7adc211220963ad5def53b911ba5b9da13641f982757012a7496de0b3a36f5849f260c603dbc317f54b901ee80ea6132ca6e88c776553e1833052ca376304313c5637786a36a4b83857"}, 0x80, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000280)=""/224, 0xe0}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/208, 0xd0}, {&(0x7f0000001280)=""/4096, 0x1000}, {&(0x7f0000000500)=""/139, 0x8b}, {&(0x7f00000005c0)=""/139, 0x8b}, {&(0x7f0000000680)=""/110, 0x6e}], 0x7, &(0x7f0000002280)=""/4096, 0x1000}, 0x21) 2.926082982s ago: executing program 8 (id=5514): perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_config_ext={0x3, 0x9}, 0x100410, 0x200, 0x2, 0x6, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x10, 0x2, 0x0) syz_clone(0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x24008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="1400000015000b63d25a80648c2594f94124fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x100) r1 = socket$kcm(0x10, 0x2, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000006c0)={&(0x7f0000000380)="042945b594662d0c056b53e2bcdc76402f98e356b7f917aaa6277662ab8dfe2c68ce6972df9d1070322af2b87e250efaae4a1dd905604ce8424cfbf9540723420540cfbb84ceb028cb47160a8be7cd44753c2553fe7b70e56fd2443754d354fc5c4a0305b91bb8e5056867ddc369575ec113438ce1266bd253ed751197f6294d27218184d38e4f8d91c82b3c1739def6365077bf35d8d66ea00d34f8effda8916e373a06ca746410edef36e61efb8824139b9e979ce30cafec6e59fd946e09b1d7d22c", &(0x7f0000000500)=""/156, &(0x7f00000005c0)="dbab56eb5c3947eeec4c37047a5e6757f1c09729bbdb968b35c6dc6e013f2cbc62f4457f576627dc63d79880c43107b784736b09142aa00c820530e5cf4f27dbb2022c5df6c47bb183453b6b494a4701ee682d2e479367e3c766fb240075e66c10125b9d4cda994fe7294d8274d25e02ed3f3dad72fcf0295eb6e93dadaa62dba06e228619b7e0dcd38b60b609a5ed38cfcc6379e59fff848cbbf8f277b108593ff026bd651ca10c7efa0244ad4239f80b107c1743941b9c0f73b9784fa459d585dab9", &(0x7f00000000c0)="7b42af4c791632", 0xcf, r2}, 0x38) close(r1) socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000013006bcc9e3be35c6e17aa31086b876c1d0000007ea60864160af36516002b000c0001004ce82bdface7b3d57581fff60a84c9f4d4938037e786a6d0001000000e4509c5bb5b64f69853000000029e79c7ad2600375b3f54", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$MAP_CREATE_TAIL_CALL(0x9, &(0x7f0000000580)=ANY=[@ANYBLOB="030000000400000004"], 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) 2.124366122s ago: executing program 3 (id=5517): r0 = socket$kcm(0x2, 0xa, 0x2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x20, r1}, 0x18) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r3, &(0x7f0000000c40)="7655ec0787ab72a7f177bca48024f7dd48ace8d6cffef75b4a934ad8efa35a39dc09229bfcdf3d3e04c6b676d50b1392908a6ce5d309436e82bd0abf403d5d2f733a09eb91e1094a9109a96a8d464e7bfff9044756de67ba0d1a2ab7d5cce0fb3c9259f7f0213031524a452fd20bda22a7b687eb9c2d5665e5aebd4818953136a1571736aecc5b0b6e307d28e6e319064bddb3ece6963a0d145772a2fdb08592c9bc9031b0e2dd8c9fde06b45b79df862e8e0ae03e5547b00ce7c11daea5a913f6a51f679d9d33183039faf372bbec400f62ef68951d", &(0x7f0000000080)}, 0x20) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x890c, &(0x7f0000001000)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed@n\x00\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xf3\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x9c\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600), ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe1, &(0x7f00000005c0), 0x8, 0x10, &(0x7f0000000180), 0x0, 0xffffffffffffffdd, 0x78, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000c00)={r5}, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, &(0x7f0000000400)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86%\x7f\xec\xb2\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc8Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed@n\x00\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xf3\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x9c\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff}) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) close(r6) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x22a82, 0x0) close(r8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="1b2388a8"], 0xffdd) sendmsg$inet(r4, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @multicast1}, 0x10, 0x0}, 0x0) 688.810595ms ago: executing program 4 (id=5529): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000100)={'vlan0\x00', @link_local}) perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x6c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x800}, 0x0, 0x0, 0x0, 0x3, 0x6, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x2}, {0x200, 0x2000, 0x1}, {0xfffffffd, 0x4, 0x10006, 0x3}]}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90124fc60100c02400a000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 629.970828ms ago: executing program 5 (id=5530): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x686a, 0x0, 0x0, 0x0, 0xd3}, [@map_idx={0x18, 0x1, 0x5, 0x0, 0x6}]}, &(0x7f0000000040)='syzkaller\x00', 0x100, 0x4c, &(0x7f0000000080)=""/76, 0x41000, 0x60, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000140)={0x4, 0xa, 0x3, 0x1}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000180)=[0x1, 0x1, 0x1], &(0x7f00000001c0)=[{0x4, 0x4, 0x9, 0x3}, {0x5, 0x4, 0x10, 0x2}, {0x3, 0x4, 0x4, 0x5}], 0x10, 0x5}, 0x94) (async) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000300)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@cgroup=r1, r0, 0x20, 0x2034, 0x0, @void, @void, @value=0xffffffffffffffff}, 0x20) (async) mkdirat$cgroup(r1, &(0x7f0000000340)='syz1\x00', 0x1ff) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x200, 0x0) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f00000003c0)) (async) r3 = gettid() r4 = syz_open_procfs$namespace(r3, &(0x7f0000000400)='ns/user\x00') (async) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) (async) ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x400080, 0x0) ioctl$TUNSETPERSIST(r5, 0x400454cb, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x900, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r4, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000004c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0], 0x0, 0xa3, &(0x7f0000000580)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0xc8, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) ioctl$TUNSETIFINDEX(r6, 0x400454da, &(0x7f00000007c0)=r8) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$TUNGETVNETLE(r9, 0x800454dd, &(0x7f0000000840)) (async) socketpair(0x8, 0x4, 0x9, &(0x7f0000000880)) (async) r10 = openat$cgroup_subtree(r1, &(0x7f00000008c0), 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000900)={[{0x2b, 'io'}, {0x2b, 'cpuacct'}, {0x2d, 'memory'}]}, 0x15) openat$cgroup_subtree(r9, &(0x7f0000000940), 0x2, 0x0) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000980)={r7}, 0x4) (async) openat$cgroup_devices(r1, &(0x7f00000009c0)='devices.allow\x00', 0x2, 0x0) (async) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000a00)={'some', 0x20, 0x6, 0x20, 0xffffffffffff5438}, 0x2f) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000b40)={@cgroup=r1, 0x6, 0x1, 0x6, &(0x7f0000000a40)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000ac0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000b00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) (async) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000bc0)={0xffffffffffffffff, 0x0, 0xc}, 0xc) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000b80)={@map=r12, r10, 0x20, 0x8, 0x0, @void, @value=r0, @void, @void, r11}, 0x20) (async) ioctl$TUNSETCARRIER(r5, 0x400454e2, &(0x7f0000000c00)=0x1) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000cc0)={r12, &(0x7f0000000c40)="f28b0d1cfe7d3ee89b7c2638832a165a5e5a718310055a0ddeb0c5c558d7ed655b85cedbd1cd0ab77c2138927df32dc531c66ff34cbffedb4360d56ead4d57b6ad59986c4911005d3b4474dc3a4c656351413becef524074c92e3cf1120f30bae55d446d4997250f89faba38db9f897f505cad"}, 0x20) (async) ioctl$TUNGETDEVNETNS(r9, 0x54e3, 0x0) 620.673458ms ago: executing program 4 (id=5531): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000001340)=@hci={0x1f, 0x8e88, 0x47}, 0x80, 0x0}, 0x0) (async) socket$kcm(0x21, 0x2, 0x2) r0 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r0, 0x88, 0xa, &(0x7f00000002c0), 0x4) (async) sendmsg$inet(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10, 0x0}, 0x4040000) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c012, 0xac5d, 0x0, 0x2, 0x0, 0x8000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000100)=r2, 0x4) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000000000000000"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x409, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000200)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r5, 0x4) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000000c0)=r5, 0x4) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="0600"}) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$PERF_EVENT_IOC_RESET(r4, 0x2403, 0x5ae) (async) perf_event_open(&(0x7f0000000140)={0x7, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x28400, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0xf}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000900)={0x1, 0xaf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x18410, 0x0, 0xffffffbe, 0x3, 0x100000}, 0x0, 0xffffffffffffffff, r1, 0x0) (async) socketpair(0x15, 0x5, 0x0, &(0x7f0000000500)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x3}]}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xfffffffe}}]}}, 0x0, 0x56}, 0x20) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x2100, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) (async) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) (async) r9 = openat$cgroup_procs(r7, &(0x7f0000001a80)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000000380), 0x12) write$cgroup_int(r8, &(0x7f0000000040), 0x1) 552.931951ms ago: executing program 3 (id=5532): perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8002, 0x7, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030022003505d25a806f8c6394f97e24fc6004030e000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x74000000}, 0x0) 502.502444ms ago: executing program 4 (id=5533): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000240)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x33, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x59, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000080)="7261633fc274612a377001cb28503425288eb5ddcb3af6a51c9c75874d9df99496431f6f8c6260579a4ea43c9038fae4baa99566e5fdc1673fb970c807c89a6e7c00677190f2e4eff5b2d3b06a83504f160889a5d7c9ddbcd6c3cc4ee5995e1c95de7449fac5ef5e8a1fddb50f95c5cac63ed6f43837d82155feab0a1f462defb9d01e94b44b9b0d2518bea81f71bdd8", 0x90}, {&(0x7f0000000140)="392bd969a7fa54bdd7ae39d3e0afa4d2b924290bd9b684de8a8a812d757af8b6e52d0b7576ce05d1fccbebe238ecdd2ed66480d1c09aa727031fb023e468604432fce5c3abc5bc2a616947d2f25e0cecb794a70b9521bc4a9531aa680e5213ecc0483198cdec128da5699d76df303923c35dc4de65eb19a2c58533787e2f46e0662bf6d29106f9ac7195656bfdc1bf5c7ff1b1abcf8333d2be58f6d84811f442f5a2fefc6efb457b83f4e82905e6b11e0b99979c78371c932d4d72", 0xbb}], 0x2, &(0x7f0000000580)=[@ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @local, @multicast1}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}], 0x68}, 0x20000010) (async) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001680)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x5, [@type_tag={0x9, 0x0, 0x0, 0x12, 0x1}, @decl_tag={0x3, 0x0, 0x0, 0x11, 0x2, 0x5}]}, {0x0, [0x0, 0x2e, 0x5f]}}, &(0x7f0000000680)=""/4096, 0x39, 0x1000, 0x0, 0x10001}, 0x28) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x6, &(0x7f00000016c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x607, 0x0, 0x0, 0x0, 0x3ff}, [@alu={0x7, 0x0, 0x8, 0x0, 0x9, 0xfffffffffffffffe, 0xfffffffffffffff0}, @generic={0x1, 0x4, 0xc, 0x0, 0x7fff}, @exit]}, &(0x7f0000001700)='GPL\x00', 0xbb, 0x14, &(0x7f0000001740)=""/20, 0x40f00, 0x44, '\x00', r1, 0x25, r2, 0x8, &(0x7f0000001780)={0xa, 0x5}, 0x8, 0x10, &(0x7f00000017c0)={0x0, 0x9, 0xa, 0x800}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000001800)=[0x1], &(0x7f0000001840)=[{0x0, 0x4, 0x9, 0xc}, {0x0, 0x5, 0xe, 0xa}, {0x4, 0x1, 0x8, 0xb}, {0x4, 0x1, 0xe, 0xc}]}, 0x94) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001bc0)={0x11, 0xb, &(0x7f0000001940)=@raw=[@tail_call, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @map_fd={0x18, 0x8}], &(0x7f00000019c0)='syzkaller\x00', 0x2, 0xd3, &(0x7f0000001a00)=""/211, 0x41000, 0x40, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001b00)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001b40)=[0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000001b80)=[{0x2, 0x5, 0x0, 0xc}, {0x0, 0x1, 0x2, 0xa}], 0x10, 0x3}, 0x94) (async, rerun: 64) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001fc0)={0xffffffffffffffff, 0xe0, &(0x7f0000001ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001cc0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f0000001d00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001d40)=[0x0], 0x0, 0x79, &(0x7f0000001d80)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000001e00), &(0x7f0000001e40), 0x8, 0xbb, 0x8, 0x8, &(0x7f0000001e80)}}, 0x10) (rerun: 64) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001c80)={@ifindex=r1, r3, 0x1e, 0x20, r4, @void, @void, @void, @value=r5}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002000)={0xffffffffffffffff}) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002080)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x2f1, '\x00', 0x0, r2, 0x3, 0x2}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000023c0)={r3, 0xe0, &(0x7f00000022c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000002100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f0000002140)=[0x0], &(0x7f0000002180)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x35, &(0x7f00000021c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000002200), &(0x7f0000002240), 0x8, 0xf3, 0x8, 0x8, &(0x7f0000002280)}}, 0x10) (async) sendmsg$kcm(r0, &(0x7f0000003b80)={&(0x7f0000002400)=@pppol2tpv3in6={0x18, 0x1, {0x0, r8, 0x0, 0x0, 0x3, 0x0, {0xa, 0x4e20, 0x8000000, @ipv4={'\x00', '\xff\xff', @remote}, 0xffff}}}, 0x80, &(0x7f0000003980)=[{&(0x7f0000002480)="a5ef6aab646418c33415aec6c3d020b6fdf68235ed6779ef820405e2f755da93c624b8764475527c15138227d5afdf71b35483b8dc6eb4554286ff83611d71ee366e60e3949b79d6624fd675a1bb31b05884dd2b282b3fdbf90258bb938ee1460fed7f938eaaa2ac8a6dc9620523f2a5b13fcd2af15a11b082f69be58bdef6d2dfc0016e5f058453e081f1b7b2b9dcb36ca134aaf2511e821a7c2822653f8a8c23dfd1c050027a5609d61fbbab22b46d8091c070a620479b9e1a88e1441ed01e8af9f9cdd4686387573292b72e66374d3e20e403a0b528db4c585aa23bc7b8687e8e69939d6eb52690c51884275eabd70af4437cc5b8ed191b", 0xf9}, {&(0x7f0000002580)="313a5192544c28e68e093638d855dac0c69d82aeed3d441e1a93fb3d0e5cfa37cadc2413f05f5d766469ae5332a58579f3ba605cc9098b1a3da3d90ce1e6008afad746333b271765b89bf523ca2a79032b03a344c006d27b4aa2e0853d9a4e4731962d8a08807a8963ed503bb209caba8cdfcc712e9fa7d25cb739d609310a2502fde3423a011b9d4ce2eddf36ae0f92390067909a0632ad7899bf31a76ffee13e3f458eef35", 0xa6}, {&(0x7f0000002640)="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", 0x1000}, {&(0x7f0000003640)="620354ef0ddf6fbb8d18c2abaf1d5e5e4bf14ce0022b78df655df1ce852b1717c6348c7940d14e0042167c2839122e9302b8bc5a0645ba5289b1fbc90e1a467f7d0dce7ca6aa8ebe4231f4affdaa8a71e775d733b4378cf1a49acb05d868e4d1", 0x60}, {&(0x7f00000036c0)="1781c97b33230a1f4fef6491cd7165e93a4535a4b0a1fc41b57803437101823d8c1f0ffdef79df753a76f609a5f359449422b05eb23e64f214b8249f73ec28dc9557e5c9a15ac963bb603befb1ed099fdcb26b3cb8a67c35a951e271b69bf308d490f5a226dc55ea0f0705bd948768c493ea3bf9edc8ff5b9232f137fd1891784f55a009e4fd48a3675fd813f8826b75739d7bac4cc483a127ab53f146c5d684bb0e889efac4405bc7fd96610255adcd6bfa3e0ec047f2d46702daabe3d27fd4fe8400b590c8ee3648acb56c2f90e0c5c1facc01c92af4b078dbdffdb78e1e8f68ec463ea6abb466c90756f375", 0xed}, {&(0x7f00000037c0)="f3fa2d4d9a6ee52898cf714454dae7d0ed0c3c8279eb3761469f1b2a5e77f061349ea1f16c57b5f4c41db6acd849984187ae5d1843488314d495380840c9dcb78f1825077644b024c333e7b9247e391a8c216582a7a43f72da2d0f7b41ffc28e0d1d670cf53ac3a2164a7e980fea11540dc8923b889aa40a54461deb3b22c516ce55d37e031688a928eb8e67f6b3147f220a5cf37a6e8a", 0x97}, {&(0x7f0000003880)="f5831b2c69f2e44352c48cf2c4d193b919ca156c769ae1d3589132ecdb4010ea70a57db2f3a85e7565c7c8401558ff3f54bdd2467ac5b26a68c9ee7d6f5cc7eae2f7445aa3ce82ac59db5ac5761ea90b17", 0x51}, {&(0x7f0000003900)="5196d4fff9a8ec77b6a1a33ac5fd407699cfb286daa6e04eb12906ebc3b65579b1b0a5d36ae9dbb23091d7b52dd0904627c7d219841ce8d7dc05e771b732f092036aa106eda23383d4de2ed64c4aaf9006f247cc69afa2f443", 0x59}], 0x8, &(0x7f0000003a00)=[{0xb8, 0x101, 0xb5, "3860226ebd58a09a566ccfc4ad57264270444b4311e1c803edda10d6999b2f005913927adb4b0a75d34b9a426c42dc85dc5983578a8fedbe5f5136de52c2f7e38cc2201ff4345a4ff7a9a2d3680e31de619f2682f1686f4409fe4ac90cf31f55568032cea8cbb71e0b534c4c101138af228592f25c264070bbc83854178ca31e2a246004fde9443b0a0eb0ed645691edd8028fb822e010d6d2f22322b53dd8a368de7d811e0f33b7"}, {0x20, 0x29, 0x2, "c217fb55dd3b24d56a20a9"}, {0x40, 0x101, 0x925, "30ce869894b26111a30f1a254cd3cf14e4d60d25b29cdee6c3d057c4646e07b7cd28344cb90ed404d8cd20"}, {0x68, 0x101, 0x5, "78e2521546e58c548b8741512fd0d12f94b21133876a44790b4627425da3b6e4666d6f58b9652279b2c806f2e5f41e304927b395a2b65afaf75baf8a6099b0efbc60ca58c975ee695ce5c907a8084ff507d818"}], 0x180}, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000003bc0)={0x2, 0x4, 0x8, 0x1, 0x80, r9, 0x2, '\x00', 0x0, r2, 0x3, 0x1, 0x2}, 0x50) recvmsg$unix(r7, &(0x7f0000003f00)={&(0x7f0000003c40)=@abs, 0x6e, &(0x7f0000003e40)=[{&(0x7f0000003cc0)=""/151, 0x97}, {&(0x7f0000003d80)=""/51, 0x33}, {&(0x7f0000003dc0)=""/81, 0x51}], 0x3, &(0x7f0000003e80)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}, 0x120) perf_event_open(&(0x7f0000003f40)={0x3, 0x80, 0x8, 0xed, 0xd, 0x5, 0x0, 0x1, 0x100, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xd86}, 0x101100, 0x5, 0xfffffffd, 0x2, 0x0, 0x8, 0x3, 0x0, 0x3, 0x0, 0x1ff}, r10, 0x2, r11, 0x2) (async) r15 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000004140)=@bpf_tracing={0x1a, 0x4, &(0x7f0000004000)=@raw=[@map_fd={0x18, 0x7, 0x1, 0x0, r11}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000004040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', r6, 0x1c, r14, 0x8, &(0x7f0000004080)={0x7, 0x3}, 0x8, 0x10, &(0x7f00000040c0)={0x5, 0x8, 0xffffffff, 0x7}, 0x10, 0x4b49, r4, 0x0, &(0x7f0000004100)=[r12, r12, r13, r12, 0xffffffffffffffff, r14, r13, r13], 0x0, 0x10, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004240)={{r13}, &(0x7f0000003fc0), &(0x7f0000004200)=r15}, 0x20) recvmsg$unix(r14, &(0x7f0000004900)={&(0x7f0000004280)=@abs, 0x6e, &(0x7f0000004880)=[{&(0x7f0000004300)=""/158, 0x9e}, {&(0x7f00000043c0)=""/130, 0x82}, {&(0x7f0000004480)=""/155, 0x9b}, {&(0x7f0000004540)=""/202, 0xca}, {&(0x7f0000004640)=""/160, 0xa0}, {&(0x7f0000004700)=""/178, 0xb2}, {&(0x7f00000047c0)=""/175, 0xaf}], 0x7}, 0x40000002) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000004940)) r16 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000004980)={0x0, 0x1}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000049c0)=@bloom_filter={0x1e, 0x7f, 0x2, 0x9, 0x2, r16, 0x3, '\x00', r1, r11, 0x4, 0x3, 0x0, 0x7}, 0x50) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000004a40)={0xffffffffffffffff, 0x2, 0x8}, 0xc) (async) r17 = openat$cgroup(r12, &(0x7f0000004a80)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r17, &(0x7f0000004ac0)='blkio.bfq.io_merged\x00', 0x0, 0x0) (async, rerun: 32) ioctl$TUNSETOFFLOAD(r12, 0x400454d0, 0x2) (async, rerun: 32) r18 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000004b40)=@generic={&(0x7f0000004b00)='./file0\x00', 0x0, 0x8}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000004e80)={r18, 0xe0, &(0x7f0000004d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000004b80)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, &(0x7f0000004bc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000004c40)=[0x0, 0x0], 0x0, 0xe4, &(0x7f0000004c80)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000004cc0), &(0x7f0000004d00), 0x8, 0xb0, 0x8, 0x8, &(0x7f0000004d40)}}, 0x10) socketpair(0x2b, 0x5, 0x9, &(0x7f0000004ec0)) (async, rerun: 32) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000004f40)={[{0x2d, 'freezer'}, {0x2d, 'net_prio'}, {0x2b, 'io'}, {0x2b, 'rlimit'}, {0x2d, 'rlimit'}, {0x2b, 'blkio'}]}, 0x2e) (rerun: 32) 380.59422ms ago: executing program 5 (id=5534): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0x5}, 0x880, 0x800, 0x0, 0x8, 0x0, 0x7, 0xffff, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x11b, 0x4, &(0x7f0000000000), 0x18) (async) r1 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000180)={[{0x2b, 'io'}, {0x2b, 'perf_event'}, {0x2b, 'devices'}, {0x2d, 'net_prio'}]}, 0x23) (async) r2 = perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x64}, 0x18, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) r4 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r4, &(0x7f0000003780)={0x0, 0x3000000, &(0x7f0000000080)=[{&(0x7f0000000040)="0202000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x34}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) (async, rerun: 32) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) (async, rerun: 32) r5 = socket$kcm(0x25, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001000000b7050000f4ff00006a0a00fe000000008500000027000000b70000000000000095000000000000009cc6b3fcd62c7d37623802000000505f80fc88943c4f0cf0dd467b597811638883f6f698caf503a22f868ee30a0e8c1bf176db2a6b2feb4b6fd3d5707bfd2d84aaa3b1d4e984c46ea7e2a447a36f5662403e1b2be4cc7c2683908a0d411a9872971c7c56f0979bd10b6d0e196bf02f46c7953ab1abda45cbe8d0d24b5069f8a98f3dc8f76b74635fc9f9de9ca3c00cb9bf4e418d07fa22f0610a70f2bdf4000000000000b0c2940dd8e263aa743f7555193105000000b100400600e1ffff88208a2f7d25c32aac1c5d5b5be399f6609876b5887437a172fbc02a74067529194e533583412dff048f0000000000000000b2728a0481e9d6da43bb6cfb851cd364ff19ffcafe3e64be033c9d2f002cc93c1c13caec04a347903420336bec88c24a9fb6a6991ddb737d527d6acb15426415b6e8b14fdfa2c6e94bd0339454c13ad3e328a100000000b515a1000000000000000eb2e9c15b6c8f6198282df27badac8507bc7d202e0990e0000000008919b3efce02a602b4ad38098774d1feaf5f277a4462a2fff2d6ff4780f9a30a2a5f5f284c00ad35e0a6f6a0f9dae214546d24ef6a9b8ced90b508dc3b55a8259614b731af86503e5849dc87ab86ec0f6a48f0d32f0d4a5f6a03c33612320bb44f2d80363dee9163424ac31469266877942abdbbb3729fd59c0ff048ed5ab58c81b74ef4e159d4594396864a65422fe5f8c8181309becc88091dd6641c2d7e5a68ecbe778f2aae1742b92dc6854de98da66f8e38d1eca95809b738c8ddcf4cf1693c7b1c2ae0a9c27bd1a6f1738f8ba2908139fd653908ca0105e72550fbb1f1543a9bcd48de441c364f1cdb53a1ed4169434fc8f705e262fb793cf25bcd60310991f0b0634fa08308c7100000834cba801f76f820ed6def799116ce2336cd308544fbd3b74e0093968fce3c425729a77ecb090000654680e715f4ce5c1ad2b75aab390700000000000000ed7ebe34db25cbe169138c15a6013220bba55923f62849392cf4fb0327877e22a4dc617a5541a7fb89223888c76d65850dd99997e727557a477a1131d06f6f7360cfcf137ccd2e0d516bb31be413b0c7bd1bd24d3dc2d8e3f4cdfa872b66d89332e313934e9e9a3471f7170832a775bb2a8e4aa6321b1a6546a56e4121231380b04eb55337c7edc66d6e3400b06fcb31b659be19cff61cfac6f1b771967aa7bfcf7dba26e279ab9bef181cc917fca8941819445dd6fd171c4065a526c7000000000000ef570531e36dd9cf4da9a269b71e05463dfadff8401bc3202a9c393e9658d15dc20655abad7f9c54fc89176071bf7645d221696fa24e1310598f1f0bbd6ea058fdec63fab905ac925b16bd5cedf4ea2775d897897473dce8a339e340519df5dc3c8ab91b6b96b10cb05637dc6f4f24b2b0ba824028fa0fa29c9cf80443de08b3fc140082c8aa79d6324e9c609b0d9c2eeba3accb49fe851b6f56a425f70b3157443d2b05a883700b554738fd8453ed2ba5af37121ff47dc759000000000000000000000000000000000d78287bf7833841f7d49160b8bf2bd448e49c9ce544f0fafba633b694965606fa98f10c1c9f55eee1aaf03d30e61c9a468758c151ebf809efcda19b880c534bce505e14b65bb4185bf0614f23c38d106f77e407cac3cdff686370d091d453f7b8f8731eb70c3053fbb1a7d1ec764f9436489e84941336e56ccdba860901290a3d27b6330b85d52095c3b28718"], &(0x7f0000000340)='GPL\x00'}, 0x48) write$cgroup_subtree(r5, 0x0, 0x14) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = getpid() perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xa2f9, 0x5}, 0x5142, 0x0, 0x7fffffff, 0x1, 0x3, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, r6, 0x0, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f00000001c0)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x2, 0x33}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xc, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 336.686053ms ago: executing program 3 (id=5535): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@ip_retopts={{0x18, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x4, 0x3f, 0x3, 0x1, [{@dev={0xac, 0x14, 0x14, 0x27}, 0x40}, {@private=0xa010102, 0x10000}, {@dev={0xac, 0x14, 0x14, 0x26}, 0x80000000}, {@rand_addr=0x64010101, 0x9}, {@local, 0xc}, {@multicast2, 0x5dc7}, {@private=0xa010101, 0x80000000}, {@loopback, 0x1ff}, {@remote, 0x3}]}, @generic={0x7, 0x2}]}}}], 0xb}, 0x40000) r1 = socket$kcm(0x21, 0x2, 0x2) (async) r2 = socket$kcm(0x10, 0x2, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) (async) sendmsg$inet(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="d8000000180081064e80f782db44b9040a1d080000000000000055a10a0015400100142603600e1208009e00000004010400160040000540fec00000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef409fd2ee0125b91643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d28a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3060000000000000081ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b4337812398", 0xd8}], 0x1}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x19, 0x4, 0x4, 0x2}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r9}, 0xc) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) (async) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b702000000ffec00850000008600000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="06000000040000001810000089"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r14, 0x0, 0x7}, 0x38) r15 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x2e, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r12, @ANYRES32=r10, @ANYRESHEX=r14, @ANYRES32=r10, @ANYBLOB="00000000050000001849000004000000000000000000000018110000", @ANYRESDEC=r14, @ANYBLOB="0000000000000000b7020000000000008500000086000000b7080000000000007b8af8ff00000000b7080000100000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000a500000018110000", @ANYRES32=r13, @ANYRESHEX=0x0], &(0x7f0000000000)='GPL\x00', 0x7fffffff, 0x1000, &(0x7f0000000e80)=""/4096, 0x40f00, 0x33, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000080)={0x0, 0x9, 0x8, 0xd}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f00000000c0)=[{0x4, 0x1, 0x3, 0x7}, {0x5, 0x4, 0xa, 0x1}, {0x2, 0x1, 0xf, 0xb}, {0x1, 0x1, 0x0, 0x4}, {0x4, 0x2, 0x0, 0xc}]}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000001c0)={r1, r15}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x200000}, {{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x18}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0x41}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r7}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 320.834083ms ago: executing program 4 (id=5536): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) r1 = socket$kcm(0x2, 0x3, 0x2) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="1400000033000b0fd25a806cb0a07eeb0d8f6a8a", 0x14}], 0x1}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000061043c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) (async) socket$kcm(0xa, 0x6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="850000002200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/ipc\x00') (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000850000000800000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) socket$kcm(0x10, 0x2, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f0000000040)}, 0x20) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r3, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x70}, 0x12160) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) (async) socketpair(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='\x00') bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) close(r1) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 241.625917ms ago: executing program 4 (id=5537): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x19, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x60f74f03}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a7fbb}, @ldst={0x6, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x93, &(0x7f00000005c0)=""/147, 0x20, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x4c) 80.294475ms ago: executing program 3 (id=5538): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'dvmrp0\x00', 0x2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x1, 0xfffff038}, {0x6, 0x4}]}) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x1c0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0, 0x0, 0x1f000801}, 0x200000000000000) 0s ago: executing program 4 (id=5539): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b700000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): [T19609] netlink: 209836 bytes leftover after parsing attributes in process `syz.6.4151'. [ 589.940669][T19639] netlink: 'syz.4.4158': attribute type 29 has an invalid length. [ 590.009679][T19639] netlink: 'syz.4.4158': attribute type 29 has an invalid length. [ 590.054167][T19617] netlink: 'syz.6.4151': attribute type 9 has an invalid length. [ 590.087774][T19617] netlink: 209836 bytes leftover after parsing attributes in process `syz.6.4151'. [ 590.122684][T19641] netlink: 'syz.4.4158': attribute type 29 has an invalid length. [ 590.169888][T19639] netlink: 'syz.4.4158': attribute type 29 has an invalid length. [ 590.230591][T19651] FAULT_INJECTION: forcing a failure. [ 590.230591][T19651] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 590.248602][T19651] CPU: 1 PID: 19651 Comm: syz.5.4160 Not tainted syzkaller #0 [ 590.256294][T19651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 590.266813][T19651] Call Trace: [ 590.270188][T19651] [ 590.273218][T19651] dump_stack_lvl+0x188/0x250 [ 590.278071][T19651] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 590.284351][T19651] ? show_regs_print_info+0x20/0x20 [ 590.289660][T19651] ? load_image+0x400/0x400 [ 590.294485][T19651] should_fail+0x38c/0x4c0 [ 590.299122][T19651] strncpy_from_user+0x32/0x360 [ 590.304003][T19651] bpf_prog_load+0x1f0/0x1510 [ 590.308725][T19651] ? map_freeze+0x350/0x350 [ 590.313254][T19651] ? __might_fault+0xb7/0x110 [ 590.317978][T19651] ? __might_fault+0xb3/0x110 [ 590.322775][T19651] ? bpf_lsm_bpf+0x5/0x10 [ 590.327207][T19651] ? security_bpf+0x7a/0xa0 [ 590.331756][T19651] __sys_bpf+0x532/0x6f0 [ 590.336025][T19651] ? bpf_link_show_fdinfo+0x380/0x380 [ 590.341688][T19651] __x64_sys_bpf+0x78/0x90 [ 590.346292][T19651] do_syscall_64+0x4c/0xa0 [ 590.350806][T19651] ? clear_bhb_loop+0x30/0x80 [ 590.355499][T19651] ? clear_bhb_loop+0x30/0x80 [ 590.360468][T19651] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 590.366643][T19651] RIP: 0033:0x7fe4e036e799 [ 590.371268][T19651] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 590.391241][T19651] RSP: 002b:00007fe4de5c8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 590.399909][T19651] RAX: ffffffffffffffda RBX: 00007fe4e05e7fa0 RCX: 00007fe4e036e799 [ 590.408163][T19651] RDX: 000000000000004c RSI: 0000200000000900 RDI: 0000000000000005 [ 590.416596][T19651] RBP: 00007fe4de5c8090 R08: 0000000000000000 R09: 0000000000000000 [ 590.424949][T19651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 590.433023][T19651] R13: 00007fe4e05e8038 R14: 00007fe4e05e7fa0 R15: 00007ffff6d7a668 [ 590.441122][T19651] [ 590.452000][T19650] netlink: 'syz.6.4161': attribute type 21 has an invalid length. [ 590.692808][T19661] netlink: 'syz.4.4163': attribute type 9 has an invalid length. [ 590.707284][T19661] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.4163'. [ 591.124731][T19660] device wlan0 entered promiscuous mode [ 591.654350][T19691] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.4171'. [ 591.711922][T19698] netlink: 197204 bytes leftover after parsing attributes in process `syz.6.4173'. [ 591.742864][T19707] FAULT_INJECTION: forcing a failure. [ 591.742864][T19707] name failslab, interval 1, probability 0, space 0, times 0 [ 591.745682][T19698] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4173'. [ 591.807612][T19707] CPU: 0 PID: 19707 Comm: syz.5.4174 Not tainted syzkaller #0 [ 591.815123][T19707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 591.825453][T19707] Call Trace: [ 591.828747][T19707] [ 591.831703][T19707] dump_stack_lvl+0x188/0x250 [ 591.836397][T19707] ? show_regs_print_info+0x20/0x20 [ 591.841706][T19707] ? load_image+0x400/0x400 [ 591.846414][T19707] ? __might_sleep+0xf0/0xf0 [ 591.851197][T19707] ? __lock_acquire+0x7d10/0x7d10 [ 591.856251][T19707] should_fail+0x38c/0x4c0 [ 591.860887][T19707] should_failslab+0x5/0x20 [ 591.865422][T19707] slab_pre_alloc_hook+0x51/0xc0 [ 591.870676][T19707] kmem_cache_alloc_node_trace+0x4a/0x300 [ 591.876616][T19707] ? __get_vm_area_node+0x119/0x2d0 [ 591.881942][T19707] ? lock_chain_count+0x20/0x20 [ 591.886992][T19707] __get_vm_area_node+0x119/0x2d0 [ 591.892433][T19707] __vmalloc_node_range+0xef/0x8b0 [ 591.897764][T19707] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 591.903445][T19707] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 591.909409][T19707] __vmalloc+0x76/0x80 [ 591.913628][T19707] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 591.919374][T19707] bpf_prog_alloc_no_stats+0x36/0x2c0 [ 591.925544][T19707] bpf_prog_alloc+0x1a/0x1e0 [ 591.930327][T19707] bpf_prog_load+0x7c6/0x1510 [ 591.935317][T19707] ? map_freeze+0x350/0x350 [ 591.939984][T19707] ? __might_fault+0xb7/0x110 [ 591.944965][T19707] ? __might_fault+0xb3/0x110 [ 591.949821][T19707] ? bpf_lsm_bpf+0x5/0x10 [ 591.954195][T19707] ? security_bpf+0x7a/0xa0 [ 591.958892][T19707] __sys_bpf+0x532/0x6f0 [ 591.963254][T19707] ? bpf_link_show_fdinfo+0x380/0x380 [ 591.968775][T19707] __x64_sys_bpf+0x78/0x90 [ 591.973496][T19707] do_syscall_64+0x4c/0xa0 [ 591.978027][T19707] ? clear_bhb_loop+0x30/0x80 [ 591.982721][T19707] ? clear_bhb_loop+0x30/0x80 [ 591.987499][T19707] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 591.993684][T19707] RIP: 0033:0x7fe4e036e799 [ 591.998222][T19707] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 592.018976][T19707] RSP: 002b:00007fe4de5c8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 592.027935][T19707] RAX: ffffffffffffffda RBX: 00007fe4e05e7fa0 RCX: 00007fe4e036e799 [ 592.036020][T19707] RDX: 000000000000004c RSI: 0000200000000900 RDI: 0000000000000005 [ 592.044158][T19707] RBP: 00007fe4de5c8090 R08: 0000000000000000 R09: 0000000000000000 [ 592.052340][T19707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 592.061554][T19707] R13: 00007fe4e05e8038 R14: 00007fe4e05e7fa0 R15: 00007ffff6d7a668 [ 592.070099][T19707] [ 592.351901][T19707] syz.5.4174: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz5,mems_allowed=0-1 [ 592.384733][T19707] CPU: 0 PID: 19707 Comm: syz.5.4174 Not tainted syzkaller #0 [ 592.392472][T19707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 592.402802][T19707] Call Trace: [ 592.406181][T19707] [ 592.409407][T19707] dump_stack_lvl+0x188/0x250 [ 592.414448][T19707] ? rcu_lock_release+0x5/0x20 [ 592.419321][T19707] ? show_regs_print_info+0x20/0x20 [ 592.424517][T19707] ? load_image+0x400/0x400 [ 592.429381][T19707] warn_alloc+0x243/0x320 [ 592.433827][T19707] ? zone_watermark_ok_safe+0x240/0x240 [ 592.439421][T19707] ? __get_vm_area_node+0x2b5/0x2d0 [ 592.444637][T19707] __vmalloc_node_range+0x2b1/0x8b0 [ 592.449941][T19707] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 592.455578][T19707] __vmalloc+0x76/0x80 [ 592.459635][T19707] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 592.465344][T19707] bpf_prog_alloc_no_stats+0x36/0x2c0 [ 592.470880][T19707] bpf_prog_alloc+0x1a/0x1e0 [ 592.475572][T19707] bpf_prog_load+0x7c6/0x1510 [ 592.480456][T19707] ? map_freeze+0x350/0x350 [ 592.485071][T19707] ? __might_fault+0xb7/0x110 [ 592.490020][T19707] ? __might_fault+0xb3/0x110 [ 592.494774][T19707] ? bpf_lsm_bpf+0x5/0x10 [ 592.499182][T19707] ? security_bpf+0x7a/0xa0 [ 592.503895][T19707] __sys_bpf+0x532/0x6f0 [ 592.508333][T19707] ? bpf_link_show_fdinfo+0x380/0x380 [ 592.514322][T19707] __x64_sys_bpf+0x78/0x90 [ 592.518813][T19707] do_syscall_64+0x4c/0xa0 [ 592.523387][T19707] ? clear_bhb_loop+0x30/0x80 [ 592.528052][T19707] ? clear_bhb_loop+0x30/0x80 [ 592.532719][T19707] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 592.539121][T19707] RIP: 0033:0x7fe4e036e799 [ 592.543529][T19707] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 592.563637][T19707] RSP: 002b:00007fe4de5c8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 592.572135][T19707] RAX: ffffffffffffffda RBX: 00007fe4e05e7fa0 RCX: 00007fe4e036e799 [ 592.580282][T19707] RDX: 000000000000004c RSI: 0000200000000900 RDI: 0000000000000005 [ 592.588629][T19707] RBP: 00007fe4de5c8090 R08: 0000000000000000 R09: 0000000000000000 [ 592.596760][T19707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 592.604718][T19707] R13: 00007fe4e05e8038 R14: 00007fe4e05e7fa0 R15: 00007ffff6d7a668 [ 592.612692][T19707] [ 592.638481][T19707] Mem-Info: [ 592.644158][T19707] active_anon:305 inactive_anon:13166 isolated_anon:0 [ 592.644158][T19707] active_file:23629 inactive_file:36421 isolated_file:0 [ 592.644158][T19707] unevictable:768 dirty:111 writeback:0 [ 592.644158][T19707] slab_reclaimable:21570 slab_unreclaimable:109340 [ 592.644158][T19707] mapped:29583 shmem:1664 pagetables:844 bounce:0 [ 592.644158][T19707] kernel_misc_reclaimable:0 [ 592.644158][T19707] free:1343929 free_pcp:10736 free_cma:0 [ 592.755020][T19720] netlink: 'syz.6.4177': attribute type 10 has an invalid length. [ 592.783670][T19722] netlink: 9286 bytes leftover after parsing attributes in process `syz.8.4178'. [ 593.185879][T19741] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4183'. [ 593.294086][T19707] Node 0 active_anon:1192kB inactive_anon:52376kB active_file:94312kB inactive_file:145780kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118536kB dirty:536kB writeback:0kB shmem:4584kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:15308kB pagetables:3432kB all_unreclaimable? no [ 593.368690][T19707] Node 1 active_anon:32kB inactive_anon:508kB active_file:204kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:2076kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 593.410013][T19707] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 593.442322][T19707] lowmem_reserve[]: 0 2539 2540 2540 2540 [ 593.449266][T19707] Node 0 DMA32 free:1437112kB min:34784kB low:43480kB high:52176kB reserved_highatomic:0KB active_anon:1192kB inactive_anon:52376kB active_file:94312kB inactive_file:145780kB unevictable:1536kB writepending:536kB present:3129332kB managed:2606552kB mlocked:0kB bounce:0kB free_pcp:41436kB local_pcp:21276kB free_cma:0kB [ 593.486512][T19707] lowmem_reserve[]: 0 0 0 0 0 [ 593.491751][T19707] Node 0 Normal free:8kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:660kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:12kB free_cma:0kB [ 593.575687][T19707] lowmem_reserve[]: 0 0 0 0 0 [ 593.596380][T19707] Node 1 Normal free:3923760kB min:55108kB low:68884kB high:82660kB reserved_highatomic:0KB active_anon:32kB inactive_anon:508kB active_file:204kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 593.637558][T19707] lowmem_reserve[]: 0 0 0 0 0 [ 593.658464][T19707] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 593.698351][T19757] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.4186'. [ 593.715461][T19707] Node 0 DMA32: 3070*4kB (UME) 2046*8kB (UM) 2186*16kB (UME) 490*32kB (UME) 663*64kB (UME) 866*128kB (UM) 400*256kB (UM) 158*512kB (UM) 23*1024kB (UME) 9*2048kB (UME) 239*4096kB (UM) = 1436808kB [ 593.781129][T19707] Node 0 Normal: 2*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 593.805882][T19707] Node 1 Normal: 242*4kB (UE) 37*8kB (UME) 24*16kB (UME) 188*32kB (UE) 75*64kB (UME) 17*128kB (UME) 10*256kB (UM) 8*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 951*4096kB (M) = 3923760kB [ 593.856148][T19707] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 593.909978][T19707] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 593.943815][T19707] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 593.958961][T19707] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 593.997449][T19707] 61740 total pagecache pages [ 594.013261][T19707] 0 pages in swap cache [ 594.057530][T19707] Swap cache stats: add 0, delete 0, find 0/0 [ 594.111486][T19707] Free swap = 124996kB [ 594.115952][T19707] Total swap = 124996kB [ 594.125768][T19767] netlink: 'syz.4.4189': attribute type 10 has an invalid length. [ 594.139191][T19707] 2097051 pages RAM [ 594.143222][T19707] 0 pages HighMem/MovableOnly [ 594.156831][T19767] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 594.174407][T19707] 411490 pages reserved [ 594.183120][T19707] 0 pages cma reserved [ 594.223241][T19767] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 594.331827][T19767] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 594.344267][T19771] netlink: 'syz.6.4190': attribute type 5 has an invalid length. [ 594.710962][T19791] netlink: 'syz.5.4194': attribute type 9 has an invalid length. [ 594.728816][T19791] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.4194'. [ 594.831852][T19798] netlink: 'syz.4.4196': attribute type 2 has an invalid length. [ 594.917326][T19798] netlink: 119 bytes leftover after parsing attributes in process `syz.4.4196'. [ 595.547402][T19797] netlink: 'syz.5.4194': attribute type 9 has an invalid length. [ 595.587493][T19797] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.4194'. [ 595.880199][T19826] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.4206'. [ 596.455646][T19851] netlink: 1 bytes leftover after parsing attributes in process `syz.5.4211'. [ 597.013681][T19873] netlink: 'syz.8.4216': attribute type 46 has an invalid length. [ 597.086671][T19872] netlink: 'syz.6.4226': attribute type 1 has an invalid length. [ 597.126384][T19872] netlink: 101600 bytes leftover after parsing attributes in process `syz.6.4226'. [ 597.169786][T19876] netlink: 'syz.6.4226': attribute type 10 has an invalid length. [ 597.257088][T19876] netlink: 55 bytes leftover after parsing attributes in process `syz.6.4226'. [ 597.304435][T19879] netlink: 'syz.4.4218': attribute type 9 has an invalid length. [ 597.323893][T19879] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.4218'. [ 598.199364][T19883] netlink: 'syz.4.4218': attribute type 9 has an invalid length. [ 598.228807][T19883] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.4218'. [ 598.455429][T19915] netlink: 'syz.5.4225': attribute type 21 has an invalid length. [ 598.545842][T19923] delete_channel: no stack [ 598.596079][T19923] delete_channel: no stack [ 598.646141][T19923] netlink: 209844 bytes leftover after parsing attributes in process `syz.6.4230'. [ 598.830150][T19931] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4232'. [ 599.155657][T19949] netlink: 'syz.3.4236': attribute type 10 has an invalid length. [ 599.175352][T19949] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4236'. [ 599.258681][T19949] batman_adv: batadv0: Adding interface: vlan1 [ 599.319527][T19949] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 599.449599][T19949] batman_adv: batadv0: Interface activated: vlan1 [ 600.214140][T19977] device wlan0 left promiscuous mode [ 600.234136][T19980] device wlan0 entered promiscuous mode [ 600.402284][T19992] netlink: 'syz.8.4247': attribute type 25 has an invalid length. [ 602.746760][T20093] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.4274'. [ 603.243019][T20119] netlink: 182 bytes leftover after parsing attributes in process `syz.6.4283'. [ 603.376835][T20118] netlink: 'syz.8.4284': attribute type 10 has an invalid length. [ 603.417542][T20118] netlink: 55 bytes leftover after parsing attributes in process `syz.8.4284'. [ 604.987046][T20173] netlink: 144308 bytes leftover after parsing attributes in process `syz.5.4295'. [ 605.322424][T20188] delete_channel: no stack [ 605.344235][T20188] delete_channel: no stack [ 605.437719][T20188] netlink: 209844 bytes leftover after parsing attributes in process `syz.8.4299'. [ 605.725561][T20194] netlink: 'syz.4.4301': attribute type 1 has an invalid length. [ 605.792497][T20194] netlink: 'syz.4.4301': attribute type 10 has an invalid length. [ 605.865594][T20194] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4301'. [ 605.929897][T20194] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 607.009578][T20257] netlink: 'syz.5.4313': attribute type 10 has an invalid length. [ 607.022196][T20257] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4313'. [ 607.051498][T20257] batman_adv: batadv0: Adding interface: vlan1 [ 607.070569][T20257] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 607.139609][T20257] batman_adv: batadv0: Interface activated: vlan1 [ 608.983100][T20303] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.4322'. [ 608.996523][T20303] netlink: 'syz.4.4322': attribute type 2 has an invalid length. [ 610.425533][T20339] netlink: 1 bytes leftover after parsing attributes in process `syz.8.4329'. [ 611.789570][T20393] netlink: 16182 bytes leftover after parsing attributes in process `syz.5.4342'. [ 611.871920][T20393] netlink: 'syz.5.4342': attribute type 10 has an invalid length. [ 612.421239][T20407] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.4348'. [ 614.877061][T20493] netlink: 'syz.4.4372': attribute type 10 has an invalid length. [ 614.925493][T20493] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4372'. [ 614.983927][T20493] batman_adv: batadv0: Adding interface: vlan1 [ 615.004658][T20493] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 615.074452][T20493] batman_adv: batadv0: Interface activated: vlan1 [ 616.605365][T20567] netlink: 209820 bytes leftover after parsing attributes in process `syz.3.4391'. [ 617.138725][T20578] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.4395'. [ 617.197561][T20578] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 617.366375][T20593] netlink: 'syz.8.4396': attribute type 10 has an invalid length. [ 617.416363][T20593] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4396'. [ 617.790729][T20615] netlink: 'syz.4.4402': attribute type 10 has an invalid length. [ 620.789647][T20615] device geneve0 entered promiscuous mode [ 620.822230][T20615] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 620.835361][T20605] IPv6: pim6reg1: Disabled Multicast RS [ 621.377976][T20652] netlink: 'syz.4.4409': attribute type 9 has an invalid length. [ 621.407493][T20652] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.4409'. [ 621.837829][T20674] netlink: 'syz.4.4413': attribute type 10 has an invalid length. [ 621.887361][T20674] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4413'. [ 622.088180][T20682] netlink: 'syz.4.4414': attribute type 10 has an invalid length. [ 622.096248][T20682] netlink: 55 bytes leftover after parsing attributes in process `syz.4.4414'. [ 622.626239][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 622.652542][T20701] netlink: 209844 bytes leftover after parsing attributes in process `syz.8.4419'. [ 622.710441][T20700] netlink: 'syz.8.4419': attribute type 3 has an invalid length. [ 622.733569][T20700] netlink: 105116 bytes leftover after parsing attributes in process `syz.8.4419'. [ 622.776456][T20703] netlink: 209844 bytes leftover after parsing attributes in process `syz.8.4419'. [ 623.314258][T20729] netlink: 'syz.8.4425': attribute type 10 has an invalid length. [ 623.327242][T20729] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4425'. [ 624.593459][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.599854][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.975200][T20800] FAULT_INJECTION: forcing a failure. [ 624.975200][T20800] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 625.038006][T20800] CPU: 1 PID: 20800 Comm: syz.3.4440 Not tainted syzkaller #0 [ 625.045707][T20800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 625.056052][T20800] Call Trace: [ 625.059350][T20800] [ 625.062389][T20800] dump_stack_lvl+0x188/0x250 [ 625.067093][T20800] ? show_regs_print_info+0x20/0x20 [ 625.072413][T20800] ? load_image+0x400/0x400 [ 625.077188][T20800] ? __lock_acquire+0x7d10/0x7d10 [ 625.082438][T20800] ? vfs_write+0x8b2/0xd60 [ 625.086965][T20800] should_fail+0x38c/0x4c0 [ 625.091522][T20800] _copy_from_user+0x2e/0x170 [ 625.096309][T20800] __sys_bpf+0x26d/0x6f0 [ 625.100841][T20800] ? bpf_link_show_fdinfo+0x380/0x380 [ 625.106860][T20800] __x64_sys_bpf+0x78/0x90 [ 625.111395][T20800] do_syscall_64+0x4c/0xa0 [ 625.115828][T20800] ? clear_bhb_loop+0x30/0x80 [ 625.120879][T20800] ? clear_bhb_loop+0x30/0x80 [ 625.125757][T20800] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 625.132197][T20800] RIP: 0033:0x7f9326405799 [ 625.136723][T20800] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 625.156692][T20800] RSP: 002b:00007f932465f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 625.165205][T20800] RAX: ffffffffffffffda RBX: 00007f932667efa0 RCX: 00007f9326405799 [ 625.173571][T20800] RDX: 000000000000004c RSI: 0000200000000900 RDI: 0000000000000005 [ 625.182228][T20800] RBP: 00007f932465f090 R08: 0000000000000000 R09: 0000000000000000 [ 625.190503][T20800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 625.198581][T20800] R13: 00007f932667f038 R14: 00007f932667efa0 R15: 00007ffc117a26e8 [ 625.207029][T20800] [ 626.255474][T20822] device syzkaller0 entered promiscuous mode [ 627.031161][T20845] FAULT_INJECTION: forcing a failure. [ 627.031161][T20845] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 627.149856][T20845] CPU: 0 PID: 20845 Comm: syz.8.4454 Not tainted syzkaller #0 [ 627.157623][T20845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 627.168117][T20845] Call Trace: [ 627.171583][T20845] [ 627.174720][T20845] dump_stack_lvl+0x188/0x250 [ 627.179655][T20845] ? show_regs_print_info+0x20/0x20 [ 627.184978][T20845] ? load_image+0x400/0x400 [ 627.189596][T20845] ? __lock_acquire+0x7d10/0x7d10 [ 627.194997][T20845] ? __lock_acquire+0x13bc/0x7d10 [ 627.200166][T20845] should_fail+0x38c/0x4c0 [ 627.204614][T20845] strncpy_from_user+0x32/0x360 [ 627.209489][T20845] bpf_prog_load+0x1f0/0x1510 [ 627.214631][T20845] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 627.220646][T20845] ? lock_chain_count+0x20/0x20 [ 627.225918][T20845] ? map_freeze+0x350/0x350 [ 627.230719][T20845] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 627.237001][T20845] ? lockdep_hardirqs_on+0x94/0x140 [ 627.242519][T20845] ? copy_user_enhanced_fast_string+0xe/0x40 [ 627.248744][T20845] ? bpf_lsm_bpf+0x5/0x10 [ 627.253526][T20845] ? security_bpf+0x7a/0xa0 [ 627.258165][T20845] __sys_bpf+0x532/0x6f0 [ 627.262870][T20845] ? bpf_link_show_fdinfo+0x380/0x380 [ 627.268644][T20845] __x64_sys_bpf+0x78/0x90 [ 627.273169][T20845] do_syscall_64+0x4c/0xa0 [ 627.277705][T20845] ? clear_bhb_loop+0x30/0x80 [ 627.282666][T20845] ? clear_bhb_loop+0x30/0x80 [ 627.287573][T20845] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 627.293760][T20845] RIP: 0033:0x7fc300b70799 [ 627.298202][T20845] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 627.318172][T20845] RSP: 002b:00007fc2fedca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 627.326779][T20845] RAX: ffffffffffffffda RBX: 00007fc300de9fa0 RCX: 00007fc300b70799 [ 627.334986][T20845] RDX: 000000000000004c RSI: 0000200000000900 RDI: 0000000000000005 [ 627.342985][T20845] RBP: 00007fc2fedca090 R08: 0000000000000000 R09: 0000000000000000 [ 627.350981][T20845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 627.359051][T20845] R13: 00007fc300dea038 R14: 00007fc300de9fa0 R15: 00007ffcfeb94198 [ 627.367053][T20845] [ 627.445493][T20853] netlink: 'syz.4.4456': attribute type 39 has an invalid length. [ 628.010409][T20147] syz.6.4283 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 628.163059][T20147] CPU: 1 PID: 20147 Comm: syz.6.4283 Not tainted syzkaller #0 [ 628.171055][T20147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 628.181723][T20147] Call Trace: [ 628.185026][T20147] [ 628.188059][T20147] dump_stack_lvl+0x188/0x250 [ 628.192929][T20147] ? show_regs_print_info+0x20/0x20 [ 628.198152][T20147] ? load_image+0x400/0x400 [ 628.202679][T20147] ? local_lock_release+0x170/0x170 [ 628.207907][T20147] ? __rwlock_init+0x140/0x140 [ 628.212879][T20147] dump_header+0xd4/0x770 [ 628.217247][T20147] oom_kill_process+0x20e/0x3d0 [ 628.222218][T20147] out_of_memory+0xdbe/0x1180 [ 628.227100][T20147] ? mutex_lock_io_nested+0x60/0x60 [ 628.232404][T20147] ? unregister_oom_notifier+0x20/0x20 [ 628.237896][T20147] mem_cgroup_out_of_memory+0x2bd/0x3b0 [ 628.243544][T20147] ? mem_cgroup_oom_trylock+0x210/0x210 [ 628.249288][T20147] ? do_raw_spin_unlock+0x11d/0x230 [ 628.254514][T20147] try_charge_memcg+0xfcf/0x14f0 [ 628.259487][T20147] ? perf_trace_buf_alloc+0x300/0x300 [ 628.264994][T20147] ? get_mem_cgroup_from_objcg+0x120/0x120 [ 628.270937][T20147] ? rcu_lock_acquire+0x30/0x30 [ 628.275819][T20147] charge_memcg+0x100/0x2f0 [ 628.280336][T20147] ? __mem_cgroup_charge+0x80/0x80 [ 628.285544][T20147] __mem_cgroup_charge+0x21/0x80 [ 628.290770][T20147] shmem_add_to_page_cache+0xa98/0x14d0 [ 628.296473][T20147] ? put_page+0x200/0x200 [ 628.301119][T20147] ? mark_lock+0x94/0x320 [ 628.305669][T20147] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 628.311731][T20147] shmem_getpage_gfp+0x1796/0x2d40 [ 628.317364][T20147] shmem_write_begin+0xcd/0x1a0 [ 628.322416][T20147] generic_perform_write+0x2b6/0x550 [ 628.327712][T20147] ? atime_needs_update+0x780/0x780 [ 628.333200][T20147] ? grab_cache_page_write_begin+0xa0/0xa0 [ 628.339231][T20147] ? file_remove_privs+0x5d0/0x5d0 [ 628.344595][T20147] ? rwsem_write_trylock+0x135/0x1c0 [ 628.349993][T20147] ? clear_nonspinnable+0x60/0x60 [ 628.355027][T20147] __generic_file_write_iter+0x25f/0x4e0 [ 628.361021][T20147] generic_file_write_iter+0xa6/0x1b0 [ 628.366497][T20147] __kernel_write+0x51c/0x970 [ 628.371329][T20147] ? vfs_read+0xd60/0xd60 [ 628.375851][T20147] ? __lock_acquire+0x7d10/0x7d10 [ 628.380987][T20147] ? cgroup_freezing+0x264/0x310 [ 628.386134][T20147] ? freezing_slow_path+0x104/0x150 [ 628.391339][T20147] __dump_emit+0x249/0x370 [ 628.395857][T20147] ? wait_for_dump_helpers+0x3d0/0x3d0 [ 628.401419][T20147] ? dump_emit+0x153/0x3d0 [ 628.405934][T20147] dump_user_range+0x84/0x340 [ 628.411170][T20147] elf_core_dump+0x2fbd/0x3500 [ 628.416277][T20147] ? load_elf_library+0x920/0x920 [ 628.421421][T20147] ? verify_lock_unused+0x140/0x140 [ 628.426864][T20147] ? dump_vma_snapshot+0xb00/0xe40 [ 628.432216][T20147] ? rcu_read_lock_any_held+0xb0/0x130 [ 628.438141][T20147] do_coredump+0x14c7/0x2ac0 [ 628.442951][T20147] ? nfs_stat_to_errno+0x190/0x190 [ 628.448191][T20147] ? lock_chain_count+0x20/0x20 [ 628.453154][T20147] ? _raw_spin_unlock_irq+0x1f/0x40 [ 628.458375][T20147] ? lockdep_hardirqs_on+0x94/0x140 [ 628.463592][T20147] get_signal+0x40a/0x12c0 [ 628.468169][T20147] arch_do_signal_or_restart+0xe7/0x12c0 [ 628.473850][T20147] ? rcu_nmi_exit+0x6f/0xf0 [ 628.478915][T20147] ? get_sigframe_size+0x10/0x10 [ 628.483983][T20147] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 628.490194][T20147] ? exit_to_user_mode_loop+0x3b/0x130 [ 628.495948][T20147] exit_to_user_mode_loop+0x9e/0x130 [ 628.501537][T20147] exit_to_user_mode_prepare+0xee/0x180 [ 628.507282][T20147] irqentry_exit_to_user_mode+0x5/0x30 [ 628.513944][T20147] exc_general_protection+0x1e4/0x270 [ 628.521038][T20147] ? exc_page_fault+0x88/0x100 [ 628.525840][T20147] asm_exc_general_protection+0x22/0x30 [ 628.531518][T20147] RIP: 0033:0x7fa488fb27a1 [ 628.536302][T20147] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 628.556349][T20147] RSP: 002b:0000200000000130 EFLAGS: 00010217 [ 628.562693][T20147] RAX: 0000000000000000 RBX: 00007fa48922bfa0 RCX: 00007fa488fb2799 [ 628.570855][T20147] RDX: 0000200000000140 RSI: 0000200000000130 RDI: 0000000000200000 [ 628.578923][T20147] RBP: 00007fa489048c99 R08: 0000200000000300 R09: 0000200000000300 [ 628.587374][T20147] R10: 0000200000000180 R11: 0000000000000206 R12: 0000000000000000 [ 628.595359][T20147] R13: 00007fa48922c038 R14: 00007fa48922bfa0 R15: 00007fffaf117cb8 [ 628.603480][T20147] [ 628.804197][T20883] netlink: set zone limit has 8 unknown bytes [ 628.845295][T20147] memory: usage 307200kB, limit 307200kB, failcnt 11246 [ 628.855826][T20147] memory+swap: usage 432112kB, limit 9007199254740988kB, failcnt 0 [ 628.872565][T20147] kmem: usage 5296kB, limit 9007199254740988kB, failcnt 0 [ 628.897443][T20147] Memory cgroup stats for /syz6: [ 628.898308][T20147] anon 167936 [ 628.898308][T20147] file 308936704 [ 628.898308][T20147] kernel_stack 425984 [ 628.898308][T20147] pagetables 2256896 [ 628.898308][T20147] percpu 14440 [ 628.898308][T20147] sock 0 [ 628.898308][T20147] shmem 308936704 [ 628.898308][T20147] file_mapped 0 [ 628.898308][T20147] file_dirty 0 [ 628.898308][T20147] file_writeback 0 [ 628.898308][T20147] swapcached 128106496 [ 628.898308][T20147] anon_thp 0 [ 628.898308][T20147] file_thp 0 [ 628.898308][T20147] shmem_thp 0 [ 628.898308][T20147] inactive_anon 308838400 [ 628.898308][T20147] active_anon 311296 [ 628.898308][T20147] inactive_file 0 [ 628.898308][T20147] active_file 0 [ 628.898308][T20147] unevictable 0 [ 628.898308][T20147] slab_reclaimable 1643616 [ 628.898308][T20147] slab_unreclaimable 805624 [ 628.898308][T20147] slab 2449240 [ 628.898308][T20147] workingset_refault_anon 27 [ 628.898308][T20147] workingset_refault_file 0 [ 628.898308][T20147] workingset_activate_anon 0 [ 629.377888][T20147] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz6,mems_allowed=0-1,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.4283,pid=20148,uid=0 [ 629.432399][T20147] Memory cgroup out of memory: Killed process 20148 (syz.6.4283) total-vm:98644kB, anon-rss:1248kB, file-rss:54208kB, shmem-rss:0kB, UID:0 pgtables:200kB oom_score_adj:1000 [ 629.853462][T20908] netlink: 'syz.8.4473': attribute type 4 has an invalid length. [ 629.862979][T20126] syz.6.4283 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 629.970992][T20908] netlink: 137972 bytes leftover after parsing attributes in process `syz.8.4473'. [ 629.997280][T20126] CPU: 0 PID: 20126 Comm: syz.6.4283 Not tainted syzkaller #0 [ 630.004781][T20126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 630.014942][T20126] Call Trace: [ 630.018402][T20126] [ 630.021343][T20126] dump_stack_lvl+0x188/0x250 [ 630.026210][T20126] ? show_regs_print_info+0x20/0x20 [ 630.031432][T20126] ? load_image+0x400/0x400 [ 630.035956][T20126] ? local_lock_release+0x170/0x170 [ 630.041376][T20126] ? __rwlock_init+0x140/0x140 [ 630.046172][T20126] dump_header+0xd4/0x770 [ 630.050541][T20126] oom_kill_process+0x20e/0x3d0 [ 630.055495][T20126] out_of_memory+0xdbe/0x1180 [ 630.060353][T20126] ? mutex_lock_io_nested+0x60/0x60 [ 630.065560][T20126] ? unregister_oom_notifier+0x20/0x20 [ 630.071282][T20126] mem_cgroup_out_of_memory+0x2bd/0x3b0 [ 630.077092][T20126] ? mem_cgroup_oom_trylock+0x210/0x210 [ 630.082742][T20126] ? do_raw_spin_unlock+0x11d/0x230 [ 630.087944][T20126] try_charge_memcg+0xfcf/0x14f0 [ 630.092908][T20126] ? get_mem_cgroup_from_objcg+0x120/0x120 [ 630.098732][T20126] ? rcu_lock_acquire+0x30/0x30 [ 630.103759][T20126] charge_memcg+0x100/0x2f0 [ 630.108263][T20126] ? __mem_cgroup_charge+0x80/0x80 [ 630.113561][T20126] __mem_cgroup_charge+0x21/0x80 [ 630.118612][T20126] shmem_add_to_page_cache+0xa98/0x14d0 [ 630.124574][T20126] ? put_page+0x200/0x200 [ 630.129091][T20126] ? mark_lock+0x94/0x320 [ 630.133490][T20126] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 630.139605][T20126] shmem_getpage_gfp+0x1796/0x2d40 [ 630.144823][T20126] shmem_write_begin+0xcd/0x1a0 [ 630.149780][T20126] generic_perform_write+0x2b6/0x550 [ 630.155163][T20126] ? atime_needs_update+0x780/0x780 [ 630.160645][T20126] ? grab_cache_page_write_begin+0xa0/0xa0 [ 630.166703][T20126] ? file_remove_privs+0x5d0/0x5d0 [ 630.171819][T20126] ? rwsem_write_trylock+0x135/0x1c0 [ 630.177233][T20126] ? clear_nonspinnable+0x60/0x60 [ 630.182434][T20126] __generic_file_write_iter+0x25f/0x4e0 [ 630.188073][T20126] generic_file_write_iter+0xa6/0x1b0 [ 630.193458][T20126] __kernel_write+0x51c/0x970 [ 630.198425][T20126] ? vfs_read+0xd60/0xd60 [ 630.202754][T20126] ? __lock_acquire+0x7d10/0x7d10 [ 630.207982][T20126] ? cgroup_freezing+0x264/0x310 [ 630.213200][T20126] ? freezing_slow_path+0x104/0x150 [ 630.218628][T20126] __dump_emit+0x249/0x370 [ 630.223093][T20126] ? do_raw_spin_unlock+0x11d/0x230 [ 630.228400][T20126] ? wait_for_dump_helpers+0x3d0/0x3d0 [ 630.233948][T20126] ? dump_emit+0x153/0x3d0 [ 630.238466][T20126] dump_user_range+0x84/0x340 [ 630.243348][T20126] elf_core_dump+0x2fbd/0x3500 [ 630.248209][T20126] ? load_elf_library+0x920/0x920 [ 630.253424][T20126] ? verify_lock_unused+0x140/0x140 [ 630.258841][T20126] ? dump_vma_snapshot+0xb00/0xe40 [ 630.264020][T20126] ? rcu_read_lock_any_held+0xb0/0x130 [ 630.269776][T20126] do_coredump+0x14c7/0x2ac0 [ 630.274393][T20126] ? nfs_stat_to_errno+0x190/0x190 [ 630.279698][T20126] ? lock_chain_count+0x20/0x20 [ 630.284726][T20126] ? _raw_spin_unlock_irq+0x1f/0x40 [ 630.290012][T20126] ? lockdep_hardirqs_on+0x94/0x140 [ 630.295403][T20126] get_signal+0x40a/0x12c0 [ 630.299852][T20126] arch_do_signal_or_restart+0xe7/0x12c0 [ 630.305580][T20126] ? rcu_nmi_exit+0x6f/0xf0 [ 630.310163][T20126] ? get_sigframe_size+0x10/0x10 [ 630.315287][T20126] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 630.321490][T20126] ? exit_to_user_mode_loop+0x3b/0x130 [ 630.327143][T20126] exit_to_user_mode_loop+0x9e/0x130 [ 630.332532][T20126] exit_to_user_mode_prepare+0xee/0x180 [ 630.338496][T20126] irqentry_exit_to_user_mode+0x5/0x30 [ 630.344157][T20126] exc_general_protection+0x1e4/0x270 [ 630.349709][T20126] ? exc_page_fault+0x88/0x100 [ 630.354561][T20126] asm_exc_general_protection+0x22/0x30 [ 630.360227][T20126] RIP: 0033:0x7fa488fb27a1 [ 630.364669][T20126] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 630.385056][T20126] RSP: 002b:0000200000000130 EFLAGS: 00010217 [ 630.391210][T20126] RAX: 0000000000000000 RBX: 00007fa48922bfa0 RCX: 00007fa488fb2799 [ 630.399576][T20126] RDX: 0000200000000140 RSI: 0000200000000130 RDI: 0000000000200000 [ 630.407641][T20126] RBP: 00007fa489048c99 R08: 0000200000000300 R09: 0000200000000300 [ 630.415714][T20126] R10: 0000200000000180 R11: 0000000000000206 R12: 0000000000000000 [ 630.423859][T20126] R13: 00007fa48922c038 R14: 00007fa48922bfa0 R15: 00007fffaf117cb8 [ 630.431933][T20126] [ 631.017655][T20927] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4480'. [ 631.039269][T20929] netlink: 'syz.3.4479': attribute type 10 has an invalid length. [ 631.064849][T20929] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4479'. [ 631.079732][T20930] netlink: 201392 bytes leftover after parsing attributes in process `syz.5.4481'. [ 631.108624][T20930] netlink: del zone limit has 8 unknown bytes [ 631.314369][T20941] FAULT_INJECTION: forcing a failure. [ 631.314369][T20941] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 631.418240][T20941] CPU: 1 PID: 20941 Comm: syz.8.4485 Not tainted syzkaller #0 [ 631.426132][T20941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 631.436202][T20941] Call Trace: [ 631.439492][T20941] [ 631.442432][T20941] dump_stack_lvl+0x188/0x250 [ 631.447435][T20941] ? show_regs_print_info+0x20/0x20 [ 631.453549][T20941] ? load_image+0x400/0x400 [ 631.458091][T20941] ? __lock_acquire+0x7d10/0x7d10 [ 631.463420][T20941] ? vfs_write+0x8b2/0xd60 [ 631.467868][T20941] should_fail+0x38c/0x4c0 [ 631.472399][T20941] _copy_from_user+0x2e/0x170 [ 631.477101][T20941] __sys_bpf+0x26d/0x6f0 [ 631.481423][T20941] ? bpf_link_show_fdinfo+0x380/0x380 [ 631.486942][T20941] ? vtime_user_exit+0x2c8/0x3e0 [ 631.492151][T20941] __x64_sys_bpf+0x78/0x90 [ 631.496699][T20941] do_syscall_64+0x4c/0xa0 [ 631.501315][T20941] ? clear_bhb_loop+0x30/0x80 [ 631.506001][T20941] ? clear_bhb_loop+0x30/0x80 [ 631.511124][T20941] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 631.517120][T20941] RIP: 0033:0x7fc300b70799 [ 631.521581][T20941] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 631.541418][T20941] RSP: 002b:00007fc2fedca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 631.549851][T20941] RAX: ffffffffffffffda RBX: 00007fc300de9fa0 RCX: 00007fc300b70799 [ 631.557845][T20941] RDX: 0000000000000020 RSI: 0000200000000100 RDI: 0000000000000012 [ 631.565836][T20941] RBP: 00007fc2fedca090 R08: 0000000000000000 R09: 0000000000000000 [ 631.573903][T20941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 631.581974][T20941] R13: 00007fc300dea038 R14: 00007fc300de9fa0 R15: 00007ffcfeb94198 [ 631.590070][T20941] [ 631.719025][T20126] memory: usage 300148kB, limit 307200kB, failcnt 11368 [ 631.752614][T20126] memory+swap: usage 416372kB, limit 9007199254740988kB, failcnt 0 [ 631.775876][T20126] kmem: usage 5496kB, limit 9007199254740988kB, failcnt 0 [ 631.801963][T20126] Memory cgroup stats for /syz6: [ 631.802789][T20126] anon 204800 [ 631.802789][T20126] file 300331008 [ 631.802789][T20126] kernel_stack 491520 [ 631.802789][T20126] pagetables 2097152 [ 631.802789][T20126] percpu 14440 [ 631.802789][T20126] sock 0 [ 631.802789][T20126] shmem 300331008 [ 631.802789][T20126] file_mapped 0 [ 631.802789][T20126] file_dirty 0 [ 631.802789][T20126] file_writeback 0 [ 631.802789][T20126] swapcached 128299008 [ 631.802789][T20126] anon_thp 0 [ 631.802789][T20126] file_thp 0 [ 631.802789][T20126] shmem_thp 0 [ 631.802789][T20126] inactive_anon 300351488 [ 631.802789][T20126] active_anon 237568 [ 631.802789][T20126] inactive_file 0 [ 631.802789][T20126] active_file 0 [ 631.802789][T20126] unevictable 0 [ 631.802789][T20126] slab_reclaimable 1668720 [ 631.802789][T20126] slab_unreclaimable 1084808 [ 631.802789][T20126] slab 2753528 [ 631.802789][T20126] workingset_refault_anon 27 [ 631.802789][T20126] workingset_refault_file 0 [ 631.802789][T20126] workingset_activate_anon 0 [ 631.988482][T20126] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz6,mems_allowed=0-1,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.4283,pid=20132,uid=0 [ 632.243934][T20126] Memory cgroup out of memory: Killed process 20132 (syz.6.4283) total-vm:98644kB, anon-rss:1248kB, file-rss:54208kB, shmem-rss:0kB, UID:0 pgtables:200kB oom_score_adj:1000 [ 635.383169][T20980] netlink: 'syz.3.4498': attribute type 10 has an invalid length. [ 635.407501][T20980] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4498'. [ 635.451813][T20976] netlink: 'syz.5.4497': attribute type 10 has an invalid length. [ 635.484271][T20976] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4497'. [ 635.543928][T20986] netlink: 'syz.4.4501': attribute type 10 has an invalid length. [ 635.581624][T20986] netlink: 168 bytes leftover after parsing attributes in process `syz.4.4501'. [ 635.622685][T20991] FAULT_INJECTION: forcing a failure. [ 635.622685][T20991] name failslab, interval 1, probability 0, space 0, times 0 [ 635.646317][T20991] CPU: 1 PID: 20991 Comm: syz.8.4503 Not tainted syzkaller #0 [ 635.654084][T20991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 635.664850][T20991] Call Trace: [ 635.668459][T20991] [ 635.671405][T20991] dump_stack_lvl+0x188/0x250 [ 635.676354][T20991] ? show_regs_print_info+0x20/0x20 [ 635.681784][T20991] ? load_image+0x400/0x400 [ 635.686500][T20991] ? __lock_acquire+0x7d10/0x7d10 [ 635.691565][T20991] ? aa_get_newest_label+0xf5/0x5a0 [ 635.697382][T20991] should_fail+0x38c/0x4c0 [ 635.702029][T20991] should_failslab+0x5/0x20 [ 635.706814][T20991] slab_pre_alloc_hook+0x51/0xc0 [ 635.712125][T20991] kmem_cache_alloc_trace+0x47/0x2a0 [ 635.717504][T20991] ? btf_new_fd+0x110/0x910 [ 635.722180][T20991] btf_new_fd+0x110/0x910 [ 635.726587][T20991] ? capable+0x84/0xe0 [ 635.730841][T20991] __sys_bpf+0x58c/0x6f0 [ 635.735084][T20991] ? bpf_link_show_fdinfo+0x380/0x380 [ 635.740580][T20991] ? rcu_nmi_exit+0x6f/0xf0 [ 635.745299][T20991] ? vtime_user_exit+0x2c8/0x3e0 [ 635.750327][T20991] __x64_sys_bpf+0x78/0x90 [ 635.754846][T20991] do_syscall_64+0x4c/0xa0 [ 635.759523][T20991] ? clear_bhb_loop+0x30/0x80 [ 635.764358][T20991] ? clear_bhb_loop+0x30/0x80 [ 635.769358][T20991] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 635.775469][T20991] RIP: 0033:0x7fc300b70799 [ 635.779965][T20991] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 635.800021][T20991] RSP: 002b:00007fc2fedca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 635.808787][T20991] RAX: ffffffffffffffda RBX: 00007fc300de9fa0 RCX: 00007fc300b70799 [ 635.816846][T20991] RDX: 0000000000000020 RSI: 0000200000000100 RDI: 0000000000000012 [ 635.825097][T20991] RBP: 00007fc2fedca090 R08: 0000000000000000 R09: 0000000000000000 [ 635.833185][T20991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 635.841330][T20991] R13: 00007fc300dea038 R14: 00007fc300de9fa0 R15: 00007ffcfeb94198 [ 635.849323][T20991] [ 635.893893][T20146] syz.6.4283 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 635.965478][T20146] CPU: 1 PID: 20146 Comm: syz.6.4283 Not tainted syzkaller #0 [ 635.973165][T20146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 635.983501][T20146] Call Trace: [ 635.986796][T20146] [ 635.990126][T20146] dump_stack_lvl+0x188/0x250 [ 635.994920][T20146] ? show_regs_print_info+0x20/0x20 [ 636.000145][T20146] ? load_image+0x400/0x400 [ 636.004678][T20146] ? local_lock_release+0x170/0x170 [ 636.009915][T20146] ? __rwlock_init+0x140/0x140 [ 636.014898][T20146] dump_header+0xd4/0x770 [ 636.019391][T20146] oom_kill_process+0x20e/0x3d0 [ 636.024482][T20146] out_of_memory+0xdbe/0x1180 [ 636.029390][T20146] ? mutex_lock_io_nested+0x60/0x60 [ 636.034799][T20146] ? unregister_oom_notifier+0x20/0x20 [ 636.040480][T20146] mem_cgroup_out_of_memory+0x2bd/0x3b0 [ 636.046068][T20146] ? mem_cgroup_oom_trylock+0x210/0x210 [ 636.051953][T20146] ? do_raw_spin_unlock+0x11d/0x230 [ 636.057365][T20146] try_charge_memcg+0xfcf/0x14f0 [ 636.062499][T20146] ? get_mem_cgroup_from_objcg+0x120/0x120 [ 636.068461][T20146] ? rcu_lock_acquire+0x30/0x30 [ 636.073349][T20146] charge_memcg+0x100/0x2f0 [ 636.077881][T20146] ? __mem_cgroup_charge+0x80/0x80 [ 636.083021][T20146] __mem_cgroup_charge+0x21/0x80 [ 636.087997][T20146] shmem_add_to_page_cache+0xa98/0x14d0 [ 636.093763][T20146] ? put_page+0x200/0x200 [ 636.098281][T20146] ? mark_lock+0x94/0x320 [ 636.102781][T20146] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 636.108792][T20146] shmem_getpage_gfp+0x1796/0x2d40 [ 636.114087][T20146] shmem_write_begin+0xcd/0x1a0 [ 636.118970][T20146] generic_perform_write+0x2b6/0x550 [ 636.124270][T20146] ? atime_needs_update+0x780/0x780 [ 636.129510][T20146] ? grab_cache_page_write_begin+0xa0/0xa0 [ 636.135450][T20146] ? file_remove_privs+0x5d0/0x5d0 [ 636.140600][T20146] ? rwsem_write_trylock+0x135/0x1c0 [ 636.146229][T20146] ? clear_nonspinnable+0x60/0x60 [ 636.151405][T20146] __generic_file_write_iter+0x25f/0x4e0 [ 636.157077][T20146] generic_file_write_iter+0xa6/0x1b0 [ 636.162695][T20146] __kernel_write+0x51c/0x970 [ 636.167408][T20146] ? vfs_read+0xd60/0xd60 [ 636.172052][T20146] ? __lock_acquire+0x7d10/0x7d10 [ 636.177141][T20146] ? cgroup_freezing+0x264/0x310 [ 636.182374][T20146] ? freezing_slow_path+0x104/0x150 [ 636.187774][T20146] __dump_emit+0x249/0x370 [ 636.192221][T20146] ? do_raw_spin_unlock+0x11d/0x230 [ 636.197628][T20146] ? wait_for_dump_helpers+0x3d0/0x3d0 [ 636.203113][T20146] ? dump_emit+0x153/0x3d0 [ 636.207562][T20146] dump_user_range+0x84/0x340 [ 636.212277][T20146] elf_core_dump+0x2fbd/0x3500 [ 636.217177][T20146] ? load_elf_library+0x920/0x920 [ 636.222228][T20146] ? verify_lock_unused+0x140/0x140 [ 636.227624][T20146] ? dump_vma_snapshot+0xb00/0xe40 [ 636.232991][T20146] ? rcu_read_lock_any_held+0xb0/0x130 [ 636.238608][T20146] do_coredump+0x14c7/0x2ac0 [ 636.243257][T20146] ? nfs_stat_to_errno+0x190/0x190 [ 636.248428][T20146] ? lock_chain_count+0x20/0x20 [ 636.253306][T20146] ? _raw_spin_unlock_irq+0x1f/0x40 [ 636.258898][T20146] ? lockdep_hardirqs_on+0x94/0x140 [ 636.264219][T20146] get_signal+0x40a/0x12c0 [ 636.268698][T20146] arch_do_signal_or_restart+0xe7/0x12c0 [ 636.274552][T20146] ? rcu_nmi_exit+0x6f/0xf0 [ 636.279344][T20146] ? get_sigframe_size+0x10/0x10 [ 636.284406][T20146] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 636.290602][T20146] ? exit_to_user_mode_loop+0x3b/0x130 [ 636.296263][T20146] exit_to_user_mode_loop+0x9e/0x130 [ 636.301669][T20146] exit_to_user_mode_prepare+0xee/0x180 [ 636.307337][T20146] irqentry_exit_to_user_mode+0x5/0x30 [ 636.312829][T20146] exc_general_protection+0x1e4/0x270 [ 636.318242][T20146] ? exc_page_fault+0x88/0x100 [ 636.323031][T20146] asm_exc_general_protection+0x22/0x30 [ 636.328587][T20146] RIP: 0033:0x7fa488fb27a1 [ 636.333110][T20146] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 636.352921][T20146] RSP: 002b:0000200000000130 EFLAGS: 00010217 [ 636.359013][T20146] RAX: 0000000000000000 RBX: 00007fa48922bfa0 RCX: 00007fa488fb2799 [ 636.367211][T20146] RDX: 0000200000000140 RSI: 0000200000000130 RDI: 0000000000200000 [ 636.375336][T20146] RBP: 00007fa489048c99 R08: 0000200000000300 R09: 0000200000000300 [ 636.383421][T20146] R10: 0000200000000180 R11: 0000000000000206 R12: 0000000000000000 [ 636.391681][T20146] R13: 00007fa48922c038 R14: 00007fa48922bfa0 R15: 00007fffaf117cb8 [ 636.399691][T20146] [ 637.952584][T20146] memory: usage 307188kB, limit 307200kB, failcnt 14021 [ 637.959845][T20146] memory+swap: usage 432132kB, limit 9007199254740988kB, failcnt 0 [ 637.975337][T20146] kmem: usage 5360kB, limit 9007199254740988kB, failcnt 0 [ 637.984738][T20146] Memory cgroup stats for /syz6: [ 637.985126][T20146] anon 372736 [ 637.985126][T20146] file 308645888 [ 637.985126][T20146] kernel_stack 458752 [ 637.985126][T20146] pagetables 2011136 [ 637.985126][T20146] percpu 14440 [ 637.985126][T20146] sock 0 [ 637.985126][T20146] shmem 308645888 [ 637.985126][T20146] file_mapped 0 [ 637.985126][T20146] file_dirty 0 [ 637.985126][T20146] file_writeback 0 [ 637.985126][T20146] swapcached 150167552 [ 637.985126][T20146] anon_thp 0 [ 637.985126][T20146] file_thp 0 [ 637.985126][T20146] shmem_thp 0 [ 637.985126][T20146] inactive_anon 148066304 [ 637.985126][T20146] active_anon 160993280 [ 637.985126][T20146] inactive_file 0 [ 637.985126][T20146] active_file 0 [ 637.985126][T20146] unevictable 0 [ 637.985126][T20146] slab_reclaimable 1876648 [ 637.985126][T20146] slab_unreclaimable 885056 [ 637.985126][T20146] slab 2761704 [ 637.985126][T20146] workingset_refault_anon 52 [ 637.985126][T20146] workingset_refault_file 0 [ 637.985126][T20146] workingset_activate_anon 0 [ 638.092355][T20146] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz6,mems_allowed=0-1,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.4283,pid=20149,uid=0 [ 638.157358][T20146] Memory cgroup out of memory: Killed process 20149 (syz.6.4283) total-vm:98644kB, anon-rss:1248kB, file-rss:54208kB, shmem-rss:0kB, UID:0 pgtables:200kB oom_score_adj:1000 [ 638.332199][T21026] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.4515'. [ 638.356793][T21028] device syzkaller0 entered promiscuous mode [ 638.547652][T20144] syz.6.4283 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 638.630285][T20144] CPU: 0 PID: 20144 Comm: syz.6.4283 Not tainted syzkaller #0 [ 638.638009][T20144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 638.648175][T20144] Call Trace: [ 638.651622][T20144] [ 638.654565][T20144] dump_stack_lvl+0x188/0x250 [ 638.659253][T20144] ? show_regs_print_info+0x20/0x20 [ 638.664468][T20144] ? load_image+0x400/0x400 [ 638.668985][T20144] ? local_lock_release+0x170/0x170 [ 638.674283][T20144] ? __rwlock_init+0x140/0x140 [ 638.679062][T20144] dump_header+0xd4/0x770 [ 638.683403][T20144] oom_kill_process+0x20e/0x3d0 [ 638.688277][T20144] out_of_memory+0xdbe/0x1180 [ 638.693189][T20144] ? mutex_lock_io_nested+0x60/0x60 [ 638.698585][T20144] ? unregister_oom_notifier+0x20/0x20 [ 638.704354][T20144] mem_cgroup_out_of_memory+0x2bd/0x3b0 [ 638.710253][T20144] ? mem_cgroup_oom_trylock+0x210/0x210 [ 638.715827][T20144] ? do_raw_spin_unlock+0x11d/0x230 [ 638.721073][T20144] try_charge_memcg+0xfcf/0x14f0 [ 638.726146][T20144] ? get_mem_cgroup_from_objcg+0x120/0x120 [ 638.732172][T20144] ? rcu_lock_acquire+0x30/0x30 [ 638.737142][T20144] charge_memcg+0x100/0x2f0 [ 638.741917][T20144] ? __mem_cgroup_charge+0x80/0x80 [ 638.747575][T20144] __mem_cgroup_charge+0x21/0x80 [ 638.752621][T20144] shmem_add_to_page_cache+0xa98/0x14d0 [ 638.758332][T20144] ? put_page+0x200/0x200 [ 638.762819][T20144] ? mark_lock+0x94/0x320 [ 638.767182][T20144] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 638.773393][T20144] shmem_getpage_gfp+0x1796/0x2d40 [ 638.778568][T20144] shmem_write_begin+0xcd/0x1a0 [ 638.783805][T20144] generic_perform_write+0x2b6/0x550 [ 638.789296][T20144] ? atime_needs_update+0x780/0x780 [ 638.794524][T20144] ? grab_cache_page_write_begin+0xa0/0xa0 [ 638.800595][T20144] ? file_remove_privs+0x5d0/0x5d0 [ 638.805741][T20144] ? rwsem_write_trylock+0x135/0x1c0 [ 638.811147][T20144] ? clear_nonspinnable+0x60/0x60 [ 638.816192][T20144] __generic_file_write_iter+0x25f/0x4e0 [ 638.821934][T20144] generic_file_write_iter+0xa6/0x1b0 [ 638.827322][T20144] __kernel_write+0x51c/0x970 [ 638.832269][T20144] ? vfs_read+0xd60/0xd60 [ 638.836616][T20144] ? __lock_acquire+0x7d10/0x7d10 [ 638.841671][T20144] ? cgroup_freezing+0x264/0x310 [ 638.846630][T20144] ? freezing_slow_path+0x104/0x150 [ 638.852275][T20144] __dump_emit+0x249/0x370 [ 638.856709][T20144] ? do_raw_spin_unlock+0x11d/0x230 [ 638.862065][T20144] ? wait_for_dump_helpers+0x3d0/0x3d0 [ 638.867554][T20144] ? dump_emit+0x153/0x3d0 [ 638.872081][T20144] dump_user_range+0x84/0x340 [ 638.876771][T20144] elf_core_dump+0x2fbd/0x3500 [ 638.881773][T20144] ? load_elf_library+0x920/0x920 [ 638.886921][T20144] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 638.893136][T20144] ? verify_lock_unused+0x140/0x140 [ 638.898449][T20144] ? lock_chain_count+0x20/0x20 [ 638.903682][T20144] ? lockdep_hardirqs_on+0x94/0x140 [ 638.909017][T20144] ? rcu_read_lock_any_held+0xb0/0x130 [ 638.914603][T20144] do_coredump+0x14c7/0x2ac0 [ 638.919226][T20144] ? nfs_stat_to_errno+0x190/0x190 [ 638.924480][T20144] ? lock_chain_count+0x20/0x20 [ 638.929352][T20144] ? _raw_spin_unlock_irq+0x1f/0x40 [ 638.934937][T20144] ? lockdep_hardirqs_on+0x94/0x140 [ 638.940162][T20144] get_signal+0x40a/0x12c0 [ 638.945157][T20144] arch_do_signal_or_restart+0xe7/0x12c0 [ 638.950946][T20144] ? rcu_nmi_exit+0x6f/0xf0 [ 638.955651][T20144] ? get_sigframe_size+0x10/0x10 [ 638.960710][T20144] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 638.966725][T20144] ? exit_to_user_mode_loop+0x3b/0x130 [ 638.972202][T20144] exit_to_user_mode_loop+0x9e/0x130 [ 638.977516][T20144] exit_to_user_mode_prepare+0xee/0x180 [ 638.983176][T20144] irqentry_exit_to_user_mode+0x5/0x30 [ 638.988667][T20144] exc_general_protection+0x1e4/0x270 [ 638.994283][T20144] ? exc_page_fault+0x88/0x100 [ 638.999373][T20144] asm_exc_general_protection+0x22/0x30 [ 639.005071][T20144] RIP: 0033:0x7fa488fb27a1 [ 639.009592][T20144] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 639.029477][T20144] RSP: 002b:0000200000000130 EFLAGS: 00010217 [ 639.035557][T20144] RAX: 0000000000000000 RBX: 00007fa48922bfa0 RCX: 00007fa488fb2799 [ 639.043540][T20144] RDX: 0000200000000140 RSI: 0000200000000130 RDI: 0000000000200000 [ 639.051619][T20144] RBP: 00007fa489048c99 R08: 0000200000000300 R09: 0000200000000300 [ 639.059867][T20144] R10: 0000200000000180 R11: 0000000000000206 R12: 0000000000000000 [ 639.068045][T20144] R13: 00007fa48922c038 R14: 00007fa48922bfa0 R15: 00007fffaf117cb8 [ 639.076169][T20144] [ 641.501954][T20144] memory: usage 307028kB, limit 307200kB, failcnt 15068 [ 641.585225][T20144] memory+swap: usage 431836kB, limit 9007199254740988kB, failcnt 0 [ 641.636159][T20144] kmem: usage 5036kB, limit 9007199254740988kB, failcnt 0 [ 641.660687][T21070] netlink: 'syz.4.4527': attribute type 3 has an invalid length. [ 641.702232][T21070] netlink: 'syz.4.4527': attribute type 1 has an invalid length. [ 641.727325][T20144] Memory cgroup stats for /syz6: [ 641.727508][T20144] anon 331776 [ 641.727508][T20144] file 308985856 [ 641.727508][T20144] kernel_stack 360448 [ 641.727508][T20144] pagetables 1630208 [ 641.727508][T20144] percpu 14440 [ 641.727508][T20144] sock 0 [ 641.727508][T20144] shmem 308985856 [ 641.727508][T20144] file_mapped 0 [ 641.727508][T20144] file_dirty 0 [ 641.727508][T20144] file_writeback 0 [ 641.727508][T20144] swapcached 159944704 [ 641.727508][T20144] anon_thp 0 [ 641.727508][T20144] file_thp 0 [ 641.727508][T20144] shmem_thp 0 [ 641.727508][T20144] inactive_anon 169984000 [ 641.727508][T20144] active_anon 139374592 [ 641.727508][T20144] inactive_file 0 [ 641.727508][T20144] active_file 0 [ 641.727508][T20144] unevictable 0 [ 641.727508][T20144] slab_reclaimable 1914712 [ 641.727508][T20144] slab_unreclaimable 819592 [ 641.727508][T20144] slab 2734304 [ 641.727508][T20144] workingset_refault_anon 73 [ 641.727508][T20144] workingset_refault_file 0 [ 641.727508][T20144] workingset_activate_anon 3 [ 641.829110][T21070] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.4527'. [ 641.987425][T20144] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz6,mems_allowed=0-1,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.4283,pid=20147,uid=0 [ 642.107642][T20144] Memory cgroup out of memory: Killed process 20147 (syz.6.4283) total-vm:98644kB, anon-rss:1248kB, file-rss:54208kB, shmem-rss:0kB, UID:0 pgtables:200kB oom_score_adj:1000 [ 646.007789][T21113] netlink: 'syz.5.4542': attribute type 2 has an invalid length. [ 646.038960][T21113] netlink: 198692 bytes leftover after parsing attributes in process `syz.5.4542'. [ 646.339014][T21125] netlink: 16186 bytes leftover after parsing attributes in process `syz.8.4547'. [ 648.022008][T21152] netlink: 208188 bytes leftover after parsing attributes in process `syz.5.4557'. [ 648.123511][T21152] netlink: 'syz.5.4557': attribute type 1 has an invalid length. [ 648.166783][T21152] netlink: 'syz.5.4557': attribute type 2 has an invalid length. [ 648.200444][T21152] netlink: 'syz.5.4557': attribute type 3 has an invalid length. [ 648.243910][T21152] netlink: 'syz.5.4557': attribute type 4 has an invalid length. [ 651.866379][T21192] netlink: 'syz.4.4569': attribute type 26 has an invalid length. [ 651.937093][T21192] netlink: 62827 bytes leftover after parsing attributes in process `syz.4.4569'. [ 651.987480][T21185] netlink: 65039 bytes leftover after parsing attributes in process `syz.5.4568'. [ 652.005347][T21193] netlink: 'syz.6.4567': attribute type 3 has an invalid length. [ 652.057485][T16826] Bluetooth: hci2: command 0x0406 tx timeout [ 652.304853][T21193] netlink: 118424 bytes leftover after parsing attributes in process `syz.6.4567'. [ 653.022961][T21228] netlink: 'syz.5.4581': attribute type 22 has an invalid length. [ 653.043962][T21228] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4581'. [ 653.582245][T21239] netlink: 65039 bytes leftover after parsing attributes in process `syz.6.4585'. [ 653.969032][T21267] netlink: 'syz.4.4590': attribute type 10 has an invalid length. [ 653.987456][T21267] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4590'. [ 654.026849][T21273] netlink: 'syz.6.4591': attribute type 10 has an invalid length. [ 654.042606][T21273] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4591'. [ 657.254889][T21283] netlink: 'syz.3.4597': attribute type 10 has an invalid length. [ 657.266515][T21283] netlink: 168 bytes leftover after parsing attributes in process `syz.3.4597'. [ 657.278060][T21286] C: renamed from team_slave_0 [ 657.309173][T21286] netlink: 'syz.4.4596': attribute type 3 has an invalid length. [ 657.344179][T21286] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4596'. [ 657.383196][T21286] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 657.440851][T21288] netlink: 65039 bytes leftover after parsing attributes in process `syz.8.4599'. [ 658.044109][T21321] netlink: 'syz.3.4608': attribute type 10 has an invalid length. [ 658.119404][T21321] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4608'. [ 658.244396][T21325] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.4611'. [ 658.282817][T21328] device syzkaller0 entered promiscuous mode [ 661.086488][T21343] netlink: 'syz.4.4614': attribute type 21 has an invalid length. [ 661.108642][T21343] netlink: 120 bytes leftover after parsing attributes in process `syz.4.4614'. [ 661.140246][T21343] netlink: 9 bytes leftover after parsing attributes in process `syz.4.4614'. [ 661.268071][T21348] netlink: 'syz.8.4615': attribute type 10 has an invalid length. [ 661.512291][T21348] team0: Port device geneve1 added [ 661.544044][T21349] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4612'. [ 661.922000][T21371] netlink: 63719 bytes leftover after parsing attributes in process `syz.8.4622'. [ 662.067057][T21386] netlink: 'syz.6.4624': attribute type 16 has an invalid length. [ 662.099021][T21386] netlink: 168 bytes leftover after parsing attributes in process `syz.6.4624'. [ 662.273631][T21389] netlink: 16255 bytes leftover after parsing attributes in process `syz.8.4625'. [ 662.410923][T21395] delete_channel: no stack [ 662.973556][T21413] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.4632'. [ 663.010356][T21412] netlink: 'syz.6.4633': attribute type 1 has an invalid length. [ 663.039003][T21412] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4633'. [ 663.056062][T21412] bridge0: port 1(bridge_slave_0) entered blocking state [ 663.063419][T21412] bridge0: port 1(bridge_slave_0) entered forwarding state [ 663.113402][T21407] netlink: 'syz.8.4630': attribute type 10 has an invalid length. [ 663.156294][T21407] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4630'. [ 663.374158][T21421] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4636'. [ 664.605705][T21455] netlink: 132 bytes leftover after parsing attributes in process `syz.8.4644'. [ 664.717860][T21460] netlink: 'syz.6.4646': attribute type 9 has an invalid length. [ 664.748672][T21460] netlink: 209836 bytes leftover after parsing attributes in process `syz.6.4646'. [ 664.934650][T21457] netlink: 105120 bytes leftover after parsing attributes in process `syz.5.4649'. [ 664.952746][T21457] netlink: 'syz.5.4649': attribute type 2 has an invalid length. [ 665.401602][T21483] netlink: 14560 bytes leftover after parsing attributes in process `syz.6.4655'. [ 665.690085][T21487] netlink: 'syz.6.4657': attribute type 10 has an invalid length. [ 665.737441][T21487] netlink: 55 bytes leftover after parsing attributes in process `syz.6.4657'. [ 666.494522][T21497] netlink: 'syz.6.4661': attribute type 21 has an invalid length. [ 666.513643][T21497] netlink: 128 bytes leftover after parsing attributes in process `syz.6.4661'. [ 666.578255][T21497] netlink: 'syz.6.4661': attribute type 4 has an invalid length. [ 666.592262][T21497] netlink: 3 bytes leftover after parsing attributes in process `syz.6.4661'. [ 666.946798][T21517] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.4666'. [ 667.415801][T21526] netlink: 'syz.6.4670': attribute type 10 has an invalid length. [ 668.653793][T21552] netlink: 'syz.6.4680': attribute type 1 has an invalid length. [ 668.698405][T21552] netlink: 'syz.6.4680': attribute type 3 has an invalid length. [ 668.728527][T21552] __nla_validate_parse: 1 callbacks suppressed [ 668.728558][T21552] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4680'. [ 668.971553][T21560] netlink: 'syz.4.4684': attribute type 10 has an invalid length. [ 669.019106][T21560] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4684'. [ 669.380787][T21577] netlink: 'syz.4.4688': attribute type 4 has an invalid length. [ 669.398860][T21581] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.4689'. [ 669.425206][T21576] netlink: 'syz.4.4688': attribute type 4 has an invalid length. [ 669.455590][T21581] netlink: 22828 bytes leftover after parsing attributes in process `syz.3.4689'. [ 669.699684][T21590] device syzkaller0 left promiscuous mode [ 672.763297][T21604] netlink: 'syz.3.4695': attribute type 2 has an invalid length. [ 672.814483][T21604] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4695'. [ 672.839078][T21605] netlink: 'syz.4.4694': attribute type 1 has an invalid length. [ 672.847120][T21605] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.4694'. [ 673.007642][T21605] netlink: 1 bytes leftover after parsing attributes in process `syz.4.4694'. [ 673.225269][T21620] netlink: 'syz.4.4698': attribute type 9 has an invalid length. [ 673.272863][T21623] tap0: tun_chr_ioctl cmd 1074025677 [ 673.284551][T21620] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.4698'. [ 673.305920][T21623] tap0: linktype set to 0 [ 673.598661][T21637] netlink: 'syz.5.4701': attribute type 2 has an invalid length. [ 673.908433][T21648] netlink: 'syz.3.4705': attribute type 10 has an invalid length. [ 673.936786][T21648] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4705'. [ 674.061008][T21664] netlink: 200236 bytes leftover after parsing attributes in process `syz.4.4708'. [ 674.330910][T21664] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 674.346371][T21664] CPU: 0 PID: 21664 Comm: syz.4.4708 Not tainted syzkaller #0 [ 674.354081][T21664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 674.364159][T21664] Call Trace: [ 674.367467][T21664] [ 674.370758][T21664] dump_stack_lvl+0x188/0x250 [ 674.375647][T21664] ? show_regs_print_info+0x20/0x20 [ 674.381076][T21664] ? load_image+0x400/0x400 [ 674.385713][T21664] sysfs_warn_dup+0x8a/0xa0 [ 674.390475][T21664] sysfs_do_create_link_sd+0xc0/0x110 [ 674.395886][T21664] device_add+0x7ed/0xfb0 [ 674.400354][T21664] wiphy_register+0x1e81/0x2c30 [ 674.405345][T21664] ? cfg80211_event_work+0x40/0x40 [ 674.410489][T21664] ? minstrel_ht_alloc+0x808/0x980 [ 674.415632][T21664] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 674.422176][T21664] ieee80211_register_hw+0x2aa1/0x3af0 [ 674.427665][T21664] ? lockdep_hardirqs_on+0x94/0x140 [ 674.432922][T21664] ? ieee80211_tasklet_handler+0x20/0x20 [ 674.438593][T21664] ? rcu_is_watching+0x11/0xa0 [ 674.443611][T21664] ? memset+0x1e/0x40 [ 674.447623][T21664] ? hrtimer_init+0x10c/0x220 [ 674.452417][T21664] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 674.458294][T21664] hwsim_new_radio_nl+0xa6f/0xc40 [ 674.463542][T21664] genl_rcv_msg+0xcea/0xf90 [ 674.468172][T21664] ? genl_bind+0x380/0x380 [ 674.472633][T21664] ? __dev_queue_xmit+0x1cbf/0x2f80 [ 674.477858][T21664] ? verify_lock_unused+0x140/0x140 [ 674.483194][T21664] ? kmalloc_large_node+0xf2/0x190 [ 674.488338][T21664] ? dev_queue_xmit+0x20/0x20 [ 674.493039][T21664] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 674.499776][T21664] netlink_rcv_skb+0x1f5/0x440 [ 674.504570][T21664] ? genl_bind+0x380/0x380 [ 674.509267][T21664] ? netlink_ack+0xb50/0xb50 [ 674.513978][T21664] ? __lock_acquire+0x7d10/0x7d10 [ 674.519212][T21664] ? down_read+0x1aa/0x2e0 [ 674.523658][T21664] genl_rcv+0x24/0x40 [ 674.527734][T21664] netlink_unicast+0x774/0x920 [ 674.532786][T21664] netlink_sendmsg+0x8ba/0xbe0 [ 674.537737][T21664] ? netlink_getsockopt+0x570/0x570 [ 674.543029][T21664] ? aa_sock_msg_perm+0x94/0x150 [ 674.547963][T21664] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 674.553267][T21664] ? security_socket_sendmsg+0x7c/0xa0 [ 674.558724][T21664] ? netlink_getsockopt+0x570/0x570 [ 674.564005][T21664] ____sys_sendmsg+0x5b7/0x8f0 [ 674.568781][T21664] ? __sys_sendmsg_sock+0x30/0x30 [ 674.574014][T21664] ? import_iovec+0x6f/0xa0 [ 674.578649][T21664] ___sys_sendmsg+0x236/0x2e0 [ 674.583539][T21664] ? __sys_sendmsg+0x2a0/0x2a0 [ 674.588491][T21664] __se_sys_sendmsg+0x1af/0x290 [ 674.593434][T21664] ? __x64_sys_sendmsg+0x80/0x80 [ 674.598368][T21664] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 674.604447][T21664] ? lockdep_hardirqs_on+0x94/0x140 [ 674.609684][T21664] do_syscall_64+0x4c/0xa0 [ 674.614091][T21664] ? clear_bhb_loop+0x30/0x80 [ 674.618933][T21664] ? clear_bhb_loop+0x30/0x80 [ 674.623714][T21664] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 674.630044][T21664] RIP: 0033:0x7fe515d15799 [ 674.634545][T21664] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 674.654247][T21664] RSP: 002b:00007fe513f4e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 674.662687][T21664] RAX: ffffffffffffffda RBX: 00007fe515f8f090 RCX: 00007fe515d15799 [ 674.670878][T21664] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000c [ 674.679111][T21664] RBP: 00007fe515dabc99 R08: 0000000000000000 R09: 0000000000000000 [ 674.687423][T21664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 674.695383][T21664] R13: 00007fe515f8f128 R14: 00007fe515f8f090 R15: 00007ffc1d4dbc28 [ 674.703600][T21664] [ 674.925174][T21689] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.4714'. [ 675.102987][T21698] FAULT_INJECTION: forcing a failure. [ 675.102987][T21698] name failslab, interval 1, probability 0, space 0, times 0 [ 675.136280][T21698] CPU: 1 PID: 21698 Comm: syz.4.4717 Not tainted syzkaller #0 [ 675.143906][T21698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 675.154587][T21698] Call Trace: [ 675.157882][T21698] [ 675.160947][T21698] dump_stack_lvl+0x188/0x250 [ 675.166034][T21698] ? show_regs_print_info+0x20/0x20 [ 675.171356][T21698] ? load_image+0x400/0x400 [ 675.176060][T21698] ? __might_sleep+0xf0/0xf0 [ 675.180683][T21698] ? __lock_acquire+0x7d10/0x7d10 [ 675.185841][T21698] should_fail+0x38c/0x4c0 [ 675.190652][T21698] should_failslab+0x5/0x20 [ 675.195343][T21698] slab_pre_alloc_hook+0x51/0xc0 [ 675.201371][T21698] ? security_file_alloc+0x30/0x110 [ 675.206693][T21698] kmem_cache_alloc+0x3d/0x290 [ 675.211568][T21698] ? rcu_is_watching+0x11/0xa0 [ 675.216562][T21698] security_file_alloc+0x30/0x110 [ 675.221608][T21698] __alloc_file+0xc2/0x240 [ 675.226048][T21698] alloc_empty_file+0x90/0x180 [ 675.231007][T21698] alloc_file+0x5b/0x4f0 [ 675.235355][T21698] ? do_raw_spin_unlock+0x11d/0x230 [ 675.240674][T21698] alloc_file_pseudo+0x180/0x200 [ 675.245627][T21698] ? alloc_empty_file_noaccount+0x80/0x80 [ 675.251409][T21698] ? _raw_spin_unlock+0x24/0x40 [ 675.256279][T21698] __anon_inode_getfd+0x26b/0x3d0 [ 675.261658][T21698] ? __local_bh_enable_ip+0x136/0x1c0 [ 675.267056][T21698] ? anon_inode_getfd+0x40/0x40 [ 675.272018][T21698] ? do_raw_spin_unlock+0x11d/0x230 [ 675.277236][T21698] btf_new_fd+0x779/0x910 [ 675.281867][T21698] __sys_bpf+0x58c/0x6f0 [ 675.286285][T21698] ? bpf_link_show_fdinfo+0x380/0x380 [ 675.291694][T21698] ? vtime_user_exit+0x2c8/0x3e0 [ 675.296838][T21698] __x64_sys_bpf+0x78/0x90 [ 675.301458][T21698] do_syscall_64+0x4c/0xa0 [ 675.306175][T21698] ? clear_bhb_loop+0x30/0x80 [ 675.310967][T21698] ? clear_bhb_loop+0x30/0x80 [ 675.315801][T21698] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 675.321903][T21698] RIP: 0033:0x7fe515d15799 [ 675.326522][T21698] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 675.346399][T21698] RSP: 002b:00007fe513f6f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 675.355092][T21698] RAX: ffffffffffffffda RBX: 00007fe515f8efa0 RCX: 00007fe515d15799 [ 675.363080][T21698] RDX: 0000000000000020 RSI: 0000200000000100 RDI: 0000000000000012 [ 675.371168][T21698] RBP: 00007fe513f6f090 R08: 0000000000000000 R09: 0000000000000000 [ 675.379339][T21698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 675.387333][T21698] R13: 00007fe515f8f038 R14: 00007fe515f8efa0 R15: 00007ffc1d4dbc28 [ 675.395338][T21698] [ 675.440911][T21713] netlink: 'syz.3.4721': attribute type 10 has an invalid length. [ 675.459495][T21713] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4721'. [ 675.604128][T21727] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4725'. [ 675.619490][T21727] netlink: get zone limit has 4 unknown bytes [ 675.658700][T21728] netlink: 144316 bytes leftover after parsing attributes in process `syz.6.4724'. [ 675.960256][T21748] netlink: 'syz.8.4732': attribute type 29 has an invalid length. [ 675.975773][T21749] netlink: 'syz.5.4731': attribute type 8 has an invalid length. [ 676.003292][T21749] netlink: 156 bytes leftover after parsing attributes in process `syz.5.4731'. [ 676.041819][T21748] netlink: 'syz.8.4732': attribute type 29 has an invalid length. [ 676.320553][T21759] netlink: 65047 bytes leftover after parsing attributes in process `syz.5.4731'. [ 676.342612][T21749] netlink: 'syz.5.4731': attribute type 8 has an invalid length. [ 676.360490][T21755] device syzkaller0 entered promiscuous mode [ 676.427359][T21749] netlink: 198628 bytes leftover after parsing attributes in process `syz.5.4731'. [ 676.547918][T21769] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4736'. [ 676.582610][T21773] FAULT_INJECTION: forcing a failure. [ 676.582610][T21773] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 676.616698][T21773] CPU: 1 PID: 21773 Comm: syz.6.4738 Not tainted syzkaller #0 [ 676.624313][T21773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 676.634384][T21773] Call Trace: [ 676.637656][T21773] [ 676.640576][T21773] dump_stack_lvl+0x188/0x250 [ 676.645482][T21773] ? show_regs_print_info+0x20/0x20 [ 676.650684][T21773] ? load_image+0x400/0x400 [ 676.655177][T21773] ? __lock_acquire+0x7d10/0x7d10 [ 676.660394][T21773] should_fail+0x38c/0x4c0 [ 676.665015][T21773] _copy_to_user+0x2e/0x130 [ 676.669608][T21773] simple_read_from_buffer+0xe3/0x150 [ 676.675003][T21773] proc_fail_nth_read+0x1a6/0x220 [ 676.680167][T21773] ? proc_fault_inject_write+0x310/0x310 [ 676.685795][T21773] ? fsnotify_perm+0x254/0x560 [ 676.690557][T21773] ? proc_fault_inject_write+0x310/0x310 [ 676.696361][T21773] vfs_read+0x301/0xd60 [ 676.700621][T21773] ? kernel_read+0x1e0/0x1e0 [ 676.705201][T21773] ? __fget_files+0x40f/0x480 [ 676.709954][T21773] ? mutex_lock_nested+0x17/0x20 [ 676.714993][T21773] ? __fdget_pos+0x2bf/0x370 [ 676.719918][T21773] ? ksys_read+0x71/0x260 [ 676.724334][T21773] ksys_read+0x152/0x260 [ 676.728564][T21773] ? vfs_write+0xd60/0xd60 [ 676.732992][T21773] ? lockdep_hardirqs_on+0x94/0x140 [ 676.738353][T21773] do_syscall_64+0x4c/0xa0 [ 676.742845][T21773] ? clear_bhb_loop+0x30/0x80 [ 676.747506][T21773] ? clear_bhb_loop+0x30/0x80 [ 676.752173][T21773] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 676.758202][T21773] RIP: 0033:0x7fa488f72fce [ 676.762618][T21773] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 676.782940][T21773] RSP: 002b:00007fa48720bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 676.791523][T21773] RAX: ffffffffffffffda RBX: 00007fa48720c6c0 RCX: 00007fa488f72fce [ 676.799573][T21773] RDX: 000000000000000f RSI: 00007fa48720c0a0 RDI: 0000000000000003 [ 676.807634][T21773] RBP: 00007fa48720c090 R08: 0000000000000000 R09: 0000000000000000 [ 676.815773][T21773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 676.823776][T21773] R13: 00007fa48922c038 R14: 00007fa48922bfa0 R15: 00007fffaf117cb8 [ 676.831973][T21773] [ 678.037859][T21825] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 678.176337][T21824] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 678.222782][T21824] CPU: 1 PID: 21824 Comm: syz.3.4755 Not tainted syzkaller #0 [ 678.230997][T21824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 678.241429][T21824] Call Trace: [ 678.244734][T21824] [ 678.247691][T21824] dump_stack_lvl+0x188/0x250 [ 678.252408][T21824] ? show_regs_print_info+0x20/0x20 [ 678.257917][T21824] ? load_image+0x400/0x400 [ 678.262676][T21824] sysfs_warn_dup+0x8a/0xa0 [ 678.267219][T21824] sysfs_do_create_link_sd+0xc0/0x110 [ 678.272627][T21824] device_add+0x7ed/0xfb0 [ 678.277053][T21824] wiphy_register+0x1e81/0x2c30 [ 678.282011][T21824] ? cfg80211_event_work+0x40/0x40 [ 678.287251][T21824] ? minstrel_ht_alloc+0x808/0x980 [ 678.292516][T21824] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 678.298734][T21824] ieee80211_register_hw+0x2aa1/0x3af0 [ 678.304278][T21824] ? ieee80211_tasklet_handler+0x20/0x20 [ 678.309962][T21824] ? rcu_is_watching+0x11/0xa0 [ 678.314978][T21824] ? memset+0x1e/0x40 [ 678.319092][T21824] ? hrtimer_init+0x10c/0x220 [ 678.323939][T21824] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 678.329840][T21824] hwsim_new_radio_nl+0xa6f/0xc40 [ 678.335039][T21824] genl_rcv_msg+0xcea/0xf90 [ 678.339966][T21824] ? genl_bind+0x380/0x380 [ 678.344549][T21824] ? __dev_queue_xmit+0x1cbf/0x2f80 [ 678.350031][T21824] ? verify_lock_unused+0x140/0x140 [ 678.355413][T21824] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 678.361186][T21824] ? perf_trace_lock+0x301/0x390 [ 678.366189][T21824] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 678.372863][T21824] netlink_rcv_skb+0x1f5/0x440 [ 678.377783][T21824] ? genl_bind+0x380/0x380 [ 678.382360][T21824] ? netlink_ack+0xb50/0xb50 [ 678.387099][T21824] ? __lock_acquire+0x7d10/0x7d10 [ 678.392272][T21824] ? down_read+0x1aa/0x2e0 [ 678.396728][T21824] genl_rcv+0x24/0x40 [ 678.400739][T21824] netlink_unicast+0x774/0x920 [ 678.405569][T21824] netlink_sendmsg+0x8ba/0xbe0 [ 678.410614][T21824] ? netlink_getsockopt+0x570/0x570 [ 678.415869][T21824] ? aa_sock_msg_perm+0x94/0x150 [ 678.421023][T21824] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 678.426335][T21824] ? security_socket_sendmsg+0x7c/0xa0 [ 678.431839][T21824] ? netlink_getsockopt+0x570/0x570 [ 678.437154][T21824] ____sys_sendmsg+0x5b7/0x8f0 [ 678.442066][T21824] ? __sys_sendmsg_sock+0x30/0x30 [ 678.447219][T21824] ? import_iovec+0x6f/0xa0 [ 678.451765][T21824] ___sys_sendmsg+0x236/0x2e0 [ 678.456590][T21824] ? __sys_sendmsg+0x2a0/0x2a0 [ 678.461429][T21824] ? trace_event_raw_event_lock+0x270/0x270 [ 678.467438][T21824] __se_sys_sendmsg+0x1af/0x290 [ 678.472809][T21824] ? __x64_sys_sendmsg+0x80/0x80 [ 678.477878][T21824] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 678.484105][T21824] ? lockdep_hardirqs_on+0x94/0x140 [ 678.489349][T21824] do_syscall_64+0x4c/0xa0 [ 678.493877][T21824] ? clear_bhb_loop+0x30/0x80 [ 678.498745][T21824] ? clear_bhb_loop+0x30/0x80 [ 678.503689][T21824] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 678.509711][T21824] RIP: 0033:0x7f9326405799 [ 678.514345][T21824] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 678.534362][T21824] RSP: 002b:00007f932465f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 678.542904][T21824] RAX: ffffffffffffffda RBX: 00007f932667efa0 RCX: 00007f9326405799 [ 678.551020][T21824] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 678.559199][T21824] RBP: 00007f932649bc99 R08: 0000000000000000 R09: 0000000000000000 [ 678.567293][T21824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 678.575305][T21824] R13: 00007f932667f038 R14: 00007f932667efa0 R15: 00007ffc117a26e8 [ 678.583620][T21824] [ 678.913601][T21836] bond0: (slave netdevsim0): Error: Slave device does not support XDP [ 679.188345][T21847] validate_nla: 5 callbacks suppressed [ 679.188360][T21847] netlink: 'syz.5.4762': attribute type 10 has an invalid length. [ 679.278605][T21847] __nla_validate_parse: 4 callbacks suppressed [ 679.278622][T21847] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4762'. [ 679.382842][T21854] ip6gretap0: refused to change device tx_queue_len [ 679.925083][T21875] tun0: tun_chr_ioctl cmd 1074025677 [ 679.951475][T21875] tun0: linktype set to 774 [ 680.498100][T21894] netlink: 'syz.6.4777': attribute type 10 has an invalid length. [ 680.513787][T21894] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4777'. [ 680.633809][T21903] device lo entered promiscuous mode [ 680.820425][T21913] netlink: 'syz.4.4783': attribute type 1 has an invalid length. [ 680.873678][T21913] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.4783'. [ 681.055211][T21921] IPv6: NLM_F_CREATE should be specified when creating new route [ 681.337896][T21938] netlink: 'syz.5.4791': attribute type 10 has an invalid length. [ 681.367319][T21938] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4791'. [ 681.565698][T21950] netlink: 11834 bytes leftover after parsing attributes in process `syz.5.4794'. [ 681.801492][T21958] netlink: 399 bytes leftover after parsing attributes in process `syz.8.4797'. [ 681.836005][T21961] netlink: 'syz.5.4798': attribute type 4 has an invalid length. [ 681.899465][T21961] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.4798'. [ 681.919969][T21957] delete_channel: no stack [ 682.581531][T21976] netlink: 'syz.8.4801': attribute type 29 has an invalid length. [ 682.695274][T21976] netlink: 'syz.8.4801': attribute type 29 has an invalid length. [ 682.718152][T21978] netlink: 'syz.8.4801': attribute type 29 has an invalid length. [ 682.752387][T21978] netlink: 'syz.8.4801': attribute type 29 has an invalid length. [ 682.830117][T21984] netlink: 'syz.3.4804': attribute type 10 has an invalid length. [ 682.856608][T21984] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4804'. [ 683.265031][ C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 683.875758][T22017] netlink: 209836 bytes leftover after parsing attributes in process `syz.6.4814'. [ 684.630066][T22044] netlink: set zone limit has 8 unknown bytes [ 684.820563][T22068] netlink: 184 bytes leftover after parsing attributes in process `syz.4.4822'. [ 684.887395][T22044] device syzkaller0 entered promiscuous mode [ 684.944260][T22066] validate_nla: 1 callbacks suppressed [ 684.944296][T22066] netlink: 'syz.6.4824': attribute type 4 has an invalid length. [ 684.987605][T22066] netlink: 168 bytes leftover after parsing attributes in process `syz.6.4824'. [ 685.248160][T22084] netlink: 168 bytes leftover after parsing attributes in process `syz.8.4831'. [ 685.338304][T22084] netlink: 'syz.8.4831': attribute type 21 has an invalid length. [ 685.680260][T22094] netlink: 10866 bytes leftover after parsing attributes in process `syz.4.4835'. [ 685.828709][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.835298][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.111168][T22098] device syzkaller0 entered promiscuous mode [ 686.152744][T22096] netlink: 10866 bytes leftover after parsing attributes in process `syz.4.4835'. [ 686.310127][T22110] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4840'. [ 686.511125][T22124] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.4845'. [ 686.685161][T22123] netlink: 'syz.3.4846': attribute type 39 has an invalid length. [ 687.530786][T22178] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4859'. [ 687.595679][T22178] netlink: 'syz.3.4859': attribute type 29 has an invalid length. [ 687.646997][T22178] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4859'. [ 688.522995][T22229] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4875'. [ 688.669186][T22230] netlink: 'syz.4.4875': attribute type 10 has an invalid length. [ 688.832004][T22240] sock: sock_timestamping_bind_phc: sock not bind to device [ 689.171380][T22256] device syzkaller0 entered promiscuous mode [ 689.285699][T22272] netlink: 'syz.8.4888': attribute type 2 has an invalid length. [ 689.393803][T22274] netlink: 'syz.8.4889': attribute type 10 has an invalid length. [ 689.599929][T22285] netlink: 'syz.4.4891': attribute type 9 has an invalid length. [ 689.957133][T22302] netlink: 'syz.8.4897': attribute type 21 has an invalid length. [ 689.965715][T22302] __nla_validate_parse: 3 callbacks suppressed [ 689.965732][T22302] netlink: 128 bytes leftover after parsing attributes in process `syz.8.4897'. [ 690.076023][T22302] netlink: 'syz.8.4897': attribute type 4 has an invalid length. [ 690.097792][T22302] netlink: 3 bytes leftover after parsing attributes in process `syz.8.4897'. [ 690.267648][T22312] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.4899'. [ 690.312020][T22312] bridge_slave_1: default FDB implementation only supports local addresses [ 690.439809][T22324] netlink: 'syz.5.4903': attribute type 10 has an invalid length. [ 690.453150][T22317] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4901'. [ 690.497464][T22324] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4903'. [ 690.819212][T22339] netlink: zone id is out of range [ 690.854999][T22339] netlink: set zone limit has 8 unknown bytes [ 691.074963][T22350] netlink: 'syz.4.4912': attribute type 21 has an invalid length. [ 691.115773][T22350] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4912'. [ 691.192371][T22350] netlink: 'syz.4.4912': attribute type 4 has an invalid length. [ 691.235547][T22350] netlink: 3 bytes leftover after parsing attributes in process `syz.4.4912'. [ 691.361175][T22360] netlink: 'syz.5.4909': attribute type 9 has an invalid length. [ 691.425999][T22360] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.4909'. [ 692.020489][T22386] netlink: 'syz.5.4920': attribute type 10 has an invalid length. [ 692.036460][T22386] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4920'. [ 692.443572][T22398] netlink: 'syz.6.4926': attribute type 21 has an invalid length. [ 692.468544][T22398] netlink: 128 bytes leftover after parsing attributes in process `syz.6.4926'. [ 692.512578][T22398] netlink: 'syz.6.4926': attribute type 4 has an invalid length. [ 692.596020][T22405] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 692.627459][T22405] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 692.710287][T22405] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 692.781969][T22405] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 692.906139][T22415] syz.6.4930[22415] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 692.906223][T22415] syz.6.4930[22415] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 693.007744][ T8231] Bluetooth: hci3: command 0x0406 tx timeout [ 693.222992][T22428] netlink: 'syz.5.4935': attribute type 21 has an invalid length. [ 694.828683][T22463] delete_channel: no stack [ 695.011261][T22479] validate_nla: 3 callbacks suppressed [ 695.011280][T22479] netlink: 'syz.3.4951': attribute type 21 has an invalid length. [ 695.051960][T22481] __nla_validate_parse: 8 callbacks suppressed [ 695.051981][T22481] netlink: 4595 bytes leftover after parsing attributes in process `syz.8.4952'. [ 695.088793][T22479] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4951'. [ 695.130494][T22479] netlink: 'syz.3.4951': attribute type 4 has an invalid length. [ 695.163323][T22479] netlink: 3 bytes leftover after parsing attributes in process `syz.3.4951'. [ 695.225362][T22481] netlink: 'syz.8.4952': attribute type 29 has an invalid length. [ 695.305980][T22481] netlink: 'syz.8.4952': attribute type 29 has an invalid length. [ 695.316846][T22484] netlink: 'syz.5.4954': attribute type 2 has an invalid length. [ 695.408616][T22484] netlink: 198692 bytes leftover after parsing attributes in process `syz.5.4954'. [ 695.420993][T22493] netlink: 'syz.3.4956': attribute type 3 has an invalid length. [ 695.490250][T22493] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.4956'. [ 696.686905][T22525] netlink: 'syz.3.4965': attribute type 10 has an invalid length. [ 696.719405][T22525] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4965'. [ 696.824810][T22529] netlink: 'syz.5.4966': attribute type 21 has an invalid length. [ 696.861045][T22529] netlink: 128 bytes leftover after parsing attributes in process `syz.5.4966'. [ 696.911063][T22529] netlink: 'syz.5.4966': attribute type 4 has an invalid length. [ 696.947392][T22529] netlink: 3 bytes leftover after parsing attributes in process `syz.5.4966'. [ 697.312723][T22540] netlink: 'syz.8.4970': attribute type 29 has an invalid length. [ 697.449157][T22540] netlink: 205184 bytes leftover after parsing attributes in process `syz.8.4970'. [ 698.925523][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 699.401173][T22569] netlink: 128 bytes leftover after parsing attributes in process `syz.8.4980'. [ 700.443319][T22585] FAULT_INJECTION: forcing a failure. [ 700.443319][T22585] name failslab, interval 1, probability 0, space 0, times 0 [ 700.521010][T22585] CPU: 0 PID: 22585 Comm: syz.5.4986 Not tainted syzkaller #0 [ 700.528633][T22585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 700.538734][T22585] Call Trace: [ 700.542035][T22585] [ 700.545104][T22585] dump_stack_lvl+0x188/0x250 [ 700.549937][T22585] ? show_regs_print_info+0x20/0x20 [ 700.555372][T22585] ? load_image+0x400/0x400 [ 700.559954][T22585] ? __might_sleep+0xf0/0xf0 [ 700.564603][T22585] ? __lock_acquire+0x7d10/0x7d10 [ 700.569714][T22585] should_fail+0x38c/0x4c0 [ 700.574203][T22585] should_failslab+0x5/0x20 [ 700.578924][T22585] slab_pre_alloc_hook+0x51/0xc0 [ 700.583906][T22585] __kmalloc+0x6b/0x330 [ 700.588280][T22585] ? tomoyo_realpath_from_path+0x118/0x610 [ 700.594242][T22585] tomoyo_realpath_from_path+0x118/0x610 [ 700.600259][T22585] tomoyo_path_number_perm+0x242/0x660 [ 700.605798][T22585] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 700.611736][T22585] security_file_ioctl+0x6c/0xa0 [ 700.616840][T22585] __se_sys_ioctl+0x48/0x170 [ 700.621773][T22585] do_syscall_64+0x4c/0xa0 [ 700.626223][T22585] ? clear_bhb_loop+0x30/0x80 [ 700.631030][T22585] ? clear_bhb_loop+0x30/0x80 [ 700.635763][T22585] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 700.641697][T22585] RIP: 0033:0x7fe4e036e799 [ 700.646257][T22585] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 700.666001][T22585] RSP: 002b:00007fe4de5c8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 700.674472][T22585] RAX: ffffffffffffffda RBX: 00007fe4e05e7fa0 RCX: 00007fe4e036e799 [ 700.682576][T22585] RDX: 0000200000000180 RSI: 000000004008744b RDI: 0000000000000004 [ 700.690646][T22585] RBP: 00007fe4de5c8090 R08: 0000000000000000 R09: 0000000000000000 [ 700.698924][T22585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 700.706940][T22585] R13: 00007fe4e05e8038 R14: 00007fe4e05e7fa0 R15: 00007ffff6d7a668 [ 700.715122][T22585] [ 700.789296][T22585] ERROR: Out of memory at tomoyo_realpath_from_path. [ 701.153782][T22602] __nla_validate_parse: 3 callbacks suppressed [ 701.153800][T22602] netlink: 129384 bytes leftover after parsing attributes in process `syz.8.4989'. [ 702.085018][T22637] FAULT_INJECTION: forcing a failure. [ 702.085018][T22637] name failslab, interval 1, probability 0, space 0, times 0 [ 702.277515][T22637] CPU: 0 PID: 22637 Comm: syz.8.5002 Not tainted syzkaller #0 [ 702.285204][T22637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 702.295655][T22637] Call Trace: [ 702.299053][T22637] [ 702.302187][T22637] dump_stack_lvl+0x188/0x250 [ 702.306889][T22637] ? show_regs_print_info+0x20/0x20 [ 702.312136][T22637] ? load_image+0x400/0x400 [ 702.316743][T22637] ? __might_sleep+0xf0/0xf0 [ 702.321447][T22637] ? __lock_acquire+0x7d10/0x7d10 [ 702.326567][T22637] ? copy_from_kernel_nofault_allowed+0xb9/0x130 [ 702.332912][T22637] should_fail+0x38c/0x4c0 [ 702.337446][T22637] should_failslab+0x5/0x20 [ 702.342098][T22637] slab_pre_alloc_hook+0x51/0xc0 [ 702.347244][T22637] __kmalloc+0x6b/0x330 [ 702.351594][T22637] ? tomoyo_encode+0x27e/0x540 [ 702.356424][T22637] tomoyo_encode+0x27e/0x540 [ 702.361128][T22637] tomoyo_realpath_from_path+0x5cd/0x610 [ 702.366893][T22637] tomoyo_path_number_perm+0x242/0x660 [ 702.372469][T22637] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 702.378052][T22637] ? perf_trace_lock+0xe4/0x390 [ 702.382911][T22637] ? perf_trace_lock+0xe4/0x390 [ 702.387821][T22637] security_file_ioctl+0x6c/0xa0 [ 702.392828][T22637] __se_sys_ioctl+0x48/0x170 [ 702.397526][T22637] do_syscall_64+0x4c/0xa0 [ 702.402079][T22637] ? clear_bhb_loop+0x30/0x80 [ 702.407036][T22637] ? clear_bhb_loop+0x30/0x80 [ 702.411829][T22637] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 702.417735][T22637] RIP: 0033:0x7fc300b70799 [ 702.422248][T22637] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 702.442672][T22637] RSP: 002b:00007fc2feda9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 702.451179][T22637] RAX: ffffffffffffffda RBX: 00007fc300dea090 RCX: 00007fc300b70799 [ 702.459235][T22637] RDX: 0000200000000180 RSI: 000000004008744b RDI: 0000000000000004 [ 702.467293][T22637] RBP: 00007fc2feda9090 R08: 0000000000000000 R09: 0000000000000000 [ 702.475471][T22637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 702.483605][T22637] R13: 00007fc300dea128 R14: 00007fc300dea090 R15: 00007ffcfeb94198 [ 702.491599][T22637] [ 702.821610][T22657] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5010'. [ 702.869759][T22654] validate_nla: 5 callbacks suppressed [ 702.869776][T22654] netlink: 'syz.6.5009': attribute type 25 has an invalid length. [ 702.883383][T22637] ERROR: Out of memory at tomoyo_realpath_from_path. [ 702.930301][T22654] netlink: 'syz.6.5009': attribute type 9 has an invalid length. [ 704.023978][T22691] bridge0: port 2(bridge_slave_1) entered disabled state [ 704.031791][T22691] bridge0: port 1(bridge_slave_0) entered disabled state [ 704.096322][T22692] device bridge_slave_1 left promiscuous mode [ 704.108419][T22692] bridge0: port 2(bridge_slave_1) entered disabled state [ 704.151134][T22692] bridge0: port 1(bridge_slave_0) entered disabled state [ 704.549740][T22710] netlink: 'syz.5.5025': attribute type 4 has an invalid length. [ 704.574566][T22710] netlink: 152 bytes leftover after parsing attributes in process `syz.5.5025'. [ 704.640010][T22710] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 705.130370][T22743] netlink: 668 bytes leftover after parsing attributes in process `syz.4.5035'. [ 705.207291][T22743] openvswitch: netlink: Key type 15645 is out of range max 29 [ 705.773454][T22767] device syzkaller0 entered promiscuous mode [ 706.015559][T22764] netlink: 'syz.4.5039': attribute type 2 has an invalid length. [ 706.040016][T22764] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5039'. [ 706.643372][T22789] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.5048'. [ 706.698613][T22792] netlink: 'syz.4.5048': attribute type 29 has an invalid length. [ 706.774278][T22789] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5048'. [ 707.401862][T22808] netlink: 'syz.5.5055': attribute type 10 has an invalid length. [ 707.653654][T22808] team0: Port device geneve1 added [ 707.757929][T22818] bridge0: port 2(bridge_slave_1) entered disabled state [ 707.766598][T22818] bridge0: port 1(bridge_slave_0) entered disabled state [ 707.907427][T22823] device bridge_slave_1 left promiscuous mode [ 707.935719][T22823] bridge0: port 2(bridge_slave_1) entered disabled state [ 707.998957][T22823] device bridge_slave_0 left promiscuous mode [ 708.017918][T22823] bridge0: port 1(bridge_slave_0) entered disabled state [ 709.557815][T22873] netlink: 'syz.3.5073': attribute type 9 has an invalid length. [ 709.621014][T22873] netlink: 61951 bytes leftover after parsing attributes in process `syz.3.5073'. [ 709.786437][T22877] device syzkaller0 entered promiscuous mode [ 711.170981][T22968] netlink: 'syz.4.5093': attribute type 9 has an invalid length. [ 711.227396][T22968] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.5093'. [ 711.554188][T22987] netlink: 'syz.4.5098': attribute type 21 has an invalid length. [ 711.852413][T23003] netlink: 'syz.4.5102': attribute type 21 has an invalid length. [ 711.894914][T23000] netlink: 'syz.5.5104': attribute type 21 has an invalid length. [ 711.934275][T23000] netlink: 164 bytes leftover after parsing attributes in process `syz.5.5104'. [ 711.996316][T23007] device syzkaller0 left promiscuous mode [ 712.378237][T23028] device syzkaller0 left promiscuous mode [ 712.509690][T23031] netlink: 'syz.6.5113': attribute type 10 has an invalid length. [ 712.567574][T23031] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5113'. [ 713.490757][T23084] netlink: 'syz.5.5132': attribute type 10 has an invalid length. [ 713.535992][T23084] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5132'. [ 713.594551][T23085] netlink: 'syz.8.5133': attribute type 10 has an invalid length. [ 715.141493][T23143] netlink: 'syz.4.5150': attribute type 10 has an invalid length. [ 715.160404][T23143] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5150'. [ 715.648768][T23156] netlink: 132 bytes leftover after parsing attributes in process `syz.8.5155'. [ 715.708335][T23155] netlink: 132 bytes leftover after parsing attributes in process `syz.8.5155'. [ 715.782420][T23163] netlink: 188 bytes leftover after parsing attributes in process `syz.3.5158'. [ 716.060049][T23177] netlink: 'syz.4.5162': attribute type 17 has an invalid length. [ 716.088590][T23177] netlink: 148 bytes leftover after parsing attributes in process `syz.4.5162'. [ 716.472332][T23192] netlink: 'syz.3.5167': attribute type 10 has an invalid length. [ 716.512146][T23192] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5167'. [ 716.556769][T23195] device syzkaller0 entered promiscuous mode [ 717.546105][T23219] netlink: 'syz.4.5176': attribute type 10 has an invalid length. [ 717.573644][T23219] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5176'. [ 717.598474][T23218] netlink: 'syz.3.5175': attribute type 21 has an invalid length. [ 717.627977][T23213] delete_channel: no stack [ 717.914904][T23240] netlink: 'syz.3.5182': attribute type 21 has an invalid length. [ 717.923399][T23240] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5182'. [ 717.939235][T23240] netlink: 'syz.3.5182': attribute type 4 has an invalid length. [ 717.961116][T23240] netlink: 3 bytes leftover after parsing attributes in process `syz.3.5182'. [ 718.138924][T23245] netlink: 'syz.4.5184': attribute type 3 has an invalid length. [ 718.168180][T23245] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.5184'. [ 718.694619][T23259] netlink: 198364 bytes leftover after parsing attributes in process `syz.6.5189'. [ 718.910995][T23272] netlink: 26 bytes leftover after parsing attributes in process `syz.6.5191'. [ 719.399895][T23283] netlink: 'syz.6.5196': attribute type 21 has an invalid length. [ 719.417654][T23283] netlink: 128 bytes leftover after parsing attributes in process `syz.6.5196'. [ 719.447335][T23283] netlink: 'syz.6.5196': attribute type 4 has an invalid length. [ 719.475050][T23283] netlink: 3 bytes leftover after parsing attributes in process `syz.6.5196'. [ 719.610106][T23293] netlink: 148 bytes leftover after parsing attributes in process `syz.3.5197'. [ 719.674046][T23293] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5197'. [ 719.850440][T23302] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 720.811762][T23334] netlink: 'syz.4.5209': attribute type 21 has an invalid length. [ 720.856188][T23334] netlink: 'syz.4.5209': attribute type 4 has an invalid length. [ 723.733233][T23364] device wlan0 entered promiscuous mode [ 723.787706][T23366] netlink: 'syz.3.5218': attribute type 9 has an invalid length. [ 723.848872][T23366] __nla_validate_parse: 6 callbacks suppressed [ 723.848887][T23366] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.5218'. [ 724.622260][T23397] netlink: 'syz.6.5227': attribute type 29 has an invalid length. [ 724.665053][T23397] netlink: 'syz.6.5227': attribute type 29 has an invalid length. [ 724.710511][T23399] netlink: 'syz.6.5227': attribute type 29 has an invalid length. [ 725.632339][T23427] netlink: 'syz.4.5237': attribute type 21 has an invalid length. [ 725.687343][T23427] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5237'. [ 725.760862][T23427] netlink: 'syz.4.5237': attribute type 4 has an invalid length. [ 725.801012][T23427] netlink: 3 bytes leftover after parsing attributes in process `syz.4.5237'. [ 726.051794][T23452] netlink: 148 bytes leftover after parsing attributes in process `syz.4.5243'. [ 726.247704][T23459] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.5246'. [ 726.658470][T23475] netlink: 'syz.8.5249': attribute type 1 has an invalid length. [ 726.694449][T23475] netlink: 5 bytes leftover after parsing attributes in process `syz.8.5249'. [ 727.341234][T23487] netlink: 'syz.5.5252': attribute type 21 has an invalid length. [ 727.361293][T23487] netlink: 128 bytes leftover after parsing attributes in process `syz.5.5252'. [ 727.386757][T23487] netlink: 'syz.5.5252': attribute type 4 has an invalid length. [ 727.396810][T23493] syz.3.5253[23493] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 727.419499][T23487] netlink: 3 bytes leftover after parsing attributes in process `syz.5.5252'. [ 727.483739][T23490] netlink: 'syz.8.5254': attribute type 21 has an invalid length. [ 727.517539][T23490] IPv6: NLM_F_CREATE should be specified when creating new route [ 727.743128][T23505] netlink: 61967 bytes leftover after parsing attributes in process `syz.8.5259'. [ 727.984914][T23510] netlink: 134 bytes leftover after parsing attributes in process `syz.8.5264'. [ 728.060007][T23510] device veth0_to_bond entered promiscuous mode [ 728.386124][T23525] syzkaller0: tun_chr_ioctl cmd 1074025684 [ 728.407572][T22939] syzkaller0: tun_net_xmit 76 [ 728.548202][T23525] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 728.705496][T23534] FAULT_INJECTION: forcing a failure. [ 728.705496][T23534] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 728.778119][T23534] CPU: 1 PID: 23534 Comm: syz.5.5271 Not tainted syzkaller #0 [ 728.785713][T23534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 728.795792][T23534] Call Trace: [ 728.799225][T23534] [ 728.802162][T23534] dump_stack_lvl+0x188/0x250 [ 728.806907][T23534] ? show_regs_print_info+0x20/0x20 [ 728.812468][T23534] ? load_image+0x400/0x400 [ 728.817088][T23534] ? __lock_acquire+0x7d10/0x7d10 [ 728.822138][T23534] should_fail+0x38c/0x4c0 [ 728.826575][T23534] _copy_from_user+0x2e/0x170 [ 728.831356][T23534] __sys_bpf+0x26d/0x6f0 [ 728.835974][T23534] ? bpf_link_show_fdinfo+0x380/0x380 [ 728.841385][T23534] __x64_sys_bpf+0x78/0x90 [ 728.846009][T23534] do_syscall_64+0x4c/0xa0 [ 728.850668][T23534] ? clear_bhb_loop+0x30/0x80 [ 728.855366][T23534] ? clear_bhb_loop+0x30/0x80 [ 728.860075][T23534] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 728.866164][T23534] RIP: 0033:0x7fe4e036e799 [ 728.870597][T23534] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 728.890403][T23534] RSP: 002b:00007fe4de5c8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 728.899455][T23534] RAX: ffffffffffffffda RBX: 00007fe4e05e7fa0 RCX: 00007fe4e036e799 [ 728.907712][T23534] RDX: 000000000000004c RSI: 0000200000000900 RDI: 0000000000000005 [ 728.915835][T23534] RBP: 00007fe4de5c8090 R08: 0000000000000000 R09: 0000000000000000 [ 728.923961][T23534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 728.932137][T23534] R13: 00007fe4e05e8038 R14: 00007fe4e05e7fa0 R15: 00007ffff6d7a668 [ 728.940671][T23534] [ 729.913314][T23568] syz.5.5282[23568] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 729.914519][T23568] syz.5.5282[23568] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 731.273784][T23596] FAULT_INJECTION: forcing a failure. [ 731.273784][T23596] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 731.391430][T23596] CPU: 0 PID: 23596 Comm: syz.4.5290 Not tainted syzkaller #0 [ 731.399023][T23596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 731.409178][T23596] Call Trace: [ 731.412470][T23596] [ 731.415409][T23596] dump_stack_lvl+0x188/0x250 [ 731.420278][T23596] ? show_regs_print_info+0x20/0x20 [ 731.425501][T23596] ? load_image+0x400/0x400 [ 731.430036][T23596] ? __lock_acquire+0x7d10/0x7d10 [ 731.435083][T23596] ? __lock_acquire+0x13bc/0x7d10 [ 731.440132][T23596] should_fail+0x38c/0x4c0 [ 731.444570][T23596] strncpy_from_user+0x32/0x360 [ 731.449450][T23596] bpf_prog_load+0x1f0/0x1510 [ 731.454242][T23596] ? map_freeze+0x350/0x350 [ 731.458782][T23596] ? __might_fault+0xb7/0x110 [ 731.463663][T23596] ? __might_fault+0xb3/0x110 [ 731.468451][T23596] ? bpf_lsm_bpf+0x5/0x10 [ 731.473160][T23596] ? security_bpf+0x7a/0xa0 [ 731.477772][T23596] __sys_bpf+0x532/0x6f0 [ 731.482041][T23596] ? bpf_link_show_fdinfo+0x380/0x380 [ 731.487451][T23596] __x64_sys_bpf+0x78/0x90 [ 731.491903][T23596] do_syscall_64+0x4c/0xa0 [ 731.496336][T23596] ? clear_bhb_loop+0x30/0x80 [ 731.501123][T23596] ? clear_bhb_loop+0x30/0x80 [ 731.505943][T23596] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 731.512135][T23596] RIP: 0033:0x7fe515d15799 [ 731.516576][T23596] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 731.536690][T23596] RSP: 002b:00007fe513f6f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 731.545241][T23596] RAX: ffffffffffffffda RBX: 00007fe515f8efa0 RCX: 00007fe515d15799 [ 731.553309][T23596] RDX: 000000000000004c RSI: 0000200000000900 RDI: 0000000000000005 [ 731.561419][T23596] RBP: 00007fe513f6f090 R08: 0000000000000000 R09: 0000000000000000 [ 731.569489][T23596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 731.577774][T23596] R13: 00007fe515f8f038 R14: 00007fe515f8efa0 R15: 00007ffc1d4dbc28 [ 731.585868][T23596] [ 731.804545][T23609] __nla_validate_parse: 6 callbacks suppressed [ 731.804576][T23609] netlink: 144 bytes leftover after parsing attributes in process `syz.8.5293'. [ 731.857459][T23610] netlink: 144 bytes leftover after parsing attributes in process `syz.8.5293'. [ 733.529246][T23655] FAULT_INJECTION: forcing a failure. [ 733.529246][T23655] name failslab, interval 1, probability 0, space 0, times 0 [ 733.592549][T23655] CPU: 0 PID: 23655 Comm: syz.8.5308 Not tainted syzkaller #0 [ 733.600160][T23655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 733.610344][T23655] Call Trace: [ 733.613734][T23655] [ 733.616687][T23655] dump_stack_lvl+0x188/0x250 [ 733.621473][T23655] ? show_regs_print_info+0x20/0x20 [ 733.626795][T23655] ? load_image+0x400/0x400 [ 733.631332][T23655] ? __might_sleep+0xf0/0xf0 [ 733.636055][T23655] ? __lock_acquire+0x7d10/0x7d10 [ 733.641221][T23655] should_fail+0x38c/0x4c0 [ 733.645770][T23655] should_failslab+0x5/0x20 [ 733.650396][T23655] slab_pre_alloc_hook+0x51/0xc0 [ 733.655429][T23655] kmem_cache_alloc_node_trace+0x4a/0x300 [ 733.661426][T23655] ? __get_vm_area_node+0x119/0x2d0 [ 733.666666][T23655] __get_vm_area_node+0x119/0x2d0 [ 733.671726][T23655] __vmalloc_node_range+0xef/0x8b0 [ 733.676950][T23655] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 733.682623][T23655] ? end_current_label_crit_section+0x170/0x170 [ 733.689170][T23655] ? lockdep_hardirqs_on+0x94/0x140 [ 733.694533][T23655] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 733.700110][T23655] __vmalloc+0x76/0x80 [ 733.704210][T23655] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 733.709784][T23655] bpf_prog_alloc_no_stats+0x36/0x2c0 [ 733.715415][T23655] bpf_prog_alloc+0x1a/0x1e0 [ 733.720039][T23655] bpf_prog_load+0x7c6/0x1510 [ 733.724981][T23655] ? map_freeze+0x350/0x350 [ 733.729689][T23655] ? __might_fault+0xb7/0x110 [ 733.734444][T23655] ? __might_fault+0xb3/0x110 [ 733.739158][T23655] ? bpf_lsm_bpf+0x5/0x10 [ 733.743684][T23655] ? security_bpf+0x7a/0xa0 [ 733.748234][T23655] __sys_bpf+0x532/0x6f0 [ 733.752517][T23655] ? bpf_link_show_fdinfo+0x380/0x380 [ 733.758318][T23655] ? vtime_user_exit+0x2c8/0x3e0 [ 733.763343][T23655] __x64_sys_bpf+0x78/0x90 [ 733.767820][T23655] do_syscall_64+0x4c/0xa0 [ 733.772260][T23655] ? clear_bhb_loop+0x30/0x80 [ 733.777050][T23655] ? clear_bhb_loop+0x30/0x80 [ 733.781859][T23655] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 733.787886][T23655] RIP: 0033:0x7fc300b70799 [ 733.792328][T23655] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 733.812400][T23655] RSP: 002b:00007fc2fedca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 733.820863][T23655] RAX: ffffffffffffffda RBX: 00007fc300de9fa0 RCX: 00007fc300b70799 [ 733.828866][T23655] RDX: 000000000000004c RSI: 0000200000000900 RDI: 0000000000000005 [ 733.836952][T23655] RBP: 00007fc2fedca090 R08: 0000000000000000 R09: 0000000000000000 [ 733.845235][T23655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 733.853253][T23655] R13: 00007fc300dea038 R14: 00007fc300de9fa0 R15: 00007ffcfeb94198 [ 733.861400][T23655] [ 734.170807][T23655] syz.8.5308: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz8,mems_allowed=0-1 [ 734.230290][T23655] CPU: 0 PID: 23655 Comm: syz.8.5308 Not tainted syzkaller #0 [ 734.237898][T23655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 734.248251][T23655] Call Trace: [ 734.251556][T23655] [ 734.254547][T23655] dump_stack_lvl+0x188/0x250 [ 734.259383][T23655] ? rcu_lock_release+0x5/0x20 [ 734.264172][T23655] ? show_regs_print_info+0x20/0x20 [ 734.269402][T23655] ? load_image+0x400/0x400 [ 734.273938][T23655] warn_alloc+0x243/0x320 [ 734.278375][T23655] ? zone_watermark_ok_safe+0x240/0x240 [ 734.283948][T23655] ? __get_vm_area_node+0x2b5/0x2d0 [ 734.289251][T23655] __vmalloc_node_range+0x2b1/0x8b0 [ 734.294627][T23655] ? end_current_label_crit_section+0x170/0x170 [ 734.301319][T23655] ? lockdep_hardirqs_on+0x94/0x140 [ 734.306533][T23655] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 734.312164][T23655] __vmalloc+0x76/0x80 [ 734.316401][T23655] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 734.322313][T23655] bpf_prog_alloc_no_stats+0x36/0x2c0 [ 734.327800][T23655] bpf_prog_alloc+0x1a/0x1e0 [ 734.332764][T23655] bpf_prog_load+0x7c6/0x1510 [ 734.337564][T23655] ? map_freeze+0x350/0x350 [ 734.342161][T23655] ? __might_fault+0xb7/0x110 [ 734.346873][T23655] ? __might_fault+0xb3/0x110 [ 734.351600][T23655] ? bpf_lsm_bpf+0x5/0x10 [ 734.355928][T23655] ? security_bpf+0x7a/0xa0 [ 734.360539][T23655] __sys_bpf+0x532/0x6f0 [ 734.364813][T23655] ? bpf_link_show_fdinfo+0x380/0x380 [ 734.370391][T23655] ? vtime_user_exit+0x2c8/0x3e0 [ 734.375783][T23655] __x64_sys_bpf+0x78/0x90 [ 734.380291][T23655] do_syscall_64+0x4c/0xa0 [ 734.384814][T23655] ? clear_bhb_loop+0x30/0x80 [ 734.389495][T23655] ? clear_bhb_loop+0x30/0x80 [ 734.394176][T23655] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 734.400067][T23655] RIP: 0033:0x7fc300b70799 [ 734.404483][T23655] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 734.424620][T23655] RSP: 002b:00007fc2fedca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 734.433132][T23655] RAX: ffffffffffffffda RBX: 00007fc300de9fa0 RCX: 00007fc300b70799 [ 734.441290][T23655] RDX: 000000000000004c RSI: 0000200000000900 RDI: 0000000000000005 [ 734.449268][T23655] RBP: 00007fc2fedca090 R08: 0000000000000000 R09: 0000000000000000 [ 734.457416][T23655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 734.465476][T23655] R13: 00007fc300dea038 R14: 00007fc300de9fa0 R15: 00007ffcfeb94198 [ 734.473915][T23655] [ 734.540087][T23655] Mem-Info: [ 734.543234][T23655] active_anon:315 inactive_anon:38810 isolated_anon:0 [ 734.543234][T23655] active_file:23700 inactive_file:36073 isolated_file:0 [ 734.543234][T23655] unevictable:768 dirty:113 writeback:0 [ 734.543234][T23655] slab_reclaimable:22079 slab_unreclaimable:113195 [ 734.543234][T23655] mapped:39488 shmem:26789 pagetables:989 bounce:0 [ 734.543234][T23655] kernel_misc_reclaimable:0 [ 734.543234][T23655] free:1315048 free_pcp:4253 free_cma:0 [ 734.849381][T23655] Node 0 active_anon:1228kB inactive_anon:147232kB active_file:94596kB inactive_file:144292kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:157952kB dirty:452kB writeback:0kB shmem:97480kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:15760kB pagetables:3756kB all_unreclaimable? no [ 735.034117][T23655] Node 1 active_anon:32kB inactive_anon:508kB active_file:204kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:2076kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 735.197319][T23655] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 735.260934][T23655] lowmem_reserve[]: 0 2539 2540 2540 2540 [ 735.285757][T23655] Node 0 DMA32 free:1320624kB min:34784kB low:43480kB high:52176kB reserved_highatomic:0KB active_anon:1224kB inactive_anon:146416kB active_file:94604kB inactive_file:144292kB unevictable:1536kB writepending:480kB present:3129332kB managed:2606552kB mlocked:0kB bounce:0kB free_pcp:27340kB local_pcp:20124kB free_cma:0kB [ 735.433662][T23655] lowmem_reserve[]: 0 0 0 0 0 [ 735.466442][T23655] Node 0 Normal free:4kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:660kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 735.545047][T23655] lowmem_reserve[]: 0 0 0 0 0 [ 735.556907][T23655] Node 1 Normal free:3923728kB min:55108kB low:68884kB high:82660kB reserved_highatomic:0KB active_anon:32kB inactive_anon:508kB active_file:204kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 735.651876][T23655] lowmem_reserve[]: 0 0 0 0 0 [ 735.667328][T23655] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 735.720944][T23655] Node 0 DMA32: 2580*4kB (UME) 643*8kB (UME) 714*16kB (UME) 760*32kB (UME) 601*64kB (UME) 717*128kB (UME) 477*256kB (UM) 191*512kB (UME) 51*1024kB (UME) 20*2048kB (UME) 204*4096kB (M) = 1330120kB [ 735.829791][T23655] Node 0 Normal: 4*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 735.871863][T23655] Node 1 Normal: 242*4kB (UE) 37*8kB (UME) 24*16kB (UME) 187*32kB (UE) 75*64kB (UME) 17*128kB (UME) 10*256kB (UM) 8*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 951*4096kB (M) = 3923728kB [ 735.933727][T23655] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 736.009313][T23655] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 736.062738][T23655] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 736.093240][T23655] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 736.123677][T23655] 78005 total pagecache pages [ 736.172461][T23655] 0 pages in swap cache [ 736.194622][T23655] Swap cache stats: add 43471, delete 43471, find 192/260 [ 736.222628][T23655] Free swap = 124608kB [ 736.226946][T23655] Total swap = 124996kB [ 736.263137][T23655] 2097051 pages RAM [ 736.267001][T23655] 0 pages HighMem/MovableOnly [ 736.321298][T23655] 411490 pages reserved [ 736.325756][T23655] 0 pages cma reserved [ 737.278565][T23759] netlink: 176280 bytes leftover after parsing attributes in process `syz.8.5341'. [ 737.878490][T23783] netlink: 61959 bytes leftover after parsing attributes in process `syz.8.5347'. [ 737.914517][T23783] tc_dump_action: action bad kind [ 738.392957][T23798] netlink: 'syz.8.5352': attribute type 21 has an invalid length. [ 738.455366][T23798] netlink: 132 bytes leftover after parsing attributes in process `syz.8.5352'. [ 738.521797][T23798] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5352'. [ 738.834894][T23817] netlink: 'syz.3.5357': attribute type 10 has an invalid length. [ 738.871569][T23817] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5357'. [ 739.457535][T23833] netlink: 38831 bytes leftover after parsing attributes in process `syz.3.5364'. [ 739.492233][T23838] netlink: 'syz.8.5363': attribute type 10 has an invalid length. [ 739.971420][T23852] netlink: 'syz.6.5372': attribute type 10 has an invalid length. [ 740.017710][T23852] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5372'. [ 740.084825][T23855] netlink: 'syz.8.5373': attribute type 10 has an invalid length. [ 740.205803][T23855] netlink: 40 bytes leftover after parsing attributes in process `syz.8.5373'. [ 740.693665][T23886] netlink: 'syz.8.5380': attribute type 1 has an invalid length. [ 740.727230][T23886] netlink: 15998 bytes leftover after parsing attributes in process `syz.8.5380'. [ 741.077928][T23915] netlink: 'syz.3.5390': attribute type 10 has an invalid length. [ 741.096378][T23915] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5390'. [ 741.238654][T23925] netlink: 'syz.6.5393': attribute type 1 has an invalid length. [ 742.432025][T23969] netlink: 'syz.4.5406': attribute type 4 has an invalid length. [ 742.484111][T23967] __nla_validate_parse: 1 callbacks suppressed [ 742.484142][T23967] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.5407'. [ 742.558352][T23967] openvswitch: netlink: Geneve opt len 5 is not a multiple of 4. [ 742.821076][T23979] netlink: 180 bytes leftover after parsing attributes in process `syz.3.5410'. [ 742.884746][T23979] netlink: 'syz.3.5410': attribute type 1 has an invalid length. [ 742.910563][T23979] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.5410'. [ 743.129915][T23996] pim6reg0: tun_chr_ioctl cmd 21531 [ 744.709886][T24017] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5420'. [ 744.772742][T24017] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5420'. [ 744.857590][T24024] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5420'. [ 744.966504][T24028] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5420'. [ 745.973236][T24081] netlink: 'syz.3.5445': attribute type 1 has an invalid length. [ 746.036994][T24082] netlink: 'syz.4.5444': attribute type 17 has an invalid length. [ 746.076447][T24082] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5444'. [ 746.087549][T24081] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.5445'. [ 746.128400][T24082] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 746.450997][T24096] netlink: 'syz.6.5449': attribute type 3 has an invalid length. [ 746.477386][T24096] netlink: 16098 bytes leftover after parsing attributes in process `syz.6.5449'. [ 746.702121][T24108] netlink: 'syz.6.5452': attribute type 21 has an invalid length. [ 747.314762][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.321193][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.690462][T24133] sctp: [Deprecated]: syz.8.5461 (pid 24133) Use of int in max_burst socket option deprecated. [ 747.690462][T24133] Use struct sctp_assoc_value instead [ 750.691013][T24216] __nla_validate_parse: 1 callbacks suppressed [ 750.691033][T24216] netlink: 209844 bytes leftover after parsing attributes in process `syz.5.5488'. [ 750.815161][T24223] netlink: 'syz.4.5492': attribute type 21 has an invalid length. [ 750.835730][T24223] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5492'. [ 751.054679][T24229] netlink: 'syz.4.5494': attribute type 1 has an invalid length. [ 751.076426][T24229] netlink: 63743 bytes leftover after parsing attributes in process `syz.4.5494'. [ 751.235449][T24236] netlink: 'syz.8.5499': attribute type 3 has an invalid length. [ 751.273412][T24236] netlink: 132 bytes leftover after parsing attributes in process `syz.8.5499'. [ 751.289927][T24239] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 751.360629][T24239] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 751.439658][T24246] netlink: 'syz.6.5500': attribute type 3 has an invalid length. [ 751.470060][T24246] netlink: 'syz.6.5500': attribute type 1 has an invalid length. [ 751.475274][T24240] netlink: 24095 bytes leftover after parsing attributes in process `syz.4.5498'. [ 751.502428][T24242] netlink: 24095 bytes leftover after parsing attributes in process `syz.4.5498'. [ 751.508253][T24246] netlink: 132 bytes leftover after parsing attributes in process `syz.6.5500'. [ 751.868262][T24256] tap0: tun_chr_ioctl cmd 1074025677 [ 751.887661][T24256] tap0: linktype set to 0 [ 752.254008][T24268] netlink: set zone limit has 8 unknown bytes [ 752.439285][T24268] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.5508'. [ 752.460881][T24282] netlink: 830 bytes leftover after parsing attributes in process `syz.6.5512'. [ 752.518066][T24268] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 752.565303][T24268] CPU: 0 PID: 24268 Comm: syz.4.5508 Not tainted syzkaller #0 [ 752.572877][T24268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 752.583154][T24268] Call Trace: [ 752.586465][T24268] [ 752.589427][T24268] dump_stack_lvl+0x188/0x250 [ 752.594478][T24268] ? show_regs_print_info+0x20/0x20 [ 752.599995][T24268] ? load_image+0x400/0x400 [ 752.604589][T24268] sysfs_warn_dup+0x8a/0xa0 [ 752.609223][T24268] sysfs_do_create_link_sd+0xc0/0x110 [ 752.614647][T24268] device_add+0x7ed/0xfb0 [ 752.619243][T24268] wiphy_register+0x1e81/0x2c30 [ 752.624204][T24268] ? cfg80211_event_work+0x40/0x40 [ 752.629449][T24268] ? minstrel_ht_alloc+0x808/0x980 [ 752.634823][T24268] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 752.641048][T24268] ieee80211_register_hw+0x2aa1/0x3af0 [ 752.646628][T24268] ? lockdep_hardirqs_on+0x94/0x140 [ 752.652025][T24268] ? ieee80211_tasklet_handler+0x20/0x20 [ 752.657731][T24268] ? rcu_is_watching+0x11/0xa0 [ 752.662556][T24268] ? memset+0x1e/0x40 [ 752.666724][T24268] ? hrtimer_init+0x10c/0x220 [ 752.671552][T24268] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 752.677387][T24268] hwsim_new_radio_nl+0xa6f/0xc40 [ 752.682768][T24268] genl_rcv_msg+0xcea/0xf90 [ 752.687400][T24268] ? lock_chain_count+0x20/0x20 [ 752.692502][T24268] ? genl_bind+0x380/0x380 [ 752.696989][T24268] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 752.702855][T24268] ? verify_lock_unused+0x140/0x140 [ 752.708109][T24268] ? perf_trace_lock_acquire+0x340/0x3e0 [ 752.713894][T24268] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 752.720549][T24268] ? perf_trace_lock+0xe4/0x390 [ 752.725706][T24268] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 752.732461][T24268] netlink_rcv_skb+0x1f5/0x440 [ 752.737625][T24268] ? genl_bind+0x380/0x380 [ 752.742077][T24268] ? netlink_ack+0xb50/0xb50 [ 752.746861][T24268] ? __lock_acquire+0x7d10/0x7d10 [ 752.751947][T24268] ? down_read+0x1aa/0x2e0 [ 752.756478][T24268] genl_rcv+0x24/0x40 [ 752.760516][T24268] netlink_unicast+0x774/0x920 [ 752.765348][T24268] netlink_sendmsg+0x8ba/0xbe0 [ 752.770177][T24268] ? netlink_getsockopt+0x570/0x570 [ 752.775409][T24268] ? aa_sock_msg_perm+0x94/0x150 [ 752.780397][T24268] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 752.785717][T24268] ? security_socket_sendmsg+0x7c/0xa0 [ 752.791228][T24268] ? netlink_getsockopt+0x570/0x570 [ 752.796555][T24268] ____sys_sendmsg+0x5b7/0x8f0 [ 752.801392][T24268] ? __sys_sendmsg_sock+0x30/0x30 [ 752.806570][T24268] ? import_iovec+0x6f/0xa0 [ 752.811212][T24268] ___sys_sendmsg+0x236/0x2e0 [ 752.816146][T24268] ? __sys_sendmsg+0x2a0/0x2a0 [ 752.821065][T24268] ? trace_event_raw_event_lock+0x270/0x270 [ 752.827069][T24268] __se_sys_sendmsg+0x1af/0x290 [ 752.831957][T24268] ? __x64_sys_sendmsg+0x80/0x80 [ 752.837059][T24268] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 752.843122][T24268] ? lockdep_hardirqs_on+0x94/0x140 [ 752.848366][T24268] do_syscall_64+0x4c/0xa0 [ 752.852794][T24268] ? clear_bhb_loop+0x30/0x80 [ 752.857653][T24268] ? clear_bhb_loop+0x30/0x80 [ 752.862350][T24268] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 752.868271][T24268] RIP: 0033:0x7fe515d15799 [ 752.872855][T24268] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 752.892577][T24268] RSP: 002b:00007fe513f6f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 752.901067][T24268] RAX: ffffffffffffffda RBX: 00007fe515f8efa0 RCX: 00007fe515d15799 [ 752.909241][T24268] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000f [ 752.917676][T24268] RBP: 00007fe515dabc99 R08: 0000000000000000 R09: 0000000000000000 [ 752.925763][T24268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 752.933776][T24268] R13: 00007fe515f8f038 R14: 00007fe515f8efa0 R15: 00007ffc1d4dbc28 [ 752.942306][T24268] [ 753.082919][T24282] netlink: 'syz.6.5512': attribute type 9 has an invalid length. [ 753.100340][T24282] netlink: 209836 bytes leftover after parsing attributes in process `syz.6.5512'. [ 753.113933][T24293] netlink: 'syz.8.5514': attribute type 1 has an invalid length. [ 753.843472][T24311] netlink: 'syz.3.5521': attribute type 10 has an invalid length. [ 754.913919][T24347] device syzkaller0 entered promiscuous mode [ 860.447160][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 860.454162][ C1] rcu: 0-...!: (1 GPs behind) idle=8d9/1/0x4000000000000002 softirq=67677/67678 fqs=67 [ 860.465438][ C1] (detected by 1, t=10506 jiffies, g=88841, q=308) [ 860.472428][ C1] Sending NMI from CPU 1 to CPUs 0: [ 860.477738][ C0] NMI backtrace for cpu 0 [ 860.477752][ C0] CPU: 0 PID: 24323 Comm: syz.8.5525 Not tainted syzkaller #0 [ 860.477769][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 860.477778][ C0] RIP: 0010:lock_acquire+0x14b/0x400 [ 860.477803][ C0] Code: 0f 85 08 02 00 00 41 83 3e 00 0f 85 16 01 00 00 43 c6 44 3d 08 00 48 c7 84 24 a0 00 00 00 00 00 00 00 9c 8f 84 24 a0 00 00 00 <4c> 8b b4 24 a0 00 00 00 43 c6 44 3d 08 f8 fa 48 c7 c7 80 35 2b 8a [ 860.477816][ C0] RSP: 0018:ffffc90002e6ee60 EFLAGS: 00000046 [ 860.477830][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: a58591ab4a9d8600 [ 860.477841][ C0] RDX: 0000000000000000 RSI: ffffffff8a79f960 RDI: ffffffff8a79f920 [ 860.477852][ C0] RBP: ffffc90002e6ef80 R08: ffffffff8d89e36f R09: 1ffffffff1b13c6d [ 860.477863][ C0] R10: dffffc0000000000 R11: fffffbfff1b13c6e R12: ffffffff8c31eaa0 [ 860.477875][ C0] R13: 1ffff920005cddd8 R14: ffff88802341466c R15: dffffc0000000000 [ 860.477887][ C0] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 860.477901][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 860.477913][ C0] CR2: 00007f932465eff8 CR3: 000000005d64d000 CR4: 00000000003506f0 [ 860.477927][ C0] DR0: 0000000000000004 DR1: 0000000000000000 DR2: 0000000000000000 [ 860.477937][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 860.477948][ C0] Call Trace: [ 860.477954][ C0] [ 860.477970][ C0] ? perf_trace_lock+0xe4/0x390 [ 860.477987][ C0] ? read_lock_is_recursive+0x10/0x10 [ 860.478007][ C0] ? trace_event_raw_event_lock+0x270/0x270 [ 860.478023][ C0] ? llist_add_batch+0x85/0xa0 [ 860.478046][ C0] rcu_lock_acquire+0x2a/0x30 [ 860.478062][ C0] ? rcu_lock_acquire+0x5/0x30 [ 860.478075][ C0] perf_output_begin_forward+0xa5/0xa40 [ 860.478089][ C0] ? kvm_is_in_guest+0x24/0x30 [ 860.478115][ C0] ? __perf_cgroup_move+0x140/0x140 [ 860.478130][ C0] ? perf_callchain+0x190/0x190 [ 860.478145][ C0] ? rcu_lock_release+0x9/0x20 [ 860.478166][ C0] perf_event_output_forward+0x19b/0x2e0 [ 860.478184][ C0] ? perf_get_page_size+0x430/0x430 [ 860.478201][ C0] ? perf_event_output_forward+0x261/0x2e0 [ 860.478219][ C0] ? perf_get_page_size+0x430/0x430 [ 860.478235][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 860.478253][ C0] __perf_event_overflow+0x364/0x530 [ 860.478273][ C0] perf_swevent_event+0x4ad/0x530 [ 860.478292][ C0] perf_tp_event+0x383/0xbf0 [ 860.478311][ C0] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 860.478328][ C0] ? perf_tp_event+0xa92/0xbf0 [ 860.478370][ C0] perf_trace_run_bpf_submit+0xf3/0x1c0 [ 860.478390][ C0] perf_trace_preemptirq_template+0x2aa/0x360 [ 860.478409][ C0] ? asm_sysvec_irq_work+0x16/0x20 [ 860.478426][ C0] ? trace_event_raw_event_preemptirq_template+0x290/0x290 [ 860.478443][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 860.478479][ C0] ? lock_chain_count+0x20/0x20 [ 860.478498][ C0] ? asm_sysvec_irq_work+0x16/0x20 [ 860.478514][ C0] trace_irq_enable_rcuidle+0x108/0x180 [ 860.478532][ C0] trace_hardirqs_on+0x57/0x80 [ 860.478547][ C0] asm_sysvec_irq_work+0x16/0x20 [ 860.478562][ C0] RIP: 0010:rcu_read_unlock_special+0x7f/0x4a0 [ 860.478580][ C0] Code: eb 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 2b 42 c7 44 2b 08 f8 f3 f3 f3 65 44 8b 35 12 f2 9c 7e 41 f7 c6 00 00 f0 00 74 40 <48> c7 44 24 20 0e 36 e0 45 4a c7 04 2b 00 00 00 00 42 c7 44 2b 08 [ 860.478593][ C0] RSP: 0018:ffffc90002e6f760 EFLAGS: 00000206 [ 860.478606][ C0] RAX: a58591ab4a9d8600 RBX: 1ffff920005cdef0 RCX: a58591ab4a9d8600 [ 860.478618][ C0] RDX: dffffc0000000000 RSI: ffffffff8a2b2780 RDI: ffffffff8a79f980 [ 860.478635][ C0] RBP: ffffc90002e6f830 R08: ffffffff901d40c7 R09: 1ffffffff203a818 [ 860.478647][ C0] R10: dffffc0000000000 R11: fffffbfff203a819 R12: ffffffff8c322f00 [ 860.478658][ C0] R13: dffffc0000000000 R14: 0000000000000246 R15: 0000000000000001 [ 860.478683][ C0] ? __rcu_read_unlock+0xd0/0xd0 [ 860.478698][ C0] ? rcu_lock_acquire+0x30/0x30 [ 860.478721][ C0] __rcu_read_unlock+0x78/0xd0 [ 860.478738][ C0] __unlock_page_memcg+0xea/0x100 [ 860.478754][ C0] unmap_page_range+0xf96/0x2500 [ 860.478791][ C0] unmap_vmas+0x131/0x250 [ 860.478807][ C0] ? unmap_page_range+0x2500/0x2500 [ 860.478820][ C0] ? __mutex_lock_common+0x465/0x2400 [ 860.478848][ C0] exit_mmap+0x3b9/0x640 [ 860.478866][ C0] ? vm_brk+0x20/0x20 [ 860.478890][ C0] ? uprobe_clear_state+0x2f6/0x460 [ 860.478912][ C0] ? mm_update_next_owner+0x522/0x640 [ 860.478930][ C0] __mmput+0x115/0x3b0 [ 860.478947][ C0] exit_mm+0x588/0x6e0 [ 860.478961][ C0] ? xacct_add_tsk+0x4a0/0x4a0 [ 860.478981][ C0] ? do_exit+0x20c0/0x20c0 [ 860.478996][ C0] ? taskstats_exit+0x439/0xab0 [ 860.479014][ C0] ? tty_audit_exit+0x14e/0x1f0 [ 860.479035][ C0] do_exit+0x5a9/0x20c0 [ 860.479051][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 860.479069][ C0] ? put_task_struct+0x80/0x80 [ 860.479084][ C0] ? lock_chain_count+0x20/0x20 [ 860.479102][ C0] ? preempt_schedule_thunk+0x16/0x18 [ 860.479125][ C0] do_group_exit+0x12e/0x300 [ 860.479143][ C0] __x64_sys_exit_group+0x3b/0x40 [ 860.479157][ C0] do_syscall_64+0x4c/0xa0 [ 860.479174][ C0] ? clear_bhb_loop+0x30/0x80 [ 860.479188][ C0] ? clear_bhb_loop+0x30/0x80 [ 860.479204][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 860.479221][ C0] RIP: 0033:0x7fc300b70799 [ 860.479234][ C0] Code: Unable to access opcode bytes at RIP 0x7fc300b7076f. [ 860.479242][ C0] RSP: 002b:00007ffcfeb944d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 860.479257][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc300b70799 [ 860.479269][ C0] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 860.479279][ C0] RBP: 00007ffcfeb9453c R08: 0000000000000000 R09: 00000000000927c0 [ 860.479290][ C0] R10: 0000000000000006 R11: 0000000000000246 R12: 000000000000011f [ 860.479300][ C0] R13: 00000000000927c0 R14: 00000000000b820c R15: 00007ffcfeb94590 [ 860.479320][ C0] [ 860.479735][ C1] rcu: rcu_preempt kthread starved for 10170 jiffies! g88841 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 861.084996][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 861.095673][ C1] rcu: RCU grace-period kthread stack dump: [ 861.101676][ C1] task:rcu_preempt state:R running task stack:27600 pid: 15 ppid: 2 flags:0x00004000 [ 861.112938][ C1] Call Trace: [ 861.116593][ C1] [ 861.119531][ C1] __schedule+0x11ef/0x43c0 [ 861.124142][ C1] ? _raw_spin_lock_irqsave+0x8b/0x100 [ 861.130108][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 861.136037][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 861.141265][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 861.147373][ C1] ? _raw_spin_unlock+0x40/0x40 [ 861.152882][ C1] ? release_firmware_map_entry+0x190/0x190 [ 861.159423][ C1] ? __mod_timer+0x91e/0xd00 [ 861.164580][ C1] schedule+0x11b/0x1e0 [ 861.169164][ C1] schedule_timeout+0x184/0x2d0 [ 861.174638][ C1] ? console_conditional_schedule+0x40/0x40 [ 861.180592][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 861.186570][ C1] ? update_process_times+0x200/0x200 [ 861.192191][ C1] ? prepare_to_swait_event+0x331/0x350 [ 861.197870][ C1] rcu_gp_fqs_loop+0x2be/0x11d0 [ 861.202730][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 861.207942][ C1] ? dyntick_save_progress_counter+0x230/0x230 [ 861.214288][ C1] ? rcu_gp_init+0x10f0/0x10f0 [ 861.219261][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 861.224556][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 861.229752][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 861.235407][ C1] rcu_gp_kthread+0x9b/0x370 [ 861.239995][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 861.246035][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 861.251232][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 861.257888][ C1] ? __kthread_parkme+0x157/0x1b0 [ 861.263101][ C1] kthread+0x436/0x520 [ 861.267187][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 861.272689][ C1] ? kthread_blkcg+0xd0/0xd0 [ 861.277549][ C1] ret_from_fork+0x1f/0x30 [ 861.281990][ C1] [ 861.285114][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 861.291767][ C1] NMI backtrace for cpu 1 [ 861.296102][ C1] CPU: 1 PID: 4594 Comm: kworker/u4:7 Not tainted syzkaller #0 [ 861.303923][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 861.314685][ C1] Workqueue: writeback wb_workfn (flush-8:0) [ 861.320717][ C1] Call Trace: [ 861.324104][ C1] [ 861.326961][ C1] dump_stack_lvl+0x188/0x250 [ 861.331662][ C1] ? show_regs_print_info+0x20/0x20 [ 861.336953][ C1] ? load_image+0x400/0x400 [ 861.341600][ C1] nmi_cpu_backtrace+0x3a2/0x3d0 [ 861.346680][ C1] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 861.353051][ C1] ? _printk+0xda/0x130 [ 861.357441][ C1] ? cpu_online+0x1d/0x30 [ 861.361900][ C1] ? load_image+0x400/0x400 [ 861.366861][ C1] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 861.373415][ C1] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 861.379925][ C1] rcu_check_gp_kthread_starvation+0x1cd/0x250 [ 861.386497][ C1] print_other_cpu_stall+0x1110/0x1270 [ 861.392120][ C1] ? print_cpu_stall+0x5f0/0x5f0 [ 861.398490][ C1] ? timekeeping_advance+0x7f6/0xac0 [ 861.404101][ C1] ? __lock_acquire+0x7d10/0x7d10 [ 861.409347][ C1] rcu_sched_clock_irq+0x843/0x1120 [ 861.414836][ C1] ? rcutree_dead_cpu+0x20/0x20 [ 861.419875][ C1] ? account_process_tick+0x22a/0x3a0 [ 861.425667][ C1] update_process_times+0x193/0x200 [ 861.430963][ C1] tick_sched_timer+0x37d/0x560 [ 861.436089][ C1] ? tick_setup_sched_timer+0x2c0/0x2c0 [ 861.441739][ C1] __hrtimer_run_queues+0x4b4/0xb70 [ 861.447060][ C1] ? hrtimer_interrupt+0x8d0/0x8d0 [ 861.452258][ C1] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 861.458592][ C1] hrtimer_interrupt+0x3bb/0x8d0 [ 861.463876][ C1] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 861.469989][ C1] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 861.475685][ C1] [ 861.478891][ C1] [ 861.481830][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 861.488102][ C1] RIP: 0010:kvm_wait+0x159/0x1b0 [ 861.493733][ C1] Code: 89 df 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 75 4b 0f b6 1f e8 77 b3 4a 00 44 38 e3 75 10 66 90 0f 00 2d 99 e2 f3 08 fb f4 16 ff ff ff fb e9 10 ff ff ff e8 47 cf 87 08 89 f9 80 e1 07 38 [ 861.514943][ C1] RSP: 0018:ffffc9000307e5c0 EFLAGS: 00000246 [ 861.521301][ C1] RAX: 28dbae8336112400 RBX: 0000000000000003 RCX: 28dbae8336112400 [ 861.529707][ C1] RDX: dffffc0000000000 RSI: ffffffff8a2b2780 RDI: ffffffff8a79f980 [ 861.538292][ C1] RBP: ffffc9000307e670 R08: ffffffff901d40c7 R09: 1ffffffff203a818 [ 861.546549][ C1] R10: dffffc0000000000 R11: fffffbfff203a819 R12: 0000000000000003 [ 861.554532][ C1] R13: ffff8880b913b154 R14: dffffc0000000000 R15: 1ffff9200060fcb8 [ 861.562742][ C1] ? kvm_arch_para_hints+0x30/0x30 [ 861.567865][ C1] ? pv_hash+0x81/0x140 [ 861.572105][ C1] __pv_queued_spin_lock_slowpath+0x60f/0x9c0 [ 861.578372][ C1] ? __pv_queued_spin_unlock_slowpath+0x290/0x290 [ 861.584844][ C1] queued_spin_lock_slowpath+0x43/0x50 [ 861.590425][ C1] do_raw_spin_lock+0x265/0x2f0 [ 861.595283][ C1] ? __rwlock_init+0x140/0x140 [ 861.600057][ C1] page_vma_mapped_walk+0x1468/0x1740 [ 861.605691][ C1] page_mkclean_one+0x17d/0x3e0 [ 861.610746][ C1] ? page_mkclean+0x400/0x400 [ 861.615442][ C1] ? __might_sleep+0xf0/0xf0 [ 861.620132][ C1] ? verify_lock_unused+0x140/0x140 [ 861.625357][ C1] ? vma_address+0x254/0x460 [ 861.630316][ C1] ? page_mkclean+0x400/0x400 [ 861.635455][ C1] rmap_walk_file+0x408/0x610 [ 861.640459][ C1] page_mkclean+0x2f4/0x400 [ 861.644999][ C1] ? rmap_walk+0x170/0x170 [ 861.649780][ C1] ? page_mkclean+0x400/0x400 [ 861.654828][ C1] ? page_mkclean_one+0x3e0/0x3e0 [ 861.660040][ C1] ? page_mapping+0x30e/0x440 [ 861.664815][ C1] clear_page_dirty_for_io+0x3f8/0x9f0 [ 861.670378][ C1] ? wait_on_page_writeback+0x180/0x180 [ 861.676203][ C1] ? do_writepages+0x476/0x6e0 [ 861.681056][ C1] mpage_submit_page+0x8a/0x210 [ 861.685923][ C1] mpage_process_page_bufs+0x6d8/0x8b0 [ 861.691706][ C1] mpage_prepare_extent_to_map+0xbc2/0xfe0 [ 861.698266][ C1] ? trace_ext4_writepages+0x1c0/0x1c0 [ 861.703859][ C1] ? rcu_is_watching+0x11/0xa0 [ 861.708648][ C1] ? ext4_init_io_end+0x25/0x120 [ 861.713950][ C1] ext4_writepages+0xa9a/0x2df0 [ 861.718840][ C1] ? __lock_acquire+0x13bc/0x7d10 [ 861.723990][ C1] ? mark_lock+0x94/0x320 [ 861.728407][ C1] ? ext4_readpage+0x2e0/0x2e0 [ 861.733374][ C1] ? __lock_acquire+0x13bc/0x7d10 [ 861.738643][ C1] ? verify_lock_unused+0x140/0x140 [ 861.743967][ C1] ? writeback_sb_inodes+0x418/0x1680 [ 861.749431][ C1] ? perf_trace_lock+0xe4/0x390 [ 861.754525][ C1] ? ext4_readpage+0x2e0/0x2e0 [ 861.759465][ C1] do_writepages+0x476/0x6e0 [ 861.764165][ C1] ? __writepage+0x130/0x130 [ 861.768859][ C1] ? writeback_sb_inodes+0x67d/0x1680 [ 861.774325][ C1] ? __lock_acquire+0x7d10/0x7d10 [ 861.779348][ C1] ? do_raw_spin_lock+0x128/0x2f0 [ 861.784493][ C1] __writeback_single_inode+0x153/0xda0 [ 861.790146][ C1] writeback_sb_inodes+0xa4e/0x1680 [ 861.795400][ C1] ? queue_io+0x550/0x550 [ 861.800027][ C1] ? up_read+0x20/0x20 [ 861.804152][ C1] __writeback_inodes_wb+0x12a/0x3f0 [ 861.809558][ C1] wb_writeback+0x46f/0xbe0 [ 861.814099][ C1] ? rcu_lock_release+0x20/0x20 [ 861.819330][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 861.825019][ C1] wb_workfn+0xbd6/0xf20 [ 861.830381][ C1] ? inode_wait_for_writeback+0x220/0x220 [ 861.836137][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 861.842137][ C1] ? read_lock_is_recursive+0x10/0x10 [ 861.847539][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 861.853159][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 861.858538][ C1] process_one_work+0x85f/0x1010 [ 861.863534][ C1] ? worker_detach_from_pool+0x240/0x240 [ 861.869188][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 861.875096][ C1] ? _raw_spin_lock_irq+0xb7/0xf0 [ 861.880654][ C1] ? _raw_spin_lock_irqsave+0x100/0x100 [ 861.887257][ C1] ? wq_worker_running+0x97/0x170 [ 861.892935][ C1] worker_thread+0xaa6/0x1290 [ 861.898060][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 861.903546][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 861.909546][ C1] kthread+0x436/0x520 [ 861.913904][ C1] ? rcu_lock_release+0x20/0x20 [ 861.919026][ C1] ? kthread_blkcg+0xd0/0xd0 [ 861.923626][ C1] ret_from_fork+0x1f/0x30 [ 861.928485][ C1]