last executing test programs: 6m4.021357487s ago: executing program 0 (id=4409): socket$kcm(0xa, 0x2, 0x88) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6}}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000008000000e27f000001"], 0x48) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYRESDEC=r0], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000000}, 0x0, 0xc8, 0x400ffff, 0x1, 0x1, 0x0, 0x2, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="b9ff03076044238c9e9e15f088a8", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000), 0x3000) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="181c00000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) 6m3.578796933s ago: executing program 0 (id=4412): socket$kcm(0x10, 0x2, 0x4) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000500), 0x8) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b0000000000000000000000040000000000fb6c3b80c05b8f9aec742cc7791c077bd22d5e47a0b99157c08402dc74887107ea43687eb49d9d384c4227e58f65731668af2eefd51428337ec13ced2d01d54fe09b5c33cf48940bb4493365f6afad46cb4fa0a2baa7aafeb7b8b09037e00b11f27fd19591ca28b22f366869fbeb7b3dd08b90f5d90ad44943e000"/154, @ANYRES32=0x0, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f00000003c0)={&(0x7f0000000040)=@in6={0xa, 0x4e23, 0xd, @local, 0x7}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="f1", 0x1}], 0x1}, 0x40040) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000300)='%pK \x00'}, 0x20) sendmsg$kcm(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000580)="03a5b0171f2dc0a054b3b9355b13d53130f357298fca7a01b83a", 0x1a}, {&(0x7f0000000700)="22ee861c25481eef65301a224a001ec040597c7bf4854c", 0x17}, {&(0x7f0000000740)="dd870cc5941cb152f94e9191bd0fa8e0b22c2398eaebc59eaf09c15608feb1c6d46d30258a26a712", 0x28}], 0x3}, 0x4884) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={r6, &(0x7f0000000680)="31e9810d1cfacbdb317e715ac5a1052f2a9fc2e1c1b9766828e380b9480ff098620c316b69533324df8cfd5b80de2f6b4b58e1670a61a35b6ad0ed9a21a02fbfe38663204980730107252cf0a470d22958", &(0x7f0000001040)=""/4096, 0x4}, 0x20) perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffef, r4, 0xa) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000040000000500000000000000", @ANYRES32, @ANYBLOB="00000200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) 6m3.103568901s ago: executing program 0 (id=4418): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f0000000340), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b40)={r0, &(0x7f0000000a80), 0x0}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xc, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x20, 0x0, &(0x7f00000002c0)="b90103616908068c3c270040e700009e0dc5cf1d66fff2fcffff8100632f2991", 0x0, 0x8104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0xf25, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r2, 0x40107446, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f0000003b00)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@ifindex, 0x1e, 0x0, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)={@cgroup=r5, 0xffffffffffffffff, 0x10, 0x0, 0x0, @void, @value, @void, @void, r4}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x5, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="61154c00000000006113500000000000bfa00000000000001503000008004e002d3501000000000095004160000000006916360000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf670000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffbd4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076ebae3f55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932c9a6aa57f1ad2e99e0e67ab93716d20000009fbb0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000f4000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b30410856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff010404faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202ee1192b81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9b5a8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18487b6feb89752cd600000000abc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d5454d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18533d4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684e62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961cf4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fd0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1978a04bbff4bbe0000000000000000000000000044585397feaadda3fcc64e7b0c08f7ac5c64cb190f1712a3b10fc34eb758705f1751d8c8b712eb39d2b8ad44f129c2c9aedb15"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 6m1.793395887s ago: executing program 0 (id=4429): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6m1.686908733s ago: executing program 0 (id=4430): perf_event_open(0x0, 0x0, 0x4000000000e, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000200)='ns/mnt\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b07080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf5af51d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa16509945ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000cf7b6c4ba9bec153d6834bfef080df374703a8ff56a63ec1fe5f2e05a79e3cace7283dd68d41e94420c325fe4dae144fde5ec25a87d625cab20753a77b323fa3783c8b675859b9012647885a242adfee2fe812ecbe5191e0a15142f7349e7627cc39d724e2e34e7a24154f26ae3125b36d0504965295d0453902ac7079b11a3a1e655e482331e3dc35b2e7e4e3ea99064fe5b9c8ae0ca3e5fd653f3286a99d81ce4eba765c38d097391ad4babac38ce5b4344e24a361cd54e5"], &(0x7f0000000380)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000005c0)='cgroup.max.descendants\x00', 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'macvtap0\x00', 0x7101}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001280)='memory.events\x00', 0x26e1, 0x0) write$cgroup_subtree(r0, &(0x7f0000000140)=ANY=[], 0x32600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40305829, &(0x7f0000000040)=0x20000) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_clone(0x410a4400, 0x0, 0xfffffffffffffd56, 0x0, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0x8, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000040), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r3, &(0x7f0000000200)=ANY=[@ANYBLOB='gretap0 8'], 0xa) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, 0x0) r5 = socket$kcm(0x10, 0x400000002, 0x0) setsockopt$sock_attach_bpf(r5, 0x10e, 0x2, 0x0, 0x0) 6m0.455516135s ago: executing program 0 (id=4443): r0 = socket$kcm(0x15, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x114, 0x2, 0x0, 0x20) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, @perf_config_ext={0x8000000000000001, 0x8001}, 0x111026, 0x7, 0x8, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x21, &(0x7f00000001c0)=[{&(0x7f0000000240)="d8000000200081044e81f782db44b90402000000e8fe450f55a1180015000600142603600e120900100000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8cbf7a7ff4841ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4d180a54f14f00004d9db22fe7c9f8775730d16a4683f1aea4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace91ed0bffd6e4edef3d93452a92954b43370e00"/216, 0xd8}], 0x1}, 0x0) syz_clone(0x208000, &(0x7f0000000100)="07ae7849340762f42474bed8eba77154c6c7fab5204c2358de42eb5bc7d632c1adbdcc51cb4b2175805f011a362a38799e8a5172748274940e323449be8aec0cc3246abdce6b22a9b75a298c6672bc43c035b442778f56d1216a3251b1e30e3fddbdf7f0b2f7ecf39318390e72af8e722eedef143709c1845fee9da06a7dc79c57639166ce9a6c93419b311b5ae308711f635b106f348a90dffe653dea36d02a09249ad38764c10f121892e2", 0xac, &(0x7f0000000200), &(0x7f0000000340), &(0x7f0000000380)="355391b65d81302bdbc38c9bdd348592e6a4f82274ed3a008bdd771df4c1c99523d2e980106b750907d9bc3b1b12dc836eeae6da055d8b6701b10060ef746273dd6799632374d41a4f0d92e0f3f204b08aab8de334a8e1b05508b9cfcbd907afb7f201f11c88f8e8044a4d54b099acedc75c0fb1892a081a334761891c2bd9d5a9a6c3a5be3966826486b533165ac51674efaca94767a23eeae0eda7965292eb1a5c2ec679a1888d181cd5d8e8163e5a97a501d0564ce37c4e760f64e2ca4f0113f5b520fcebf9f2f4da96177c1fabc376cfcbf55b1b3f56e81d1b14abeb08dbbc44517ebf503839c57f77249b8650b345d098505594e0dfaaf3514f0e4e9b9581fa7b9c1adc342151066aa1eb24763ae4aefd28f9953aea6f8b9caba3e86f19dfe72c7cde8171d07ddf21f93b4841c279164dc725acf46f30c654761de22663113741ba6653993f3af3f54fe7039c8226e828836eb81fbc9e0311d8ff92ee673a2c4bea09e58d9933358ae17e8db27b898eea5e1e721279f9bd870ddea3d817318beab06a77d4d612c83076e84fcd9ff8a962e440d3cb5a27a8a1e7749ce0747bb9db17907dc7f297aa63e375f20fa598220aa710aea9ea813d9094b0d3bdb0af5d6cfb86779806d52db9fabfa9a182c3c1b38172c8361b68753a9731b24ae43c14591d67cf9db3eaf7504f5e6a75f5e88068bb3b8ebb5ae37dd9a1b102f90df705064c93cd2337b0cb5e84a1bf31a9d45fb8728dccd32014e51fa3af5dd304ad139cec3c319efb6fcf793a4c0e6637b6374bbde2ad1cde64bf7a5315952c4a349979a9d894e17e0010c4b9b40818f78e1b5bdc8deeb75a4e4d0b8832d29dd2d5b79e85049ee4fb802a9eef0c8424d40b334fbfd844e51877aa527fa34722d54d730ffac9937c1952b6f9a31fba2746011865f00ef5dfd58712281fea4bc2aa07920d865914ee1b67b98895d9784d6a1f099d0fc0712e1dfa517a2fbd7da2c6989913272f0996ae34cf91402e5dc1850cbe0ef6268f91cc4e36b7d526997f4a29866771bbd84b9ba11da851f1f6c9bed4e8bea185090e8894d89ee7a1f05590511646e15cc31cd476b955c1b7f05c90b3f8d55c98774972aec030404ff1c1459f8980b55e86bfc8fbabfc9bc35b204ad47909f7087c8886198ae4242555e9237b07b50b0e1ae6e15ddbe316d96649711acceacf3db8738b725160d3084f9d9af209b875b8c20f0961b9eef7aca80c8181d2df981b3f8954861dd642d87b9e04bc38af2e414a1562f798a48ec7e40a9cec9b3b34a6be03ade0a72d1785451e397d43d2cc43a7351ac97d620f2387cde9932f157c3f79d18d1e79928827c8df87976af3a6f44d0b62528532f9bc6ff82c5582f8319a4182906bbbdc6fe40774f310f76f786dfa65a3947ead9f25f33878f48b6ba7448633734343051cedd26b4478b0004e1f4dfca533f8bc14dab196eeb25cbe579005ad9e11074d069575a10bed20f35cd4317e1e9f67bbf0eaf0738407520bf27d95a1273d36422e4e0d405d5e2d9670c7a630737d6ada428f9a4ad1a3e3c2f199ca75ca5e377d9518d373407621197d9c61f02457d1d501933af972f9aa7c46418ce223ee805d9d5480adba951dbf1ccab93bf924005723503eb3543c07f591dc5d28792172ecba23f32e3e35664413c8883c03bda461e11f9d3dac54d91f60bafb028467d50594e1c159a2a131b51a1a237451b7bd699e0c4c9cebbae72accebda66830ca504d541df45459f647cc1c5175bd546655efb2a0c4d760b76e77d6e4dd0edb5bc9e98eae89e400a0211c4bc32a29b2dccd8df943b3c8a4d15c0c0c04e6af7f7ad2779917c782f88c583ed6026b3e26da3487c6356faadc9fb1619eb65fecc55563de1896a3b9c0b6ec4c6cac8304245e587342518cb15451ccf1b7ad52ec44c1c517c33e42b9ce8eac51fb4b69eec83b4f93586746326394c7eb2f5e6d39ee5881124f3557f99fb795fdacc0054ddceeb1c20f975ca81339e14c7985240558408257c7839622e5cf11204acc33f86550588c5206d65490b203582cb3c14af541d776930bd382fb60d4ed822c905643d55ccb13dee42da7580c9d059a478fb6f8eff411aab51582369156b17003c5e1cb133ccba4b7b31e1da982380c8c43b7c737ce4414845cbb9de422b25a3679a6a18ccc220b7d1316f207e513d8dbfc114bf5400a774c2d3f541bcb40ecbb0bd7c29a7e3e98aa8cdb180f71e2fe2b71f9e4a122c83d7490ba5397483145109924b02f562d5c2e22f287616094dfd3b74864a027506905c44c5466aef68777b61bc08302b2dcad2ddf9a64255246255b0f3d0ba8eaa277f51462da852e373057305a078fc1467d987eb076bdd706e28921411196b2d39d328afca0fdb6ec8c5bebf5e4bb417c30b05121fe2accf218d9ebed29ba09894aedb6a259ed2e4bc616c80291f0aa32a2f32d93253906405edf4e59af32131eba8d8f8349d938a959d9cfbc6b14f80cdff8d6019fbf2c9407a5ed0086c57bfe98ab19725ed61acbccb82dfdd559c817ef59aa4d83efc272728ce6f6fadad83795a7263253a9874b2df777e7d5d614c44607dbb1f0ea78f754ebd6280ffe8c22ecf48312e42bd358ab8fd85fd463c39d14d55818cb6e3d1e53ebf4fe99be04b7402ec313a3bd23cf09868405e2997b0431baa5985072b3dd36e720fe382c2a8a5f95ba37d93a27cd845c3533b4d1de5a5d5494d5c4694b7e1405ac9428201664f04e5f5b0ce36a5a1b16d789b453f83f94e18457fe689b19c8d12da11da7f984260f3f0d73e97636e0d1052b8082114fcbbe728e8d793b9b85a46f4924e125f23c32bab390d2091b9e3bbdf01bbec97fb6ddc760cfc35e6caea21a420432a89e2fc5c7e721ea7b509c6cf6359cd8cc5253296d1cda8b99dc06c20a057478659baadaba8f3b061c52c8c65243c21ea9cc654cff32df5943decae4e067ebf780c9d9c83e7d08b25a8cbd36b6f964dba343e5fb122c952c285fac6347101e187857f9d0633c3b8dc86387fa9d71bacbb981da6720caf8b7960fcb2ad27945ed00b731710ec163a15f7ee90ea9cb7c76b4c5172abdb9a9bc38533f8e30d6668d0f42fb07a82c1e05be6c0748b5dbfa557c4487f2c5c0cb91c34e11537b87a114ccfe03d145fb06e4f002cfe491a0b3c08496b205999322d63fab81e01e10d47b349944d0114d13abb07be2b5fe66d8e637939aaaf3217167e8eb94bf7cdf96de8266a241ca785e76afdac88a980f0d55bed95e80e7b611eedc942a885a2fef9662173009dbb6fa08c75fe2dec4abf62eab088ec87defb841567b3207100185e52d6459e4d0490c18029db88a914b7ce3f460c2bfd9de2c255652229a373dbee0ca3bef0f7d6102afe7f517da612c79d63067b1942df72bfdf04af07ef1984c92f35f28f09974748ff2b3f74302b85f5ab156bf1d230fbbec98b46abf36b9b9f8a9a1c99a4d91e58d14d3d317de053a3a2a24284310739a4b240247fc375f89ff0cbc635b16697def50ccd4a5596e111c28feb8a979a66dbac226f9f0e2d9dcde5ae43c6c3d62dd5a93c3f7b723c2e2a2c591ede9a5e5b66f29d4718f5a2686ef5b37e1fa05f014ebb1f4027c4931338f0e27583699c8d0f98078bbe63ba5b6f6e9e4e88d9e5b9f8815bd653fb3daa200e63dc5b298693035944cf44217f98d2c10e74b398c0ec1b15ce4a6f0073bb05f54d4321145901c6a74a13fd2dca58e258224268a96fbb8a785f2cf18dfc4068b432d654c2c47fcac8bfeb711dfd594df71db427c23590d4850b90142c2c3a6f65f58ac283378ddb86ecd98d7aafeafe0249b2efd8a3bc2066955eb11b8ab856d3c9f9cdbc6e2be0ddcc1472a37fc1db29213f49b7f4bf152beac0ce57df21b4370e72384261f2103ef1be7b71eaf4b21d36a7fb77add47cd29ab2593bc5f409193621eea25e72f05adc342289d9a5ff1f5b0999605c3fb74cb312d375b448c0333e32aa7bac191d829d3478df3ea45f08d02089e2190adc10c506d4d96ef764b9d9bea7220c121df33a7ad83408855e69a3b0de70fac14f0a176f2f2b8e0dfb4cfbb923e6afd66aaacf1a423cfae0a42b607260c999416cc454d2bd7d1d9fb3cfed0b50e30b8ea953ba07b2948cf6a7892733731031650b3fc7ecd8bbdc5f43fd7f093b05bdb9a53b382c0115448a8c45aa93d7c714f80d04617583a2327e2a440e74af8dbb66128689bf0224f678c5f992b9f1a4cc982a602f49ba846a1c25e2a43b812829b49e19daf2b0e7dca851e92a9e7bcf89aaf23c7e65efa6f7e0a0c78827792c726b9e071846a5c5d7657fa336d0c5c8c0b6443e980eb203dd7c47a262df3ba09a00f1f87133d6496e54398cf973e311138b0e2a50e78a0ec15067eff35bb72448f5b6ff7f641402773bdc12fca0827e50e1bc5932b5ec156333b1b788814b3ccc60b3ed522f65d294fd03aeca1b5983e8fe928aebf6ded54f33d187a0e3dbfc57a9d9734f123577d98d0d511e76e4359d0410042a0e02f03ead050a66835cfaa435be500f0c0d5753af21527133a1fcf2d9cf7486a72d74d14980da88cca730c8daa057185ea34efa14d64d86761e1e4845de71b27b4cfe655f2cf7cfe77bb6239761e94ba066b7ddb7134296cbfdb7b8fd3aaaaaef1edc224b0e4674ed21b35d6530de160be09f91f6e2e97978001de993d23365c961307d2d38489d038d33f4a19410520ab131c5b8a668e1ab97305fb02cdcb83f8ab56b228c47fe31b5450324ca00e9cb597403746e9d97efd365f8c5c851b1d9a0daf780551333eb43e0f0413c998e553ec6ba63530dc021e1a77c83ad67ff26a5191a543041e17597069c05812fbe63d61d7aaf3ba2a72ac6f50633b99f7924eca46f3d46e710c598f048bbf74a7e02430b759d17a8bb44f356bbf33fd5c03f379c654ffc1d0b951a51d35d849e8fc8e427557675e14de8964172359ff42ad5dcc1eeaee4c358d65a29adf2989979640fd9f50ce9542a43f7ad1b2fd628d5245c431720b5934cd2d1ba715e3872d7ab056367af91b9da4bb436ab6a69925499ae121dbb3bf15e2805bb83fb195bf267ee58a84326cb018ea85acc1e01c3590c8e1b4dea9b4aa463d3c0e5fec907ce6927675ebc0cb7e57a013feff5614866d8715155a33bf7c5101c45d097cce097579e773f76238be4f9b30496347fd4a740591c420205b5edfcc27ca86d7b1e9ad66f146e53e029b5c586aa92aa30d1164971976ee29e2ffe5f4e0feabd3338038e2663df4c4f42889244e8d205142a006b17a63e26549f290781bfb76fe192052511cb9a68fec6386518035065e76f956d9e335a27fd15c528e5edea4ca9ee07604db54efbff02393c0cf82ebef6c3a77b544e87fa174fd8863d9ce2d97fe635e37bb0f2397326c7eecfc49440d3bf1a0420d6ace8891a86827c7d114bc282f0f7e7a926f309c1687c474e00616dccd63f6653b7d53bf6b27d45cbf12e074d64bfc46bd2612d3216a11b8cbe1fa873f6ed4549b26d0380a4072d5ea41fd4775446780347388db56fc52e05d8a3ca32aaf9871ca578bec18f712ca7a52a45d2df58711ed5e86be760842c212cd549345e258bda37fa9adf5b6b0a8acf5caa199c6fbe740bdc80351fd1c447d4b30fe411a4681de33460832dcc7235290e9ea27f3f31d20a913415c10baffd4364d6e1b8aa3f2b20caaadf3ccf6bb409d195a6d26b8b19e296c9a5408b1eeb21a4eb2212f304bdf294e30fc7d22d55b3250875c5ea86caeb9ea2d394cbddf8") r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="feffffff00"/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="000000000000000000000000000000000000003a000000000000e5ff6f33a40f4bea9743b280131847d345463b"], 0x48) socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1}, 0x0) close(0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0x2, 0x5, 0x3, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004001100040000000200008acb000000", @ANYRES32=r3, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000001580)={0x2, 0x80, 0x1, 0x4, 0x1, 0x9, 0x0, 0x8, 0x62620, 0xa, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000001540), 0x8}, 0x80, 0x4, 0x1, 0x2, 0x7c, 0xfffffff0, 0xa7bf, 0x0, 0x8, 0x0, 0x1}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r5, &(0x7f00000006c0), &(0x7f0000000000), 0x2}, 0x20) perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x10eda2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(0x3) syz_clone(0x43100000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f0, &(0x7f0000000080)) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000001380), 0x84300, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f00000013c0)={'macvtap0\x00', @local}) 5m45.391394712s ago: executing program 32 (id=4443): r0 = socket$kcm(0x15, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x114, 0x2, 0x0, 0x20) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, @perf_config_ext={0x8000000000000001, 0x8001}, 0x111026, 0x7, 0x8, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x21, &(0x7f00000001c0)=[{&(0x7f0000000240)="d8000000200081044e81f782db44b90402000000e8fe450f55a1180015000600142603600e120900100000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8cbf7a7ff4841ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4d180a54f14f00004d9db22fe7c9f8775730d16a4683f1aea4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace91ed0bffd6e4edef3d93452a92954b43370e00"/216, 0xd8}], 0x1}, 0x0) syz_clone(0x208000, &(0x7f0000000100)="07ae7849340762f42474bed8eba77154c6c7fab5204c2358de42eb5bc7d632c1adbdcc51cb4b2175805f011a362a38799e8a5172748274940e323449be8aec0cc3246abdce6b22a9b75a298c6672bc43c035b442778f56d1216a3251b1e30e3fddbdf7f0b2f7ecf39318390e72af8e722eedef143709c1845fee9da06a7dc79c57639166ce9a6c93419b311b5ae308711f635b106f348a90dffe653dea36d02a09249ad38764c10f121892e2", 0xac, &(0x7f0000000200), &(0x7f0000000340), &(0x7f0000000380)="355391b65d81302bdbc38c9bdd348592e6a4f82274ed3a008bdd771df4c1c99523d2e980106b750907d9bc3b1b12dc836eeae6da055d8b6701b10060ef746273dd6799632374d41a4f0d92e0f3f204b08aab8de334a8e1b05508b9cfcbd907afb7f201f11c88f8e8044a4d54b099acedc75c0fb1892a081a334761891c2bd9d5a9a6c3a5be3966826486b533165ac51674efaca94767a23eeae0eda7965292eb1a5c2ec679a1888d181cd5d8e8163e5a97a501d0564ce37c4e760f64e2ca4f0113f5b520fcebf9f2f4da96177c1fabc376cfcbf55b1b3f56e81d1b14abeb08dbbc44517ebf503839c57f77249b8650b345d098505594e0dfaaf3514f0e4e9b9581fa7b9c1adc342151066aa1eb24763ae4aefd28f9953aea6f8b9caba3e86f19dfe72c7cde8171d07ddf21f93b4841c279164dc725acf46f30c654761de22663113741ba6653993f3af3f54fe7039c8226e828836eb81fbc9e0311d8ff92ee673a2c4bea09e58d9933358ae17e8db27b898eea5e1e721279f9bd870ddea3d817318beab06a77d4d612c83076e84fcd9ff8a962e440d3cb5a27a8a1e7749ce0747bb9db17907dc7f297aa63e375f20fa598220aa710aea9ea813d9094b0d3bdb0af5d6cfb86779806d52db9fabfa9a182c3c1b38172c8361b68753a9731b24ae43c14591d67cf9db3eaf7504f5e6a75f5e88068bb3b8ebb5ae37dd9a1b102f90df705064c93cd2337b0cb5e84a1bf31a9d45fb8728dccd32014e51fa3af5dd304ad139cec3c319efb6fcf793a4c0e6637b6374bbde2ad1cde64bf7a5315952c4a349979a9d894e17e0010c4b9b40818f78e1b5bdc8deeb75a4e4d0b8832d29dd2d5b79e85049ee4fb802a9eef0c8424d40b334fbfd844e51877aa527fa34722d54d730ffac9937c1952b6f9a31fba2746011865f00ef5dfd58712281fea4bc2aa07920d865914ee1b67b98895d9784d6a1f099d0fc0712e1dfa517a2fbd7da2c6989913272f0996ae34cf91402e5dc1850cbe0ef6268f91cc4e36b7d526997f4a29866771bbd84b9ba11da851f1f6c9bed4e8bea185090e8894d89ee7a1f05590511646e15cc31cd476b955c1b7f05c90b3f8d55c98774972aec030404ff1c1459f8980b55e86bfc8fbabfc9bc35b204ad47909f7087c8886198ae4242555e9237b07b50b0e1ae6e15ddbe316d96649711acceacf3db8738b725160d3084f9d9af209b875b8c20f0961b9eef7aca80c8181d2df981b3f8954861dd642d87b9e04bc38af2e414a1562f798a48ec7e40a9cec9b3b34a6be03ade0a72d1785451e397d43d2cc43a7351ac97d620f2387cde9932f157c3f79d18d1e79928827c8df87976af3a6f44d0b62528532f9bc6ff82c5582f8319a4182906bbbdc6fe40774f310f76f786dfa65a3947ead9f25f33878f48b6ba7448633734343051cedd26b4478b0004e1f4dfca533f8bc14dab196eeb25cbe579005ad9e11074d069575a10bed20f35cd4317e1e9f67bbf0eaf0738407520bf27d95a1273d36422e4e0d405d5e2d9670c7a630737d6ada428f9a4ad1a3e3c2f199ca75ca5e377d9518d373407621197d9c61f02457d1d501933af972f9aa7c46418ce223ee805d9d5480adba951dbf1ccab93bf924005723503eb3543c07f591dc5d28792172ecba23f32e3e35664413c8883c03bda461e11f9d3dac54d91f60bafb028467d50594e1c159a2a131b51a1a237451b7bd699e0c4c9cebbae72accebda66830ca504d541df45459f647cc1c5175bd546655efb2a0c4d760b76e77d6e4dd0edb5bc9e98eae89e400a0211c4bc32a29b2dccd8df943b3c8a4d15c0c0c04e6af7f7ad2779917c782f88c583ed6026b3e26da3487c6356faadc9fb1619eb65fecc55563de1896a3b9c0b6ec4c6cac8304245e587342518cb15451ccf1b7ad52ec44c1c517c33e42b9ce8eac51fb4b69eec83b4f93586746326394c7eb2f5e6d39ee5881124f3557f99fb795fdacc0054ddceeb1c20f975ca81339e14c7985240558408257c7839622e5cf11204acc33f86550588c5206d65490b203582cb3c14af541d776930bd382fb60d4ed822c905643d55ccb13dee42da7580c9d059a478fb6f8eff411aab51582369156b17003c5e1cb133ccba4b7b31e1da982380c8c43b7c737ce4414845cbb9de422b25a3679a6a18ccc220b7d1316f207e513d8dbfc114bf5400a774c2d3f541bcb40ecbb0bd7c29a7e3e98aa8cdb180f71e2fe2b71f9e4a122c83d7490ba5397483145109924b02f562d5c2e22f287616094dfd3b74864a027506905c44c5466aef68777b61bc08302b2dcad2ddf9a64255246255b0f3d0ba8eaa277f51462da852e373057305a078fc1467d987eb076bdd706e28921411196b2d39d328afca0fdb6ec8c5bebf5e4bb417c30b05121fe2accf218d9ebed29ba09894aedb6a259ed2e4bc616c80291f0aa32a2f32d93253906405edf4e59af32131eba8d8f8349d938a959d9cfbc6b14f80cdff8d6019fbf2c9407a5ed0086c57bfe98ab19725ed61acbccb82dfdd559c817ef59aa4d83efc272728ce6f6fadad83795a7263253a9874b2df777e7d5d614c44607dbb1f0ea78f754ebd6280ffe8c22ecf48312e42bd358ab8fd85fd463c39d14d55818cb6e3d1e53ebf4fe99be04b7402ec313a3bd23cf09868405e2997b0431baa5985072b3dd36e720fe382c2a8a5f95ba37d93a27cd845c3533b4d1de5a5d5494d5c4694b7e1405ac9428201664f04e5f5b0ce36a5a1b16d789b453f83f94e18457fe689b19c8d12da11da7f984260f3f0d73e97636e0d1052b8082114fcbbe728e8d793b9b85a46f4924e125f23c32bab390d2091b9e3bbdf01bbec97fb6ddc760cfc35e6caea21a420432a89e2fc5c7e721ea7b509c6cf6359cd8cc5253296d1cda8b99dc06c20a057478659baadaba8f3b061c52c8c65243c21ea9cc654cff32df5943decae4e067ebf780c9d9c83e7d08b25a8cbd36b6f964dba343e5fb122c952c285fac6347101e187857f9d0633c3b8dc86387fa9d71bacbb981da6720caf8b7960fcb2ad27945ed00b731710ec163a15f7ee90ea9cb7c76b4c5172abdb9a9bc38533f8e30d6668d0f42fb07a82c1e05be6c0748b5dbfa557c4487f2c5c0cb91c34e11537b87a114ccfe03d145fb06e4f002cfe491a0b3c08496b205999322d63fab81e01e10d47b349944d0114d13abb07be2b5fe66d8e637939aaaf3217167e8eb94bf7cdf96de8266a241ca785e76afdac88a980f0d55bed95e80e7b611eedc942a885a2fef9662173009dbb6fa08c75fe2dec4abf62eab088ec87defb841567b3207100185e52d6459e4d0490c18029db88a914b7ce3f460c2bfd9de2c255652229a373dbee0ca3bef0f7d6102afe7f517da612c79d63067b1942df72bfdf04af07ef1984c92f35f28f09974748ff2b3f74302b85f5ab156bf1d230fbbec98b46abf36b9b9f8a9a1c99a4d91e58d14d3d317de053a3a2a24284310739a4b240247fc375f89ff0cbc635b16697def50ccd4a5596e111c28feb8a979a66dbac226f9f0e2d9dcde5ae43c6c3d62dd5a93c3f7b723c2e2a2c591ede9a5e5b66f29d4718f5a2686ef5b37e1fa05f014ebb1f4027c4931338f0e27583699c8d0f98078bbe63ba5b6f6e9e4e88d9e5b9f8815bd653fb3daa200e63dc5b298693035944cf44217f98d2c10e74b398c0ec1b15ce4a6f0073bb05f54d4321145901c6a74a13fd2dca58e258224268a96fbb8a785f2cf18dfc4068b432d654c2c47fcac8bfeb711dfd594df71db427c23590d4850b90142c2c3a6f65f58ac283378ddb86ecd98d7aafeafe0249b2efd8a3bc2066955eb11b8ab856d3c9f9cdbc6e2be0ddcc1472a37fc1db29213f49b7f4bf152beac0ce57df21b4370e72384261f2103ef1be7b71eaf4b21d36a7fb77add47cd29ab2593bc5f409193621eea25e72f05adc342289d9a5ff1f5b0999605c3fb74cb312d375b448c0333e32aa7bac191d829d3478df3ea45f08d02089e2190adc10c506d4d96ef764b9d9bea7220c121df33a7ad83408855e69a3b0de70fac14f0a176f2f2b8e0dfb4cfbb923e6afd66aaacf1a423cfae0a42b607260c999416cc454d2bd7d1d9fb3cfed0b50e30b8ea953ba07b2948cf6a7892733731031650b3fc7ecd8bbdc5f43fd7f093b05bdb9a53b382c0115448a8c45aa93d7c714f80d04617583a2327e2a440e74af8dbb66128689bf0224f678c5f992b9f1a4cc982a602f49ba846a1c25e2a43b812829b49e19daf2b0e7dca851e92a9e7bcf89aaf23c7e65efa6f7e0a0c78827792c726b9e071846a5c5d7657fa336d0c5c8c0b6443e980eb203dd7c47a262df3ba09a00f1f87133d6496e54398cf973e311138b0e2a50e78a0ec15067eff35bb72448f5b6ff7f641402773bdc12fca0827e50e1bc5932b5ec156333b1b788814b3ccc60b3ed522f65d294fd03aeca1b5983e8fe928aebf6ded54f33d187a0e3dbfc57a9d9734f123577d98d0d511e76e4359d0410042a0e02f03ead050a66835cfaa435be500f0c0d5753af21527133a1fcf2d9cf7486a72d74d14980da88cca730c8daa057185ea34efa14d64d86761e1e4845de71b27b4cfe655f2cf7cfe77bb6239761e94ba066b7ddb7134296cbfdb7b8fd3aaaaaef1edc224b0e4674ed21b35d6530de160be09f91f6e2e97978001de993d23365c961307d2d38489d038d33f4a19410520ab131c5b8a668e1ab97305fb02cdcb83f8ab56b228c47fe31b5450324ca00e9cb597403746e9d97efd365f8c5c851b1d9a0daf780551333eb43e0f0413c998e553ec6ba63530dc021e1a77c83ad67ff26a5191a543041e17597069c05812fbe63d61d7aaf3ba2a72ac6f50633b99f7924eca46f3d46e710c598f048bbf74a7e02430b759d17a8bb44f356bbf33fd5c03f379c654ffc1d0b951a51d35d849e8fc8e427557675e14de8964172359ff42ad5dcc1eeaee4c358d65a29adf2989979640fd9f50ce9542a43f7ad1b2fd628d5245c431720b5934cd2d1ba715e3872d7ab056367af91b9da4bb436ab6a69925499ae121dbb3bf15e2805bb83fb195bf267ee58a84326cb018ea85acc1e01c3590c8e1b4dea9b4aa463d3c0e5fec907ce6927675ebc0cb7e57a013feff5614866d8715155a33bf7c5101c45d097cce097579e773f76238be4f9b30496347fd4a740591c420205b5edfcc27ca86d7b1e9ad66f146e53e029b5c586aa92aa30d1164971976ee29e2ffe5f4e0feabd3338038e2663df4c4f42889244e8d205142a006b17a63e26549f290781bfb76fe192052511cb9a68fec6386518035065e76f956d9e335a27fd15c528e5edea4ca9ee07604db54efbff02393c0cf82ebef6c3a77b544e87fa174fd8863d9ce2d97fe635e37bb0f2397326c7eecfc49440d3bf1a0420d6ace8891a86827c7d114bc282f0f7e7a926f309c1687c474e00616dccd63f6653b7d53bf6b27d45cbf12e074d64bfc46bd2612d3216a11b8cbe1fa873f6ed4549b26d0380a4072d5ea41fd4775446780347388db56fc52e05d8a3ca32aaf9871ca578bec18f712ca7a52a45d2df58711ed5e86be760842c212cd549345e258bda37fa9adf5b6b0a8acf5caa199c6fbe740bdc80351fd1c447d4b30fe411a4681de33460832dcc7235290e9ea27f3f31d20a913415c10baffd4364d6e1b8aa3f2b20caaadf3ccf6bb409d195a6d26b8b19e296c9a5408b1eeb21a4eb2212f304bdf294e30fc7d22d55b3250875c5ea86caeb9ea2d394cbddf8") r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="feffffff00"/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="000000000000000000000000000000000000003a000000000000e5ff6f33a40f4bea9743b280131847d345463b"], 0x48) socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1}, 0x0) close(0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0x2, 0x5, 0x3, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004001100040000000200008acb000000", @ANYRES32=r3, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000001580)={0x2, 0x80, 0x1, 0x4, 0x1, 0x9, 0x0, 0x8, 0x62620, 0xa, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000001540), 0x8}, 0x80, 0x4, 0x1, 0x2, 0x7c, 0xfffffff0, 0xa7bf, 0x0, 0x8, 0x0, 0x1}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r5, &(0x7f00000006c0), &(0x7f0000000000), 0x2}, 0x20) perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x10eda2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(0x3) syz_clone(0x43100000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f0, &(0x7f0000000080)) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000001380), 0x84300, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f00000013c0)={'macvtap0\x00', @local}) 26.446112819s ago: executing program 5 (id=7931): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x40) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188040f80ec59acbc0413a1f8481100000003000000000000000e000a000f08000002800000121f", 0x2e}], 0x304}, 0x8084) 26.295986548s ago: executing program 5 (id=7934): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0x0, 0x9, 0x0, 0xffff0000, 0x9, 0x0, 0xffffbffe, 0x0, 0xfffffffffffffff1}, 0x0, 0x20000000000, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000005c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x2, @perf_bp={0x0, 0xb}, 0x100c, 0x0, 0x0, 0x8, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7902}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, 0x0) r1 = socket$kcm(0xa, 0x3, 0x11) recvmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x80108907, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_devices(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1e03"], 0x19) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$kcm(0xa, 0x2, 0x88) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3fd, 0x85bc6, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffbfffffc, 0x8001}, 0x105e39, 0x0, 0xfffffffe, 0x6, 0x7, 0x2, 0x101, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890b, &(0x7f0000000000)) sendmsg$inet(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x8000) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x1) mkdir(&(0x7f0000000140)='./file0\x00', 0x54) close(0xffffffffffffffff) socket$kcm(0x2, 0x5, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xa}, 0x28) 23.273274944s ago: executing program 5 (id=7947): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value=0x700}, 0x94) 23.159362911s ago: executing program 5 (id=7951): socketpair$unix(0x1, 0x1, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6349363006"], 0xfdef) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f00000000c0)=0x4) recvmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r4 = socket$kcm(0xa, 0x3, 0x106) setsockopt$sock_attach_bpf(r4, 0x29, 0x2, 0x0, 0x4) setsockopt$sock_attach_bpf(r0, 0x84, 0x6e, &(0x7f0000000000)=r3, 0x2c) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000040)) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000600100000000000000000000000000000050000000002000000000a000802000000000000000000000a03006100000000000000"], 0x0, 0x52}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)="c52c35ea4f0134beb954bed8e1d986ae4c318fe66f5102b1bd2e3edab67f066a80f87ee6daaeacfff979df2b5edbdcdc175664cc391106709e65e4c0e5b747901195845facb1ac7f30e1f1767de49da2", &(0x7f0000000140), 0x1003, r6}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000001d40)={r6, &(0x7f0000001b80), &(0x7f0000001c40)=""/245}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x7, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xda, &(0x7f00000001c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000200), &(0x7f0000000280), 0x8, 0x24, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, r6, 0xfffffff7, '\x00', r7, r5, 0x3, 0x5}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@fallback=r3, 0x0, 0x1, 0x5, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@map=r3, r3, 0x27, 0x2, r3, @void, @value=r3, @void, @void, r8}, 0x20) r9 = socket$kcm(0xf, 0x3, 0x2) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x3, 0x40, 0x6, 0xfd, 0x0, 0x4, 0x10210, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xb, 0x2, @perf_bp={&(0x7f0000000540), 0x6}, 0x8830, 0x2, 0x1, 0xa88e76e5dac10855, 0x3, 0x5, 0x8000, 0x0, 0x5fffffff, 0x0, 0x200}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x89b0, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r8}, &(0x7f0000000280), &(0x7f0000000240)=r5}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000000c0)=r9, 0x4) sendmsg$inet(r7, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514a11ac004000202080002000300010004000300eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8901, &(0x7f0000000080)) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) close(0x3) 6.763234747s ago: executing program 33 (id=7964): perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000100)) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$sock(0xffffffffffffffff, 0x0, 0x20000044) r2 = socket$kcm(0x21, 0x2, 0x2) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x71e7, 0x830d}, 0x80, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) recvmsg$kcm(r3, &(0x7f00000041c0)={&(0x7f0000000580)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev}}, 0x80, &(0x7f0000004100)=[{&(0x7f0000002f00)=""/204, 0xcc}], 0x1}, 0x40002000) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x18}, 0x0) r4 = gettid() perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4, 0x9, 0x1, 0xe, 0x0, 0x4, 0x80, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000140), 0x4}, 0x100001, 0x6, 0x5, 0x7, 0x4, 0x40, 0x8, 0x0, 0x1, 0x0, 0x8000000000000000}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000000000000850000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r6, 0x0, 0x0, 0x0, &(0x7f0000001cc0), 0x0, 0x4000, 0x0, 0x47, 0x4e, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f852161bc4015e7564b08584290fe1762f943a65300", 0x1, 0x0, 0x13}, 0x50) unlink(&(0x7f0000000080)='./cgroup.net/devices.allow\x00') r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r0}, &(0x7f0000000280), &(0x7f0000000440)=r1}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r7, &(0x7f00000006c0), &(0x7f0000000000), 0x2}, 0x20) perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x10eda2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xf}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) syz_clone(0x43100000, 0x0, 0x0, 0x0, 0x0, 0x0) 5.533038098s ago: executing program 2 (id=8079): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value=0x8000000}, 0x94) 5.189981918s ago: executing program 2 (id=8081): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x15, 0x5, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x2, 0xfffffffe, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c00000002000000000000000000000300000000020000000200000000000000000000000000000105000000080000020000000002000005000000000000000001000000000000000000000001"], 0x0, 0x66}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000100)) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r2, 0x4) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x500, &(0x7f0000000940)=[{&(0x7f0000000c40)="02", 0x1}], 0x1}, 0x408c4) 4.868165257s ago: executing program 1 (id=8083): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1808, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x9, 0x43}}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x5, 0x84) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a000000040000000600000009"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000800000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4002000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0xa, 0x922000000003, 0x11) socket$kcm(0xa, 0x922000000003, 0x11) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80513, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0xd, 0x800, 0xa, &(0x7f0000000040)) r2 = socket$kcm(0x10, 0x2, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 3.957124339s ago: executing program 2 (id=8084): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000000000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f000001000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f000001ac141400000000001c00000000000000000000004700000044aa00210a2101"], 0x230}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f00000001c0)="d8000000180081044e81f782db4cb9041c1d0800fe007c05e8fe", 0x1a}], 0x1}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000f40)={0x0, 0x0, 0x0}, 0x40) close(0xffffffffffffffff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x20, &(0x7f0000000300)={&(0x7f0000000200)=""/228, 0xe4, 0x0, &(0x7f0000000180)=""/41, 0x29}}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r2}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x7, 0x0, 0x0, &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x9) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x4000ff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext, 0x101000, 0x7, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_netprio_ifpriomap(r4, &(0x7f0000000080), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="76658e68315f746f5f6261746164763231"], 0x12) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90324fc60100c044002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 3.911396502s ago: executing program 1 (id=8085): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x18, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) setsockopt$sock_attach_bpf(r1, 0x107, 0x8, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1e, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="850000002200000007000000000000089500000000000000e26c9bd1a63619"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r0, @ANYRES16=r1, @ANYRES16=0x0], 0x31) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x18) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r3, &(0x7f0000002c80)={&(0x7f0000000180)={0x2, 0x4e22, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac141441ac1414bb000000003c000000000000000000000007000000008917710a01010000000000e0000002e0000002e0000001861400000003070e8235847564d4fec80aa819df0000000011000000000000000000000001"], 0x78}, 0x20000004) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x6, 0xffffffffffffffff, 0x2) r4 = socket$kcm(0x28, 0x5, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) socketpair(0x3f, 0x1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x11300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000002040)=ANY=[@ANYRESOCT], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff05000500", 0x2c}, {&(0x7f00000019c0)="06bb", 0x2}], 0x2}, 0x0) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) 3.252437001s ago: executing program 3 (id=8087): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x3, 0x20, 0x0, 0x0, 0xffff, 0x8a410, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0, 0xe}, 0x8018, 0x0, 0x3, 0x9, 0x4, 0x5, 0x0, 0x0, 0x1, 0x0, 0x2}, 0x0, 0x800, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0xf3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x3ff, 0x3}, 0x200, 0x2, 0x1, 0x9, 0x7ffffffffffffd, 0xa, 0x4}, 0x0, 0xc, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x23, &(0x7f0000000040), 0xcf) sendmsg$inet(r0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x2, 0x4e23, @remote}, 0x10, 0x0}, 0x80) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b00000005000000010001000a00000001000000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000400000000000000000000000000000000000000097819c"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="e03f030033000b35d25a806c8c6f94f91724fc6010000509000002000535820637153e37000c068004000200030042c460dc36a21cdfc5cc3b360d3a2207fcbe29a8", 0x42}], 0x1}, 0x0) 2.138189176s ago: executing program 2 (id=8088): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x1e, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x8a, 0x0, 0xfe72) r1 = socket$kcm(0x15, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000580)={&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, 0x0}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0x4000000}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x14}, @union={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}}, 0x0, 0x4e}, 0x28) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0a00000007000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x81ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x38) 1.909218389s ago: executing program 4 (id=8089): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xf, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x5, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700760409"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000380), &(0x7f0000000000), 0x2}, 0x20) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x25, 0x0, 0x3, 0x8}, {0x20}, {0x28, 0x0, 0x1, 0x1}, {0xb1, 0xb, 0x28, 0x8001}, {0x16, 0xfc, 0x5, 0xffffffff}]}) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080), 0xc) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0xfe, 0xff, 0x0, 0x0, 0x0, 0x28200, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x5}, 0x8b001, 0x0, 0x0, 0x6, 0x203, 0x0, 0x3, 0x0, 0xfffffffc, 0x0, 0x10000000000000}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)) 1.479800634s ago: executing program 2 (id=8090): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000001007d60b7030000000000006a0a00fe00000100850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465cbf188ef10871b81ac7553358380b3a1f59916ffc9bf0bdf81524f07fb2819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6cd87cef9000000a39c15a7ef365cc27dfeac7b9b0e9048517354b0ca4f9cf8b59ee6fa003fe1f2c4c15f20a07db4583a462d8be6602186fd68ee14a19ea2eb42122b8635a66ce6b5b92356081bc0f18a0ca83dbc089a9813c1efa26001b3f486ebfaae85c4d0b96778478ae5355e6f923b11056969f486f80a35f7f2339704fa93fa915ab8e1e0d7f31ebd19455e6827cd493907bf9d0000000000000000000000004e1fa60acabcf0553910ca2e5ea499fd5889dde9261f0848a5b8af657bfc96049308e8953431b269053627a1523551c160c813969925a892d266792352ec0204596a37ce8d6d260b32239bddbce2e79f93cb5a0ad897adb53b397d07c50f84b74f2605a565ee149016aa75ea31c0087dcd821b47c8b36efc6da4fb2ea7f1f36c85856b73ac9872babc62149699b6b8c796a79d833eb4b5ca668d430db5653a2b3c5b87e17ca1"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) r2 = socket$kcm(0xa, 0x6, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="e499f7730400000008008000000000000001", @ANYRES16=r1, @ANYRES8=r0], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x4, &(0x7f0000002280)=ANY=[@ANYBLOB="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"/3636], &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback=0x36}, 0x94) setsockopt$sock_attach_bpf(r2, 0x29, 0x1b, &(0x7f0000000100)=r3, 0x120) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000200)={0x0, 0x0}, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) socketpair$unix(0x1, 0xa, 0x0, &(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r12, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r14, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001340)=ANY=[@ANYRESDEC, @ANYRESDEC], 0x128}, 0x0) recvmsg(r13, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r6, 0x4) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x5450, 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x11, 0x0, &(0x7f00000002c0)="b90103616908068c3c270040e700009e0d", 0x0, 0x8104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0xff, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000140)={0x2, 0x4e21, @private=0xa010100}, 0x10, &(0x7f0000000cc0)=[{&(0x7f0000000380)="10829ab83b03435ed82fc6ed531d7e55d01c909a7f8e6ec132be2c6c0b52bf664298c8240df1b046d0ffd9fcb4f19acf9591bc8c521e3bab2f14827bcba537f6e882864058b4924146658ece1291ad41b8111416fac7516202495fb1c8c87f179472ed24fd95b3fe49b3871caf438681faee47445ad8b7d148d268ca2ab5784e42d673d722f511fd629e37c852963f137586a8b91e1d1cd086f631cd27bebb87ec4bc57131f99f61c39c9448d4a01f56f399f89cbc31d2c0795ae55da1e636676ad69006", 0xc4}, {&(0x7f0000000500)="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", 0xfd}, {&(0x7f0000000600)="9a981b14bb3b277246b0de921af80e31bfa68775872dfa60025e34cb156adb36d3d709ab1d3432c9593e306aa380b65b9026a7e5eccdb7aa7896ac700d3362ff14ea773c14cdd544d59b6cb6f7da56e9d7b969a66c85f52877d6ccbfa787ff7285528a993c78d818176af9f20848c9c2abcb57fc131841c0d5d685c125571bcb253ac501e0edf973efa41203d6e6f87d1299ea45600ec028a3fd0f96e949ad0d61c5eac77c623b136b39a36700cefff1068b079d225e360ad92dff960f49c84e3e5e238dd50c1094a2e410a94f6cfd09d61e19d969129e534425ce", 0xdb}, {&(0x7f0000000700)="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", 0xfc}, {&(0x7f0000000180)="7e3cd155649cacc2cda418c922d4144388849dfd74c2fbf7074babd87b3daf654ac4da30", 0x24}, {&(0x7f0000000800)="c6ef253d7a72271f644a3cf1449345720436ad0cffe529361c97552df8810b6e4c9bcd57be4e9e6b2b4c653d33ff95fd304c14176893a72fa9dc081aad5b4ccf00ff48a395dde93d80975590e690f01722e45a2bafb4f065b4bc1aa0bb94838c10056c4bed8d3e466bf16a972e", 0x6d}, {&(0x7f0000000880)="10c41acbfe2f65824c3add82e0a7f3459849a2c0caf627d7c479413d84f74ec84da14a805e45f45b0539136b25b24342e90082e83da9f82c3f8aafb4789e16b9b8e3d33f606d4a79c7655530db04239db8ca8fc2c3ffe08b6e218e78372eb3f152e8115bba9fbcbb1b534b2a61d604900c9b62d544df3aec091dfb4e6b40aafdbb82f54815d9b8be5ef195e562e83c3f5d321ab6e57ce23d7d643bca6638a516cbfdfafe6b790936682d997a4f67211a7e15ca4ff00f8f79a21aa12c4c115a7480eaef117d8d2878673325ffd6e93adfadbe11c3d3d868c11fb731dff60eab975ea94249c95d2a2b0c139157b43d1e62", 0xf0}, {&(0x7f0000000980)="2257970e2a14d81e3d0cbc7ac1fdc37b20681143f45776fcfef50cdc320f7dd2f054041d4fb5d3e59a4ce97ec62188035865cf97c374e4915f6a3fe708553aafe891ed8e219a0b5c8cdaf587213dee3e3194681cdb661712b3a9e181e0738282ced9cd4fa91f776ef278046839761f56557ff643a3711a7fdfe113ae9c915ab1a9df087193cf728e863190f22fce1e", 0x8f}], 0x8}, 0x40) close(r3) 1.369211411s ago: executing program 3 (id=8091): socket$kcm(0xa, 0x2, 0x88) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6}}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000008000000e27f000001"], 0x48) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYRESDEC=r0], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000000}, 0x0, 0xc8, 0x400ffff, 0x1, 0x1, 0x0, 0x2, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="b9ff03076044238c9e9e15f088a8", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000), 0x3000) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000060100000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) 1.311236154s ago: executing program 1 (id=8092): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000540)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f00ff0fd10f0000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010004080c00bdad01409bbc7a46e39a54cbbda812176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0x7}, 0x24002040) 1.284974456s ago: executing program 4 (id=8093): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xf, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x5, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700760409"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000380), &(0x7f0000000000), 0x2}, 0x20) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x25, 0x0, 0x3, 0x8}, {0x20}, {0x28, 0x0, 0x1, 0x1}, {0xb1, 0xb, 0x28, 0x8001}, {0x16, 0xfc, 0x5, 0xffffffff}]}) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080), 0xc) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0xfe, 0xff, 0x0, 0x0, 0x0, 0x28200, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x5}, 0x8b001, 0x0, 0x0, 0x6, 0x203, 0x0, 0x3, 0x0, 0xfffffffc, 0x0, 0x10000000000000}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)) 1.166637752s ago: executing program 1 (id=8094): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000053ffe700"], 0x50) 1.138823664s ago: executing program 3 (id=8095): bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) socket$kcm(0x2, 0x1, 0x0) (async) socket$kcm(0x21, 0x2, 0xa) (async) r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="2d696f2032f911341082aaaa1fb610f241c42ee050060155d0166395d7efc23cff5393ce8e09fafa696325fed9c5e9328448f1ba"], 0x4) (async) sendmsg$inet(0xffffffffffffffff, 0x0, 0x600) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3f}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x40000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x7, 0x5}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x24008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000100), 0x4}, 0x4a20, 0x0, 0x0, 0x2, 0x0, 0xc00}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="070000000400000020002100000000200000452d5deaf4d37c46a69b662849046c900ba84b19297fcf40bf09ad230d397025931a4fc31e5ac63cb6a5161da466d14c2e638df8720df7ded01335a0f6b701047c40e5d741ea7157ea15cb4e1cd1bac6a0f7b66c057487d459e088b0116ec16a9fc19392fa53d995af294bda85f3ae54a0a4e08237780c1095471cf4345b78f8ffa859283b3f8327ca58413c81cbefe8a1ef729677674b1f6969c7dc8ed6c97e815e6ee7e53a836100ca5f4588587baeffbaee9715923bb18f5a", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7030000000000008500000019000000cfbf00000000000095000000000000004d678005752665fd4961a466539682f603ad5540d62d2ff441a00cf7cab19778463b7bed70ac86b1b1b5018f764d9638bbf15b8637be4b079741f0e66f8dc4df3536e42d8c1c2c1dbdd8da7e5b4100c2ff80fd51d9e6aaf8e6457286d5430b3f31583d2ca8b2e87b63a0950c0d70102a291e2e"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r3, 0x1, 0x31, &(0x7f00000000c0), 0x4) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b400000000000003dd0a00000000000073013500000000009500000000000000b38a595efa0578208e8354bb546620e3690771f5bf003326913779cfaf84efb8b3f976c934b37c6aab214e75d6019bf1582d07e5b5351fb88008465255c682"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={r4, 0xe0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000005c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0], 0x0, 0x33, &(0x7f0000000680)=[{}], 0x8, 0x10, &(0x7f0000000840), &(0x7f0000000880), 0x8, 0xd8, 0x8, 0x8, &(0x7f00000008c0)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e00000004000000050000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=r5, @ANYRES32, @ANYBLOB="03000000030000000050e7bd000c38c93c00"/28], 0x50) (async) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000080)=r5) syz_clone(0x61000600, 0x0, 0x0, 0x0, 0x0, 0x0) 1.133645074s ago: executing program 1 (id=8096): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000000b40)={&(0x7f0000000240)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000280)='0', 0x1}], 0x1}, 0x45) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x5, 0x0, 0x7}, {0x2, 0x3, 0x0, 0xc}], 0x10, 0x3}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4080) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="05000000000000007111af00000000008510000002000000850000000500006895000000000000009500a50500f09a54bcadad7d6a1287f2055bc1f7000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x3000000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x2, 0x10) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)='%pB \x00'}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r5, 0x18000000000002a0, 0xb, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$kcm(0x29, 0x5, 0x0) sendmsg$sock(r6, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x24000805) 1.018051051s ago: executing program 4 (id=8097): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x40) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188040f80ec59acbc0413a1f8481100000003000000000000000e000a000f08000002800000121f", 0x2e}], 0x1, 0x0, 0x28}, 0x8084) 927.905386ms ago: executing program 3 (id=8098): socket$kcm(0xa, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000040000000400000004"], 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x10}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x15, 0x17, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0xa0}}, {{0x6, 0x0, 0x2, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@s, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x300}, {0x14}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 927.295096ms ago: executing program 1 (id=8099): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0xf7}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f0000000400000004000000a2"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000006c0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) r5 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000200)='syz1\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f0000000300)={0x3, 0x80, 0x10, 0x3, 0xd, 0xc0, 0x0, 0x2, 0x81318, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={&(0x7f0000000380), 0x8}, 0x210a, 0x2, 0x1, 0x0, 0xe95, 0x9, 0xffca, 0x0, 0x2, 0x0, 0x100}, r6, 0xa, r5, 0x1) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff241a918217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7a12c9fcfe4c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f9ac2f7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca8939000031300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63bb20e1e0469f7615f67a9218cbace38f5236821314f76302b98afa93044b83989339ca10e6ae30e70e17a82f03e915b8425e8e7a91614306d2ae0bc3550d856f2d7293672b5673d264fc886b0c8bdf436a0fcd21bf9da7bdca98e34cd6e59b0a7ce4ba1b466561aaa35448dff47bb1d7df23"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r7) sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000000080)=@in6={0xa, 0x4e20, 0x0, @private0}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="28000000000000002900000032000000000000000000008bb5f2ac6dd52d09ebcb00000000000000"], 0x28}, 0x0) r8 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x2, 0x5, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0x8, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000080), 0x9}, 0x200, 0x7, 0x8, 0x0, 0x0, 0xc6e, 0x0, 0x0, 0xfffffffd, 0x0, 0xffff}, 0x0, 0xfff7ffffffffffff, r8, 0x6) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73f72cc9f0ba1f848350000005e120602000000000e000d0010000000028000001294", 0x2e}], 0x1}, 0x4000850) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r10 = socket$kcm(0x23, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) setsockopt$sock_attach_bpf(r10, 0x1, 0x3e, &(0x7f00000002c0)=r11, 0x4) sendmsg$kcm(r10, &(0x7f00000003c0)={&(0x7f0000000000)=@phonet, 0x80, 0x0}, 0x0) 833.374571ms ago: executing program 4 (id=8100): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f93124fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000e8ffffffffffff05000000", @ANYRES32=0x1], 0x48) r2 = socket$kcm(0x18, 0x0, 0x2) recvmsg$kcm(r2, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)={r1}) sendmsg$kcm(r3, 0x0, 0x40) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x2, {0x2, 0x0, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x0) r4 = socket$kcm(0xa, 0x5, 0x0) close(r3) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000002280)=ANY=[@ANYBLOB="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"/3636], &(0x7f0000000040)='GPL\x00', 0x4, 0xfdc0, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) setsockopt$sock_attach_bpf(r4, 0x29, 0x22, &(0x7f0000000100)=r5, 0x18) r6 = socket$kcm(0x2a, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x891b, 0x0) 754.662327ms ago: executing program 3 (id=8101): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value=0x15000000}, 0x94) 387.174598ms ago: executing program 2 (id=8102): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xf, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x5, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700760409"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000380), &(0x7f0000000000), 0x2}, 0x20) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x25, 0x0, 0x3, 0x8}, {0x20}, {0x28, 0x0, 0x1, 0x1}, {0xb1, 0xb, 0x28, 0x8001}, {0x16, 0xfc, 0x5, 0xffffffff}]}) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080), 0xc) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0xfe, 0xff, 0x0, 0x0, 0x0, 0x28200, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x5}, 0x8b001, 0x0, 0x0, 0x6, 0x203, 0x0, 0x3, 0x0, 0xfffffffc, 0x0, 0x10000000000000}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)) 0s ago: executing program 3 (id=8103): r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @perf_config_ext={0xc8e6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)) getpid() close(r1) socket$kcm(0x22, 0x3, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0100000004000000080000001000000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000080000000000c14bf1e91df1b7b60ba484da7fc811792541316d45367d99e0d78a13065aba741dd481f90988f9b6f75fdb0ca01b520be566bd4e8b7d3a250dfed5cd0476b01b95b44d22f44e3679164be4d0f3ad106b0b08808274aaeba6ebe3211ff67142bbca2a2245a0db6d952c8dafac28102a0b179e88d7711bbbc04c1143750fba2c273a5030b00b58a9591ffeb3a1a710a6f489f3a9bf2484a982eed84c39cb17ecf6bc7eeaf152"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000300000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r3}, 0xc) perf_event_open$cgroup(&(0x7f0000000280)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x9, 0x23104, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_config_ext={0x8, 0x100000001}, 0x880, 0x800, 0x0, 0x7, 0x6, 0x7, 0xffff, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x11, 0x2, 0x300) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0xfffffffffffffc5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x830d}, 0x0, 0x0, 0x9}, 0x0, 0xfffffffffffffdff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000b00007910000000000000c310001051000000950074000000000031fb0d3a42319fa204399d17d34e075fdcda533ab1aa71ab1d764152e6cb25dadc7ded5dbe11b60ac5ea9fca11027d19e93adb603deb92de3141e8fd7ac5b87a2070213cdfdc5d6c4890cdeb50347c32060581172b94c6ba22a2b58eb6cbad46ed6e7965a2ba5fc4a5a17d103b0b36f790bb41931f9a3d4dd127c1b4e49f7468f5e603950c6367587e8ece17d5c6e7c7514386f5125c0e2aa441cda5630047b770bc93868c63db6b6c27786aaff609c902fd65b951074957e967a8a3a405eaafbfafacdb7c2f6f32c251fadcd5a2e34b2efc310dae213aaad007975c26f6001f9b9dd2bf699781e0bbff554630fd9f9fff61813814a65b8e3bb2156ea642519206f26eb7359f732d497c0d4fdb4a735b9a7edd66dbed5f9e04c0fd41bd80a60d6b2508d0318bb94edcbda8ecbd30b320f9bab6efc65de00cdeac3c7383a247f6307d5ef3c2ec5b12650c986912aa6b44960dddfe9bcef838"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x42, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4050) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, 0x0, 0x0}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x1d) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x200, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7166}, 0x94) sendmsg$sock(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@timestamping={{0x14, 0x1, 0x25, 0x8bd}}], 0x18}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x39c}, 0x40894) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d0300000000000000"], 0x0, 0x52}, 0x28) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b0000000000000000000000db00000000000000", @ANYRES32=r8, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="0400"/28], 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\b\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, r9, 0x4}, 0x38) ioctl$TUNGETDEVNETNS(r6, 0x54e3, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8903, &(0x7f0000000400)='\xf6\x12SJs\xdc\x05[\x18\r\x00\x00\x00A\x88\xe7\xa7{I\xe7\xd0G\xfd\xd2\xfcpb\xae\x92\x83I\xfc\xcb2\xd6\x82<\x90c\x95\x8c-#\x1f\"^\fz|\x90\x1e\b\x90\x1f,\x9dJ\xc6\xf8\x1c\x8eM\xe9@\xd4\xb3\xacSr#g\xd1cKg\xaa\xd4P\x15\x03\t\xed\x11,\x80\xa7\x80\xcbO\xcfv\xe2\xe2\xb2V\xea\xae\xe0\x16\x1c\xb9EY\xadN\x90\xbf\xda\xd4a\x02\xc3\x06\xb8\xf3}\xb6\xa1]NE\xa1\x94\x04\xfd\xe8\x1d\xe1`\x1c\x19\x9e\x01\x82~\xa4\xbc\xf3\x8a\xc5I\xce\x00\x18cu\x82\xa0\xd8\xbfl\x91\x9e_\'\x14\xb50.\x9e5\xd3\xe8\xb9gT\x99\xf9_\xe6\xbb\xb4\xfaFl5t\x88\xfe\xc9\xf9\x1e:\b9\xf4>!\xc6I\x91\xea3D~\xdb\xf7\xac\xcf\tA\xcbx\x02\xf1\xd2\xd3\x90\xf3#\xf7\x92\xf7\x8e\x15\xc5J\xe9\xaaL\x88x\n\x9d|\x04\v\x0e\xcbCY\x9e\xfc\xe2\xb9+0R') openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) kernel console output (not intermixed with test programs): ] bpf_prog_test_run_skb+0x181/0x1180 [ 760.446127][T24179] ? __fget_files+0x40f/0x480 [ 760.450793][T24179] ? cpu_online+0x60/0x60 [ 760.455107][T24179] bpf_prog_test_run+0x31e/0x390 [ 760.460047][T24179] __sys_bpf+0x5a5/0x6f0 [ 760.464289][T24179] ? bpf_link_show_fdinfo+0x380/0x380 [ 760.469654][T24179] ? vtime_user_exit+0x2c8/0x3e0 [ 760.474581][T24179] __x64_sys_bpf+0x78/0x90 [ 760.478994][T24179] do_syscall_64+0x4c/0xa0 [ 760.483406][T24179] ? clear_bhb_loop+0x30/0x80 [ 760.488071][T24179] ? clear_bhb_loop+0x30/0x80 [ 760.492732][T24179] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 760.498611][T24179] RIP: 0033:0x7fe822729eb9 [ 760.503019][T24179] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 760.522615][T24179] RSP: 002b:00007fe820985028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 760.531017][T24179] RAX: ffffffffffffffda RBX: 00007fe8229a4fa0 RCX: 00007fe822729eb9 [ 760.538970][T24179] RDX: 0000000000000048 RSI: 0000200000000780 RDI: 000000000000000a [ 760.546921][T24179] RBP: 00007fe820985090 R08: 0000000000000000 R09: 0000000000000000 [ 760.554880][T24179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 760.562830][T24179] R13: 00007fe8229a5038 R14: 00007fe8229a4fa0 R15: 00007ffcee51fec8 [ 760.570793][T24179] [ 760.699532][T24192] device vcan0 entered promiscuous mode [ 760.715796][T24192] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 761.071770][T24205] __nla_validate_parse: 1 callbacks suppressed [ 761.071786][T24205] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7133'. [ 761.145317][T24207] validate_nla: 5 callbacks suppressed [ 761.145353][T24207] netlink: 'syz.4.7134': attribute type 21 has an invalid length. [ 761.179243][T24207] netlink: 164 bytes leftover after parsing attributes in process `syz.4.7134'. [ 761.292739][T24211] device wlan0 entered promiscuous mode [ 761.345526][T24211] netlink: 'syz.5.7136': attribute type 9 has an invalid length. [ 761.370863][T24211] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.7136'. [ 761.633719][T24224] netlink: 'syz.2.7142': attribute type 10 has an invalid length. [ 763.971808][T24291] netlink: 'syz.4.7171': attribute type 12 has an invalid length. [ 763.993699][T24291] netlink: 197276 bytes leftover after parsing attributes in process `syz.4.7171'. [ 764.472949][ T7062] Bluetooth: hci1: command 0x0406 tx timeout [ 764.733432][T24328] netlink: 'syz.4.7183': attribute type 10 has an invalid length. [ 764.955492][T24342] netlink: 'syz.4.7190': attribute type 1 has an invalid length. [ 764.971105][T24347] FAULT_INJECTION: forcing a failure. [ 764.971105][T24347] name failslab, interval 1, probability 0, space 0, times 0 [ 764.988077][T24342] netlink: 'syz.4.7190': attribute type 4 has an invalid length. [ 765.030408][T24342] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.7190'. [ 765.050808][T24347] CPU: 1 PID: 24347 Comm: syz.5.7191 Not tainted syzkaller #0 [ 765.058301][T24347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 765.068360][T24347] Call Trace: [ 765.071644][T24347] [ 765.074575][T24347] dump_stack_lvl+0x188/0x250 [ 765.079264][T24347] ? show_regs_print_info+0x20/0x20 [ 765.084469][T24347] ? load_image+0x400/0x400 [ 765.088978][T24347] ? __might_sleep+0xf0/0xf0 [ 765.093574][T24347] ? __lock_acquire+0x7d10/0x7d10 [ 765.098614][T24347] should_fail+0x38c/0x4c0 [ 765.103044][T24347] should_failslab+0x5/0x20 [ 765.107551][T24347] slab_pre_alloc_hook+0x51/0xc0 [ 765.112495][T24347] __kmalloc+0x6b/0x330 [ 765.116651][T24347] ? bpf_test_init+0xf8/0x1b0 [ 765.121324][T24347] ? __lock_acquire+0x7d10/0x7d10 [ 765.126404][T24347] bpf_test_init+0xf8/0x1b0 [ 765.130908][T24347] bpf_prog_test_run_skb+0x181/0x1180 [ 765.136279][T24347] ? __fget_files+0x40f/0x480 [ 765.140961][T24347] ? cpu_online+0x60/0x60 [ 765.145285][T24347] bpf_prog_test_run+0x31e/0x390 [ 765.150221][T24347] __sys_bpf+0x5a5/0x6f0 [ 765.154460][T24347] ? bpf_link_show_fdinfo+0x380/0x380 [ 765.159842][T24347] ? vtime_user_exit+0x2c8/0x3e0 [ 765.164789][T24347] __x64_sys_bpf+0x78/0x90 [ 765.169208][T24347] do_syscall_64+0x4c/0xa0 [ 765.173619][T24347] ? clear_bhb_loop+0x30/0x80 [ 765.178293][T24347] ? clear_bhb_loop+0x30/0x80 [ 765.182972][T24347] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 765.188862][T24347] RIP: 0033:0x7fe822729eb9 [ 765.193276][T24347] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 765.212871][T24347] RSP: 002b:00007fe820985028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 765.221280][T24347] RAX: ffffffffffffffda RBX: 00007fe8229a4fa0 RCX: 00007fe822729eb9 [ 765.229246][T24347] RDX: 0000000000000048 RSI: 0000200000000780 RDI: 000000000000000a [ 765.237209][T24347] RBP: 00007fe820985090 R08: 0000000000000000 R09: 0000000000000000 [ 765.245171][T24347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 765.253134][T24347] R13: 00007fe8229a5038 R14: 00007fe8229a4fa0 R15: 00007ffcee51fec8 [ 765.261121][T24347] [ 765.636812][ T3094] device hsr_slave_0 left promiscuous mode [ 765.651143][ T3094] device hsr_slave_1 left promiscuous mode [ 765.680106][ T3094] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 765.706211][ T3094] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 765.734911][ T3094] batman_adv: batadv0: Interface deactivated: vlan1 [ 765.770958][ T3094] batman_adv: batadv0: Removing interface: vlan1 [ 765.799365][ T3094] device bridge_slave_1 left promiscuous mode [ 765.839793][ T3094] bridge0: port 2(bridge_slave_1) entered disabled state [ 765.879884][ T3094] device bridge_slave_0 left promiscuous mode [ 765.911270][ T3094] bridge0: port 1(bridge_slave_0) entered disabled state [ 765.931305][ T3094] device veth1_macvtap left promiscuous mode [ 765.937363][ T3094] device veth0_macvtap left promiscuous mode [ 765.959881][T24387] FAULT_INJECTION: forcing a failure. [ 765.959881][T24387] name failslab, interval 1, probability 0, space 0, times 0 [ 765.980392][T24387] CPU: 0 PID: 24387 Comm: syz.2.7206 Not tainted syzkaller #0 [ 765.981323][ T3094] device veth1_vlan left promiscuous mode [ 765.987868][T24387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 766.003708][T24387] Call Trace: [ 766.006988][T24387] [ 766.009917][T24387] dump_stack_lvl+0x188/0x250 [ 766.014605][T24387] ? show_regs_print_info+0x20/0x20 [ 766.019813][T24387] ? load_image+0x400/0x400 [ 766.024333][T24387] should_fail+0x38c/0x4c0 [ 766.028763][T24387] should_failslab+0x5/0x20 [ 766.033269][T24387] slab_pre_alloc_hook+0x51/0xc0 [ 766.038213][T24387] kmem_cache_alloc_trace+0x47/0x2a0 [ 766.040776][ T3094] device veth0_vlan left promiscuous mode [ 766.043506][T24387] ? sctp_add_bind_addr+0x89/0x350 [ 766.054306][T24387] sctp_add_bind_addr+0x89/0x350 [ 766.059254][T24387] sctp_copy_local_addr_list+0x2dd/0x4a0 [ 766.064985][T24387] ? sctp_do_8_2_transport_strike+0x840/0x840 [ 766.071066][T24387] ? sctp_v4_is_any+0x31/0x50 [ 766.075750][T24387] ? sctp_copy_one_addr+0x93/0x660 [ 766.080871][T24387] sctp_bind_addr_copy+0xaf/0x3c0 [ 766.085898][T24387] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 766.092235][T24387] sctp_connect_new_asoc+0x2f5/0x6a0 [ 766.097536][T24387] ? __sctp_connect+0xd80/0xd80 [ 766.102389][T24387] ? __local_bh_enable_ip+0x136/0x1c0 [ 766.107764][T24387] ? _local_bh_enable+0xa0/0xa0 [ 766.112619][T24387] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 766.118168][T24387] ? security_sctp_bind_connect+0x85/0xb0 [ 766.123891][T24387] sctp_sendmsg+0x158d/0x2900 [ 766.128586][T24387] ? aa_sk_perm+0x7dc/0x910 [ 766.133093][T24387] ? sctp_getsockopt+0x8a0/0x8a0 [ 766.138036][T24387] ? aa_af_perm+0x340/0x340 [ 766.142543][T24387] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 766.148966][T24387] ? sock_rps_record_flow+0x17/0x3b0 [ 766.154257][T24387] ? inet_sendmsg+0x78/0x2f0 [ 766.158849][T24387] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 766.164135][T24387] ? security_socket_sendmsg+0x7c/0xa0 [ 766.169605][T24387] ? inet_send_prepare+0x260/0x260 [ 766.174719][T24387] ____sys_sendmsg+0x5b7/0x8f0 [ 766.179502][T24387] ? __sys_sendmsg_sock+0x30/0x30 [ 766.184539][T24387] ? import_iovec+0x6f/0xa0 [ 766.189048][T24387] ___sys_sendmsg+0x236/0x2e0 [ 766.193737][T24387] ? __sys_sendmsg+0x2a0/0x2a0 [ 766.198517][T24387] ? vfs_write+0x8b2/0xd60 [ 766.202958][T24387] __se_sys_sendmsg+0x1af/0x290 [ 766.207814][T24387] ? __x64_sys_sendmsg+0x80/0x80 [ 766.212752][T24387] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 766.218746][T24387] ? lockdep_hardirqs_on+0x94/0x140 [ 766.223951][T24387] do_syscall_64+0x4c/0xa0 [ 766.228373][T24387] ? clear_bhb_loop+0x30/0x80 [ 766.233051][T24387] ? clear_bhb_loop+0x30/0x80 [ 766.237736][T24387] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 766.243630][T24387] RIP: 0033:0x7f707b6bceb9 [ 766.248045][T24387] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 766.267653][T24387] RSP: 002b:00007f7079918028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 766.276075][T24387] RAX: ffffffffffffffda RBX: 00007f707b937fa0 RCX: 00007f707b6bceb9 [ 766.284051][T24387] RDX: 00000000040080d1 RSI: 0000200000000140 RDI: 0000000000000003 [ 766.292198][T24387] RBP: 00007f7079918090 R08: 0000000000000000 R09: 0000000000000000 [ 766.300171][T24387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 766.308148][T24387] R13: 00007f707b938038 R14: 00007f707b937fa0 R15: 00007ffc93a17448 [ 766.316137][T24387] [ 767.671057][T23251] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 768.217590][ T3094] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 768.228057][ T3094] device batadv_slave_0 left promiscuous mode [ 768.248899][ T3094] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 768.257692][ T3094] device bond_slave_1 left promiscuous mode [ 768.269749][ T3094] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 768.280150][ T3094] device bond_slave_0 left promiscuous mode [ 768.317982][ T3094] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 768.326844][ T3094] device batadv0 left promiscuous mode [ 768.343480][ T3094] bond0 (unregistering): Released all slaves [ 768.378835][T24382] netlink: 'syz.1.7201': attribute type 1 has an invalid length. [ 768.395910][T24382] netlink: 144 bytes leftover after parsing attributes in process `syz.1.7201'. [ 768.427070][T24397] netlink: 'syz.2.7210': attribute type 10 has an invalid length. [ 768.578787][T24406] netlink: 'syz.4.7212': attribute type 10 has an invalid length. [ 768.616389][T24406] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.7212'. [ 768.639228][T24404] netlink: 'syz.4.7212': attribute type 10 has an invalid length. [ 768.647955][T24404] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.7212'. [ 768.734353][T24417] netlink: 'syz.3.7217': attribute type 12 has an invalid length. [ 768.748987][T24417] netlink: 197276 bytes leftover after parsing attributes in process `syz.3.7217'. [ 768.802270][T24417] netlink: 'syz.3.7217': attribute type 3 has an invalid length. [ 768.816588][T24417] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.7217'. [ 769.018590][T24437] netlink: 'syz.5.7223': attribute type 10 has an invalid length. [ 769.826896][T24476] netlink: 'syz.5.7238': attribute type 28 has an invalid length. [ 769.855649][T24476] netlink: 'syz.5.7238': attribute type 4 has an invalid length. [ 769.880037][T24476] netlink: 136 bytes leftover after parsing attributes in process `syz.5.7238'. [ 770.418175][T24508] FAULT_INJECTION: forcing a failure. [ 770.418175][T24508] name failslab, interval 1, probability 0, space 0, times 0 [ 770.501580][T24508] CPU: 1 PID: 24508 Comm: syz.1.7255 Not tainted syzkaller #0 [ 770.509083][T24508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 770.519298][T24508] Call Trace: [ 770.522586][T24508] [ 770.525522][T24508] dump_stack_lvl+0x188/0x250 [ 770.530214][T24508] ? show_regs_print_info+0x20/0x20 [ 770.535428][T24508] ? load_image+0x400/0x400 [ 770.539960][T24508] should_fail+0x38c/0x4c0 [ 770.544398][T24508] should_failslab+0x5/0x20 [ 770.548911][T24508] slab_pre_alloc_hook+0x51/0xc0 [ 770.553860][T24508] kmem_cache_alloc_trace+0x47/0x2a0 [ 770.559162][T24508] ? sctp_add_bind_addr+0x89/0x350 [ 770.564290][T24508] sctp_add_bind_addr+0x89/0x350 [ 770.569237][T24508] sctp_copy_local_addr_list+0x2dd/0x4a0 [ 770.574886][T24508] ? sctp_do_8_2_transport_strike+0x840/0x840 [ 770.580966][T24508] ? sctp_v4_is_any+0x31/0x50 [ 770.585649][T24508] ? sctp_copy_one_addr+0x93/0x660 [ 770.590777][T24508] sctp_bind_addr_copy+0xaf/0x3c0 [ 770.595817][T24508] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 770.602179][T24508] sctp_connect_new_asoc+0x2f5/0x6a0 [ 770.607584][T24508] ? __sctp_connect+0xd80/0xd80 [ 770.612455][T24508] ? __local_bh_enable_ip+0x136/0x1c0 [ 770.617843][T24508] ? _local_bh_enable+0xa0/0xa0 [ 770.622846][T24508] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 770.628407][T24508] ? security_sctp_bind_connect+0x85/0xb0 [ 770.634173][T24508] sctp_sendmsg+0x158d/0x2900 [ 770.638883][T24508] ? aa_sk_perm+0x7dc/0x910 [ 770.643413][T24508] ? sctp_getsockopt+0x8a0/0x8a0 [ 770.648366][T24508] ? aa_af_perm+0x340/0x340 [ 770.652882][T24508] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 770.659316][T24508] ? sock_rps_record_flow+0x17/0x3b0 [ 770.664799][T24508] ? inet_sendmsg+0x78/0x2f0 [ 770.669410][T24508] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 770.674718][T24508] ? security_socket_sendmsg+0x7c/0xa0 [ 770.680194][T24508] ? inet_send_prepare+0x260/0x260 [ 770.685324][T24508] ____sys_sendmsg+0x5b7/0x8f0 [ 770.690124][T24508] ? __sys_sendmsg_sock+0x30/0x30 [ 770.695183][T24508] ? import_iovec+0x6f/0xa0 [ 770.699709][T24508] ___sys_sendmsg+0x236/0x2e0 [ 770.704407][T24508] ? __sys_sendmsg+0x2a0/0x2a0 [ 770.709190][T24508] ? vfs_write+0x8b2/0xd60 [ 770.713644][T24508] __se_sys_sendmsg+0x1af/0x290 [ 770.718511][T24508] ? __x64_sys_sendmsg+0x80/0x80 [ 770.723457][T24508] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 770.729463][T24508] ? lockdep_hardirqs_on+0x94/0x140 [ 770.734679][T24508] do_syscall_64+0x4c/0xa0 [ 770.739104][T24508] ? clear_bhb_loop+0x30/0x80 [ 770.743789][T24508] ? clear_bhb_loop+0x30/0x80 [ 770.748478][T24508] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 770.754380][T24508] RIP: 0033:0x7f7447704eb9 [ 770.758803][T24508] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 770.778418][T24508] RSP: 002b:00007f7445960028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 770.786852][T24508] RAX: ffffffffffffffda RBX: 00007f744797ffa0 RCX: 00007f7447704eb9 [ 770.794833][T24508] RDX: 00000000040080d1 RSI: 0000200000000140 RDI: 0000000000000003 [ 770.802812][T24508] RBP: 00007f7445960090 R08: 0000000000000000 R09: 0000000000000000 [ 770.810795][T24508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 770.818782][T24508] R13: 00007f7447980038 R14: 00007f744797ffa0 R15: 00007ffe82a25af8 [ 770.826787][T24508] [ 771.324054][T24532] netlink: 'syz.5.7264': attribute type 10 has an invalid length. [ 771.339211][T24529] FAULT_INJECTION: forcing a failure. [ 771.339211][T24529] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 771.363552][T24529] CPU: 0 PID: 24529 Comm: syz.4.7262 Not tainted syzkaller #0 [ 771.371054][T24529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 771.381105][T24529] Call Trace: [ 771.384375][T24529] [ 771.387297][T24529] dump_stack_lvl+0x188/0x250 [ 771.391971][T24529] ? show_regs_print_info+0x20/0x20 [ 771.397167][T24529] ? load_image+0x400/0x400 [ 771.401668][T24529] ? __lock_acquire+0x7d10/0x7d10 [ 771.406684][T24529] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 771.412483][T24529] should_fail+0x38c/0x4c0 [ 771.416895][T24529] _copy_from_user+0x2e/0x170 [ 771.421563][T24529] iovec_from_user+0x142/0x370 [ 771.426319][T24529] __import_iovec+0x70/0x490 [ 771.430906][T24529] import_iovec+0x6f/0xa0 [ 771.435236][T24529] ___sys_sendmsg+0x1fd/0x2e0 [ 771.439924][T24529] ? __sys_sendmsg+0x2a0/0x2a0 [ 771.444722][T24529] __se_sys_sendmsg+0x1af/0x290 [ 771.449566][T24529] ? __x64_sys_sendmsg+0x80/0x80 [ 771.454499][T24529] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 771.460487][T24529] ? lockdep_hardirqs_on+0x94/0x140 [ 771.465682][T24529] do_syscall_64+0x4c/0xa0 [ 771.470084][T24529] ? clear_bhb_loop+0x30/0x80 [ 771.474745][T24529] ? clear_bhb_loop+0x30/0x80 [ 771.479410][T24529] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 771.485292][T24529] RIP: 0033:0x7fe348298eb9 [ 771.489701][T24529] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 771.509289][T24529] RSP: 002b:00007fe3464f4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 771.517692][T24529] RAX: ffffffffffffffda RBX: 00007fe348513fa0 RCX: 00007fe348298eb9 [ 771.525648][T24529] RDX: 00000000000052cc RSI: 0000200000000040 RDI: 000000000000000a [ 771.533605][T24529] RBP: 00007fe3464f4090 R08: 0000000000000000 R09: 0000000000000000 [ 771.541563][T24529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 771.549524][T24529] R13: 00007fe348514038 R14: 00007fe348513fa0 R15: 00007ffefdc3c8f8 [ 771.557502][T24529] [ 772.455321][T24574] netlink: 180 bytes leftover after parsing attributes in process `syz.3.7277'. [ 773.882228][T24622] FAULT_INJECTION: forcing a failure. [ 773.882228][T24622] name failslab, interval 1, probability 0, space 0, times 0 [ 773.960738][T24622] CPU: 1 PID: 24622 Comm: syz.2.7299 Not tainted syzkaller #0 [ 773.968231][T24622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 773.978298][T24622] Call Trace: [ 773.981599][T24622] [ 773.984534][T24622] dump_stack_lvl+0x188/0x250 [ 773.989225][T24622] ? show_regs_print_info+0x20/0x20 [ 773.994436][T24622] ? load_image+0x400/0x400 [ 773.998959][T24622] ? __lock_acquire+0x7d10/0x7d10 [ 774.004011][T24622] should_fail+0x38c/0x4c0 [ 774.008441][T24622] should_failslab+0x5/0x20 [ 774.012940][T24622] slab_pre_alloc_hook+0x51/0xc0 [ 774.017875][T24622] __kmalloc+0x6b/0x330 [ 774.022023][T24622] ? sk_prot_alloc+0xe7/0x210 [ 774.026706][T24622] sk_prot_alloc+0xe7/0x210 [ 774.031204][T24622] ? sk_alloc+0x1d/0x310 [ 774.035439][T24622] sk_alloc+0x2f/0x310 [ 774.039508][T24622] bpf_prog_test_run_skb+0x240/0x1180 [ 774.044874][T24622] ? __fget_files+0x40f/0x480 [ 774.049555][T24622] ? cpu_online+0x60/0x60 [ 774.053879][T24622] bpf_prog_test_run+0x31e/0x390 [ 774.058814][T24622] __sys_bpf+0x5a5/0x6f0 [ 774.063053][T24622] ? bpf_link_show_fdinfo+0x380/0x380 [ 774.068430][T24622] ? vtime_user_exit+0x2c8/0x3e0 [ 774.073369][T24622] __x64_sys_bpf+0x78/0x90 [ 774.077781][T24622] do_syscall_64+0x4c/0xa0 [ 774.082190][T24622] ? clear_bhb_loop+0x30/0x80 [ 774.086855][T24622] ? clear_bhb_loop+0x30/0x80 [ 774.091524][T24622] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 774.097411][T24622] RIP: 0033:0x7f707b6bceb9 [ 774.101820][T24622] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 774.121416][T24622] RSP: 002b:00007f7079918028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 774.129827][T24622] RAX: ffffffffffffffda RBX: 00007f707b937fa0 RCX: 00007f707b6bceb9 [ 774.137788][T24622] RDX: 0000000000000048 RSI: 0000200000000780 RDI: 000000000000000a [ 774.145754][T24622] RBP: 00007f7079918090 R08: 0000000000000000 R09: 0000000000000000 [ 774.153717][T24622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 774.161680][T24622] R13: 00007f707b938038 R14: 00007f707b937fa0 R15: 00007ffc93a17448 [ 774.169663][T24622] [ 774.323243][T24632] FAULT_INJECTION: forcing a failure. [ 774.323243][T24632] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 774.381628][T24632] CPU: 0 PID: 24632 Comm: syz.4.7302 Not tainted syzkaller #0 [ 774.389123][T24632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 774.399184][T24632] Call Trace: [ 774.402467][T24632] [ 774.405399][T24632] dump_stack_lvl+0x188/0x250 [ 774.410090][T24632] ? show_regs_print_info+0x20/0x20 [ 774.415290][T24632] ? load_image+0x400/0x400 [ 774.419808][T24632] ? __lock_acquire+0x7d10/0x7d10 [ 774.424842][T24632] should_fail+0x38c/0x4c0 [ 774.429277][T24632] _copy_from_user+0x2e/0x170 [ 774.433961][T24632] __sys_bpf+0x26d/0x6f0 [ 774.438217][T24632] ? bpf_link_show_fdinfo+0x380/0x380 [ 774.443611][T24632] __x64_sys_bpf+0x78/0x90 [ 774.448029][T24632] do_syscall_64+0x4c/0xa0 [ 774.452444][T24632] ? clear_bhb_loop+0x30/0x80 [ 774.457123][T24632] ? clear_bhb_loop+0x30/0x80 [ 774.461801][T24632] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 774.467681][T24632] RIP: 0033:0x7fe348298eb9 [ 774.472077][T24632] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 774.491665][T24632] RSP: 002b:00007fe3464f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 774.500069][T24632] RAX: ffffffffffffffda RBX: 00007fe348513fa0 RCX: 00007fe348298eb9 [ 774.508031][T24632] RDX: 0000000000000048 RSI: 0000200000000780 RDI: 000000000000000a [ 774.515996][T24632] RBP: 00007fe3464f4090 R08: 0000000000000000 R09: 0000000000000000 [ 774.523955][T24632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 774.531918][T24632] R13: 00007fe348514038 R14: 00007fe348513fa0 R15: 00007ffefdc3c8f8 [ 774.539891][T24632] [ 774.696977][T24644] FAULT_INJECTION: forcing a failure. [ 774.696977][T24644] name failslab, interval 1, probability 0, space 0, times 0 [ 774.730393][T24644] CPU: 0 PID: 24644 Comm: syz.1.7306 Not tainted syzkaller #0 [ 774.737889][T24644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 774.747952][T24644] Call Trace: [ 774.751237][T24644] [ 774.754165][T24644] dump_stack_lvl+0x188/0x250 [ 774.758853][T24644] ? show_regs_print_info+0x20/0x20 [ 774.764054][T24644] ? load_image+0x400/0x400 [ 774.768574][T24644] should_fail+0x38c/0x4c0 [ 774.772999][T24644] should_failslab+0x5/0x20 [ 774.777502][T24644] slab_pre_alloc_hook+0x51/0xc0 [ 774.782440][T24644] kmem_cache_alloc_trace+0x47/0x2a0 [ 774.787722][T24644] ? sctp_add_bind_addr+0x89/0x350 [ 774.792838][T24644] sctp_add_bind_addr+0x89/0x350 [ 774.797782][T24644] sctp_copy_local_addr_list+0x2dd/0x4a0 [ 774.803419][T24644] ? sctp_do_8_2_transport_strike+0x840/0x840 [ 774.809487][T24644] ? sctp_v4_is_any+0x31/0x50 [ 774.814165][T24644] ? sctp_copy_one_addr+0x93/0x660 [ 774.819276][T24644] sctp_bind_addr_copy+0xaf/0x3c0 [ 774.824302][T24644] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 774.830634][T24644] sctp_connect_new_asoc+0x2f5/0x6a0 [ 774.835937][T24644] ? __sctp_connect+0xd80/0xd80 [ 774.840786][T24644] ? __local_bh_enable_ip+0x136/0x1c0 [ 774.846165][T24644] ? _local_bh_enable+0xa0/0xa0 [ 774.851029][T24644] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 774.856577][T24644] ? security_sctp_bind_connect+0x85/0xb0 [ 774.862305][T24644] sctp_sendmsg+0x158d/0x2900 [ 774.867001][T24644] ? aa_sk_perm+0x7dc/0x910 [ 774.871507][T24644] ? sctp_getsockopt+0x8a0/0x8a0 [ 774.876450][T24644] ? aa_af_perm+0x340/0x340 [ 774.880957][T24644] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 774.887382][T24644] ? sock_rps_record_flow+0x17/0x3b0 [ 774.892686][T24644] ? inet_sendmsg+0x78/0x2f0 [ 774.897281][T24644] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 774.902566][T24644] ? security_socket_sendmsg+0x7c/0xa0 [ 774.908028][T24644] ? inet_send_prepare+0x260/0x260 [ 774.913140][T24644] ____sys_sendmsg+0x5b7/0x8f0 [ 774.917917][T24644] ? __sys_sendmsg_sock+0x30/0x30 [ 774.922957][T24644] ? import_iovec+0x6f/0xa0 [ 774.927468][T24644] ___sys_sendmsg+0x236/0x2e0 [ 774.932157][T24644] ? __sys_sendmsg+0x2a0/0x2a0 [ 774.937106][T24644] ? vfs_write+0x8b2/0xd60 [ 774.941544][T24644] __se_sys_sendmsg+0x1af/0x290 [ 774.946396][T24644] ? __x64_sys_sendmsg+0x80/0x80 [ 774.951338][T24644] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 774.957335][T24644] ? lockdep_hardirqs_on+0x94/0x140 [ 774.962535][T24644] do_syscall_64+0x4c/0xa0 [ 774.966945][T24644] ? clear_bhb_loop+0x30/0x80 [ 774.971621][T24644] ? clear_bhb_loop+0x30/0x80 [ 774.976304][T24644] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 774.982196][T24644] RIP: 0033:0x7f7447704eb9 [ 774.986611][T24644] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 775.006219][T24644] RSP: 002b:00007f7445960028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 775.014642][T24644] RAX: ffffffffffffffda RBX: 00007f744797ffa0 RCX: 00007f7447704eb9 [ 775.022622][T24644] RDX: 00000000040080d1 RSI: 0000200000000140 RDI: 0000000000000003 [ 775.030596][T24644] RBP: 00007f7445960090 R08: 0000000000000000 R09: 0000000000000000 [ 775.038573][T24644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 775.046552][T24644] R13: 00007f7447980038 R14: 00007f744797ffa0 R15: 00007ffe82a25af8 [ 775.054547][T24644] [ 775.363697][T24663] validate_nla: 1 callbacks suppressed [ 775.363712][T24663] netlink: 'syz.1.7314': attribute type 2 has an invalid length. [ 775.589170][T24673] netlink: 'syz.1.7317': attribute type 10 has an invalid length. [ 776.234611][T24707] netlink: 'syz.4.7331': attribute type 39 has an invalid length. [ 776.249766][T24705] netlink: 'syz.5.7330': attribute type 21 has an invalid length. [ 776.290192][T24705] netlink: 164 bytes leftover after parsing attributes in process `syz.5.7330'. [ 776.357731][T24716] netlink: 'syz.3.7335': attribute type 8 has an invalid length. [ 776.396206][T24716] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.7335'. [ 776.484541][T24717] netlink: 'syz.1.7334': attribute type 27 has an invalid length. [ 776.938578][T24732] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 777.087405][T24732] netlink: 'syz.2.7341': attribute type 16 has an invalid length. [ 777.133011][T24732] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7341'. [ 777.831658][T24771] netlink: 'syz.1.7355': attribute type 12 has an invalid length. [ 777.900801][T24771] netlink: 197276 bytes leftover after parsing attributes in process `syz.1.7355'. [ 777.997442][T24786] FAULT_INJECTION: forcing a failure. [ 777.997442][T24786] name failslab, interval 1, probability 0, space 0, times 0 [ 778.031931][T24786] CPU: 1 PID: 24786 Comm: syz.3.7359 Not tainted syzkaller #0 [ 778.039434][T24786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 778.049496][T24786] Call Trace: [ 778.052780][T24786] [ 778.055710][T24786] dump_stack_lvl+0x188/0x250 [ 778.060392][T24786] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 778.066569][T24786] ? show_regs_print_info+0x20/0x20 [ 778.071767][T24786] ? load_image+0x400/0x400 [ 778.076284][T24786] should_fail+0x38c/0x4c0 [ 778.080705][T24786] should_failslab+0x5/0x20 [ 778.085206][T24786] slab_pre_alloc_hook+0x51/0xc0 [ 778.090149][T24786] __kmalloc+0x6b/0x330 [ 778.094317][T24786] ? bpf_test_init+0xf8/0x1b0 [ 778.098998][T24786] ? __lock_acquire+0x7d10/0x7d10 [ 778.104037][T24786] bpf_test_init+0xf8/0x1b0 [ 778.108590][T24786] bpf_prog_test_run_skb+0x181/0x1180 [ 778.113980][T24786] ? __fget_files+0x40f/0x480 [ 778.118672][T24786] ? cpu_online+0x60/0x60 [ 778.123015][T24786] bpf_prog_test_run+0x31e/0x390 [ 778.127963][T24786] __sys_bpf+0x5a5/0x6f0 [ 778.132215][T24786] ? bpf_link_show_fdinfo+0x380/0x380 [ 778.137603][T24786] ? vtime_user_exit+0x2c8/0x3e0 [ 778.142574][T24786] __x64_sys_bpf+0x78/0x90 [ 778.147012][T24786] do_syscall_64+0x4c/0xa0 [ 778.151448][T24786] ? clear_bhb_loop+0x30/0x80 [ 778.156128][T24786] ? clear_bhb_loop+0x30/0x80 [ 778.160812][T24786] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 778.166720][T24786] RIP: 0033:0x7fac2bbfdeb9 [ 778.171139][T24786] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 778.190747][T24786] RSP: 002b:00007fac29e59028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 778.199172][T24786] RAX: ffffffffffffffda RBX: 00007fac2be78fa0 RCX: 00007fac2bbfdeb9 [ 778.207152][T24786] RDX: 0000000000000048 RSI: 0000200000000780 RDI: 000000000000000a [ 778.215127][T24786] RBP: 00007fac29e59090 R08: 0000000000000000 R09: 0000000000000000 [ 778.223102][T24786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 778.231073][T24786] R13: 00007fac2be79038 R14: 00007fac2be78fa0 R15: 00007fffb4550438 [ 778.239063][T24786] [ 778.330481][T24799] FAULT_INJECTION: forcing a failure. [ 778.330481][T24799] name failslab, interval 1, probability 0, space 0, times 0 [ 778.353997][T24799] CPU: 1 PID: 24799 Comm: syz.3.7364 Not tainted syzkaller #0 [ 778.361492][T24799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 778.371551][T24799] Call Trace: [ 778.374834][T24799] [ 778.377761][T24799] dump_stack_lvl+0x188/0x250 [ 778.382446][T24799] ? show_regs_print_info+0x20/0x20 [ 778.387645][T24799] ? load_image+0x400/0x400 [ 778.392164][T24799] should_fail+0x38c/0x4c0 [ 778.396590][T24799] should_failslab+0x5/0x20 [ 778.401099][T24799] slab_pre_alloc_hook+0x51/0xc0 [ 778.406125][T24799] kmem_cache_alloc_trace+0x47/0x2a0 [ 778.411408][T24799] ? sctp_add_bind_addr+0x89/0x350 [ 778.416526][T24799] sctp_add_bind_addr+0x89/0x350 [ 778.421474][T24799] sctp_copy_local_addr_list+0x2dd/0x4a0 [ 778.427122][T24799] ? sctp_do_8_2_transport_strike+0x840/0x840 [ 778.433199][T24799] ? sctp_v4_is_any+0x31/0x50 [ 778.437879][T24799] ? sctp_copy_one_addr+0x93/0x660 [ 778.442995][T24799] sctp_bind_addr_copy+0xaf/0x3c0 [ 778.448027][T24799] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 778.454363][T24799] sctp_connect_new_asoc+0x2f5/0x6a0 [ 778.459661][T24799] ? __sctp_connect+0xd80/0xd80 [ 778.464531][T24799] ? __local_bh_enable_ip+0x136/0x1c0 [ 778.469911][T24799] ? _local_bh_enable+0xa0/0xa0 [ 778.474771][T24799] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 778.480320][T24799] ? security_sctp_bind_connect+0x85/0xb0 [ 778.486053][T24799] sctp_sendmsg+0x158d/0x2900 [ 778.490749][T24799] ? aa_sk_perm+0x7dc/0x910 [ 778.495258][T24799] ? sctp_getsockopt+0x8a0/0x8a0 [ 778.500199][T24799] ? aa_af_perm+0x340/0x340 [ 778.504704][T24799] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 778.511126][T24799] ? sock_rps_record_flow+0x17/0x3b0 [ 778.516415][T24799] ? inet_sendmsg+0x78/0x2f0 [ 778.521001][T24799] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 778.526286][T24799] ? security_socket_sendmsg+0x7c/0xa0 [ 778.531749][T24799] ? inet_send_prepare+0x260/0x260 [ 778.536862][T24799] ____sys_sendmsg+0x5b7/0x8f0 [ 778.541633][T24799] ? __sys_sendmsg_sock+0x30/0x30 [ 778.546669][T24799] ? import_iovec+0x6f/0xa0 [ 778.551181][T24799] ___sys_sendmsg+0x236/0x2e0 [ 778.555870][T24799] ? __sys_sendmsg+0x2a0/0x2a0 [ 778.560638][T24799] ? vfs_write+0x8b2/0xd60 [ 778.565076][T24799] __se_sys_sendmsg+0x1af/0x290 [ 778.569929][T24799] ? __x64_sys_sendmsg+0x80/0x80 [ 778.574864][T24799] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 778.580860][T24799] ? lockdep_hardirqs_on+0x94/0x140 [ 778.586065][T24799] do_syscall_64+0x4c/0xa0 [ 778.590481][T24799] ? clear_bhb_loop+0x30/0x80 [ 778.595162][T24799] ? clear_bhb_loop+0x30/0x80 [ 778.599854][T24799] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 778.605750][T24799] RIP: 0033:0x7fac2bbfdeb9 [ 778.610174][T24799] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 778.629783][T24799] RSP: 002b:00007fac29e59028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 778.638206][T24799] RAX: ffffffffffffffda RBX: 00007fac2be78fa0 RCX: 00007fac2bbfdeb9 [ 778.646187][T24799] RDX: 00000000040080d1 RSI: 0000200000000140 RDI: 0000000000000003 [ 778.654163][T24799] RBP: 00007fac29e59090 R08: 0000000000000000 R09: 0000000000000000 [ 778.662138][T24799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 778.670112][T24799] R13: 00007fac2be79038 R14: 00007fac2be78fa0 R15: 00007fffb4550438 [ 778.678101][T24799] [ 779.138434][T24811] netlink: 'syz.3.7370': attribute type 10 has an invalid length. [ 779.152457][T24809] netlink: 'syz.1.7369': attribute type 10 has an invalid length. [ 779.251625][T24813] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7371'. [ 779.300192][T24813] netlink: 1 bytes leftover after parsing attributes in process `syz.2.7371'. [ 779.400546][T24827] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7376'. [ 779.672569][T24835] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7380'. [ 779.713661][T24835] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 779.821092][T22228] Bluetooth: hci5: command 0x0406 tx timeout [ 780.241728][ T4293] device hsr_slave_0 left promiscuous mode [ 780.266636][ T4293] device hsr_slave_1 left promiscuous mode [ 780.324007][ T4293] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 780.345506][ T4293] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 780.444996][T24868] netlink: 13435 bytes leftover after parsing attributes in process `syz.3.7392'. [ 780.571989][ T4293] device veth1_vlan left promiscuous mode [ 780.586054][ T4293] device veth0_vlan left promiscuous mode [ 781.202377][T24861] validate_nla: 3 callbacks suppressed [ 781.202393][T24861] netlink: 'syz.5.7389': attribute type 40 has an invalid length. [ 781.300707][T24878] netlink: 'syz.4.7394': attribute type 16 has an invalid length. [ 781.308558][T24878] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7394'. [ 781.537684][T24894] netlink: 'syz.1.7400': attribute type 1 has an invalid length. [ 781.576140][T24894] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.7400'. [ 781.592667][T24894] netlink: 9 bytes leftover after parsing attributes in process `syz.1.7400'. [ 782.113634][ T3094] tipc: Subscription rejected, illegal request [ 782.268263][T24916] netlink: 144 bytes leftover after parsing attributes in process `syz.2.7407'. [ 782.412854][T24911] netlink: 'syz.3.7403': attribute type 12 has an invalid length. [ 782.496141][T24911] netlink: 197276 bytes leftover after parsing attributes in process `syz.3.7403'. [ 782.690980][T24930] netlink: 'syz.4.7414': attribute type 2 has an invalid length. [ 782.783004][T24928] netlink: 'syz.1.7411': attribute type 21 has an invalid length. [ 782.972169][T24945] netlink: 'syz.4.7419': attribute type 10 has an invalid length. [ 783.274303][T24959] netlink: 'syz.1.7421': attribute type 10 has an invalid length. [ 783.324219][T24962] netlink: 144 bytes leftover after parsing attributes in process `syz.4.7423'. [ 783.980563][T24990] netlink: 'syz.1.7433': attribute type 29 has an invalid length. [ 784.020254][T24990] netlink: 'syz.1.7433': attribute type 29 has an invalid length. [ 784.291099][T24998] netlink: 14 bytes leftover after parsing attributes in process `syz.1.7436'. [ 784.356219][T24998] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 784.427434][T24998] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 784.485520][T24998] bond0 (unregistering): Released all slaves [ 784.792632][T25007] FAULT_INJECTION: forcing a failure. [ 784.792632][T25007] name failslab, interval 1, probability 0, space 0, times 0 [ 784.832850][T25007] CPU: 1 PID: 25007 Comm: syz.1.7439 Not tainted syzkaller #0 [ 784.840343][T25007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 784.850397][T25007] Call Trace: [ 784.853674][T25007] [ 784.856603][T25007] dump_stack_lvl+0x188/0x250 [ 784.861288][T25007] ? show_regs_print_info+0x20/0x20 [ 784.866493][T25007] ? load_image+0x400/0x400 [ 784.871016][T25007] ? memset+0x1e/0x40 [ 784.875013][T25007] should_fail+0x38c/0x4c0 [ 784.879446][T25007] should_failslab+0x5/0x20 [ 784.883953][T25007] slab_pre_alloc_hook+0x51/0xc0 [ 784.888896][T25007] ? __build_skb+0x26/0x2e0 [ 784.893401][T25007] kmem_cache_alloc+0x3d/0x290 [ 784.898171][T25007] __build_skb+0x26/0x2e0 [ 784.902503][T25007] build_skb+0x1e/0x170 [ 784.906661][T25007] bpf_prog_test_run_skb+0x260/0x1180 [ 784.912046][T25007] ? __fget_files+0x40f/0x480 [ 784.916733][T25007] ? cpu_online+0x60/0x60 [ 784.921125][T25007] bpf_prog_test_run+0x31e/0x390 [ 784.926065][T25007] __sys_bpf+0x5a5/0x6f0 [ 784.930316][T25007] ? bpf_link_show_fdinfo+0x380/0x380 [ 784.935698][T25007] ? vtime_user_exit+0x2c8/0x3e0 [ 784.940636][T25007] __x64_sys_bpf+0x78/0x90 [ 784.945051][T25007] do_syscall_64+0x4c/0xa0 [ 784.949465][T25007] ? clear_bhb_loop+0x30/0x80 [ 784.954139][T25007] ? clear_bhb_loop+0x30/0x80 [ 784.958817][T25007] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 784.964705][T25007] RIP: 0033:0x7f7447704eb9 [ 784.969119][T25007] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 784.988723][T25007] RSP: 002b:00007f7445960028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 784.997153][T25007] RAX: ffffffffffffffda RBX: 00007f744797ffa0 RCX: 00007f7447704eb9 [ 785.005127][T25007] RDX: 0000000000000048 RSI: 0000200000000780 RDI: 000000000000000a [ 785.013094][T25007] RBP: 00007f7445960090 R08: 0000000000000000 R09: 0000000000000000 [ 785.021061][T25007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 785.029029][T25007] R13: 00007f7447980038 R14: 00007f744797ffa0 R15: 00007ffe82a25af8 [ 785.037016][T25007] [ 785.401534][T25022] netlink: 202920 bytes leftover after parsing attributes in process `syz.3.7443'. [ 785.689201][T25034] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.7446'. [ 785.723883][T25034] netlink: zone id is out of range [ 785.739498][T25034] netlink: zone id is out of range [ 785.759689][T25034] netlink: zone id is out of range [ 785.769810][T25034] netlink: zone id is out of range [ 785.785393][T25034] netlink: zone id is out of range [ 785.796575][T25039] netlink: 164 bytes leftover after parsing attributes in process `syz.3.7447'. [ 785.825798][T25034] netlink: zone id is out of range [ 785.838558][T25034] netlink: zone id is out of range [ 785.850379][T25034] netlink: zone id is out of range [ 785.866615][T25034] netlink: zone id is out of range [ 785.887185][T25034] netlink: zone id is out of range [ 786.558507][T25073] netlink: 10 bytes leftover after parsing attributes in process `syz.2.7461'. [ 786.771971][T25080] netlink: 56 bytes leftover after parsing attributes in process `syz.4.7464'. [ 787.700520][T25099] netlink: 192436 bytes leftover after parsing attributes in process `syz.3.7471'. [ 788.023676][T25104] validate_nla: 5 callbacks suppressed [ 788.023695][T25104] netlink: 'syz.2.7473': attribute type 10 has an invalid length. [ 790.060899][ T4294] Bluetooth: hci2: command 0x0406 tx timeout [ 790.861310][T25113] netlink: 'syz.3.7476': attribute type 1 has an invalid length. [ 790.878200][T25117] netlink: 'syz.2.7478': attribute type 10 has an invalid length. [ 790.898558][T25113] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.7476'. [ 790.939068][T25113] netlink: 9 bytes leftover after parsing attributes in process `syz.3.7476'. [ 790.969625][T25122] netlink: 'syz.4.7481': attribute type 3 has an invalid length. [ 791.053100][T25126] FAULT_INJECTION: forcing a failure. [ 791.053100][T25126] name failslab, interval 1, probability 0, space 0, times 0 [ 791.067853][T25122] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.7481'. [ 791.089812][T25126] CPU: 1 PID: 25126 Comm: syz.2.7482 Not tainted syzkaller #0 [ 791.097315][T25126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 791.107386][T25126] Call Trace: [ 791.110678][T25126] [ 791.113617][T25126] dump_stack_lvl+0x188/0x250 [ 791.118317][T25126] ? show_regs_print_info+0x20/0x20 [ 791.123531][T25126] ? load_image+0x400/0x400 [ 791.128055][T25126] ? __lock_acquire+0x7d10/0x7d10 [ 791.133100][T25126] should_fail+0x38c/0x4c0 [ 791.137536][T25126] should_failslab+0x5/0x20 [ 791.142032][T25126] slab_pre_alloc_hook+0x51/0xc0 [ 791.146959][T25126] __kmalloc+0x6b/0x330 [ 791.151098][T25126] ? sk_prot_alloc+0xe7/0x210 [ 791.155768][T25126] sk_prot_alloc+0xe7/0x210 [ 791.160256][T25126] ? sk_alloc+0x1d/0x310 [ 791.164486][T25126] sk_alloc+0x2f/0x310 [ 791.168547][T25126] bpf_prog_test_run_skb+0x240/0x1180 [ 791.173902][T25126] ? lockdep_hardirqs_on+0x94/0x140 [ 791.179091][T25126] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 791.185237][T25126] ? cpu_online+0x60/0x60 [ 791.189552][T25126] bpf_prog_test_run+0x31e/0x390 [ 791.194495][T25126] __sys_bpf+0x5a5/0x6f0 [ 791.198732][T25126] ? bpf_link_show_fdinfo+0x380/0x380 [ 791.204111][T25126] __x64_sys_bpf+0x78/0x90 [ 791.208516][T25126] do_syscall_64+0x4c/0xa0 [ 791.212914][T25126] ? clear_bhb_loop+0x30/0x80 [ 791.217574][T25126] ? clear_bhb_loop+0x30/0x80 [ 791.222234][T25126] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 791.228112][T25126] RIP: 0033:0x7f707b6bceb9 [ 791.232517][T25126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 791.252110][T25126] RSP: 002b:00007f7079918028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 791.260515][T25126] RAX: ffffffffffffffda RBX: 00007f707b937fa0 RCX: 00007f707b6bceb9 [ 791.268476][T25126] RDX: 0000000000000048 RSI: 0000200000000780 RDI: 000000000000000a [ 791.276441][T25126] RBP: 00007f7079918090 R08: 0000000000000000 R09: 0000000000000000 [ 791.284395][T25126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 791.292354][T25126] R13: 00007f707b938038 R14: 00007f707b937fa0 R15: 00007ffc93a17448 [ 791.300326][T25126] [ 792.168992][T25168] netlink: 'syz.5.7496': attribute type 1 has an invalid length. [ 792.190507][T25175] netlink: 'syz.3.7498': attribute type 21 has an invalid length. [ 792.210984][T25168] netlink: 112860 bytes leftover after parsing attributes in process `syz.5.7496'. [ 792.220414][T25168] netlink: 9 bytes leftover after parsing attributes in process `syz.5.7496'. [ 792.486833][T25185] netlink: 'syz.1.7500': attribute type 21 has an invalid length. [ 792.541875][T25185] netlink: 164 bytes leftover after parsing attributes in process `syz.1.7500'. [ 792.879280][T25201] netlink: 132 bytes leftover after parsing attributes in process `syz.5.7507'. [ 793.512889][T25215] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.7512'. [ 793.608449][T25223] netlink: 'syz.3.7515': attribute type 29 has an invalid length. [ 793.737184][T25208] device syzkaller0 entered promiscuous mode [ 793.816806][T25223] netlink: 'syz.3.7515': attribute type 29 has an invalid length. [ 793.848554][T25225] netlink: 830 bytes leftover after parsing attributes in process `syz.3.7515'. [ 794.378496][T25257] netlink: 'syz.4.7526': attribute type 10 has an invalid length. [ 794.822990][T25274] netlink: 'syz.5.7533': attribute type 12 has an invalid length. [ 794.834566][T25272] device syzkaller0 entered promiscuous mode [ 794.842734][T25274] netlink: 197276 bytes leftover after parsing attributes in process `syz.5.7533'. [ 795.293136][T25293] netlink: 'syz.2.7539': attribute type 13 has an invalid length. [ 795.311547][T25293] netlink: 160 bytes leftover after parsing attributes in process `syz.2.7539'. [ 795.397279][T25293] erspan0: refused to change device tx_queue_len [ 795.404053][T25293] net_ratelimit: 169 callbacks suppressed [ 795.404089][T25293] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 795.757531][T25315] netlink: 'syz.2.7547': attribute type 10 has an invalid length. [ 796.381031][T25330] netlink: 192436 bytes leftover after parsing attributes in process `syz.4.7553'. [ 796.463842][T25330] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 796.529174][T25345] FAULT_INJECTION: forcing a failure. [ 796.529174][T25345] name failslab, interval 1, probability 0, space 0, times 0 [ 796.609840][T25345] CPU: 0 PID: 25345 Comm: syz.2.7559 Not tainted syzkaller #0 [ 796.617346][T25345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 796.627416][T25345] Call Trace: [ 796.630700][T25345] [ 796.633640][T25345] dump_stack_lvl+0x188/0x250 [ 796.638334][T25345] ? show_regs_print_info+0x20/0x20 [ 796.643542][T25345] ? load_image+0x400/0x400 [ 796.648056][T25345] ? __might_sleep+0xf0/0xf0 [ 796.652649][T25345] ? __lock_acquire+0x7d10/0x7d10 [ 796.657774][T25345] should_fail+0x38c/0x4c0 [ 796.662213][T25345] should_failslab+0x5/0x20 [ 796.666721][T25345] slab_pre_alloc_hook+0x51/0xc0 [ 796.671664][T25345] kmem_cache_alloc_trace+0x47/0x2a0 [ 796.676950][T25345] ? apparmor_sk_alloc_security+0x74/0x100 [ 796.682767][T25345] apparmor_sk_alloc_security+0x74/0x100 [ 796.688399][T25345] security_sk_alloc+0x6a/0xa0 [ 796.693156][T25345] sk_prot_alloc+0x101/0x210 [ 796.697737][T25345] ? sk_alloc+0x1d/0x310 [ 796.701977][T25345] sk_alloc+0x2f/0x310 [ 796.706039][T25345] bpf_prog_test_run_skb+0x240/0x1180 [ 796.711406][T25345] ? __fget_files+0x40f/0x480 [ 796.716084][T25345] ? cpu_online+0x60/0x60 [ 796.720404][T25345] bpf_prog_test_run+0x31e/0x390 [ 796.725340][T25345] __sys_bpf+0x5a5/0x6f0 [ 796.729710][T25345] ? bpf_link_show_fdinfo+0x380/0x380 [ 796.735105][T25345] ? vtime_user_exit+0x2c8/0x3e0 [ 796.740056][T25345] __x64_sys_bpf+0x78/0x90 [ 796.744477][T25345] do_syscall_64+0x4c/0xa0 [ 796.748888][T25345] ? clear_bhb_loop+0x30/0x80 [ 796.753557][T25345] ? clear_bhb_loop+0x30/0x80 [ 796.758224][T25345] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 796.764110][T25345] RIP: 0033:0x7f707b6bceb9 [ 796.768521][T25345] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 796.788116][T25345] RSP: 002b:00007f7079918028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 796.797053][T25345] RAX: ffffffffffffffda RBX: 00007f707b937fa0 RCX: 00007f707b6bceb9 [ 796.805031][T25345] RDX: 0000000000000048 RSI: 0000200000000780 RDI: 000000000000000a [ 796.812995][T25345] RBP: 00007f7079918090 R08: 0000000000000000 R09: 0000000000000000 [ 796.820963][T25345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 796.828926][T25345] R13: 00007f707b938038 R14: 00007f707b937fa0 R15: 00007ffc93a17448 [ 796.836903][T25345] [ 797.307063][T25363] FAULT_INJECTION: forcing a failure. [ 797.307063][T25363] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 797.347268][T25363] CPU: 1 PID: 25363 Comm: syz.2.7564 Not tainted syzkaller #0 [ 797.354786][T25363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 797.364859][T25363] Call Trace: [ 797.368150][T25363] [ 797.371090][T25363] dump_stack_lvl+0x188/0x250 [ 797.375800][T25363] ? show_regs_print_info+0x20/0x20 [ 797.381016][T25363] ? load_image+0x400/0x400 [ 797.385547][T25363] ? __lock_acquire+0x7d10/0x7d10 [ 797.390586][T25363] ? perf_trace_lock_acquire+0xed/0x3e0 [ 797.396152][T25363] should_fail+0x38c/0x4c0 [ 797.400588][T25363] _copy_from_user+0x2e/0x170 [ 797.405277][T25363] __copy_msghdr_from_user+0xc9/0x630 [ 797.410667][T25363] ? verify_lock_unused+0x140/0x140 [ 797.415887][T25363] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 797.421208][T25363] ___sys_sendmsg+0x19a/0x2e0 [ 797.425907][T25363] ? __sys_sendmsg+0x2a0/0x2a0 [ 797.430692][T25363] ? vfs_write+0x8b2/0xd60 [ 797.435127][T25363] __se_sys_sendmsg+0x1af/0x290 [ 797.439984][T25363] ? __x64_sys_sendmsg+0x80/0x80 [ 797.444917][T25363] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 797.450904][T25363] ? lockdep_hardirqs_on+0x94/0x140 [ 797.456095][T25363] do_syscall_64+0x4c/0xa0 [ 797.460495][T25363] ? clear_bhb_loop+0x30/0x80 [ 797.465159][T25363] ? clear_bhb_loop+0x30/0x80 [ 797.469821][T25363] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 797.475698][T25363] RIP: 0033:0x7f707b6bceb9 [ 797.480102][T25363] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 797.499689][T25363] RSP: 002b:00007f7079918028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 797.508091][T25363] RAX: ffffffffffffffda RBX: 00007f707b937fa0 RCX: 00007f707b6bceb9 [ 797.516047][T25363] RDX: 00000000000052cc RSI: 0000200000000040 RDI: 0000000000000003 [ 797.524003][T25363] RBP: 00007f7079918090 R08: 0000000000000000 R09: 0000000000000000 [ 797.531969][T25363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 797.539943][T25363] R13: 00007f707b938038 R14: 00007f707b937fa0 R15: 00007ffc93a17448 [ 797.547923][T25363] [ 798.257889][T25386] netlink: 'syz.3.7573': attribute type 21 has an invalid length. [ 798.282826][T25386] netlink: 164 bytes leftover after parsing attributes in process `syz.3.7573'. [ 798.340315][T25394] netlink: 'syz.1.7576': attribute type 28 has an invalid length. [ 798.358089][T25394] netlink: 'syz.1.7576': attribute type 3 has an invalid length. [ 798.367776][T25394] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7576'. [ 798.533753][T25408] netlink: 192436 bytes leftover after parsing attributes in process `syz.1.7583'. [ 798.555243][T25408] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 798.707424][ T3094] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 798.857962][T25415] netlink: 'syz.4.7586': attribute type 16 has an invalid length. [ 798.866823][T25415] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7586'. [ 799.068960][T25425] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7590'. [ 799.158353][T25427] netlink: 'syz.5.7591': attribute type 10 has an invalid length. [ 800.132066][T25459] netlink: 'syz.3.7602': attribute type 12 has an invalid length. [ 800.161905][T25459] netlink: 197276 bytes leftover after parsing attributes in process `syz.3.7602'. [ 800.213809][T25464] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7603'. [ 800.476254][T25473] netlink: 'syz.4.7606': attribute type 21 has an invalid length. [ 800.508446][T25474] netlink: 'syz.1.7608': attribute type 3 has an invalid length. [ 800.547435][T25474] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7608'. [ 800.634189][T25473] netlink: 'syz.4.7606': attribute type 9 has an invalid length. [ 800.651652][T25473] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.7606'. [ 801.033392][T25476] netlink: 'syz.4.7606': attribute type 9 has an invalid length. [ 801.076121][T25476] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.7606'. [ 801.595178][T25499] FAULT_INJECTION: forcing a failure. [ 801.595178][T25499] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 801.684456][T25499] CPU: 0 PID: 25499 Comm: syz.2.7616 Not tainted syzkaller #0 [ 801.691960][T25499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 801.702019][T25499] Call Trace: [ 801.705300][T25499] [ 801.708237][T25499] dump_stack_lvl+0x188/0x250 [ 801.712905][T25499] ? show_regs_print_info+0x20/0x20 [ 801.718088][T25499] ? load_image+0x400/0x400 [ 801.722575][T25499] ? __lock_acquire+0x7d10/0x7d10 [ 801.727592][T25499] ? bpf_test_run+0x78e/0x800 [ 801.732248][T25499] should_fail+0x38c/0x4c0 [ 801.736648][T25499] _copy_to_user+0x2e/0x130 [ 801.741130][T25499] bpf_test_finish+0x1e6/0x2f0 [ 801.745877][T25499] ? convert_skb_to___skb+0x360/0x360 [ 801.751233][T25499] ? __build_skb+0x1e2/0x2e0 [ 801.755808][T25499] ? convert_skb_to___skb+0x1ff/0x360 [ 801.761161][T25499] bpf_prog_test_run_skb+0xb8f/0x1180 [ 801.766522][T25499] ? cpu_online+0x60/0x60 [ 801.770829][T25499] bpf_prog_test_run+0x31e/0x390 [ 801.775752][T25499] __sys_bpf+0x5a5/0x6f0 [ 801.779976][T25499] ? perf_trace_preemptirq_template+0x2aa/0x360 [ 801.786212][T25499] ? bpf_link_show_fdinfo+0x380/0x380 [ 801.791582][T25499] ? rcu_nmi_exit+0x6f/0xf0 [ 801.796095][T25499] ? vtime_user_exit+0x2c8/0x3e0 [ 801.801026][T25499] __x64_sys_bpf+0x78/0x90 [ 801.805433][T25499] do_syscall_64+0x4c/0xa0 [ 801.809836][T25499] ? clear_bhb_loop+0x30/0x80 [ 801.814493][T25499] ? clear_bhb_loop+0x30/0x80 [ 801.819154][T25499] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 801.825025][T25499] RIP: 0033:0x7f707b6bceb9 [ 801.829424][T25499] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 801.849010][T25499] RSP: 002b:00007f7079918028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 801.857403][T25499] RAX: ffffffffffffffda RBX: 00007f707b937fa0 RCX: 00007f707b6bceb9 [ 801.865355][T25499] RDX: 0000000000000048 RSI: 0000200000000780 RDI: 000000000000000a [ 801.873304][T25499] RBP: 00007f7079918090 R08: 0000000000000000 R09: 0000000000000000 [ 801.881256][T25499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 801.889205][T25499] R13: 00007f707b938038 R14: 00007f707b937fa0 R15: 00007ffc93a17448 [ 801.897170][T25499] [ 801.917861][T25515] FAULT_INJECTION: forcing a failure. [ 801.917861][T25515] name failslab, interval 1, probability 0, space 0, times 0 [ 801.936256][T25515] CPU: 1 PID: 25515 Comm: syz.4.7621 Not tainted syzkaller #0 [ 801.943741][T25515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 801.953797][T25515] Call Trace: [ 801.957079][T25515] [ 801.960011][T25515] dump_stack_lvl+0x188/0x250 [ 801.964702][T25515] ? show_regs_print_info+0x20/0x20 [ 801.969909][T25515] ? load_image+0x400/0x400 [ 801.974429][T25515] should_fail+0x38c/0x4c0 [ 801.978865][T25515] should_failslab+0x5/0x20 [ 801.983375][T25515] slab_pre_alloc_hook+0x51/0xc0 [ 801.988321][T25515] kmem_cache_alloc_trace+0x47/0x2a0 [ 801.993611][T25515] ? sctp_add_bind_addr+0x89/0x350 [ 801.998737][T25515] sctp_add_bind_addr+0x89/0x350 [ 802.003682][T25515] sctp_copy_local_addr_list+0x2dd/0x4a0 [ 802.009326][T25515] ? sctp_do_8_2_transport_strike+0x840/0x840 [ 802.015409][T25515] ? sctp_v4_is_any+0x31/0x50 [ 802.020098][T25515] ? sctp_copy_one_addr+0x93/0x660 [ 802.025219][T25515] sctp_bind_addr_copy+0xaf/0x3c0 [ 802.030256][T25515] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 802.036601][T25515] sctp_connect_new_asoc+0x2f5/0x6a0 [ 802.041914][T25515] ? __sctp_connect+0xd80/0xd80 [ 802.046770][T25515] ? __local_bh_enable_ip+0x136/0x1c0 [ 802.052141][T25515] ? _local_bh_enable+0xa0/0xa0 [ 802.057015][T25515] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 802.062565][T25515] ? security_sctp_bind_connect+0x85/0xb0 [ 802.068296][T25515] sctp_sendmsg+0x158d/0x2900 [ 802.072994][T25515] ? aa_sk_perm+0x7dc/0x910 [ 802.077505][T25515] ? sctp_getsockopt+0x8a0/0x8a0 [ 802.082454][T25515] ? aa_af_perm+0x340/0x340 [ 802.086956][T25515] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 802.093375][T25515] ? sock_rps_record_flow+0x17/0x3b0 [ 802.098673][T25515] ? inet_sendmsg+0x78/0x2f0 [ 802.103271][T25515] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 802.108562][T25515] ? security_socket_sendmsg+0x7c/0xa0 [ 802.114027][T25515] ? inet_send_prepare+0x260/0x260 [ 802.119146][T25515] ____sys_sendmsg+0x5b7/0x8f0 [ 802.123930][T25515] ? __sys_sendmsg_sock+0x30/0x30 [ 802.128962][T25515] ? import_iovec+0x6f/0xa0 [ 802.133473][T25515] ___sys_sendmsg+0x236/0x2e0 [ 802.138157][T25515] ? __sys_sendmsg+0x2a0/0x2a0 [ 802.142935][T25515] ? vfs_write+0x8b2/0xd60 [ 802.147376][T25515] __se_sys_sendmsg+0x1af/0x290 [ 802.152237][T25515] ? __x64_sys_sendmsg+0x80/0x80 [ 802.157186][T25515] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 802.163187][T25515] ? lockdep_hardirqs_on+0x94/0x140 [ 802.168391][T25515] do_syscall_64+0x4c/0xa0 [ 802.172799][T25515] ? clear_bhb_loop+0x30/0x80 [ 802.177475][T25515] ? clear_bhb_loop+0x30/0x80 [ 802.182155][T25515] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 802.188055][T25515] RIP: 0033:0x7fe348298eb9 [ 802.192472][T25515] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 802.212079][T25515] RSP: 002b:00007fe3464d3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 802.220504][T25515] RAX: ffffffffffffffda RBX: 00007fe348514090 RCX: 00007fe348298eb9 [ 802.228475][T25515] RDX: 00000000040080d1 RSI: 0000200000000140 RDI: 0000000000000003 [ 802.236448][T25515] RBP: 00007fe3464d3090 R08: 0000000000000000 R09: 0000000000000000 [ 802.244468][T25515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 802.252529][T25515] R13: 00007fe348514128 R14: 00007fe348514090 R15: 00007ffefdc3c8f8 [ 802.260520][T25515] [ 802.837035][T25553] netlink: 'syz.4.7635': attribute type 21 has an invalid length. [ 803.633370][T25591] netlink: 'syz.5.7649': attribute type 10 has an invalid length. [ 803.967048][T25609] netlink: 'syz.3.7657': attribute type 21 has an invalid length. [ 804.016294][T25609] netlink: 'syz.3.7657': attribute type 9 has an invalid length. [ 804.047599][T25609] __nla_validate_parse: 1 callbacks suppressed [ 804.047633][T25609] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.7657'. [ 804.975645][T25613] netlink: 'syz.3.7657': attribute type 9 has an invalid length. [ 805.047479][T25613] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.7657'. [ 806.185348][T25668] netlink: 'syz.4.7675': attribute type 10 has an invalid length. [ 806.223997][T25668] netlink: 168 bytes leftover after parsing attributes in process `syz.4.7675'. [ 806.765175][T25693] netlink: 204284 bytes leftover after parsing attributes in process `syz.1.7684'. [ 806.792276][T25692] netlink: 204284 bytes leftover after parsing attributes in process `syz.1.7684'. [ 806.864065][T25701] netlink: 'syz.4.7688': attribute type 21 has an invalid length. [ 806.877280][T25701] netlink: 164 bytes leftover after parsing attributes in process `syz.4.7688'. [ 806.990499][T25684] chnl_net:caif_netlink_parms(): no params data found [ 807.018007][T25712] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.7691'. [ 807.034562][T25710] FAULT_INJECTION: forcing a failure. [ 807.034562][T25710] name failslab, interval 1, probability 0, space 0, times 0 [ 807.097549][T25710] CPU: 1 PID: 25710 Comm: syz.4.7690 Not tainted syzkaller #0 [ 807.102855][T25684] bridge0: port 1(bridge_slave_0) entered blocking state [ 807.105042][T25710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 807.112167][T25684] bridge0: port 1(bridge_slave_0) entered disabled state [ 807.122082][T25710] Call Trace: [ 807.122090][T25710] [ 807.122098][T25710] dump_stack_lvl+0x188/0x250 [ 807.122125][T25710] ? show_regs_print_info+0x20/0x20 [ 807.141889][T25684] device bridge_slave_0 entered promiscuous mode [ 807.145149][T25710] ? load_image+0x400/0x400 [ 807.154335][T25684] bridge0: port 2(bridge_slave_1) entered blocking state [ 807.155940][T25710] ? __might_sleep+0xf0/0xf0 [ 807.167515][T25710] ? __lock_acquire+0x7d10/0x7d10 [ 807.170679][T25684] bridge0: port 2(bridge_slave_1) entered disabled state [ 807.172546][T25710] should_fail+0x38c/0x4c0 [ 807.180681][T25684] device bridge_slave_1 entered promiscuous mode [ 807.183939][T25710] should_failslab+0x5/0x20 [ 807.194724][T25710] slab_pre_alloc_hook+0x51/0xc0 [ 807.199673][T25710] kmem_cache_alloc_node+0x47/0x2d0 [ 807.204872][T25710] ? __alloc_skb+0xf4/0x750 [ 807.209406][T25710] __alloc_skb+0xf4/0x750 [ 807.213748][T25710] sk_stream_alloc_skb+0x1fa/0xa60 [ 807.218871][T25710] tcp_sendmsg_locked+0xc4e/0x35f0 [ 807.219986][T25684] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 807.223979][T25710] ? aa_sk_perm+0x910/0x910 [ 807.224005][T25710] ? perf_trace_lock+0xe4/0x390 [ 807.224039][T25710] ? mark_lock+0x94/0x320 [ 807.243398][T25684] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 807.246655][T25710] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 807.261627][T25710] ? tcp_free_fastopen_req+0x70/0x70 [ 807.266936][T25710] tcp_sendmsg+0x2b/0x40 [ 807.271183][T25710] ? inet_send_prepare+0x260/0x260 [ 807.276298][T25710] ____sys_sendmsg+0x5b7/0x8f0 [ 807.281076][T25710] ? __sys_sendmsg_sock+0x30/0x30 [ 807.286149][T25710] ? import_iovec+0x6f/0xa0 [ 807.290663][T25710] ___sys_sendmsg+0x236/0x2e0 [ 807.295351][T25710] ? __sys_sendmsg+0x2a0/0x2a0 [ 807.300128][T25710] ? trace_event_raw_event_lock+0x270/0x270 [ 807.306113][T25710] ? vfs_write+0x8b2/0xd60 [ 807.310559][T25710] __se_sys_sendmsg+0x1af/0x290 [ 807.315417][T25710] ? __x64_sys_sendmsg+0x80/0x80 [ 807.320356][T25710] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 807.326362][T25710] ? lockdep_hardirqs_on+0x94/0x140 [ 807.331569][T25710] do_syscall_64+0x4c/0xa0 [ 807.332150][T25684] team0: Port device team_slave_0 added [ 807.335982][T25710] ? clear_bhb_loop+0x30/0x80 [ 807.336007][T25710] ? clear_bhb_loop+0x30/0x80 [ 807.350983][T25710] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 807.356883][T25710] RIP: 0033:0x7fe348298eb9 [ 807.361298][T25710] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 807.363821][T25684] team0: Port device team_slave_1 added [ 807.380895][T25710] RSP: 002b:00007fe3464f4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 807.380918][T25710] RAX: ffffffffffffffda RBX: 00007fe348513fa0 RCX: 00007fe348298eb9 [ 807.380931][T25710] RDX: 00000000000052cc RSI: 0000200000000040 RDI: 0000000000000003 [ 807.410754][T25710] RBP: 00007fe3464f4090 R08: 0000000000000000 R09: 0000000000000000 [ 807.418729][T25710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 807.426700][T25710] R13: 00007fe348514038 R14: 00007fe348513fa0 R15: 00007ffefdc3c8f8 [ 807.434689][T25710] [ 807.477455][T25684] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 807.495015][T25684] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 807.590961][T25684] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 807.632556][T25684] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 807.639525][T25684] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 807.732866][T25684] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 807.850738][T25684] device hsr_slave_0 entered promiscuous mode [ 807.890370][T25684] device hsr_slave_1 entered promiscuous mode [ 807.909879][T25684] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 807.940801][T25684] Cannot create hsr debugfs directory [ 808.245981][T25684] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.352286][T25684] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.464112][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.471119][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.584140][T25746] netlink: 'syz.2.7701': attribute type 10 has an invalid length. [ 808.621608][ T7062] Bluetooth: hci4: command 0x0409 tx timeout [ 808.676640][T25684] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.785289][T25684] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.940175][T25755] netlink: 'syz.3.7705': attribute type 6 has an invalid length. [ 808.973541][T25755] netlink: 140 bytes leftover after parsing attributes in process `syz.3.7705'. [ 809.068995][T25684] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 809.089351][T25684] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 809.115046][T25684] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 809.146005][T25684] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 809.433672][T25684] 8021q: adding VLAN 0 to HW filter on device bond0 [ 809.445078][T25774] FAULT_INJECTION: forcing a failure. [ 809.445078][T25774] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 809.481779][T23245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 809.502802][T23245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 809.520812][T25774] CPU: 1 PID: 25774 Comm: syz.3.7710 Not tainted syzkaller #0 [ 809.528312][T25774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 809.530000][T25684] 8021q: adding VLAN 0 to HW filter on device team0 [ 809.538366][T25774] Call Trace: [ 809.538376][T25774] [ 809.538383][T25774] dump_stack_lvl+0x188/0x250 [ 809.538409][T25774] ? show_regs_print_info+0x20/0x20 [ 809.538427][T25774] ? load_image+0x400/0x400 [ 809.538448][T25774] ? __lock_acquire+0x7d10/0x7d10 [ 809.538473][T25774] should_fail+0x38c/0x4c0 [ 809.538495][T25774] _copy_from_user+0x2e/0x170 [ 809.538514][T25774] __sys_bpf+0x26d/0x6f0 [ 809.538532][T25774] ? perf_trace_preemptirq_template+0x2aa/0x360 [ 809.538552][T25774] ? bpf_link_show_fdinfo+0x380/0x380 [ 809.538569][T25774] ? rcu_nmi_exit+0x6f/0xf0 [ 809.538598][T25774] ? vtime_user_exit+0x2c8/0x3e0 [ 809.538625][T25774] __x64_sys_bpf+0x78/0x90 [ 809.538644][T25774] do_syscall_64+0x4c/0xa0 [ 809.538660][T25774] ? clear_bhb_loop+0x30/0x80 [ 809.538675][T25774] ? clear_bhb_loop+0x30/0x80 [ 809.566194][T23242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 809.570856][T25774] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 809.570881][T25774] RIP: 0033:0x7fac2bbfdeb9 [ 809.570898][T25774] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 809.570911][T25774] RSP: 002b:00007fac29e59028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 809.570930][T25774] RAX: ffffffffffffffda RBX: 00007fac2be78fa0 RCX: 00007fac2bbfdeb9 [ 809.570942][T25774] RDX: 0000000000000028 RSI: 0000200000000440 RDI: 000000000000000a [ 809.570952][T25774] RBP: 00007fac29e59090 R08: 0000000000000000 R09: 0000000000000000 [ 809.570963][T25774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 809.570973][T25774] R13: 00007fac2be79038 R14: 00007fac2be78fa0 R15: 00007fffb4550438 [ 809.571000][T25774] [ 810.016062][T23242] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 810.041612][T23242] bridge0: port 1(bridge_slave_0) entered blocking state [ 810.048725][T23242] bridge0: port 1(bridge_slave_0) entered forwarding state [ 810.081129][T23242] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 810.132905][T23242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 810.151654][T23242] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 810.179897][T23242] bridge0: port 2(bridge_slave_1) entered blocking state [ 810.187064][T23242] bridge0: port 2(bridge_slave_1) entered forwarding state [ 810.212321][T23242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 810.231388][T23242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 810.282822][T23242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 810.329632][T23242] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 810.361469][T25797] netlink: 'syz.4.7718': attribute type 10 has an invalid length. [ 810.428861][T23242] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 810.441779][T23242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 810.462259][T23242] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 810.497766][T23242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 810.521614][T23242] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 810.592011][T23242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 810.631158][T23242] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 810.642339][T25684] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 810.701331][ T7057] Bluetooth: hci4: command 0x041b tx timeout [ 810.833612][T25820] netlink: 'syz.3.7723': attribute type 21 has an invalid length. [ 810.859950][T25820] netlink: 164 bytes leftover after parsing attributes in process `syz.3.7723'. [ 811.210463][T23242] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 811.220341][T23242] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 811.248360][T25684] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 811.681512][T25853] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.7731'. [ 811.741444][T25848] netlink: 26 bytes leftover after parsing attributes in process `syz.4.7731'. [ 811.789799][T23242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 811.817707][T23242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 811.842822][T25848] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.7731'. [ 811.872442][T25860] nr0: port 1(hsr0) entered blocking state [ 811.878928][T25860] nr0: port 1(hsr0) entered disabled state [ 811.890179][T25860] device hsr0 entered promiscuous mode [ 811.918449][T23251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 811.951629][T23251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 811.980158][T23251] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 812.101688][T23251] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 812.126130][T25684] device veth0_vlan entered promiscuous mode [ 812.184196][T25684] device veth1_vlan entered promiscuous mode [ 812.322252][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 812.346999][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 812.418300][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 812.465155][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 812.528019][T25684] device veth0_macvtap entered promiscuous mode [ 812.555726][T25867] netlink: 14 bytes leftover after parsing attributes in process `syz.3.7736'. [ 812.589450][T25684] device veth1_macvtap entered promiscuous mode [ 812.648185][T25684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 812.707297][T25684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 812.732165][T25875] FAULT_INJECTION: forcing a failure. [ 812.732165][T25875] name failslab, interval 1, probability 0, space 0, times 0 [ 812.770839][T25875] CPU: 1 PID: 25875 Comm: syz.2.7739 Not tainted syzkaller #0 [ 812.770872][T25684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 812.778320][T25875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 812.778331][T25875] Call Trace: [ 812.778338][T25875] [ 812.778345][T25875] dump_stack_lvl+0x188/0x250 [ 812.778373][T25875] ? show_regs_print_info+0x20/0x20 [ 812.799333][T25684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 812.802073][T25875] ? load_image+0x400/0x400 [ 812.802110][T25875] should_fail+0x38c/0x4c0 [ 812.805551][T25684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 812.809690][T25875] should_failslab+0x5/0x20 [ 812.809713][T25875] slab_pre_alloc_hook+0x51/0xc0 [ 812.809732][T25875] kmem_cache_alloc_trace+0x47/0x2a0 [ 812.809747][T25875] ? sctp_add_bind_addr+0x89/0x350 [ 812.815572][T25684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 812.824702][T25875] sctp_add_bind_addr+0x89/0x350 [ 812.824730][T25875] sctp_copy_local_addr_list+0x2dd/0x4a0 [ 812.824754][T25875] ? sctp_do_8_2_transport_strike+0x840/0x840 [ 812.838277][ T7057] Bluetooth: hci4: command 0x040f tx timeout [ 812.844009][T25875] ? sctp_v4_is_any+0x31/0x50 [ 812.844033][T25875] ? sctp_copy_one_addr+0x93/0x660 [ 812.844055][T25875] sctp_bind_addr_copy+0xaf/0x3c0 [ 812.844074][T25875] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 812.871204][T25684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 812.873635][T25875] sctp_connect_new_asoc+0x2f5/0x6a0 [ 812.878549][T25684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 812.884153][T25875] ? __sctp_connect+0xd80/0xd80 [ 812.884170][T25875] ? __local_bh_enable_ip+0x136/0x1c0 [ 812.884187][T25875] ? _local_bh_enable+0xa0/0xa0 [ 812.884211][T25875] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 812.884227][T25875] ? security_sctp_bind_connect+0x85/0xb0 [ 812.884247][T25875] sctp_sendmsg+0x158d/0x2900 [ 812.884277][T25875] ? aa_sk_perm+0x7dc/0x910 [ 812.884294][T25875] ? sctp_getsockopt+0x8a0/0x8a0 [ 812.884312][T25875] ? aa_af_perm+0x340/0x340 [ 812.884328][T25875] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 812.884352][T25875] ? sock_rps_record_flow+0x17/0x3b0 [ 812.884374][T25875] ? inet_sendmsg+0x78/0x2f0 [ 812.884390][T25875] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 812.884406][T25875] ? security_socket_sendmsg+0x7c/0xa0 [ 812.884423][T25875] ? inet_send_prepare+0x260/0x260 [ 812.884439][T25875] ____sys_sendmsg+0x5b7/0x8f0 [ 812.884466][T25875] ? __sys_sendmsg_sock+0x30/0x30 [ 812.884492][T25875] ? import_iovec+0x6f/0xa0 [ 812.884515][T25875] ___sys_sendmsg+0x236/0x2e0 [ 812.884541][T25875] ? __sys_sendmsg+0x2a0/0x2a0 [ 812.884593][T25875] __se_sys_sendmsg+0x1af/0x290 [ 812.884612][T25875] ? __x64_sys_sendmsg+0x80/0x80 [ 812.884633][T25875] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 812.884663][T25875] ? lockdep_hardirqs_on+0x94/0x140 [ 812.884683][T25875] do_syscall_64+0x4c/0xa0 [ 812.884696][T25875] ? clear_bhb_loop+0x30/0x80 [ 812.884711][T25875] ? clear_bhb_loop+0x30/0x80 [ 812.884727][T25875] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 812.884743][T25875] RIP: 0033:0x7f707b6bceb9 [ 812.884761][T25875] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 812.884774][T25875] RSP: 002b:00007f7079918028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 812.884794][T25875] RAX: ffffffffffffffda RBX: 00007f707b937fa0 RCX: 00007f707b6bceb9 [ 812.884806][T25875] RDX: 00000000040080d1 RSI: 0000200000000140 RDI: 0000000000000003 [ 812.884817][T25875] RBP: 00007f7079918090 R08: 0000000000000000 R09: 0000000000000000 [ 812.884828][T25875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 812.884839][T25875] R13: 00007f707b938038 R14: 00007f707b937fa0 R15: 00007ffc93a17448 [ 812.884864][T25875] [ 813.167184][T25684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 813.177745][T25684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 813.189794][T25684] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 813.215872][T23242] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 813.226470][T23242] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 813.263488][T23242] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 813.294020][T23242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 813.313353][T25684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 813.375916][T25684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 813.400980][T25684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 813.411815][T25684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 813.422632][T25684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 813.434416][T25684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 813.446243][T25684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 813.457821][T25684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 813.474160][T25684] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 813.486396][T25684] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.502520][T25684] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.517751][T25684] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.533367][T25684] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.565799][T23251] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 813.595167][T23251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 813.658640][T25895] netlink: 'syz.2.7745': attribute type 10 has an invalid length. [ 814.050230][T23251] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 814.074962][T23251] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 814.141888][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 814.193464][T23251] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 814.236905][T23251] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 814.273887][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 814.301288][T25912] FAULT_INJECTION: forcing a failure. [ 814.301288][T25912] name failslab, interval 1, probability 0, space 0, times 0 [ 814.381372][T25912] CPU: 1 PID: 25912 Comm: syz.2.7753 Not tainted syzkaller #0 [ 814.388867][T25912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 814.398924][T25912] Call Trace: [ 814.402204][T25912] [ 814.405129][T25912] dump_stack_lvl+0x188/0x250 [ 814.409811][T25912] ? show_regs_print_info+0x20/0x20 [ 814.415007][T25912] ? load_image+0x400/0x400 [ 814.419513][T25912] ? __might_sleep+0xf0/0xf0 [ 814.424112][T25912] ? __lock_acquire+0x7d10/0x7d10 [ 814.429139][T25912] ? verify_lock_unused+0x140/0x140 [ 814.434346][T25912] should_fail+0x38c/0x4c0 [ 814.438779][T25912] should_failslab+0x5/0x20 [ 814.443277][T25912] slab_pre_alloc_hook+0x51/0xc0 [ 814.448218][T25912] __kmalloc+0x6b/0x330 [ 814.452368][T25912] ? bpf_test_init+0xf8/0x1b0 [ 814.457044][T25912] bpf_test_init+0xf8/0x1b0 [ 814.461544][T25912] bpf_prog_test_run_xdp+0x1cb/0x920 [ 814.466827][T25912] ? dev_put+0x70/0x70 [ 814.470897][T25912] ? dev_put+0x70/0x70 [ 814.474958][T25912] bpf_prog_test_run+0x31e/0x390 [ 814.479893][T25912] __sys_bpf+0x5a5/0x6f0 [ 814.484131][T25912] ? bpf_link_show_fdinfo+0x380/0x380 [ 814.489503][T25912] ? vtime_user_exit+0x2c8/0x3e0 [ 814.494444][T25912] __x64_sys_bpf+0x78/0x90 [ 814.498870][T25912] do_syscall_64+0x4c/0xa0 [ 814.503291][T25912] ? clear_bhb_loop+0x30/0x80 [ 814.507964][T25912] ? clear_bhb_loop+0x30/0x80 [ 814.512633][T25912] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 814.518514][T25912] RIP: 0033:0x7f707b6bceb9 [ 814.522931][T25912] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 814.542529][T25912] RSP: 002b:00007f7079918028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 814.550943][T25912] RAX: ffffffffffffffda RBX: 00007f707b937fa0 RCX: 00007f707b6bceb9 [ 814.558906][T25912] RDX: 0000000000000028 RSI: 0000200000000440 RDI: 000000000000000a [ 814.566870][T25912] RBP: 00007f7079918090 R08: 0000000000000000 R09: 0000000000000000 [ 814.574828][T25912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 814.582796][T25912] R13: 00007f707b938038 R14: 00007f707b937fa0 R15: 00007ffc93a17448 [ 814.590791][T25912] [ 814.655162][T25920] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 814.867824][ T7061] Bluetooth: hci4: command 0x0419 tx timeout [ 815.955246][T25959] netlink: 'syz.2.7767': attribute type 2 has an invalid length. [ 816.011762][T25959] netlink: 'syz.2.7767': attribute type 1 has an invalid length. [ 816.060889][T25959] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.7767'. [ 816.135657][T25958] FAULT_INJECTION: forcing a failure. [ 816.135657][T25958] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 816.160845][T25958] CPU: 0 PID: 25958 Comm: syz.1.7768 Not tainted syzkaller #0 [ 816.168334][T25958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 816.178394][T25958] Call Trace: [ 816.181679][T25958] [ 816.184614][T25958] dump_stack_lvl+0x188/0x250 [ 816.189307][T25958] ? show_regs_print_info+0x20/0x20 [ 816.194520][T25958] ? load_image+0x400/0x400 [ 816.199032][T25958] ? __lock_acquire+0x7d10/0x7d10 [ 816.204065][T25958] ? bpf_test_run+0x78e/0x800 [ 816.208747][T25958] should_fail+0x38c/0x4c0 [ 816.213205][T25958] _copy_to_user+0x2e/0x130 [ 816.217715][T25958] bpf_test_finish+0x215/0x2f0 [ 816.222489][T25958] ? convert_skb_to___skb+0x360/0x360 [ 816.227870][T25958] ? __build_skb+0x1e2/0x2e0 [ 816.232475][T25958] ? convert_skb_to___skb+0x1ff/0x360 [ 816.237856][T25958] bpf_prog_test_run_skb+0xb8f/0x1180 [ 816.243250][T25958] ? cpu_online+0x60/0x60 [ 816.247589][T25958] bpf_prog_test_run+0x31e/0x390 [ 816.252534][T25958] __sys_bpf+0x5a5/0x6f0 [ 816.256789][T25958] ? bpf_link_show_fdinfo+0x380/0x380 [ 816.262182][T25958] ? vtime_user_exit+0x2c8/0x3e0 [ 816.267132][T25958] __x64_sys_bpf+0x78/0x90 [ 816.271566][T25958] do_syscall_64+0x4c/0xa0 [ 816.275984][T25958] ? clear_bhb_loop+0x30/0x80 [ 816.280749][T25958] ? clear_bhb_loop+0x30/0x80 [ 816.285431][T25958] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 816.291325][T25958] RIP: 0033:0x7f7447704eb9 [ 816.295745][T25958] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 816.315359][T25958] RSP: 002b:00007f7445960028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 816.323784][T25958] RAX: ffffffffffffffda RBX: 00007f744797ffa0 RCX: 00007f7447704eb9 [ 816.331767][T25958] RDX: 0000000000000048 RSI: 0000200000000780 RDI: 000000000000000a [ 816.339748][T25958] RBP: 00007f7445960090 R08: 0000000000000000 R09: 0000000000000000 [ 816.347723][T25958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 816.355683][T25958] R13: 00007f7447980038 R14: 00007f744797ffa0 R15: 00007ffe82a25af8 [ 816.363663][T25958] [ 816.388881][T25968] delete_channel: no stack [ 816.429272][T25969] netlink: 'syz.5.7771': attribute type 21 has an invalid length. [ 816.459056][T25969] netlink: 164 bytes leftover after parsing attributes in process `syz.5.7771'. [ 816.670081][T25993] netlink: 'syz.2.7782': attribute type 6 has an invalid length. [ 816.758400][T25993] netlink: 140 bytes leftover after parsing attributes in process `syz.2.7782'. [ 816.899037][T25998] netlink: 'syz.1.7781': attribute type 27 has an invalid length. [ 816.931429][T25998] netlink: 'syz.1.7781': attribute type 4 has an invalid length. [ 816.939217][T25998] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7781'. [ 817.316069][T26005] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.7785'. [ 818.069847][T26031] netlink: 'syz.1.7796': attribute type 10 has an invalid length. [ 818.109631][T26036] FAULT_INJECTION: forcing a failure. [ 818.109631][T26036] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 818.188613][T26036] CPU: 1 PID: 26036 Comm: syz.5.7799 Not tainted syzkaller #0 [ 818.196109][T26036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 818.206166][T26036] Call Trace: [ 818.209444][T26036] [ 818.212368][T26036] dump_stack_lvl+0x188/0x250 [ 818.217050][T26036] ? show_regs_print_info+0x20/0x20 [ 818.222254][T26036] ? load_image+0x400/0x400 [ 818.226769][T26036] ? __lock_acquire+0x7d10/0x7d10 [ 818.231815][T26036] should_fail+0x38c/0x4c0 [ 818.236238][T26036] _copy_from_user+0x2e/0x170 [ 818.240917][T26036] bpf_test_init+0x136/0x1b0 [ 818.245505][T26036] bpf_prog_test_run_xdp+0x1cb/0x920 [ 818.250792][T26036] ? dev_put+0x70/0x70 [ 818.254862][T26036] ? dev_put+0x70/0x70 [ 818.258934][T26036] bpf_prog_test_run+0x31e/0x390 [ 818.263867][T26036] __sys_bpf+0x5a5/0x6f0 [ 818.268105][T26036] ? bpf_link_show_fdinfo+0x380/0x380 [ 818.273480][T26036] ? vtime_user_exit+0x2c8/0x3e0 [ 818.278414][T26036] __x64_sys_bpf+0x78/0x90 [ 818.282822][T26036] do_syscall_64+0x4c/0xa0 [ 818.287233][T26036] ? clear_bhb_loop+0x30/0x80 [ 818.291906][T26036] ? clear_bhb_loop+0x30/0x80 [ 818.296571][T26036] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 818.302452][T26036] RIP: 0033:0x7f7728670eb9 [ 818.306880][T26036] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 818.326475][T26036] RSP: 002b:00007f77268cc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 818.334881][T26036] RAX: ffffffffffffffda RBX: 00007f77288ebfa0 RCX: 00007f7728670eb9 [ 818.342839][T26036] RDX: 0000000000000028 RSI: 0000200000000440 RDI: 000000000000000a [ 818.350797][T26036] RBP: 00007f77268cc090 R08: 0000000000000000 R09: 0000000000000000 [ 818.358762][T26036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 818.366721][T26036] R13: 00007f77288ec038 R14: 00007f77288ebfa0 R15: 00007fffd6101998 [ 818.374697][T26036] [ 818.654467][T26062] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.7808'. [ 819.435075][T26104] netlink: set zone limit has 8 unknown bytes [ 819.491735][T26107] netlink: 'syz.3.7823': attribute type 21 has an invalid length. [ 819.516628][T26107] netlink: 164 bytes leftover after parsing attributes in process `syz.3.7823'. [ 819.756814][T26116] netlink: 'syz.3.7829': attribute type 6 has an invalid length. [ 819.790698][T26116] netlink: 140 bytes leftover after parsing attributes in process `syz.3.7829'. [ 819.848625][T26121] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.7831'. [ 819.871156][T26111] FAULT_INJECTION: forcing a failure. [ 819.871156][T26111] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 819.928910][T26111] CPU: 0 PID: 26111 Comm: syz.4.7827 Not tainted syzkaller #0 [ 819.936404][T26111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 819.946462][T26111] Call Trace: [ 819.949745][T26111] [ 819.952679][T26111] dump_stack_lvl+0x188/0x250 [ 819.957370][T26111] ? show_regs_print_info+0x20/0x20 [ 819.962578][T26111] ? lockdep_hardirqs_on+0x94/0x140 [ 819.967785][T26111] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 819.973964][T26111] should_fail+0x38c/0x4c0 [ 819.978392][T26111] _copy_to_user+0x2e/0x130 [ 819.982904][T26111] simple_read_from_buffer+0xe3/0x150 [ 819.988287][T26111] proc_fail_nth_read+0x1a6/0x220 [ 819.993324][T26111] ? proc_fault_inject_write+0x310/0x310 [ 819.998970][T26111] ? fsnotify_perm+0x1b6/0x560 [ 820.003749][T26111] ? fsnotify_perm+0x254/0x560 [ 820.008518][T26111] ? proc_fault_inject_write+0x310/0x310 [ 820.014150][T26111] vfs_read+0x301/0xd60 [ 820.018310][T26111] ? lock_chain_count+0x20/0x20 [ 820.023165][T26111] ? kernel_read+0x1e0/0x1e0 [ 820.027750][T26111] ? lockdep_hardirqs_on+0x94/0x140 [ 820.032954][T26111] ? __fdget_pos+0x24b/0x370 [ 820.037550][T26111] ? mutex_lock_nested+0x17/0x20 [ 820.042487][T26111] ? __fdget_pos+0x2bf/0x370 [ 820.047068][T26111] ? ksys_read+0x71/0x260 [ 820.051395][T26111] ksys_read+0x152/0x260 [ 820.055635][T26111] ? vfs_write+0xd60/0xd60 [ 820.060045][T26111] ? syscall_enter_from_user_mode+0x2a/0x70 [ 820.065940][T26111] do_syscall_64+0x4c/0xa0 [ 820.070347][T26111] ? clear_bhb_loop+0x30/0x80 [ 820.075016][T26111] ? clear_bhb_loop+0x30/0x80 [ 820.079684][T26111] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 820.085569][T26111] RIP: 0033:0x7fe34825978e [ 820.090000][T26111] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 820.109596][T26111] RSP: 002b:00007fe3464f3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 820.118011][T26111] RAX: ffffffffffffffda RBX: 00007fe3464f46c0 RCX: 00007fe34825978e [ 820.125987][T26111] RDX: 000000000000000f RSI: 00007fe3464f40a0 RDI: 0000000000000006 [ 820.133960][T26111] RBP: 00007fe3464f4090 R08: 0000000000000000 R09: 0000000000000000 [ 820.141923][T26111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 820.149884][T26111] R13: 00007fe348514038 R14: 00007fe348513fa0 R15: 00007ffefdc3c8f8 [ 820.157875][T26111] [ 820.222478][T26134] FAULT_INJECTION: forcing a failure. [ 820.222478][T26134] name failslab, interval 1, probability 0, space 0, times 0 [ 820.251553][T26134] CPU: 0 PID: 26134 Comm: syz.1.7835 Not tainted syzkaller #0 [ 820.259060][T26134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 820.269124][T26134] Call Trace: [ 820.272407][T26134] [ 820.275338][T26134] dump_stack_lvl+0x188/0x250 [ 820.280029][T26134] ? show_regs_print_info+0x20/0x20 [ 820.285235][T26134] ? load_image+0x400/0x400 [ 820.289765][T26134] should_fail+0x38c/0x4c0 [ 820.294199][T26134] should_failslab+0x5/0x20 [ 820.298706][T26134] slab_pre_alloc_hook+0x51/0xc0 [ 820.303653][T26134] kmem_cache_alloc_trace+0x47/0x2a0 [ 820.308941][T26134] ? sctp_add_bind_addr+0x89/0x350 [ 820.314070][T26134] sctp_add_bind_addr+0x89/0x350 [ 820.319023][T26134] sctp_copy_local_addr_list+0x2dd/0x4a0 [ 820.324673][T26134] ? sctp_do_8_2_transport_strike+0x840/0x840 [ 820.330745][T26134] ? sctp_v4_is_any+0x31/0x50 [ 820.335419][T26134] ? sctp_copy_one_addr+0x93/0x660 [ 820.340541][T26134] sctp_bind_addr_copy+0xaf/0x3c0 [ 820.345572][T26134] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 820.351914][T26134] sctp_connect_new_asoc+0x2f5/0x6a0 [ 820.357210][T26134] ? __sctp_connect+0xd80/0xd80 [ 820.362060][T26134] ? __local_bh_enable_ip+0x136/0x1c0 [ 820.367432][T26134] ? _local_bh_enable+0xa0/0xa0 [ 820.372283][T26134] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 820.377831][T26134] ? security_sctp_bind_connect+0x85/0xb0 [ 820.383566][T26134] sctp_sendmsg+0x158d/0x2900 [ 820.388265][T26134] ? aa_sk_perm+0x7dc/0x910 [ 820.392773][T26134] ? sctp_getsockopt+0x8a0/0x8a0 [ 820.397718][T26134] ? aa_af_perm+0x340/0x340 [ 820.402220][T26134] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 820.408642][T26134] ? sock_rps_record_flow+0x17/0x3b0 [ 820.413936][T26134] ? inet_sendmsg+0x78/0x2f0 [ 820.418529][T26134] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 820.423813][T26134] ? security_socket_sendmsg+0x7c/0xa0 [ 820.429255][T26134] ? inet_send_prepare+0x260/0x260 [ 820.434348][T26134] ____sys_sendmsg+0x5b7/0x8f0 [ 820.439111][T26134] ? __sys_sendmsg_sock+0x30/0x30 [ 820.444119][T26134] ? import_iovec+0x6f/0xa0 [ 820.448609][T26134] ___sys_sendmsg+0x236/0x2e0 [ 820.453275][T26134] ? __sys_sendmsg+0x2a0/0x2a0 [ 820.458054][T26134] __se_sys_sendmsg+0x1af/0x290 [ 820.462892][T26134] ? __x64_sys_sendmsg+0x80/0x80 [ 820.467824][T26134] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 820.473810][T26134] ? lockdep_hardirqs_on+0x94/0x140 [ 820.479010][T26134] do_syscall_64+0x4c/0xa0 [ 820.483405][T26134] ? clear_bhb_loop+0x30/0x80 [ 820.488064][T26134] ? clear_bhb_loop+0x30/0x80 [ 820.492724][T26134] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 820.498609][T26134] RIP: 0033:0x7f7447704eb9 [ 820.503010][T26134] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 820.522619][T26134] RSP: 002b:00007f7445960028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 820.531039][T26134] RAX: ffffffffffffffda RBX: 00007f744797ffa0 RCX: 00007f7447704eb9 [ 820.539006][T26134] RDX: 00000000040080d1 RSI: 0000200000000140 RDI: 0000000000000003 [ 820.546956][T26134] RBP: 00007f7445960090 R08: 0000000000000000 R09: 0000000000000000 [ 820.554915][T26134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 820.562886][T26134] R13: 00007f7447980038 R14: 00007f744797ffa0 R15: 00007ffe82a25af8 [ 820.570872][T26134] [ 821.222681][T26179] netlink: 'syz.3.7850': attribute type 1 has an invalid length. [ 821.346199][T26179] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.7850'. [ 821.550373][T26186] netlink: 'syz.5.7852': attribute type 10 has an invalid length. [ 822.103311][T26217] netlink: 'syz.5.7865': attribute type 21 has an invalid length. [ 822.129332][T26217] netlink: 164 bytes leftover after parsing attributes in process `syz.5.7865'. [ 822.166806][T26219] netlink: 14 bytes leftover after parsing attributes in process `syz.2.7864'. [ 822.282272][T26219] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 822.343260][T26219] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 822.394296][T26219] bond0 (unregistering): Released all slaves [ 822.809766][T26246] netlink: 'syz.5.7873': attribute type 6 has an invalid length. [ 822.871166][T26246] netlink: 140 bytes leftover after parsing attributes in process `syz.5.7873'. [ 823.084276][T26257] FAULT_INJECTION: forcing a failure. [ 823.084276][T26257] name failslab, interval 1, probability 0, space 0, times 0 [ 823.126408][T26257] CPU: 0 PID: 26257 Comm: syz.1.7879 Not tainted syzkaller #0 [ 823.133898][T26257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 823.137349][T26253] FAULT_INJECTION: forcing a failure. [ 823.137349][T26253] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 823.143945][T26257] Call Trace: [ 823.143955][T26257] [ 823.143962][T26257] dump_stack_lvl+0x188/0x250 [ 823.143990][T26257] ? show_regs_print_info+0x20/0x20 [ 823.144009][T26257] ? load_image+0x400/0x400 [ 823.144040][T26257] should_fail+0x38c/0x4c0 [ 823.144066][T26257] should_failslab+0x5/0x20 [ 823.144083][T26257] slab_pre_alloc_hook+0x51/0xc0 [ 823.144103][T26257] kmem_cache_alloc_trace+0x47/0x2a0 [ 823.144119][T26257] ? sctp_add_bind_addr+0x89/0x350 [ 823.144143][T26257] sctp_add_bind_addr+0x89/0x350 [ 823.144167][T26257] sctp_copy_local_addr_list+0x2dd/0x4a0 [ 823.144193][T26257] ? sctp_do_8_2_transport_strike+0x840/0x840 [ 823.218445][T26257] ? sctp_v4_is_any+0x31/0x50 [ 823.223151][T26257] ? sctp_copy_one_addr+0x93/0x660 [ 823.228266][T26257] sctp_bind_addr_copy+0xaf/0x3c0 [ 823.233293][T26257] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 823.239627][T26257] sctp_connect_new_asoc+0x2f5/0x6a0 [ 823.244917][T26257] ? __sctp_connect+0xd80/0xd80 [ 823.249766][T26257] ? __local_bh_enable_ip+0x136/0x1c0 [ 823.255142][T26257] ? _local_bh_enable+0xa0/0xa0 [ 823.259997][T26257] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 823.265542][T26257] ? security_sctp_bind_connect+0x85/0xb0 [ 823.271266][T26257] sctp_sendmsg+0x158d/0x2900 [ 823.275966][T26257] ? aa_sk_perm+0x7dc/0x910 [ 823.280478][T26257] ? sctp_getsockopt+0x8a0/0x8a0 [ 823.285444][T26257] ? aa_af_perm+0x340/0x340 [ 823.289954][T26257] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 823.296376][T26257] ? sock_rps_record_flow+0x17/0x3b0 [ 823.301671][T26257] ? inet_sendmsg+0x78/0x2f0 [ 823.306270][T26257] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 823.311653][T26257] ? security_socket_sendmsg+0x7c/0xa0 [ 823.317113][T26257] ? inet_send_prepare+0x260/0x260 [ 823.322226][T26257] ____sys_sendmsg+0x5b7/0x8f0 [ 823.327002][T26257] ? __sys_sendmsg_sock+0x30/0x30 [ 823.332039][T26257] ? import_iovec+0x6f/0xa0 [ 823.336543][T26257] ___sys_sendmsg+0x236/0x2e0 [ 823.341223][T26257] ? __sys_sendmsg+0x2a0/0x2a0 [ 823.346006][T26257] ? trace_event_raw_event_lock+0x270/0x270 [ 823.351895][T26257] ? vfs_write+0x8b2/0xd60 [ 823.356335][T26257] __se_sys_sendmsg+0x1af/0x290 [ 823.361188][T26257] ? __x64_sys_sendmsg+0x80/0x80 [ 823.366125][T26257] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 823.372125][T26257] ? lockdep_hardirqs_on+0x94/0x140 [ 823.377327][T26257] do_syscall_64+0x4c/0xa0 [ 823.381742][T26257] ? clear_bhb_loop+0x30/0x80 [ 823.386416][T26257] ? clear_bhb_loop+0x30/0x80 [ 823.391094][T26257] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 823.396983][T26257] RIP: 0033:0x7f7447704eb9 [ 823.401401][T26257] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 823.421003][T26257] RSP: 002b:00007f7445960028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 823.429416][T26257] RAX: ffffffffffffffda RBX: 00007f744797ffa0 RCX: 00007f7447704eb9 [ 823.437388][T26257] RDX: 00000000040080d1 RSI: 0000200000000140 RDI: 0000000000000003 [ 823.445359][T26257] RBP: 00007f7445960090 R08: 0000000000000000 R09: 0000000000000000 [ 823.453328][T26257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 823.461296][T26257] R13: 00007f7447980038 R14: 00007f744797ffa0 R15: 00007ffe82a25af8 [ 823.469282][T26257] [ 823.472309][T26253] CPU: 1 PID: 26253 Comm: syz.2.7877 Not tainted syzkaller #0 [ 823.479776][T26253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 823.489831][T26253] Call Trace: [ 823.493110][T26253] [ 823.496043][T26253] dump_stack_lvl+0x188/0x250 [ 823.500730][T26253] ? show_regs_print_info+0x20/0x20 [ 823.505938][T26253] ? load_image+0x400/0x400 [ 823.510450][T26253] ? __lock_acquire+0x7d10/0x7d10 [ 823.515463][T26253] ? lock_release+0x5a4/0x8a0 [ 823.520124][T26253] should_fail+0x38c/0x4c0 [ 823.524534][T26253] _copy_from_user+0x2e/0x170 [ 823.529205][T26253] __copy_msghdr_from_user+0xc9/0x630 [ 823.534575][T26253] ? verify_lock_unused+0x140/0x140 [ 823.539760][T26253] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 823.545035][T26253] ___sys_sendmsg+0x19a/0x2e0 [ 823.549701][T26253] ? __sys_sendmsg+0x2a0/0x2a0 [ 823.554454][T26253] ? trace_event_raw_event_lock+0x270/0x270 [ 823.560325][T26253] ? vfs_write+0x8b2/0xd60 [ 823.564736][T26253] __se_sys_sendmsg+0x1af/0x290 [ 823.569569][T26253] ? __x64_sys_sendmsg+0x80/0x80 [ 823.574485][T26253] ? lockdep_hardirqs_on+0x94/0x140 [ 823.579678][T26253] do_syscall_64+0x4c/0xa0 [ 823.584072][T26253] ? clear_bhb_loop+0x30/0x80 [ 823.588724][T26253] ? clear_bhb_loop+0x30/0x80 [ 823.593382][T26253] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 823.599253][T26253] RIP: 0033:0x7f707b6bceb9 [ 823.603650][T26253] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 823.623245][T26253] RSP: 002b:00007f7079918028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 823.631651][T26253] RAX: ffffffffffffffda RBX: 00007f707b937fa0 RCX: 00007f707b6bceb9 [ 823.639606][T26253] RDX: 00000000000408c4 RSI: 00002000000000c0 RDI: 000000000000000a [ 823.647561][T26253] RBP: 00007f7079918090 R08: 0000000000000000 R09: 0000000000000000 [ 823.655513][T26253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 823.663471][T26253] R13: 00007f707b938038 R14: 00007f707b937fa0 R15: 00007ffc93a17448 [ 823.671453][T26253] [ 824.364761][T26290] netlink: 'syz.3.7892': attribute type 10 has an invalid length. [ 825.054190][T26308] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.7898'. [ 825.074969][T26308] netlink: 16126 bytes leftover after parsing attributes in process `syz.2.7898'. [ 825.311867][T26323] netlink: 'syz.4.7904': attribute type 2 has an invalid length. [ 825.319645][T26323] netlink: 'syz.4.7904': attribute type 8 has an invalid length. [ 825.332254][T26323] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7904'. [ 825.355340][T26320] netlink: 14 bytes leftover after parsing attributes in process `syz.5.7902'. [ 825.530517][T26320] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 825.595855][T26320] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 825.656402][T26320] bond0 (unregistering): Released all slaves [ 825.696881][T26333] netlink: 'syz.2.7905': attribute type 21 has an invalid length. [ 825.717368][T26333] netlink: 164 bytes leftover after parsing attributes in process `syz.2.7905'. [ 825.910875][ T7057] Bluetooth: hci0: command 0x0406 tx timeout [ 825.920352][T26340] netlink: 'syz.4.7909': attribute type 28 has an invalid length. [ 826.022717][T26342] netlink: 'syz.5.7910': attribute type 6 has an invalid length. [ 826.030482][T26342] netlink: 140 bytes leftover after parsing attributes in process `syz.5.7910'. [ 827.654423][T26370] netlink: 14 bytes leftover after parsing attributes in process `syz.3.7921'. [ 827.945852][T26370] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 828.024733][T26370] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 828.108570][T26370] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 828.172278][T26370] bond0 (unregistering): Released all slaves [ 828.572090][T26399] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.7928'. [ 829.725596][T23251] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 831.790530][T26432] device syzkaller0 entered promiscuous mode [ 831.839142][T26450] netlink: 'syz.1.7949': attribute type 21 has an invalid length. [ 831.854398][T26450] netlink: 164 bytes leftover after parsing attributes in process `syz.1.7949'. [ 832.105093][T26459] mac80211_hwsim hwsim41 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 832.757196][T26476] netlink: 'syz.4.7960': attribute type 10 has an invalid length. [ 834.108804][T26531] device wg2 entered promiscuous mode [ 834.448900][T26546] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.7983'. [ 834.889376][T26561] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7988'. [ 834.919319][T26561] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7988'. [ 835.021639][T26561] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7988'. [ 835.320445][T26575] delete_channel: no stack [ 836.365651][T26606] FAULT_INJECTION: forcing a failure. [ 836.365651][T26606] name failslab, interval 1, probability 0, space 0, times 0 [ 836.441987][T26606] CPU: 1 PID: 26606 Comm: syz.2.8007 Not tainted syzkaller #0 [ 836.449489][T26606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 836.459546][T26606] Call Trace: [ 836.462824][T26606] [ 836.465751][T26606] dump_stack_lvl+0x188/0x250 [ 836.470431][T26606] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 836.476586][T26606] ? show_regs_print_info+0x20/0x20 [ 836.481798][T26606] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 836.487969][T26606] should_fail+0x38c/0x4c0 [ 836.492399][T26606] should_failslab+0x5/0x20 [ 836.496905][T26606] slab_pre_alloc_hook+0x51/0xc0 [ 836.501844][T26606] kmem_cache_alloc_node_trace+0x4a/0x300 [ 836.507564][T26606] ? __get_vm_area_node+0x119/0x2d0 [ 836.512765][T26606] ? lock_chain_count+0x20/0x20 [ 836.517623][T26606] __get_vm_area_node+0x119/0x2d0 [ 836.522650][T26606] __vmalloc_node_range+0xef/0x8b0 [ 836.527757][T26606] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 836.533306][T26606] ? rcu_is_watching+0x11/0xa0 [ 836.538068][T26606] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 836.544228][T26606] ? lockdep_hardirqs_on+0x94/0x140 [ 836.549427][T26606] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 836.554973][T26606] __vmalloc+0x76/0x80 [ 836.559041][T26606] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 836.564592][T26606] bpf_prog_alloc_no_stats+0x36/0x2c0 [ 836.569975][T26606] bpf_prog_alloc+0x1a/0x1e0 [ 836.574573][T26606] bpf_prog_load+0x7c6/0x1510 [ 836.579262][T26606] ? map_freeze+0x350/0x350 [ 836.583762][T26606] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 836.589918][T26606] ? lockdep_hardirqs_on+0x94/0x140 [ 836.595133][T26606] ? security_bpf+0x55/0xa0 [ 836.599644][T26606] ? bpf_lsm_bpf+0x5/0x10 [ 836.603984][T26606] ? security_bpf+0x7a/0xa0 [ 836.608500][T26606] __sys_bpf+0x532/0x6f0 [ 836.612752][T26606] ? bpf_link_show_fdinfo+0x380/0x380 [ 836.618147][T26606] __x64_sys_bpf+0x78/0x90 [ 836.622568][T26606] do_syscall_64+0x4c/0xa0 [ 836.626986][T26606] ? clear_bhb_loop+0x30/0x80 [ 836.631675][T26606] ? clear_bhb_loop+0x30/0x80 [ 836.636367][T26606] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 836.642261][T26606] RIP: 0033:0x7f707b6bceb9 [ 836.646685][T26606] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 836.666301][T26606] RSP: 002b:00007f7079918028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 836.674734][T26606] RAX: ffffffffffffffda RBX: 00007f707b937fa0 RCX: 00007f707b6bceb9 [ 836.682713][T26606] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 836.690687][T26606] RBP: 00007f7079918090 R08: 0000000000000000 R09: 0000000000000000 [ 836.698665][T26606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 836.706644][T26606] R13: 00007f707b938038 R14: 00007f707b937fa0 R15: 00007ffc93a17448 [ 836.714638][T26606] [ 837.160941][T26606] syz.2.8007: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 837.269145][T26606] CPU: 0 PID: 26606 Comm: syz.2.8007 Not tainted syzkaller #0 [ 837.276648][T26606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 837.286712][T26606] Call Trace: [ 837.289996][T26606] [ 837.292934][T26606] dump_stack_lvl+0x188/0x250 [ 837.297618][T26606] ? rcu_lock_release+0x5/0x20 [ 837.302395][T26606] ? show_regs_print_info+0x20/0x20 [ 837.307607][T26606] ? load_image+0x400/0x400 [ 837.312140][T26606] warn_alloc+0x243/0x320 [ 837.316484][T26606] ? zone_watermark_ok_safe+0x240/0x240 [ 837.322049][T26606] ? __get_vm_area_node+0x2b5/0x2d0 [ 837.327270][T26606] __vmalloc_node_range+0x2b1/0x8b0 [ 837.332487][T26606] ? rcu_is_watching+0x11/0xa0 [ 837.337267][T26606] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 837.343434][T26606] ? lockdep_hardirqs_on+0x94/0x140 [ 837.348650][T26606] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 837.354208][T26606] __vmalloc+0x76/0x80 [ 837.358296][T26606] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 837.363852][T26606] bpf_prog_alloc_no_stats+0x36/0x2c0 [ 837.369238][T26606] bpf_prog_alloc+0x1a/0x1e0 [ 837.373842][T26606] bpf_prog_load+0x7c6/0x1510 [ 837.378550][T26606] ? map_freeze+0x350/0x350 [ 837.383069][T26606] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 837.389245][T26606] ? lockdep_hardirqs_on+0x94/0x140 [ 837.394474][T26606] ? security_bpf+0x55/0xa0 [ 837.398992][T26606] ? bpf_lsm_bpf+0x5/0x10 [ 837.403332][T26606] ? security_bpf+0x7a/0xa0 [ 837.407849][T26606] __sys_bpf+0x532/0x6f0 [ 837.412163][T26606] ? bpf_link_show_fdinfo+0x380/0x380 [ 837.417568][T26606] __x64_sys_bpf+0x78/0x90 [ 837.421999][T26606] do_syscall_64+0x4c/0xa0 [ 837.426426][T26606] ? clear_bhb_loop+0x30/0x80 [ 837.431105][T26606] ? clear_bhb_loop+0x30/0x80 [ 837.435790][T26606] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 837.441695][T26606] RIP: 0033:0x7f707b6bceb9 [ 837.446119][T26606] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 837.465733][T26606] RSP: 002b:00007f7079918028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 837.474162][T26606] RAX: ffffffffffffffda RBX: 00007f707b937fa0 RCX: 00007f707b6bceb9 [ 837.482162][T26606] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 837.490143][T26606] RBP: 00007f7079918090 R08: 0000000000000000 R09: 0000000000000000 [ 837.498256][T26606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 837.506236][T26606] R13: 00007f707b938038 R14: 00007f707b937fa0 R15: 00007ffc93a17448 [ 837.514228][T26606] [ 837.601378][T26606] Mem-Info: [ 837.604539][T26606] active_anon:284 inactive_anon:8440 isolated_anon:0 [ 837.604539][T26606] active_file:24287 inactive_file:37344 isolated_file:0 [ 837.604539][T26606] unevictable:768 dirty:364 writeback:0 [ 837.604539][T26606] slab_reclaimable:21275 slab_unreclaimable:99149 [ 837.604539][T26606] mapped:30170 shmem:1641 pagetables:705 bounce:0 [ 837.604539][T26606] kernel_misc_reclaimable:0 [ 837.604539][T26606] free:1363124 free_pcp:10073 free_cma:0 [ 837.663211][T23251] wlan1: Trigger new scan to find an IBSS to join [ 837.690887][T26606] Node 0 active_anon:1104kB inactive_anon:33452kB active_file:96944kB inactive_file:149376kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120724kB dirty:1456kB writeback:0kB shmem:4488kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11996kB pagetables:2920kB all_unreclaimable? no [ 837.811372][T26640] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.8020'. [ 837.928937][T26648] FAULT_INJECTION: forcing a failure. [ 837.928937][T26648] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 837.960849][T26648] CPU: 0 PID: 26648 Comm: syz.1.8021 Not tainted syzkaller #0 [ 837.968344][T26648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 837.978406][T26648] Call Trace: [ 837.981687][T26648] [ 837.984608][T26648] dump_stack_lvl+0x188/0x250 [ 837.989277][T26648] ? show_regs_print_info+0x20/0x20 [ 837.994463][T26648] ? load_image+0x400/0x400 [ 837.998954][T26648] ? __lock_acquire+0x7d10/0x7d10 [ 838.003982][T26648] should_fail+0x38c/0x4c0 [ 838.008406][T26648] _copy_from_user+0x2e/0x170 [ 838.013077][T26648] kstrtouint_from_user+0xd3/0x220 [ 838.018186][T26648] ? kstrtol_from_user+0x2a0/0x2a0 [ 838.023300][T26648] proc_fail_nth_write+0x8b/0x200 [ 838.028330][T26648] ? proc_fail_nth_read+0x220/0x220 [ 838.033516][T26648] ? common_file_perm+0x171/0x1c0 [ 838.038529][T26648] ? proc_fail_nth_read+0x220/0x220 [ 838.043721][T26648] vfs_write+0x30b/0xd60 [ 838.047972][T26648] ? file_end_write+0x250/0x250 [ 838.052824][T26648] ? __fget_files+0x40f/0x480 [ 838.057500][T26648] ? mutex_lock_nested+0x17/0x20 [ 838.062431][T26648] ? __fdget_pos+0x2bf/0x370 [ 838.067024][T26648] ? ksys_write+0x71/0x260 [ 838.071431][T26648] ksys_write+0x152/0x260 [ 838.075752][T26648] ? __ia32_sys_read+0x80/0x80 [ 838.080500][T26648] ? lockdep_hardirqs_on+0x94/0x140 [ 838.085683][T26648] do_syscall_64+0x4c/0xa0 [ 838.090087][T26648] ? clear_bhb_loop+0x30/0x80 [ 838.094746][T26648] ? clear_bhb_loop+0x30/0x80 [ 838.099405][T26648] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 838.105284][T26648] RIP: 0033:0x7f74476c578e [ 838.109693][T26648] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 838.129286][T26648] RSP: 002b:00007f744593efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 838.137684][T26648] RAX: ffffffffffffffda RBX: 00007f744593f6c0 RCX: 00007f74476c578e [ 838.145643][T26648] RDX: 0000000000000001 RSI: 00007f744593f0a0 RDI: 000000000000000f [ 838.153598][T26648] RBP: 00007f744593f090 R08: 0000000000000000 R09: 0000000000000000 [ 838.161553][T26648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 838.169505][T26648] R13: 00007f7447980128 R14: 00007f7447980090 R15: 00007ffe82a25af8 [ 838.177475][T26648] [ 838.182853][T26640] netlink: 8454 bytes leftover after parsing attributes in process `syz.3.8020'. [ 838.661387][T26606] Node 1 active_anon:32kB inactive_anon:508kB active_file:204kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2076kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 838.825330][T26606] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 838.937756][T26606] lowmem_reserve[]: 0 2539 2540 2540 2540 [ 838.970714][T26606] Node 0 DMA32 free:1512320kB min:34784kB low:43480kB high:52176kB reserved_highatomic:0KB active_anon:1104kB inactive_anon:33080kB active_file:96952kB inactive_file:149376kB unevictable:1536kB writepending:1460kB present:3129332kB managed:2606560kB mlocked:0kB bounce:0kB free_pcp:39528kB local_pcp:18936kB free_cma:0kB [ 839.079921][T26606] lowmem_reserve[]: 0 0 0 0 0 [ 839.088366][T26606] Node 0 Normal free:8kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:660kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:12kB free_cma:0kB [ 839.119070][T26606] lowmem_reserve[]: 0 0 0 0 0 [ 839.161955][T26606] Node 1 Normal free:3923392kB min:55108kB low:68884kB high:82660kB reserved_highatomic:0KB active_anon:32kB inactive_anon:508kB active_file:204kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:460kB local_pcp:0kB free_cma:0kB [ 839.278157][T26606] lowmem_reserve[]: 0 0 0 0 0 [ 839.305870][T26606] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 839.371835][T26606] Node 0 DMA32: 2424*4kB (UM) 1906*8kB (UM) 651*16kB (UME) 1949*32kB (UME) 1127*64kB (UME) 296*128kB (UM) 53*256kB (UM) 37*512kB (UM) 82*1024kB (UME) 36*2048kB (UM) 272*4096kB (UM) = 1512064kB [ 839.472878][T26606] Node 0 Normal: 2*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 839.511230][T26606] Node 1 Normal: 210*4kB (UME) 41*8kB (UME) 31*16kB (UME) 184*32kB (UME) 75*64kB (UME) 27*128kB (UME) 14*256kB (U) 3*512kB (U) 1*1024kB (U) 3*2048kB (UME) 951*4096kB (M) = 3923392kB [ 839.639109][T26606] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 839.720726][T26606] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 839.784488][T26606] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 839.802288][T26606] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 839.813803][T26670] netlink: 'syz.1.8031': attribute type 46 has an invalid length. [ 839.824285][T26606] 63274 total pagecache pages [ 839.829067][T26606] 0 pages in swap cache [ 839.835732][T26606] Swap cache stats: add 0, delete 0, find 0/0 [ 839.842234][T26606] Free swap = 124996kB [ 839.846619][T26606] Total swap = 124996kB [ 839.852418][T26606] 2097051 pages RAM [ 839.856228][T26606] 0 pages HighMem/MovableOnly [ 839.862184][T26606] 411488 pages reserved [ 839.866796][T26606] 0 pages cma reserved [ 840.175975][T26677] netlink: 'syz.2.8035': attribute type 6 has an invalid length. [ 840.226052][T26677] netlink: 140 bytes leftover after parsing attributes in process `syz.2.8035'. [ 840.351457][T26685] netlink: 'syz.4.8036': attribute type 41 has an invalid length. [ 840.359307][T26685] netlink: 'syz.4.8036': attribute type 4 has an invalid length. [ 840.486322][T26685] netlink: 152 bytes leftover after parsing attributes in process `syz.4.8036'. [ 840.559254][T26685] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 840.680442][T26695] netlink: 'syz.2.8040': attribute type 21 has an invalid length. [ 840.719609][T26695] IPv6: NLM_F_CREATE should be specified when creating new route [ 840.768853][T26695] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 840.776144][T26695] IPv6: NLM_F_CREATE should be set when creating new route [ 840.783440][T26695] IPv6: NLM_F_CREATE should be set when creating new route [ 840.904739][T26704] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.8043'. [ 841.023476][T26706] netlink: 'syz.2.8040': attribute type 21 has an invalid length. [ 841.044188][T26706] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 841.329110][T26711] netlink: 'syz.1.8044': attribute type 21 has an invalid length. [ 841.397723][T26711] netlink: 164 bytes leftover after parsing attributes in process `syz.1.8044'. [ 841.661407][ T4293] wlan1: Trigger new scan to find an IBSS to join [ 841.881485][T26718] netlink: 2451 bytes leftover after parsing attributes in process `syz.1.8046'. [ 842.256020][T26726] netlink: 'syz.4.8048': attribute type 10 has an invalid length. [ 842.551816][T26737] netlink: 'syz.2.8052': attribute type 21 has an invalid length. [ 842.602956][T26737] netlink: 'syz.2.8052': attribute type 1 has an invalid length. [ 842.749471][ T4293] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 844.968739][T26783] FAULT_INJECTION: forcing a failure. [ 844.968739][T26783] name failslab, interval 1, probability 0, space 0, times 0 [ 845.141717][T26783] CPU: 0 PID: 26783 Comm: syz.1.8066 Not tainted syzkaller #0 [ 845.149224][T26783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 845.159285][T26783] Call Trace: [ 845.162562][T26783] [ 845.165495][T26783] dump_stack_lvl+0x188/0x250 [ 845.170187][T26783] ? show_regs_print_info+0x20/0x20 [ 845.175390][T26783] ? load_image+0x400/0x400 [ 845.179899][T26783] ? __might_sleep+0xf0/0xf0 [ 845.184491][T26783] ? __lock_acquire+0x7d10/0x7d10 [ 845.189529][T26783] ? mark_lock+0x94/0x320 [ 845.193861][T26783] should_fail+0x38c/0x4c0 [ 845.198284][T26783] should_failslab+0x5/0x20 [ 845.202783][T26783] slab_pre_alloc_hook+0x51/0xc0 [ 845.207723][T26783] __kmalloc+0x6b/0x330 [ 845.211877][T26783] ? tomoyo_realpath_from_path+0x118/0x610 [ 845.217694][T26783] tomoyo_realpath_from_path+0x118/0x610 [ 845.223344][T26783] tomoyo_path_number_perm+0x242/0x660 [ 845.228802][T26783] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 845.235396][T26783] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 845.240914][T26783] security_file_ioctl+0x6c/0xa0 [ 845.245856][T26783] __se_sys_ioctl+0x48/0x170 [ 845.250453][T26783] do_syscall_64+0x4c/0xa0 [ 845.254879][T26783] ? clear_bhb_loop+0x30/0x80 [ 845.259555][T26783] ? clear_bhb_loop+0x30/0x80 [ 845.264247][T26783] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 845.270140][T26783] RIP: 0033:0x7f7447704eb9 [ 845.274558][T26783] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 845.294164][T26783] RSP: 002b:00007f7445960028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 845.302592][T26783] RAX: ffffffffffffffda RBX: 00007f744797ffa0 RCX: 00007f7447704eb9 [ 845.310573][T26783] RDX: 0000000000000000 RSI: 000000000000891b RDI: 0000000000000003 [ 845.318551][T26783] RBP: 00007f7445960090 R08: 0000000000000000 R09: 0000000000000000 [ 845.326525][T26783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 845.334503][T26783] R13: 00007f7447980038 R14: 00007f744797ffa0 R15: 00007ffe82a25af8 [ 845.342499][T26783] [ 845.472867][T26783] ERROR: Out of memory at tomoyo_realpath_from_path. [ 848.363330][T26805] netlink: 'syz.3.8075': attribute type 6 has an invalid length. [ 848.433521][T26805] netlink: 140 bytes leftover after parsing attributes in process `syz.3.8075'. [ 850.788693][T26815] chnl_net:caif_netlink_parms(): no params data found [ 851.475843][T26840] netlink: 'syz.2.8084': attribute type 4 has an invalid length. [ 851.611005][T26840] netlink: 'syz.2.8084': attribute type 1 has an invalid length. [ 851.798884][T26815] bridge0: port 1(bridge_slave_0) entered blocking state [ 851.823246][T26840] netlink: 191376 bytes leftover after parsing attributes in process `syz.2.8084'. [ 851.978256][T26815] bridge0: port 1(bridge_slave_0) entered disabled state [ 852.130903][T26815] device bridge_slave_0 entered promiscuous mode [ 852.144260][ T4246] Bluetooth: hci3: command 0x0409 tx timeout [ 852.223007][T26815] bridge0: port 2(bridge_slave_1) entered blocking state [ 852.243305][T26815] bridge0: port 2(bridge_slave_1) entered disabled state [ 853.030392][T26815] device bridge_slave_1 entered promiscuous mode [ 853.201377][T26841] netlink: 'syz.1.8085': attribute type 10 has an invalid length. [ 853.583140][T26815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 853.643382][T26815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 853.766232][T26815] team0: Port device team_slave_0 added [ 853.832517][T26815] team0: Port device team_slave_1 added [ 853.934242][T26815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 853.966581][T26815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 854.113851][T26815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 854.221058][ T4246] Bluetooth: hci3: command 0x041b tx timeout [ 854.276482][T26890] netlink: 'syz.4.8100': attribute type 3 has an invalid length. [ 854.317296][T26887] netlink: 'syz.1.8099': attribute type 13 has an invalid length. [ 854.356111][T26890] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.8100'. [ 854.552766][T26815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 854.562484][T26815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 854.766694][T26815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 856.301174][ T4253] Bluetooth: hci3: command 0x040f tx timeout [ 858.381785][ T4253] Bluetooth: hci3: command 0x0419 tx timeout [ 861.571694][ T4293] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 873.181063][ T4246] Bluetooth: hci6: command 0x0409 tx timeout [ 873.340992][ T4246] Bluetooth: hci7: command 0x0409 tx timeout [ 873.501215][ T4246] Bluetooth: hci8: command 0x0409 tx timeout [ 873.581067][ T4246] Bluetooth: hci9: command 0x0409 tx timeout [ 875.261117][ T4253] Bluetooth: hci6: command 0x041b tx timeout [ 875.420835][ T4253] Bluetooth: hci7: command 0x041b tx timeout [ 875.581252][ T4253] Bluetooth: hci8: command 0x041b tx timeout [ 875.662540][ T4253] Bluetooth: hci9: command 0x041b tx timeout [ 877.341284][ T4253] Bluetooth: hci6: command 0x040f tx timeout [ 877.500880][ T4253] Bluetooth: hci7: command 0x040f tx timeout [ 877.661103][ T4253] Bluetooth: hci8: command 0x040f tx timeout [ 877.741112][ T4253] Bluetooth: hci9: command 0x040f tx timeout [ 879.421212][ T4246] Bluetooth: hci6: command 0x0419 tx timeout [ 879.580879][ T4246] Bluetooth: hci7: command 0x0419 tx timeout [ 879.740971][ T4246] Bluetooth: hci8: command 0x0419 tx timeout [ 879.821144][ T4246] Bluetooth: hci9: command 0x0419 tx timeout [ 884.621872][ T4293] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 911.340980][ T4246] Bluetooth: hci10: command 0x0409 tx timeout [ 913.421016][ T4246] Bluetooth: hci10: command 0x041b tx timeout [ 915.500940][ T4246] Bluetooth: hci10: command 0x040f tx timeout [ 917.581029][ T4246] Bluetooth: hci10: command 0x0419 tx timeout [ 934.060874][ T4294] Bluetooth: hci11: command 0x0409 tx timeout [ 934.221126][ T4294] Bluetooth: hci12: command 0x0409 tx timeout [ 934.380990][ T4294] Bluetooth: hci13: command 0x0409 tx timeout [ 934.461328][ T4294] Bluetooth: hci14: command 0x0409 tx timeout [ 936.140975][ T4294] Bluetooth: hci11: command 0x041b tx timeout [ 936.300999][ T4294] Bluetooth: hci12: command 0x041b tx timeout [ 936.464471][ T4294] Bluetooth: hci13: command 0x041b tx timeout [ 936.541283][ T4294] Bluetooth: hci14: command 0x041b tx timeout [ 938.220980][ T4294] Bluetooth: hci11: command 0x040f tx timeout [ 938.381429][ T4294] Bluetooth: hci12: command 0x040f tx timeout [ 938.541056][ T4294] Bluetooth: hci13: command 0x040f tx timeout [ 938.621331][ T4294] Bluetooth: hci14: command 0x040f tx timeout [ 940.302806][ T4294] Bluetooth: hci11: command 0x0419 tx timeout [ 940.461055][ T4294] Bluetooth: hci12: command 0x0419 tx timeout [ 940.621228][ T4294] Bluetooth: hci13: command 0x0419 tx timeout [ 940.701295][ T4294] Bluetooth: hci14: command 0x0419 tx timeout [ 959.620643][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 959.627623][ C1] rcu: 0-....: (1 GPs behind) idle=bc3/1/0x4000000000000002 softirq=86606/86607 fqs=5242 [ 959.638717][ C1] (detected by 1, t=10502 jiffies, g=120969, q=3005) [ 959.645503][ C1] Sending NMI from CPU 1 to CPUs 0: [ 959.650712][ C0] NMI backtrace for cpu 0 [ 959.650722][ C0] CPU: 0 PID: 26490 Comm: syz.5.7964 Not tainted syzkaller #0 [ 959.650738][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 959.650747][ C0] RIP: 0010:__perf_event_account_interrupt+0x143/0x280 [ 959.650772][ C0] Code: 77 f1 0b 4c 89 ff 4c 89 e6 e8 79 b7 e0 ff 4d 39 e7 0f 83 f7 00 00 00 e8 8b b5 e0 ff 31 ed 49 bd 00 00 00 00 00 fc ff df eb 05 78 b5 e0 ff 4c 8d b3 00 01 00 00 4c 89 f0 48 c1 e8 03 42 80 3c [ 959.650783][ C0] RSP: 0018:ffffc900000074a8 EFLAGS: 00000046 [ 959.650796][ C0] RAX: ffffffff819869cc RBX: ffff888051315f80 RCX: ffff888023679dc0 [ 959.650807][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 959.650817][ C0] RBP: 0000000000000000 R08: ffff8880513163f3 R09: 1ffff1100a262c7e [ 959.650828][ C0] R10: dffffc0000000000 R11: ffffed100a262c7f R12: ffff888051316180 [ 959.650839][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff888051316188 [ 959.650849][ C0] FS: 00007f77268cc6c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 959.650863][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 959.650873][ C0] CR2: 0000000000000000 CR3: 0000000076f6c000 CR4: 00000000003506f0 [ 959.650883][ C0] Call Trace: [ 959.650890][ C0] [ 959.650903][ C0] __perf_event_overflow+0x99/0x530 [ 959.650926][ C0] perf_tp_event+0x383/0xbf0 [ 959.650947][ C0] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 959.650965][ C0] ? perf_tp_event+0xa92/0xbf0 [ 959.651024][ C0] perf_trace_run_bpf_submit+0xf3/0x1c0 [ 959.651046][ C0] perf_trace_preemptirq_template+0x2aa/0x360 [ 959.651066][ C0] ? asm_sysvec_irq_work+0x16/0x20 [ 959.651083][ C0] ? trace_event_raw_event_preemptirq_template+0x290/0x290 [ 959.651102][ C0] ? __irq_exit_rcu+0x147/0x230 [ 959.651123][ C0] ? irq_exit_rcu+0x20/0x20 [ 959.651142][ C0] ? asm_sysvec_irq_work+0x16/0x20 [ 959.651157][ C0] trace_irq_enable_rcuidle+0x108/0x180 [ 959.651175][ C0] trace_hardirqs_on+0x57/0x80 [ 959.651190][ C0] asm_sysvec_irq_work+0x16/0x20 [ 959.651204][ C0] RIP: 0010:rcu_read_unlock_special+0x7f/0x4a0 [ 959.651221][ C0] Code: eb 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 2b 42 c7 44 2b 08 f8 f3 f3 f3 65 44 8b 35 c2 ef 9c 7e 41 f7 c6 00 00 f0 00 74 40 <48> c7 44 24 20 0e 36 e0 45 4a c7 04 2b 00 00 00 00 42 c7 44 2b 08 [ 959.651233][ C0] RSP: 0018:ffffc900000079e0 EFLAGS: 00000206 [ 959.651245][ C0] RAX: 5067d2de92482c00 RBX: 1ffff92000000f40 RCX: 5067d2de92482c00 [ 959.651255][ C0] RDX: dffffc0000000000 RSI: ffffffff8a2b2780 RDI: ffffffff8a79f780 [ 959.651266][ C0] RBP: ffffc90000007ab0 R08: ffffffff901d1197 R09: 1ffffffff203a232 [ 959.651277][ C0] R10: dffffc0000000000 R11: fffffbfff203a233 R12: ffffffff8c322f00 [ 959.651288][ C0] R13: dffffc0000000000 R14: 0000000000000246 R15: 0000000000000001 [ 959.651319][ C0] ? __rcu_read_unlock+0xd0/0xd0 [ 959.651347][ C0] __rcu_read_unlock+0x78/0xd0 [ 959.651364][ C0] __neigh_notify+0x282/0x2e0 [ 959.651384][ C0] neigh_timer_handler+0xafa/0xfe0 [ 959.651405][ C0] ? neigh_release+0x80/0x80 [ 959.651421][ C0] call_timer_fn+0x17b/0x540 [ 959.651439][ C0] ? neigh_release+0x80/0x80 [ 959.651454][ C0] ? __run_timers+0x7f0/0x7f0 [ 959.651479][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 959.651497][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 959.651512][ C0] ? neigh_release+0x80/0x80 [ 959.651529][ C0] __run_timers+0x53a/0x7f0 [ 959.651557][ C0] ? detach_timer+0x2b0/0x2b0 [ 959.651571][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 959.651595][ C0] ? sched_clock_cpu+0x15/0x3c0 [ 959.651609][ C0] ? ktime_get_real_ts64+0x440/0x440 [ 959.651631][ C0] run_timer_softirq+0x63/0xf0 [ 959.651648][ C0] handle_softirqs+0x339/0x830 [ 959.651668][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 959.651687][ C0] ? do_softirq+0x210/0x210 [ 959.651706][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 959.651725][ C0] __irq_exit_rcu+0x13b/0x230 [ 959.651739][ C0] ? irq_exit_rcu+0x20/0x20 [ 959.651765][ C0] irq_exit_rcu+0x5/0x20 [ 959.651777][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 959.651793][ C0] [ 959.651798][ C0] [ 959.651803][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 959.651818][ C0] RIP: 0010:migrate_disable+0x1/0x180 [ 959.651834][ C0] Code: e1 07 80 c1 03 38 c1 0f 8c 2d ff ff ff 4c 89 f7 e8 44 8e 6b 00 e9 20 ff ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 55 <41> 57 41 56 41 55 41 54 53 49 bc 00 00 00 00 00 fc ff df 65 48 8b [ 959.651846][ C0] RSP: 0018:ffffc90002eff3b0 EFLAGS: 00000246 [ 959.651857][ C0] RAX: ffff88801eebe100 RBX: 1ffff920005dfe84 RCX: ffff888023679dc0 [ 959.651867][ C0] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 959.651876][ C0] RBP: ffffc90002eff4b8 R08: 0000000000000001 R09: ffff8880b9035120 [ 959.651886][ C0] R10: dffffc0000000000 R11: fffffbfff1b13b16 R12: 0000000000000000 [ 959.651896][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffffff8c1edca0 [ 959.651923][ C0] trace_call_bpf+0xef/0x5b0 [ 959.651939][ C0] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 959.651954][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 959.651971][ C0] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 959.651989][ C0] ? __bpf_trace_bpf_trace_printk+0x20/0x20 [ 959.652008][ C0] ? perf_swevent_get_recursion_context+0xa6/0x150 [ 959.652027][ C0] ? perf_swevent_get_recursion_context+0xb8/0x150 [ 959.652046][ C0] perf_trace_run_bpf_submit+0x79/0x1c0 [ 959.652066][ C0] perf_trace_lock+0x301/0x390 [ 959.652090][ C0] ? trace_event_raw_event_lock+0x270/0x270 [ 959.652125][ C0] lock_release+0x84a/0x8a0 [ 959.652145][ C0] ? rcu_lock_release+0x5/0x20 [ 959.652162][ C0] ? read_lock_is_recursive+0x10/0x10 [ 959.652180][ C0] ? __lock_acquire+0x7d10/0x7d10 [ 959.652211][ C0] inet_twsk_purge+0x7a7/0x840 [ 959.652237][ C0] ? __might_sleep+0xf0/0xf0 [ 959.652251][ C0] ? __inet_twsk_schedule+0x130/0x130 [ 959.652279][ C0] tcp_sk_exit_batch+0x28/0x90 [ 959.652293][ C0] ? tcp_sk_exit+0xa0/0xa0 [ 959.652306][ C0] setup_net+0x844/0xa10 [ 959.652325][ C0] ? copy_net_ns+0x5b0/0x5b0 [ 959.652344][ C0] ? copy_net_ns+0x32e/0x5b0 [ 959.652358][ C0] ? down_read_killable+0x1ce/0x340 [ 959.652379][ C0] copy_net_ns+0x348/0x5b0 [ 959.652400][ C0] create_new_namespaces+0x3d3/0x6f0 [ 959.652430][ C0] copy_namespaces+0x37d/0x3e0 [ 959.652450][ C0] copy_process+0x1834/0x3e20 [ 959.652496][ C0] ? __pidfd_prepare+0x140/0x140 [ 959.652525][ C0] kernel_clone+0x23f/0x990 [ 959.652543][ C0] ? ktime_get_real_ts64+0x440/0x440 [ 959.652558][ C0] ? create_io_thread+0x180/0x180 [ 959.652592][ C0] __x64_sys_clone+0x19a/0x210 [ 959.652611][ C0] ? __ia32_sys_vfork+0x130/0x130 [ 959.652643][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 959.652662][ C0] do_syscall_64+0x4c/0xa0 [ 959.652675][ C0] ? clear_bhb_loop+0x30/0x80 [ 959.652687][ C0] ? clear_bhb_loop+0x30/0x80 [ 959.652704][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 959.652718][ C0] RIP: 0033:0x7f7728670eb9 [ 959.652734][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 959.652746][ C0] RSP: 002b:00007f77268cbfd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 959.652760][ C0] RAX: ffffffffffffffda RBX: 00007f77288ebfa0 RCX: 00007f7728670eb9 [ 959.652770][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000043100000 [ 959.652779][ C0] RBP: 00007f77286dec1f R08: 0000000000000000 R09: 0000000000000000 [ 959.652788][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 959.652797][ C0] R13: 00007f77288ec038 R14: 00007f77288ebfa0 R15: 00007fffd6101998 [ 959.652824][ C0] [ 962.061614][ T3578] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 0-... } 10740 jiffies s: 61713 root: 0x1/. [ 962.090827][ T3578] rcu: blocking rcu_node structures (internal RCU debug): [ 962.098101][ T3578] Task dump for CPU 0: [ 962.102371][ T3578] task:syz.5.7964 state:R running task stack:23216 pid:26490 ppid: 25684 flags:0x0000400e [ 962.113335][ T3578] Call Trace: [ 962.116621][ T3578] [ 962.119752][ T3578] ? rcu_is_watching+0x11/0xa0 [ 962.124692][ T3578] ? trace_hardirqs_off_finish+0xca/0x1f0 [ 962.131022][ T3578] ? sysvec_apic_timer_interrupt+0x80/0xc0 [ 962.136851][ T3578] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 962.143562][ T3578] ? migrate_disable+0x1/0x180 [ 962.148352][ T3578] ? trace_call_bpf+0xef/0x5b0 [ 962.153191][ T3578] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 962.159360][ T3578] ? lockdep_hardirqs_on+0x94/0x140 [ 962.164627][ T3578] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 962.170855][ T3578] ? __bpf_trace_bpf_trace_printk+0x20/0x20 [ 962.176768][ T3578] ? perf_swevent_get_recursion_context+0xa6/0x150 [ 962.183376][ T3578] ? perf_swevent_get_recursion_context+0xb8/0x150 [ 962.189902][ T3578] ? perf_trace_run_bpf_submit+0x79/0x1c0 [ 962.195703][ T3578] ? perf_trace_lock+0x301/0x390 [ 962.200733][ T3578] ? trace_event_raw_event_lock+0x270/0x270 [ 962.206691][ T3578] ? lock_release+0x84a/0x8a0 [ 962.211451][ T3578] ? rcu_lock_release+0x5/0x20 [ 962.216231][ T3578] ? read_lock_is_recursive+0x10/0x10 [ 962.221670][ T3578] ? __lock_acquire+0x7d10/0x7d10 [ 962.226748][ T3578] ? inet_twsk_purge+0x7a7/0x840 [ 962.231774][ T3578] ? __might_sleep+0xf0/0xf0 [ 962.236388][ T3578] ? __inet_twsk_schedule+0x130/0x130 [ 962.241947][ T3578] ? tcp_sk_exit_batch+0x28/0x90 [ 962.246891][ T3578] ? tcp_sk_exit+0xa0/0xa0 [ 962.251367][ T3578] ? setup_net+0x844/0xa10 [ 962.255807][ T3578] ? copy_net_ns+0x5b0/0x5b0 [ 962.260428][ T3578] ? copy_net_ns+0x32e/0x5b0 [ 962.265092][ T3578] ? down_read_killable+0x1ce/0x340 [ 962.270347][ T3578] ? copy_net_ns+0x348/0x5b0 [ 962.275021][ T3578] ? create_new_namespaces+0x3d3/0x6f0 [ 962.280531][ T3578] ? copy_namespaces+0x37d/0x3e0 [ 962.285629][ T3578] ? copy_process+0x1834/0x3e20 [ 962.290582][ T3578] ? __pidfd_prepare+0x140/0x140 [ 962.295656][ T3578] ? kernel_clone+0x23f/0x990 [ 962.300369][ T3578] ? ktime_get_real_ts64+0x440/0x440 [ 962.305731][ T3578] ? create_io_thread+0x180/0x180 [ 962.310887][ T3578] ? __x64_sys_clone+0x19a/0x210 [ 962.315852][ T3578] ? __ia32_sys_vfork+0x130/0x130 [ 962.320987][ T3578] ? lockdep_hardirqs_on+0x94/0x140 [ 962.326210][ T3578] ? do_syscall_64+0x4c/0xa0 [ 962.330873][ T3578] ? clear_bhb_loop+0x30/0x80 [ 962.335562][ T3578] ? clear_bhb_loop+0x30/0x80 [ 962.340253][ T3578] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 962.346434][ T3578]