last executing test programs: 32m52.311323213s ago: executing program 0 (id=5150): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x1}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, 0x0, 0x0}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="140000004200090000ee80648c2594f90324fc60", 0x14}], 0x1}, 0x30000) r1 = socket$kcm(0xa, 0x3, 0x3a) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x20000010) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x890b, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x1d, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200000000000085000000860000009500", @ANYRES32, @ANYBLOB="00000003000000000000850000000c000000b700000000000000000000000000360d615717ff9b5a178c9f601932f3d7b38b71b7719b9134998f0db0d8c152c62aa1a6d3142bbe0e2428123363368b38c16153b1a6612197306cabdedecdc6497942ea79c3a6d1bfbb0e387513859642240c805b3dfccf9230969c025a"], &(0x7f0000000180)='syzkaller\x00', 0x3, 0x54, &(0x7f0000000280)=""/84, 0x41000, 0x40, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x0, 0x4, 0x10, 0x6}, 0x10, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000380)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000400)=[{0x5, 0x1, 0xe, 0x1}, {0x2, 0x4, 0xa, 0x1}], 0x10, 0x6}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x16, 0x0, 0x0, &(0x7f0000000680)='GPL\x00', 0x1a9, 0x45, &(0x7f00000006c0)=""/69, 0x41000, 0x8, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000780)={0x1, 0xd, 0x3, 0x3}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x0, &(0x7f00000007c0)=[{0x3, 0x5, 0x2, 0x4}, {0x5, 0x3, 0x2, 0xa}, {0x2, 0x5, 0xf}, {0x3, 0x4, 0xd, 0x1}], 0x10, 0x7}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)={@map, r3, 0x1, 0x14, 0x0, @void, @value=r4}, 0x20) write$cgroup_pid(r2, &(0x7f00000001c0), 0x12) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) write$cgroup_freezer_state(r5, &(0x7f00000000c0)='THAWED\x00', 0x7) socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x60) 32m51.646214593s ago: executing program 0 (id=5154): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r0, &(0x7f0000000040)="d8faf1bd61905120c0b737e87d2bd32c18ad560e5cd352", &(0x7f0000000080)=""/115}, 0x20) close(r0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r0, &(0x7f0000000140)="b203dbf484df0ec53776a2e63da75885f43a5a03cf6eb5fd789a092728004ed191fc53acd11db3adeea812e3f44856a5f36dcf871086a16b8b0817a9dcddfe0131979e4748f5d166259617e83cb9172956ee2029abadaeece0c977c9b2128016a2efc0c680a9b34fc3be81dc42b4b808fd745b8215b6369da4ca2396d48da5ff97ce960254c820952ff94effe253c5caaeefa66304f860f79f7c1681128f15a7681f9c842b447b4c4f3f60fd1566eb33b5e0d995b7b0506ed0380e41bfc84983d69676d0bcfb66769d9fb56aa48f797fc13a334c0072d2582124d2dcf98e77d446f0bce07fae86bfb9dabc0763fe15afe009590b", &(0x7f0000000240)=""/147}, 0x20) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x5, 0xfffff219, 0x2, 0x345a4, r0, 0x26ca, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x1, 0x5}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={r0, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x7fffffff, 0x10000, 0xfffffffd, 0x3024, r2, 0x7fffffff, '\x00', r3, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x6}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000540)) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000600)=@o_path={&(0x7f00000005c0)='./file0\x00', 0x0, 0x4018, r2}, 0x18) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000640)=@o_path={&(0x7f0000000580)='./file0\x00', r4, 0x4000, r1}, 0x18) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)=@generic={&(0x7f0000000680)='./file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000940)={0x0, 0x0}, 0x8) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000980), 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1b, 0x14, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@cb_func={0x18, 0x8, 0x4, 0x0, 0x7}, @jmp={0x5, 0x0, 0xd, 0x1, 0x4, 0x8, 0x8}, @cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffff9}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='GPL\x00', 0x5, 0xd7, &(0x7f0000000800)=""/215, 0x0, 0x0, '\x00', r3, @fallback=0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000900)={0x5, 0xd, 0x2, 0x10001}, 0x10, r6, r7, 0x3, 0x0, &(0x7f00000009c0)=[{0x0, 0x1, 0xf}, {0x1, 0x1, 0xa, 0x9}, {0x3, 0x3, 0x8, 0x3}], 0x10, 0x4}, 0x94) r9 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000ac0), 0x2, 0x0) write$cgroup_type(r9, &(0x7f0000000b00), 0x9) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000d80)={&(0x7f0000000b40)="dc9b3c913d6d6d7e2ce14927a0254075a56e3dd0608a9368fb99620b9e3d3ffdfb4e80c6320d96af012818f17254f36056bf89edd14b86fa8e01a4374eea34ef44ab82fc52d96363", &(0x7f0000000bc0)=""/218, &(0x7f0000000cc0)="985a88aeb5066e1de7390a92f58b7bda908c967e800bfdd432085261fa6092ddc7633d077d1f515eb5906f59443a1308b9b369f3f097cbd0d6ab78b6", &(0x7f0000000d00)="820ed7a4bd806a709c4616e016f738b34fde0c377404dd7d2dec28c3442d7734e61962ec1575d52a7a261d69b345d6dd356511d6a5fb315ec23292a7e60073c8366ebcfe26a3a337b491e830ab", 0x5, r2, 0x4}, 0x38) r10 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000dc0)='syz0\x00', 0x200002, 0x0) openat$cgroup_subtree(r10, &(0x7f0000000e00), 0x2, 0x0) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000e40)={0x1b, 0x0, 0x0, 0x100, 0x0, r0, 0x0, '\x00', r3, 0xffffffffffffffff, 0x3, 0x4, 0x2}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000f40)={r11, 0x58, &(0x7f0000000ec0)}, 0x10) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000f80)=r4, 0x4) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x9352) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000fc0), 0x8040, 0x0) ioctl$TUNSETSTEERINGEBPF(r12, 0x800454e0, &(0x7f0000001000)=r8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001040)={r0, 0xffffffffffffffff}, 0x4) r14 = openat$cgroup_ro(r10, &(0x7f0000001080)='io.stat\x00', 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000010c0)={0x1b, 0x0, 0x0, 0x8, 0x0, r13, 0x40, '\x00', r3, r14, 0x3}, 0x50) 32m51.135411001s ago: executing program 0 (id=5156): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) 32m50.992240466s ago: executing program 0 (id=5158): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000850000009900000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x32, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x2, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x7}, 0x50) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xdf, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x2, @perf_config_ext={0x408003, 0x1}, 0x14105, 0x32, 0xfffffbff, 0x0, 0x6, 0x0, 0xffda, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5d31, 0x40100, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xf, 0x5}, 0x80, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000440), 0x1}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xa, 0x7, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x10000}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000e00000085000000060000009500000000000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b00)={{r4}, &(0x7f0000000a80), &(0x7f0000000ac0)}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r5, r4}, 0xc) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x70}, 0x14002) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8946, &(0x7f0000000080)) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x300, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x84) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x2}, 0x50) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x21, 0x80, 0x5, 0x2, 0x20100, r4, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x2}, 0x50) 32m50.472300162s ago: executing program 0 (id=5172): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000850000009900000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x32, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x2, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x7}, 0x50) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xdf, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x2, @perf_config_ext={0x408003, 0x1}, 0x14105, 0x32, 0xfffffbff, 0x0, 0x6, 0x0, 0xffda, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad94ed406f21caf5adcf920569c00cc1199684fa75814709fea019af247c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c7160ec83070000020000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafedcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd89346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12282ce24463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f09000000000000004fc4bda3453602004535a976eacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a191852c9ae031db044b2353199546609f9f69a6cfefdf879d447df53f3b9b70d10355b00300000000000000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f58fab987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45b418a18217747ae442e31560e5b741445ea2a1acee2a81425ff000000d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51423b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f88735fce5115dc83ed73d8ee4a91322608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf5000000000000fa08ad0631c4b839688b22c4da2a6bc4cf45854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296bb2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692ba74b531b65c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652decbe579b03ed84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf5392882df78b0983e662dc0cb64b77f3f006b6b25443197ae93f0be6de5a703d003f00720943c0e4b33af00000000000000000021a688b2d7007fcc4b59f719afb0b3b7e0aee306ca70fe42bf4984a68f40e1fc043a03a17e4744359b87dc27c82d51cbeb64e52a28daeb6a78d6fe06181ecc840000"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5d31, 0x40100, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xf, 0x5}, 0x80, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000440), 0x1}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xa, 0x7, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x10000}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000e00000085000000060000009500000000000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b00)={{r4}, &(0x7f0000000a80), &(0x7f0000000ac0)}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r5, r4}, 0xc) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x70}, 0x14002) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8946, &(0x7f0000000080)) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x300, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x84) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x2}, 0x50) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x21, 0x80, 0x5, 0x2, 0x20100, r4, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x2}, 0x50) 32m50.122593199s ago: executing program 0 (id=5167): r0 = socket$kcm(0x29, 0x7, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000f40)='./cgroup.net/syz0\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xb0}, 0x800, 0x0, 0x3f, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x7c, &(0x7f0000000000)=r3, 0x62) r4 = openat$cgroup_procs(r1, &(0x7f0000001340)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000001380), 0x12) openat$tun(0xffffffffffffff9c, &(0x7f00000013c0), 0x400, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xf, 0x7, &(0x7f0000000000)=@raw=[@map_val={0x18, 0x7, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf6}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}], &(0x7f0000000040)='GPL\x00', 0x4, 0x40, &(0x7f0000000080)=""/64, 0x41100, 0x21, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000000c0)={0x2, 0xf, 0x8, 0x80}, 0x10, 0x0, 0xffffffffffffffff, 0x6, &(0x7f0000000100)=[0x1, 0x1], &(0x7f0000000140)=[{0x4, 0x3, 0xf, 0x5}, {0x2, 0x5, 0x5, 0x8}, {0x5, 0x2, 0xf, 0xa}, {0x2, 0x4, 0x6, 0xb}, {0x5, 0x4, 0xf, 0x4}, {0x2, 0x4, 0x3, 0xc}], 0x10, 0x80}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000280)={r0, r5}) 32m35.029218384s ago: executing program 32 (id=5167): r0 = socket$kcm(0x29, 0x7, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000f40)='./cgroup.net/syz0\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xb0}, 0x800, 0x0, 0x3f, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x7c, &(0x7f0000000000)=r3, 0x62) r4 = openat$cgroup_procs(r1, &(0x7f0000001340)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000001380), 0x12) openat$tun(0xffffffffffffff9c, &(0x7f00000013c0), 0x400, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xf, 0x7, &(0x7f0000000000)=@raw=[@map_val={0x18, 0x7, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf6}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}], &(0x7f0000000040)='GPL\x00', 0x4, 0x40, &(0x7f0000000080)=""/64, 0x41100, 0x21, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000000c0)={0x2, 0xf, 0x8, 0x80}, 0x10, 0x0, 0xffffffffffffffff, 0x6, &(0x7f0000000100)=[0x1, 0x1], &(0x7f0000000140)=[{0x4, 0x3, 0xf, 0x5}, {0x2, 0x5, 0x5, 0x8}, {0x5, 0x2, 0xf, 0xa}, {0x2, 0x4, 0x6, 0xb}, {0x5, 0x4, 0xf, 0x4}, {0x2, 0x4, 0x3, 0xc}], 0x10, 0x80}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000280)={r0, r5}) 26m32.275181336s ago: executing program 4 (id=7115): ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r0 = syz_clone(0x0, &(0x7f0000001000)="b26088a9bf8ca3d416b9e085bd6a732e5122e6ecb43e9f62ae9c2bf3a03ef3b45f9a647ff8fa1219eb3e8e679ab0cd6c02f3ff2e030b52ac2481c64092e543a026965f7137178d35ef7080659be803b78cf68cb07d1412ead2a8f3d1253e6a7ec592ede678884f6595a909a61a9daca85eb2432273e077ee1799099fb85ddca879ca1a128dbd76f95565c3e32cbd600d8dcda789c3154fdf96497bb9b9e1a43f685930a52006694fca9c1ed008e0b5d2ba09f6700e591a59b0615dac5df0b55fe7b7b29596", 0xc5, &(0x7f0000000240), &(0x7f0000001100), &(0x7f0000001140)="660b9f19a9583aa173732730778fdd3aabbccfb4a9dbe9805f669b582912ba4ab09b44b3d8f5aa6dc22aac729d2a14d3d746cd436a0978c7ae23a75e4a3909de9652e2555ca7884bedf9a3fcd0b68a5fe242b0ce733ee755262622cb8a76963f9dd72116a0") r1 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000012c0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB='*\x00\x00\x00:\x00\x00\x00', @ANYRES32, @ANYBLOB="7511b8c5470092f95b4b37e77e6808caa28d1b253be6bc61782aaaddd30a196c3f02f59c1595e3125b4149dcfeb040676ee553d955a7f996915dddf999000000000000", @ANYRES32=0x0, @ANYRES64=0x0], 0x20) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x18, &(0x7f0000000000)=r3, 0x8) (async) setsockopt$sock_attach_bpf(r1, 0x84, 0x18, &(0x7f0000000000)=r3, 0x8) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x80, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2002009}, r0, 0x0, r3, 0x0) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x80, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2002009}, r0, 0x0, r3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e00000004000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB="00000072849b96780a1b80000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e00000004000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB="00000072849b96780a1b80000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={0xffffffffffffffff, 0x1, 0x8}, 0xc) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r6, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r6, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) ioctl$SIOCSIFHWADDR(r5, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000000), 0x4) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0xd1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x12280, 0x1002, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0xd1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x12280, 0x1002, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000500)=[{&(0x7f00000006c0)="27031c00160014000000002f1eafacf706e105400000894f00050004ee0b80558ddbba9b37242d37a518fc9c5be50eaf07c3650596", 0x35}], 0xf}, 0x4) (async) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000500)=[{&(0x7f00000006c0)="27031c00160014000000002f1eafacf706e105400000894f00050004ee0b80558ddbba9b37242d37a518fc9c5be50eaf07c3650596", 0x35}], 0xf}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="7912b8000000000061138c0000000000bf2000000000000015000000080063033d030100000000009500003a000000006916000000000000bf6700000000000066060500fcff03006706000002000000760300000ee60060bf050000000000003c650000000000006507f9ff01000000070700004cdfffff1e75040000000000bf54000000000000070400000400f9ffad43010000000000d5000000000000000500000000000000950000000000000032410000000000000054bb12dc8c27df8ecfc7bdd2d17f2f1754558f22dd399703d6c4f6f3be0b369289aa6812b8e007e733a9a4f16d0a3e1282ee45a010fb94fe9de56c9d8a814261bdb94a05000000c6c60bf7a13ba1fcf1111ce4fc0d742a81762bab8395fa64810b5b40d893ea8fe0ffffff7f1b546cad3f1d5af65706fd4f68795cce6cf16ab689b555202da2e0ec2871a51445dc8da39e5b0ab71ca9b901627b562ed84b026002d4519af619e3cca4d69e0dee080006774a8f3e691700ec88158f02001b0000c81c8b297dff0445a13d0045fb3cda32a673a6bb55d8c80800dce431e56723888fb126a1403d2b63f16fb2ad9bc117aba7cbebe174aba210d739a018f9bbec63222d20cedbc4d03723f1c932b3a6aa57f1ad2e99e0e67a993716d20000009f0f53acbb40b401e3738270b3156268784f2af9e4bcf8b07a10d6735154be1602f9dd1d7d4301e00000000000460bcc5989ec85e3cbcb6bcfaf0000000000000000bc00f674629709e7e78f4ddc211bc3ebf0bd9d42ca019dd5d0861cd64722cf74686ebfbe2562671cd47840f81d2a8f8f9be3bcd19dc6840aa7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7eab049b1bd47287cd31cc43ea0ffb567b40407d000000000000000000000000005f37d83f84e98a523d80bd0d0d703f37ca363f601ae899a56715a0a62a26a0f6a5480a55c22fe394ae0000000000000000000000000000437d57defb79ea000500000000000000000000f014a4a318ba48d35ae9f438000000000000db894b62a614cb1fdd46619c5d2200000000000700000000000000000000006dcd2f421400f69947e4f26e099c9e8369080663c909b7e7c87e3b5e8e5a6df77c8f7338cd5a85f211a41b5d529d4243e47d7ab0d5991756b59d363ba30b18fc2ff189a4e8db38ab97c6a125e2785619e84c6a2b50f0e3ff83ef5149aff43dc899fdebdc2c496e6bdd4dd4d21f06fe133f4444272c5f0839ad663100452a6c6b6421f7e89a33b339401eee2cd466ab2a93a1ee7fb8a9e455ba1c6e17b02a1cd7bf35d36cf5b2a0f063469ae0d0b9fc042b48e98626eb0f9754d8cbbefa3079fe63063047baff09e9aaf7600000fba9a88db9ebef86f7cb522a784bb6d37e5f802757a15c6735138b493db9df53440a63fc565a0b190a710ae1e6807cbeb415ac841e94b706974160a60a14e571274f333d23186143b95514c79b50994cb39cda343bda8f01cf8ec7cdfdace0289e83ce50a57d68bfecfaf69fe7ff5b0375a47d3eb57b41d8a0589b82a1cf1149ba3f21ea2b65433321eb1a6f04ecc713c2b26d27baa49e54c2babec86335b9f418b5a5eb997bc9dd65197124b9aa80fc4aa8defb986bf05c41b919886bb81ecd3d24cf9ecc7004000000000000002c70d32f5d55ef2a2cf7560cb2884f46a92b3c25550f73e407fc5d514b2b7a6b690e290e676266addb7d96e723dec9c418eec8c48dffb6f432b4d5fef16e4f0051ba7efc690022c3f62b37cb5682d8bfdfc637ad3bf089ef0117bcd395322fcfb8e8e0a6e2babceb5f289b1d991770681192bcd0b584c3497e455f30ab918a690514a87a7d8e1d5f169a4e680e9c390071d26f2e0e26fc062f2785f14c0404fe01fb4000000000000000577dcb1698a9021a36d73ed03651c1937b2c84046023a1a0a87b208e33ad2d7c2892b176877264e1d699b7401eb917b289f6f67060fda0fa44b54bd87517a2bf09dba7209e41db4288b61bda5960952c45e5c55f2cd68bf9c6ff33e46109584bf42e8696ef1876564fef6f24cbbed0db8ab7fda1ffcc8c9fd4ab2cbe8f8df8e5535b12a942a948eacdaf308d48932064cfc3329da74f6f3e4409d6764a29680e312bf1a0143180e6493c9201ea916e6c9b2566c558ad88d9f7c0aebf82f5807eecefa97ada9bbd9e478e5d7748ee188bc719ca7a73dce5b6758a767c4c6b7572ab25eb2d73986379d5685cb438fe7091d097cc8f33fc0f83dee76603d6580f1c8fc4c37efd305ccc5a25678180425718bb9344e60dda8dae2677bb602d29aa0810616a2fdbca7020d72291b592b84223e2522ee01f5bdaa0fc4eb8d71d948a2baccf3ea2aa79d4d9069d8c0000000000000000000000321cd67859b4567badee56f158406f08683bdc5ffe2dedc916000c71f922fa2dfead7535999436a4aeb908781893479319b8b55e00d90ae6f09f06be2a0fc0bc17bef53331208112a0132350c0c5dd4607547079acc9471300dea6ae01742dccdae69f932cef80bca1bfcb57b9c852cf8358a580044772a80f20de36f707385380155be8907029d039a1d1447fc06b7020221e0d439f3f47edcf12f913dc8b6389a540340ae37804728ea65352e630c2e90424d58d72fdc1b28403e1dc7aad238b81df3b2d4166d656c6a9c73554bdf4f7312a4c0271e0eb45b4a596b7fa928ac3683f09fdaca46226c1df2c6c866cb4412d17d3d52c38cf0f7bd3b0eea2d4e06d061bb1b7c8c52f37f4036932d00028abd4527ffd639d7b16860033754ab13419429e5e39f290751ab6bd9392aef5519cd8c16e1f1cb1f225cc84a1a62497c1e436142fe28048a2b4d133905814a1808bc5b3e45eaa9eaebd946bee806968aeeb5a9eed87eba3d25d0b412a1b4cf2d419a58b09fc275c4395a0bd332eb538321465043e5967dd22459d0f52190a37f93ab823431a81fa6f54de61637fd473e19a6f567fead100e7d8cac149b66ebe9973af846146c62065a64854ed21e8b6f6fbe78474b753915a42efcb7da8ad18bacff8d69e0af1ca1f8174530a21820738412b100b54ee9b4a0dc22d5fe1cadecaea73fbfad087b19ce53177488d230539c5174f572a539d9d7c42698aa82bccf030ad393f25c10baa17e919f647d0e31877b7a6c1d8d86583f884a0c1da07b9b6dced06cdeb0094aa635a82f233b5993926b8970a0840ba116a7d20a40efb3bd03c4bdf380a2510a0a1ea69811ded68943c71218b42783b38959753978f222e1396b9b36dee2ce205122a000577cab29f48bff4f88c417e6bf5fb430d925596f29aca8677ca5a113aeaa5e0252ca17244d6c76e78ff1bbd81a71c4dfc72431d7f1126f8bdbf4056ee0f58a1bf83d53b1de07489541182dc4ee0f573c25b6c15dad930bc7a770b5a4f407d7a879db7185f15f80100000000000000739cc97db66ec6b925955d9a591808947fdd8d484ad27353230a449fdf87fc46c73b852fec931cfb6718acf3315bf5e577d00beb77c5514bc05d576a81345a03ad7aae74c5d2b77d45718348aed4fcbcd1441ff31b8f038824a989a9446a4a69367b228b3d174230b7320fc4d3c03368db573816dd0c04e65d6f8ce48283e76abdddbb965e0b2568e93c9cc5494a55421793f562c50c53f876cbde93c5cc7a3099c99d9775af010ba093f8a13b771782a3cfb24fbde6ef763e20c613164ab014d1906c4e098f1431b6b2886a155c4bac2911d7ee6a646f5913205ebd175e68975b93c330e4f9131788026b3b7cd5b6452c9e17452ac70000000000000000000000c71185f72436640fd4294fc3da230f9065095be47d7a848df12316c3c8b184fe110b061987fd79cf7d83443e69d08e2e839ae4fbe26ef7764f4870ef3bd0ec12eb45f60ca10dbfe329271f0bc93b28798e982e0dd32fc14bd4313c63b2dbb568f33fb45acad2dc7f438ea162c0709c0bbe1ea13e1e47399286e8143f400d7adf5f891f547c7e69e455706626814ee49274667f47769293451fd49885a152b8d2cf18febc7993f4a93893c6c7b7e46a230359ef2443e6bb9f50bb0faa5eaafd3ed6d551600c46b58a29fd7ccbbb0616f0be27302b683eccd742791d97f4a1daa0447f004426fd09b67d926f51525da63987bc73af35b28277879089b89fff6edab2fa1caf660a46a1a9f09e2d255b1c4be95c7c33dc81857f580e36c0a78d94dd879ee18de4a6475858d2ded2e3427ae007cc6f8e5e99aa146667f71ad83f3ddcf5db2dc396d7da499b65cd98125f20c284fc84d6a70be1de44b49c82022225292199c75cc26beab98dce4c331ed722f01d0d6314a72416814a565f4d90a5f8a255810f23541082f4b06f451e4724cd882f4d589600000000005854ca490d7df9cc293547c9a51aecc7a92f417f6a4d327737f1b198252358832dbe43507844a0cc112af4ce457c173fa64174ffd5ab9501eeb85508ebb60e169c0736c5960f2fe0879c77fff7b241439686cb4db435d6a7aa7c1f4a6433e77d3e547bbe6cf5b5d93a491ab4bba1ea7a1e6f37618b1d74cff3630d85a210092211be1ec12a30891eef590b19cdde055d626818c64e1c56b8918f33441a64b54946571b7bc70fb065d3bb1647f6f989ab8159e6d1cfa6c0ec7329d7d2263ca22144bf17d8692f03b592bd0f610096094da096233984e95b9a8216a6e60a104ae0bb5f77ac70b4390ea2cb6f6c40c928fae489f447240a25fd0a5bd9d5b6cd2a98f8804862922c11229c4e45c765e4d3348af3d3aadd5cc24b3943"], &(0x7f0000000100)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000011c0)) openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xa, 0x2, 0x3, 0x40, 0x0, 0x1, 0x10480, 0xb, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000080), 0x8}, 0xb40c, 0x2, 0x4d2e, 0x6, 0x5, 0x0, 0x80, 0x0, 0xfffffffe, 0x0, 0x80000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001f40)={0xffffffffffffffff}) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x80, 0x1, 0x0, 0x0, 0x0, 0x2, 0x20022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x9, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x80, 0x1, 0x0, 0x0, 0x0, 0x2, 0x20022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x9, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x2, 0x5006, 0xff, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) setsockopt$sock_attach_bpf(r8, 0x1, 0x4c, &(0x7f0000000080), 0xfe41) close(r8) 26m31.771344765s ago: executing program 4 (id=7120): r0 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x1, 0x19, 0x0, 0x3b) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r4}, &(0x7f00000007c0), &(0x7f0000000640)=r3}, 0x20) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0x1000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r5, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@fallback=r7, 0x10, 0x0, 0x363253ea, &(0x7f0000000040)=[0x0], 0x1, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={@ifindex, r7, 0x2e, 0x20, 0x0, @void, @void, @void, @value=0xffffffffffffffff, r9}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@fallback=r2, r3, 0x8, 0x20, 0x0, @void, @void, @void, @value, r9}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r4, &(0x7f00000004c0)}, 0x20) r10 = socket$kcm(0x2, 0x922000000001, 0x106) sendmsg$kcm(r10, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=ANY=[], 0x190}, 0x24000001) setsockopt$sock_attach_bpf(r10, 0x1, 0x12, &(0x7f00000002c0), 0x8) sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf0500050012fe", 0x2e}], 0x1}, 0x0) 26m30.011383808s ago: executing program 4 (id=7130): sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe"], 0xfe33) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe6}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa067707"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 26m29.547619395s ago: executing program 4 (id=7133): r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x6, 0x0, 0x0) 26m29.213312915s ago: executing program 4 (id=7137): ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{0x2}, {}, {0xffff, 0x0, 0x6}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x420008}]}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) write$cgroup_type(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d0000000a000000040000000100"], 0x48) r1 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)) 26m28.950127037s ago: executing program 4 (id=7138): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b", 0x12}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r0 = socket$kcm(0x2, 0x3, 0x2) r1 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x8108, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x10ac75, 0x400c78, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x40000, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x10, 0x0, 0x12, &(0x7f0000001dc0)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="c0410209f04426ed6cd1473ffe6eff1b001950000ab7f95065411642000000000035100bda4c4334d9c1a0eabc6b7e2b9299b91615fc4a4bf9cd2c1f3a5dbaa1ac6a32d55890792a8d6b86bbce6c7a208338f413f3"], &(0x7f0000000080)='GPL\x00', 0x2, 0xee, &(0x7f0000000340)=""/238}, 0x94) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000280)={'pimreg\x00', 0x5dcf70ef8daa5d0e}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001007d2b80000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000010000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) r9 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r9, 0x6, 0x2, &(0x7f0000000200), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r6, r5}, 0xc) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000940)={0x2, &(0x7f0000000340)=[{0x28, 0x7, 0x0, 0xfffff038}, {0x6, 0x7, 0xfa, 0xffffff7f}]}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r5, @ANYBLOB="b5000000000000000800"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000010000000400"/28], 0x50) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) r11 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r11, 0x1, 0x3e, &(0x7f00000002c0)=r10, 0x161) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000880)={0x8, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x9, 0x11, &(0x7f0000000c00)=ANY=[@ANYBLOB="180000000a0000000000000015cf000018400000ffffffff0000000000000000950000e4ff000000814e6519437dca6f00000045", @ANYBLOB="59d99e37dd9b436c91df2992c3a54daea8cc55f74634639c57c6c15ec3a0ff4ec2c36700835e4e8b7eda04c27c2a3b5cbe16c831c73c63d4649baff38b02ccc29db1c27fd8258cb7b88cdb2d95b1ef89ded8456cd18aa06512e12c25bd00b21481e6646ead347a82f7a20241d949", @ANYBLOB="000000009960e45d850000009a0000005d3ffcff080000007da5fcff0000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000", @ANYRES16=r9], &(0x7f0000000600)='GPL\x00', 0x3, 0xda, &(0x7f0000000640)=""/218, 0x40f00, 0x22, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000780)={0x5, 0x0, 0xfffffffa, 0x6}, 0x10, r12, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r2, r5, r4, r4, 0xffffffffffffffff], 0x0, 0x10, 0x2}, 0x94) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r13, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x8, 0x0, 0x0}}, 0x10) sendmsg$inet(r0, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0xffff, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r14, @dev={0xac, 0x14, 0x14, 0x2a}, @multicast1}}}], 0x20}, 0x4008814) 26m13.364693554s ago: executing program 33 (id=7138): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b", 0x12}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r0 = socket$kcm(0x2, 0x3, 0x2) r1 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x8108, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x10ac75, 0x400c78, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x40000, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x10, 0x0, 0x12, &(0x7f0000001dc0)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="c0410209f04426ed6cd1473ffe6eff1b001950000ab7f95065411642000000000035100bda4c4334d9c1a0eabc6b7e2b9299b91615fc4a4bf9cd2c1f3a5dbaa1ac6a32d55890792a8d6b86bbce6c7a208338f413f3"], &(0x7f0000000080)='GPL\x00', 0x2, 0xee, &(0x7f0000000340)=""/238}, 0x94) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000280)={'pimreg\x00', 0x5dcf70ef8daa5d0e}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001007d2b80000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000010000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) r9 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r9, 0x6, 0x2, &(0x7f0000000200), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r6, r5}, 0xc) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000940)={0x2, &(0x7f0000000340)=[{0x28, 0x7, 0x0, 0xfffff038}, {0x6, 0x7, 0xfa, 0xffffff7f}]}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r5, @ANYBLOB="b5000000000000000800"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000010000000400"/28], 0x50) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) r11 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r11, 0x1, 0x3e, &(0x7f00000002c0)=r10, 0x161) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000880)={0x8, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x9, 0x11, &(0x7f0000000c00)=ANY=[@ANYBLOB="180000000a0000000000000015cf000018400000ffffffff0000000000000000950000e4ff000000814e6519437dca6f00000045", @ANYBLOB="59d99e37dd9b436c91df2992c3a54daea8cc55f74634639c57c6c15ec3a0ff4ec2c36700835e4e8b7eda04c27c2a3b5cbe16c831c73c63d4649baff38b02ccc29db1c27fd8258cb7b88cdb2d95b1ef89ded8456cd18aa06512e12c25bd00b21481e6646ead347a82f7a20241d949", @ANYBLOB="000000009960e45d850000009a0000005d3ffcff080000007da5fcff0000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000", @ANYRES16=r9], &(0x7f0000000600)='GPL\x00', 0x3, 0xda, &(0x7f0000000640)=""/218, 0x40f00, 0x22, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000780)={0x5, 0x0, 0xfffffffa, 0x6}, 0x10, r12, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r2, r5, r4, r4, 0xffffffffffffffff], 0x0, 0x10, 0x2}, 0x94) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r13, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x8, 0x0, 0x0}}, 0x10) sendmsg$inet(r0, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0xffff, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r14, @dev={0xac, 0x14, 0x14, 0x2a}, @multicast1}}}], 0x20}, 0x4008814) 6.1292071s ago: executing program 3 (id=15286): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="020000000400000005000000aa"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r1}, 0x38) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x9, 0x14}}, 0x80, 0x0}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000300000000000000000000010500000000000400000000000100000500000099ba986ac16473eb0000000000002e00"], 0x0, 0x43}, 0x28) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{}, &(0x7f0000000800), &(0x7f0000000840)=r2}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f00000001c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000045f46ac25db561103fb3c195"], &(0x7f0000000040)='GPL\x00', 0x9, 0xae, &(0x7f0000000100)=""/174, 0x0, 0x0, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000070000008600000003"], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c00)) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0100000007000000060000000900000000000000", @ANYBLOB="000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000060000000000000000"], 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c0000000004000000", @ANYRES32=r6, @ANYBLOB='\r\x00'/20, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x22, 0x2, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r7}, &(0x7f0000000880), &(0x7f00000008c0)=r5}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r8, 0x2000000, 0xb, 0x0, &(0x7f0000000500)="630b00dcb95b0e4afdb201", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r9 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e000091d028ef8020ab0700040005234538ba55"], 0xfe33) sendmsg$kcm(r0, 0x0, 0x80) 5.947193827s ago: executing program 3 (id=15288): r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4156, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffc, 0x1}, 0x10041c, 0x0, 0xfffffffe, 0x6, 0x5, 0x4, 0x101, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x10, 0x2, 0x4) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r4, &(0x7f00000002c0)={&(0x7f0000000100)=@caif=@dgm={0x25, 0x1a}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000080)='r', 0x1}], 0x1}, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0xed, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd28}, 0xa28, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000740)="5c00000013006bcc9e3be35c6e17aa33074b876c1d0000007ea60864160af36514000cc0080019000900000006001cc00200bc24eab5008000001e618294ff4051f60a84c9f4d4938037e786a6d00010000400000000000000c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4004004) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90124fc60100c020000000400053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="851000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000095000000dfffffff44"], 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x80, 0x0, 0x7, 0x2, 0xb, 0x0, 0x1, 0x51082, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp={&(0x7f00000000c0), 0xb}, 0x1000, 0xb6f1, 0x7, 0x2, 0x2, 0x7, 0x9, 0x0, 0x9, 0x0, 0x6}, r7, 0x2, r0, 0x1) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffe0f}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80002, 0xffff, 0x0, 0x3, 0x0, 0xa}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r8, 0x29, 0x23, &(0x7f0000000040), 0xcf) setsockopt$sock_attach_bpf(r8, 0x29, 0x23, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f3, &(0x7f0000000080)) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000400000008"], 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@map=r9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 5.703107043s ago: executing program 3 (id=15291): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000800000004000000000000070000000003000000000000080100000000000000000000090200000000002e2e5f"], 0x0, 0x44}, 0x20) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000b"], 0x50) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000b00)={0x0, 0xf22fff7f, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0xc00e}], 0x9, &(0x7f00000001c0)=[@ip_tos_int={{0x7ff4d4260000}}, @ip_ttl={{0x14}}, @ip_ttl={{0x14}}, @ip_tos_u8={{0x11}}, @ip_tos_u8={{0x11, 0x2}}, @ip_retopts={{0x0, 0x0, 0x7, {[@lsrr, @generic={0x0, 0x0, "96"}, @generic={0x0, 0x0, "206a77bdd1a004129054e7704a"}]}}}], 0xf}, 0x0) close(0x3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r4}, 0xc) r5 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r5, &(0x7f00000001c0)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000440)="f4000900062b8825fe80000000000000dc8f850f23846632189c54ebcc00007a000000ad6e911b51", 0x28}], 0x1}, 0x0) 5.552652836s ago: executing program 3 (id=15294): r0 = socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x7}, 0x18852, 0x5, 0x43a1bd76, 0x7, 0x5, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x1, 0x2}, 0x2006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34000002, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x2, 0x7, 0x0, 0x40}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000000000e1ff00850000007d00000095"], 0x0, 0x10000}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x13bb711e) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) sendmsg$sock(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x97}, 0x44004) 4.997773047s ago: executing program 2 (id=15299): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000980)=ANY=[@ANYBLOB="9feb010018ff0000000000002d0000002800000003000000010000000000000c02000000000000000200000d0000000000000000000000000000000000000000006100a0f1ec41848a8ead312f89c313fe685f99f4a9b5c4608a2d5ab1d4fd34a5f9cfb626eb437e91ac6f9854d6644a2fcc8c1ccc0ea59cc17e4e87cd12adf213b3adf47e2f1ed5d86e8d26a88667cea4fe201d7f8ce73570eb1f6f4ffcef64182e0000daae3d388a96d2395c33647b96f6165f92f10ce8c7f17788f8db0ef2b64c57d2252edeef44da8067bad3fe358223f8ce08992a358fe3a8fdbdc03aaf06db2613ba4314b3b40f385844a6c385b54c381cd07ca8d9156082716fff6ab5f4359b5cc6adcd8341c088d903415fc09921e5ba8c6d3ec29ba4c8a6c7cdd8ec5b9ff872284cc54301e080ac26df10959036a47a03fc7fdd57bcc7e0b739b2c2eae90d1ac2a4d9518213b268878deb633c4f46dc66bbe1c9580c4e770b19a9cbae95dad8c315f15acc71424f65661dc2db2d552e90abb521250505a0e4b4fae7c56bec87b2047491196c79d1930f704bf1b6303b559278b0c8e7952d68de91be480c8e5dac5e"], 0x0, 0x43}, 0x28) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000200000000000000", @ANYRES32=0x1, @ANYBLOB="0500000000000000000000000000000000000000e89cfc8161b5a72525cb617b8fedee80556831d3a693c33867966af3da8390d37b64135c93a8ae23db612af9", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000030000000500"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x104046, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x8, 0x7e, 0x0, 0x49, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x3efd7ab4c41335d9, @perf_config_ext={0x401, 0x7}, 0x8000, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0xa, 0x922000000003, 0x11) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b800"/72, 0x48}], 0x1}, 0x8080) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)="d8000000180081084e81f782db44b904021d080006007c06e8fe55a10a0015400600142603600e120800060000000801a80016000800034003e01100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000c5e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb79104005ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4023f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cade81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x4090) sendmsg$kcm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{0x0}], 0x1}, 0x8000) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfe33) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_int(r8, &(0x7f00000000c0)='cpuset.memory_spread_slab\x00', 0x2, 0x0) write$cgroup_int(r9, &(0x7f00000003c0)=0x4000000000001000, 0x12) 4.768091066s ago: executing program 5 (id=15302): perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0xa9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x2, 0x200000000000001, 0x106) socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x3055, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305828, &(0x7f0000000040)=0x20004) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b904021d080304000000e8fe03a1180015000600142603600e1208000f0000810401a80016040a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x8008) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 4.678867759s ago: executing program 1 (id=15303): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)="d8000000140081054e81f782db44b9040a1d08020a000000040000a118000200fe80000000000e1208000f0100a10401a80016eaa4000640fefffffeffffffffb94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c817bd6c496ddffaa2795edb1e61e0100000000000000cb090000001fb791643a5ee4001b14547df36745d6d930dfe1d9d322fe7c9fd68775730d96a4683f5aeb4edbb57a5025ccca9e00158c89ed6cb4d1ac95e7765e04c2360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0", 0xd7}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 4.617407998s ago: executing program 2 (id=15304): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x0, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffff8, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000800000000000000000850000004100000095000000000000004be98911ed523cf4451d51e400cbd30efbb0a73ceb2b050a456c3a6cfd127868ad3fe3f9a9b946c97f9fc091e4c3f4b0a0d7ed298717a480c48868162ff933958cb6a5265519fee4cb1b8b93f0b164770fd40c7a8060ce72beff7cda177e281ef0b7a1a97b2c8c5617bff8c9441a45fd951df19a9c6e933500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x20008000) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000e9ff0000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300002bb91a0085000000a0000000bc0900000000000045080100002000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffffc40200000800000018220000", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000004608efff76000000bf9800000000000056090000000000008500000000a00000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.51299873s ago: executing program 5 (id=15305): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x2, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1000d7, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) mkdir(&(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x15) socketpair(0x1d, 0x80000, 0x8, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x8040) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000001a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8000000}, [@alu={0x7, 0x0, 0x3, 0x0, 0x0, 0x1}]}, &(0x7f0000001a40)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000300000000000000", @ANYRES32, @ANYBLOB="0400000000000000000051000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000003000000040000000000"], 0x50) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={0xffffffffffffffff}, 0x4) r2 = socket$kcm(0x10, 0x3, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1c0000001e007f109e", 0x9}, {&(0x7f0000000700)="78cafb73fc02010700200000ef000000000000", 0x13}], 0x2}, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r4 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r3}, 0x8) close(r4) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001d00)={r4, 0x58, &(0x7f0000002040)}, 0x10) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000200), 0x4) sendmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20004044) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0), 0x8) getpid() bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) close(r1) socket$kcm(0x2, 0x5, 0x84) 4.51243756s ago: executing program 3 (id=15306): r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) write$cgroup_subtree(r0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000000c0)="2e00000039000511d25a80698c63940d0224fc602f6e35400c000200680ec00037153e370a0001", 0x27}], 0x1, 0x0, 0x0, 0x39c}, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x0, 0x4, 0x0, 0x0) sendmsg$inet(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x24008000) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f00000001c0)={'ipvlan1\x00', 0x400}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000280)={'ipvlan1\x00', 0x400}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000140), 0x0, 0xf0, &(0x7f0000000200)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0xa5, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x6, &(0x7f0000000500)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x29, '\x00', r5, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000240), 0x0}, 0x20) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000980), 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[], 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r6 = socket$kcm(0x10, 0x2, 0x4) close(r6) close(0xffffffffffffffff) socket$kcm(0x10, 0x400000002, 0x0) 4.5118376s ago: executing program 1 (id=15307): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000040000000400000002000000a7080000", @ANYRES32=0x1, @ANYBLOB="00000000040000000382c0fc7e8919a6ebc0581d33fd634968c8161ba4de95083e2d92f886106653b7c351cc56af2eed2a489a1375ea573c9072b177585f0c74c6293e48344e04f470c00a8266ee7b5e2fe26e603310ad196bd355999a398e0c0b4616f52a76", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000094c3231801000020646c210005000000000000001a406878a349b51c7ff3e17c82acf8ff00000000bfa100000200000007019b2f7b01740b99be08042d15ea396233b4ec28c22db5ab6b6026c87cdc42ba52"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) close(r5) r6 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000ffff"], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x890b, &(0x7f0000000000)={r6}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNGETFEATURES(r5, 0x800454cf, &(0x7f0000000300)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x16, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x96}, @jmp={0x5, 0x0, 0x9}], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4) write$cgroup_devices(r7, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) syz_open_procfs$namespace(0x0, 0x0) 4.259370954s ago: executing program 5 (id=15308): perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80100, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x100904, 0x401, 0x25, 0x0, 0x1, 0x200, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0xe0, 0x7fff, @local, 0x48}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1}, 0x30008041) (fail_nth: 29) 3.706350315s ago: executing program 5 (id=15309): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000080)="5c00000011006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac004000202080006000a0007002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4a046) r1 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="0e0000000004"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) r6 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000180)={0x2, 0x80, 0x9, 0x72, 0x2, 0x8, 0x0, 0x7, 0x2c22, 0xb, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x673f, 0x1, @perf_bp={&(0x7f0000000040)}, 0x8400, 0x5, 0x8, 0xc0964dcc512b1d44, 0x9, 0x6, 0x3, 0x0, 0xb4000000, 0x0, 0x6}, 0xffffffffffffffff, 0x1, r6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) r7 = socket$kcm(0x11, 0x2, 0x0) sendmsg$sock(r7, &(0x7f00000000c0)={&(0x7f00000001c0)=@tipc=@name={0x1e, 0x2, 0x0, {{0x41, 0x4}, 0x3}}, 0x80, 0x0, 0x0, &(0x7f0000000000)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_int(r8, &(0x7f0000000100)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) write$cgroup_int(r9, &(0x7f0000000080), 0x12) setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000)=r4, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r4, 0x58, &(0x7f0000000140)}, 0x10) r10 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) recvmsg$unix(r11, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000640)={r13}, 0xc) setsockopt$sock_attach_bpf(r10, 0x84, 0x64, &(0x7f0000000000)=r12, 0x10) 3.642075743s ago: executing program 2 (id=15310): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000032000b07d25a806f8c6394f90824fc", 0x13}], 0x1}, 0x0) 3.561397429s ago: executing program 2 (id=15311): write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x33fe0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f00000000c0)=[{0x25, 0x1, 0x3, 0xfffffffe}, {}, {0x28}, {0x6, 0x6}]}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x40000100) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}}, 0x0, 0x26}, 0x28) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xfd, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef43c002100e3bd6efb440009000e000a0010000000ba8000001201", 0x2e}], 0x1}, 0x0) 919.016035ms ago: executing program 5 (id=15312): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x0, 0x43}, 0x28) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000200000000000000", @ANYRES32=0x1, @ANYBLOB="0500000000000000000000000000000000000000e89cfc8161b5a72525cb617b8fedee80556831d3a693c33867966af3da8390d37b64135c93a8ae23db612af9", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000030000000500"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x104046, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x8, 0x7e, 0x0, 0x49, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x3efd7ab4c41335d9, @perf_config_ext={0x401, 0x7}, 0x8000, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0xa, 0x922000000003, 0x11) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b800"/72, 0x48}], 0x1}, 0x8080) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)="d8000000180081084e81f782db44b904021d080006007c06e8fe55a10a0015400600142603600e120800060000000801a80016000800034003e01100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000c5e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb79104005ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4023f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cade81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x4090) sendmsg$kcm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{0x0}], 0x1}, 0x8000) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfe33) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_int(r8, &(0x7f00000000c0)='cpuset.memory_spread_slab\x00', 0x2, 0x0) write$cgroup_int(r9, &(0x7f00000003c0)=0x4000000000001000, 0x12) 918.566605ms ago: executing program 1 (id=15313): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000800000004000000000000070000000003000000000000080100000000000000000000090200000000002e2e5f"], 0x0, 0x44}, 0x20) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000b"], 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000b00)={0x0, 0xf22fff7f, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0xc00e}], 0x9, &(0x7f00000001c0)=[@ip_tos_int={{0x7ff4d4260000}}, @ip_ttl={{0x14}}, @ip_ttl={{0x14}}, @ip_tos_u8={{0x11}}, @ip_tos_u8={{0x11, 0x2}}, @ip_retopts={{0x0, 0x0, 0x7, {[@lsrr, @generic={0x0, 0x0, "96"}, @generic={0x0, 0x0, "206a77bdd1a004129054e7704a"}]}}}], 0xf}, 0x0) close(0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r2}, 0xc) r3 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r3, &(0x7f00000001c0)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000440)="f4000900062b8825fe80000000000000dc8f850f23846632189c54ebcc00007a000000ad6e911b51", 0x28}], 0x1}, 0x0) 820.594697ms ago: executing program 2 (id=15314): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000800000004000000000000070000000003000000000000080100000000000000000000090200000000002e2e5f"], 0x0, 0x44}, 0x20) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000b"], 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000b00)={0x0, 0xf22fff7f, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0xc00e}], 0x9, &(0x7f00000001c0)=[@ip_tos_int={{0x7ff4d4260000}}, @ip_ttl={{0x14}}, @ip_ttl={{0x14}}, @ip_tos_u8={{0x11}}, @ip_tos_u8={{0x11, 0x2}}, @ip_retopts={{0x0, 0x0, 0x7, {[@lsrr, @generic={0x0, 0x0, "96"}, @generic={0x0, 0x0, "206a77bdd1a004129054e7704a"}]}}}], 0xf}, 0x0) close(0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r2}, 0xc) r3 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r3, &(0x7f00000001c0)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000440)="f4000900062b8825fe80000000000000dc8f850f23846632189c54ebcc00007a000000ad6e911b51", 0x28}], 0x1}, 0x0) 780.05817ms ago: executing program 3 (id=15315): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f00000026c0), 0x3}, 0x400, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0xfffffffe, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="05000000070000000700000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="06000000040000001810000089"], 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'vxcan1\x00', 0x200}) socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000300)={0x0, &(0x7f0000000680)=""/191, &(0x7f00000015c0)="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", 0x0, 0x80, r0, 0x4}, 0x38) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x2, 0x7}, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x400000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x100084, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$kcm(0x10, 0x2, 0x4) close(r2) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000040100000800000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r4}, &(0x7f0000001d80), &(0x7f0000001d40)=r3}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0f00000004000000040000004700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000b8d005000000b1ef0c9bc2688bdc4e68f104008f"], 0x50) perf_event_open(&(0x7f0000000040)={0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x840, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x80, 0xffffffffffffffff}, 0x10000, 0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000001100)={r5, &(0x7f0000000100), &(0x7f0000000000)=""/95, 0x2}, 0x20) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xc2121, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x5ba93602, 0x9}, 0x42d0, 0x10000, 0x0, 0x5, 0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0xffffff0d, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000010006bcc9e3be35c6e17aa31076b876c1d000000000000000000040304001ac00800120004000500020000000064bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x24048094) 685.103253ms ago: executing program 5 (id=15316): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0xc, 0x5, 0x5, 0x0, 0x0, 0x4, 0x80602, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xc, 0x0, @perf_bp={0x0, 0xa}, 0x4, 0x2, 0x2, 0x4, 0x400, 0x0, 0x7, 0x0, 0x54, 0x0, 0x3}, 0xffffffffffffffff, 0xe, r0, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000006000000850000006100000018110000", @ANYRES8=r1, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8fdffffb703000008000000b70400000100000085000000820000009500000000000000f24cdbefa652b17ae4436345"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000150a00000fff07003506000043fe0000170600000ee60000bf050000000000000f620000000000006507000000000000460700004c0000000f75000000000000bf5400000000000007040000f0fff8ffad420100000000009500000000000000050000000000000095000000000000001c0a7900009d3c2792432a4fa650c512aee994a56462712cb064ecce5e7a9ce0a5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f00000003c0)={0x9, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x28, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0x5da0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x1, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f0000000080)) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000033000b35d25a806c8c6f94f90c24fc60", 0x14}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 667.713439ms ago: executing program 1 (id=15317): ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000080)) r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, 0x0, 0x4000040) close(r0) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0xa, 0x2, 0x88) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x80, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x4b, 0x3}, 0x0, 0x32, 0x800, 0x7, 0x9, 0x6, 0x2, 0x0, 0x200000, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0xfffffff9, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x2e0, 0x12c, 0x60000004, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c) (fail_nth: 2) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x44) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xee, 0x5, 0x40, 0x7, 0x0, 0x0, 0xd299, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x9, 0x2, @perf_config_ext={0x8, 0x8}, 0x100882, 0x7ff, 0x8, 0x6, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2}, 0x0, 0x0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa10000000000000701"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) 610.7204ms ago: executing program 2 (id=15318): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) recvmsg$kcm(r1, &(0x7f00000039c0)={0x0, 0x0, &(0x7f00000038c0)=[{&(0x7f0000000c00)=""/143, 0x8f}, {&(0x7f00000004c0)=""/216, 0xd8}, {&(0x7f0000001500)=""/158, 0x9e}, {&(0x7f00000015c0)=""/254, 0xfe}, {&(0x7f00000027c0)=""/4109, 0x100d}, {&(0x7f00000001c0)=""/36, 0x24}, {&(0x7f0000000300)=""/246, 0xf6}], 0x7}, 0x2002) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x8919, &(0x7f0000001b80)) 12.373472ms ago: executing program 1 (id=15319): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000032000b07d25a806f8c6394f90824fc", 0x13}], 0x1}, 0x0) 0s ago: executing program 1 (id=15320): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r1, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0xb, [@enum={0xb, 0x4, 0x0, 0x6, 0x4, [{0x8, 0x1}, {0x7, 0x3}, {0x6, 0x7}, {0xe, 0x7}]}]}, {0x0, [0x2e, 0x30, 0xa6bca68dd606abf0, 0x30, 0x0, 0x61, 0x61, 0x5f, 0x61]}}, &(0x7f0000000500)=""/144, 0x4f, 0x90, 0x1, 0x9b7, 0x10000}, 0x28) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000780)=@o_path={&(0x7f0000000640)='./file0\x00', 0x0, 0x8, r1}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_ext={0x1c, 0x18, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x90a}, {}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x40, 0xb, &(0x7f0000000140)=""/11, 0x41100, 0x20, '\x00', r2, 0x0, r3, 0x8, &(0x7f00000005c0)={0x2, 0xac}, 0x8, 0x10, &(0x7f0000000600)={0x4, 0x0, 0x9}, 0x10, 0x1fbb2, r4, 0x7, &(0x7f00000007c0)=[r1, r1], &(0x7f0000000800)=[{0x3, 0x2, 0x0, 0xb}, {0x1, 0x5, 0x8, 0x5}, {0x3, 0x3, 0xf, 0x1}, {0x0, 0x4, 0x6, 0x1}, {0x2, 0x3, 0xf}, {0x5, 0x4, 0x4}, {0x4, 0x2, 0x1, 0xa}], 0x10, 0x1}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000740)="2e00000010008188e6b62aa73f72cc9f0bdf9b69340000005e140602000000000c000a00100000000a800000129481", 0x2f}], 0x1}, 0x0) kernel console output (not intermixed with test programs): ][T17107] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2805.762610][T17107] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2805.858434][T17107] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2806.005595][T17107] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2806.022082][T17107] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2806.051192][T17107] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2806.069294][T17154] netlink: 132 bytes leftover after parsing attributes in process `syz.1.14429'. [ 2806.386034][T17159] netlink: 'syz.5.14430': attribute type 10 has an invalid length. [ 2806.413677][T17107] hsr_slave_0: entered promiscuous mode [ 2806.434791][T17107] hsr_slave_1: entered promiscuous mode [ 2806.452571][T17107] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2806.461501][T17107] Cannot create hsr debugfs directory [ 2806.657622][T17170] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 2806.722006][T17170] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 2806.837289][T17170] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 2806.888520][T17170] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 2806.929172][T17170] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 2806.973875][T17170] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 2807.009237][T17170] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 2807.036008][T17170] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 2807.046078][T17170] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 2807.056737][T17170] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 2807.364182][T16398] Bluetooth: hci3: command tx timeout [ 2809.443976][T16398] Bluetooth: hci3: command tx timeout [ 2809.708334][T17184] FAULT_INJECTION: forcing a failure. [ 2809.708334][T17184] name failslab, interval 1, probability 0, space 0, times 0 [ 2809.754889][T17184] CPU: 0 PID: 17184 Comm: syz.1.14434 Not tainted syzkaller #0 [ 2809.762535][T17184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2809.772657][T17184] Call Trace: [ 2809.775985][T17184] [ 2809.778966][T17184] dump_stack_lvl+0x18c/0x250 [ 2809.783719][T17184] ? show_regs_print_info+0x20/0x20 [ 2809.789007][T17184] ? load_image+0x400/0x400 [ 2809.793569][T17184] ? verify_lock_unused+0x140/0x140 [ 2809.798834][T17184] should_fail_ex+0x39d/0x4d0 [ 2809.803577][T17184] should_failslab+0x9/0x20 [ 2809.808139][T17184] slab_pre_alloc_hook+0x59/0x310 [ 2809.813233][T17184] kmem_cache_alloc+0x5a/0x2d0 [ 2809.818056][T17184] ? skb_clone+0x1eb/0x370 [ 2809.822545][T17184] skb_clone+0x1eb/0x370 [ 2809.826854][T17184] __netlink_deliver_tap+0x41c/0x830 [ 2809.832219][T17184] ? netlink_deliver_tap+0x2e/0x1b0 [ 2809.837481][T17184] netlink_deliver_tap+0x19c/0x1b0 [ 2809.842646][T17184] netlink_unicast+0x72c/0x8d0 [ 2809.847481][T17184] netlink_sendmsg+0x8d0/0xbf0 [ 2809.852323][T17184] ? netlink_getsockopt+0x590/0x590 [ 2809.857592][T17184] ? aa_sock_msg_perm+0x94/0x150 [ 2809.862588][T17184] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2809.867943][T17184] ? security_socket_sendmsg+0x80/0xa0 [ 2809.873452][T17184] ? netlink_getsockopt+0x590/0x590 [ 2809.878720][T17184] ____sys_sendmsg+0x5ba/0x960 [ 2809.883543][T17184] ? __asan_memset+0x22/0x40 [ 2809.888181][T17184] ? __sys_sendmsg_sock+0x30/0x30 [ 2809.893238][T17184] ? __import_iovec+0x5f2/0x850 [ 2809.898148][T17184] ? import_iovec+0x73/0xa0 [ 2809.902681][T17184] ___sys_sendmsg+0x2a6/0x360 [ 2809.907382][T17184] ? get_pid_task+0x20/0x1e0 [ 2809.912012][T17184] ? __sys_sendmsg+0x2a0/0x2a0 [ 2809.916824][T17184] ? __lock_acquire+0x7d40/0x7d40 [ 2809.921902][T17184] __se_sys_sendmsg+0x1c2/0x2b0 [ 2809.926791][T17184] ? __x64_sys_sendmsg+0x80/0x80 [ 2809.931771][T17184] ? lockdep_hardirqs_on+0x98/0x150 [ 2809.937017][T17184] do_syscall_64+0x55/0xa0 [ 2809.941473][T17184] ? clear_bhb_loop+0x40/0x90 [ 2809.946209][T17184] ? clear_bhb_loop+0x40/0x90 [ 2809.950925][T17184] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2809.956856][T17184] RIP: 0033:0x7fa50199c799 [ 2809.961316][T17184] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2809.980983][T17184] RSP: 002b:00007fa502922028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2809.989438][T17184] RAX: ffffffffffffffda RBX: 00007fa501c15fa0 RCX: 00007fa50199c799 [ 2809.997464][T17184] RDX: 0000000000000040 RSI: 0000200000000040 RDI: 0000000000000003 [ 2810.005559][T17184] RBP: 00007fa502922090 R08: 0000000000000000 R09: 0000000000000000 [ 2810.013552][T17184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2810.021548][T17184] R13: 00007fa501c16038 R14: 00007fa501c15fa0 R15: 00007ffd3f04ad78 [ 2810.029565][T17184] [ 2810.273477][T17187] netlink: 16098 bytes leftover after parsing attributes in process `syz.5.14435'. [ 2810.302146][T17193] netlink: 'syz.5.14435': attribute type 10 has an invalid length. [ 2810.424132][T17195] netlink: 132 bytes leftover after parsing attributes in process `syz.2.14438'. [ 2810.482009][T17196] netlink: 'syz.1.14437': attribute type 10 has an invalid length. [ 2810.522857][T17196] netlink: 2 bytes leftover after parsing attributes in process `syz.1.14437'. [ 2810.544089][T17196] bond0: entered promiscuous mode [ 2810.549314][T17196] bond_slave_0: entered promiscuous mode [ 2810.575401][T17196] bond_slave_1: entered promiscuous mode [ 2810.582673][T17196] batadv_slave_0: entered promiscuous mode [ 2810.593024][T17196] bridge0: port 3(bond0) entered blocking state [ 2810.601087][T17196] bridge0: port 3(bond0) entered disabled state [ 2810.609650][T17196] bond0: entered allmulticast mode [ 2810.615809][T17196] bond_slave_0: entered allmulticast mode [ 2810.629878][T17201] netlink: 'syz.5.14439': attribute type 9 has an invalid length. [ 2810.638698][T17201] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.14439'. [ 2810.648792][T17196] bond_slave_1: entered allmulticast mode [ 2810.655593][T17196] batadv_slave_0: entered allmulticast mode [ 2810.687342][T17196] bridge0: port 3(bond0) entered blocking state [ 2810.694522][T17196] bridge0: port 3(bond0) entered forwarding state [ 2810.861220][ T42] hsr_slave_0: left promiscuous mode [ 2810.879519][ T42] hsr_slave_1: left promiscuous mode [ 2810.889285][ T42] batman_adv: batadv0: Interface deactivated: €Â0 [ 2810.901289][ T42] batman_adv: batadv0: Removing interface: €Â0 [ 2810.912527][ T42] bridge_slave_1: left allmulticast mode [ 2810.923113][ T42] bridge_slave_1: left promiscuous mode [ 2810.939227][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 2810.969346][ T42] bridge_slave_0: left allmulticast mode [ 2810.983288][ T42] bridge_slave_0: left promiscuous mode [ 2810.996663][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 2811.062771][ T42] veth1_vlan: left promiscuous mode [ 2811.075985][ T42] veth0_vlan: left promiscuous mode [ 2811.523856][T16398] Bluetooth: hci3: command tx timeout [ 2812.064811][ T42] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 2812.076444][ T42] batadv_slave_0 (unregistering): left promiscuous mode [ 2812.345011][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2812.356278][ T42] bond_slave_1 (unregistering): left promiscuous mode [ 2812.417417][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2812.427074][ T42] bond_slave_0 (unregistering): left promiscuous mode [ 2812.866324][ T42] bond0 (unregistering): Released all slaves [ 2812.990765][T17212] netlink: 'syz.2.14440': attribute type 10 has an invalid length. [ 2813.006245][T17222] bond0: left allmulticast mode [ 2813.011247][T17222] bond_slave_0: left allmulticast mode [ 2813.024166][T17222] bond_slave_1: left allmulticast mode [ 2813.029710][T17222] batadv_slave_0: left allmulticast mode [ 2813.052164][T17222] bridge0: port 3(bond0) entered disabled state [ 2813.065253][T17222] bridge_slave_1: left allmulticast mode [ 2813.071002][T17222] bridge_slave_1: left promiscuous mode [ 2813.085190][T17222] bridge0: port 2(bridge_slave_1) entered disabled state [ 2813.120295][T17222] bridge_slave_0: left allmulticast mode [ 2813.133578][T17222] bridge_slave_0: left promiscuous mode [ 2813.148496][T17222] bridge0: port 1(bridge_slave_0) entered disabled state [ 2813.315940][T17204] netlink: 'syz.5.14439': attribute type 9 has an invalid length. [ 2813.331097][T17204] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.14439'. [ 2813.536391][T17107] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2813.623560][T17107] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2813.671826][T17107] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2813.708974][T17107] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2813.972149][T17247] netlink: 132 bytes leftover after parsing attributes in process `syz.5.14447'. [ 2814.089938][T17107] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2814.175455][T17107] 8021q: adding VLAN 0 to HW filter on device team0 [ 2814.204980][ T1116] bridge0: port 1(bridge_slave_0) entered blocking state [ 2814.212221][ T1116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2814.295509][ T1116] bridge0: port 2(bridge_slave_1) entered blocking state [ 2814.302755][ T1116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2815.198221][T17107] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2815.346813][T17107] veth0_vlan: entered promiscuous mode [ 2815.378139][T17107] veth1_vlan: entered promiscuous mode [ 2815.506794][T17107] veth0_macvtap: entered promiscuous mode [ 2815.568636][T17107] veth1_macvtap: entered promiscuous mode [ 2815.626812][T17107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2815.654413][T17107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2815.685813][T17107] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2815.723409][T17107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2815.750164][T17107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2815.779732][T17107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2815.808231][T17289] FAULT_INJECTION: forcing a failure. [ 2815.808231][T17289] name failslab, interval 1, probability 0, space 0, times 0 [ 2815.829139][T17107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2815.844682][T17107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2815.857698][T17289] CPU: 0 PID: 17289 Comm: syz.5.14456 Not tainted syzkaller #0 [ 2815.865351][T17289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2815.875651][T17289] Call Trace: [ 2815.879001][T17289] [ 2815.881991][T17289] dump_stack_lvl+0x18c/0x250 [ 2815.886748][T17289] ? sctp_sendmsg+0x1575/0x28c0 [ 2815.891664][T17289] ? ___sys_sendmsg+0x2a6/0x360 [ 2815.896581][T17289] ? show_regs_print_info+0x20/0x20 [ 2815.897260][T17107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2815.901833][T17289] ? load_image+0x400/0x400 [ 2815.916252][T17289] should_fail_ex+0x39d/0x4d0 [ 2815.921010][T17289] should_failslab+0x9/0x20 [ 2815.925582][T17289] slab_pre_alloc_hook+0x59/0x310 [ 2815.930685][T17289] ? sctp_add_bind_addr+0x8c/0x360 [ 2815.935879][T17289] __kmem_cache_alloc_node+0x53/0x250 [ 2815.941348][T17289] ? sctp_add_bind_addr+0x8c/0x360 [ 2815.946535][T17289] kmalloc_trace+0x2a/0xe0 [ 2815.951021][T17289] sctp_add_bind_addr+0x8c/0x360 [ 2815.956029][T17289] sctp_copy_local_addr_list+0x315/0x4f0 [ 2815.962570][T17289] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 2815.968393][T17289] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 2815.971690][T17107] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2815.974529][T17289] ? sctp_v4_is_any+0x35/0x60 [ 2815.974558][T17289] ? sctp_copy_one_addr+0x8c/0x350 [ 2815.974603][T17289] sctp_bind_addr_copy+0xb3/0x3c0 [ 2815.974651][T17289] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 2815.974690][T17289] sctp_connect_new_asoc+0x2f9/0x6a0 [ 2815.974724][T17289] ? __sctp_connect+0xd80/0xd80 [ 2815.974746][T17289] ? __local_bh_enable_ip+0x13a/0x1c0 [ 2816.019231][T17289] ? _local_bh_enable+0xa0/0xa0 [ 2816.024144][T17289] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 2816.030018][T17289] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 2816.035901][T17289] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 2816.041518][T17289] ? security_sctp_bind_connect+0x89/0xb0 [ 2816.047324][T17289] sctp_sendmsg+0x1575/0x28c0 [ 2816.052100][T17289] ? sctp_getsockopt+0xb60/0xb60 [ 2816.057113][T17289] ? aa_sk_perm+0x83c/0x970 [ 2816.061718][T17289] ? aa_af_perm+0x330/0x330 [ 2816.066733][T17289] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 2816.073224][T17289] ? sock_rps_record_flow+0x19/0x3f0 [ 2816.078594][T17289] ? inet_sendmsg+0x7c/0x2f0 [ 2816.080524][T17107] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2816.083227][T17289] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2816.097261][T17289] ? security_socket_sendmsg+0x80/0xa0 [ 2816.102789][T17289] ? inet_send_prepare+0x260/0x260 [ 2816.107970][T17289] ____sys_sendmsg+0x5ba/0x960 [ 2816.112801][T17289] ? __lock_acquire+0x7d40/0x7d40 [ 2816.117943][T17289] ? __asan_memset+0x22/0x40 [ 2816.122644][T17289] ? __sys_sendmsg_sock+0x30/0x30 [ 2816.127725][T17289] ? __import_iovec+0x5f2/0x850 [ 2816.132673][T17289] ? import_iovec+0x73/0xa0 [ 2816.137245][T17289] ___sys_sendmsg+0x2a6/0x360 [ 2816.139769][T17107] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2816.141986][T17289] ? __sys_sendmsg+0x2a0/0x2a0 [ 2816.155527][T17289] ? __lock_acquire+0x7d40/0x7d40 [ 2816.160682][T17289] __se_sys_sendmsg+0x1c2/0x2b0 [ 2816.165612][T17289] ? __x64_sys_sendmsg+0x80/0x80 [ 2816.170664][T17289] ? lockdep_hardirqs_on+0x98/0x150 [ 2816.175942][T17289] do_syscall_64+0x55/0xa0 [ 2816.180440][T17289] ? clear_bhb_loop+0x40/0x90 [ 2816.185188][T17289] ? clear_bhb_loop+0x40/0x90 [ 2816.189982][T17289] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2816.194633][T17107] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2816.195918][T17289] RIP: 0033:0x7fa3e899c799 [ 2816.195946][T17289] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2816.228776][T17289] RSP: 002b:00007fa3e97e2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2816.235954][T17107] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2816.237235][T17289] RAX: ffffffffffffffda RBX: 00007fa3e8c15fa0 RCX: 00007fa3e899c799 [ 2816.254062][T17289] RDX: 0000000000008000 RSI: 0000200000000380 RDI: 0000000000000003 [ 2816.262104][T17289] RBP: 00007fa3e97e2090 R08: 0000000000000000 R09: 0000000000000000 [ 2816.270144][T17289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2816.278183][T17289] R13: 00007fa3e8c16038 R14: 00007fa3e8c15fa0 R15: 00007ffe915c3418 [ 2816.286255][T17289] [ 2816.658421][T17302] netlink: 132 bytes leftover after parsing attributes in process `syz.5.14458'. [ 2816.783902][ T967] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2816.798526][ T967] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2816.925173][ T971] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2816.965616][ T971] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2818.631673][T17338] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.14470'. [ 2818.744599][T17343] netlink: 'syz.1.14470': attribute type 10 has an invalid length. [ 2819.328910][T26496] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2819.339445][T26496] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2819.348177][T26496] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2819.418710][T26496] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2819.430552][T26496] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2819.440962][T26496] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2819.487497][T17352] netlink: 132 bytes leftover after parsing attributes in process `syz.5.14466'. [ 2819.675551][T17367] netlink: 'syz.1.14469': attribute type 33 has an invalid length. [ 2819.694359][ T1116] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2819.718070][T17367] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.14469'. [ 2819.793867][T17365] bridge_slave_1: left allmulticast mode [ 2819.800178][T17365] bridge_slave_1: left promiscuous mode [ 2819.820457][T17365] bridge0: port 2(bridge_slave_1) entered disabled state [ 2819.891915][T17365] bridge_slave_0: left allmulticast mode [ 2819.909034][T17365] bridge_slave_0: left promiscuous mode [ 2819.922973][T17365] bridge0: port 1(bridge_slave_0) entered disabled state [ 2820.199311][T17371] netlink: 'syz.1.14469': attribute type 10 has an invalid length. [ 2820.223463][T17371] netlink: 55 bytes leftover after parsing attributes in process `syz.1.14469'. [ 2821.232895][ T1116] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2821.367824][ T1116] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2821.403446][T17397] netlink: 'syz.5.14480': attribute type 21 has an invalid length. [ 2821.424873][T17397] netlink: 132 bytes leftover after parsing attributes in process `syz.5.14480'. [ 2821.524376][T26496] Bluetooth: hci1: command tx timeout [ 2821.599351][ T1116] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2821.707944][T17399] netlink: 132 bytes leftover after parsing attributes in process `syz.5.14480'. [ 2823.344269][T17403] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.14474'. [ 2823.364412][T17408] netlink: 'syz.3.14474': attribute type 10 has an invalid length. [ 2823.379049][T17408] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2823.406708][T17408] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2823.496555][T17408] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 2823.608180][T17409] syzkaller0: entered promiscuous mode [ 2823.624866][T26496] Bluetooth: hci1: command tx timeout [ 2823.660025][T17409] syzkaller0: entered allmulticast mode [ 2823.982090][T17358] chnl_net:caif_netlink_parms(): no params data found [ 2824.028312][T17425] netlink: 132 bytes leftover after parsing attributes in process `syz.3.14478'. [ 2824.837333][T17442] net_ratelimit: 26018 callbacks suppressed [ 2824.837481][T17442] Dead loop on virtual device ip6_vti0, fix it urgently! [ 2824.894592][T17358] bridge0: port 1(bridge_slave_0) entered blocking state [ 2824.901813][T17358] bridge0: port 1(bridge_slave_0) entered disabled state [ 2824.918825][T17358] bridge_slave_0: entered allmulticast mode [ 2824.929870][T17358] bridge_slave_0: entered promiscuous mode [ 2824.939869][T17442] netlink: 830 bytes leftover after parsing attributes in process `syz.3.14483'. [ 2825.088318][T17358] bridge0: port 2(bridge_slave_1) entered blocking state [ 2825.114024][T17358] bridge0: port 2(bridge_slave_1) entered disabled state [ 2825.140257][T17358] bridge_slave_1: entered allmulticast mode [ 2825.155788][T17358] bridge_slave_1: entered promiscuous mode [ 2825.296270][T17443] delete_channel: no stack [ 2825.328932][T17457] netlink: 192436 bytes leftover after parsing attributes in process `syz.5.14485'. [ 2825.339619][T17457] openvswitch: netlink: Message has 20476 unknown bytes. [ 2825.351051][T17358] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2825.411497][T17358] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2825.586144][T17358] team0: Port device team_slave_0 added [ 2825.676984][T17358] team0: Port device team_slave_1 added [ 2825.694699][T26496] Bluetooth: hci1: command tx timeout [ 2826.085165][T17358] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2826.103965][T17358] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2826.146469][T17358] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2826.249012][T17358] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2826.282148][T17358] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2826.332224][T17358] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2826.411012][T17476] netlink: 132 bytes leftover after parsing attributes in process `syz.5.14488'. [ 2826.584873][T17358] hsr_slave_0: entered promiscuous mode [ 2826.631188][T17358] hsr_slave_1: entered promiscuous mode [ 2826.674681][T17358] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2826.704151][T17358] Cannot create hsr debugfs directory [ 2827.730265][T17497] netlink: 'syz.3.14492': attribute type 10 has an invalid length. [ 2827.767066][T26496] Bluetooth: hci1: command tx timeout [ 2827.806818][T17497] team0 (unregistering): Port device team_slave_0 removed [ 2827.828309][T17497] team0 (unregistering): Port device team_slave_1 removed [ 2827.924398][T17500] netlink: 'syz.1.14493': attribute type 21 has an invalid length. [ 2827.952910][T17500] netlink: 156 bytes leftover after parsing attributes in process `syz.1.14493'. [ 2827.983621][T17500] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14493'. [ 2828.055712][T17502] netlink: 16098 bytes leftover after parsing attributes in process `syz.5.14494'. [ 2828.130984][T17504] netlink: 'syz.5.14494': attribute type 10 has an invalid length. [ 2828.163010][ T1116] vlan0: left allmulticast mode [ 2828.183116][ T1116] veth0_vlan: left allmulticast mode [ 2828.200015][ T1116] vlan0: left promiscuous mode [ 2828.208179][ T1116] À: port 1(vlan0) entered disabled state [ 2828.265991][ T1116] hsr_slave_0: left promiscuous mode [ 2828.292925][ T1116] hsr_slave_1: left promiscuous mode [ 2828.390525][ T1116] veth1_vlan: left promiscuous mode [ 2828.405248][ T1116] veth0_vlan: left promiscuous mode [ 2829.510228][ T1116] .` (unregistering): (slave batadv_slave_0): Releasing backup interface [ 2829.519282][ T1116] batadv_slave_0 (unregistering): left promiscuous mode [ 2829.702544][ T1116] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 2829.711569][ T1116] bond_slave_1 (unregistering): left promiscuous mode [ 2829.767561][ T1116] .` (unregistering): (slave 73ÿ): Releasing backup interface [ 2829.776337][ T1116] ÿ (unregistering): left promiscuous mode [ 2830.127047][ T1116] .` (unregistering): Released all slaves [ 2830.202460][T17523] netlink: 132 bytes leftover after parsing attributes in process `syz.5.14499'. [ 2830.653873][T17540] netlink: 'syz.5.14502': attribute type 21 has an invalid length. [ 2830.776505][T17540] netlink: 156 bytes leftover after parsing attributes in process `syz.5.14502'. [ 2830.866462][T17540] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14502'. [ 2833.390828][T17557] netlink: 'syz.3.14505': attribute type 10 has an invalid length. [ 2833.481930][T17555] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.14505'. [ 2833.588233][T17567] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.14506'. [ 2833.708312][T17567] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.14506'. [ 2833.727212][T17358] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2833.739271][T17358] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2833.757711][T17563] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.14506'. [ 2833.816149][T17358] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2833.855679][T17573] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.14506'. [ 2833.916645][T17358] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2834.197139][T17358] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2834.258101][T17358] 8021q: adding VLAN 0 to HW filter on device team0 [ 2834.300933][ T971] bridge0: port 1(bridge_slave_0) entered blocking state [ 2834.308245][ T971] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2834.335586][T17584] netlink: 132 bytes leftover after parsing attributes in process `syz.1.14509'. [ 2834.382397][ T971] bridge0: port 2(bridge_slave_1) entered blocking state [ 2834.389715][ T971] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2834.919277][T17597] netlink: 'syz.3.14511': attribute type 21 has an invalid length. [ 2834.973499][T17597] netlink: 156 bytes leftover after parsing attributes in process `syz.3.14511'. [ 2835.042470][T17597] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14511'. [ 2835.377510][T17358] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2835.544863][T17358] veth0_vlan: entered promiscuous mode [ 2835.609284][T17358] veth1_vlan: entered promiscuous mode [ 2835.806699][T17358] veth0_macvtap: entered promiscuous mode [ 2835.842775][T17358] veth1_macvtap: entered promiscuous mode [ 2835.982522][T17358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2836.034000][T17358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2836.070307][T17358] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2836.117172][T17358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2836.152057][T17358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2836.182571][T17358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2836.206063][T17358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2836.243058][T17358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2836.275366][T17358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2836.293862][T17358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2836.333662][T17358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2836.365397][T17358] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2836.399526][T17358] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2836.423938][T17358] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2836.453395][T17358] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2836.472427][T17358] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2836.572563][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 2836.579364][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 2837.719483][ T970] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2837.753932][ T970] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2837.870310][ T970] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2837.900384][ T970] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2837.995080][T17628] netlink: 'syz.5.14514': attribute type 21 has an invalid length. [ 2838.052359][T17628] IPv6: NLM_F_CREATE should be specified when creating new route [ 2842.094700][T17649] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2842.102959][T17653] syzkaller0: tun_chr_ioctl cmd 2147767507 [ 2842.870461][T17673] netlink: 'syz.2.14520': attribute type 21 has an invalid length. [ 2842.925625][T17673] netlink: 156 bytes leftover after parsing attributes in process `syz.2.14520'. [ 2843.066336][T17673] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14520'. [ 2843.196828][T17675] netlink: 'syz.1.14519': attribute type 10 has an invalid length. [ 2843.224090][T17675] netlink: 2 bytes leftover after parsing attributes in process `syz.1.14519'. [ 2843.245545][T17678] netlink: 60 bytes leftover after parsing attributes in process `syz.1.14519'. [ 2843.284336][T17678] netlink: 60 bytes leftover after parsing attributes in process `syz.1.14519'. [ 2843.465843][T16398] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2843.484028][T16398] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2843.492480][T16398] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2843.519407][T16398] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2843.539455][T16398] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2843.547099][T16398] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2843.718382][T17688] netlink: 132 bytes leftover after parsing attributes in process `syz.2.14521'. [ 2843.875244][ T1322] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2845.726009][T27287] Bluetooth: hci2: command tx timeout [ 2846.022434][T17731] netlink: 'syz.1.14529': attribute type 21 has an invalid length. [ 2846.036294][T17731] netlink: 156 bytes leftover after parsing attributes in process `syz.1.14529'. [ 2846.065004][T17731] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14529'. [ 2846.143030][ T1322] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2846.217523][T17735] netlink: 207496 bytes leftover after parsing attributes in process `syz.2.14530'. [ 2846.277175][ T1322] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2846.337882][T17737] netlink: 132 bytes leftover after parsing attributes in process `syz.3.14532'. [ 2846.358944][ T1322] batman_adv: batadv0: Interface deactivated: netdevsim0 [ 2846.428057][ T1322] batman_adv: batadv0: Removing interface: netdevsim0 [ 2846.443075][ T1322] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2846.895195][T17685] chnl_net:caif_netlink_parms(): no params data found [ 2847.130775][T17757] netlink: 'syz.3.14535': attribute type 10 has an invalid length. [ 2847.164081][T17757] bond0: entered promiscuous mode [ 2847.210913][T17757] bond_slave_0: entered promiscuous mode [ 2847.219875][T17757] bond_slave_1: entered promiscuous mode [ 2847.239762][T17757] batadv_slave_0: entered promiscuous mode [ 2847.323442][T17765] bridge_slave_0: entered allmulticast mode [ 2847.726255][T17685] bridge0: port 1(bridge_slave_0) entered blocking state [ 2847.733496][T17685] bridge0: port 1(bridge_slave_0) entered disabled state [ 2847.762540][T17685] bridge_slave_0: entered allmulticast mode [ 2847.769247][T27287] Bluetooth: hci2: command tx timeout [ 2847.787011][T17685] bridge_slave_0: entered promiscuous mode [ 2847.809673][T17685] bridge0: port 2(bridge_slave_1) entered blocking state [ 2847.834203][T17685] bridge0: port 2(bridge_slave_1) entered disabled state [ 2847.851887][T17685] bridge_slave_1: entered allmulticast mode [ 2847.859584][T17685] bridge_slave_1: entered promiscuous mode [ 2848.031827][T17792] __nla_validate_parse: 9 callbacks suppressed [ 2848.031869][T17792] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.14542'. [ 2848.137443][T17685] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2848.168854][T17685] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2848.352735][T17796] netlink: 132 bytes leftover after parsing attributes in process `syz.1.14544'. [ 2848.409604][T17685] team0: Port device team_slave_0 added [ 2848.423130][T17685] team0: Port device team_slave_1 added [ 2848.505693][T17800] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.14545'. [ 2848.537501][T17802] netlink: 'syz.2.14545': attribute type 10 has an invalid length. [ 2848.564511][T17802] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2848.577847][T17802] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2848.611555][T17802] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 2848.673618][T17685] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2848.688080][T17685] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2848.724802][T17685] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2848.742600][T17685] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2848.751065][T17685] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2848.779250][T17685] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2848.995592][ T1322] bond0: (slave wlan1): Releasing backup interface [ 2849.013577][T17809] netlink: 'syz.2.14547': attribute type 29 has an invalid length. [ 2849.055852][T17809] netlink: 'syz.2.14547': attribute type 29 has an invalid length. [ 2849.098976][T17685] hsr_slave_0: entered promiscuous mode [ 2849.109602][T17685] hsr_slave_1: entered promiscuous mode [ 2849.122042][T17685] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2849.131375][T17685] Cannot create hsr debugfs directory [ 2849.288530][ T1322] hsr_slave_0: left promiscuous mode [ 2849.302493][ T1322] hsr_slave_1: left promiscuous mode [ 2849.311052][ T1322] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2849.318754][ T1322] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2849.329453][ T1322] bond0: left allmulticast mode [ 2849.334876][ T1322] bond_slave_0: left allmulticast mode [ 2849.341843][ T1322] bond_slave_1: left allmulticast mode [ 2849.348640][ T1322] batadv_slave_0: left allmulticast mode [ 2849.354784][ T1322] bridge0: port 3(bond0) entered disabled state [ 2849.368025][ T1322] bridge_slave_1: left allmulticast mode [ 2849.374162][ T1322] bridge_slave_1: left promiscuous mode [ 2849.380069][ T1322] bridge0: port 2(bridge_slave_1) entered disabled state [ 2849.393116][ T1322] bridge_slave_0: left promiscuous mode [ 2849.399459][ T1322] bridge0: port 1(bridge_slave_0) entered disabled state [ 2849.845021][T27287] Bluetooth: hci2: command tx timeout [ 2849.943280][T17831] netlink: 60 bytes leftover after parsing attributes in process `syz.2.14549'. [ 2850.336310][ T1322] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 2850.356781][ T1322] batadv_slave_0 (unregistering): left promiscuous mode [ 2850.983657][ T1322] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2850.992764][ T1322] bond_slave_1 (unregistering): left promiscuous mode [ 2851.060292][ T1322] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2851.070962][ T1322] bond_slave_0 (unregistering): left promiscuous mode [ 2851.502801][ T1322] bond0 (unregistering): Released all slaves [ 2851.645036][T17827] netlink: 'syz.2.14549': attribute type 10 has an invalid length. [ 2851.668385][T17827] netlink: 2 bytes leftover after parsing attributes in process `syz.2.14549'. [ 2851.677615][T17827] bond0: entered promiscuous mode [ 2851.682744][T17827] bond_slave_0: entered promiscuous mode [ 2851.689240][T17827] bond_slave_1: entered promiscuous mode [ 2851.699302][T17827] batadv_slave_0: entered promiscuous mode [ 2851.706560][T17827] bridge0: port 3(bond0) entered blocking state [ 2851.713144][T17827] bridge0: port 3(bond0) entered disabled state [ 2851.719866][T17827] bond0: entered allmulticast mode [ 2851.725427][T17827] bond_slave_0: entered allmulticast mode [ 2851.731222][T17827] bond_slave_1: entered allmulticast mode [ 2851.737160][T17827] batadv_slave_0: entered allmulticast mode [ 2851.747370][T17827] bridge0: port 3(bond0) entered blocking state [ 2851.753856][T17827] bridge0: port 3(bond0) entered forwarding state [ 2851.774313][T17831] netlink: 60 bytes leftover after parsing attributes in process `syz.2.14549'. [ 2851.924763][T27287] Bluetooth: hci2: command tx timeout [ 2852.518329][T17842] netlink: 132 bytes leftover after parsing attributes in process `syz.2.14553'. [ 2852.765404][T17852] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.14554'. [ 2852.814822][T17855] netlink: 'syz.1.14554': attribute type 10 has an invalid length. [ 2853.360980][T17872] netlink: 'syz.2.14560': attribute type 10 has an invalid length. [ 2853.393376][T17872] netlink: 128 bytes leftover after parsing attributes in process `syz.2.14560'. [ 2853.506945][T17874] netlink: 'syz.3.14561': attribute type 21 has an invalid length. [ 2853.539102][T17874] netlink: 132 bytes leftover after parsing attributes in process `syz.3.14561'. [ 2853.818017][T17685] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2853.851011][T17685] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2853.886778][T17685] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2853.910900][T17685] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2853.936331][T17882] FAULT_INJECTION: forcing a failure. [ 2853.936331][T17882] name failslab, interval 1, probability 0, space 0, times 0 [ 2853.949895][T17882] CPU: 0 PID: 17882 Comm: syz.1.14562 Not tainted syzkaller #0 [ 2853.957530][T17882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2853.967673][T17882] Call Trace: [ 2853.971029][T17882] [ 2853.974032][T17882] dump_stack_lvl+0x18c/0x250 [ 2853.978800][T17882] ? bpf_prog_test_run_skb+0xad2/0x12b0 [ 2853.984433][T17882] ? __sys_bpf+0x49d/0x890 [ 2853.988938][T17882] ? show_regs_print_info+0x20/0x20 [ 2853.994256][T17882] ? load_image+0x400/0x400 [ 2853.998921][T17882] should_fail_ex+0x39d/0x4d0 [ 2854.003806][T17882] should_failslab+0x9/0x20 [ 2854.008415][T17882] slab_pre_alloc_hook+0x59/0x310 [ 2854.013538][T17882] ? nf_ct_ext_add+0x1ab/0x440 [ 2854.018453][T17882] ? nf_ct_ext_add+0x1ab/0x440 [ 2854.023296][T17882] __kmem_cache_alloc_node+0x53/0x250 [ 2854.028758][T17882] ? nf_ct_ext_add+0x1ab/0x440 [ 2854.033670][T17882] __kmalloc_node_track_caller+0xa2/0x230 [ 2854.039475][T17882] krealloc+0x86/0x120 [ 2854.043611][T17882] nf_ct_ext_add+0x1ab/0x440 [ 2854.048310][T17882] init_conntrack+0x69c/0xf10 [ 2854.053095][T17882] ? early_drop+0x7f0/0x7f0 [ 2854.057670][T17882] ? nf_conntrack_find_get+0x650/0x650 [ 2854.063185][T17882] ? __local_bh_enable_ip+0x13a/0x1c0 [ 2854.068625][T17882] ? __siphash_unaligned+0x22e/0x3a0 [ 2854.074005][T17882] nf_conntrack_in+0xc06/0x15c0 [ 2854.078967][T17882] ? nf_ct_pernet+0x270/0x270 [ 2854.083738][T17882] ? ipt_do_table+0x2c1/0x15e0 [ 2854.088602][T17882] ? read_lock_is_recursive+0x20/0x20 [ 2854.094306][T17882] ? ipv4_conntrack_defrag+0x29d/0x5a0 [ 2854.099828][T17882] ? ipv4_conntrack_local+0x123/0x200 [ 2854.105272][T17882] ? ipv4_conntrack_in+0x20/0x20 [ 2854.110286][T17882] nf_hook_slow+0xbd/0x200 [ 2854.114801][T17882] ? nf_hook+0x390/0x390 [ 2854.119284][T17882] nf_hook+0x228/0x390 [ 2854.123431][T17882] ? nf_hook+0xa2/0x390 [ 2854.127652][T17882] ? __ip_local_out+0x5f0/0x5f0 [ 2854.132578][T17882] ? nf_hook+0x390/0x390 [ 2854.136899][T17882] ? __asan_memset+0x22/0x40 [ 2854.141555][T17882] ? ip_fast_csum+0x1ee/0x2b0 [ 2854.146293][T17882] __ip_local_out+0x4db/0x5f0 [ 2854.151045][T17882] ? nf_hook+0x390/0x390 [ 2854.155382][T17882] ip_local_out+0x2a/0x130 [ 2854.159883][T17882] iptunnel_xmit+0x4f0/0x920 [ 2854.164566][T17882] ip_tunnel_xmit+0x1cbc/0x2410 [ 2854.169546][T17882] ? ip4_dst_hoplimit+0x2d0/0x2d0 [ 2854.174635][T17882] ? validate_xmit_xfrm+0xbc/0x12c0 [ 2854.179927][T17882] ? gre_build_header+0x25b/0x990 [ 2854.185126][T17882] ipgre_xmit+0x7a6/0xb20 [ 2854.189545][T17882] dev_hard_start_xmit+0x246/0x740 [ 2854.194760][T17882] __dev_queue_xmit+0x19a3/0x3660 [ 2854.199886][T17882] ? __dev_queue_xmit+0x265/0x3660 [ 2854.205084][T17882] ? netdev_core_pick_tx+0x340/0x340 [ 2854.210434][T17882] ? skb_release_data+0x1cf/0x800 [ 2854.215542][T17882] ? pskb_expand_head+0xbfe/0x1230 [ 2854.220743][T17882] __bpf_tx_skb+0x189/0x250 [ 2854.225308][T17882] bpf_clone_redirect+0x30f/0x4a0 [ 2854.230425][T17882] bpf_prog_208b094576c80b22+0x5e/0x63 [ 2854.235949][T17882] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 2854.242005][T17882] ? perf_trace_preemptirq_template+0xac/0x330 [ 2854.248237][T17882] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 2854.254296][T17882] ? lockdep_softirqs_on+0x580/0x580 [ 2854.259657][T17882] ? lock_chain_count+0x20/0x20 [ 2854.264571][T17882] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 2854.270896][T17882] ? __local_bh_disable_ip+0x108/0x1a0 [ 2854.276418][T17882] ? __cant_sleep+0x220/0x220 [ 2854.281143][T17882] ? __local_bh_enable_ip+0x13a/0x1c0 [ 2854.286575][T17882] ? _local_bh_enable+0xa0/0xa0 [ 2854.291520][T17882] ? bpf_test_timer_continue+0x135/0x380 [ 2854.297215][T17882] ? bpf_test_run+0x174/0x870 [ 2854.301950][T17882] bpf_test_run+0x2df/0x870 [ 2854.306548][T17882] ? bpf_test_run+0x174/0x870 [ 2854.311287][T17882] ? convert___skb_to_skb+0x590/0x590 [ 2854.316748][T17882] ? eth_get_headlen+0x210/0x210 [ 2854.321774][T17882] ? slab_build_skb+0x25f/0x3f0 [ 2854.326696][T17882] ? convert___skb_to_skb+0x3d/0x590 [ 2854.332080][T17882] bpf_prog_test_run_skb+0xad2/0x12b0 [ 2854.337575][T17882] ? cpu_online+0x60/0x60 [ 2854.341980][T17882] bpf_prog_test_run+0x321/0x390 [ 2854.347002][T17882] __sys_bpf+0x49d/0x890 [ 2854.351313][T17882] ? bpf_link_show_fdinfo+0x390/0x390 [ 2854.356815][T17882] ? lock_chain_count+0x20/0x20 [ 2854.361763][T17882] __x64_sys_bpf+0x7c/0x90 [ 2854.366250][T17882] do_syscall_64+0x55/0xa0 [ 2854.370751][T17882] ? clear_bhb_loop+0x40/0x90 [ 2854.375490][T17882] ? clear_bhb_loop+0x40/0x90 [ 2854.380249][T17882] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2854.386210][T17882] RIP: 0033:0x7fa50199c799 [ 2854.390688][T17882] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2854.410364][T17882] RSP: 002b:00007fa502922028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2854.418856][T17882] RAX: ffffffffffffffda RBX: 00007fa501c15fa0 RCX: 00007fa50199c799 [ 2854.426893][T17882] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 2854.434915][T17882] RBP: 00007fa502922090 R08: 0000000000000000 R09: 0000000000000000 [ 2854.442943][T17882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2854.450962][T17882] R13: 00007fa501c16038 R14: 00007fa501c15fa0 R15: 00007ffd3f04ad78 [ 2854.459056][T17882] [ 2854.678368][T17685] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2854.751357][T17685] 8021q: adding VLAN 0 to HW filter on device team0 [ 2854.802576][ T1322] bridge0: port 1(bridge_slave_0) entered blocking state [ 2854.809879][ T1322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2854.856840][ T1322] bridge0: port 2(bridge_slave_1) entered blocking state [ 2854.864225][ T1322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2854.919256][T17887] netlink: 'syz.2.14565': attribute type 21 has an invalid length. [ 2854.974133][T17887] netlink: 156 bytes leftover after parsing attributes in process `syz.2.14565'. [ 2854.992539][T17887] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14565'. [ 2855.015980][T17892] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.14566'. [ 2855.064169][T17897] netlink: 'syz.3.14566': attribute type 10 has an invalid length. [ 2855.409294][T17905] syz.2.14568: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 2855.454381][T17905] CPU: 0 PID: 17905 Comm: syz.2.14568 Not tainted syzkaller #0 [ 2855.462028][T17905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2855.472143][T17905] Call Trace: [ 2855.475490][T17905] [ 2855.478469][T17905] dump_stack_lvl+0x18c/0x250 [ 2855.483218][T17905] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2855.489441][T17905] ? show_regs_print_info+0x20/0x20 [ 2855.494712][T17905] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2855.500948][T17905] warn_alloc+0x246/0x340 [ 2855.505353][T17905] ? stack_trace_save+0xaa/0x100 [ 2855.510359][T17905] ? zone_watermark_ok_safe+0x230/0x230 [ 2855.515993][T17905] ? kasan_set_track+0x5f/0x70 [ 2855.520812][T17905] ? kasan_set_track+0x4e/0x70 [ 2855.525622][T17905] ? __kasan_kmalloc+0x8f/0xa0 [ 2855.530450][T17905] ? xsk_init_queue+0xad/0x100 [ 2855.535273][T17905] ? xsk_setsockopt+0x4e5/0x760 [ 2855.540181][T17905] ? do_sock_setsockopt+0x175/0x1a0 [ 2855.545449][T17905] ? __x64_sys_setsockopt+0x182/0x200 [ 2855.550878][T17905] __vmalloc_node_range+0x126/0x1330 [ 2855.556210][T17905] ? mark_lock+0x94/0x320 [ 2855.560578][T17905] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 2855.566592][T17905] ? lock_chain_count+0x20/0x20 [ 2855.571478][T17905] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2855.577669][T17905] ? free_vm_area+0x50/0x50 [ 2855.582210][T17905] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2855.588405][T17905] vmalloc_user+0x74/0x80 [ 2855.592780][T17905] ? xskq_create+0xbf/0x170 [ 2855.597322][T17905] xskq_create+0xbf/0x170 [ 2855.601692][T17905] xsk_init_queue+0xad/0x100 [ 2855.606332][T17905] xsk_setsockopt+0x4e5/0x760 [ 2855.611050][T17905] ? xsk_poll+0x680/0x680 [ 2855.615427][T17905] ? lockdep_hardirqs_on+0x98/0x150 [ 2855.620659][T17905] ? aa_sock_opt_perm+0x74/0x100 [ 2855.625645][T17905] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 2855.631224][T17905] ? security_socket_setsockopt+0x7e/0xa0 [ 2855.636972][T17905] ? xsk_poll+0x680/0x680 [ 2855.641340][T17905] do_sock_setsockopt+0x175/0x1a0 [ 2855.646573][T17905] __x64_sys_setsockopt+0x182/0x200 [ 2855.651805][T17905] do_syscall_64+0x55/0xa0 [ 2855.656265][T17905] ? clear_bhb_loop+0x40/0x90 [ 2855.660977][T17905] ? clear_bhb_loop+0x40/0x90 [ 2855.665684][T17905] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2855.671701][T17905] RIP: 0033:0x7f3a4619c799 [ 2855.676155][T17905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2855.695808][T17905] RSP: 002b:00007f3a47085028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2855.704269][T17905] RAX: ffffffffffffffda RBX: 00007f3a46415fa0 RCX: 00007f3a4619c799 [ 2855.712277][T17905] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006 [ 2855.720281][T17905] RBP: 00007f3a46232c99 R08: 0000000000000004 R09: 0000000000000000 [ 2855.728367][T17905] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 2855.736364][T17905] R13: 00007f3a46416038 R14: 00007f3a46415fa0 R15: 00007fff509bc558 [ 2855.744391][T17905] [ 2855.805034][T17905] Mem-Info: [ 2855.808833][T17905] active_anon:10855 inactive_anon:0 isolated_anon:0 [ 2855.808833][T17905] active_file:19621 inactive_file:41032 isolated_file:0 [ 2855.808833][T17905] unevictable:768 dirty:61 writeback:0 [ 2855.808833][T17905] slab_reclaimable:10964 slab_unreclaimable:95588 [ 2855.808833][T17905] mapped:30367 shmem:1373 pagetables:658 [ 2855.808833][T17905] sec_pagetables:0 bounce:0 [ 2855.808833][T17905] kernel_misc_reclaimable:0 [ 2855.808833][T17905] free:1321465 free_pcp:8230 free_cma:0 [ 2855.922645][T17905] Node 0 active_anon:43720kB inactive_anon:0kB active_file:78484kB inactive_file:163932kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121468kB dirty:240kB writeback:0kB shmem:3956kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10812kB pagetables:2732kB sec_pagetables:0kB all_unreclaimable? no [ 2856.007651][T17905] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 2856.154751][T17905] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2856.235962][T17685] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2856.369600][T17905] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 2856.393008][T17905] Node 0 DMA32 free:1365756kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:43760kB inactive_anon:0kB active_file:78484kB inactive_file:163112kB unevictable:1536kB writepending:272kB present:3129332kB managed:2586964kB mlocked:0kB bounce:0kB free_pcp:24192kB local_pcp:15012kB free_cma:0kB [ 2856.469375][T17905] lowmem_reserve[]: 0 0 0 0 0 [ 2856.474824][T17905] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:820kB unevictable:0kB writepending:4kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 2856.534799][T17905] lowmem_reserve[]: 0 0 0 0 0 [ 2856.539940][T17905] Node 1 Normal free:3904504kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:8192kB local_pcp:8192kB free_cma:0kB [ 2856.624506][T17905] lowmem_reserve[]: 0 0 0 0 0 [ 2856.634744][T17905] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2856.663800][T17905] Node 0 DMA32: 2269*4kB (UME) 2605*8kB (UME) 1488*16kB (UME) 985*32kB (UME) 2214*64kB (UME) 997*128kB (UME) 524*256kB (UM) 503*512kB (UM) 287*1024kB (UME) 23*2048kB (UME) 68*4096kB (UM) = 1365756kB [ 2856.717343][T17905] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2856.754492][T17905] Node 1 Normal: 266*4kB (UE) 52*8kB (UE) 43*16kB (UE) 268*32kB (UE) 110*64kB (UME) 17*128kB (UME) 2*256kB (UE) 2*512kB (UM) 0*1024kB 2*2048kB (UE) 947*4096kB (M) = 3904504kB [ 2856.792703][T17905] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2856.835216][T17905] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2856.870722][T17905] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2856.932266][T17905] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2856.966206][T17905] 62027 total pagecache pages [ 2856.991849][T17905] 0 pages in swap cache [ 2857.007781][T17905] Free swap = 124996kB [ 2857.023302][T17905] Total swap = 124996kB [ 2857.055538][T17905] 2097051 pages RAM [ 2857.072196][T17905] 0 pages HighMem/MovableOnly [ 2857.091253][T17905] 416924 pages reserved [ 2857.105322][T17905] 0 pages cma reserved [ 2857.339200][T17685] veth0_vlan: entered promiscuous mode [ 2857.363288][T17685] veth1_vlan: entered promiscuous mode [ 2857.433593][T17685] veth0_macvtap: entered promiscuous mode [ 2857.452723][T17685] veth1_macvtap: entered promiscuous mode [ 2857.480976][T17685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2857.498095][T17685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2857.514947][T17685] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2857.532969][T17685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2857.543881][T17685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2857.555407][T17685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2857.566130][T17685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2857.576064][T17685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2857.586790][T17685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2857.604876][T17685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2857.616929][T17685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2857.629298][T17685] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2857.646122][T17685] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2857.655227][T17685] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2857.666794][T17685] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2857.675626][T17685] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2857.803342][ T973] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2857.825748][ T973] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2857.884020][ T973] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2857.894289][ T973] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2858.102116][T17964] netlink: 'syz.3.14575': attribute type 21 has an invalid length. [ 2858.140878][T17964] netlink: 156 bytes leftover after parsing attributes in process `syz.3.14575'. [ 2858.204597][T17964] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14575'. [ 2858.391589][T17972] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.14577'. [ 2859.220046][T17972] netlink: 'syz.2.14577': attribute type 10 has an invalid length. [ 2859.998883][T18005] netlink: 'syz.3.14585': attribute type 17 has an invalid length. [ 2860.073459][T18005] netlink: 152 bytes leftover after parsing attributes in process `syz.3.14585'. [ 2860.146951][T18010] netlink: 'syz.3.14585': attribute type 10 has an invalid length. [ 2862.624112][T18010] hsr_slave_0: left promiscuous mode [ 2862.636635][T18010] hsr_slave_1: left promiscuous mode [ 2862.835560][T18043] sctp: [Deprecated]: syz.1.14589 (pid 18043) Use of int in maxseg socket option. [ 2862.835560][T18043] Use struct sctp_assoc_value instead [ 2863.132661][T18047] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.14590'. [ 2863.398473][T18047] netlink: 'syz.2.14590': attribute type 10 has an invalid length. [ 2863.716558][T18061] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.14594'. [ 2863.760995][T18061] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 2863.793882][T18061] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 2863.821771][T18063] netlink: 63503 bytes leftover after parsing attributes in process `syz.5.14595'. [ 2864.131480][T18067] netlink: 132 bytes leftover after parsing attributes in process `syz.3.14596'. [ 2864.467908][T18079] bond0: left allmulticast mode [ 2864.473277][T18079] bond_slave_0: left allmulticast mode [ 2864.497490][T18079] bond_slave_1: left allmulticast mode [ 2864.515333][T18079] batadv_slave_0: left allmulticast mode [ 2864.515362][T18076] netlink: 196 bytes leftover after parsing attributes in process `syz.1.14601'. [ 2864.523343][T18079] bridge0: port 3(bond0) entered disabled state [ 2864.611498][T18079] bridge_slave_1: left allmulticast mode [ 2864.629774][T18079] bridge_slave_1: left promiscuous mode [ 2864.638179][T18079] bridge0: port 2(bridge_slave_1) entered disabled state [ 2864.679028][T18081] netlink: 'syz.1.14601': attribute type 29 has an invalid length. [ 2864.715505][T18079] bridge_slave_0: left allmulticast mode [ 2864.728515][T18079] bridge_slave_0: left promiscuous mode [ 2864.743010][T18079] bridge0: port 1(bridge_slave_0) entered disabled state [ 2865.124434][T18083] tun0: tun_chr_ioctl cmd 1074025694 [ 2865.131573][T18081] netlink: 'syz.1.14601': attribute type 29 has an invalid length. [ 2865.181849][T18086] netlink: 'syz.1.14601': attribute type 29 has an invalid length. [ 2865.322090][T18090] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.14603'. [ 2865.362547][T18090] netlink: 'syz.3.14603': attribute type 10 has an invalid length. [ 2865.665513][T18099] netlink: 'syz.3.14607': attribute type 10 has an invalid length. [ 2866.255744][T18103] netlink: 132 bytes leftover after parsing attributes in process `syz.2.14608'. [ 2866.963645][T18123] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.14615'. [ 2867.000045][T18126] netlink: 'syz.3.14615': attribute type 10 has an invalid length. [ 2867.201526][T18133] bridge_slave_1: left allmulticast mode [ 2867.223910][T18133] bridge_slave_1: left promiscuous mode [ 2867.230775][T18133] bridge0: port 2(bridge_slave_1) entered disabled state [ 2867.297833][T18133] bridge_slave_0: left allmulticast mode [ 2867.324056][T18133] bridge_slave_0: left promiscuous mode [ 2867.331159][T18133] bridge0: port 1(bridge_slave_0) entered disabled state [ 2867.700943][T18138] netlink: 132 bytes leftover after parsing attributes in process `syz.2.14619'. [ 2868.272416][T18151] FAULT_INJECTION: forcing a failure. [ 2868.272416][T18151] name failslab, interval 1, probability 0, space 0, times 0 [ 2868.303806][T18151] CPU: 0 PID: 18151 Comm: syz.5.14623 Not tainted syzkaller #0 [ 2868.311534][T18151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2868.321637][T18151] Call Trace: [ 2868.324983][T18151] [ 2868.327952][T18151] dump_stack_lvl+0x18c/0x250 [ 2868.332757][T18151] ? show_regs_print_info+0x20/0x20 [ 2868.337992][T18151] ? load_image+0x400/0x400 [ 2868.342535][T18151] ? verify_lock_unused+0x140/0x140 [ 2868.347787][T18151] should_fail_ex+0x39d/0x4d0 [ 2868.352521][T18151] should_failslab+0x9/0x20 [ 2868.357075][T18151] slab_pre_alloc_hook+0x59/0x310 [ 2868.362151][T18151] kmem_cache_alloc+0x5a/0x2d0 [ 2868.366945][T18151] ? skb_clone+0x1eb/0x370 [ 2868.371394][T18151] skb_clone+0x1eb/0x370 [ 2868.375694][T18151] __netlink_deliver_tap+0x41c/0x830 [ 2868.381117][T18151] ? netlink_deliver_tap+0x2e/0x1b0 [ 2868.386358][T18151] netlink_deliver_tap+0x19c/0x1b0 [ 2868.391522][T18151] netlink_sendskb+0x68/0x130 [ 2868.396323][T18151] netlink_ack+0xce1/0x1180 [ 2868.400873][T18151] ? netlink_dump+0xe50/0xe50 [ 2868.405582][T18151] ? perf_trace_lock+0xfc/0x3b0 [ 2868.410486][T18151] netlink_rcv_skb+0x2c5/0x4d0 [ 2868.415288][T18151] ? rtnetlink_bind+0x80/0x80 [ 2868.419992][T18151] ? netlink_ack+0x1180/0x1180 [ 2868.424797][T18151] ? __lock_acquire+0x7d40/0x7d40 [ 2868.429927][T18151] ? netlink_deliver_tap+0x2e/0x1b0 [ 2868.435170][T18151] netlink_unicast+0x751/0x8d0 [ 2868.439990][T18151] netlink_sendmsg+0x8d0/0xbf0 [ 2868.444801][T18151] ? netlink_getsockopt+0x590/0x590 [ 2868.450038][T18151] ? aa_sock_msg_perm+0x94/0x150 [ 2868.455022][T18151] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2868.460363][T18151] ? security_socket_sendmsg+0x80/0xa0 [ 2868.465863][T18151] ? netlink_getsockopt+0x590/0x590 [ 2868.471127][T18151] ____sys_sendmsg+0x5ba/0x960 [ 2868.475931][T18151] ? __asan_memset+0x22/0x40 [ 2868.480557][T18151] ? __sys_sendmsg_sock+0x30/0x30 [ 2868.485605][T18151] ? __import_iovec+0x5f2/0x850 [ 2868.490512][T18151] ? import_iovec+0x73/0xa0 [ 2868.495047][T18151] ___sys_sendmsg+0x2a6/0x360 [ 2868.499777][T18151] ? __sys_sendmsg+0x2a0/0x2a0 [ 2868.504616][T18151] ? __lock_acquire+0x7d40/0x7d40 [ 2868.509691][T18151] __se_sys_sendmsg+0x1c2/0x2b0 [ 2868.514601][T18151] ? __x64_sys_sendmsg+0x80/0x80 [ 2868.519578][T18151] ? lockdep_hardirqs_on+0x98/0x150 [ 2868.524809][T18151] do_syscall_64+0x55/0xa0 [ 2868.529257][T18151] ? clear_bhb_loop+0x40/0x90 [ 2868.533962][T18151] ? clear_bhb_loop+0x40/0x90 [ 2868.538670][T18151] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2868.544607][T18151] RIP: 0033:0x7f2a6e99c799 [ 2868.549045][T18151] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2868.568687][T18151] RSP: 002b:00007f2a6f7a4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2868.577143][T18151] RAX: ffffffffffffffda RBX: 00007f2a6ec15fa0 RCX: 00007f2a6e99c799 [ 2868.585160][T18151] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 2868.593162][T18151] RBP: 00007f2a6f7a4090 R08: 0000000000000000 R09: 0000000000000000 [ 2868.601162][T18151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2868.609160][T18151] R13: 00007f2a6ec16038 R14: 00007f2a6ec15fa0 R15: 00007ffe3f55e338 [ 2868.617378][T18151] [ 2868.721863][T18155] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.14624'. [ 2869.129274][T18168] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.14627'. [ 2869.194338][T18168] netlink: 'syz.1.14627': attribute type 10 has an invalid length. [ 2869.399107][T18175] FAULT_INJECTION: forcing a failure. [ 2869.399107][T18175] name failslab, interval 1, probability 0, space 0, times 0 [ 2869.434670][T18175] CPU: 1 PID: 18175 Comm: syz.2.14630 Not tainted syzkaller #0 [ 2869.442308][T18175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2869.452495][T18175] Call Trace: [ 2869.455807][T18175] [ 2869.458764][T18175] dump_stack_lvl+0x18c/0x250 [ 2869.463482][T18175] ? show_regs_print_info+0x20/0x20 [ 2869.468712][T18175] ? load_image+0x400/0x400 [ 2869.473239][T18175] ? lockdep_hardirqs_on+0x98/0x150 [ 2869.478481][T18175] should_fail_ex+0x39d/0x4d0 [ 2869.483198][T18175] should_failslab+0x9/0x20 [ 2869.487733][T18175] slab_pre_alloc_hook+0x59/0x310 [ 2869.492792][T18175] ? __lock_acquire+0x7d40/0x7d40 [ 2869.497841][T18175] ? kvmalloc_node+0x70/0x180 [ 2869.502552][T18175] ? kvmalloc_node+0x70/0x180 [ 2869.507261][T18175] __kmem_cache_alloc_node+0x53/0x250 [ 2869.512665][T18175] ? __schedule_delayed_monitor_work+0x200/0x200 [ 2869.519028][T18175] ? kvmalloc_node+0x70/0x180 [ 2869.523823][T18175] __kmalloc_node+0xa4/0x230 [ 2869.528483][T18175] kvmalloc_node+0x70/0x180 [ 2869.533062][T18175] bpf_test_run_xdp_live+0x1c2/0x1b20 [ 2869.538646][T18175] ? 0xffffffffa0004180 [ 2869.542823][T18175] ? 0xffffffffa0004180 [ 2869.547155][T18175] ? bpf_dispatcher_change_prog+0xcbf/0xf10 [ 2869.553119][T18175] ? 0xffffffffa0004180 [ 2869.557313][T18175] ? xdp_convert_md_to_buff+0x330/0x330 [ 2869.562945][T18175] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 2869.569242][T18175] ? bpf_prog_change_xdp+0x12/0x30 [ 2869.574405][T18175] bpf_prog_test_run_xdp+0x7ca/0x10e0 [ 2869.579823][T18175] ? lock_chain_count+0x20/0x20 [ 2869.584728][T18175] ? dev_put+0x80/0x80 [ 2869.588835][T18175] ? dev_put+0x80/0x80 [ 2869.592934][T18175] bpf_prog_test_run+0x321/0x390 [ 2869.597910][T18175] __sys_bpf+0x49d/0x890 [ 2869.602184][T18175] ? bpf_link_show_fdinfo+0x390/0x390 [ 2869.607600][T18175] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2869.613808][T18175] __x64_sys_bpf+0x7c/0x90 [ 2869.618281][T18175] do_syscall_64+0x55/0xa0 [ 2869.622764][T18175] ? clear_bhb_loop+0x40/0x90 [ 2869.627474][T18175] ? clear_bhb_loop+0x40/0x90 [ 2869.632188][T18175] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2869.638124][T18175] RIP: 0033:0x7f3a4619c799 [ 2869.642583][T18175] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2869.662221][T18175] RSP: 002b:00007f3a47085028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2869.670673][T18175] RAX: ffffffffffffffda RBX: 00007f3a46415fa0 RCX: 00007f3a4619c799 [ 2869.678682][T18175] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 2869.686768][T18175] RBP: 00007f3a47085090 R08: 0000000000000000 R09: 0000000000000000 [ 2869.694765][T18175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2869.702759][T18175] R13: 00007f3a46416038 R14: 00007f3a46415fa0 R15: 00007fff509bc558 [ 2869.710776][T18175] [ 2869.974462][T18183] netlink: 'syz.5.14633': attribute type 2 has an invalid length. [ 2869.992664][T18183] netlink: 'syz.5.14633': attribute type 9 has an invalid length. [ 2870.013013][T18183] netlink: 132 bytes leftover after parsing attributes in process `syz.5.14633'. [ 2870.048895][T18178] netlink: 132 bytes leftover after parsing attributes in process `syz.1.14631'. [ 2870.385410][T18197] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.14634'. [ 2870.441328][T18197] bridge_slave_1: default FDB implementation only supports local addresses [ 2870.493114][T18195] netlink: 830 bytes leftover after parsing attributes in process `syz.2.14634'. [ 2870.874952][T18208] netlink: 'syz.5.14641': attribute type 21 has an invalid length. [ 2870.913227][T18204] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.14639'. [ 2871.013438][T18210] netlink: 'syz.3.14639': attribute type 10 has an invalid length. [ 2871.619135][T18212] Ÿë: port 1(ip6gretap0) entered blocking state [ 2871.625950][T18212] Ÿë: port 1(ip6gretap0) entered disabled state [ 2871.632557][T18212] ip6gretap0: entered allmulticast mode [ 2871.639764][T18212] ip6gretap0: entered promiscuous mode [ 2872.926255][T18232] netlink: 132 bytes leftover after parsing attributes in process `syz.5.14646'. [ 2873.257206][T18238] netlink: set zone limit has 8 unknown bytes [ 2876.067959][T18289] FAULT_INJECTION: forcing a failure. [ 2876.067959][T18289] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2876.114612][T18289] CPU: 0 PID: 18289 Comm: syz.3.14665 Not tainted syzkaller #0 [ 2876.122343][T18289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2876.133329][T18289] Call Trace: [ 2876.136650][T18289] [ 2876.139615][T18289] dump_stack_lvl+0x18c/0x250 [ 2876.144350][T18289] ? show_regs_print_info+0x20/0x20 [ 2876.149774][T18289] ? load_image+0x400/0x400 [ 2876.154325][T18289] ? __lock_acquire+0x7d40/0x7d40 [ 2876.159426][T18289] ? snprintf+0xe9/0x140 [ 2876.163714][T18289] should_fail_ex+0x39d/0x4d0 [ 2876.168457][T18289] _copy_to_user+0x2f/0xa0 [ 2876.172928][T18289] simple_read_from_buffer+0xe7/0x150 [ 2876.178370][T18289] proc_fail_nth_read+0x1e8/0x260 [ 2876.183462][T18289] ? proc_fault_inject_write+0x360/0x360 [ 2876.189158][T18289] ? fsnotify_perm+0x271/0x5e0 [ 2876.193984][T18289] ? proc_fault_inject_write+0x360/0x360 [ 2876.199675][T18289] vfs_read+0x28b/0x970 [ 2876.203870][T18289] ? kernel_read+0x1e0/0x1e0 [ 2876.208499][T18289] ? __fget_files+0x28/0x4b0 [ 2876.213119][T18289] ? __fget_files+0x28/0x4b0 [ 2876.217740][T18289] ? __fget_files+0x43d/0x4b0 [ 2876.222454][T18289] ? __fdget_pos+0x2a3/0x330 [ 2876.227072][T18289] ? ksys_read+0x75/0x260 [ 2876.231434][T18289] ksys_read+0x150/0x260 [ 2876.235712][T18289] ? vfs_write+0x990/0x990 [ 2876.240169][T18289] ? lockdep_hardirqs_on+0x98/0x150 [ 2876.245443][T18289] do_syscall_64+0x55/0xa0 [ 2876.249897][T18289] ? clear_bhb_loop+0x40/0x90 [ 2876.254612][T18289] ? clear_bhb_loop+0x40/0x90 [ 2876.259325][T18289] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2876.265246][T18289] RIP: 0033:0x7fb707b5cfce [ 2876.269698][T18289] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2876.289372][T18289] RSP: 002b:00007fb708972fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2876.297911][T18289] RAX: ffffffffffffffda RBX: 00007fb7089736c0 RCX: 00007fb707b5cfce [ 2876.305910][T18289] RDX: 000000000000000f RSI: 00007fb7089730a0 RDI: 0000000000000007 [ 2876.313914][T18289] RBP: 00007fb708973090 R08: 0000000000000000 R09: 0000000000000000 [ 2876.321915][T18289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2876.329929][T18289] R13: 00007fb707e16038 R14: 00007fb707e15fa0 R15: 00007ffc05aa7ec8 [ 2876.338045][T18289] [ 2878.953480][T18333] netlink: 'syz.2.14679': attribute type 2 has an invalid length. [ 2879.040255][T18333] netlink: 14 bytes leftover after parsing attributes in process `syz.2.14679'. [ 2881.547223][T18372] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2881.597899][T18372] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2881.625220][T18374] netlink: 60 bytes leftover after parsing attributes in process `syz.2.14696'. [ 2881.720045][T18371] netlink: 830 bytes leftover after parsing attributes in process `syz.3.14695'. [ 2881.731768][T18376] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.14696'. [ 2881.748025][T18374] netlink: 60 bytes leftover after parsing attributes in process `syz.2.14696'. [ 2881.774549][T18375] netlink: 60 bytes leftover after parsing attributes in process `syz.2.14696'. [ 2882.217862][T18383] netlink: 'syz.2.14699': attribute type 21 has an invalid length. [ 2882.264097][T18383] netlink: 156 bytes leftover after parsing attributes in process `syz.2.14699'. [ 2882.279835][T18383] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14699'. [ 2882.581656][T18394] syzkaller0: entered promiscuous mode [ 2882.588202][T18394] syzkaller0: entered allmulticast mode [ 2882.894580][T18403] netlink: 132 bytes leftover after parsing attributes in process `syz.3.14706'. [ 2882.917483][T18407] netlink: 'syz.1.14708': attribute type 21 has an invalid length. [ 2886.347551][T18433] netlink: 'syz.3.14714': attribute type 21 has an invalid length. [ 2886.376059][T18433] netlink: 156 bytes leftover after parsing attributes in process `syz.3.14714'. [ 2886.392792][T18433] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14714'. [ 2886.795167][T18447] netlink: 132 bytes leftover after parsing attributes in process `syz.3.14719'. [ 2886.888967][T18451] netlink: 'syz.1.14721': attribute type 4 has an invalid length. [ 2886.901126][T18451] netlink: 168 bytes leftover after parsing attributes in process `syz.1.14721'. [ 2888.354459][T18463] netlink: 'syz.2.14724': attribute type 10 has an invalid length. [ 2888.414696][T18464] netlink: 4091 bytes leftover after parsing attributes in process `syz.2.14724'. [ 2889.602776][T18463] team0 (unregistering): Port device team_slave_0 removed [ 2889.724611][T18463] team0 (unregistering): Port device team_slave_1 removed [ 2890.279901][T18492] netlink: 60 bytes leftover after parsing attributes in process `syz.3.14732'. [ 2890.293133][T18492] netlink: 60 bytes leftover after parsing attributes in process `syz.3.14732'. [ 2890.315197][T18492] C: renamed from team_slave_0 [ 2890.330081][T18492] netlink: 'syz.3.14732': attribute type 3 has an invalid length. [ 2890.340314][T18492] netlink: 152 bytes leftover after parsing attributes in process `syz.3.14732'. [ 2890.356112][T18492] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 2890.381305][T18489] netlink: 132 bytes leftover after parsing attributes in process `syz.2.14733'. [ 2890.468274][T18493] netlink: 'syz.3.14732': attribute type 29 has an invalid length. [ 2890.484356][T18493] netlink: 'syz.3.14732': attribute type 29 has an invalid length. [ 2890.506336][T18493] netlink: 'syz.3.14732': attribute type 29 has an invalid length. [ 2891.155753][T18506] netlink: 60 bytes leftover after parsing attributes in process `syz.1.14737'. [ 2891.860436][T18523] netlink: 'syz.3.14745': attribute type 21 has an invalid length. [ 2891.874867][T18523] __nla_validate_parse: 3 callbacks suppressed [ 2891.874886][T18523] netlink: 156 bytes leftover after parsing attributes in process `syz.3.14745'. [ 2891.902392][T18523] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14745'. [ 2891.940073][T18521] netlink: 132 bytes leftover after parsing attributes in process `syz.1.14744'. [ 2892.083513][T18526] netlink: 'syz.2.14746': attribute type 13 has an invalid length. [ 2892.093046][T18526] netlink: 'syz.2.14746': attribute type 58 has an invalid length. [ 2892.105850][T18526] netlink: 128 bytes leftover after parsing attributes in process `syz.2.14746'. [ 2892.527651][T18530] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.14748'. [ 2892.695276][T18534] netlink: 'syz.5.14750': attribute type 10 has an invalid length. [ 2893.292121][T18536] syzkaller0: entered promiscuous mode [ 2893.304893][T18536] syzkaller0: entered allmulticast mode [ 2894.976979][T27287] Bluetooth: hci4: command 0x0406 tx timeout [ 2896.546763][T18561] netlink: 132 bytes leftover after parsing attributes in process `syz.3.14758'. [ 2896.556805][T18563] netlink: 'syz.1.14757': attribute type 21 has an invalid length. [ 2896.569688][T18563] netlink: 156 bytes leftover after parsing attributes in process `syz.1.14757'. [ 2896.579130][T18563] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14757'. [ 2896.838292][T18581] FAULT_INJECTION: forcing a failure. [ 2896.838292][T18581] name failslab, interval 1, probability 0, space 0, times 0 [ 2896.924702][T18581] CPU: 0 PID: 18581 Comm: syz.2.14763 Not tainted syzkaller #0 [ 2896.932363][T18581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2896.942476][T18581] Call Trace: [ 2896.945810][T18581] [ 2896.948791][T18581] dump_stack_lvl+0x18c/0x250 [ 2896.953534][T18581] ? show_regs_print_info+0x20/0x20 [ 2896.958818][T18581] ? load_image+0x400/0x400 [ 2896.963384][T18581] ? __might_sleep+0xe0/0xe0 [ 2896.968040][T18581] ? __lock_acquire+0x7d40/0x7d40 [ 2896.973125][T18581] should_fail_ex+0x39d/0x4d0 [ 2896.977866][T18581] should_failslab+0x9/0x20 [ 2896.982432][T18581] slab_pre_alloc_hook+0x59/0x310 [ 2896.987514][T18581] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2896.993719][T18581] ? __get_vm_area_node+0x125/0x370 [ 2896.998971][T18581] __kmem_cache_alloc_node+0x53/0x250 [ 2897.004413][T18581] ? __get_vm_area_node+0x125/0x370 [ 2897.009674][T18581] kmalloc_node_trace+0x26/0xe0 [ 2897.014575][T18581] __get_vm_area_node+0x125/0x370 [ 2897.019655][T18581] __vmalloc_node_range+0x36e/0x1330 [ 2897.025204][T18581] ? netlink_sendmsg+0x602/0xbf0 [ 2897.030180][T18581] ? netlink_insert+0x109f/0x13a0 [ 2897.035272][T18581] ? netlink_data_ready+0x10/0x10 [ 2897.040330][T18581] ? free_vm_area+0x50/0x50 [ 2897.044883][T18581] ? netlink_sendmsg+0x602/0xbf0 [ 2897.049867][T18581] vmalloc+0x79/0x90 [ 2897.053798][T18581] ? netlink_sendmsg+0x602/0xbf0 [ 2897.058769][T18581] netlink_sendmsg+0x602/0xbf0 [ 2897.063567][T18581] ? lockdep_hardirqs_on+0x98/0x150 [ 2897.068801][T18581] ? netlink_getsockopt+0x590/0x590 [ 2897.074035][T18581] ? aa_sock_msg_perm+0x94/0x150 [ 2897.079095][T18581] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2897.084410][T18581] ? security_socket_sendmsg+0x80/0xa0 [ 2897.089925][T18581] sock_write_iter+0x2df/0x420 [ 2897.094717][T18581] ? sock_read_iter+0x3e0/0x3e0 [ 2897.099628][T18581] ? common_file_perm+0x198/0x1f0 [ 2897.104716][T18581] vfs_write+0x46c/0x990 [ 2897.109008][T18581] ? file_end_write+0x250/0x250 [ 2897.113912][T18581] ? __fget_files+0x43d/0x4b0 [ 2897.118643][T18581] ? __fdget_pos+0x1d8/0x330 [ 2897.123278][T18581] ? ksys_write+0x75/0x260 [ 2897.127736][T18581] ksys_write+0x150/0x260 [ 2897.132118][T18581] ? __ia32_sys_read+0x90/0x90 [ 2897.136927][T18581] ? syscall_enter_from_user_mode+0x2e/0x80 [ 2897.142978][T18581] do_syscall_64+0x55/0xa0 [ 2897.147430][T18581] ? clear_bhb_loop+0x40/0x90 [ 2897.152222][T18581] ? clear_bhb_loop+0x40/0x90 [ 2897.156930][T18581] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2897.162853][T18581] RIP: 0033:0x7f3a4619c799 [ 2897.167340][T18581] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2897.186974][T18581] RSP: 002b:00007f3a47085028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2897.195510][T18581] RAX: ffffffffffffffda RBX: 00007f3a46415fa0 RCX: 00007f3a4619c799 [ 2897.203520][T18581] RDX: 000000000000fe33 RSI: 0000200000000000 RDI: 0000000000000005 [ 2897.211523][T18581] RBP: 00007f3a47085090 R08: 0000000000000000 R09: 0000000000000000 [ 2897.219525][T18581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2897.227776][T18581] R13: 00007f3a46416038 R14: 00007f3a46415fa0 R15: 00007fff509bc558 [ 2897.235795][T18581] [ 2897.304688][T18581] syz.2.14763: vmalloc error: size 65408, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 2897.321406][T18581] CPU: 1 PID: 18581 Comm: syz.2.14763 Not tainted syzkaller #0 [ 2897.329125][T18581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2897.339239][T18581] Call Trace: [ 2897.342570][T18581] [ 2897.345548][T18581] dump_stack_lvl+0x18c/0x250 [ 2897.350288][T18581] ? show_regs_print_info+0x20/0x20 [ 2897.355546][T18581] ? load_image+0x400/0x400 [ 2897.360108][T18581] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 2897.366586][T18581] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 2897.373145][T18581] warn_alloc+0x246/0x340 [ 2897.377540][T18581] ? __get_vm_area_node+0x125/0x370 [ 2897.382814][T18581] ? zone_watermark_ok_safe+0x230/0x230 [ 2897.388431][T18581] ? rcu_is_watching+0x15/0xb0 [ 2897.393268][T18581] ? __get_vm_area_node+0x356/0x370 [ 2897.394108][T18574] netlink: 'syz.3.14760': attribute type 10 has an invalid length. [ 2897.398523][T18581] __vmalloc_node_range+0x393/0x1330 [ 2897.398561][T18581] ? netlink_insert+0x109f/0x13a0 [ 2897.418571][T18581] ? netlink_data_ready+0x10/0x10 [ 2897.423649][T18581] ? free_vm_area+0x50/0x50 [ 2897.428196][T18581] ? netlink_sendmsg+0x602/0xbf0 [ 2897.433269][T18581] vmalloc+0x79/0x90 [ 2897.437198][T18581] ? netlink_sendmsg+0x602/0xbf0 [ 2897.442166][T18581] netlink_sendmsg+0x602/0xbf0 [ 2897.446994][T18581] ? lockdep_hardirqs_on+0x98/0x150 [ 2897.452228][T18581] ? netlink_getsockopt+0x590/0x590 [ 2897.457461][T18581] ? aa_sock_msg_perm+0x94/0x150 [ 2897.462474][T18581] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2897.467891][T18581] ? security_socket_sendmsg+0x80/0xa0 [ 2897.473381][T18581] sock_write_iter+0x2df/0x420 [ 2897.478179][T18581] ? sock_read_iter+0x3e0/0x3e0 [ 2897.483065][T18581] ? common_file_perm+0x198/0x1f0 [ 2897.488130][T18581] vfs_write+0x46c/0x990 [ 2897.492416][T18581] ? file_end_write+0x250/0x250 [ 2897.497311][T18581] ? __fget_files+0x43d/0x4b0 [ 2897.502024][T18581] ? __fdget_pos+0x1d8/0x330 [ 2897.506660][T18581] ? ksys_write+0x75/0x260 [ 2897.511136][T18581] ksys_write+0x150/0x260 [ 2897.515534][T18581] ? __ia32_sys_read+0x90/0x90 [ 2897.520350][T18581] ? syscall_enter_from_user_mode+0x2e/0x80 [ 2897.526285][T18581] do_syscall_64+0x55/0xa0 [ 2897.530732][T18581] ? clear_bhb_loop+0x40/0x90 [ 2897.535436][T18581] ? clear_bhb_loop+0x40/0x90 [ 2897.540232][T18581] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2897.546181][T18581] RIP: 0033:0x7f3a4619c799 [ 2897.550620][T18581] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2897.570273][T18581] RSP: 002b:00007f3a47085028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2897.578739][T18581] RAX: ffffffffffffffda RBX: 00007f3a46415fa0 RCX: 00007f3a4619c799 [ 2897.586741][T18581] RDX: 000000000000fe33 RSI: 0000200000000000 RDI: 0000000000000005 [ 2897.594737][T18581] RBP: 00007f3a47085090 R08: 0000000000000000 R09: 0000000000000000 [ 2897.602822][T18581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2897.610819][T18581] R13: 00007f3a46416038 R14: 00007f3a46415fa0 R15: 00007fff509bc558 [ 2897.618863][T18581] [ 2897.690760][T18581] Mem-Info: [ 2897.703976][T18581] active_anon:10623 inactive_anon:0 isolated_anon:0 [ 2897.703976][T18581] active_file:19621 inactive_file:41049 isolated_file:0 [ 2897.703976][T18581] unevictable:768 dirty:214 writeback:0 [ 2897.703976][T18581] slab_reclaimable:11043 slab_unreclaimable:97883 [ 2897.703976][T18581] mapped:30312 shmem:1373 pagetables:673 [ 2897.703976][T18581] sec_pagetables:0 bounce:0 [ 2897.703976][T18581] kernel_misc_reclaimable:0 [ 2897.703976][T18581] free:1318395 free_pcp:9049 free_cma:0 [ 2897.826609][T18581] Node 0 active_anon:42592kB inactive_anon:0kB active_file:78484kB inactive_file:164000kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121348kB dirty:856kB writeback:0kB shmem:3956kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10676kB pagetables:2592kB sec_pagetables:0kB all_unreclaimable? no [ 2897.880095][T18581] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 2897.911933][T18581] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2897.969380][T18581] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 2897.975586][T18581] Node 0 DMA32 free:1353268kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:42552kB inactive_anon:0kB active_file:78484kB inactive_file:163180kB unevictable:1536kB writepending:856kB present:3129332kB managed:2586964kB mlocked:0kB bounce:0kB free_pcp:28420kB local_pcp:9292kB free_cma:0kB [ 2898.017174][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 2898.023605][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 2898.053822][T18581] lowmem_reserve[]: 0 0 0 0 0 [ 2898.095409][T18581] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:820kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 2898.143816][T18581] lowmem_reserve[]: 0 0 0 0 0 [ 2898.148654][T18581] Node 1 Normal free:3904504kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:8192kB local_pcp:0kB free_cma:0kB [ 2898.218323][T18596] netlink: 'syz.5.14766': attribute type 29 has an invalid length. [ 2898.227050][T18581] lowmem_reserve[]: 0 0 0 0 0 [ 2898.234085][T18581] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2898.247157][T18581] Node 0 DMA32: 2651*4kB (UME) 2827*8kB (UME) 1471*16kB (UME) 602*32kB (UME) 2124*64kB (UME) 1000*128kB (UME) 525*256kB (UM) 502*512kB (UM) 288*1024kB (UME) 23*2048kB (UME) 68*4096kB (UM) = 1351924kB [ 2898.268370][T18581] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2898.288450][T18581] Node 1 Normal: 266*4kB (UE) 52*8kB (UE) 43*16kB (UE) 268*32kB (UE) 110*64kB (UME) 17*128kB (UME) 2*256kB (UE) 2*512kB (UM) 0*1024kB 2*2048kB (UE) 947*4096kB (M) = 3904504kB [ 2898.308533][T18581] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2898.320283][T18581] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2898.332831][T18581] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2898.343141][T18581] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2898.353408][T18581] 62043 total pagecache pages [ 2898.358660][T18581] 0 pages in swap cache [ 2898.362940][T18581] Free swap = 124996kB [ 2898.367942][T18581] Total swap = 124996kB [ 2898.381655][T18581] 2097051 pages RAM [ 2898.387364][T18581] 0 pages HighMem/MovableOnly [ 2898.393149][T18581] 416924 pages reserved [ 2898.399090][T18581] 0 pages cma reserved [ 2898.415635][T18596] netlink: 'syz.5.14766': attribute type 29 has an invalid length. [ 2898.443292][T18597] netlink: 'syz.5.14766': attribute type 29 has an invalid length. [ 2898.487842][T18598] netlink: 'syz.5.14766': attribute type 29 has an invalid length. [ 2898.527290][T18596] netlink: 201392 bytes leftover after parsing attributes in process `syz.5.14766'. [ 2898.604601][T18599] netlink: 'syz.5.14766': attribute type 29 has an invalid length. [ 2898.666308][T18596] netlink: 16410 bytes leftover after parsing attributes in process `syz.5.14766'. [ 2898.777790][T18604] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.14768'. [ 2898.790884][T18607] netlink: 'syz.3.14768': attribute type 10 has an invalid length. [ 2898.809359][T18602] dvmrp1: tun_chr_ioctl cmd 1074812118 [ 2898.866179][T18606] netlink: 132 bytes leftover after parsing attributes in process `syz.1.14769'. [ 2899.389128][T18617] netlink: 'syz.2.14771': attribute type 21 has an invalid length. [ 2899.456709][T18617] netlink: 156 bytes leftover after parsing attributes in process `syz.2.14771'. [ 2899.476148][T18617] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14771'. [ 2900.331336][T18638] FAULT_INJECTION: forcing a failure. [ 2900.331336][T18638] name failslab, interval 1, probability 0, space 0, times 0 [ 2900.350730][T18638] CPU: 1 PID: 18638 Comm: syz.1.14780 Not tainted syzkaller #0 [ 2900.358465][T18638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2900.368562][T18638] Call Trace: [ 2900.371876][T18638] [ 2900.374851][T18638] dump_stack_lvl+0x18c/0x250 [ 2900.379626][T18638] ? show_regs_print_info+0x20/0x20 [ 2900.384965][T18638] ? load_image+0x400/0x400 [ 2900.389516][T18638] ? verify_lock_unused+0x140/0x140 [ 2900.394771][T18638] should_fail_ex+0x39d/0x4d0 [ 2900.399509][T18638] should_failslab+0x9/0x20 [ 2900.404064][T18638] slab_pre_alloc_hook+0x59/0x310 [ 2900.409155][T18638] kmem_cache_alloc+0x5a/0x2d0 [ 2900.413991][T18638] ? skb_clone+0x1eb/0x370 [ 2900.418472][T18638] skb_clone+0x1eb/0x370 [ 2900.422763][T18638] __netlink_deliver_tap+0x41c/0x830 [ 2900.428125][T18638] ? netlink_deliver_tap+0x2e/0x1b0 [ 2900.433376][T18638] netlink_deliver_tap+0x19c/0x1b0 [ 2900.438544][T18638] __netlink_sendskb+0x4b/0x90 [ 2900.443366][T18638] netlink_dump+0xa75/0xe50 [ 2900.447949][T18638] ? netlink_lookup+0x200/0x200 [ 2900.452872][T18638] ? __kasan_kmalloc+0x8f/0xa0 [ 2900.457698][T18638] ? __inet_diag_dump_start+0x886/0x9f0 [ 2900.463287][T18638] ? netlink_lookup+0x30/0x200 [ 2900.468134][T18638] __netlink_dump_start+0x5f1/0x810 [ 2900.473395][T18638] inet_diag_handler_cmd+0x1e1/0x2c0 [ 2900.478735][T18638] ? inet_diag_unregister+0xb0/0xb0 [ 2900.483991][T18638] ? inet_diag_handler_get_info+0x7a0/0x7a0 [ 2900.489930][T18638] ? inet_diag_dump_start+0x20/0x20 [ 2900.495169][T18638] ? inet_diag_dump+0x50/0x50 [ 2900.499897][T18638] ? sock_diag_lock_handler+0x19/0x280 [ 2900.505396][T18638] ? sock_diag_lock_handler+0x19/0x280 [ 2900.510897][T18638] ? inet_diag_unregister+0xb0/0xb0 [ 2900.516145][T18638] sock_diag_rcv_msg+0x3d8/0x600 [ 2900.521161][T18638] netlink_rcv_skb+0x241/0x4d0 [ 2900.526039][T18638] ? sock_diag_bind+0xb0/0xb0 [ 2900.530776][T18638] ? netlink_ack+0x1180/0x1180 [ 2900.535609][T18638] ? __lock_acquire+0x7d40/0x7d40 [ 2900.540685][T18638] ? netlink_deliver_tap+0x2e/0x1b0 [ 2900.545939][T18638] sock_diag_rcv+0x2a/0x40 [ 2900.550408][T18638] netlink_unicast+0x751/0x8d0 [ 2900.555240][T18638] netlink_sendmsg+0x8d0/0xbf0 [ 2900.560071][T18638] ? netlink_getsockopt+0x590/0x590 [ 2900.565327][T18638] ? aa_sock_msg_perm+0x94/0x150 [ 2900.570316][T18638] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2900.575652][T18638] ? security_socket_sendmsg+0x80/0xa0 [ 2900.581158][T18638] ? netlink_getsockopt+0x590/0x590 [ 2900.586409][T18638] ____sys_sendmsg+0x5ba/0x960 [ 2900.591225][T18638] ? __asan_memset+0x22/0x40 [ 2900.595861][T18638] ? __sys_sendmsg_sock+0x30/0x30 [ 2900.600921][T18638] ? __import_iovec+0x5f2/0x850 [ 2900.605845][T18638] ? import_iovec+0x73/0xa0 [ 2900.610394][T18638] ___sys_sendmsg+0x2a6/0x360 [ 2900.615105][T18638] ? get_pid_task+0x20/0x1e0 [ 2900.619735][T18638] ? __sys_sendmsg+0x2a0/0x2a0 [ 2900.624582][T18638] ? __lock_acquire+0x7d40/0x7d40 [ 2900.629675][T18638] __se_sys_sendmsg+0x1c2/0x2b0 [ 2900.634652][T18638] ? __x64_sys_sendmsg+0x80/0x80 [ 2900.639650][T18638] ? lockdep_hardirqs_on+0x98/0x150 [ 2900.644898][T18638] do_syscall_64+0x55/0xa0 [ 2900.649359][T18638] ? clear_bhb_loop+0x40/0x90 [ 2900.654170][T18638] ? clear_bhb_loop+0x40/0x90 [ 2900.658896][T18638] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2900.664825][T18638] RIP: 0033:0x7fa50199c799 [ 2900.669277][T18638] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2900.689015][T18638] RSP: 002b:00007fa502922028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2900.697478][T18638] RAX: ffffffffffffffda RBX: 00007fa501c15fa0 RCX: 00007fa50199c799 [ 2900.705490][T18638] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 2900.713492][T18638] RBP: 00007fa502922090 R08: 0000000000000000 R09: 0000000000000000 [ 2900.721495][T18638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2900.729504][T18638] R13: 00007fa501c16038 R14: 00007fa501c15fa0 R15: 00007ffd3f04ad78 [ 2900.737530][T18638] [ 2900.802610][T18636] netlink: 132 bytes leftover after parsing attributes in process `syz.2.14781'. [ 2900.890295][T18633] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.14779'. [ 2900.925015][T18633] netlink: 'syz.3.14779': attribute type 10 has an invalid length. [ 2900.951144][T18644] netlink: 'syz.1.14782': attribute type 17 has an invalid length. [ 2900.960193][T18644] netlink: 148 bytes leftover after parsing attributes in process `syz.1.14782'. [ 2901.253106][T18649] netlink: 156 bytes leftover after parsing attributes in process `syz.5.14783'. [ 2901.534948][T18655] FAULT_INJECTION: forcing a failure. [ 2901.534948][T18655] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2901.558380][T18655] CPU: 1 PID: 18655 Comm: syz.3.14787 Not tainted syzkaller #0 [ 2901.566024][T18655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2901.576135][T18655] Call Trace: [ 2901.579477][T18655] [ 2901.582478][T18655] dump_stack_lvl+0x18c/0x250 [ 2901.587243][T18655] ? show_regs_print_info+0x20/0x20 [ 2901.592511][T18655] ? load_image+0x400/0x400 [ 2901.597094][T18655] ? __might_fault+0xaa/0x120 [ 2901.601835][T18655] ? __lock_acquire+0x7d40/0x7d40 [ 2901.606928][T18655] should_fail_ex+0x39d/0x4d0 [ 2901.611681][T18655] _copy_from_user+0x2f/0xe0 [ 2901.616339][T18655] generic_map_update_batch+0x59a/0x810 [ 2901.621951][T18655] ? rcu_read_unlock+0xa0/0xa0 [ 2901.626777][T18655] ? bpf_map_do_batch+0x1dc/0x610 [ 2901.631868][T18655] ? rcu_read_unlock+0xa0/0xa0 [ 2901.636689][T18655] bpf_map_do_batch+0x3d7/0x610 [ 2901.641607][T18655] __sys_bpf+0x381/0x890 [ 2901.645909][T18655] ? bpf_link_show_fdinfo+0x390/0x390 [ 2901.651359][T18655] ? lock_chain_count+0x20/0x20 [ 2901.656278][T18655] __x64_sys_bpf+0x7c/0x90 [ 2901.660754][T18655] do_syscall_64+0x55/0xa0 [ 2901.665231][T18655] ? clear_bhb_loop+0x40/0x90 [ 2901.669983][T18655] ? clear_bhb_loop+0x40/0x90 [ 2901.674815][T18655] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2901.680775][T18655] RIP: 0033:0x7fb707b9c799 [ 2901.685334][T18655] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2901.705111][T18655] RSP: 002b:00007fb708973028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2901.713619][T18655] RAX: ffffffffffffffda RBX: 00007fb707e15fa0 RCX: 00007fb707b9c799 [ 2901.721656][T18655] RDX: 0000000000000038 RSI: 0000200000000900 RDI: 000000000000001a [ 2901.729692][T18655] RBP: 00007fb708973090 R08: 0000000000000000 R09: 0000000000000000 [ 2901.737732][T18655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2901.745754][T18655] R13: 00007fb707e16038 R14: 00007fb707e15fa0 R15: 00007ffc05aa7ec8 [ 2901.753804][T18655] [ 2903.077088][T18689] validate_nla: 2 callbacks suppressed [ 2903.077177][T18689] netlink: 'syz.3.14799': attribute type 10 has an invalid length. [ 2903.190647][T18689] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 2903.380220][T18703] netlink: 'syz.1.14801': attribute type 10 has an invalid length. [ 2903.776182][T18707] __nla_validate_parse: 6 callbacks suppressed [ 2903.776264][T18707] netlink: 132 bytes leftover after parsing attributes in process `syz.1.14803'. [ 2904.377822][T18723] netlink: 65039 bytes leftover after parsing attributes in process `syz.5.14808'. [ 2906.938918][T18735] netlink: 16098 bytes leftover after parsing attributes in process `syz.5.14811'. [ 2906.952410][T18735] netlink: 'syz.5.14811': attribute type 10 has an invalid length. [ 2906.967497][T18735] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2907.042710][T18735] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2907.199848][T18735] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 2907.821750][T18744] netlink: 132 bytes leftover after parsing attributes in process `syz.1.14815'. [ 2908.950700][T18764] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2908.958202][T18764] IPv6: NLM_F_CREATE should be set when creating new route [ 2908.967591][T18764] IPv6: NLM_F_CREATE should be set when creating new route [ 2908.975170][T18764] IPv6: NLM_F_CREATE should be set when creating new route [ 2909.220820][T18773] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.14825'. [ 2909.251557][T18773] netlink: 'syz.3.14825': attribute type 10 has an invalid length. [ 2909.627197][T18785] netlink: 132 bytes leftover after parsing attributes in process `syz.1.14829'. [ 2909.649672][T18779] netlink: 'syz.2.14826': attribute type 29 has an invalid length. [ 2909.684662][T18779] netlink: 'syz.2.14826': attribute type 29 has an invalid length. [ 2909.700380][T18776] netlink: 'syz.2.14826': attribute type 29 has an invalid length. [ 2909.712901][T18776] netlink: 132 bytes leftover after parsing attributes in process `syz.2.14826'. [ 2910.682471][T18804] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2910.689967][T18804] IPv6: NLM_F_CREATE should be set when creating new route [ 2910.697706][T18804] IPv6: NLM_F_CREATE should be set when creating new route [ 2910.705534][T18804] IPv6: NLM_F_CREATE should be set when creating new route [ 2911.102327][T18812] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.14837'. [ 2911.162813][T18814] netlink: 'syz.1.14837': attribute type 10 has an invalid length. [ 2911.262670][T18816] netlink: 132 bytes leftover after parsing attributes in process `syz.5.14840'. [ 2911.630247][T18825] netlink: 132 bytes leftover after parsing attributes in process `syz.2.14841'. [ 2911.679645][T18818] netlink: 'syz.2.14841': attribute type 29 has an invalid length. [ 2911.741348][T18818] netlink: 'syz.2.14841': attribute type 29 has an invalid length. [ 2912.436950][T18839] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2912.444639][T18839] IPv6: NLM_F_CREATE should be set when creating new route [ 2912.452520][T18839] IPv6: NLM_F_CREATE should be set when creating new route [ 2912.460429][T18839] IPv6: NLM_F_CREATE should be set when creating new route [ 2912.919874][T18849] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.14853'. [ 2912.942003][T18850] netlink: 132 bytes leftover after parsing attributes in process `syz.2.14852'. [ 2913.508638][T18866] netlink: 'syz.3.14859': attribute type 11 has an invalid length. [ 2913.556637][T18866] netlink: 176 bytes leftover after parsing attributes in process `syz.3.14859'. [ 2914.354130][T18886] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2914.361559][T18886] IPv6: NLM_F_CREATE should be set when creating new route [ 2914.368898][T18886] IPv6: NLM_F_CREATE should be set when creating new route [ 2914.376218][T18886] IPv6: NLM_F_CREATE should be set when creating new route [ 2914.896021][T18892] netlink: 132 bytes leftover after parsing attributes in process `syz.2.14865'. [ 2915.622448][T18915] netlink: set zone limit has 8 unknown bytes [ 2916.823207][T18927] netlink: 132 bytes leftover after parsing attributes in process `syz.5.14877'. [ 2916.860862][T18931] netlink: 'syz.3.14878': attribute type 21 has an invalid length. [ 2917.090050][T18931] netdevsim netdevsim3 ªªªªªª: renamed from netdevsim0 (while UP) [ 2919.133290][T18959] netlink: 132 bytes leftover after parsing attributes in process `syz.5.14889'. [ 2921.354823][T19002] netlink: set zone limit has 8 unknown bytes [ 2921.538371][T18998] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2921.684390][T18998] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2923.919577][T19018] netlink: 132 bytes leftover after parsing attributes in process `syz.3.14912'. [ 2923.948060][T19023] netlink: 132 bytes leftover after parsing attributes in process `syz.2.14911'. [ 2924.136933][T19028] netlink: 164 bytes leftover after parsing attributes in process `syz.2.14915'. [ 2925.269907][T19049] netlink: set zone limit has 8 unknown bytes [ 2925.687654][T27287] Bluetooth: hci3: command 0x0406 tx timeout [ 2926.058257][T19057] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2926.118416][T19057] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2927.037206][T19066] netlink: 132 bytes leftover after parsing attributes in process `syz.1.14923'. [ 2928.451368][T16398] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 2930.802024][T19098] netlink: 44 bytes leftover after parsing attributes in process `syz.1.14933'. [ 2930.997844][T19096] netlink: 'syz.1.14933': attribute type 4 has an invalid length. [ 2931.614411][T19105] netlink: set zone limit has 8 unknown bytes [ 2931.844805][T19108] bond0: (slave ªªªªªª): Error: Device can not be enslaved while up [ 2933.106012][T19118] netlink: 'syz.3.14939': attribute type 2 has an invalid length. [ 2933.128390][T19118] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.14939'. [ 2933.300480][T19120] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2933.324285][T19120] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2935.015820][T19136] netlink: 164 bytes leftover after parsing attributes in process `syz.5.14944'. [ 2936.902372][T19146] netlink: 44 bytes leftover after parsing attributes in process `syz.5.14947'. [ 2937.161902][T19141] netlink: 'syz.5.14947': attribute type 4 has an invalid length. [ 2938.600635][T19163] netlink: 'syz.2.14951': attribute type 2 has an invalid length. [ 2938.647115][T19163] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.14951'. [ 2941.125099][T19177] netlink: 144 bytes leftover after parsing attributes in process `syz.3.14957'. [ 2942.699885][T19182] netlink: 164 bytes leftover after parsing attributes in process `syz.1.14956'. [ 2945.865075][T19202] netlink: 'syz.3.14963': attribute type 10 has an invalid length. [ 2946.164178][T27287] Bluetooth: hci1: command 0x0406 tx timeout [ 2953.729200][T19259] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.14979'. [ 2953.913479][T19259] netlink: 209844 bytes leftover after parsing attributes in process `syz.5.14979'. [ 2954.294617][T19265] netlink: 196 bytes leftover after parsing attributes in process `syz.2.14981'. [ 2955.446620][T19283] netlink: 'syz.2.14986': attribute type 10 has an invalid length. [ 2955.576485][T19286] FAULT_INJECTION: forcing a failure. [ 2955.576485][T19286] name failslab, interval 1, probability 0, space 0, times 0 [ 2955.615411][T19286] CPU: 0 PID: 19286 Comm: syz.1.14989 Not tainted syzkaller #0 [ 2955.623157][T19286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2955.633432][T19286] Call Trace: [ 2955.636818][T19286] [ 2955.639887][T19286] dump_stack_lvl+0x18c/0x250 [ 2955.644685][T19286] ? sctp_sendmsg+0x1575/0x28c0 [ 2955.649645][T19286] ? ___sys_sendmsg+0x2a6/0x360 [ 2955.654614][T19286] ? show_regs_print_info+0x20/0x20 [ 2955.659927][T19286] ? load_image+0x400/0x400 [ 2955.664647][T19286] should_fail_ex+0x39d/0x4d0 [ 2955.669475][T19286] should_failslab+0x9/0x20 [ 2955.674097][T19286] slab_pre_alloc_hook+0x59/0x310 [ 2955.679266][T19286] ? sctp_add_bind_addr+0x8c/0x360 [ 2955.684524][T19286] __kmem_cache_alloc_node+0x53/0x250 [ 2955.690034][T19286] ? sctp_add_bind_addr+0x8c/0x360 [ 2955.695340][T19286] kmalloc_trace+0x2a/0xe0 [ 2955.699887][T19286] sctp_add_bind_addr+0x8c/0x360 [ 2955.704961][T19286] sctp_copy_local_addr_list+0x315/0x4f0 [ 2955.710738][T19286] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 2955.716698][T19286] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 2955.722996][T19286] ? sctp_v4_is_any+0x35/0x60 [ 2955.727777][T19286] ? sctp_copy_one_addr+0x8c/0x350 [ 2955.733039][T19286] sctp_bind_addr_copy+0xb3/0x3c0 [ 2955.738208][T19286] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 2955.744679][T19286] sctp_connect_new_asoc+0x2f9/0x6a0 [ 2955.750115][T19286] ? __sctp_connect+0xd80/0xd80 [ 2955.755488][T19286] ? __local_bh_enable_ip+0x13a/0x1c0 [ 2955.761013][T19286] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 2955.766666][T19286] ? security_sctp_bind_connect+0x89/0xb0 [ 2955.772515][T19286] sctp_sendmsg+0x1575/0x28c0 [ 2955.777390][T19286] ? sctp_getsockopt+0xb60/0xb60 [ 2955.782469][T19286] ? aa_sk_perm+0x83c/0x970 [ 2955.787177][T19286] ? aa_af_perm+0x330/0x330 [ 2955.791772][T19286] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 2955.798318][T19286] ? sock_rps_record_flow+0x19/0x3f0 [ 2955.803735][T19286] ? inet_sendmsg+0xe9/0x2f0 [ 2955.808435][T19286] ? inet_send_prepare+0x260/0x260 [ 2955.813682][T19286] ____sys_sendmsg+0x5ba/0x960 [ 2955.818643][T19286] ? __lock_acquire+0x7d40/0x7d40 [ 2955.823828][T19286] ? __asan_memset+0x22/0x40 [ 2955.828618][T19286] ? __sys_sendmsg_sock+0x30/0x30 [ 2955.833762][T19286] ? __import_iovec+0x5f2/0x850 [ 2955.838826][T19286] ? import_iovec+0x73/0xa0 [ 2955.843478][T19286] ___sys_sendmsg+0x2a6/0x360 [ 2955.848294][T19286] ? get_pid_task+0x20/0x1e0 [ 2955.853067][T19286] ? __sys_sendmsg+0x2a0/0x2a0 [ 2955.858115][T19286] ? __lock_acquire+0x7d40/0x7d40 [ 2955.863449][T19286] __se_sys_sendmsg+0x1c2/0x2b0 [ 2955.868438][T19286] ? __x64_sys_sendmsg+0x80/0x80 [ 2955.873696][T19286] ? lockdep_hardirqs_on+0x98/0x150 [ 2955.879045][T19286] do_syscall_64+0x55/0xa0 [ 2955.883562][T19286] ? clear_bhb_loop+0x40/0x90 [ 2955.888333][T19286] ? clear_bhb_loop+0x40/0x90 [ 2955.893130][T19286] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2955.899138][T19286] RIP: 0033:0x7fa50199c799 [ 2955.903693][T19286] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2955.923422][T19286] RSP: 002b:00007fa502922028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2955.931988][T19286] RAX: ffffffffffffffda RBX: 00007fa501c15fa0 RCX: 00007fa50199c799 [ 2955.940061][T19286] RDX: 000000000004c0e0 RSI: 00002000000006c0 RDI: 0000000000000003 [ 2955.948132][T19286] RBP: 00007fa502922090 R08: 0000000000000000 R09: 0000000000000000 [ 2955.956192][T19286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2955.964279][T19286] R13: 00007fa501c16038 R14: 00007fa501c15fa0 R15: 00007ffd3f04ad78 [ 2955.972476][T19286] [ 2956.074966][T19291] netlink: 132 bytes leftover after parsing attributes in process `syz.2.14990'. [ 2956.636254][T19306] netlink: 'syz.5.14994': attribute type 2 has an invalid length. [ 2956.654853][T19306] netlink: 17267 bytes leftover after parsing attributes in process `syz.5.14994'. [ 2957.699450][T19322] netlink: 'syz.2.14999': attribute type 9 has an invalid length. [ 2957.711367][T19322] netlink: 49779 bytes leftover after parsing attributes in process `syz.2.14999'. [ 2957.723494][T19323] netlink: 'syz.2.14999': attribute type 9 has an invalid length. [ 2957.732615][T19323] netlink: 49779 bytes leftover after parsing attributes in process `syz.2.14999'. [ 2957.904677][T19328] netlink: 'syz.3.15001': attribute type 1 has an invalid length. [ 2957.924108][T19328] netlink: 'syz.3.15001': attribute type 4 has an invalid length. [ 2957.973886][T19328] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.15001'. [ 2959.571034][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 2959.578929][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 2966.645005][T16398] Bluetooth: hci2: command 0x0406 tx timeout [ 2966.980875][T19434] netlink: 65039 bytes leftover after parsing attributes in process `syz.5.15031'. [ 2967.057094][T19440] netlink: 184 bytes leftover after parsing attributes in process `syz.1.15030'. [ 2969.699589][T19465] netlink: 132 bytes leftover after parsing attributes in process `syz.5.15042'. [ 2971.358444][T19496] netlink: 'syz.5.15051': attribute type 29 has an invalid length. [ 2971.375406][T19496] netlink: 'syz.5.15051': attribute type 29 has an invalid length. [ 2971.398028][T19496] netlink: 'syz.5.15051': attribute type 29 has an invalid length. [ 2971.435749][T19496] netlink: 64 bytes leftover after parsing attributes in process `syz.5.15051'. [ 2971.545810][T19507] netlink: 'syz.3.15055': attribute type 29 has an invalid length. [ 2971.555153][T19507] netlink: 'syz.3.15055': attribute type 29 has an invalid length. [ 2972.014760][T19520] netlink: 'syz.5.15061': attribute type 28 has an invalid length. [ 2972.081420][T19520] netlink: 'syz.5.15061': attribute type 29 has an invalid length. [ 2972.110723][T19520] netlink: 132 bytes leftover after parsing attributes in process `syz.5.15061'. [ 2972.825795][T19533] netlink: 'syz.1.15067': attribute type 2 has an invalid length. [ 2972.841437][T19537] netlink: 'syz.5.15066': attribute type 3 has an invalid length. [ 2972.873803][T19537] netlink: 'syz.5.15066': attribute type 1 has an invalid length. [ 2972.904014][T19537] netlink: 187756 bytes leftover after parsing attributes in process `syz.5.15066'. [ 2973.843505][T19564] netlink: 112860 bytes leftover after parsing attributes in process `syz.5.15078'. [ 2974.787955][T19584] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.15082'. [ 2975.836109][T19602] netlink: 25867 bytes leftover after parsing attributes in process `syz.3.15090'. [ 2981.871290][T19652] netlink: 60 bytes leftover after parsing attributes in process `syz.5.15109'. [ 2981.884643][T19652] netlink: 60 bytes leftover after parsing attributes in process `syz.5.15109'. [ 2981.897374][T19652] netlink: 60 bytes leftover after parsing attributes in process `syz.5.15109'. [ 2982.720314][T19671] netlink: 146040 bytes leftover after parsing attributes in process `syz.3.15118'. [ 2986.423904][T19691] validate_nla: 2 callbacks suppressed [ 2986.423923][T19691] netlink: 'syz.3.15123': attribute type 10 has an invalid length. [ 2988.439876][T19722] FAULT_INJECTION: forcing a failure. [ 2988.439876][T19722] name failslab, interval 1, probability 0, space 0, times 0 [ 2988.483975][T19722] CPU: 1 PID: 19722 Comm: syz.3.15136 Not tainted syzkaller #0 [ 2988.491619][T19722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2988.501722][T19722] Call Trace: [ 2988.505127][T19722] [ 2988.508090][T19722] dump_stack_lvl+0x18c/0x250 [ 2988.512941][T19722] ? show_regs_print_info+0x20/0x20 [ 2988.518248][T19722] ? load_image+0x400/0x400 [ 2988.523064][T19722] ? __might_sleep+0xe0/0xe0 [ 2988.527719][T19722] ? __lock_acquire+0x7d40/0x7d40 [ 2988.532778][T19722] should_fail_ex+0x39d/0x4d0 [ 2988.537499][T19722] should_failslab+0x9/0x20 [ 2988.542047][T19722] slab_pre_alloc_hook+0x59/0x310 [ 2988.547116][T19722] ? kvmalloc_node+0x70/0x180 [ 2988.552002][T19722] ? kvmalloc_node+0x70/0x180 [ 2988.556712][T19722] __kmem_cache_alloc_node+0x53/0x250 [ 2988.562131][T19722] ? kvmalloc_node+0x70/0x180 [ 2988.566866][T19722] __kmalloc_node+0xa4/0x230 [ 2988.571614][T19722] kvmalloc_node+0x70/0x180 [ 2988.576184][T19722] page_pool_create+0x1eb/0x5c0 [ 2988.581744][T19722] bpf_test_run_xdp_live+0x203/0x1b20 [ 2988.587623][T19722] ? 0xffffffffa0004180 [ 2988.591940][T19722] ? 0xffffffffa0004180 [ 2988.596135][T19722] ? bpf_dispatcher_change_prog+0xcbf/0xf10 [ 2988.602097][T19722] ? 0xffffffffa0004180 [ 2988.606322][T19722] ? xdp_convert_md_to_buff+0x330/0x330 [ 2988.611946][T19722] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 2988.618258][T19722] ? _copy_from_user+0xa5/0xe0 [ 2988.623058][T19722] ? bpf_test_init+0x119/0x140 [ 2988.627855][T19722] ? xdp_convert_md_to_buff+0x5b/0x330 [ 2988.633350][T19722] bpf_prog_test_run_xdp+0x7ca/0x10e0 [ 2988.638774][T19722] ? dev_put+0x80/0x80 [ 2988.642883][T19722] ? dev_put+0x80/0x80 [ 2988.646992][T19722] bpf_prog_test_run+0x321/0x390 [ 2988.651981][T19722] __sys_bpf+0x49d/0x890 [ 2988.656255][T19722] ? bpf_link_show_fdinfo+0x390/0x390 [ 2988.661673][T19722] ? lock_chain_count+0x20/0x20 [ 2988.666602][T19722] __x64_sys_bpf+0x7c/0x90 [ 2988.671053][T19722] do_syscall_64+0x55/0xa0 [ 2988.675503][T19722] ? clear_bhb_loop+0x40/0x90 [ 2988.680212][T19722] ? clear_bhb_loop+0x40/0x90 [ 2988.684938][T19722] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2988.690886][T19722] RIP: 0033:0x7fb707b9c799 [ 2988.695334][T19722] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2988.714984][T19722] RSP: 002b:00007fb708973028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2988.723435][T19722] RAX: ffffffffffffffda RBX: 00007fb707e15fa0 RCX: 00007fb707b9c799 [ 2988.731442][T19722] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 2988.739453][T19722] RBP: 00007fb708973090 R08: 0000000000000000 R09: 0000000000000000 [ 2988.747453][T19722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2988.755456][T19722] R13: 00007fb707e16038 R14: 00007fb707e15fa0 R15: 00007ffc05aa7ec8 [ 2988.763478][T19722] [ 2988.812372][T19722] page_pool_create() gave up with errno -12 [ 2989.425528][T19749] netlink: 'syz.3.15147': attribute type 1 has an invalid length. [ 2989.447947][T19749] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.15147'. [ 2989.645712][T19753] netlink: 'syz.3.15148': attribute type 10 has an invalid length. [ 2989.953614][T19764] netlink: 'syz.2.15153': attribute type 4 has an invalid length. [ 2990.086049][T19768] netlink: 'syz.1.15154': attribute type 5 has an invalid length. [ 2990.243349][T19772] netlink: 'syz.5.15156': attribute type 5 has an invalid length. [ 2990.429831][T19780] netlink: 60 bytes leftover after parsing attributes in process `syz.2.15165'. [ 2990.468882][T19780] netlink: 60 bytes leftover after parsing attributes in process `syz.2.15165'. [ 2990.505833][T19780] netlink: 60 bytes leftover after parsing attributes in process `syz.2.15165'. [ 2990.549169][T19782] netlink: 'syz.1.15160': attribute type 10 has an invalid length. [ 2991.544408][T19808] netlink: 'syz.2.15172': attribute type 10 has an invalid length. [ 2992.343725][T19836] netlink: 'syz.2.15183': attribute type 10 has an invalid length. [ 2993.238801][T19861] netlink: 'syz.2.15193': attribute type 10 has an invalid length. [ 2993.539332][T19867] netlink: 146040 bytes leftover after parsing attributes in process `syz.1.15195'. [ 2995.035591][T19898] netlink: 'syz.1.15205': attribute type 10 has an invalid length. [ 2995.357098][T19905] netlink: 146040 bytes leftover after parsing attributes in process `syz.1.15209'. [ 2999.850364][T19921] netlink: 'syz.2.15213': attribute type 19 has an invalid length. [ 2999.858715][T19921] netlink: 55 bytes leftover after parsing attributes in process `syz.2.15213'. [ 3000.176019][T19937] netlink: 'syz.2.15217': attribute type 10 has an invalid length. [ 3001.214798][T19952] netlink: 'syz.3.15224': attribute type 21 has an invalid length. [ 3001.240612][T19952] netlink: 156 bytes leftover after parsing attributes in process `syz.3.15224'. [ 3001.270863][T19952] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15224'. [ 3001.715851][T19959] sock: sock_timestamping_bind_phc: sock not bind to device [ 3002.876912][T19991] netlink: 'syz.2.15237': attribute type 10 has an invalid length. [ 3003.621917][T20019] FAULT_INJECTION: forcing a failure. [ 3003.621917][T20019] name failslab, interval 1, probability 0, space 0, times 0 [ 3003.634772][T20019] CPU: 1 PID: 20019 Comm: syz.5.15247 Not tainted syzkaller #0 [ 3003.642382][T20019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 3003.652502][T20019] Call Trace: [ 3003.655845][T20019] [ 3003.658836][T20019] dump_stack_lvl+0x18c/0x250 [ 3003.663599][T20019] ? show_regs_print_info+0x20/0x20 [ 3003.668867][T20019] ? load_image+0x400/0x400 [ 3003.673452][T20019] should_fail_ex+0x39d/0x4d0 [ 3003.678205][T20019] should_failslab+0x9/0x20 [ 3003.682767][T20019] slab_pre_alloc_hook+0x59/0x310 [ 3003.687909][T20019] kmem_cache_alloc+0x5a/0x2d0 [ 3003.692732][T20019] ? fib6_add_1+0x9c8/0x1450 [ 3003.697395][T20019] fib6_add_1+0x9c8/0x1450 [ 3003.701895][T20019] fib6_add+0x1ec/0x46f0 [ 3003.706209][T20019] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 3003.712864][T20019] ? ip_fib_metrics_init+0x422/0x710 [ 3003.718223][T20019] ? fib6_update_sernum_stub+0x1e0/0x1e0 [ 3003.723937][T20019] ? do_raw_spin_lock+0x11f/0x2c0 [ 3003.729034][T20019] ? __rwlock_init+0x150/0x150 [ 3003.733864][T20019] ? ip6_route_add+0x75/0x160 [ 3003.738603][T20019] ip6_route_add+0x8a/0x160 [ 3003.743168][T20019] ipv6_route_ioctl+0x3b4/0x500 [ 3003.748077][T20019] ? rt6_purge_dflt_routers+0xb20/0xb20 [ 3003.753699][T20019] ? __might_fault+0xaa/0x120 [ 3003.758423][T20019] ? __might_fault+0xc6/0x120 [ 3003.763150][T20019] ? __might_fault+0xaa/0x120 [ 3003.767878][T20019] inet6_ioctl+0x247/0x2d0 [ 3003.772345][T20019] ? inet6_getname+0x650/0x650 [ 3003.777169][T20019] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 3003.782748][T20019] sock_do_ioctl+0xfc/0x310 [ 3003.787329][T20019] ? sock_show_fdinfo+0xb0/0xb0 [ 3003.792261][T20019] sock_ioctl+0x5ba/0x7e0 [ 3003.796653][T20019] ? sock_poll+0x3e0/0x3e0 [ 3003.801128][T20019] ? bpf_lsm_file_ioctl+0x9/0x10 [ 3003.806121][T20019] ? security_file_ioctl+0x80/0xa0 [ 3003.811304][T20019] ? sock_poll+0x3e0/0x3e0 [ 3003.815777][T20019] __se_sys_ioctl+0xfd/0x170 [ 3003.820448][T20019] do_syscall_64+0x55/0xa0 [ 3003.824938][T20019] ? clear_bhb_loop+0x40/0x90 [ 3003.829687][T20019] ? clear_bhb_loop+0x40/0x90 [ 3003.834419][T20019] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3003.840364][T20019] RIP: 0033:0x7f2a6e99c799 [ 3003.844833][T20019] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3003.864502][T20019] RSP: 002b:00007f2a6f7a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3003.873066][T20019] RAX: ffffffffffffffda RBX: 00007f2a6ec15fa0 RCX: 00007f2a6e99c799 [ 3003.881090][T20019] RDX: 0000200000000000 RSI: 000000000000890b RDI: 0000000000000003 [ 3003.889124][T20019] RBP: 00007f2a6f7a4090 R08: 0000000000000000 R09: 0000000000000000 [ 3003.897155][T20019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3003.905177][T20019] R13: 00007f2a6ec16038 R14: 00007f2a6ec15fa0 R15: 00007ffe3f55e338 [ 3003.913220][T20019] [ 3004.759896][T20032] netlink: 'syz.2.15251': attribute type 21 has an invalid length. [ 3004.782411][T20032] netlink: 156 bytes leftover after parsing attributes in process `syz.2.15251'. [ 3004.842351][T20032] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15251'. [ 3005.330019][T20041] netlink: 'syz.5.15253': attribute type 10 has an invalid length. [ 3006.159415][T20054] mac80211_hwsim hwsim109 wlan1: entered promiscuous mode [ 3006.174872][T20054] mac80211_hwsim hwsim109 wlan1: entered allmulticast mode [ 3006.362683][T20064] netlink: 'syz.1.15261': attribute type 21 has an invalid length. [ 3006.393504][T20064] netlink: 156 bytes leftover after parsing attributes in process `syz.1.15261'. [ 3006.464080][T20064] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15261'. [ 3006.640223][T20068] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.15263'. [ 3007.183852][T20085] netlink: 'syz.5.15267': attribute type 20 has an invalid length. [ 3010.727614][T20094] netlink: 'syz.3.15271': attribute type 21 has an invalid length. [ 3010.736020][T20094] netlink: 156 bytes leftover after parsing attributes in process `syz.3.15271'. [ 3010.745530][T20094] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15271'. [ 3010.876618][T20110] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.15273'. [ 3010.967129][T20114] netlink: 60 bytes leftover after parsing attributes in process `syz.2.15275'. [ 3010.994701][T20114] netlink: 60 bytes leftover after parsing attributes in process `syz.2.15275'. [ 3011.022124][T20112] netlink: 'syz.1.15274': attribute type 21 has an invalid length. [ 3011.035983][T20112] netlink: 156 bytes leftover after parsing attributes in process `syz.1.15274'. [ 3011.054073][T20112] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15274'. [ 3011.420892][T20124] veth1_to_bond: entered allmulticast mode [ 3011.790526][T20139] __nla_validate_parse: 2 callbacks suppressed [ 3011.790593][T20139] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.15286'. [ 3011.926963][T20141] netlink: 'syz.1.15287': attribute type 21 has an invalid length. [ 3011.938536][T20141] netlink: 156 bytes leftover after parsing attributes in process `syz.1.15287'. [ 3011.950760][T20141] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15287'. [ 3011.979611][T20145] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.15288'. [ 3012.030431][T27287] Bluetooth: hci2: ISO packet for unknown connection handle 2097 [ 3012.181538][T20151] netlink: 60 bytes leftover after parsing attributes in process `syz.1.15293'. [ 3012.216013][T20151] netlink: 60 bytes leftover after parsing attributes in process `syz.1.15293'. [ 3012.251059][T20151] netlink: 60 bytes leftover after parsing attributes in process `syz.1.15293'. [ 3012.287693][T20151] netlink: 60 bytes leftover after parsing attributes in process `syz.1.15293'. [ 3012.613883][T20163] netlink: 'syz.2.15296': attribute type 5 has an invalid length. [ 3012.726853][T20165] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.15297'. [ 3012.986416][T20171] netlink: 'syz.2.15299': attribute type 21 has an invalid length. [ 3013.014349][T20171] netlink: 156 bytes leftover after parsing attributes in process `syz.2.15299'. [ 3013.622838][T20195] FAULT_INJECTION: forcing a failure. [ 3013.622838][T20195] name failslab, interval 1, probability 0, space 0, times 0 [ 3013.642441][T20195] CPU: 1 PID: 20195 Comm: syz.5.15308 Not tainted syzkaller #0 [ 3013.650104][T20195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 3013.660235][T20195] Call Trace: [ 3013.663563][T20195] [ 3013.666529][T20195] dump_stack_lvl+0x18c/0x250 [ 3013.671256][T20195] ? sctp_sendmsg+0x1575/0x28c0 [ 3013.676148][T20195] ? ___sys_sendmsg+0x2a6/0x360 [ 3013.681057][T20195] ? show_regs_print_info+0x20/0x20 [ 3013.686310][T20195] ? load_image+0x400/0x400 [ 3013.690903][T20195] should_fail_ex+0x39d/0x4d0 [ 3013.695651][T20195] should_failslab+0x9/0x20 [ 3013.700201][T20195] slab_pre_alloc_hook+0x59/0x310 [ 3013.705283][T20195] ? sctp_add_bind_addr+0x8c/0x360 [ 3013.710433][T20195] __kmem_cache_alloc_node+0x53/0x250 [ 3013.715853][T20195] ? sctp_add_bind_addr+0x8c/0x360 [ 3013.721088][T20195] kmalloc_trace+0x2a/0xe0 [ 3013.725557][T20195] sctp_add_bind_addr+0x8c/0x360 [ 3013.730543][T20195] sctp_copy_local_addr_list+0x315/0x4f0 [ 3013.736242][T20195] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 3013.742101][T20195] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 3013.748224][T20195] ? sctp_v6_is_any+0x64/0x70 [ 3013.752961][T20195] ? sctp_copy_one_addr+0x8c/0x350 [ 3013.758121][T20195] sctp_bind_addr_copy+0xb3/0x3c0 [ 3013.763191][T20195] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 3013.769573][T20195] sctp_connect_new_asoc+0x2f9/0x6a0 [ 3013.774905][T20195] ? __sctp_connect+0xd80/0xd80 [ 3013.779802][T20195] ? __local_bh_enable_ip+0x13a/0x1c0 [ 3013.785262][T20195] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 3013.790849][T20195] ? security_sctp_bind_connect+0x89/0xb0 [ 3013.796621][T20195] sctp_sendmsg+0x1575/0x28c0 [ 3013.801362][T20195] ? sctp_getsockopt+0xb60/0xb60 [ 3013.806423][T20195] ? aa_sk_perm+0x83c/0x970 [ 3013.810987][T20195] ? aa_af_perm+0x330/0x330 [ 3013.815534][T20195] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 3013.822034][T20195] ? sock_rps_record_flow+0x19/0x3f0 [ 3013.827368][T20195] ? inet_sendmsg+0xe9/0x2f0 [ 3013.832001][T20195] ? inet_send_prepare+0x260/0x260 [ 3013.837159][T20195] ____sys_sendmsg+0x5ba/0x960 [ 3013.841961][T20195] ? __lock_acquire+0x7d40/0x7d40 [ 3013.847034][T20195] ? __asan_memset+0x22/0x40 [ 3013.851675][T20195] ? __sys_sendmsg_sock+0x30/0x30 [ 3013.856735][T20195] ? __import_iovec+0x5f2/0x850 [ 3013.861649][T20195] ? import_iovec+0x73/0xa0 [ 3013.866198][T20195] ___sys_sendmsg+0x2a6/0x360 [ 3013.870930][T20195] ? __sys_sendmsg+0x2a0/0x2a0 [ 3013.875785][T20195] ? __lock_acquire+0x7d40/0x7d40 [ 3013.880894][T20195] __se_sys_sendmsg+0x1c2/0x2b0 [ 3013.885791][T20195] ? __x64_sys_sendmsg+0x80/0x80 [ 3013.890822][T20195] ? lockdep_hardirqs_on+0x98/0x150 [ 3013.896074][T20195] do_syscall_64+0x55/0xa0 [ 3013.900537][T20195] ? clear_bhb_loop+0x40/0x90 [ 3013.905259][T20195] ? clear_bhb_loop+0x40/0x90 [ 3013.909980][T20195] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3013.915910][T20195] RIP: 0033:0x7f2a6e99c799 [ 3013.920365][T20195] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3013.940029][T20195] RSP: 002b:00007f2a6f7a4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3013.948489][T20195] RAX: ffffffffffffffda RBX: 00007f2a6ec15fa0 RCX: 00007f2a6e99c799 [ 3013.956618][T20195] RDX: 0000000030008041 RSI: 0000200000002dc0 RDI: 0000000000000004 [ 3013.964650][T20195] RBP: 00007f2a6f7a4090 R08: 0000000000000000 R09: 0000000000000000 [ 3013.972654][T20195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3013.980659][T20195] R13: 00007f2a6ec16038 R14: 00007f2a6ec15fa0 R15: 00007ffe3f55e338 [ 3013.988706][T20195] [ 3014.031268][T20187] syzkaller0: entered promiscuous mode [ 3014.037337][T20187] syzkaller0: entered allmulticast mode [ 3014.458514][T20208] syz.5.15309[20208] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3016.797732][T20209] netlink: 'syz.2.15311': attribute type 10 has an invalid length. [ 3016.930313][T20213] netlink: 'syz.5.15312': attribute type 21 has an invalid length. [ 3016.946770][T20213] __nla_validate_parse: 2 callbacks suppressed [ 3016.946793][T20213] netlink: 156 bytes leftover after parsing attributes in process `syz.5.15312'. [ 3016.964670][T20213] netlink: 4 bytes leftover after parsing attributes in process `syz.5.15312'. [ 3017.239861][T20227] FAULT_INJECTION: forcing a failure. [ 3017.239861][T20227] name failslab, interval 1, probability 0, space 0, times 0 [ 3017.375997][T20227] CPU: 0 PID: 20227 Comm: syz.1.15317 Not tainted syzkaller #0 [ 3017.383638][T20227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 3017.393750][T20227] Call Trace: [ 3017.397074][T20227] [ 3017.400054][T20227] dump_stack_lvl+0x18c/0x250 [ 3017.404798][T20227] ? show_regs_print_info+0x20/0x20 [ 3017.410059][T20227] ? load_image+0x400/0x400 [ 3017.414622][T20227] ? __might_sleep+0xe0/0xe0 [ 3017.419300][T20227] ? __lock_acquire+0x7d40/0x7d40 [ 3017.424371][T20227] ? perf_trace_lock_acquire+0x104/0x410 [ 3017.430072][T20227] should_fail_ex+0x39d/0x4d0 [ 3017.434817][T20227] should_failslab+0x9/0x20 [ 3017.439373][T20227] slab_pre_alloc_hook+0x59/0x310 [ 3017.444456][T20227] ? bpf_prog_test_run_skb+0x238/0x12b0 [ 3017.450061][T20227] ? bpf_prog_test_run_skb+0x238/0x12b0 [ 3017.455650][T20227] __kmem_cache_alloc_node+0x53/0x250 [ 3017.461085][T20227] ? bpf_prog_test_run_skb+0x238/0x12b0 [ 3017.466677][T20227] __kmalloc+0xa4/0x230 [ 3017.470898][T20227] bpf_prog_test_run_skb+0x238/0x12b0 [ 3017.476315][T20227] ? __fget_files+0x28/0x4b0 [ 3017.480958][T20227] ? __fget_files+0x28/0x4b0 [ 3017.485598][T20227] ? __fget_files+0x43d/0x4b0 [ 3017.490341][T20227] ? cpu_online+0x60/0x60 [ 3017.494728][T20227] bpf_prog_test_run+0x321/0x390 [ 3017.499744][T20227] __sys_bpf+0x49d/0x890 [ 3017.504168][T20227] ? bpf_link_show_fdinfo+0x390/0x390 [ 3017.509628][T20227] ? lock_chain_count+0x20/0x20 [ 3017.514639][T20227] __x64_sys_bpf+0x7c/0x90 [ 3017.519195][T20227] do_syscall_64+0x55/0xa0 [ 3017.523666][T20227] ? clear_bhb_loop+0x40/0x90 [ 3017.528389][T20227] ? clear_bhb_loop+0x40/0x90 [ 3017.533119][T20227] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3017.539061][T20227] RIP: 0033:0x7fa50199c799 [ 3017.543529][T20227] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3017.563183][T20227] RSP: 002b:00007fa502922028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3017.571648][T20227] RAX: ffffffffffffffda RBX: 00007fa501c15fa0 RCX: 00007fa50199c799 [ 3017.579664][T20227] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 3017.587674][T20227] RBP: 00007fa502922090 R08: 0000000000000000 R09: 0000000000000000 [ 3017.595706][T20227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3017.603719][T20227] R13: 00007fa501c16038 R14: 00007fa501c15fa0 R15: 00007ffd3f04ad78 [ 3017.611756][T20227] [ 3017.827626][T20240] netlink: 'syz.1.15320': attribute type 10 has an invalid length. [ 3017.837903][T20240] netlink: 2 bytes leftover after parsing attributes in process `syz.1.15320'. [ 3017.942720][T20240] team0: Port device virt_wifi0 added [ 3020.891342][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 3020.897916][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 3082.332004][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 3082.340141][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 3122.253640][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 3122.260395][ C1] rcu: 1-....: (10479 ticks this GP) idle=100c/1/0x4000000000000000 softirq=237669/237669 fqs=5236 [ 3122.272389][ C1] rcu: hardirqs softirqs csw/system [ 3122.278821][ C1] rcu: number: 1367564 0 0 [ 3122.285253][ C1] rcu: cputime: 16426 36053 68 ==> 52500(ms) [ 3122.293084][ C1] rcu: (t=10502 jiffies g=360297 q=1522 ncpus=2) [ 3122.299531][ C1] CPU: 1 PID: 20220 Comm: syz.3.15315 Not tainted syzkaller #0 [ 3122.307174][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 3122.317257][ C1] RIP: 0010:rcu_read_unlock_special+0x83/0x4d0 [ 3122.323475][ C1] Code: eb 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 2b 42 c7 44 2b 08 f8 f3 f3 f3 65 44 8b 35 6e 05 92 7e 41 f7 c6 00 00 f0 00 74 40 <48> c7 44 24 20 0e 36 e0 45 4a c7 04 2b 00 00 00 00 42 c7 44 2b 08 [ 3122.343154][ C1] RSP: 0018:ffffc900001f0400 EFLAGS: 00000206 [ 3122.349273][ C1] RAX: 51774f71035d2700 RBX: 1ffff9200003e084 RCX: 51774f71035d2700 [ 3122.357274][ C1] RDX: dffffc0000000000 RSI: ffffffff8acac960 RDI: ffffffff8b1c85a0 [ 3122.365260][ C1] RBP: ffffc900001f04c8 R08: ffffffff911c15ff R09: 1ffffffff22382bf [ 3122.373244][ C1] R10: dffffc0000000000 R11: fffffbfff22382c0 R12: ffffffff8d137300 [ 3122.381399][ C1] R13: dffffc0000000000 R14: ffff8880b8f3cf50 R15: 1ffff110171e79ea [ 3122.389390][ C1] FS: 00007fb7089736c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 3122.398349][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3122.405117][ C1] CR2: 00007f2a6e9e9e80 CR3: 000000009345c000 CR4: 00000000003506e0 [ 3122.413112][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3122.421092][ C1] DR3: 0000200000000300 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 3122.429080][ C1] Call Trace: [ 3122.432365][ C1] [ 3122.435228][ C1] ? __rcu_read_unlock+0xd0/0xd0 [ 3122.440191][ C1] ? read_lock_is_recursive+0x20/0x20 [ 3122.445596][ C1] ? deref_stack_reg+0x1bd/0x240 [ 3122.450571][ C1] __rcu_read_unlock+0x7c/0xd0 [ 3122.455351][ C1] is_bpf_text_address+0x27e/0x2a0 [ 3122.460494][ C1] ? is_bpf_text_address+0x26/0x2a0 [ 3122.465724][ C1] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3122.471802][ C1] kernel_text_address+0xa0/0xd0 [ 3122.476755][ C1] __kernel_text_address+0xd/0x30 [ 3122.481798][ C1] unwind_get_return_address+0x5d/0xc0 [ 3122.487268][ C1] ? stack_trace_save+0x100/0x100 [ 3122.492308][ C1] arch_stack_walk+0x11d/0x190 [ 3122.497091][ C1] stack_trace_save+0xaa/0x100 [ 3122.501881][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 3122.507041][ C1] kasan_set_track+0x4e/0x70 [ 3122.511641][ C1] ? kasan_set_track+0x4e/0x70 [ 3122.516438][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 3122.521489][ C1] ? slab_post_alloc_hook+0x6e/0x4b0 [ 3122.526816][ C1] ? kmem_cache_alloc_node+0x14c/0x320 [ 3122.532300][ C1] ? __alloc_skb+0x103/0x2c0 [ 3122.536933][ C1] ? ndisc_alloc_skb+0xa6/0x450 [ 3122.541882][ C1] ? ndisc_send_rs+0x2a6/0x610 [ 3122.546671][ C1] ? addrconf_rs_timer+0x2d5/0x630 [ 3122.551794][ C1] ? call_timer_fn+0x189/0x540 [ 3122.556565][ C1] ? __run_timers+0x542/0x800 [ 3122.561246][ C1] ? run_timer_softirq+0x67/0xf0 [ 3122.566190][ C1] ? handle_softirqs+0x280/0x820 [ 3122.571133][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 3122.575902][ C1] ? irq_exit_rcu+0x9/0x20 [ 3122.580333][ C1] ? sysvec_apic_timer_interrupt+0xa4/0xc0 [ 3122.586150][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3122.592315][ C1] ? schedule_preempt_disabled+0x20/0x20 [ 3122.597955][ C1] ? preempt_schedule_thunk+0x1a/0x30 [ 3122.603338][ C1] ? smp_call_function_single+0x48d/0x5a0 [ 3122.609066][ C1] ? perf_install_in_context+0x5be/0x920 [ 3122.614704][ C1] ? __se_sys_perf_event_open+0x1836/0x1c50 [ 3122.620606][ C1] ? do_syscall_64+0x55/0xa0 [ 3122.625215][ C1] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3122.631321][ C1] __kasan_slab_alloc+0x6c/0x80 [ 3122.636189][ C1] slab_post_alloc_hook+0x6e/0x4b0 [ 3122.641320][ C1] kmem_cache_alloc_node+0x14c/0x320 [ 3122.646615][ C1] ? __alloc_skb+0xf3/0x2c0 [ 3122.651130][ C1] ? __alloc_skb+0x103/0x2c0 [ 3122.655751][ C1] __alloc_skb+0x103/0x2c0 [ 3122.660190][ C1] ndisc_alloc_skb+0xa6/0x450 [ 3122.664874][ C1] ndisc_send_rs+0x2a6/0x610 [ 3122.669491][ C1] addrconf_rs_timer+0x2d5/0x630 [ 3122.674528][ C1] ? addrconf_disable_policy_idev+0x480/0x480 [ 3122.680601][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 3122.686599][ C1] call_timer_fn+0x189/0x540 [ 3122.691198][ C1] ? addrconf_disable_policy_idev+0x480/0x480 [ 3122.697284][ C1] ? call_timer_fn+0xd2/0x540 [ 3122.701969][ C1] ? __run_timers+0x800/0x800 [ 3122.706679][ C1] ? addrconf_disable_policy_idev+0x480/0x480 [ 3122.712755][ C1] __run_timers+0x542/0x800 [ 3122.717279][ C1] ? detach_timer+0x2b0/0x2b0 [ 3122.721975][ C1] run_timer_softirq+0x67/0xf0 [ 3122.726765][ C1] handle_softirqs+0x280/0x820 [ 3122.731540][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 3122.736328][ C1] ? do_softirq+0x1a0/0x1a0 [ 3122.740845][ C1] __irq_exit_rcu+0xd3/0x190 [ 3122.745443][ C1] ? irq_exit_rcu+0x20/0x20 [ 3122.749962][ C1] irq_exit_rcu+0x9/0x20 [ 3122.754207][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 3122.759856][ C1] [ 3122.762880][ C1] [ 3122.765856][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3122.771853][ C1] RIP: 0010:preempt_schedule+0x0/0xd0 [ 3122.777236][ C1] Code: 4c 89 f7 e8 f2 f4 51 f7 eb af 66 0f 1f 00 bf 01 00 00 00 e8 52 30 cf f6 e8 fd fd ff ff bf 01 00 00 00 e8 a3 2e cf f6 c3 66 90 0f 1e fa 55 48 89 e5 41 56 53 48 83 e4 e0 48 83 ec 60 65 48 8b [ 3122.796848][ C1] RSP: 0018:ffffc9000e75fa80 EFLAGS: 00000287 [ 3122.802919][ C1] RAX: ffffffff817c1378 RBX: 0000000000000000 RCX: 0000000000080000 [ 3122.810899][ C1] RDX: ffffc90004fc1000 RSI: 000000000000ce2f RDI: 000000000000ce30 [ 3122.818877][ C1] RBP: ffffc9000e75fad0 R08: ffffffff911c15ff R09: 1ffffffff22382bf [ 3122.826855][ C1] R10: dffffc0000000000 R11: fffffbfff22382c0 R12: 0000000000000000 [ 3122.834919][ C1] R13: dffffc0000000000 R14: 1ffff92001cebf60 R15: 1ffff92001cebf60 [ 3122.842903][ C1] ? smp_call_function_single+0x488/0x5a0 [ 3122.848642][ C1] preempt_schedule_thunk+0x1a/0x30 [ 3122.853855][ C1] ? smp_call_function_single+0x488/0x5a0 [ 3122.859593][ C1] smp_call_function_single+0x48d/0x5a0 [ 3122.865155][ C1] ? event_function+0x300/0x300 [ 3122.870016][ C1] ? flush_smp_call_function_queue+0x250/0x250 [ 3122.876179][ C1] ? event_function+0x300/0x300 [ 3122.881049][ C1] perf_install_in_context+0x5be/0x920 [ 3122.886543][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3122.892731][ C1] ? exclusive_event_installable+0x2c0/0x2c0 [ 3122.898719][ C1] ? add_event_to_ctx+0x1180/0x1180 [ 3122.903939][ C1] ? perf_event__header_size+0x3d/0x220 [ 3122.909498][ C1] ? perf_event__header_size+0x165/0x220 [ 3122.915163][ C1] __se_sys_perf_event_open+0x1836/0x1c50 [ 3122.920910][ C1] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 3122.926559][ C1] ? lock_chain_count+0x20/0x20 [ 3122.931424][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 3122.936630][ C1] ? __x64_sys_perf_event_open+0x20/0xc0 [ 3122.942273][ C1] do_syscall_64+0x55/0xa0 [ 3122.946702][ C1] ? clear_bhb_loop+0x40/0x90 [ 3122.951389][ C1] ? clear_bhb_loop+0x40/0x90 [ 3122.956077][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3122.961977][ C1] RIP: 0033:0x7fb707b9c799 [ 3122.966401][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3122.986010][ C1] RSP: 002b:00007fb708973028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 3122.994428][ C1] RAX: ffffffffffffffda RBX: 00007fb707e15fa0 RCX: 00007fb707b9c799 [ 3123.002407][ C1] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000140 [ 3123.010385][ C1] RBP: 00007fb707c32c99 R08: 0000000000000002 R09: 0000000000000000 [ 3123.018362][ C1] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 3123.026335][ C1] R13: 00007fb707e16038 R14: 00007fb707e15fa0 R15: 00007ffc05aa7ec8 [ 3123.034339][ C1]