last executing test programs: 14m13.469380829s ago: executing program 0 (id=3556): perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80720, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x422}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000005c0)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf25, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002800)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000300), &(0x7f0000000380)=r2}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x20004800) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x4, 0xd}, {0x10000002, 0x0, 0xf, 0x6}], 0x10, 0x4000000}, 0xfe33) r3 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x6e, &(0x7f0000000000)=r6, 0x10) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x8a, 0x3, 0x0, 0x3, 0x0, 0x10000000000, 0xcc90, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40001, 0x4, @perf_bp={0x0, 0x6}, 0x14728, 0x3, 0x81d, 0x6, 0x1, 0xffffffff, 0x802, 0x0, 0x4}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x19) r7 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) setsockopt$sock_attach_bpf(r7, 0x84, 0x7c, &(0x7f0000000000), 0x8) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x9b, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x2, @perf_bp={0x0}, 0x14105, 0x6, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x95, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffd}}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x100002, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071127f000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x34) 14m12.441906101s ago: executing program 0 (id=3560): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x6, 0x9, 0x0, 0x7, 0x18000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x440, 0xc8, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000c76d0000000000000081"], 0x48) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x55) 14m12.257708712s ago: executing program 0 (id=3562): socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x5, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000003c0)=[{0x40000002, 0x0, 0xfffffffd}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x6e, &(0x7f0000000000)=r5, 0x2c) r6 = socket$kcm(0x10, 0x2, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000200)=[0x0], 0x0, 0x0, 0x98, &(0x7f0000000300)=[{}], 0x8, 0x10, &(0x7f0000000340), &(0x7f0000000400), 0x8, 0xde, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000640)={r7}, 0x4) sendmsg$inet(r6, &(0x7f0000000180)={0x0, 0x140, &(0x7f0000000240)=[{&(0x7f0000000380)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dffefffffffffffffff60a64c9f4080003fe060100000400020015b53631", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x44010) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f00000000c0)={0x0, 0x80, 0x9c, 0xbf, 0x1, 0x5, 0x0, 0x2, 0x4000, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x800, 0x6, @perf_config_ext={0x1a9, 0x5}, 0x1011e8, 0x9, 0x3, 0x6, 0x0, 0x2, 0x8, 0x0, 0x4, 0x0, 0x8}) sendmsg$inet(r1, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}, 0x3e8) 14m11.734582041s ago: executing program 0 (id=3566): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)}], 0x1}, 0x8040) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x3, 0x18, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000050000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000072000000b7080000000000007b8af8ff00000000b7080000d50000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000480)={r4}, 0xc) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="e38370000000002300000000040062", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x10, 0x17, &(0x7f0000000000)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@printk={@p, {0x5}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x7}, {}, {}, {}, {0x85, 0x0, 0x0, 0x5}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000e40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000b000140020203600e4109000800ac00060311000000a40012000a00fc000000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0xdb38, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x1}, 0x50) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x5, &(0x7f0000000c00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x80000001}, [@btf_id={0x18, 0xb, 0x3, 0x0, 0x2}]}, &(0x7f0000000c40)='GPL\x00', 0x5500000, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000c80)=[{0x4, 0x3, 0x6, 0x7}, {0x4, 0x4, 0x4, 0x8}, {0x4, 0x5, 0x9}, {0x2, 0x3, 0x7, 0x3}, {0x0, 0x1, 0x0, 0xb}]}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, &(0x7f0000000280), &(0x7f00000002c0)=r6}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@func={0x2, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x0, 0x5f, 0x61, 0x5f, 0x2e, 0x5f, 0x30, 0x5f, 0x0, 0x30]}}, &(0x7f0000000480)=""/179, 0x30, 0xb3, 0x0, 0x7f}, 0x28) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000680)={{}, &(0x7f0000000600), &(0x7f0000000640)='%pB \x00'}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f00000002c0)={&(0x7f0000000200)=@caif=@rfm={0x25, 0x2, "bf4c484a1fa00081a00200000000bb00"}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000140)="18", 0x1}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="b702000000001700bfa300000000000007030000f0ffffff720af0ff1100000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000000000006a0af2fe000000008500000019000000b700000000000000950000000000000000e154cd844a954b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129da487130d5f24bf901115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4b9535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024a0041b1df65b3e1b9bf115646d14ce53d13d0ccacda1efc5f9094fa737c28b994a8512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4fdc4b4861004eefbc17f54f82a804d4a69bf9bc5fa77ee2922bd165a5a68488e010030166565a097b103b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f940b6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c2d7f22b0d22772c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d366501753a7ac7fedb8d34f5bc381604fcd46105c457e7dd13cab6692422a47e9ffe2d4a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c9585638c2153a6eee01738b0c10671f4f559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670100be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c160119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d300e4d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d0000002000000001c800000000000000000000000928ee53595a779d243a48cea769470424d28804c024ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d74bf0a305790c9d644735efbf3411718d6ee7aebf9ef40662d7836d252c566f5ee934c679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da2022f23daec61854f640f701db0276652f6c031578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada209bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6155e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2f085185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bcdb7c89739f5d81e750d50517a59a3ad09e8802e8f4f535447cc0facd5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5b473332f2011e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d3fcd116bce9c764c714c9402c21d181aae59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755367fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf00000048d2570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749e1338636555009edf66be445d6975d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab0043ebf7c79a953e023f74afad591821610b857e8717764b633b21cb32f09f4db033e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c1960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000000000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd5c17d5486b0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dff7aa46e820a74f9530bdcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fdca4e9eda0072f6df342f3e7071e28ef6806bc8e139c49b91c76b0d3958f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7194d1eb3de6a5f99f301f89c2ee627e949cdd22000026a9960503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640000cd9e7f2e236ef5f1e3a94b108eb9750b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a2050000c375c705c798e0e208e4a5259d0bda526b462af45a6e9a84aebe025c8a7f65819f397574db7ab01bd2b3e3cd28c5aec50f8edfe39a00bafd688a7eea04efdeed96f67012bc3f795edb68b5dec80ad31a858eb756c815e7695d00000000000000000000000000000000000000000000000000007ccf0ce549d97510f7f8765408bb702f0000006d4754d98b7064cf31a681421994e1f307f0ab4ff2e33d3c88fea5d218a276b77adfee7c8fb145783ee1f8cf632c2604eab3a62a28611da1cae5ce60003111ce5c96a1d6e45ee144ffa3dcca32a33f8f0ce2995b7b7aa0bce228cbf37412e1bdebae06edb51a134301b4627d4927287daf9dcae6720334862f3a18094f1edd9e3503379815dcfbbc8141f6e1bbb0901ae91357677fd9d2bb00d4f17fb441c2dfa2b424bf46ae299d68ac27792cdac2f09e99f4ab5546ba1e5ad6a329f24e73a9c38eec34bd4dcc1609f6150e2de72f6599a2310c3841f4bb7f39cabc82c9fdfff5587ed4fa84090635fa3445c4cc54478b2f98320944ac7cb1c4e414556f7b0b763a00a84327cec7e11b3470f0384b27bbfdd8b2472497e7fe8c5df7e0a00641872472efa21c9ad3979e642dcc85c17ca8e084aa9689b83426e2fdaa01f500000000000000000000f9fd84fa991466ff749afe900d02281b2bb60d458340c4f68ec34835760ceca945bf181a000000c000000000b4a76515564ae189de7c1765f0ff68a0388ca8dd2aa831d0e01f0d7ce74401a58cef60e63e97a50c18de54121ce66380224ab7b9c0d4710f2347bad2c9b3e41cc738c1092728687f33e5cdb077223dc82c2137b4e3ba6791a2cd764e654f904c9505b7c5e3b2897072e747534952dcda50cde3e4deb6ebf85a04c3e415112b01eed6515c845a8a20519cd21787d560e9d8283fa8ff0c17b63ba06577c26678ff45420a1f85df47dbfc44e534f71aae5693fb5df61c5096219091ce0cd8e1e2e79bf9d37779e52007c66a00e6ded1499ed3892ed1544d1577906b52e16c734d4aec07dd15faa768c97298be87dd34ce704ffe3da8b46708cf972de4f31c0705ac933db80bdcfcb35c0d4620d4ec270ff7c9ce1b78994dd2b28b9d1c5c469d4c1a61781dce2f1b54d6138bd3f7df9e9ca613bec407c1b8d1bd0c7cb9d76eebf2f17c"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x7e8166965e22236a) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0xc26bfe8e8f6baca8}, 0x20) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.stat\x00', 0x7a05, 0x1700) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x8, 0x2}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) 14m11.231373864s ago: executing program 0 (id=3570): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x15, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x7, [@enum={0x8, 0x2, 0x0, 0x6, 0x4, [{0x9, 0x90}, {0x2, 0x7ff}]}]}, {0x0, [0x61, 0x0, 0x5f, 0x2e, 0x2e]}}, 0x0, 0x3b, 0x0, 0x1}, 0x28) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0xc8}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000000}, 0x80) 14m10.952166355s ago: executing program 0 (id=3571): sendmsg$inet(0xffffffffffffffff, 0x0, 0x600) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x9}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001f80)={r0, &(0x7f0000000e80), 0x0}, 0x20) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="12000000070000000800000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r1, &(0x7f0000000300), 0x0}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000010) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_clone(0x61000600, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d08000b000000e8fe55a1180015000600142603600e1209000d00e8030000a80016", 0x33}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1000000}, 0x0, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x241a2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x3, @perf_bp={&(0x7f0000000300), 0x1}, 0x0, 0x2, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfe33) 13m55.899072177s ago: executing program 32 (id=3571): sendmsg$inet(0xffffffffffffffff, 0x0, 0x600) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x9}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001f80)={r0, &(0x7f0000000e80), 0x0}, 0x20) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="12000000070000000800000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r1, &(0x7f0000000300), 0x0}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000010) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_clone(0x61000600, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d08000b000000e8fe55a1180015000600142603600e1209000d00e8030000a80016", 0x33}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1000000}, 0x0, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x241a2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x3, @perf_bp={&(0x7f0000000300), 0x1}, 0x0, 0x2, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfe33) 11m29.952530481s ago: executing program 3 (id=4831): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7, 0x5}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x6, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x37) 11m29.783994756s ago: executing program 3 (id=4834): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b904021d08020e0000008100e0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93", 0xcb}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000380)=[{}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="11000000430033"], 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x26e1, 0x0) close(r2) socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x21, 0x0, 0x0) r3 = socket$kcm(0xa, 0x3, 0x73) sendmsg$inet(r3, &(0x7f0000001180)={&(0x7f0000000180)={0xa, 0x0, @empty}, 0x10, 0x0, 0x0, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x36}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0xf, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r1, &(0x7f0000000600)={&(0x7f00000002c0)=@x25={0x9, @remote}, 0x80, &(0x7f0000000500)=[{0xfffffffffffffffd}, {0x0}, {&(0x7f0000000c40)=""/132, 0x84}], 0x3, &(0x7f0000000540)=""/174, 0xae}, 0x42) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={r2, 0xe0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, &(0x7f0000000780)=[0x0, 0x0, 0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x2d, &(0x7f0000000800)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000840), &(0x7f0000000880), 0x8, 0xe, 0x8, 0x8, &(0x7f00000008c0)}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x0, 0x0, &(0x7f00000006c0)='GPL\x00', 0x2, 0x2a, &(0x7f0000000700)=""/42, 0x41100, 0x4, '\x00', r4, 0x25, r2, 0x8, &(0x7f0000000a80)={0x3, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000ac0)=[r2], &(0x7f0000000b00)=[{0x3, 0x1, 0x8, 0x5}, {0x0, 0x5, 0x3, 0x3}, {0x4, 0x4, 0xb, 0x1}, {0x4, 0x4, 0x4, 0x4}, {0x2, 0x5, 0x9, 0xb}, {0x1, 0x1, 0x1}, {0x3, 0x1, 0xc, 0xa}], 0x10, 0x8}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x4, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 11m28.946619418s ago: executing program 3 (id=4839): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000010006bab9a3fe3d86e17aa0a046b876c1d0000007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06efff00a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 11m28.689757443s ago: executing program 3 (id=4843): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x4, 0x1, 0x80}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b0000000000000000000000008000000000", @ANYBLOB="00000000d3ec66ecc053c543da5f", @ANYRES16], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001440)={r0}, 0x4) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1ff, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32], 0x1b) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socketpair(0x1, 0x20000000000001, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2) close(0xffffffffffffffff) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x20000000000001, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89b1, 0x0) close(0xffffffffffffffff) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x60) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{}, &(0x7f0000000440), &(0x7f0000000540)=r1}, 0x20) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40004) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x18}, [@ldst={0x4, 0x3, 0x6, 0x5, 0x0, 0x0, 0x20}]}, &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="f8000000000000000b01000003000000b38ad0fa5344f86392a8a624588a9ebd811192cbcbc48c43148a7cc729a98cdc74f191ae2cd62d2652d78d6acf62b5eb8f161c8b04b3b2b547119b38e2badd726674a4693c080fe5c3496137c986cb152d529c9225c772f2f854bf5ab89e259312dacf6b9debd2bf43be3dc19840f0c35b2d960ac50a9f2bcf98156f76700462166d7eb6416b2a7510be974b3f7a06c8927e28a62f708cce515c9c922c8c0c8daf4646e725d7282571b819097b58963d71992c2938f34c3516c547423d99a2f90f3a146a044cb732f4f4a0305c9d37fcb667e5e900000000000028000000000000000000000000080000c133a12a91872b3730467c92a3a5050f02b82b7e452f3e6b500000000000000012010000ff030000ae15b1a3e016bb782adb738fa764d4487026530ac6f50e3b31ec875a38f17bac40e87117dbd6ba47cf721b216e5b8cb28d424f1b5ed9793f5167332a0000000038000000000000000a010000630a0000fa08ab919987305c8ad63785f4a4bc84cb79f70a5d7698a3f59e1f0dbbe9b9f8ed970000001000000000000000130100000900000010000000000000001001000004000000000000000000000000000000000077874cf6e18bde0f1a4f9cd71371465fa0f4f73d8d253601dad8e0a53409cf"], 0x1c8}, 0x4000c010) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd0900008400000005010000", @ANYRES32, @ANYBLOB="000000000007000006", @ANYRES32=0x0, @ANYRES32], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r2}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r2}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r0, @ANYBLOB="0000000000000000610300000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) 11m28.129950034s ago: executing program 3 (id=4850): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b904021d08020e0000008100e0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93", 0xcb}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000380)=[{}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="11000000430033"], 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x26e1, 0x0) close(r2) socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x21, 0x0, 0x0) r3 = socket$kcm(0xa, 0x3, 0x73) sendmsg$inet(r3, &(0x7f0000001180)={&(0x7f0000000180)={0xa, 0x0, @empty}, 0x10, 0x0, 0x0, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x36}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0xf, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r1, &(0x7f0000000600)={&(0x7f00000002c0)=@x25={0x9, @remote}, 0x80, &(0x7f0000000500)=[{0xfffffffffffffffd}, {0x0}, {&(0x7f0000000c40)=""/132, 0x84}], 0x3, &(0x7f0000000540)=""/174, 0xae}, 0x42) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={r2, 0xe0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, &(0x7f0000000780)=[0x0, 0x0, 0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x2d, &(0x7f0000000800)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000840), &(0x7f0000000880), 0x8, 0xe, 0x8, 0x8, &(0x7f00000008c0)}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x0, &(0x7f0000000640), &(0x7f00000006c0)='GPL\x00', 0x2, 0x2a, &(0x7f0000000700)=""/42, 0x41100, 0x4, '\x00', r4, 0x25, r2, 0x8, &(0x7f0000000a80)={0x3, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000ac0)=[r2], &(0x7f0000000b00)=[{0x3, 0x1, 0x8, 0x5}, {0x0, 0x5, 0x3, 0x3}, {0x4, 0x4, 0xb, 0x1}, {0x4, 0x4, 0x4, 0x4}, {0x2, 0x5, 0x9, 0xb}, {0x1, 0x1, 0x1}, {0x3, 0x1, 0xc, 0xa}], 0x10, 0x8}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x4, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 11m27.419463863s ago: executing program 3 (id=4855): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) socket$kcm(0x1e, 0x4, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x4400, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x25, &(0x7f0000000000)='/proc/sys/net/ipv6\x00\x00\x00\x00\x00\x00\x00\x00\x80=\x00\x00\x00\x00\x00\x00\x00\x00\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3}}, 0xff09, 0x0}, 0x200088d0) syz_clone(0x41980100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) (async) socket$kcm(0x1e, 0x4, 0x0) (async) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x4400, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x25, &(0x7f0000000000)='/proc/sys/net/ipv6\x00\x00\x00\x00\x00\x00\x00\x00\x80=\x00\x00\x00\x00\x00\x00\x00\x00\x00'}, 0x30) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) socket$kcm(0x2, 0x200000000000001, 0x0) (async) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3}}, 0xff09, 0x0}, 0x200088d0) (async) syz_clone(0x41980100, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) (async) 11m12.356558643s ago: executing program 33 (id=4855): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) socket$kcm(0x1e, 0x4, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x4400, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x25, &(0x7f0000000000)='/proc/sys/net/ipv6\x00\x00\x00\x00\x00\x00\x00\x00\x80=\x00\x00\x00\x00\x00\x00\x00\x00\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3}}, 0xff09, 0x0}, 0x200088d0) syz_clone(0x41980100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) (async) socket$kcm(0x1e, 0x4, 0x0) (async) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x4400, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x25, &(0x7f0000000000)='/proc/sys/net/ipv6\x00\x00\x00\x00\x00\x00\x00\x00\x80=\x00\x00\x00\x00\x00\x00\x00\x00\x00'}, 0x30) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) socket$kcm(0x2, 0x200000000000001, 0x0) (async) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3}}, 0xff09, 0x0}, 0x200088d0) (async) syz_clone(0x41980100, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) (async) 1m7.27993755s ago: executing program 6 (id=10607): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x6, 0x0) socket$kcm(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000400000000000000095000000000000007044f16c01b1fbfd000000000000008af65f0df9928941994cc8c173fac5688671085a86d143c59fed0e57feb97f422c51d8e63b4ed9e295df3ccd1a55752dfc2f32f14b6c8f0e7413c3e9caaad30dcb412d0f54623f388bb2c63d2b1f7d83cd0cc021867bb4aee9967a6ee83e1b18fd8beca7d7eddcd96634"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x80) socketpair(0x29, 0x6, 0x478b08cb, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1f, 0xf, &(0x7f0000000200)=@ringbuf={{}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1m7.1400501s ago: executing program 6 (id=10610): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b405000000050000611080000000000066050000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x18}, 0x18) 1m7.102541482s ago: executing program 6 (id=10612): r0 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x4, 0x80, 0x16, 0xfe, 0x0, 0x5, 0x0, 0x0, 0x6040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x3}, r0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x31, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x4, 0x40000, 0x800, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000000) recvmsg(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000002640), 0x0, &(0x7f0000000380)=""/5, 0x5}, 0x40010041) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x800, 0x0, 0x0, 0x0, 0x7, 0xffff, 0x0, 0x0, 0x0, 0xe000000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114815, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x190a}, 0x202, 0x0, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000029c0)={&(0x7f00000026c0), 0x0, &(0x7f0000002840)="ac2405b3d0000d68cbe9669037d5e7b3aa86ce16a3c638ba2114255550e87ee2a83adcb7cbef3bcaefdc8d392687c3206fedfb40adefc913b47b2af01d20bd4717037fd2591131379eae3ee1261fe953b9ee938dfdcd5410927084a25e3f1c18292557d02d37290144d1a0a2047ee32ace49edd647733ea42e7d0b54403bba0584e5cff9972e1a35b5f71f88f5d540595b690391ba5c2debf62740209e0fe773f7d01ae2955b821dd29ec3d73ec94c08f7f33d1e5ef5b03b8bd38b7146eddf9b00055b25d4ee59b2ed556929662537b21811d6a50a1a", 0x0, 0xdc, 0xffffffffffffffff, 0x4}, 0x38) close(r3) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000300)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xf2000000}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8, 0x100}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r4}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m6.99874473s ago: executing program 6 (id=10615): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x4, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) close(r1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000b00000008000000020000843f49000009000091020000009100000001000000040000ca01000000005f3f5f615f2e005f5f"], &(0x7f0000000680)=""/180, 0x47, 0xb4, 0x1}, 0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x146, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000003b00)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@ifindex, 0x1e, 0x0, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0], 0x0, 0x0}, 0x40) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)={@cgroup=r7, 0xffffffffffffffff, 0x10, 0x0, 0x0, @void, @value, @void, @void, r6}, 0x20) r8 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000300)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@cgroup=r8, r5, 0x14, 0x2000, 0x0, @value, @void, @void, @void, r6}, 0x20) perf_event_open(&(0x7f0000000680)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f61, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa15, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a40)={&(0x7f0000000cc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, &(0x7f0000000940)=""/222, 0x26, 0xde, 0x1}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r9, 0x4) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0) 1m6.728267743s ago: executing program 6 (id=10622): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0xe0, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f00000003c0), &(0x7f0000000480), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000200)="68cabf2dfb58fc0a01", 0x9}]}, 0x10) r3 = socket$kcm(0xa, 0x5, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='io.stat\x00', 0x26e1, 0x0) close(r4) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) syz_clone(0x28280000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110c23003f) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) socket$kcm(0x2, 0x1, 0x84) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x10261, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c00000000120000000000e9ee4edb00", @ANYRES32=0x0, @ANYBLOB="ac141410e00000010000000010000000000000000000000007000000"], 0x30}, 0x0) r7 = socket$kcm(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r6}, &(0x7f0000000080), &(0x7f00000001c0)=r7}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x0) write$cgroup_devices(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="80fd"], 0xa) socket$kcm(0xa, 0x5, 0x0) mkdir(0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0xa7, '\x00', r1, r3, 0x1, 0x0, 0x5}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) socket$kcm(0x11, 0x200000000000002, 0x300) 1m4.45360933s ago: executing program 6 (id=10632): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=""/236, 0x0, 0xec, 0x1}, 0x28) socket$kcm(0x10, 0x2, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0xcc6, 0x4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff80000000, 0x9}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169b740ac03d7c64cee49ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d54f45a24effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f949c479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c7724e9e7e7babf61fe358ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261ed1d4515f46290d5c6579b63358fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f13dff7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63e774e940bfeb0de83f42fd565a299f741f9b00be4e8fcaf4ec85daceb16d9e8a438e3eb2556570e381b03d9e3c245728648ed9ff22dc963ed105c851c3481125b4c0c8a08a0c9930190902af109fc56b64cc952f298ebe73d7b18052e0147356228ca171b06274a871e2cf9609e0b4cdad36c3250bc8f56f95a6ed"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000e80)={r1, 0x0, 0xd0, 0xc6, &(0x7f0000000a40)="dbe4d906810b96f355336848e95ba4ffa2a3d250a0503a0c7fc8ab012d5b25346ea0111838a244d440d02ad8afd0cc06bd39173677e5317a8e014fba1c9e0bf7d04eb8daf6dfea89f40f3fa4126d14b0e7e6e91282a0de854151734d0b6bd54f0b661b99adb39dcc18011dd0285848d9d91c33a00a03209bee134efa1d38a88155434bca9d6660c015d1ca96ec375985a153a2be6cd4ba16c1e779543e33d1e3e905c0282d2965f7dab74e22459a96696f98b40626569281ab0e578559ddbbd8efa8f24e03cf0ad4520f16ab9be94da9", &(0x7f0000000b40)=""/198, 0x4, 0x0, 0xc1, 0x92, &(0x7f0000000c40)="a2b3098ca56595e260a0306d4108e7863aaeca23875369e2bc25a9fb1306d35496f064c1ec09e183c4edef3adf165f08ec0eadf409c47bf95eb886cf983fe780ba5fbbace560eefef89e9bbc647496cefb7d78424c1ee69ab791a3fefd2e579b8dcb5cbc436700fd07aa074c2ac447e8252ea9844edc5ce2af01f046eb2108d7e64008bbfb1c27e9a13589aabd4798f04c1fe522628ab34cf4aae4b87736057a8996314cde2f9cd024e2c695a496dd47d3f547db36d79dd8960c205e24bb412e4b", &(0x7f0000000d40)="2be77a611ecb845c4ce90c66c3dc62fd7ce0b12c327275c4561b5ec2017f7bf418fff5bfd6de237e085ca9128d7113f716166a9919afbde15647359cb06cbbbb7bf6bc6e8a21c1cb7bc23cd236d534ef8bd3ddff5f2fa292a082fdf1f6c632f39b326763caffd547bfd836d6be5672f7939a474234708725a3cdd3ed75ea2489f9244b4dc82c10cb87e961d83f22d7e0886b", 0x2, 0x0, 0x24}, 0x50) r2 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={&(0x7f0000000f00), 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x800, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x29, 0x3, &(0x7f0000000040), 0xcf) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r7, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r7, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r7, &(0x7f0000000f80)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000042c0)="86", 0x1}, {&(0x7f0000000280)="444a0d267fc54a6efb65ec999b0b5e6b93129887f3d0cf06b7f0bbb227562d8346a167f9c247e7e928b11997a72776d0960fdc0e73dad64459acf7a0c39b69cb2f37b0d91137d439021a959126ec17b793cf365667f7b921ef105ba4ec6dd62e6341d455f2429535e445fae1a310ad27e961228f9a9561c3e7089d08a31ef55f08fca3760643326399a0a3a209f016dc23c1b34a69ed48aefecb973af458dcd03917880c66bc", 0xa6}], 0x2}, 0x11) setsockopt$sock_attach_bpf(r6, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$tipc(r7, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) close(r7) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r9 = openat$cgroup_devices(r8, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r9, &(0x7f0000000200)=ANY=[@ANYRES8, @ANYRESHEX=r3, @ANYRES16=r2, @ANYRESHEX=r6], 0xc) recvmsg(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000880)=[{0x0}], 0x1}, 0x0) socket$kcm(0x23, 0x5, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000e00)) 48.791339622s ago: executing program 34 (id=10632): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=""/236, 0x0, 0xec, 0x1}, 0x28) socket$kcm(0x10, 0x2, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0xcc6, 0x4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff80000000, 0x9}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000e80)={r1, 0x0, 0xd0, 0xc6, &(0x7f0000000a40)="dbe4d906810b96f355336848e95ba4ffa2a3d250a0503a0c7fc8ab012d5b25346ea0111838a244d440d02ad8afd0cc06bd39173677e5317a8e014fba1c9e0bf7d04eb8daf6dfea89f40f3fa4126d14b0e7e6e91282a0de854151734d0b6bd54f0b661b99adb39dcc18011dd0285848d9d91c33a00a03209bee134efa1d38a88155434bca9d6660c015d1ca96ec375985a153a2be6cd4ba16c1e779543e33d1e3e905c0282d2965f7dab74e22459a96696f98b40626569281ab0e578559ddbbd8efa8f24e03cf0ad4520f16ab9be94da9", &(0x7f0000000b40)=""/198, 0x4, 0x0, 0xc1, 0x92, &(0x7f0000000c40)="a2b3098ca56595e260a0306d4108e7863aaeca23875369e2bc25a9fb1306d35496f064c1ec09e183c4edef3adf165f08ec0eadf409c47bf95eb886cf983fe780ba5fbbace560eefef89e9bbc647496cefb7d78424c1ee69ab791a3fefd2e579b8dcb5cbc436700fd07aa074c2ac447e8252ea9844edc5ce2af01f046eb2108d7e64008bbfb1c27e9a13589aabd4798f04c1fe522628ab34cf4aae4b87736057a8996314cde2f9cd024e2c695a496dd47d3f547db36d79dd8960c205e24bb412e4b", &(0x7f0000000d40)="2be77a611ecb845c4ce90c66c3dc62fd7ce0b12c327275c4561b5ec2017f7bf418fff5bfd6de237e085ca9128d7113f716166a9919afbde15647359cb06cbbbb7bf6bc6e8a21c1cb7bc23cd236d534ef8bd3ddff5f2fa292a082fdf1f6c632f39b326763caffd547bfd836d6be5672f7939a474234708725a3cdd3ed75ea2489f9244b4dc82c10cb87e961d83f22d7e0886b", 0x2, 0x0, 0x24}, 0x50) r2 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={&(0x7f0000000f00), 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x800, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x29, 0x3, &(0x7f0000000040), 0xcf) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r7, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r7, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r7, &(0x7f0000000f80)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000042c0)="86", 0x1}, {&(0x7f0000000280)="444a0d267fc54a6efb65ec999b0b5e6b93129887f3d0cf06b7f0bbb227562d8346a167f9c247e7e928b11997a72776d0960fdc0e73dad64459acf7a0c39b69cb2f37b0d91137d439021a959126ec17b793cf365667f7b921ef105ba4ec6dd62e6341d455f2429535e445fae1a310ad27e961228f9a9561c3e7089d08a31ef55f08fca3760643326399a0a3a209f016dc23c1b34a69ed48aefecb973af458dcd03917880c66bc", 0xa6}], 0x2}, 0x11) setsockopt$sock_attach_bpf(r6, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$tipc(r7, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) close(r7) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r9 = openat$cgroup_devices(r8, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r9, &(0x7f0000000200)=ANY=[@ANYRES8, @ANYRESHEX=r3, @ANYRES16=r2, @ANYRESHEX=r6], 0xc) recvmsg(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000880)=[{0x0}], 0x1}, 0x0) socket$kcm(0x23, 0x5, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000e00)) 6.303960695s ago: executing program 7 (id=10879): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r2, &(0x7f0000000580)={&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x4, @mcast2, 0x9}, 0x80, 0x0, 0x0, 0x0, 0xff97}, 0x4000080) 6.031744409s ago: executing program 5 (id=10880): socket$kcm(0x10, 0x2, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4000000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x7400}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) recvmsg(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, 0x0}, 0x40010041) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x800, 0x0, 0x0, 0x0, 0x7, 0xffff, 0x0, 0x0, 0x0, 0xe000000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) socket$kcm(0xa, 0x922000000003, 0x11) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x190a}, 0x202, 0x0, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000029c0)={&(0x7f00000026c0)="027a6e502734a9434d01eb4d416df830a90946efc3c2780f88949a793480e8c47a594d6e58fd99b491ee7fc5c4e3c2e87d8a18d9ca2b425ee4bafe83ad5758bffa3d9ea086d8aa9d03118e111f88c569d78a169892122a775baf118aeda754a7ef369ba4cf96823e7e75ed3a25da74a613b349e19e24a87ce0afe68fa11a66d9ff48fcb13d4c", &(0x7f0000002780)=""/160, &(0x7f0000002840)="ac2405b3d0000d68cbe9669037d5e7b3aa86ce16a3c638ba2114255550e87ee2a83adcb7cbef3bcaefdc8d392687c3206fedfb40adefc913b47b2af01d20bd4717037fd2591131379eae3ee1261fe953b9ee938dfdcd5410927084a25e3f1c18292557d02d37290144d1a0a2047ee32ace49edd647733ea42e7d0b54403bba0584e5cff9972e1a35b5f71f88f5d540595b690391ba5c2debf62740209e0fe773f7d01ae2955b821dd29ec3d73ec94c08f7f33d1e5ef5b03b8bd38b7146", &(0x7f0000002940)="775108ca66199d594175cb6c6fa8c25d143446db7e487cffd447f3f7e4f013150fba813f2448c2baf68ea600d79f6ec66800e3863affcf25d35bb64a2f2c848b5c795e67b7cb839ebb67325ed497109372b69af94afe193990f1a1c32e691def22f48f84219f64ed9bbed20ada43f73eb9b59a", 0xdc, 0xffffffffffffffff, 0x4}, 0x38) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x88}, 0x0) close(0xffffffffffffffff) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000300)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xf2000000}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8, 0x100}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r1}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open$cgroup(&(0x7f0000002a40)={0x2, 0x80, 0x98, 0x3, 0xfd, 0x4, 0x0, 0x800, 0x41000, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000002a00)}, 0x6000, 0x8000000000000001, 0x7, 0x6, 0xfffffffffffffffc, 0x4, 0x9, 0x0, 0x3, 0x0, 0xffff}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) 5.863901589s ago: executing program 7 (id=10882): perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x12100, 0xc8, 0x2, 0x8, 0x0, 0x10001, 0xa, 0x0, 0x800}, 0x0, 0x5, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0xa, 0x3, 0x3a) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102033a00fe08000e40000200875a65969ff57b00ff02000000003a0000000001ffaaaaaa"], 0xfdef) 5.350082517s ago: executing program 4 (id=10883): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x860, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x8}, 0x24c9, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x401}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\n\x00\x00\x00', @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = getpid() perf_event_open(0x0, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) r3 = perf_event_open(0x0, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = socket$kcm(0x15, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100600, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) socket$kcm(0xa, 0x2, 0x88) (async) r5 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r5, &(0x7f0000001600)={&(0x7f0000001340)={0x2, 0x5, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x23}, @remote}}}], 0x20}, 0x8000) (async) sendmsg$inet(r5, &(0x7f0000001600)={&(0x7f0000001340)={0x2, 0x5, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x23}, @remote}}}], 0x20}, 0x8000) close(r4) (async) close(r4) sendmsg$kcm(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000340)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000600)}], 0x5, &(0x7f0000002640)}, 0x20000080) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) openat$tun(0xffffffffffffff9c, 0x0, 0x100, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$TUNSETLINK(r6, 0x400454cd, 0x20) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0xc7, 0x1, 0x4, 0x9, 0x0, 0x1, 0x42090, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000001, 0x2, @perf_bp={0x0, 0x7}, 0x106050, 0x5, 0x3, 0x6, 0xfff, 0x6, 0x8, 0x0, 0x4000003, 0x0, 0x2}, 0x0, 0xb, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f00000003c0)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) socket$kcm(0x10, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x103202, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x103202, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) 5.191755599s ago: executing program 7 (id=10885): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000010008188040f80ec59acbc0413a181002e00000002010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x8040) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x3, 0x18, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000050000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000072000000b7080000000000007b8af8ff00000000b7080000d50000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000480)={r4}, 0xc) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="e38370000000002300000000040062", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x10, 0x17, &(0x7f0000000000)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@printk={@p, {0x5}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x7}, {}, {}, {}, {0x85, 0x0, 0x0, 0x5}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000e40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000b000140020203600e4109000800ac00060311000000a40012000a00fc000000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0xdb38, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x1}, 0x50) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x5, &(0x7f0000000c00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x80000001}, [@map_val={0x18, 0x0, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0xfffffffc}]}, &(0x7f0000000c40)='GPL\x00', 0x5500000, 0x0, 0x0, 0x41000, 0x22, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000c80)=[{0x4, 0x3, 0x6, 0x7}, {0x4, 0x4, 0x4, 0x8}, {0x4, 0x5, 0x9}, {0x0, 0x3, 0x7, 0x3}, {0x0, 0x1, 0x40, 0xb}]}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, &(0x7f0000000280), &(0x7f00000002c0)=r6}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={0x0, &(0x7f0000000480)=""/179, 0x0, 0xb3, 0x0, 0x7f}, 0x28) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000680)={{}, &(0x7f0000000600), &(0x7f0000000640)='%pB \x00'}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f00000002c0)={&(0x7f0000000200)=@caif=@rfm={0x25, 0x2, "bf4c484a1fa00081a00200000000bb00"}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000140)="18", 0x1}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x7e8166965e22236a) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0xc26bfe8e8f6baca8}, 0x20) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.stat\x00', 0x7a05, 0x1700) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x8, 0x2}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) 4.948373501s ago: executing program 5 (id=10886): r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x8}, 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0x1, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x8, '\x00', r1, 0xffffffffffffffff, 0x0, 0x5, 0x1}, 0x50) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000001c0)='blkio.bfq.idle_time\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000200)=r4, 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000003c0)={r4, &(0x7f0000000240)="cb9f655d122334dedd51cde1932ad942dba5e5a35400342594bd43a849cf04e0dead1eca0988d04aab679432b70fef2acd3e7b26d0641c508a80f6541a86c187797e563b0b8b413e58a0dd10d998899caf9db1aad0a5de5884443c4319602502694784dcb65d2d2922098158c6cf1a8bbb1d86a9e7803c0584149d9d7f040a1a9d207f03da68eaacb3698d99ad9830611b28dfeaee66f1a9d13a574db27e547fa5c4fa1bd48439fcbb61", &(0x7f0000000300)=""/168}, 0x20) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x2, 0x0, r4, 0x6, '\x00', r1, r4, 0x0, 0x1, 0x1}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0x1b, &(0x7f0000000400)=@raw=[@alu={0x4, 0x0, 0xc, 0x0, 0x9, 0x30, 0x4}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @ldst={0x1, 0x3, 0x3, 0x6, 0x3}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7}], &(0x7f0000000500)='syzkaller\x00', 0x5, 0x38, &(0x7f0000000540)=""/56, 0x1f00, 0x2, '\x00', r1, @fallback=0x18, r4, 0x8, &(0x7f0000000580)={0x7, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)=[r0, 0x1, r0, r2, r0, r5], 0x0, 0x10, 0xfffffffe}, 0x94) r7 = socket$kcm(0x29, 0x4, 0x0) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x2, '\x00', 0x0, r4, 0x4, 0x5}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={r4, 0xe0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x6f, &(0x7f0000000880)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000008c0), &(0x7f0000000900), 0x8, 0xec, 0x8, 0x8, &(0x7f0000000940)}}, 0x10) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x19, 0x0, 0x5, 0x6, 0x8000, r8, 0x5d, '\x00', r9, r4, 0x5, 0x0, 0x2, 0x0, @value=r2}, 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000b80)=@o_path={&(0x7f0000000b40)='./file0\x00', r5, 0x4000, r8}, 0x18) socketpair(0x1, 0x80000, 0xfff, &(0x7f0000000bc0)={0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000ec0)={r6, 0x0, 0xcc, 0x3d, &(0x7f0000000c00)="b070e4324dc50cbe85e6ce480877ce9bf7c9f01e5e721bd04a0aad2ed38f4f135e01a2c60027d95066775322a6e71394a002a7b1d207da6ca5f04d93734bec41e4c0289a4e570137f365b2dc43f616d24d0217aa3f0455067554c99241cc5d882d1752501c1ef07825c4ca56494f6d903956b7b40f32a3d9122214b30cb681dd0c78d24293bc00b0a24bdf07c13e82243247e16290b98abff47e8796a8ae9c870266973fb52ff289f97b88820484dccf418d7e1023557df0dc6b37bf9a2cbc3e1b1c946061518d7af103f4a5", &(0x7f0000000d00)=""/61, 0xf7ee, 0x0, 0xd1, 0x4f, &(0x7f0000000d40)="a222e0681408975b3e2d208b9a6b41cda8d971c8b4c3db8a4eb8be4095e86b7c13d7fc12e0bed2256bb1c5d83533e96c5842ee073529942852dd0a29f7bc167acb3ee779baf1ccaae0a34fde4c74bad10d2fde30dc058281445b2a3e2913a31b42eb98e65c22fdad4b7a5d41bf14ce1d227b4be7096e71cbdbb733ad838a7385c4c67497ded23acb5c21b66d1c1732fe129e3130b84841efcbe1e9d6f311d9a5b1ed3e8432419ec7a6633c6bb9de7efe87496d7da6ec0d906f054e9c5e63e53380219c337023c05a5aaf5516bbc4ab4aa0", &(0x7f0000000e40)="520617533b2e4a303e65784fc5cccefc6b6d338cb1c32c024f424891ceb831d1038e8e394620c2fad12502c5cafa0cce043610c9648d626fcfceb046e6d08ab6f7f7d6ad2a8a87fd0a7196192e4659", 0x4, 0x0, 0x9}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001040)={@map=r5, 0x4, 0x1, 0x2, &(0x7f0000000f40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000f80)=[0x0, 0x0], &(0x7f0000000fc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001000)=[0x0]}, 0x40) openat$cgroup_type(r3, &(0x7f0000001080), 0x2, 0x0) ioctl$TUNSETDEBUG(r4, 0x400454c9, &(0x7f00000010c0)=0x2c) ioctl$sock_kcm_SIOCKCMCLONE(r12, 0x89e2, &(0x7f0000001540)={r7}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000001100)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000014c0)=[{&(0x7f0000001180)="9c2ae9ba94d13e6721e02ce52d8043164ae3b5cc08c32659882dc858d45118d3444578786b16d85ececc91fb955abf8bad362bbd5c4fd351c89810c317b306bd25d70499b4aa1c311974dde14f79d8801d69a3574c3ba8632a43a60f1c3c8da5c4ea41c1f5d0db61655c44db6fb3af0f06617bdadcc3ab7471e1cd8b398ef2367df22bf446ed2ec44d37dd8e7f263dfa5d6deddfba7a8704ec1e9b32cb36d29567bf883cd0f02a23b5f343841f4f72d857f063069d245cb5b292f32987e0571559d98ea6354422e006282f7097c568ea4300dee710", 0xd5}, {&(0x7f0000001280)="24d799f2b85140cea6b47a9d1ff72965fbdf74911a7fa17d309bd5e1df86e46b8c629c3167ad0c49e23132085275fc83843c81b546f834", 0x37}, {&(0x7f00000012c0)="cd3899e146f8392e100b150a86c5978e3ee00a32d6ca75ca18603e3174168090c0d6b92b2ba77cf048dce29ec8315788ed5f6be0da47d78d5e845bf586408882f9bb07d1c14f2f2b130f1108c2196fe94a8d2e404c8209db31e4934e7e2b6c6a4e7d2daeae5a5feda6b25916a0bca07566ca763b2791a7f20269bfa9", 0x7c}, {&(0x7f0000001340)="d8a2810b01b2d90eedbbf8ddd12d544d989b3710f9e0ff53b2eb6a2f37a405221983b43e1f3372b483ab755522dd01129d1126016f4a5e7a7c8cfff78c1668dfbd66f1150512d327ecf9b9268fbd3e986d8a66e51afc2f51521ef3f40c2b8246bf2eedd66641e5e9e4d207c6d7b9fc81d5e76bc3a33581b923a53fd0b859ce2a9702a56a5ca98290146c32159ae0f6b147", 0x91}, {&(0x7f0000001400)="8f3875b8ba1ead880926eb88766da02105b1a2670ad3b743e93ba33a9c9711873b4b3501bf50bfc09758a78655b16b9fd8ea4c8aa65a9cc78fca226a723d8e8d4539e3305c114190551e0cfd24b55350559ad4afd2330535ac22c371e5e3b994050d7c26f1e8", 0x66}, {&(0x7f0000001480)="a14df2cb33c31a4a8def29b8b51a1dc567d88b9671562b2832", 0x19}], 0x6, &(0x7f0000001580)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee00}}}, @rights={{0x2c, 0x1, 0x1, [r0, r7, r13, r6, r14, r0, r8]}}, @rights={{0x28, 0x1, 0x1, [r6, r12, r6, r8, 0xffffffffffffffff, r12]}}], 0x78, 0x40800}, 0x801) r15 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001880)=r10, 0x4) r16 = bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x13, 0x19, &(0x7f0000001640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001740)='GPL\x00', 0x80, 0xde, &(0x7f0000001780)=""/222, 0x40f00, 0x37, '\x00', r9, @fallback=0x2f, r15, 0x8, &(0x7f00000018c0)={0x2, 0x2}, 0x8, 0x10, 0x0, 0x0, r10, r6, 0x9, &(0x7f0000001900)=[r13], &(0x7f0000001940)=[{0x7ff, 0x5, 0x8, 0x6}, {0x5, 0x2, 0xd, 0x7}, {0x1, 0x2, 0x10, 0x4}, {0x3, 0x4, 0x5, 0x5}, {0x4, 0x1, 0xe, 0x8}, {0x5, 0x2, 0x8, 0x8}, {0x0, 0x3, 0x1, 0x5}, {0xfffffff6, 0x4, 0x0, 0xc}, {0x1, 0x5, 0xe, 0x2}], 0x10, 0x6c}, 0x94) r17 = perf_event_open$cgroup(&(0x7f0000001b00)={0x4, 0x80, 0x2, 0x10, 0x80, 0xf1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf6ef, 0x2, @perf_bp={&(0x7f0000001ac0)}, 0x108400, 0x9, 0x2, 0x5, 0x5, 0x4, 0x200, 0x0, 0x1, 0x0, 0x77e}, r4, 0x10, r4, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002100)={&(0x7f0000001b80)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000002080)=[{&(0x7f0000001c00)="84be80bf65dab62ff471b804a01ed529fbf4ff12d6185e61a3f515e2e5116e18c11beba634e2e8240dc05a2ad02d2b0f296907db392d9cbe0bec1876e094a3bea7e52857158415463804290cc01915dd75060359724b3314e2ac4276d917371a843e3bcd9e5fb10d11b577c4f67e9b98eb6651a0679b63a4ab39b9fff21a4cce072fa6a75f9bc3ae96f6b8143ffbc84a7422a5c602d48004be3ebc28df91559f659f2b26f45f5c7675f373ef8f77198a8e9ef2222eef7e", 0xb7}, {&(0x7f0000001cc0)="88d5bace86797ca161870af6bd9fff69a30e0cf8fb5ba4216aef8d7bc3a9bc14810b2f9d5a2ab4ba4eea58fce171d19412533b6616041aad066fe683b39aa80d763e609362f05c9ded4d322ae623da3a14514732c98af24f6888b99bc976c8dd427bb6e02f032e923cd81ac2d266a0449c56", 0x72}, {&(0x7f0000001d40)="9efb0d7fa106ec3ea9039acd188dabdbaa18b5b74151d488df2c6276c4030dfa76bb720d90d1cf85466c9dae367b42cc13b158ef2a8862ec85fcbdb52d20bb0ecbebb8f3a75a501e75284f426118d5b355570971f0daf2297f6f99cd832c238116eb861f261ccb0d56750ba4f36abca0278fc6f165c3e5775f614bbc03eb3782a7a118", 0x83}, {&(0x7f0000001e00)="8a86b7bf82f07d7cf3b2e40ac055d5b5ff8303bbfbd730e9d1d44edcc1a42dbce1748b6e3554e7f07511b03c4e53d061f5e18c9d41c3e249333649e87f6fadd4d03a16bc3ae68217274873bf643b2a2940f389d257db4f3a027944377640a7db565f620ec58c84b599797f8ccabe8b3c45887654f346085494666d4ae394ca5105d7d98d6bb33281fea5272370adc7ba2b937c53244e54180b5277891c7ee33d37357f2f6d955f37f0c57e343b32726a87fe7ab825a14e55506cc807b06bc542e7c3907b119f9b3e8ed3cfe6d75e288a42742b36827a128e", 0xd8}, {&(0x7f0000001f00)="be5fe5ab1e76b0356c880fae17d0e129fb13dd35ab3212465b9f17650d809a162d921f64b1f7f95a0ba3c2961b225106e6dde662d68998986c3647e7fb178c9e4b5c61bd7018a42f3c75fbca4a359fdc7d836903c97f900b82264994e3b9c085d2e11555a5e1f9a0ca5969a2749ed39ce914a6640d3147b0092f2975fa31b2d612b1876a19a7e17cfb5a2d951dc07bf6e598fd4a9e99f55ecbb2d3987cb1f41ea0f7ba4b0600ee458ad6ff76a6aebf1a2898cdedc63376a96da0beef989703c0d42ae0934a6ec63b89ca62afe77afcaf14776ab00e235a10ba44bedc", 0xdc}, {&(0x7f0000002000)="b8ce9dc3eb0e34fec757faa1582e84539b5a44888587154e63d4176717f5c22dcfdc66796514c9ec78c6049b08bd6aeffc9276a1367fa756dd98e34c13bb11469d9b09a4af0531797ee309d593a8d9944b6e1dbda8c69d7cf518c1d0e35129ed3cbed98540b2f5ffc0e8ae985fbcaf6de4a7bd4c3baf999813c80a", 0x7b}], 0x6, 0x0, 0x0, 0x1}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, r4, 0x2, 0x0, 0x5}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000003340)={&(0x7f00000021c0)="122463942099c30d8d61306cf4c81b41e78d8c864eb848aadcf8a79a9845a2bd004a32e35322d516e10bc22410540ad43ef7989364199db161bf3326541e45076e8569d546c874760c8007828c28003096aa53ba9e03f5ec94f29d7eef0eda8a5fefdbce874ae8159ae951408a2e3391a7453f9c1558b31310e179191059df6db527854a2d43840381907bd8cd7b0f3604ab32a485582be414a19bfcd9e2ff8f892ef806b85d0e7224f9d4141d010f822621364362c027a4a18c2c438c686bb260cf049cd8b90ff8cff5479e3fd356b8e21d32a42e8c2735eb990de26b28f8d134784dfeae1e78772bfc2c529b0f6208872d553c79e1a8bef54b6119f925f6550ecce812749dd54c06ce8cdc208d903abc1ea68addb57c7cce13341282496efd3b8857e5eff12ce67d79e1bc40fd53d404b054620dc91d07c9b81d73ab7a6eb2b5baf3f2c1fa375e2c57a4cc249fbddefccd511ba9de45256a2a21ff3dd82f011fdc3529ba14a9a3acaf1a364cdcd50e01085d7b8d76e380195abd7b201d78a257e3cf09ffc4402d10c0f5f083c16802c8c5e1ca0909d5857e395e189cb88a4435cb022d45dd87af37b0fbe0855e6a15dded020f6ecf52d19ff3d63b8d8216d86e9ee83ade6b7e91939d1ea2e5c3e812083d67e7e8eb75203e6c915042eed8873260013b7ac13400c936072a9f13ef964e29900ece916fa26467bb06d8dbc15807481504d4d99e582bdaf31f6634d590ed2295f20a9c8ba19890302986a65c6710c234cda49205005c1e5ff95a5c848c3e9674df4244cb232df32d8e47beece8bc0ae34e0fb432ca1d864f85fae7e50b5e5333c67dd861296c850f2e92decbd003606172b46cecd3879b9715c8581a168eab6283e202bf869b5349b37bee99d65834ecb19e638dc48bdb7ecdd02bf2b69af07733239c76a2ec43e64a0fc9c8d688329b28937d7fe20686bbeb409de920ee8986a0303aca1ca1d52eeaef60e9c905b8bb8a5956e5ecbaf1346169c114bd1eae3bfd93917e8e730cb62efcc4319d398e87942a6deff6b1b9445ecc5125dd3364058694a6a549a26533e10d9fa379c44630486cdd03949c397cd808e75ee8793e8c78c4fb7e3fe4581d8087d1e7355ff2be6dac1a955a97e02e6ffddc5f3e854267625acbc7f1996a00cb22522db9048b9422fdbbbbf61f5a45c99da9c6741512475d30b87228167e9f48abf13cf3d84666a764532567f7f96130bc221887eeaaea3f2731e9bbe7bcae195e3656559fe69152740fe93dff7c108ab0cfc39e87ac96fa7abb6a567ca94f2a483edea8718de3382e5afaa2f991100be9cda7c4a3d94d4406d9a3ea0d2786f9c36f9e09fc24b240b5dade76cbbc0b7bc6c46eead2623449013cd7fe47786c557fe1636ca1edb83ac2d3bf8f4e68fd3aef64c6f9631b58909e00f36d2f0fd2e11756955aa835924a631b55ddfa9d45b83f78b58066c6559e17beafa3887374095b1ec0cc8762786be3428d11dd03fa03436fe4ef72c7daa759213bd4c62831715dd564919f867ee1248fcc9028a195a0df11e87be3949a63b46d5d205eda611da45f02cebd2a161b37ce109e020a9d067d80812a166d397044eff4bef72723e8d6198a294923788ed12d3146d946b50876e3c294ec13c5d497403216302d0b57489db780a86afba6aead8687ddcc2f4a122d4a3cfba55460118f84672809c0a2eab49dab25044b02b1f3ac2a86a43c4e52de862cb45fa79543746079c91570876a609bc71ebf13d3ac8e0162dac6463d807198fe5c1821dbd73876acd335b30c03b73a4f2bff43eb0e1ee3f9f4ebfa127e017784e32fd6c2842d37f7b2288834192842ba392251aff5fcab6994bcd4ddcb6fdcdf7bc35f0bfc62d1001e9431f7c7740d1d7dfa5b05144818ec8e0b87fec383b397f6a40c1287c9d86ef55b82a33f828aadc114dc0641b801fa59dab2690502487c0c49a2db17b50ef5f6208a25d864b5e11dd4dbe58bd9498c9f269720c536580f6cb185d25a981ecbb1da11d75aa39dc71f8035c38f5336527175f6a8010e11cc92f0c82b5f20d69d067d15da3b4f212382614db8b336f67b6189397dc5033c8c550f4473339bae93e734be9b85a833251346b21ca42cb160f6da9f20562dfe2274b5b98d8e16e57d0b29f08f7b5f190a8c40514f36d1db703ee3409cd9ab7cde2879434ac4b108f0207ae4be821c0a74a996708c9d62a303b4bea44ff98713141c6e6b52ecccfaf3e2011153bf2fdb7dcc33fd21dfbcf11f691bce215b8e6e7139d68bfa0607b647fb60ec9f5459dd5bcd88ef6f2ddda6d20c3a14c21bf403f07417b2f4c5f05b8a6dcde40d88c6cfd0de84b4861ea4c7ecf8f124cd95bc5428a8f87b3507c6ad10b5d097f5f629c8f895ea93a9612628466c477af0e8431e805bb9e4ea30ed73942cd2939b0803dccef7a80cfffa70bfd9a7a483935abd793791bbd291a7a8f5eea384711096502c86afcd9e15a065e287da9c3d347f483c2038d81a495cd743e18e0131e8bd0eada78d6f5c673b159ec34a3a7402bdc69b14afe0a062dfba390379ff852a517756a1e3747bf53d71dc8f955cc9369c0849bed3512cb300fedc6d1824450eaf954e31d42f4117e1ed2ed5b9293e92c5582d3896ee0fd45a5569c4551c28d2d996dd99707cc29918e900ab33f6726aa0cbdec18ba34b739d65d559fb946f2deb5dae3c12c5c7a8f0705af04641abaf7d65a54a933e90b1e8efa5e5802ae8eb42a3dad12304fd907e1fb23c1b3dcf5a78a9c1be9da2fd1b733a941da2efeab97373f1e09438c025a232e8cd6fdf3b999d507fe9189a8423b40865b6fa31c95bf8109f970c6da15d6bf13594143ba43746ee5f9837359ff8adbe309361eb7398d71c0f5ca16e9caa9c9329b45784aa33f7cfdb3f97559bbb8811b3a4405f15af51dfea1e76fd995499d5369a8db27c4b2d8d04acb127e7af91ec05c3c453f74fdfd02e5c05866ed1e0b25ed347b8459c3baeb7c3e78ebdd02ec76b3afeaab8baf1de62b978e73d45a635c5a7a795b9027e56740613b4c6864b21d9212617b4f586aa408758fb30e8d640688a189fe469b5fe72cbab7d17b374eb633cf258956ade59e2727e905f6f6eda0f0e014f4b447ab01413a7affe03973566ad9c07dc23b356048e478c122bf81a0da058b7b105ae766465f7472d8516febc559b53edc45f6d205e6dcd20a2c87cf55ea71eff5f184c39488f88a2a8231901ea65ab309a600fe6f583cadf011fd5059cdbdcdc5cdbf69d6b168559cc9810275686eb1fb237d39dd2e8a355952b47eb5a48c4f3706dcb177bda488e41fd8ec3da1effc3129b5a14b3794f3c87157374df60018876971bf067341fcfcaa82494ecd479a002abe855453243f5f8e5cc8ab57572ac75818df3129a194a1c00df383fa62dc00a79d4f7577a8faa04f828b06e7df04e50fecf6914d884ae30e6b3ae81ae5dae94fe043046faec95f9a0a3c01d6530ea5ac20b9279608d65b9c5d79f642b2a2225da574a8590694916ed98e09aa30f717def91178f329300af90ce740935c7e49d625db3762abeef1df670ef029746026b2905b7b49cfd7e09926e617588900a4102f21e5d4c8c1821c7d5551d283406a94321cd849781e5523bb3f3a88cc5954fcfccd631a4d6abfbfe80dd9736c284bd02b7bdb66c6cc70a9e90fde58c1220eb810c6223e87ba6fa323222d815c3360a01fbf34be91948ea464507d6cad4996093a77891d5d0ca6c5ed2d9ec717fac97d18628ec9bceff7e0a9970ca158a22fe546bab6a0f346ee3f2377ac6f22279ee987d80a87e623f3bf0fdec75c2753f2d212c2b6e9a46558fe34586f539f3fae942b6c718d4b8bcc3c00cdebfc71eeadc3925c50b609dd30bef8b7e47fae42ca07b4e5e5d3956f09437c6ba07b15804f8282f19708b627bd6f0f8588ca91a319a9bd5285ef4427264095aade15a2db0e0c40c773644fc6dece4a17c63c5d4d584f11706c60c4b90b0562e83f2240457baff48b01510a9acde6d49544b5f3eca44c53432ce79d15cc1fabad678ea2487e42a23152a838d0e8f8693efa5048b713837bb54f2ab8b24c914341d8784465e9619e8f07616c81a67c04be2e2b2a730755630128e172e9d627c86285fd89031e36b6f591090f0642ac6f6f3b98e08fb8fc96ce686b29e756c71b61299c5b5351549ac31faf8baea54af64dc4c764becd6491193608e6911feb378315b6edaf6a6d298fbfa5bcab0a2904ac1533273946c692c386024aabad4eb28ca2475bbefa57572a6d9ece45ae9bde83537f700a902c89143f2f4399362899e7907ea57ae2f9ecc1b234a8a3b1307ca771312458773ec5685d7c3aab633c38306a78de7f9afdc3c9c963055617d4837c827019682474c17d8e2a810593dace1528a1343db2da178aa5c8c68ef5231eabd6dbfed8fb0e9e2d7b1280196a1fde80977360ecd742b5518a07fc3acec9f6a5245bc8aefa1b8e76c88f8fc1b561ab3f36ea748f600422d61b665c22a9be25a1d5f225c4e349a2826c57d57fb02bbc4db80cbaff47c9c2c8fcf025999a89e948e275dfbc036103cf81a1340a53099b63aa72110ab7f7dc1a3693158d56fd08c64a3da1b72c82cfa8596c85b49bb3b0115d7de5572e9d715964894938ead0b66eebc47eeaa8723f61b243b2b1f4ae7a95df8ad362eca2ff400dd3849c977a81093b3fbe441f1e666e4f0db074efb1fe5893e31fd21c099b261e67497b6a5bf42ca008cba8774fe3b99d6ed20ea9944023e7a7f058faa776587634524e74936056dfba445de7602c9d69f9fffccf8acdfcb179a70ce54bd60191cad96ee7a427a4bce4c0b93bf8b321b25eb0f73031a235c774a1345efea68fc7c32a5da88a06fff53ac728cbc3474fbda88c1832556b8d20883a9417958b053a9528ce78296aa6ae00c3de72c37f01e3b5b2623aeddbc1c136ebb92d91e01b30fe32ea7657c7b99ec4f528602af9050ba98cfba52f5f9ec3d340bffdd38850b15872c850fb12fbaa4e0d9e43c55be9b49e709ff00631dffb3727c03f33455f014df2580cfafc4f6d443990d77dcc3548e474a477cefd96b028df18a1389e16040bb8baade46e139bcb2c5698bedd21286902f6ba1cd89663fbb7b60fde7a41486bb480aa7827a3a367b2908573cba587c9dd88771e7b00c575252757c421eec2129da12d4c224f2de5d22e3baab4238dcc663cab2fe4822d9b645bb70fb28c94c7a4d8dbc3ae34a5d0dcc5b9107c24ba58d8ce2876af2f91396889f2d34dfd188437714b510132692f5135a2b5c2f617cabe92de46aa022a0efd9b113814f919dff0712c2182f02d89e5d5c4bc08b8aab0bfe85c21870ea41344553c92f1147b67dc36a9dac12580f9982409a065e4b886d822f41d48daf8653d4558068e48e9da280b29e94f2455caf32b214302d6f045484561986e96c18e5ef188b39802d86e61dba1809547d451e00bab70e0e78299b0447e6df5bb8171124ae40a0831aa71a1fdc7707bb46ae2e660383f303c94fb2da93f151e073e76da9f3374b3c9891c5664f2f817b63073c93435be2270ec72978d631b94c6223db7ee37d6c0d28ac737d0989f4c949ae933dbab9ab95ffb66c65e7d2bf785eca639d77d2f78e2690c975d5198dd7ee9d5875fea1f60b7f70870f6fc194db2bc002c368178c754c0f1399646f5fb66e6eab82983d459d757dad720a2de575a64cece34d46b4bd08bd50e687253218c397b3c001873e2aeccf7701e9c1567f1adcb8dbfc984a5a089e", &(0x7f00000031c0)=""/4, &(0x7f0000003200)="6dbbc33a008c71871fe9c4c52f8f5ab105b317420bd116e33c5232fce9d3951fd6bb6a6cf1c81c893ac555a16faf11f691b1511dddf33c1924ff552114f9", &(0x7f0000003240)="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", 0x3, r0}, 0x38) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000003380)={@fallback=r17, r4, 0x1a, 0x8, 0x0, @void, @value=r4}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000003680)={r16, 0xe0, &(0x7f0000003580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000033c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000003400)=[0x0, 0x0, 0x0], &(0x7f0000003440)=[0x0], 0x0, 0x6b, &(0x7f0000003480)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000034c0), &(0x7f0000003500), 0x8, 0x5, 0x8, 0x8, &(0x7f0000003540)}}, 0x10) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f00000036c0)=r18) 4.731170619s ago: executing program 4 (id=10887): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r0, &(0x7f0000000240), 0x0}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0500000006000000080000000500000040000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000dfff0700000000000000000000000020db144a4ecf1d603e"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000004a0850000002d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) 4.644164348s ago: executing program 1 (id=10888): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000280)="5c00000013006bcc9e3be35c6e17aa35066b876c3d0000007ea6e763160af36504001ac0080010000500e7daeb660000ef64bc76bd7b6278c206d83f38d833aa516adc24eab556a705251e618294ff0051f60a9553adac000e4509c5", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) socket$kcm(0xa, 0x5, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x18, 0x11, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000100000000000000feffffff850000005d000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300005adfc5f2d41546696d5431d3112e1e0dbe90fe006748bbaf5ffdfcc5b0b4ed2ad6e8f3792c3276dd55cf0edab6216330adfc44385ff7366457768635f17881fb686180ad49d14a035f363eac1d4c332a00"/196, @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a70000009500000000000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r4, &(0x7f00000005c0)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000400)="ba", 0x1}], 0x1}, 0x0) r5 = socket$kcm(0xa, 0x3, 0x73) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f00000001c0)=@nl=@unspec={0x0, 0x0, 0x0, 0xd8ff}, 0x80, 0x0, 0x0, &(0x7f0000000280)=[@timestamping={{0x14, 0x1, 0x25, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x7fffffff}}], 0x30}, 0x80804) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x0, 0x0, 0xf3, 0xa, 0x0, 0x0, 0xd006e1258c4875cc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x4c30, 0xc8, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180010010000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) close(r2) recvmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100) r7 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0xa, 0x0, @empty}}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000001001000001000000dc00000000000000edf8b94e"], 0x18}, 0x0) 4.374084284s ago: executing program 5 (id=10890): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000002850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x21, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) 4.10424877s ago: executing program 4 (id=10891): perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000007000000000000000000080004000000bb7f1a004d00feff000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x93, &(0x7f00000005c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x4c) 3.720687298s ago: executing program 1 (id=10892): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r0) write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r0}, 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r1) (async) close(r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) socket$kcm(0x29, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r2, 0x0, 0x0}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r2, 0x0, 0x0}, 0x10) write$cgroup_type(r2, &(0x7f0000000180), 0x40010) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0x40010) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r4, &(0x7f0000000180), 0x40010) 3.673818477s ago: executing program 7 (id=10893): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7, 0x5}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x6, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21000000, 0x0, 0x0, 0x0, 0x0}, 0x37) 3.336212116s ago: executing program 2 (id=10894): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000600), 0x2, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000300)={r1}, 0xc) 3.14321878s ago: executing program 5 (id=10895): perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4f34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x1a49, 0xf2f3}, 0x42, 0xc8, 0x0, 0x1, 0x65, 0x0, 0x211, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0x4, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="8fedcb7907031175f37538e486dd630080fc00003c00db5b686158bbcfe8875a0603000011230000000000000000000000ffac1414aa"], 0xfdef) 2.902635173s ago: executing program 1 (id=10896): socket$kcm(0x10, 0x2, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4000000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x7400}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) recvmsg(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, 0x0}, 0x40010041) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x800, 0x0, 0x0, 0x0, 0x7, 0xffff, 0x0, 0x0, 0x0, 0xe000000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) socket$kcm(0xa, 0x922000000003, 0x11) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x190a}, 0x202, 0x0, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000029c0)={&(0x7f00000026c0)="027a6e502734a9434d01eb4d416df830a90946efc3c2780f88949a793480e8c47a594d6e58fd99b491ee7fc5c4e3c2e87d8a18d9ca2b425ee4bafe83ad5758bffa3d9ea086d8aa9d03118e111f88c569d78a169892122a775baf118aeda754a7ef369ba4cf96823e7e75ed3a25da74a613b349e19e24a87ce0afe68fa11a66d9ff48fcb13d4c", &(0x7f0000002780)=""/160, &(0x7f0000002840)="ac2405b3d0000d68cbe9669037d5e7b3aa86ce16a3c638ba2114255550e87ee2a83adcb7cbef3bcaefdc8d392687c3206fedfb40adefc913b47b2af01d20bd4717037fd2591131379eae3ee1261fe953b9ee938dfdcd5410927084a25e3f1c18292557d02d37290144d1a0a2047ee32ace49edd647733ea42e7d0b54403bba0584e5cff9972e1a35b5f71f88f5d540595b690391ba5c2debf62740209e0fe773f7d01ae2955b821dd29ec3d73ec94c08f7f33d1e5ef5b03b8bd38b7146", &(0x7f0000002940)="775108ca66199d594175cb6c6fa8c25d143446db7e487cffd447f3f7e4f013150fba813f2448c2baf68ea600d79f6ec66800e3863affcf25d35bb64a2f2c848b5c795e67b7cb839ebb67325ed497109372b69af94afe193990f1a1c32e691def22f48f84219f64ed9bbed20ada43f73eb9b59a", 0xdc, 0xffffffffffffffff, 0x4}, 0x38) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x88}, 0x0) close(0xffffffffffffffff) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000300)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xf2000000}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8, 0x100}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r1}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open$cgroup(&(0x7f0000002a40)={0x2, 0x80, 0x98, 0x3, 0xfd, 0x4, 0x0, 0x800, 0x41000, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000002a00)}, 0x6000, 0x8000000000000001, 0x7, 0x6, 0xfffffffffffffffc, 0x4, 0x9, 0x0, 0x3, 0x0, 0xffff}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) 2.803801069s ago: executing program 2 (id=10897): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x480283, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) (async, rerun: 64) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 64) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x4, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r0 = socket$kcm(0x22, 0x2, 0x21) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x80044943, 0x0) (async, rerun: 64) perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1b23a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 64) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000b00)={0x0, 0xf22fff7f, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0xc00e}], 0x9, &(0x7f00000001c0)=[@ip_tos_int={{0x7ff4d4260000}}, @ip_ttl={{0x14}}, @ip_ttl={{0x14}}, @ip_tos_u8={{0x11}}, @ip_tos_u8={{0x11, 0x2}}, @ip_retopts={{0x0, 0x0, 0x7, {[@lsrr, @generic={0x0, 0x0, "96"}, @generic={0x0, 0x0, "206a77bdd1a004129054e7704a"}]}}}], 0xf}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="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", 0x121}], 0x1}, 0x0) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x2e, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x400}, [@printk={@ld}, @map_val={0x18, 0x5}, @ringbuf_query, @exit, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @map_fd={0x18, 0x2}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @tail_call, @btf_id={0x18, 0x1, 0x3, 0x0, 0x3}]}, &(0x7f0000000140)='syzkaller\x00', 0xbfb, 0xb0, &(0x7f0000000400)=""/176, 0x41100, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000200)={0x4, 0x3, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f00000004c0)=[{0x2, 0x4, 0x10, 0x4}, {0x4, 0x1, 0x6, 0x6}, {0x3, 0x2, 0xf, 0xb}, {0x0, 0x2, 0x0, 0x8}, {0x2, 0xc9ad000, 0xa, 0x15}, {0x3, 0x5, 0xf}], 0x10, 0x3}, 0x94) (async, rerun: 64) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000980)=@bpf_lsm={0x1d, 0x11, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x8}, {}, {}, [@cb_func={0x18, 0x1, 0x4, 0x0, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000006c0)='GPL\x00', 0x7, 0x79, &(0x7f0000000700)=""/121, 0x40f00, 0x20, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x4, 0x1}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x9, &(0x7f00000007c0)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000800)=[{0x2, 0x3, 0x7, 0x7}, {0x4, 0x1, 0x10}, {0x3, 0x2, 0xc, 0x2}, {0x5, 0x1, 0x5, 0xc}, {0x3, 0x4, 0xa, 0x9}, {0x3, 0x2, 0x10, 0x7}, {0x4, 0x1, 0xd}, {0x3, 0x2, 0x1, 0x3}, {0x4, 0x4, 0x5, 0x2}], 0x10, 0x2}, 0x94) (async) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x4, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r5 = bpf$PROG_LOAD(0x5, 0x0, 0xfd98) r6 = bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@cgroup, 0x1a, 0x0, 0x2, &(0x7f0000000200)=[0x0, 0x0], 0x2, 0x0, 0x0, &(0x7f0000000280), 0x0, 0x0}, 0x40) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e20, 0x3, @local, 0xd13d}}, 0x80, 0x0}, 0x404c880) (async, rerun: 64) r8 = socket$kcm(0x2, 0x5, 0x84) (rerun: 64) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000b80)={@fallback=r3, 0x8, 0x0, 0xc, &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000ac0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000b00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000b40)=[0x0, 0x0]}, 0x40) (async) setsockopt$sock_attach_bpf(r8, 0x84, 0x25, &(0x7f0000000000), 0x20000010) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a40)=ANY=[@ANYRES32, @ANYRES32=r6, @ANYRESDEC, @ANYBLOB="52b388f9b5939e4a481827963aec9ccf97022ff30acf70b4436b7bf1def959e90a2aceaf8a7f6c3c635d6107c174c3021dc3d88f2f0e94182f561180077f5ce046f6a56b55ad68bc4e49ffb04bc87d3077bab81c503344da09008f4e57fb6b083ccc", @ANYRES8=r2], 0x20) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)={@cgroup=r4, r5, 0x21, 0x10, r5, @void, @value=r5, @void, @void, r7}, 0x20) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_subtree(r9, 0x0, 0xa) (async) r10 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r10, 0x58, &(0x7f0000001440)}, 0x10) 2.803373819s ago: executing program 4 (id=10898): socket$kcm(0x2, 0x3, 0x106) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000480)={0x3, 0x80, 0x0, 0x0, 0x5b, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc9, 0x1}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socket$kcm(0x2, 0x1, 0x0) socket$kcm(0x21, 0x2, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x24008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x6, 0x0, 0xc00}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) recvmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0xa8}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xadf0, 0x8000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.671745578s ago: executing program 5 (id=10899): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000010008188040f80ec59acbc0413a181002e00000002010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x8040) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x3, 0x18, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000050000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000072000000b7080000000000007b8af8ff00000000b7080000d50000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000480)={r4}, 0xc) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="e38370000000002300000000040062", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x10, 0x17, &(0x7f0000000000)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@printk={@p, {0x5}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x7}, {}, {}, {}, {0x85, 0x0, 0x0, 0x5}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000e40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000b000140020203600e4109000800ac00060311000000a40012000a00fc000000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0xdb38, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x1}, 0x50) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x5, &(0x7f0000000c00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x80000001}, [@btf_id={0x18, 0xb, 0x3, 0x0, 0x2}]}, &(0x7f0000000c40)='GPL\x00', 0x5500000, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000c80)=[{0x4, 0x3, 0x6, 0x7}, {0x4, 0x4, 0x4, 0x8}, {0x4, 0x5, 0x9}, {0x2, 0x3, 0x7, 0x3}, {0x0, 0x1, 0x0, 0xb}]}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, &(0x7f0000000280), &(0x7f00000002c0)=r6}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={0x0, &(0x7f0000000480)=""/179, 0x0, 0xb3, 0x0, 0x7f}, 0x28) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000680)={{}, &(0x7f0000000600), &(0x7f0000000640)='%pB \x00'}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f00000002c0)={&(0x7f0000000200)=@caif=@rfm={0x25, 0x2, "bf4c484a1fa00081a00200000000bb00"}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000140)="18", 0x1}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x7e8166965e22236a) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0xc26bfe8e8f6baca8}, 0x20) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.stat\x00', 0x7a05, 0x1700) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x8, 0x2}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) 2.149136903s ago: executing program 7 (id=10900): r0 = socket$kcm(0x2, 0x922000000001, 0x106) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="00000000bf4cb78de81aa6c700d48ca97144a4559700000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0xe) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000006b8a00fe00000000c7080000010000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb7020000080000fa18230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r2, 0x0, 0xd9, 0xb5, &(0x7f0000000040)="2ab91cf1206241ce9225863fab44b6073db56ebf7c246e5c92518a199909eb7c41a3f644e37349091832c791b6f2dc2fa8ef448c39b001b5d1bf4e976f3ef00df8a0c82b771819c6552ed0f5614067d61cefa0b7f995d26d946bd51260a6eed548985c6c0750640a58ee5449e7263e344226ffdc60d4014cc017ec76da3416f323d3bad33460ef392a9d39221301dd3f4d097207d7042f97bac8b2c0a1297028e0a0c856abdac2b064251eae457a1bb058621839de7bd09b3442045e066ecacbf4486f270e78464282b9f9134f157fe26010b7a83adb145fa8", &(0x7f0000000140)=""/181, 0xf99a, 0x0, 0xde, 0xe2, &(0x7f0000000200)="0a07f174556ede55bbb2163e079441bca151c1765ae7f167360c9dfbe71a6c582ae0db4d052fd5037660db7355662543a2c5a152f45ab64b7e60d260f12cd75e26498787b21036590da5bcfe7c062f13100ebf611483cf41112be764e44105ca4703b45806bdca6bb66a9d2a22d44b3503f4176b0172bea48fff9a02ab62e4bbb104e3191d85cde2fb395a02b4e0bb02d1f888ea951911bd968e4b3f1c29ec8281ae6d44105c500a7547404884828573609b9c6eb44ac6b87790b9462987369b76402a7fd090bc49730f1b27d1ac9de9e63760891e652154a7e87e9ab8e6", &(0x7f00000003c0)="fd70a0dfefec464e59a890b7e291237af9f7570d278d182b39cb9220647b36a0814a2fa399bdc818a8b599d6ba29c1beec8629a976726b9e2a3bf2aac2399c5a7e4f63f94b387c009c71f31636a16920dee72e6d4ae8eed53d542b6c0b0360b73d6cff3071b3b52ba1cbf137e787ce2e6243bb17470e1d1f15338190dabad4b760a1cda246e70bf2ef0cf2038345b923e73e02736ddea3956f868e4a84161ac7297b57174628c6e1456e597ecfd0414d038ffcb3267049249f309ee6272ac51a04c01aa088f6406685d3d878cd2ba15340fd04b44e4d5e0216106bc09d9c4cc98e6b", 0x2, 0x0, 0x8}, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x4003, 0x0) 1.774170773s ago: executing program 1 (id=10901): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100080, 0x4, 0x0, 0x8}, 0x0, 0x1, r0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2d, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x8004, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r2 = socket$kcm(0x10, 0x2, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000001c0), 0x12) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x2, 0xbf22, 0x1}, 0x48) r3 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0x84, &(0x7f0000000000), 0x90) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB='c 1:'], 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(r2, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x39c}, 0x0) r6 = socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8003fffe, 0x60, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xd, r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) recvmsg$unix(r7, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x15}, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0x12, &(0x7f00000008c0)=r9, 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r10, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 1.688201973s ago: executing program 2 (id=10902): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x4, 0x1c, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0xf00}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x8}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.447299706s ago: executing program 4 (id=10903): perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0xde, 0x0, 0x7, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f0000000340)=r3, 0x4) r4 = socket$kcm(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_procs(r8, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f00000001c0), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0) r11 = openat$cgroup_ro(r10, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r11, &(0x7f0000000280)=0xffffffffffffffff, 0x12) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x2, 0x4, 0x1, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000380)={r12, &(0x7f0000000300), &(0x7f0000000340)=""/55}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000480)={r12, &(0x7f0000000440)="d5", &(0x7f00000015c0)=""/168}, 0x20) setsockopt$sock_attach_bpf(r4, 0x107, 0x12, &(0x7f00000008c0)=r7, 0x4) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x12) r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r14 = openat$cgroup_pressure(r13, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r14, &(0x7f0000000080)={'some', 0x20, 0x2000000008, 0x20, 0x10000000fffff}, 0x2f) close(r14) close(r4) 1.179320671s ago: executing program 2 (id=10904): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x248, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000, 0x10001}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000380000003800000003000000ffff0f00000000010000000000000000000000000000000105000000100000000000000000000003000000000100000002"], 0x0, 0x53}, 0x28) 1.04411163s ago: executing program 5 (id=10905): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r1 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000300000018200000", @ANYRES32, @ANYBLOB="0000000000000000950000cc000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0x2, 0x2, 0x73) sendmsg$inet(r3, &(0x7f0000000500)={&(0x7f0000000300)={0x2, 0x0, @empty}, 0x8, &(0x7f0000000400)=[{&(0x7f0000000340)='+', 0x34000}], 0x1}, 0x900000000000000) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') 877.852359ms ago: executing program 7 (id=10906): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000980), 0x0, 0x2f, 0xe8034000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x5dc}, 0x50) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x40000000f, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000810000002000000009"], 0x48) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x5, r1}, 0x38) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r4) ioctl$SIOCSIFHWADDR(r4, 0x8b2d, &(0x7f0000000040)={'wlan1\x00', @random="86ffb7b8252c"}) write$cgroup_pid(r4, &(0x7f0000000100)=r3, 0x12) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) 768.825704ms ago: executing program 1 (id=10907): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000600), 0x2, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000300)={r1}, 0xc) 375.45902ms ago: executing program 2 (id=10908): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x23}}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000100000051d833483cc75d51900000000000000004000005040500002b24ec10064b6f2f00c000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319e2e66d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) 220.878423ms ago: executing program 2 (id=10909): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f00000001c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x43cd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169b740ac03d7c64cee49ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d54f45a24effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f949c479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c7724e9e7e7babf61fe358ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261ed1d4515f46290d5c6579b63358fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f13dff7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63e774e940bfeb0de83f42fd565a299f741f9b00be4e8fcaf4ec85daceb16d9e8a438e3eb2556570e381b03d9e3c245728648ed9ff22dc963ed105c851c3481125b4c0c8a08a0c9930190902af109fc56b64cc952f298ebe73d7b18052e0147356228ca171b06274a871e2cf9609e0b4cdad36c3250bc8f56f95a6ed"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000), 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r4, &(0x7f0000000080), 0x0, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="2e00000011008188040f80ec59acbc0413a181003f00000001010000fe0200000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) r6 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r6, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x20000001) socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) 90.545922ms ago: executing program 4 (id=10910): bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0a00000004010000080000000d00b93dc9000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r0 = socket$kcm(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f0000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000010000000000000000000000850000005300000085000000050000009500000000000000a94be0c51261be6a99fe3d0000a232d5e1f59f18f845f82e9a7bde9e8f4b9197701b547edf612a03f1737d95"], 0x0, 0x68b, 0x0, 0x0, 0x0, 0x20}, 0x94) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="fbe6bd8dfcdda5a210b8cfefbd66f459c7261b927d25d3cf74d2f7c97735eba47f606a290d18492592230700000000000000081fdbd921ed4db0e67c9d5ab1452445a1e0da5ac68b13f4afe2712eeaad350d07", 0x53}], 0x1}, 0x0) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0x12, &(0x7f00000008c0)=r6, 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r7, &(0x7f0000000140)=ANY=[@ANYBLOB="1e000300008c71ef28ff4b"], 0xffdd) r9 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r2}, 0x8) close(r9) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{r9}, &(0x7f0000000200), &(0x7f0000000340)='%-010d \x00'}, 0x20) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0xa000000, &(0x7f0000000080)=[{&(0x7f0000000040)="140000001c000b63d25a80648c2594f91624fc60", 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) 0s ago: executing program 1 (id=10911): socket$kcm(0x10, 0x2, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4000000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x7400}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) recvmsg(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, 0x0}, 0x40010041) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x800, 0x0, 0x0, 0x0, 0x7, 0xffff, 0x0, 0x0, 0x0, 0xe000000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) socket$kcm(0xa, 0x922000000003, 0x11) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x190a}, 0x202, 0x0, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000029c0)={&(0x7f00000026c0)="027a6e502734a9434d01eb4d416df830a90946efc3c2780f88949a793480e8c47a594d6e58fd99b491ee7fc5c4e3c2e87d8a18d9ca2b425ee4bafe83ad5758bffa3d9ea086d8aa9d03118e111f88c569d78a169892122a775baf118aeda754a7ef369ba4cf96823e7e75ed3a25da74a613b349e19e24a87ce0afe68fa11a66d9ff48fcb13d4c", &(0x7f0000002780)=""/160, &(0x7f0000002840)="ac2405b3d0000d68cbe9669037d5e7b3aa86ce16a3c638ba2114255550e87ee2a83adcb7cbef3bcaefdc8d392687c3206fedfb40adefc913b47b2af01d20bd4717037fd2591131379eae3ee1261fe953b9ee938dfdcd5410927084a25e3f1c18292557d02d37290144d1a0a2047ee32ace49edd647733ea42e7d0b54403bba0584e5cff9972e1a35b5f71f88f5d540595b690391ba5c2debf62740209e0fe773f7d01ae2955b821dd29ec3d73ec94c08f7f33d1e5ef5b03b8bd38b7146", &(0x7f0000002940)="775108ca66199d594175cb6c6fa8c25d143446db7e487cffd447f3f7e4f013150fba813f2448c2baf68ea600d79f6ec66800e3863affcf25d35bb64a2f2c848b5c795e67b7cb839ebb67325ed497109372b69af94afe193990f1a1c32e691def22f48f84219f64ed9bbed20ada43f73eb9b59a", 0xdc, 0xffffffffffffffff, 0x4}, 0x38) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x88}, 0x0) close(0xffffffffffffffff) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000300)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xf2000000}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8, 0x100}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r1}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open$cgroup(&(0x7f0000002a40)={0x2, 0x80, 0x98, 0x3, 0xfd, 0x4, 0x0, 0x800, 0x41000, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000002a00)}, 0x6000, 0x8000000000000001, 0x7, 0x6, 0xfffffffffffffffc, 0x4, 0x9, 0x0, 0x3, 0x0, 0xffff}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): est_run+0x31e/0x390 [ 1093.221619][T32435] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.9127'. [ 1093.221754][T32433] __sys_bpf+0x5a5/0x6f0 [ 1093.286172][T32433] ? bpf_link_show_fdinfo+0x380/0x380 [ 1093.291572][T32433] ? rcu_nmi_exit+0x6f/0xf0 [ 1093.296125][T32433] ? vtime_user_exit+0x2c8/0x3e0 [ 1093.301110][T32433] __x64_sys_bpf+0x78/0x90 [ 1093.305540][T32433] do_syscall_64+0x4c/0xa0 [ 1093.309982][T32433] ? clear_bhb_loop+0x30/0x80 [ 1093.314680][T32433] ? clear_bhb_loop+0x30/0x80 [ 1093.319474][T32433] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1093.325387][T32433] RIP: 0033:0x7ff0fbc9a799 [ 1093.329821][T32433] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1093.349452][T32433] RSP: 002b:00007ff0f9ef4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1093.357887][T32433] RAX: ffffffffffffffda RBX: 00007ff0fbf13fa0 RCX: 00007ff0fbc9a799 [ 1093.365878][T32433] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 1093.373874][T32433] RBP: 00007ff0f9ef4090 R08: 0000000000000000 R09: 0000000000000000 [ 1093.381879][T32433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1093.389871][T32433] R13: 00007ff0fbf14038 R14: 00007ff0fbf13fa0 R15: 00007ffe067c6ad8 [ 1093.397877][T32433] [ 1093.463197][T32438] netlink: 'syz.4.9128': attribute type 10 has an invalid length. [ 1093.571384][T32438] netlink: 'syz.4.9128': attribute type 11 has an invalid length. [ 1093.584056][T32439] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1093.591329][T32439] syzkaller1: linktype set to 769 [ 1093.896444][T32450] netlink: 152 bytes leftover after parsing attributes in process `syz.4.9133'. [ 1093.979189][T32450] netlink: 6 bytes leftover after parsing attributes in process `syz.4.9133'. [ 1093.996293][T32455] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9133'. [ 1096.455322][T32555] validate_nla: 4 callbacks suppressed [ 1096.455341][T32555] netlink: 'syz.6.9171': attribute type 10 has an invalid length. [ 1096.583461][T32555] netlink: 'syz.6.9171': attribute type 11 has an invalid length. [ 1096.851987][T32578] FAULT_INJECTION: forcing a failure. [ 1096.851987][T32578] name failslab, interval 1, probability 0, space 0, times 0 [ 1096.925050][T32578] CPU: 0 PID: 32578 Comm: syz.1.9178 Not tainted syzkaller #0 [ 1096.932566][T32578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1096.942642][T32578] Call Trace: [ 1096.945939][T32578] [ 1096.948895][T32578] dump_stack_lvl+0x188/0x250 [ 1096.953619][T32578] ? show_regs_print_info+0x20/0x20 [ 1096.958848][T32578] ? load_image+0x400/0x400 [ 1096.963391][T32578] ? __might_sleep+0xf0/0xf0 [ 1096.968011][T32578] ? __lock_acquire+0x7d10/0x7d10 [ 1096.973199][T32578] should_fail+0x38c/0x4c0 [ 1096.977661][T32578] should_failslab+0x5/0x20 [ 1096.982186][T32578] slab_pre_alloc_hook+0x51/0xc0 [ 1096.987151][T32578] ? __d_alloc+0x2a/0x6f0 [ 1096.991513][T32578] kmem_cache_alloc+0x3d/0x290 [ 1096.996314][T32578] __d_alloc+0x2a/0x6f0 [ 1097.000488][T32578] ? lockdep_init_map_type+0x98/0x900 [ 1097.005888][T32578] d_alloc_parallel+0x7b/0x1330 [ 1097.010787][T32578] ? __init_waitqueue_head+0xa5/0x150 [ 1097.016200][T32578] __lookup_slow+0x134/0x410 [ 1097.020844][T32578] ? lookup_one_len+0x2d0/0x2d0 [ 1097.025738][T32578] ? down_read+0x1aa/0x2e0 [ 1097.030189][T32578] lookup_slow+0x53/0x70 [ 1097.034466][T32578] walk_component+0x319/0x460 [ 1097.039176][T32578] link_path_walk+0x665/0xd70 [ 1097.043911][T32578] ? handle_lookup_down+0x130/0x130 [ 1097.049142][T32578] ? percpu_counter_add_batch+0x13b/0x160 [ 1097.054903][T32578] path_openat+0x28d/0x2fa0 [ 1097.059465][T32578] ? perf_trace_lock+0xe4/0x390 [ 1097.064358][T32578] ? do_filp_open+0x410/0x410 [ 1097.069069][T32578] ? perf_trace_lock+0xe4/0x390 [ 1097.073960][T32578] ? trace_event_raw_event_lock+0x270/0x270 [ 1097.079889][T32578] do_filp_open+0x1e2/0x410 [ 1097.084424][T32578] ? vfs_tmpfile+0x300/0x300 [ 1097.089056][T32578] ? noop_direct_IO+0x10/0x10 [ 1097.093810][T32578] ? _raw_spin_unlock+0x24/0x40 [ 1097.098695][T32578] ? alloc_fd+0x598/0x630 [ 1097.103057][T32578] do_sys_openat2+0x150/0x4b0 [ 1097.107764][T32578] ? __lock_acquire+0x7d10/0x7d10 [ 1097.112817][T32578] ? do_sys_open+0xe0/0xe0 [ 1097.117252][T32578] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1097.123265][T32578] ? lock_chain_count+0x20/0x20 [ 1097.128140][T32578] ? vtime_user_exit+0x2c8/0x3e0 [ 1097.133106][T32578] __x64_sys_openat+0x135/0x160 [ 1097.137975][T32578] do_syscall_64+0x4c/0xa0 [ 1097.142410][T32578] ? clear_bhb_loop+0x30/0x80 [ 1097.147100][T32578] ? clear_bhb_loop+0x30/0x80 [ 1097.151801][T32578] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1097.157714][T32578] RIP: 0033:0x7ff0fbc5afce [ 1097.162159][T32578] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1097.181788][T32578] RSP: 002b:00007ff0f9ef3ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1097.190224][T32578] RAX: ffffffffffffffda RBX: 00007ff0f9ef46c0 RCX: 00007ff0fbc5afce [ 1097.198219][T32578] RDX: 0000000000000002 RSI: 00007ff0f9ef3f90 RDI: ffffffffffffff9c [ 1097.206212][T32578] RBP: 00007ff0f9ef4090 R08: 0000000000000000 R09: 0000000000000000 [ 1097.214207][T32578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1097.222194][T32578] R13: 00007ff0fbf14038 R14: 00007ff0fbf13fa0 R15: 00007ffe067c6ad8 [ 1097.230205][T32578] [ 1097.565825][T32587] netlink: 'syz.5.9181': attribute type 3 has an invalid length. [ 1097.688760][T32587] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.9181'. [ 1098.249117][T32616] netlink: 'syz.6.9192': attribute type 10 has an invalid length. [ 1098.358754][T32616] netlink: 'syz.6.9192': attribute type 11 has an invalid length. [ 1099.630810][T32660] netlink: 123072 bytes leftover after parsing attributes in process `syz.5.9205'. [ 1100.508399][T32680] netlink: 208188 bytes leftover after parsing attributes in process `syz.5.9211'. [ 1100.617184][T32697] netlink: 'syz.2.9216': attribute type 10 has an invalid length. [ 1100.637331][T32697] team0: Device vxcan1 is of different type [ 1101.012991][T32704] netlink: 209844 bytes leftover after parsing attributes in process `syz.5.9218'. [ 1101.376262][T32719] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.9225'. [ 1101.824865][T32724] device syzkaller0 entered promiscuous mode [ 1101.974623][T32731] netlink: 21 bytes leftover after parsing attributes in process `syz.5.9228'. [ 1102.034092][T32731] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1102.152678][T32738] FAULT_INJECTION: forcing a failure. [ 1102.152678][T32738] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1102.271640][T32738] CPU: 1 PID: 32738 Comm: syz.1.9231 Not tainted syzkaller #0 [ 1102.279187][T32738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1102.289280][T32738] Call Trace: [ 1102.292574][T32738] [ 1102.295533][T32738] dump_stack_lvl+0x188/0x250 [ 1102.300243][T32738] ? show_regs_print_info+0x20/0x20 [ 1102.305464][T32738] ? load_image+0x400/0x400 [ 1102.309988][T32738] ? __lock_acquire+0x7d10/0x7d10 [ 1102.315123][T32738] ? vfs_write+0x8b2/0xd60 [ 1102.319572][T32738] should_fail+0x38c/0x4c0 [ 1102.324017][T32738] _copy_from_user+0x2e/0x170 [ 1102.328714][T32738] __sys_bpf+0x26d/0x6f0 [ 1102.332979][T32738] ? bpf_link_show_fdinfo+0x380/0x380 [ 1102.333404][T32742] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1102.338379][T32738] ? vtime_user_exit+0x2c8/0x3e0 [ 1102.338407][T32738] __x64_sys_bpf+0x78/0x90 [ 1102.338429][T32738] do_syscall_64+0x4c/0xa0 [ 1102.338448][T32738] ? clear_bhb_loop+0x30/0x80 [ 1102.363812][T32738] ? clear_bhb_loop+0x30/0x80 [ 1102.368524][T32738] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1102.374449][T32738] RIP: 0033:0x7ff0fbc9a799 [ 1102.378884][T32738] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1102.398522][T32738] RSP: 002b:00007ff0f9ef4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1102.406957][T32738] RAX: ffffffffffffffda RBX: 00007ff0fbf13fa0 RCX: 00007ff0fbc9a799 [ 1102.415137][T32738] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 1102.423123][T32738] RBP: 00007ff0f9ef4090 R08: 0000000000000000 R09: 0000000000000000 [ 1102.431108][T32738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1102.439098][T32738] R13: 00007ff0fbf14038 R14: 00007ff0fbf13fa0 R15: 00007ffe067c6ad8 [ 1102.447103][T32738] [ 1102.466555][T32742] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1102.537766][T32746] device sit0 entered promiscuous mode [ 1102.696072][T32755] netlink: 'syz.4.9237': attribute type 29 has an invalid length. [ 1103.191836][ T308] netlink: 'syz.5.9244': attribute type 3 has an invalid length. [ 1103.218080][ T308] netlink: 132 bytes leftover after parsing attributes in process `syz.5.9244'. [ 1104.156800][ T336] netlink: 'syz.2.9250': attribute type 4 has an invalid length. [ 1104.260595][ T343] FAULT_INJECTION: forcing a failure. [ 1104.260595][ T343] name failslab, interval 1, probability 0, space 0, times 0 [ 1104.292370][ T343] CPU: 0 PID: 343 Comm: syz.5.9253 Not tainted syzkaller #0 [ 1104.300055][ T343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1104.310149][ T343] Call Trace: [ 1104.313450][ T343] [ 1104.316406][ T343] dump_stack_lvl+0x188/0x250 [ 1104.321115][ T343] ? show_regs_print_info+0x20/0x20 [ 1104.326349][ T343] ? load_image+0x400/0x400 [ 1104.330906][ T343] ? __might_sleep+0xf0/0xf0 [ 1104.335514][ T343] ? __lock_acquire+0x7d10/0x7d10 [ 1104.340561][ T343] ? lockdep_init_map_type+0x98/0x900 [ 1104.345966][ T343] should_fail+0x38c/0x4c0 [ 1104.350412][ T343] should_failslab+0x5/0x20 [ 1104.354950][ T343] slab_pre_alloc_hook+0x51/0xc0 [ 1104.359907][ T343] ? security_inode_alloc+0x30/0x110 [ 1104.365208][ T343] kmem_cache_alloc+0x3d/0x290 [ 1104.369996][ T343] security_inode_alloc+0x30/0x110 [ 1104.375131][ T343] inode_init_always+0x8f4/0xcb0 [ 1104.380095][ T343] new_inode_pseudo+0x8e/0x210 [ 1104.384907][ T343] __sock_create+0x129/0x900 [ 1104.389521][ T343] __sys_socketpair+0x1bd/0x540 [ 1104.394398][ T343] __x64_sys_socketpair+0x97/0xb0 [ 1104.399443][ T343] do_syscall_64+0x4c/0xa0 [ 1104.403883][ T343] ? clear_bhb_loop+0x30/0x80 [ 1104.408575][ T343] ? clear_bhb_loop+0x30/0x80 [ 1104.413274][ T343] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1104.419230][ T343] RIP: 0033:0x7f737230b799 [ 1104.423679][ T343] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1104.443301][ T343] RSP: 002b:00007f7370565028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 1104.451736][ T343] RAX: ffffffffffffffda RBX: 00007f7372584fa0 RCX: 00007f737230b799 [ 1104.459721][ T343] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000001 [ 1104.467708][ T343] RBP: 00007f7370565090 R08: 0000000000000000 R09: 0000000000000000 [ 1104.475704][ T343] R10: 00002000000029c0 R11: 0000000000000246 R12: 0000000000000001 [ 1104.483709][ T343] R13: 00007f7372585038 R14: 00007f7372584fa0 R15: 00007fffd0816b18 [ 1104.491719][ T343] [ 1104.761525][ T343] socket: no more sockets [ 1105.514482][ T392] netlink: 'syz.4.9266': attribute type 9 has an invalid length. [ 1105.589970][ T389] device wlan0 entered promiscuous mode [ 1105.612037][ T392] netlink: 155276 bytes leftover after parsing attributes in process `syz.4.9266'. [ 1105.636011][ T395] netlink: 2 bytes leftover after parsing attributes in process `syz.5.9269'. [ 1105.681386][ T395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1105.741453][ T395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1105.782110][ T395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1105.823251][ T395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1105.866341][ T395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1105.888065][ T395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1105.910762][ T395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1105.935996][ T395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1106.576778][ T405] netlink: 'syz.1.9272': attribute type 12 has an invalid length. [ 1106.591624][ T405] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9272'. [ 1106.668421][ T412] netlink: 'syz.5.9271': attribute type 10 has an invalid length. [ 1106.799810][ T412] team0: Port device wlan1 added [ 1106.813393][ T418] netlink: 'syz.4.9274': attribute type 4 has an invalid length. [ 1106.821315][ T401] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1106.847299][ T418] netlink: 206236 bytes leftover after parsing attributes in process `syz.4.9274'. [ 1106.890216][ T411] netlink: 'syz.4.9274': attribute type 3 has an invalid length. [ 1106.952610][ T411] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.9274'. [ 1107.284930][ T428] netlink: 63503 bytes leftover after parsing attributes in process `syz.5.9280'. [ 1107.580549][ T441] netlink: 'syz.4.9285': attribute type 16 has an invalid length. [ 1107.653147][ T441] netlink: 48 bytes leftover after parsing attributes in process `syz.4.9285'. [ 1107.708241][ T449] netlink: 'syz.5.9286': attribute type 1 has an invalid length. [ 1107.726924][ T440] netlink: 56 bytes leftover after parsing attributes in process `syz.5.9286'. [ 1107.770569][ T440] netlink: 56 bytes leftover after parsing attributes in process `syz.5.9286'. [ 1107.874265][ T440] netlink: 56 bytes leftover after parsing attributes in process `syz.5.9286'. [ 1108.619763][ T473] netlink: 'syz.5.9298': attribute type 1 has an invalid length. [ 1112.477143][ T527] __nla_validate_parse: 2 callbacks suppressed [ 1112.477161][ T527] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.9317'. [ 1112.656661][ T534] netlink: 'syz.6.9321': attribute type 3 has an invalid length. [ 1112.715151][ T534] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.9321'. [ 1112.985092][ T550] netlink: 'syz.4.9327': attribute type 1 has an invalid length. [ 1113.021865][ T550] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.9327'. [ 1113.058980][ T555] netlink: 'syz.6.9330': attribute type 10 has an invalid length. [ 1113.091530][ T555] netlink: 40 bytes leftover after parsing attributes in process `syz.6.9330'. [ 1113.134745][ T555] netlink: 'syz.6.9330': attribute type 10 has an invalid length. [ 1113.183756][ T555] netlink: 40 bytes leftover after parsing attributes in process `syz.6.9330'. [ 1113.263571][ T566] netlink: 'syz.5.9333': attribute type 10 has an invalid length. [ 1113.459626][ T566] team0 (unregistering): Port device team_slave_0 removed [ 1113.526791][ T566] team0 (unregistering): Port device team_slave_1 removed [ 1113.592799][ T566] team0 (unregistering): Port device geneve1 removed [ 1113.640394][ T566] team0 (unregistering): Port device wlan1 removed [ 1113.789448][ T590] netlink: 'syz.6.9341': attribute type 1 has an invalid length. [ 1113.856707][ T590] netlink: 181400 bytes leftover after parsing attributes in process `syz.6.9341'. [ 1114.755147][ T614] netlink: 'syz.6.9350': attribute type 10 has an invalid length. [ 1114.838932][ T614] device syz_tun entered promiscuous mode [ 1114.884929][ T614] team0: Port device syz_tun added [ 1114.897230][ T619] netlink: 'syz.4.9352': attribute type 29 has an invalid length. [ 1114.933782][ T619] netlink: 'syz.4.9352': attribute type 29 has an invalid length. [ 1114.989062][ T621] netlink: 'syz.4.9352': attribute type 29 has an invalid length. [ 1115.062522][ T619] netlink: 'syz.4.9352': attribute type 29 has an invalid length. [ 1115.189709][ T626] netlink: 65039 bytes leftover after parsing attributes in process `syz.6.9355'. [ 1115.206653][ T626] tc_dump_action: action bad kind [ 1115.416937][ T637] netlink: 144 bytes leftover after parsing attributes in process `syz.2.9359'. [ 1115.643347][ T650] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.9363'. [ 1115.683494][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.689835][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.818128][ T656] device bridge_slave_1 left promiscuous mode [ 1115.837700][ T656] bridge0: port 2(bridge_slave_1) entered disabled state [ 1115.877650][ T656] device bridge_slave_0 left promiscuous mode [ 1115.898624][ T656] bridge0: port 1(bridge_slave_0) entered disabled state [ 1116.170948][ T670] netlink: 21 bytes leftover after parsing attributes in process `syz.6.9370'. [ 1116.223186][ T670] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1117.316874][ T714] FAULT_INJECTION: forcing a failure. [ 1117.316874][ T714] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1117.381540][ T714] CPU: 0 PID: 714 Comm: syz.2.9386 Not tainted syzkaller #0 [ 1117.388874][ T714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1117.398946][ T714] Call Trace: [ 1117.402238][ T714] [ 1117.405205][ T714] dump_stack_lvl+0x188/0x250 [ 1117.409916][ T714] ? show_regs_print_info+0x20/0x20 [ 1117.415146][ T714] ? load_image+0x400/0x400 [ 1117.419694][ T714] ? __lock_acquire+0x7d10/0x7d10 [ 1117.424747][ T714] ? htab_map_delete_elem+0x413/0x520 [ 1117.430153][ T714] should_fail+0x38c/0x4c0 [ 1117.434602][ T714] _copy_to_user+0x2e/0x130 [ 1117.439133][ T714] bpf_prog_test_run_syscall+0x379/0x4f0 [ 1117.444805][ T714] ? sock_gen_cookie+0x60/0x60 [ 1117.449602][ T714] ? sock_gen_cookie+0x60/0x60 [ 1117.454400][ T714] bpf_prog_test_run+0x31e/0x390 [ 1117.459372][ T714] __sys_bpf+0x5a5/0x6f0 [ 1117.463645][ T714] ? bpf_link_show_fdinfo+0x380/0x380 [ 1117.469062][ T714] ? vtime_user_exit+0x2c8/0x3e0 [ 1117.474041][ T714] __x64_sys_bpf+0x78/0x90 [ 1117.478489][ T714] do_syscall_64+0x4c/0xa0 [ 1117.482941][ T714] ? clear_bhb_loop+0x30/0x80 [ 1117.487752][ T714] ? clear_bhb_loop+0x30/0x80 [ 1117.492492][ T714] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1117.498456][ T714] RIP: 0033:0x7fe09cc69799 [ 1117.502899][ T714] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1117.522531][ T714] RSP: 002b:00007fe09aec3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1117.530983][ T714] RAX: ffffffffffffffda RBX: 00007fe09cee2fa0 RCX: 00007fe09cc69799 [ 1117.538980][ T714] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 1117.546977][ T714] RBP: 00007fe09aec3090 R08: 0000000000000000 R09: 0000000000000000 [ 1117.554972][ T714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1117.562962][ T714] R13: 00007fe09cee3038 R14: 00007fe09cee2fa0 R15: 00007ffd860d6188 [ 1117.570970][ T714] [ 1117.880289][ T735] __nla_validate_parse: 2 callbacks suppressed [ 1117.888738][ T735] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9394'. [ 1118.013534][ T744] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9395'. [ 1118.663103][ T770] netlink: 10 bytes leftover after parsing attributes in process `syz.1.9405'. [ 1118.866803][ T778] validate_nla: 3 callbacks suppressed [ 1118.866819][ T778] netlink: 'syz.2.9406': attribute type 1 has an invalid length. [ 1118.982032][ T778] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.9406'. [ 1119.435416][ T786] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9413'. [ 1119.489396][ T791] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.9414'. [ 1119.501284][ T785] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1119.829894][ T802] netlink: 132 bytes leftover after parsing attributes in process `syz.6.9416'. [ 1120.078863][ T816] netlink: 'syz.1.9421': attribute type 10 has an invalid length. [ 1121.268253][ T851] netlink: 2 bytes leftover after parsing attributes in process `syz.6.9433'. [ 1121.293731][ T851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1121.332394][ T851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1121.371612][ T851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1121.429386][ T851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1121.491957][ T851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1121.553212][ T851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1121.624459][ T851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1121.695906][ T851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1121.756360][ T851] device batadv_slave_1 entered promiscuous mode [ 1122.338670][ T868] netlink: 'syz.6.9440': attribute type 10 has an invalid length. [ 1122.719939][ T886] netlink: 'syz.6.9445': attribute type 10 has an invalid length. [ 1122.908411][ T888] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.9446'. [ 1123.506123][ T886] bridge0: port 4(team0) entered disabled state [ 1123.739745][ T886] device team_slave_0 left promiscuous mode [ 1123.782036][ T886] team0 (unregistering): Port device team_slave_0 removed [ 1123.790368][ T886] device team_slave_1 left promiscuous mode [ 1123.812118][ T886] team0 (unregistering): Port device team_slave_1 removed [ 1123.819656][ T886] device macvlan0 left promiscuous mode [ 1123.839986][ T886] device veth1_vlan left promiscuous mode [ 1123.861991][ T886] team0 (unregistering): Port device macvlan0 removed [ 1123.877531][ T886] device geneve1 left promiscuous mode [ 1123.907221][ T886] team0 (unregistering): Port device geneve1 removed [ 1123.925168][ T886] device syz_tun left promiscuous mode [ 1124.003106][ T886] team0 (unregistering): Port device syz_tun removed [ 1124.056918][ T910] netlink: 'syz.1.9452': attribute type 16 has an invalid length. [ 1124.073161][ T910] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9452'. [ 1124.153029][ T917] netlink: 149044 bytes leftover after parsing attributes in process `syz.5.9456'. [ 1125.351219][ T960] netlink: 'syz.5.9470': attribute type 10 has an invalid length. [ 1125.371316][ T966] netlink: 'syz.1.9468': attribute type 1 has an invalid length. [ 1125.434317][ T966] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.9468'. [ 1125.725504][ T975] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1125.773231][ T975] device syzkaller0 entered promiscuous mode [ 1126.641513][ T155] wlan1: Trigger new scan to find an IBSS to join [ 1126.905562][ T999] netlink: 'syz.1.9483': attribute type 3 has an invalid length. [ 1126.933731][ T999] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.9483'. [ 1127.128460][ T1007] netlink: 'syz.5.9487': attribute type 10 has an invalid length. [ 1127.169869][ T1007] netlink: 40 bytes leftover after parsing attributes in process `syz.5.9487'. [ 1127.242907][ T1007] batman_adv: batadv0: Adding interface: virt_wifi0 [ 1127.259955][ T1007] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1127.358518][ T1007] batman_adv: batadv0: Interface activated: virt_wifi0 [ 1128.014779][ T1066] __sock_release: fasync list not empty! [ 1128.168607][ T1081] netlink: 'syz.1.9511': attribute type 39 has an invalid length. [ 1128.250763][ T1085] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.9511'. [ 1128.691215][ T1102] netlink: 'syz.6.9519': attribute type 10 has an invalid length. [ 1128.780442][ T1104] netlink: 'syz.6.9519': attribute type 11 has an invalid length. [ 1129.018817][ T1118] netlink: 52 bytes leftover after parsing attributes in process `syz.2.9523'. [ 1129.724481][ T1143] netlink: 21 bytes leftover after parsing attributes in process `syz.4.9530'. [ 1129.766282][ T1143] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1130.400661][ T1158] netlink: 'syz.5.9536': attribute type 10 has an invalid length. [ 1130.430166][ T1158] netlink: 'syz.5.9536': attribute type 11 has an invalid length. [ 1130.689798][ T1173] netlink: 'syz.4.9539': attribute type 9 has an invalid length. [ 1130.707629][ T1173] netlink: 118028 bytes leftover after parsing attributes in process `syz.4.9539'. [ 1131.122292][ T1193] FAULT_INJECTION: forcing a failure. [ 1131.122292][ T1193] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1131.184646][ T1194] netlink: 'syz.5.9543': attribute type 29 has an invalid length. [ 1131.225791][ T1193] CPU: 0 PID: 1193 Comm: syz.1.9544 Not tainted syzkaller #0 [ 1131.233217][ T1193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1131.243303][ T1193] Call Trace: [ 1131.246608][ T1193] [ 1131.249557][ T1193] dump_stack_lvl+0x188/0x250 [ 1131.254271][ T1193] ? show_regs_print_info+0x20/0x20 [ 1131.259703][ T1193] ? load_image+0x400/0x400 [ 1131.264254][ T1193] ? __lock_acquire+0x7d10/0x7d10 [ 1131.269317][ T1193] should_fail+0x38c/0x4c0 [ 1131.273774][ T1193] _copy_to_user+0x2e/0x130 [ 1131.278313][ T1193] simple_read_from_buffer+0xe3/0x150 [ 1131.283721][ T1193] proc_fail_nth_read+0x1a6/0x220 [ 1131.288786][ T1193] ? proc_fault_inject_write+0x310/0x310 [ 1131.294448][ T1193] ? fsnotify_perm+0x254/0x560 [ 1131.299245][ T1193] ? proc_fault_inject_write+0x310/0x310 [ 1131.304902][ T1193] vfs_read+0x301/0xd60 [ 1131.309094][ T1193] ? kernel_read+0x1e0/0x1e0 [ 1131.313728][ T1193] ? __fget_files+0x40f/0x480 [ 1131.318450][ T1193] ? mutex_lock_nested+0x17/0x20 [ 1131.323419][ T1193] ? __fdget_pos+0x2bf/0x370 [ 1131.328029][ T1193] ? ksys_read+0x71/0x260 [ 1131.332390][ T1193] ksys_read+0x152/0x260 [ 1131.336660][ T1193] ? vfs_write+0xd60/0xd60 [ 1131.341116][ T1193] ? lockdep_hardirqs_on+0x94/0x140 [ 1131.346453][ T1193] do_syscall_64+0x4c/0xa0 [ 1131.350918][ T1193] ? clear_bhb_loop+0x30/0x80 [ 1131.355619][ T1193] ? clear_bhb_loop+0x30/0x80 [ 1131.360327][ T1193] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1131.366249][ T1193] RIP: 0033:0x7ff0fbc5afce [ 1131.370694][ T1193] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1131.390349][ T1193] RSP: 002b:00007ff0f9ef3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1131.398812][ T1193] RAX: ffffffffffffffda RBX: 00007ff0f9ef46c0 RCX: 00007ff0fbc5afce [ 1131.406829][ T1193] RDX: 000000000000000f RSI: 00007ff0f9ef40a0 RDI: 0000000000000005 [ 1131.414828][ T1193] RBP: 00007ff0f9ef4090 R08: 0000000000000000 R09: 0000000000000000 [ 1131.422822][ T1193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1131.430815][ T1193] R13: 00007ff0fbf14038 R14: 00007ff0fbf13fa0 R15: 00007ffe067c6ad8 [ 1131.438850][ T1193] [ 1131.652657][ T1211] netlink: 'syz.4.9550': attribute type 3 has an invalid length. [ 1131.681338][ T1211] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9550'. [ 1131.691238][ T3092] wlan1: Trigger new scan to find an IBSS to join [ 1131.999341][ T1228] FAULT_INJECTION: forcing a failure. [ 1131.999341][ T1228] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1132.066302][ T1228] CPU: 0 PID: 1228 Comm: syz.2.9557 Not tainted syzkaller #0 [ 1132.073803][ T1228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1132.083876][ T1228] Call Trace: [ 1132.087172][ T1228] [ 1132.090114][ T1228] dump_stack_lvl+0x188/0x250 [ 1132.094820][ T1228] ? show_regs_print_info+0x20/0x20 [ 1132.100044][ T1228] ? load_image+0x400/0x400 [ 1132.104565][ T1228] ? __lock_acquire+0x7d10/0x7d10 [ 1132.109636][ T1228] should_fail+0x38c/0x4c0 [ 1132.114080][ T1228] _copy_from_user+0x2e/0x170 [ 1132.118775][ T1228] __sys_bpf+0x26d/0x6f0 [ 1132.123042][ T1228] ? bpf_link_show_fdinfo+0x380/0x380 [ 1132.128468][ T1228] __x64_sys_bpf+0x78/0x90 [ 1132.132907][ T1228] do_syscall_64+0x4c/0xa0 [ 1132.137338][ T1228] ? clear_bhb_loop+0x30/0x80 [ 1132.142036][ T1228] ? clear_bhb_loop+0x30/0x80 [ 1132.146728][ T1228] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1132.152641][ T1228] RIP: 0033:0x7fe09cc69799 [ 1132.157070][ T1228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1132.176693][ T1228] RSP: 002b:00007fe09aec3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1132.185132][ T1228] RAX: ffffffffffffffda RBX: 00007fe09cee2fa0 RCX: 00007fe09cc69799 [ 1132.193130][ T1228] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 1132.201116][ T1228] RBP: 00007fe09aec3090 R08: 0000000000000000 R09: 0000000000000000 [ 1132.209111][ T1228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1132.217103][ T1228] R13: 00007fe09cee3038 R14: 00007fe09cee2fa0 R15: 00007ffd860d6188 [ 1132.225113][ T1228] [ 1132.312721][ T1232] netlink: 52 bytes leftover after parsing attributes in process `syz.1.9559'. [ 1132.670122][ T1253] netlink: 'syz.2.9566': attribute type 21 has an invalid length. [ 1132.689360][ T1253] netlink: 168 bytes leftover after parsing attributes in process `syz.2.9566'. [ 1132.728091][ T1254] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1132.738968][ T1254] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1132.758119][ T1254] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1132.773707][ T155] wlan1: Creating new IBSS network, BSSID 00:8d:ff:ff:00:00 [ 1132.798362][ T1254] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1132.828066][ T1254] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 1132.862540][ T1254] batman_adv: batadv0: Removing interface: virt_wifi0 [ 1134.153484][ T1289] netlink: 'syz.1.9577': attribute type 10 has an invalid length. [ 1134.171857][ T1289] netlink: 'syz.1.9577': attribute type 11 has an invalid length. [ 1134.810769][ T1306] netlink: 52 bytes leftover after parsing attributes in process `syz.4.9581'. [ 1135.008299][ T1315] netlink: 'syz.2.9586': attribute type 10 has an invalid length. [ 1135.701969][ T1328] netlink: 'syz.2.9590': attribute type 10 has an invalid length. [ 1135.761771][ T1328] netlink: 'syz.2.9590': attribute type 11 has an invalid length. [ 1136.443607][ T1352] netlink: 'syz.6.9598': attribute type 12 has an invalid length. [ 1136.486921][ T1352] netlink: 132 bytes leftover after parsing attributes in process `syz.6.9598'. [ 1136.580187][ T1355] netlink: 'syz.5.9597': attribute type 9 has an invalid length. [ 1136.639910][ T1355] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.9597'. [ 1136.690377][ T1353] netlink: 'syz.5.9597': attribute type 9 has an invalid length. [ 1136.721832][ T1353] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.9597'. [ 1136.915720][ T1368] FAULT_INJECTION: forcing a failure. [ 1136.915720][ T1368] name failslab, interval 1, probability 0, space 0, times 0 [ 1136.988793][ T1368] CPU: 0 PID: 1368 Comm: syz.6.9603 Not tainted syzkaller #0 [ 1136.996209][ T1368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1137.006280][ T1368] Call Trace: [ 1137.009573][ T1368] [ 1137.012519][ T1368] dump_stack_lvl+0x188/0x250 [ 1137.017242][ T1368] ? show_regs_print_info+0x20/0x20 [ 1137.022466][ T1368] ? load_image+0x400/0x400 [ 1137.027002][ T1368] ? __might_sleep+0xf0/0xf0 [ 1137.031614][ T1368] ? __lock_acquire+0x7d10/0x7d10 [ 1137.036682][ T1368] should_fail+0x38c/0x4c0 [ 1137.041123][ T1368] should_failslab+0x5/0x20 [ 1137.045649][ T1368] slab_pre_alloc_hook+0x51/0xc0 [ 1137.050610][ T1368] ? getname_flags+0xb5/0x500 [ 1137.055314][ T1368] kmem_cache_alloc+0x3d/0x290 [ 1137.060120][ T1368] getname_flags+0xb5/0x500 [ 1137.064661][ T1368] do_sys_openat2+0xdd/0x4b0 [ 1137.069274][ T1368] ? __lock_acquire+0x7d10/0x7d10 [ 1137.074353][ T1368] ? do_sys_open+0xe0/0xe0 [ 1137.078785][ T1368] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1137.084799][ T1368] ? lock_chain_count+0x20/0x20 [ 1137.089677][ T1368] ? vtime_user_exit+0x2c8/0x3e0 [ 1137.094663][ T1368] __x64_sys_openat+0x135/0x160 [ 1137.099549][ T1368] do_syscall_64+0x4c/0xa0 [ 1137.103990][ T1368] ? clear_bhb_loop+0x30/0x80 [ 1137.108687][ T1368] ? clear_bhb_loop+0x30/0x80 [ 1137.113402][ T1368] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1137.119316][ T1368] RIP: 0033:0x7fb85d054fce [ 1137.123767][ T1368] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1137.143505][ T1368] RSP: 002b:00007fb85b2edec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1137.151942][ T1368] RAX: ffffffffffffffda RBX: 00007fb85b2ee6c0 RCX: 00007fb85d054fce [ 1137.159942][ T1368] RDX: 0000000000000002 RSI: 00007fb85b2edf90 RDI: ffffffffffffff9c [ 1137.167941][ T1368] RBP: 00007fb85b2ee090 R08: 0000000000000000 R09: 0000000000000000 [ 1137.175933][ T1368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1137.183926][ T1368] R13: 00007fb85d30e038 R14: 00007fb85d30dfa0 R15: 00007fff03db0e78 [ 1137.191937][ T1368] [ 1137.315441][ T1373] netlink: 135856 bytes leftover after parsing attributes in process `syz.1.9605'. [ 1137.420092][ T1375] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.9605'. [ 1137.435553][ T1373] netlink: 8442 bytes leftover after parsing attributes in process `syz.1.9605'. [ 1137.499583][ T1378] netlink: 'syz.2.9606': attribute type 10 has an invalid length. [ 1137.607490][ T1378] netlink: 'syz.2.9606': attribute type 11 has an invalid length. [ 1138.944576][ T1406] sctp: [Deprecated]: syz.5.9616 (pid 1406) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1138.944576][ T1406] Use struct sctp_sack_info instead [ 1138.967719][ T1403] netlink: 'syz.6.9615': attribute type 10 has an invalid length. [ 1139.112357][ T1403] device veth0_macvtap left promiscuous mode [ 1139.451144][ T1415] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.9619'. [ 1139.944335][ T1431] netlink: 'syz.2.9624': attribute type 10 has an invalid length. [ 1140.143362][ T1431] netlink: 'syz.2.9624': attribute type 11 has an invalid length. [ 1140.674487][ T1442] device syzkaller0 entered promiscuous mode [ 1140.878551][ T1448] netlink: 'syz.1.9629': attribute type 3 has an invalid length. [ 1141.062786][ T1448] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.9629'. [ 1141.870054][ T1478] netlink: 209844 bytes leftover after parsing attributes in process `syz.6.9640'. [ 1141.894615][ T1481] netlink: 'syz.4.9641': attribute type 10 has an invalid length. [ 1141.910451][ T1482] netlink: 'syz.6.9640': attribute type 3 has an invalid length. [ 1141.935622][ T1481] netlink: 'syz.4.9641': attribute type 11 has an invalid length. [ 1141.943954][ T1482] netlink: 'syz.6.9640': attribute type 1 has an invalid length. [ 1142.098569][ T1482] netlink: 193404 bytes leftover after parsing attributes in process `syz.6.9640'. [ 1142.362375][ T1489] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.9639'. [ 1142.449139][ T1489] netlink: zone id is out of range [ 1142.496492][ T1489] netlink: zone id is out of range [ 1142.549864][ T1489] netlink: zone id is out of range [ 1142.591739][ T1489] netlink: zone id is out of range [ 1142.621727][ T1489] netlink: zone id is out of range [ 1142.651784][ T1489] netlink: zone id is out of range [ 1142.672882][ T1489] netlink: zone id is out of range [ 1142.697322][ T1489] netlink: zone id is out of range [ 1142.728974][ T1489] netlink: zone id is out of range [ 1142.768625][ T1489] netlink: zone id is out of range [ 1143.860311][ T1524] netlink: 'syz.5.9654': attribute type 10 has an invalid length. [ 1143.927862][ T1524] netlink: 'syz.5.9654': attribute type 11 has an invalid length. [ 1143.988447][ T1526] netlink: 21 bytes leftover after parsing attributes in process `syz.1.9655'. [ 1144.030248][ T1526] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1144.225643][ T1534] netlink: 'syz.4.9657': attribute type 29 has an invalid length. [ 1144.307106][ T1530] netlink: 'syz.6.9656': attribute type 3 has an invalid length. [ 1144.344600][ T1530] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.9656'. [ 1144.647915][ T1552] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.9663'. [ 1144.959727][ T1558] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.9660'. [ 1145.427657][ T1570] netlink: 'syz.6.9669': attribute type 10 has an invalid length. [ 1146.733380][ T1603] validate_nla: 1 callbacks suppressed [ 1146.733397][ T1603] netlink: 'syz.6.9681': attribute type 21 has an invalid length. [ 1146.800012][ T1603] netlink: 168 bytes leftover after parsing attributes in process `syz.6.9681'. [ 1147.986839][ T1642] netlink: 203516 bytes leftover after parsing attributes in process `syz.4.9689'. [ 1148.131795][ T1642] net_ratelimit: 672 callbacks suppressed [ 1148.131813][ T1642] netlink: zone id is out of range [ 1148.318552][ T1642] netlink: zone id is out of range [ 1148.442531][ T1642] netlink: zone id is out of range [ 1148.447678][ T1642] netlink: zone id is out of range [ 1148.488916][T32620] Bluetooth: hci4: command 0x0406 tx timeout [ 1148.721497][ T1642] netlink: zone id is out of range [ 1148.726662][ T1642] netlink: zone id is out of range [ 1148.801723][ T1642] netlink: zone id is out of range [ 1148.806866][ T1642] netlink: zone id is out of range [ 1148.822494][ T1661] FAULT_INJECTION: forcing a failure. [ 1148.822494][ T1661] name failslab, interval 1, probability 0, space 0, times 0 [ 1148.871598][ T1642] netlink: zone id is out of range [ 1148.897137][ T1642] netlink: zone id is out of range [ 1148.915030][ T1661] CPU: 0 PID: 1661 Comm: syz.6.9697 Not tainted syzkaller #0 [ 1148.922431][ T1661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1148.932495][ T1661] Call Trace: [ 1148.935817][ T1661] [ 1148.938761][ T1661] dump_stack_lvl+0x188/0x250 [ 1148.943491][ T1661] ? show_regs_print_info+0x20/0x20 [ 1148.948746][ T1661] ? load_image+0x400/0x400 [ 1148.953304][ T1661] ? __lock_acquire+0x7d10/0x7d10 [ 1148.958343][ T1661] ? __lock_acquire+0x7d10/0x7d10 [ 1148.963379][ T1661] ? do_raw_spin_lock+0x128/0x2f0 [ 1148.968429][ T1661] should_fail+0x38c/0x4c0 [ 1148.972875][ T1661] should_failslab+0x5/0x20 [ 1148.977401][ T1661] slab_pre_alloc_hook+0x51/0xc0 [ 1148.982353][ T1661] ? sockfs_init_fs_context+0xa0/0xa0 [ 1148.987737][ T1661] ? sock_alloc_inode+0x17/0xb0 [ 1148.992606][ T1661] kmem_cache_alloc+0x3d/0x290 [ 1148.997382][ T1661] ? sockfs_init_fs_context+0xa0/0xa0 [ 1149.002788][ T1661] sock_alloc_inode+0x17/0xb0 [ 1149.007483][ T1661] ? sockfs_init_fs_context+0xa0/0xa0 [ 1149.012869][ T1661] new_inode_pseudo+0x5f/0x210 [ 1149.017652][ T1661] __sock_create+0x129/0x900 [ 1149.022287][ T1661] __sys_socketpair+0x232/0x540 [ 1149.027163][ T1661] __x64_sys_socketpair+0x97/0xb0 [ 1149.032192][ T1661] do_syscall_64+0x4c/0xa0 [ 1149.036619][ T1661] ? clear_bhb_loop+0x30/0x80 [ 1149.041296][ T1661] ? clear_bhb_loop+0x30/0x80 [ 1149.045968][ T1661] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1149.051868][ T1661] RIP: 0033:0x7fb85d094799 [ 1149.056282][ T1661] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1149.075909][ T1661] RSP: 002b:00007fb85b2cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 1149.084335][ T1661] RAX: ffffffffffffffda RBX: 00007fb85d30e090 RCX: 00007fb85d094799 [ 1149.092309][ T1661] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000001 [ 1149.100282][ T1661] RBP: 00007fb85b2cd090 R08: 0000000000000000 R09: 0000000000000000 [ 1149.108248][ T1661] R10: 00002000000029c0 R11: 0000000000000246 R12: 0000000000000001 [ 1149.116215][ T1661] R13: 00007fb85d30e128 R14: 00007fb85d30e090 R15: 00007fff03db0e78 [ 1149.124194][ T1661] [ 1150.190024][ T1682] netlink: 164 bytes leftover after parsing attributes in process `syz.4.9706'. [ 1151.119923][ T1719] netlink: 'syz.1.9722': attribute type 29 has an invalid length. [ 1151.177702][ T1719] netlink: 'syz.1.9722': attribute type 29 has an invalid length. [ 1151.222795][ T1723] netlink: 'syz.1.9722': attribute type 29 has an invalid length. [ 1151.293449][ T1725] netlink: 'syz.6.9723': attribute type 3 has an invalid length. [ 1151.464301][ T1725] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.9723'. [ 1152.081617][ T1749] netlink: 'syz.6.9733': attribute type 16 has an invalid length. [ 1152.089482][ T1749] netlink: 48 bytes leftover after parsing attributes in process `syz.6.9733'. [ 1152.327159][ T1760] netlink: 'syz.4.9740': attribute type 10 has an invalid length. [ 1152.489591][ T1760] device veth0_macvtap left promiscuous mode [ 1154.461174][ T1808] netlink: 'syz.4.9755': attribute type 16 has an invalid length. [ 1154.532057][ T1808] netlink: 48 bytes leftover after parsing attributes in process `syz.4.9755'. [ 1154.541092][ T1811] netlink: 'syz.1.9756': attribute type 10 has an invalid length. [ 1154.567998][ T1811] netlink: 'syz.1.9756': attribute type 11 has an invalid length. [ 1156.144852][ T1843] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9767'. [ 1156.359352][ T1853] netlink: 'syz.2.9773': attribute type 10 has an invalid length. [ 1156.405152][ T1853] netlink: 'syz.2.9773': attribute type 11 has an invalid length. [ 1156.501795][ T1857] netlink: 'syz.1.9772': attribute type 13 has an invalid length. [ 1156.551945][ T1857] netlink: 160 bytes leftover after parsing attributes in process `syz.1.9772'. [ 1156.629961][ T1857] erspan0: refused to change device tx_queue_len [ 1156.726195][ T1857] net_ratelimit: 332 callbacks suppressed [ 1156.726214][ T1857] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1157.070542][ T1891] netlink: 463 bytes leftover after parsing attributes in process `syz.5.9784'. [ 1157.708541][ T1911] netlink: 21 bytes leftover after parsing attributes in process `syz.4.9793'. [ 1157.746736][ T1911] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1158.030282][ T1918] netlink: 'syz.1.9795': attribute type 29 has an invalid length. [ 1158.098882][T15978] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1158.150449][ T1923] netlink: 'syz.5.9798': attribute type 21 has an invalid length. [ 1158.172253][ T1923] netlink: 16166 bytes leftover after parsing attributes in process `syz.5.9798'. [ 1158.216891][T15978] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1158.279288][ T1927] device syzkaller0 entered promiscuous mode [ 1158.399312][T15978] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1158.683322][T15978] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1158.730780][ T1944] netlink: 'syz.5.9803': attribute type 6 has an invalid length. [ 1158.900547][ T1914] chnl_net:caif_netlink_parms(): no params data found [ 1159.292026][ T1914] bridge0: port 1(bridge_slave_0) entered blocking state [ 1159.315599][ T1914] bridge0: port 1(bridge_slave_0) entered disabled state [ 1159.340848][ T1914] device bridge_slave_0 entered promiscuous mode [ 1159.356827][ T1914] bridge0: port 2(bridge_slave_1) entered blocking state [ 1159.397130][ T1914] bridge0: port 2(bridge_slave_1) entered disabled state [ 1159.450828][ T1914] device bridge_slave_1 entered promiscuous mode [ 1159.493667][ T1982] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.9814'. [ 1159.541894][ T1914] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1159.574348][ T1914] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1159.914789][ T1914] team0: Port device team_slave_0 added [ 1159.921509][T22048] Bluetooth: hci0: command 0x0409 tx timeout [ 1159.956843][ T1914] team0: Port device team_slave_1 added [ 1160.103641][ T1914] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1160.110623][ T1914] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1160.215842][ T1914] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1160.392531][ T1914] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1160.399772][ T1914] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1160.432483][ T1914] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1160.457286][ T2019] netlink: 'syz.5.9824': attribute type 21 has an invalid length. [ 1160.471573][ T2019] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9824'. [ 1160.487705][ T2021] netlink: 'syz.4.9823': attribute type 21 has an invalid length. [ 1160.500296][ T2021] netlink: 168 bytes leftover after parsing attributes in process `syz.4.9823'. [ 1160.662240][ T1914] device hsr_slave_0 entered promiscuous mode [ 1160.714050][ T2032] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.9827'. [ 1160.762205][ T1914] device hsr_slave_1 entered promiscuous mode [ 1160.776531][ T1914] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1160.831474][ T1914] Cannot create hsr debugfs directory [ 1160.892710][ T2032] netlink: 6324 bytes leftover after parsing attributes in process `syz.4.9827'. [ 1162.001544][T22048] Bluetooth: hci0: command 0x041b tx timeout [ 1162.299243][ T1914] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1162.393559][ T1914] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1162.461681][ T1914] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1162.482639][ T1914] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1162.772175][ T2085] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9843'. [ 1162.859266][ T1914] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1162.948600][ T2089] netlink: 1 bytes leftover after parsing attributes in process `syz.2.9843'. [ 1163.029202][ T3092] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1163.054356][ T3092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1163.103066][ T1914] 8021q: adding VLAN 0 to HW filter on device team0 [ 1163.140987][ T3092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1163.162320][ T3092] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1163.199694][ T3092] bridge0: port 1(bridge_slave_0) entered blocking state [ 1163.206869][ T3092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1163.297553][ T3092] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1163.322427][ T3092] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1163.362528][ T3092] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1163.401751][ T3092] bridge0: port 2(bridge_slave_1) entered blocking state [ 1163.408838][ T3092] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1163.435876][ T3092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1163.467319][ T3092] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1163.557252][ T3092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1163.569499][ T3092] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1163.616581][ T3092] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1163.684196][ T3092] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1163.710187][ T3092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1163.741240][ T3092] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1163.757261][ T3092] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1163.777182][ T3092] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1163.825539][ T1914] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1163.935430][ T2111] netlink: 'syz.5.9846': attribute type 19 has an invalid length. [ 1163.961855][ T2111] netlink: 14524 bytes leftover after parsing attributes in process `syz.5.9846'. [ 1164.081674][T22046] Bluetooth: hci0: command 0x040f tx timeout [ 1164.170661][ T3092] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1164.347453][T15978] device hsr_slave_1 left promiscuous mode [ 1164.384495][T15978] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1164.411738][T15978] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1164.449051][T15978] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1164.470398][T15978] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1164.497977][T15978] bridge0: port 3(bond0) entered disabled state [ 1164.518183][T15978] device bridge_slave_1 left promiscuous mode [ 1164.550300][T15978] bridge0: port 2(bridge_slave_1) entered disabled state [ 1164.596555][T15978] device bridge_slave_0 left promiscuous mode [ 1164.626774][T15978] bridge0: port 1(bridge_slave_0) entered disabled state [ 1164.647936][T15978] device veth1_macvtap left promiscuous mode [ 1164.684386][ T2148] netlink: 'syz.2.9858': attribute type 3 has an invalid length. [ 1164.700380][ T2148] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.9858'. [ 1164.976216][T15978] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1164.985296][T15978] device bond_slave_1 left promiscuous mode [ 1165.007030][T15978] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1165.021876][T15978] device bond_slave_0 left promiscuous mode [ 1165.118605][T15978] bond0 (unregistering): Released all slaves [ 1165.187161][ T2134] netlink: 'syz.5.9854': attribute type 16 has an invalid length. [ 1165.196259][ T2134] netlink: 48 bytes leftover after parsing attributes in process `syz.5.9854'. [ 1165.415080][T16006] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1165.451871][T16006] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1165.478169][ T2188] netlink: 180 bytes leftover after parsing attributes in process `syz.1.9864'. [ 1165.502149][ T1914] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1165.544793][ T2188] device sit0 entered promiscuous mode [ 1165.744371][ T2197] netlink: 'syz.2.9865': attribute type 10 has an invalid length. [ 1165.772414][ T2197] device veth0_macvtap left promiscuous mode [ 1165.908045][ T2206] netlink: 'syz.4.9868': attribute type 21 has an invalid length. [ 1165.916870][ T2206] netlink: 156 bytes leftover after parsing attributes in process `syz.4.9868'. [ 1166.169544][ T1108] Bluetooth: hci0: command 0x0419 tx timeout [ 1166.354872][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1166.375783][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1166.472524][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1166.487405][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1166.513477][ T1914] device veth0_vlan entered promiscuous mode [ 1166.537187][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1166.552839][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1166.575767][ T1914] device veth1_vlan entered promiscuous mode [ 1166.659892][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1166.668817][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1166.678231][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1166.698716][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1166.734372][ T1914] device veth0_macvtap entered promiscuous mode [ 1166.753218][ T1914] device veth1_macvtap entered promiscuous mode [ 1166.825347][ T1914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1166.859799][ T1914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1166.882428][ T1914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1166.903514][ T1914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1166.923775][ T1914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1166.964891][ T1914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1167.007467][ T1914] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1167.048682][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1167.068240][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1167.098670][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1167.122515][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1167.162420][ T1914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1167.182157][ T1914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1167.201846][ T1914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1167.226290][ T1914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1167.237806][ T1914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1167.281121][ T1914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1167.292997][ T1914] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1167.307965][T16002] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1167.332092][T16002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1167.369774][ T1914] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.390762][ T1914] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.416109][ T1914] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.433817][ T1914] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.615426][T16002] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1167.642112][T16002] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1167.679619][T16002] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1167.733986][T15993] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1167.752655][T15993] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1167.802384][ T3092] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1167.968492][ T2282] netlink: 'syz.6.9789': attribute type 10 has an invalid length. [ 1168.011503][ T2283] netlink: 'syz.4.9894': attribute type 21 has an invalid length. [ 1168.075629][ T2283] netlink: 156 bytes leftover after parsing attributes in process `syz.4.9894'. [ 1168.112668][ T2285] netlink: 'syz.6.9789': attribute type 11 has an invalid length. [ 1168.500274][ T2298] netlink: 11834 bytes leftover after parsing attributes in process `syz.4.9900'. [ 1168.599011][ T2301] netlink: 'syz.4.9900': attribute type 7 has an invalid length. [ 1168.653724][ T2301] netlink: 11834 bytes leftover after parsing attributes in process `syz.4.9900'. [ 1169.314576][ T2305] chnl_net:caif_netlink_parms(): no params data found [ 1169.697276][ T2336] netlink: 'syz.4.9910': attribute type 10 has an invalid length. [ 1169.732945][ T2305] bridge0: port 1(bridge_slave_0) entered blocking state [ 1169.746311][ T2305] bridge0: port 1(bridge_slave_0) entered disabled state [ 1169.795609][ T2305] device bridge_slave_0 entered promiscuous mode [ 1169.855005][ T2336] netlink: 'syz.4.9910': attribute type 11 has an invalid length. [ 1169.891659][ T2305] bridge0: port 2(bridge_slave_1) entered blocking state [ 1169.919171][ T2305] bridge0: port 2(bridge_slave_1) entered disabled state [ 1169.947801][ T2305] device bridge_slave_1 entered promiscuous mode [ 1170.034514][ T2305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1170.075465][ T2305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1170.093953][ T2347] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.9914'. [ 1170.168227][ T2305] team0: Port device team_slave_0 added [ 1170.238116][ T2305] team0: Port device team_slave_1 added [ 1170.329085][ T2305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1170.336562][T16006] tipc: Subscription rejected, illegal request [ 1170.359079][ T2305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1170.411770][ T2360] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.9918'. [ 1170.471735][ T2305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1170.497737][ T2360] netlink: 20624 bytes leftover after parsing attributes in process `syz.2.9918'. [ 1170.514006][ T2360] tipc: Started in network mode [ 1170.523868][ T2360] tipc: Node identity d, cluster identity 46 [ 1170.530075][ T2360] tipc: Node number set to 13 [ 1170.554787][ T2356] delete_channel: no stack [ 1170.568453][ T2305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1170.592058][ T2305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1170.657296][ T2305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1170.731512][T22048] Bluetooth: hci2: command 0x0409 tx timeout [ 1170.792555][T15978] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1170.844086][ T2371] netlink: 'syz.2.9924': attribute type 10 has an invalid length. [ 1170.926577][T15978] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1171.007952][ T2373] netlink: 'syz.2.9924': attribute type 11 has an invalid length. [ 1171.040217][ T2305] device hsr_slave_0 entered promiscuous mode [ 1171.068530][ T2305] device hsr_slave_1 entered promiscuous mode [ 1171.085138][ T2305] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1171.112177][ T2305] Cannot create hsr debugfs directory [ 1171.148236][T15978] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1171.303017][T15978] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1172.141186][ T2422] FAULT_INJECTION: forcing a failure. [ 1172.141186][ T2422] name failslab, interval 1, probability 0, space 0, times 0 [ 1172.181776][ T2422] CPU: 0 PID: 2422 Comm: syz.1.9943 Not tainted syzkaller #0 [ 1172.189192][ T2422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1172.199271][ T2422] Call Trace: [ 1172.202564][ T2422] [ 1172.205509][ T2422] dump_stack_lvl+0x188/0x250 [ 1172.210207][ T2422] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1172.216382][ T2422] ? show_regs_print_info+0x20/0x20 [ 1172.221605][ T2422] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1172.227786][ T2422] should_fail+0x38c/0x4c0 [ 1172.232232][ T2422] should_failslab+0x5/0x20 [ 1172.236748][ T2422] slab_pre_alloc_hook+0x51/0xc0 [ 1172.241716][ T2422] __kmalloc+0x6b/0x330 [ 1172.245886][ T2422] ? sk_prot_alloc+0xe7/0x210 [ 1172.250584][ T2422] sk_prot_alloc+0xe7/0x210 [ 1172.255109][ T2422] ? sk_alloc+0x1d/0x310 [ 1172.259370][ T2422] sk_alloc+0x2f/0x310 [ 1172.263453][ T2422] bpf_prog_test_run_skb+0x240/0x1180 [ 1172.268861][ T2422] ? __fget_files+0x40f/0x480 [ 1172.273566][ T2422] ? cpu_online+0x60/0x60 [ 1172.277922][ T2422] bpf_prog_test_run+0x31e/0x390 [ 1172.282881][ T2422] __sys_bpf+0x5a5/0x6f0 [ 1172.287148][ T2422] ? bpf_link_show_fdinfo+0x380/0x380 [ 1172.292564][ T2422] __x64_sys_bpf+0x78/0x90 [ 1172.296996][ T2422] do_syscall_64+0x4c/0xa0 [ 1172.301427][ T2422] ? clear_bhb_loop+0x30/0x80 [ 1172.306119][ T2422] ? clear_bhb_loop+0x30/0x80 [ 1172.310829][ T2422] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1172.316743][ T2422] RIP: 0033:0x7ff0fbc9a799 [ 1172.321177][ T2422] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1172.340794][ T2422] RSP: 002b:00007ff0f9ef4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1172.349226][ T2422] RAX: ffffffffffffffda RBX: 00007ff0fbf13fa0 RCX: 00007ff0fbc9a799 [ 1172.357211][ T2422] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 1172.365195][ T2422] RBP: 00007ff0f9ef4090 R08: 0000000000000000 R09: 0000000000000000 [ 1172.373183][ T2422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1172.381178][ T2422] R13: 00007ff0fbf14038 R14: 00007ff0fbf13fa0 R15: 00007ffe067c6ad8 [ 1172.389195][ T2422] [ 1172.598048][ T2418] netlink: 'syz.4.9942': attribute type 21 has an invalid length. [ 1172.672384][ T2418] netlink: 156 bytes leftover after parsing attributes in process `syz.4.9942'. [ 1172.802400][T22048] Bluetooth: hci2: command 0x041b tx timeout [ 1173.740073][ T2305] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1173.796745][ T2305] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1173.843607][ T2305] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1173.878979][ T2491] netlink: 'syz.1.9957': attribute type 10 has an invalid length. [ 1173.921458][ T2305] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1173.992436][ T2493] netlink: 'syz.1.9957': attribute type 11 has an invalid length. [ 1174.079678][ T2499] netlink: 191416 bytes leftover after parsing attributes in process `syz.4.9958'. [ 1174.089283][T22048] Bluetooth: hci3: command 0x0406 tx timeout [ 1174.292683][ T2506] -1: renamed from syzkaller0 [ 1174.460320][ T2503] netlink: 'syz.6.9959': attribute type 10 has an invalid length. [ 1174.830504][ T2519] netlink: 2 bytes leftover after parsing attributes in process `syz.4.9963'. [ 1174.880826][ T2519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1174.892113][T22048] Bluetooth: hci2: command 0x040f tx timeout [ 1174.933658][ T2519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1174.974898][ T2519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1175.030525][ T2519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1175.049777][ T2519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1175.060749][ T2519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1175.078064][ T2519] device batadv_slave_1 entered promiscuous mode [ 1175.111267][ T2305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1175.174950][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1175.213487][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1175.231891][ T2305] 8021q: adding VLAN 0 to HW filter on device team0 [ 1175.907965][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1175.919322][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1175.955808][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 1175.962961][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1175.991203][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1176.022330][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1176.091238][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 1176.098362][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1176.186033][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1176.203692][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1176.229660][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1176.258465][ T2543] netlink: 'syz.1.9971': attribute type 12 has an invalid length. [ 1176.292146][ T2543] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9971'. [ 1176.358204][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1176.410931][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1176.493748][ T2551] netlink: 'syz.6.9972': attribute type 39 has an invalid length. [ 1176.619463][ T2305] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1176.668776][ T2305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1176.712952][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1176.726692][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1176.794567][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1176.837820][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1176.882274][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1176.923930][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1176.961591][T22048] Bluetooth: hci2: command 0x0419 tx timeout [ 1176.978334][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1177.125998][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.132482][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.141721][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1177.215417][T15978] device hsr_slave_1 left promiscuous mode [ 1177.241801][T15978] device bridge_slave_1 left promiscuous mode [ 1177.259373][T15978] bridge0: port 2(bridge_slave_1) entered disabled state [ 1177.298122][T15978] device bridge_slave_0 left promiscuous mode [ 1177.323997][T15978] bridge0: port 1(bridge_slave_0) entered disabled state [ 1177.368965][T15978] device veth1_macvtap left promiscuous mode [ 1177.549768][ T2589] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1177.790041][T15978] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1177.814011][T15978] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1177.895587][T15978] bond0 (unregistering): Released all slaves [ 1177.976160][ T2577] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1177.983469][ T2577] IPv6: NLM_F_CREATE should be set when creating new route [ 1177.990809][ T2577] IPv6: NLM_F_CREATE should be set when creating new route [ 1177.998068][ T2577] IPv6: NLM_F_CREATE should be set when creating new route [ 1178.028629][ T2588] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9982'. [ 1178.066525][ T2588] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1178.156438][ T2594] netlink: 'syz.6.9983': attribute type 16 has an invalid length. [ 1178.181974][ T2594] netlink: 48 bytes leftover after parsing attributes in process `syz.6.9983'. [ 1178.231914][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1178.239403][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1178.321003][ T2305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1178.736536][ T2622] netlink: 'syz.6.9991': attribute type 10 has an invalid length. [ 1178.805459][ T2622] device veth0_macvtap left promiscuous mode [ 1179.406512][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1179.417581][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1179.468202][ T2305] device veth0_vlan entered promiscuous mode [ 1179.481088][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1179.511198][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1179.536319][ T2305] device veth1_vlan entered promiscuous mode [ 1179.551502][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1179.560258][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1179.581098][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1179.628500][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1179.646420][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1179.659843][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1179.687714][ T2657] netlink: 'syz.6.10003': attribute type 10 has an invalid length. [ 1179.725844][ T2305] device veth0_macvtap entered promiscuous mode [ 1179.760708][ T2305] device veth1_macvtap entered promiscuous mode [ 1179.777527][ T2657] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.10003'. [ 1179.802229][ T2667] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1179.825300][ T2305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1179.871351][ T2305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1179.910183][ T2305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1179.927394][ T2305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1179.937488][ T2305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1179.953374][ T2305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1179.966650][ T2305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1179.979981][ T2305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1180.030829][ T2305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1180.064095][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1180.079891][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1180.107337][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1180.129031][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1180.165448][ T2305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1180.186695][ T2305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1180.223608][ T2305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1180.238075][ T2305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1180.255911][ T2305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1180.267950][ T2305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1180.283392][ T2305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1180.315164][ T2305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1180.373296][ T2305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1180.422057][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1180.433093][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1180.474086][ T2305] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1180.501627][ T2305] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1180.541704][ T2305] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1180.550447][ T2305] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1180.591761][ T2697] netlink: 209860 bytes leftover after parsing attributes in process `syz.4.10011'. [ 1180.601467][ T2697] openvswitch: netlink: Message has 4 unknown bytes. [ 1180.854223][ T2701] netlink: 36 bytes leftover after parsing attributes in process `syz.6.10014'. [ 1180.864884][ T2703] netlink: 'syz.4.10015': attribute type 10 has an invalid length. [ 1180.892726][ T2703] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.10015'. [ 1180.912058][ T2701] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1180.955163][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1180.972698][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1180.996977][ T3092] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1181.038896][ T3092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1181.058564][ T3092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1181.112930][T15993] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1181.375148][ T2728] sock: sock_timestamping_bind_phc: sock not bind to device [ 1181.994541][ T2752] netlink: 'syz.6.10027': attribute type 29 has an invalid length. [ 1182.208878][ T2761] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.10029'. [ 1182.845503][ T2782] netlink: 133392 bytes leftover after parsing attributes in process `syz.5.10035'. [ 1183.690266][ T2815] netlink: 'syz.6.10048': attribute type 25 has an invalid length. [ 1183.897780][ T2829] netlink: 'syz.5.10053': attribute type 3 has an invalid length. [ 1183.917061][ T2829] netlink: 132 bytes leftover after parsing attributes in process `syz.5.10053'. [ 1184.638434][ T2849] netlink: 'syz.4.10062': attribute type 4 has an invalid length. [ 1184.682610][ T2849] netlink: 152 bytes leftover after parsing attributes in process `syz.4.10062'. [ 1184.749136][ T2848] netlink: set zone limit has 8 unknown bytes [ 1185.404706][ T2880] netlink: 188 bytes leftover after parsing attributes in process `syz.2.10074'. [ 1185.781719][ T2891] netlink: 14 bytes leftover after parsing attributes in process `syz.2.10077'. [ 1185.909240][ T2896] netlink: 'syz.1.10079': attribute type 3 has an invalid length. [ 1185.926481][ T2896] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10079'. [ 1186.185858][ T2915] netlink: 'syz.5.10083': attribute type 10 has an invalid length. [ 1186.845785][ T2953] netlink: 2 bytes leftover after parsing attributes in process `syz.4.10094'. [ 1186.869747][ T2953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1186.888318][ T2953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1186.903801][ T2940] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1186.904019][ T2953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1186.947227][ T2953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1186.967424][ T2953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1186.989128][ T2953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1186.999682][ T2953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1187.044691][ T2953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1187.426105][ T2975] netlink: 'syz.1.10101': attribute type 29 has an invalid length. [ 1187.440543][ T2975] netlink: 'syz.1.10101': attribute type 29 has an invalid length. [ 1187.489670][ T2975] netlink: 'syz.1.10101': attribute type 29 has an invalid length. [ 1188.019170][ T2994] netlink: 'syz.4.10108': attribute type 12 has an invalid length. [ 1188.058829][ T2994] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10108'. [ 1188.202667][ T3009] syz.2.10113[3009] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1188.202776][ T3009] syz.2.10113[3009] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1188.753603][ T3025] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1188.930357][ T3029] netlink: 'syz.1.10118': attribute type 46 has an invalid length. [ 1188.976165][ T3029] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10118'. [ 1189.606255][ T3041] device wlan0 entered promiscuous mode [ 1189.638315][ T3038] netlink: 'syz.1.10122': attribute type 9 has an invalid length. [ 1189.661853][ T3038] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.10122'. [ 1189.813390][ T3051] netlink: 'syz.2.10127': attribute type 3 has an invalid length. [ 1189.866548][ T3051] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.10127'. [ 1189.998912][ T3056] netlink: 16255 bytes leftover after parsing attributes in process `syz.5.10129'. [ 1190.105421][ T3061] netlink: 188 bytes leftover after parsing attributes in process `syz.4.10131'. [ 1190.507029][ T3087] netlink: 'syz.4.10141': attribute type 10 has an invalid length. [ 1190.545029][ T3082] netlink: 'syz.1.10139': attribute type 10 has an invalid length. [ 1190.571180][ T3087] netlink: 'syz.4.10141': attribute type 11 has an invalid length. [ 1191.428566][ T3136] netlink: 111 bytes leftover after parsing attributes in process `syz.4.10155'. [ 1191.955612][ T3156] netlink: 105120 bytes leftover after parsing attributes in process `syz.5.10164'. [ 1192.950765][ T3175] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.10169'. [ 1193.183694][ T3175] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 1193.225002][ T3180] validate_nla: 3 callbacks suppressed [ 1193.225034][ T3180] netlink: 'syz.2.10172': attribute type 29 has an invalid length. [ 1193.487808][ T3180] netlink: 'syz.2.10172': attribute type 29 has an invalid length. [ 1194.260140][ T3215] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.10182'. [ 1194.551323][ T3223] netlink: 'syz.5.10186': attribute type 10 has an invalid length. [ 1194.602180][ T3223] netlink: 40 bytes leftover after parsing attributes in process `syz.5.10186'. [ 1194.638247][ T3223] netlink: 'syz.5.10186': attribute type 10 has an invalid length. [ 1194.700036][ T3223] netlink: 40 bytes leftover after parsing attributes in process `syz.5.10186'. [ 1194.779750][ T3226] tap0: tun_chr_ioctl cmd 1074025684 [ 1195.501247][ T3251] device wlan0 entered promiscuous mode [ 1195.578179][ T3245] netlink: 'syz.6.10195': attribute type 9 has an invalid length. [ 1195.653849][ T3245] netlink: 209836 bytes leftover after parsing attributes in process `syz.6.10195'. [ 1195.670123][ T3256] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1195.729037][ T3256] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1195.763398][ T3256] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1195.774661][ T3256] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1195.974765][ T3265] device syzkaller0 entered promiscuous mode [ 1196.549894][ T3285] netlink: 'syz.2.10209': attribute type 21 has an invalid length. [ 1196.606654][ T3285] IPv6: NLM_F_CREATE should be specified when creating new route [ 1196.668788][ T3285] IPv6: Can't replace route, no match found [ 1196.757330][ T3285] netlink: 'syz.2.10209': attribute type 10 has an invalid length. [ 1196.825996][ T3285] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10209'. [ 1196.891088][ T3285] device team0 entered promiscuous mode [ 1196.935138][ T3285] device team_slave_0 entered promiscuous mode [ 1196.978250][ T3285] device team_slave_1 entered promiscuous mode [ 1197.003394][ T3285] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1197.071976][ T3285] bridge0: port 3(team0) entered blocking state [ 1197.102023][ T3285] bridge0: port 3(team0) entered disabled state [ 1197.173974][ T3285] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1197.214401][ T3296] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.10213'. [ 1197.303217][ T3304] netlink: 180 bytes leftover after parsing attributes in process `syz.1.10212'. [ 1197.385468][ T3299] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1197.424425][ T3299] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1197.488214][ T3299] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1197.527552][ T3299] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1197.905707][ T3310] netlink: 'syz.4.10218': attribute type 21 has an invalid length. [ 1197.930850][ T3310] netlink: 168 bytes leftover after parsing attributes in process `syz.4.10218'. [ 1198.994726][ T3373] netlink: 'syz.5.10241': attribute type 10 has an invalid length. [ 1199.681928][T32619] Bluetooth: hci1: command 0x0406 tx timeout [ 1199.712706][ T3369] delete_channel: no stack [ 1199.717434][ T3369] delete_channel: no stack [ 1199.923736][ T3373] team0 (unregistering): Port device team_slave_0 removed [ 1200.000394][ T3373] team0 (unregistering): Port device team_slave_1 removed [ 1200.131894][ T3371] netlink: 'syz.5.10241': attribute type 10 has an invalid length. [ 1200.142641][ T3378] netlink: 'syz.2.10243': attribute type 12 has an invalid length. [ 1200.167863][ T3378] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10243'. [ 1200.368774][ T3386] netlink: 156 bytes leftover after parsing attributes in process `syz.4.10245'. [ 1200.473414][ T3396] FAULT_INJECTION: forcing a failure. [ 1200.473414][ T3396] name failslab, interval 1, probability 0, space 0, times 0 [ 1200.535215][ T3396] CPU: 0 PID: 3396 Comm: syz.6.10249 Not tainted syzkaller #0 [ 1200.542717][ T3396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1200.552814][ T3396] Call Trace: [ 1200.556120][ T3396] [ 1200.559072][ T3396] dump_stack_lvl+0x188/0x250 [ 1200.563796][ T3396] ? show_regs_print_info+0x20/0x20 [ 1200.569050][ T3396] ? load_image+0x400/0x400 [ 1200.573589][ T3396] ? __might_sleep+0xf0/0xf0 [ 1200.578200][ T3396] ? __lock_acquire+0x7d10/0x7d10 [ 1200.583253][ T3396] should_fail+0x38c/0x4c0 [ 1200.588220][ T3396] should_failslab+0x5/0x20 [ 1200.592747][ T3396] slab_pre_alloc_hook+0x51/0xc0 [ 1200.597710][ T3396] ? __d_alloc+0x2a/0x6f0 [ 1200.602061][ T3396] kmem_cache_alloc+0x3d/0x290 [ 1200.606852][ T3396] ? __lock_acquire+0x7d10/0x7d10 [ 1200.611929][ T3396] __d_alloc+0x2a/0x6f0 [ 1200.616137][ T3396] d_alloc_pseudo+0x19/0x70 [ 1200.620753][ T3396] alloc_file_pseudo+0xe0/0x200 [ 1200.625641][ T3396] ? alloc_empty_file_noaccount+0x80/0x80 [ 1200.631521][ T3396] ? put_pid+0xc3/0x120 [ 1200.635714][ T3396] ? init_peercred+0x29f/0x340 [ 1200.640516][ T3396] sock_alloc_file+0xb3/0x240 [ 1200.645228][ T3396] __sys_socketpair+0x2cc/0x540 [ 1200.650112][ T3396] __x64_sys_socketpair+0x97/0xb0 [ 1200.655163][ T3396] do_syscall_64+0x4c/0xa0 [ 1200.659603][ T3396] ? clear_bhb_loop+0x30/0x80 [ 1200.664303][ T3396] ? clear_bhb_loop+0x30/0x80 [ 1200.669010][ T3396] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1200.674929][ T3396] RIP: 0033:0x7fc228300799 [ 1200.679361][ T3396] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1200.698982][ T3396] RSP: 002b:00007fc22655a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 1200.707412][ T3396] RAX: ffffffffffffffda RBX: 00007fc228579fa0 RCX: 00007fc228300799 [ 1200.715401][ T3396] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000001 [ 1200.723403][ T3396] RBP: 00007fc22655a090 R08: 0000000000000000 R09: 0000000000000000 [ 1200.731472][ T3396] R10: 00002000000029c0 R11: 0000000000000246 R12: 0000000000000002 [ 1200.739459][ T3396] R13: 00007fc22857a038 R14: 00007fc228579fa0 R15: 00007ffd325026a8 [ 1200.747462][ T3396] [ 1200.765494][ T3401] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.10252'. [ 1200.793892][ T3401] netlink: 8454 bytes leftover after parsing attributes in process `syz.1.10252'. [ 1200.894122][ T3407] device wlan1 entered promiscuous mode [ 1201.166567][ T3418] netlink: 'syz.6.10259': attribute type 3 has an invalid length. [ 1201.211609][ T3418] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.10259'. [ 1201.431993][ T3428] device syzkaller0 entered promiscuous mode [ 1201.759857][ T3455] netlink: 'syz.4.10271': attribute type 10 has an invalid length. [ 1201.868275][ T3460] netlink: 'syz.2.10275': attribute type 10 has an invalid length. [ 1201.896298][ T3455] netlink: 'syz.4.10271': attribute type 11 has an invalid length. [ 1201.927725][ T3463] netlink: 'syz.1.10276': attribute type 4 has an invalid length. [ 1201.945691][ T3460] netlink: 'syz.2.10275': attribute type 11 has an invalid length. [ 1201.951303][ T3463] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.10276'. [ 1202.007124][ T3471] netlink: 'syz.5.10277': attribute type 16 has an invalid length. [ 1202.054537][ T3471] netlink: 48 bytes leftover after parsing attributes in process `syz.5.10277'. [ 1202.204836][ T3484] netlink: 192436 bytes leftover after parsing attributes in process `syz.5.10279'. [ 1202.241780][ T3484] openvswitch: netlink: IP tunnel attribute has 20476 unknown bytes. [ 1203.159407][ T3522] device syzkaller0 entered promiscuous mode [ 1203.187432][ T3537] netlink: 208188 bytes leftover after parsing attributes in process `syz.1.10296'. [ 1204.348980][ T1325] syzkaller0: tun_net_xmit 70 [ 1204.372403][ T3545] device veth0_vlan left promiscuous mode [ 1204.382978][ T3545] device veth0_vlan entered promiscuous mode [ 1204.662008][ T3548] validate_nla: 2 callbacks suppressed [ 1204.662029][ T3548] netlink: 'syz.1.10296': attribute type 21 has an invalid length. [ 1204.688454][ T3548] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10296'. [ 1205.147575][ T3573] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.10305'. [ 1205.642408][ T3603] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10312'. [ 1205.916192][ T3610] netlink: 'syz.1.10316': attribute type 9 has an invalid length. [ 1205.981578][ T3610] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.10316'. [ 1206.257036][ T3620] netlink: 'syz.6.10320': attribute type 29 has an invalid length. [ 1206.640624][ T3628] netlink: 209844 bytes leftover after parsing attributes in process `syz.6.10322'. [ 1207.297382][ T3651] netlink: 209844 bytes leftover after parsing attributes in process `syz.6.10331'. [ 1207.402841][ T3654] netlink: 168 bytes leftover after parsing attributes in process `syz.4.10332'. [ 1208.669754][ T3690] netlink: 197080 bytes leftover after parsing attributes in process `syz.5.10346'. [ 1208.950111][ T3715] netlink: 'syz.6.10356': attribute type 3 has an invalid length. [ 1208.958496][ T3715] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.10356'. [ 1208.989653][ T3715] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1208.999107][ T3715] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1209.025569][ T3715] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1209.040573][ T3715] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1209.439678][ T3731] netlink: 212940 bytes leftover after parsing attributes in process `syz.4.10362'. [ 1209.718858][ T3742] netlink: 'syz.6.10366': attribute type 3 has an invalid length. [ 1209.777096][ T3742] netlink: 132 bytes leftover after parsing attributes in process `syz.6.10366'. [ 1210.147435][ T3758] netlink: 'syz.6.10370': attribute type 10 has an invalid length. [ 1210.484150][ T3763] netlink: 'syz.2.10373': attribute type 46 has an invalid length. [ 1211.094200][ T3825] netlink: 'syz.2.10377': attribute type 21 has an invalid length. [ 1211.131230][ T3825] netlink: 168 bytes leftover after parsing attributes in process `syz.2.10377'. [ 1212.062461][ T3869] netlink: 399 bytes leftover after parsing attributes in process `syz.4.10391'. [ 1212.440844][ T3885] netlink: 'syz.4.10396': attribute type 4 has an invalid length. [ 1212.508982][ T3885] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.10396'. [ 1212.637656][ T3891] netlink: 'syz.1.10398': attribute type 21 has an invalid length. [ 1212.953260][ T3888] netlink: 'syz.4.10396': attribute type 17 has an invalid length. [ 1213.064650][ T3888] netlink: 148 bytes leftover after parsing attributes in process `syz.4.10396'. [ 1213.423740][ T3908] sctp: [Deprecated]: syz.6.10405 (pid 3908) Use of int in maxseg socket option. [ 1213.423740][ T3908] Use struct sctp_assoc_value instead [ 1213.487695][ T3909] sctp: [Deprecated]: syz.6.10405 (pid 3909) Use of int in maxseg socket option. [ 1213.487695][ T3909] Use struct sctp_assoc_value instead [ 1213.508351][ T3911] netlink: 'syz.2.10406': attribute type 12 has an invalid length. [ 1213.532585][ T3911] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10406'. [ 1213.781147][ T3927] netlink: 'syz.6.10411': attribute type 21 has an invalid length. [ 1213.811501][ T3927] IPv6: NLM_F_CREATE should be specified when creating new route [ 1213.834939][ T3927] IPv6: Can't replace route, no match found [ 1213.909327][ T3927] netlink: 'syz.6.10411': attribute type 10 has an invalid length. [ 1213.937322][ T3927] netlink: 40 bytes leftover after parsing attributes in process `syz.6.10411'. [ 1213.961888][ T3927] device team0 entered promiscuous mode [ 1213.977335][ T3927] device team_slave_0 entered promiscuous mode [ 1213.986006][ T3927] device team_slave_1 entered promiscuous mode [ 1214.042146][ T3927] bridge0: port 3(team0) entered blocking state [ 1214.051959][ T3927] bridge0: port 3(team0) entered disabled state [ 1214.088304][ T3927] bridge0: port 3(team0) entered blocking state [ 1214.094923][ T3927] bridge0: port 3(team0) entered forwarding state [ 1214.584106][ T3978] netlink: 2 bytes leftover after parsing attributes in process `syz.5.10429'. [ 1214.618500][ T3978] device batadv_slave_1 entered promiscuous mode [ 1214.915684][ T3997] FAULT_INJECTION: forcing a failure. [ 1214.915684][ T3997] name failslab, interval 1, probability 0, space 0, times 0 [ 1214.941524][ T3997] CPU: 0 PID: 3997 Comm: syz.6.10435 Not tainted syzkaller #0 [ 1214.949029][ T3997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1214.959133][ T3997] Call Trace: [ 1214.962440][ T3997] [ 1214.965390][ T3997] dump_stack_lvl+0x188/0x250 [ 1214.970111][ T3997] ? show_regs_print_info+0x20/0x20 [ 1214.975335][ T3997] ? load_image+0x400/0x400 [ 1214.979868][ T3997] ? __might_sleep+0xf0/0xf0 [ 1214.984507][ T3997] ? __lock_acquire+0x7d10/0x7d10 [ 1214.989568][ T3997] should_fail+0x38c/0x4c0 [ 1214.994013][ T3997] should_failslab+0x5/0x20 [ 1214.998549][ T3997] slab_pre_alloc_hook+0x51/0xc0 [ 1215.003516][ T3997] ? __alloc_file+0x25/0x240 [ 1215.008158][ T3997] kmem_cache_alloc+0x3d/0x290 [ 1215.012943][ T3997] __alloc_file+0x25/0x240 [ 1215.017382][ T3997] alloc_empty_file+0x90/0x180 [ 1215.022164][ T3997] alloc_file+0x5b/0x4f0 [ 1215.026423][ T3997] ? do_raw_spin_unlock+0x11d/0x230 [ 1215.031650][ T3997] alloc_file_pseudo+0x180/0x200 [ 1215.036605][ T3997] ? alloc_empty_file_noaccount+0x80/0x80 [ 1215.042329][ T3997] ? put_pid+0xc3/0x120 [ 1215.046508][ T3997] ? init_peercred+0x29f/0x340 [ 1215.051283][ T3997] sock_alloc_file+0xb3/0x240 [ 1215.055970][ T3997] __sys_socketpair+0x2cc/0x540 [ 1215.060833][ T3997] __x64_sys_socketpair+0x97/0xb0 [ 1215.065867][ T3997] do_syscall_64+0x4c/0xa0 [ 1215.070437][ T3997] ? clear_bhb_loop+0x30/0x80 [ 1215.075143][ T3997] ? clear_bhb_loop+0x30/0x80 [ 1215.079835][ T3997] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1215.085741][ T3997] RIP: 0033:0x7fc228300799 [ 1215.090166][ T3997] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1215.109784][ T3997] RSP: 002b:00007fc22655a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 1215.118217][ T3997] RAX: ffffffffffffffda RBX: 00007fc228579fa0 RCX: 00007fc228300799 [ 1215.126209][ T3997] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000001 [ 1215.134189][ T3997] RBP: 00007fc22655a090 R08: 0000000000000000 R09: 0000000000000000 [ 1215.142168][ T3997] R10: 00002000000029c0 R11: 0000000000000246 R12: 0000000000000002 [ 1215.150147][ T3997] R13: 00007fc22857a038 R14: 00007fc228579fa0 R15: 00007ffd325026a8 [ 1215.158137][ T3997] [ 1215.185738][ T4006] netlink: 'syz.5.10438': attribute type 21 has an invalid length. [ 1215.200763][ T4006] IPv6: NLM_F_CREATE should be specified when creating new route [ 1215.209137][ T4006] IPv6: Can't replace route, no match found [ 1215.241169][ T4006] netlink: 'syz.5.10438': attribute type 10 has an invalid length. [ 1215.260029][ T4006] netlink: 40 bytes leftover after parsing attributes in process `syz.5.10438'. [ 1215.375691][ T4014] netlink: 'syz.6.10441': attribute type 3 has an invalid length. [ 1215.423606][ T4014] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.10441'. [ 1216.009241][ T4048] netlink: 'syz.5.10455': attribute type 10 has an invalid length. [ 1216.285545][ T4055] netlink: 'syz.1.10458': attribute type 16 has an invalid length. [ 1216.307430][ T4055] netlink: 48 bytes leftover after parsing attributes in process `syz.1.10458'. [ 1216.649104][ T4066] netlink: 'syz.2.10462': attribute type 10 has an invalid length. [ 1216.725989][ T4066] netlink: 'syz.2.10462': attribute type 11 has an invalid length. [ 1218.431204][ T4117] netlink: 'syz.2.10479': attribute type 10 has an invalid length. [ 1220.886019][ T4207] tap0: tun_chr_ioctl cmd 2147767511 [ 1220.939161][ T4217] netlink: 'syz.4.10518': attribute type 29 has an invalid length. [ 1221.066542][ T4224] netlink: 'syz.6.10519': attribute type 21 has an invalid length. [ 1221.102684][ T4224] netlink: 128 bytes leftover after parsing attributes in process `syz.6.10519'. [ 1221.198060][ T4224] netlink: 3 bytes leftover after parsing attributes in process `syz.6.10519'. [ 1224.039542][ T4241] device syzkaller0 entered promiscuous mode [ 1224.446126][ T4267] netlink: 'syz.6.10533': attribute type 272 has an invalid length. [ 1224.496322][ T4267] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.10533'. [ 1224.582901][ T4276] netlink: 'syz.4.10537': attribute type 17 has an invalid length. [ 1224.603357][ T4276] netlink: 'syz.4.10537': attribute type 16 has an invalid length. [ 1224.620480][ T4276] netlink: 152 bytes leftover after parsing attributes in process `syz.4.10537'. [ 1224.673105][ T4279] netlink: 209844 bytes leftover after parsing attributes in process `syz.6.10538'. [ 1225.964436][ T4356] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10569'. [ 1226.405494][ T4390] netlink: 'syz.5.10584': attribute type 3 has an invalid length. [ 1226.420929][ T4392] netlink: 'syz.6.10585': attribute type 6 has an invalid length. [ 1226.421685][ T4390] netlink: 132 bytes leftover after parsing attributes in process `syz.5.10584'. [ 1226.507073][ T4399] netlink: 'syz.6.10587': attribute type 10 has an invalid length. [ 1226.736674][ T4405] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.10589'. [ 1226.924797][ T4405] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 1227.583446][ T4425] netlink: 'syz.1.10598': attribute type 21 has an invalid length. [ 1227.622298][ T4425] netlink: 168 bytes leftover after parsing attributes in process `syz.1.10598'. [ 1227.837179][ T4443] netlink: 'syz.4.10606': attribute type 21 has an invalid length. [ 1227.873922][ T4443] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10606'. [ 1228.280593][ T4476] netlink: 184116 bytes leftover after parsing attributes in process `syz.1.10617'. [ 1228.348919][ T4482] netlink: 'syz.2.10620': attribute type 10 has an invalid length. [ 1228.586647][ T4482] device team0 left promiscuous mode [ 1228.651549][ T4482] device team_slave_0 left promiscuous mode [ 1228.657629][ T4482] device team_slave_1 left promiscuous mode [ 1228.713523][ T4482] bridge0: port 3(team0) entered disabled state [ 1229.354524][ T4482] team0: Cannot enslave team device to itself [ 1229.388330][ T4476] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1229.420130][ T4476] CPU: 0 PID: 4476 Comm: syz.1.10617 Not tainted syzkaller #0 [ 1229.427747][ T4476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1229.437827][ T4476] Call Trace: [ 1229.441131][ T4476] [ 1229.444109][ T4476] dump_stack_lvl+0x188/0x250 [ 1229.448839][ T4476] ? show_regs_print_info+0x20/0x20 [ 1229.454067][ T4476] ? load_image+0x400/0x400 [ 1229.458625][ T4476] sysfs_warn_dup+0x8a/0xa0 [ 1229.463159][ T4476] sysfs_do_create_link_sd+0xc0/0x110 [ 1229.468572][ T4476] device_add+0x7ed/0xfb0 [ 1229.472933][ T4476] wiphy_register+0x1e81/0x2c30 [ 1229.477835][ T4476] ? cfg80211_event_work+0x40/0x40 [ 1229.482971][ T4476] ? minstrel_ht_alloc+0x808/0x980 [ 1229.488119][ T4476] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1229.494225][ T4476] ieee80211_register_hw+0x2aa1/0x3af0 [ 1229.499724][ T4476] ? ieee80211_tasklet_handler+0x20/0x20 [ 1229.505396][ T4476] ? rcu_is_watching+0x11/0xa0 [ 1229.510184][ T4476] ? memset+0x1e/0x40 [ 1229.514220][ T4476] ? hrtimer_init+0x10c/0x220 [ 1229.518923][ T4476] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 1229.524684][ T4476] hwsim_new_radio_nl+0xa6f/0xc40 [ 1229.529755][ T4476] genl_rcv_msg+0xcea/0xf90 [ 1229.534303][ T4476] ? genl_bind+0x380/0x380 [ 1229.538758][ T4476] ? __dev_queue_xmit+0x1c51/0x2fd0 [ 1229.543988][ T4476] ? verify_lock_unused+0x140/0x140 [ 1229.549229][ T4476] ? kmalloc_large_node+0xf2/0x190 [ 1229.554371][ T4476] ? dev_queue_xmit+0x20/0x20 [ 1229.559103][ T4476] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 1229.565663][ T4476] netlink_rcv_skb+0x1f5/0x440 [ 1229.570457][ T4476] ? genl_bind+0x380/0x380 [ 1229.574907][ T4476] ? netlink_ack+0xb50/0xb50 [ 1229.579525][ T4476] ? __lock_acquire+0x7d10/0x7d10 [ 1229.584599][ T4476] ? down_read+0x1aa/0x2e0 [ 1229.589061][ T4476] genl_rcv+0x24/0x40 [ 1229.593066][ T4476] netlink_unicast+0x774/0x920 [ 1229.597888][ T4476] netlink_sendmsg+0x8ba/0xbe0 [ 1229.602689][ T4476] ? netlink_getsockopt+0x570/0x570 [ 1229.607930][ T4476] ? aa_sock_msg_perm+0x94/0x150 [ 1229.612906][ T4476] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1229.618218][ T4476] ? security_socket_sendmsg+0x7c/0xa0 [ 1229.623707][ T4476] ? netlink_getsockopt+0x570/0x570 [ 1229.628928][ T4476] ____sys_sendmsg+0x5b7/0x8f0 [ 1229.633736][ T4476] ? __sys_sendmsg_sock+0x30/0x30 [ 1229.638803][ T4476] ? import_iovec+0x6f/0xa0 [ 1229.643372][ T4476] ___sys_sendmsg+0x236/0x2e0 [ 1229.648092][ T4476] ? __sys_sendmsg+0x2a0/0x2a0 [ 1229.652926][ T4476] __se_sys_sendmsg+0x1af/0x290 [ 1229.657804][ T4476] ? __x64_sys_sendmsg+0x80/0x80 [ 1229.662772][ T4476] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1229.668797][ T4476] ? lockdep_hardirqs_on+0x94/0x140 [ 1229.674037][ T4476] do_syscall_64+0x4c/0xa0 [ 1229.678489][ T4476] ? clear_bhb_loop+0x30/0x80 [ 1229.683202][ T4476] ? clear_bhb_loop+0x30/0x80 [ 1229.687922][ T4476] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1229.693878][ T4476] RIP: 0033:0x7ff0fbc9a799 [ 1229.698327][ T4476] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1229.717970][ T4476] RSP: 002b:00007ff0f9eb2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1229.726432][ T4476] RAX: ffffffffffffffda RBX: 00007ff0fbf14180 RCX: 00007ff0fbc9a799 [ 1229.734437][ T4476] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 1229.742437][ T4476] RBP: 00007ff0fbd30bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1229.750433][ T4476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1229.758433][ T4476] R13: 00007ff0fbf14218 R14: 00007ff0fbf14180 R15: 00007ffe067c6ad8 [ 1229.766449][ T4476] [ 1230.500141][ T4496] netlink: 48 bytes leftover after parsing attributes in process `syz.5.10624'. [ 1230.673633][ T4514] netlink: 'syz.2.10631': attribute type 12 has an invalid length. [ 1230.781534][ T4514] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10631'. [ 1234.141782][ T4561] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1234.193296][ T4561] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1234.666808][ T4584] netlink: 2 bytes leftover after parsing attributes in process `syz.2.10656'. [ 1234.679417][ T4584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1234.692270][ T4584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1235.047266][ T4591] netlink: 'syz.2.10658': attribute type 2 has an invalid length. [ 1235.154639][ T4591] netlink: 'syz.2.10658': attribute type 11 has an invalid length. [ 1235.208104][ T4591] netlink: 198172 bytes leftover after parsing attributes in process `syz.2.10658'. [ 1235.330027][ T4595] FAULT_INJECTION: forcing a failure. [ 1235.330027][ T4595] name failslab, interval 1, probability 0, space 0, times 0 [ 1235.405055][ T4595] CPU: 1 PID: 4595 Comm: syz.5.10659 Not tainted syzkaller #0 [ 1235.412663][ T4595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1235.422755][ T4595] Call Trace: [ 1235.426071][ T4595] [ 1235.429028][ T4595] dump_stack_lvl+0x188/0x250 [ 1235.433749][ T4595] ? show_regs_print_info+0x20/0x20 [ 1235.438999][ T4595] ? load_image+0x400/0x400 [ 1235.443554][ T4595] ? __might_sleep+0xf0/0xf0 [ 1235.448266][ T4595] ? __lock_acquire+0x7d10/0x7d10 [ 1235.453347][ T4595] should_fail+0x38c/0x4c0 [ 1235.457826][ T4595] should_failslab+0x5/0x20 [ 1235.462361][ T4595] slab_pre_alloc_hook+0x51/0xc0 [ 1235.467341][ T4595] ? security_file_alloc+0x30/0x110 [ 1235.472597][ T4595] kmem_cache_alloc+0x3d/0x290 [ 1235.477395][ T4595] ? rcu_is_watching+0x11/0xa0 [ 1235.482215][ T4595] security_file_alloc+0x30/0x110 [ 1235.487282][ T4595] __alloc_file+0xc2/0x240 [ 1235.491741][ T4595] alloc_empty_file+0x90/0x180 [ 1235.496552][ T4595] alloc_file+0x5b/0x4f0 [ 1235.500840][ T4595] ? do_raw_spin_unlock+0x11d/0x230 [ 1235.506105][ T4595] alloc_file_pseudo+0x180/0x200 [ 1235.511102][ T4595] ? alloc_empty_file_noaccount+0x80/0x80 [ 1235.516867][ T4595] ? put_pid+0xc3/0x120 [ 1235.521066][ T4595] ? init_peercred+0x29f/0x340 [ 1235.525886][ T4595] sock_alloc_file+0xb3/0x240 [ 1235.530599][ T4595] __sys_socketpair+0x2cc/0x540 [ 1235.535507][ T4595] __x64_sys_socketpair+0x97/0xb0 [ 1235.540583][ T4595] do_syscall_64+0x4c/0xa0 [ 1235.545048][ T4595] ? clear_bhb_loop+0x30/0x80 [ 1235.549758][ T4595] ? clear_bhb_loop+0x30/0x80 [ 1235.554479][ T4595] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1235.560412][ T4595] RIP: 0033:0x7f256f16a799 [ 1235.564863][ T4595] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1235.584704][ T4595] RSP: 002b:00007f256d3c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 1235.593192][ T4595] RAX: ffffffffffffffda RBX: 00007f256f3e3fa0 RCX: 00007f256f16a799 [ 1235.601205][ T4595] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000001 [ 1235.609206][ T4595] RBP: 00007f256d3c4090 R08: 0000000000000000 R09: 0000000000000000 [ 1235.617214][ T4595] R10: 00002000000029c0 R11: 0000000000000246 R12: 0000000000000002 [ 1235.625219][ T4595] R13: 00007f256f3e4038 R14: 00007f256f3e3fa0 R15: 00007ffcbcf84c98 [ 1235.633280][ T4595] [ 1236.269370][ T4608] netlink: 'syz.4.10664': attribute type 3 has an invalid length. [ 1236.292189][ T4608] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.10664'. [ 1237.520862][ T4632] netlink: 'syz.5.10672': attribute type 10 has an invalid length. [ 1237.568531][ T4632] netlink: 'syz.5.10672': attribute type 11 has an invalid length. [ 1238.788887][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.795304][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.695639][ T4651] netlink: 'syz.4.10675': attribute type 16 has an invalid length. [ 1239.872186][ T4651] netlink: 48 bytes leftover after parsing attributes in process `syz.4.10675'. [ 1242.159509][ T4683] netlink: 'syz.4.10685': attribute type 10 has an invalid length. [ 1242.311739][ T4690] netlink: 'syz.4.10685': attribute type 11 has an invalid length. [ 1243.856672][ T4704] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.10693'. [ 1244.045013][ T4704] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1244.081656][ T4704] CPU: 1 PID: 4704 Comm: syz.1.10693 Not tainted syzkaller #0 [ 1244.089200][ T4704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1244.099303][ T4704] Call Trace: [ 1244.102636][ T4704] [ 1244.105620][ T4704] dump_stack_lvl+0x188/0x250 [ 1244.110388][ T4704] ? show_regs_print_info+0x20/0x20 [ 1244.115646][ T4704] ? load_image+0x400/0x400 [ 1244.120287][ T4704] sysfs_warn_dup+0x8a/0xa0 [ 1244.124873][ T4704] sysfs_do_create_link_sd+0xc0/0x110 [ 1244.130331][ T4704] device_add+0x7ed/0xfb0 [ 1244.134789][ T4704] wiphy_register+0x1e81/0x2c30 [ 1244.139794][ T4704] ? cfg80211_event_work+0x40/0x40 [ 1244.144968][ T4704] ? minstrel_ht_alloc+0x808/0x980 [ 1244.150176][ T4704] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1244.156333][ T4704] ieee80211_register_hw+0x2aa1/0x3af0 [ 1244.161942][ T4704] ? ieee80211_tasklet_handler+0x20/0x20 [ 1244.167660][ T4704] ? rcu_is_watching+0x11/0xa0 [ 1244.172484][ T4704] ? memset+0x1e/0x40 [ 1244.176644][ T4704] ? hrtimer_init+0x10c/0x220 [ 1244.181406][ T4704] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 1244.187371][ T4704] hwsim_new_radio_nl+0xa6f/0xc40 [ 1244.192527][ T4704] genl_rcv_msg+0xcea/0xf90 [ 1244.197149][ T4704] ? genl_bind+0x380/0x380 [ 1244.201687][ T4704] ? perf_trace_run_bpf_submit+0x124/0x1c0 [ 1244.207613][ T4704] ? verify_lock_unused+0x140/0x140 [ 1244.212882][ T4704] ? perf_trace_lock_acquire+0x340/0x3e0 [ 1244.218614][ T4704] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 1244.225266][ T4704] ? perf_trace_lock+0x301/0x390 [ 1244.230288][ T4704] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 1244.237070][ T4704] netlink_rcv_skb+0x1f5/0x440 [ 1244.241902][ T4704] ? genl_bind+0x380/0x380 [ 1244.246387][ T4704] ? netlink_ack+0xb50/0xb50 [ 1244.251044][ T4704] ? __lock_acquire+0x7d10/0x7d10 [ 1244.256152][ T4704] ? down_read+0x1aa/0x2e0 [ 1244.260637][ T4704] genl_rcv+0x24/0x40 [ 1244.264801][ T4704] netlink_unicast+0x774/0x920 [ 1244.269703][ T4704] netlink_sendmsg+0x8ba/0xbe0 [ 1244.274581][ T4704] ? netlink_getsockopt+0x570/0x570 [ 1244.279858][ T4704] ? aa_sock_msg_perm+0x94/0x150 [ 1244.284871][ T4704] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1244.290215][ T4704] ? security_socket_sendmsg+0x7c/0xa0 [ 1244.295739][ T4704] ? netlink_getsockopt+0x570/0x570 [ 1244.300986][ T4704] ____sys_sendmsg+0x5b7/0x8f0 [ 1244.305869][ T4704] ? __sys_sendmsg_sock+0x30/0x30 [ 1244.311010][ T4704] ? import_iovec+0x6f/0xa0 [ 1244.315606][ T4704] ___sys_sendmsg+0x236/0x2e0 [ 1244.320440][ T4704] ? __sys_sendmsg+0x2a0/0x2a0 [ 1244.325345][ T4704] ? trace_event_raw_event_lock+0x270/0x270 [ 1244.331411][ T4704] __se_sys_sendmsg+0x1af/0x290 [ 1244.336332][ T4704] ? __x64_sys_sendmsg+0x80/0x80 [ 1244.341316][ T4704] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1244.347407][ T4704] ? lockdep_hardirqs_on+0x94/0x140 [ 1244.352685][ T4704] do_syscall_64+0x4c/0xa0 [ 1244.357146][ T4704] ? clear_bhb_loop+0x30/0x80 [ 1244.361863][ T4704] ? clear_bhb_loop+0x30/0x80 [ 1244.366601][ T4704] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1244.372541][ T4704] RIP: 0033:0x7ff0fbc9a799 [ 1244.377000][ T4704] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1244.396742][ T4704] RSP: 002b:00007ff0f9ef4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1244.405238][ T4704] RAX: ffffffffffffffda RBX: 00007ff0fbf13fa0 RCX: 00007ff0fbc9a799 [ 1244.413263][ T4704] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 1244.421287][ T4704] RBP: 00007ff0fbd30bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1244.429307][ T4704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1244.437321][ T4704] R13: 00007ff0fbf14038 R14: 00007ff0fbf13fa0 R15: 00007ffe067c6ad8 [ 1244.445412][ T4704] [ 1245.916348][ T4707] netlink: 'syz.5.10696': attribute type 28 has an invalid length. [ 1246.018410][ T4710] netlink: 'syz.5.10696': attribute type 28 has an invalid length. [ 1246.691823][ T4725] netlink: 'syz.4.10701': attribute type 10 has an invalid length. [ 1250.006278][ T4739] chnl_net:caif_netlink_parms(): no params data found [ 1250.171580][T22053] Bluetooth: hci5: command 0x0409 tx timeout [ 1250.669626][ T4739] bridge0: port 1(bridge_slave_0) entered blocking state [ 1250.677095][ T4739] bridge0: port 1(bridge_slave_0) entered disabled state [ 1250.703489][ T4739] device bridge_slave_0 entered promiscuous mode [ 1250.808133][ T4739] bridge0: port 2(bridge_slave_1) entered blocking state [ 1250.941614][ T4739] bridge0: port 2(bridge_slave_1) entered disabled state [ 1251.002634][ T4739] device bridge_slave_1 entered promiscuous mode [ 1251.263729][ T4739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1251.463582][ T4739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1252.053622][ T4739] team0: Port device team_slave_0 added [ 1252.153180][ T4739] team0: Port device team_slave_1 added [ 1252.251512][ T1108] Bluetooth: hci5: command 0x041b tx timeout [ 1252.456848][ T4739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1252.512349][ T4739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1252.756064][ T4739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1252.973300][ T4739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1252.980312][ T4739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1253.242427][ T4739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1253.838658][ T4739] device hsr_slave_0 entered promiscuous mode [ 1253.882888][ T4739] device hsr_slave_1 entered promiscuous mode [ 1254.045576][ T4739] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1254.081437][ T4739] Cannot create hsr debugfs directory [ 1254.321896][ T1108] Bluetooth: hci5: command 0x040f tx timeout [ 1255.704652][ T4739] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1256.231982][ T4739] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1256.401751][T22053] Bluetooth: hci5: command 0x0419 tx timeout [ 1256.416428][ T4739] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1256.610654][ T4828] netlink: 55631 bytes leftover after parsing attributes in process `syz.5.10731'. [ 1256.703536][ T4739] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1257.290337][ T4843] netlink: 'syz.1.10735': attribute type 4 has an invalid length. [ 1257.412173][ T4843] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.10735'. [ 1258.130264][ T4739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1258.365068][ T3807] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1258.402187][ T3807] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1258.506980][ T4739] 8021q: adding VLAN 0 to HW filter on device team0 [ 1258.559995][T15978] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1258.625974][T15978] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1258.672504][T15978] bridge0: port 1(bridge_slave_0) entered blocking state [ 1258.679714][T15978] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1258.782924][T15978] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1258.832747][T15978] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1258.873590][T15978] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1258.922220][T15978] bridge0: port 2(bridge_slave_1) entered blocking state [ 1258.929409][T15978] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1259.080161][T15978] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1259.184188][T15978] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1259.254166][T15978] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1259.324130][T15978] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1259.436095][T15978] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1259.497474][T15978] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1259.549642][T15978] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1259.615465][T15978] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1259.703116][T15978] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1259.781059][ T4739] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1259.934232][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1260.100964][T15978] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1260.146203][T15978] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1262.723981][ T3807] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1262.771769][ T3807] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1262.932024][ T4739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1263.420800][ T4912] netlink: 209844 bytes leftover after parsing attributes in process `syz.5.10754'. [ 1265.223890][ T4935] netlink: set zone limit has 8 unknown bytes [ 1265.373926][ T3801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1265.413488][ T3801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1265.677824][ T3801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1265.703053][ T3801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1265.786791][ T4739] device veth0_vlan entered promiscuous mode [ 1265.814457][ T3801] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1265.852993][ T3801] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1265.916692][ T4739] device veth1_vlan entered promiscuous mode [ 1266.160152][T15997] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1266.190200][T15997] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1266.240120][T15997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1266.332439][T15997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1266.394926][ T4739] device veth0_macvtap entered promiscuous mode [ 1266.457212][T15997] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1266.493291][ T4739] device veth1_macvtap entered promiscuous mode [ 1266.722864][ T4739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1266.841827][ T4739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1266.911702][ T4739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1266.991665][ T4739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1267.059891][ T4739] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1267.141059][ T3801] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1267.158740][ T3801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1267.266899][ T4739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1267.334305][ T4739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1267.400589][ T4739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1267.468103][ T4739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1267.538841][ T4739] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1267.608930][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1267.623909][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1267.690837][ T4739] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1267.741633][ T4739] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1267.804358][ T4739] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1267.869885][ T4739] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1268.669051][ T3801] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1268.713751][ T3801] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1268.800387][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1268.893745][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1268.926665][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1269.003228][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1269.413010][ T4975] FAULT_INJECTION: forcing a failure. [ 1269.413010][ T4975] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1269.651119][ T4975] CPU: 0 PID: 4975 Comm: syz.5.10775 Not tainted syzkaller #0 [ 1269.658859][ T4975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1269.669094][ T4975] Call Trace: [ 1269.672411][ T4975] [ 1269.675377][ T4975] dump_stack_lvl+0x188/0x250 [ 1269.680360][ T4975] ? show_regs_print_info+0x20/0x20 [ 1269.685609][ T4975] ? load_image+0x400/0x400 [ 1269.690167][ T4975] ? __lock_acquire+0x7d10/0x7d10 [ 1269.695296][ T4975] ? vfs_write+0x8b2/0xd60 [ 1269.699765][ T4975] should_fail+0x38c/0x4c0 [ 1269.704238][ T4975] _copy_from_user+0x2e/0x170 [ 1269.708984][ T4975] __sys_bpf+0x26d/0x6f0 [ 1269.713291][ T4975] ? bpf_link_show_fdinfo+0x380/0x380 [ 1269.718732][ T4975] ? vtime_user_exit+0x2c8/0x3e0 [ 1269.723734][ T4975] __x64_sys_bpf+0x78/0x90 [ 1269.728207][ T4975] do_syscall_64+0x4c/0xa0 [ 1269.732678][ T4975] ? clear_bhb_loop+0x30/0x80 [ 1269.737395][ T4975] ? clear_bhb_loop+0x30/0x80 [ 1269.742122][ T4975] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1269.748053][ T4975] RIP: 0033:0x7f256f16a799 [ 1269.752508][ T4975] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1269.772152][ T4975] RSP: 002b:00007f256d3c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1269.780622][ T4975] RAX: ffffffffffffffda RBX: 00007f256f3e3fa0 RCX: 00007f256f16a799 [ 1269.788627][ T4975] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 1269.796632][ T4975] RBP: 00007f256d3c4090 R08: 0000000000000000 R09: 0000000000000000 [ 1269.804645][ T4975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1269.812651][ T4975] R13: 00007f256f3e4038 R14: 00007f256f3e3fa0 R15: 00007ffcbcf84c98 [ 1269.820774][ T4975] [ 1273.372123][ T5040] netlink: 'syz.5.10800': attribute type 4 has an invalid length. [ 1273.380302][ T5040] netlink: 'syz.5.10800': attribute type 3 has an invalid length. [ 1273.512871][ T5040] netlink: 132 bytes leftover after parsing attributes in process `syz.5.10800'. [ 1273.729418][ T5051] netlink: 'syz.1.10804': attribute type 3 has an invalid length. [ 1273.738342][ T5052] netlink: 'syz.4.10805': attribute type 10 has an invalid length. [ 1273.853337][ T5051] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10804'. [ 1275.214110][ T5075] netlink: 156 bytes leftover after parsing attributes in process `syz.7.10811'. [ 1275.899881][ T5089] netlink: 'syz.7.10818': attribute type 21 has an invalid length. [ 1275.920345][ T5089] netlink: 168 bytes leftover after parsing attributes in process `syz.7.10818'. [ 1277.066702][ T5101] device syzkaller0 entered promiscuous mode [ 1280.424163][ T5164] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1280.516200][ T5155] device syzkaller0 entered promiscuous mode [ 1281.048383][ T5173] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.10841'. [ 1281.604286][ T4191] Bluetooth: hci0: command 0x0406 tx timeout [ 1282.622681][ T5197] netlink: 'syz.4.10849': attribute type 21 has an invalid length. [ 1282.683016][ T5197] netlink: 128 bytes leftover after parsing attributes in process `syz.4.10849'. [ 1282.758889][ T5197] netlink: 'syz.4.10849': attribute type 4 has an invalid length. [ 1282.847661][ T5197] netlink: 3 bytes leftover after parsing attributes in process `syz.4.10849'. [ 1282.925260][ T5202] netlink: 'syz.5.10851': attribute type 12 has an invalid length. [ 1282.985237][ T5202] netlink: 132 bytes leftover after parsing attributes in process `syz.5.10851'. [ 1283.132238][ T5203] netlink: 'syz.4.10849': attribute type 4 has an invalid length. [ 1283.291813][ T5203] netlink: 152 bytes leftover after parsing attributes in process `syz.4.10849'. [ 1283.674202][ T5203] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1283.893895][ T5216] netlink: 'syz.2.10854': attribute type 1 has an invalid length. [ 1283.992804][ T5216] netlink: 49811 bytes leftover after parsing attributes in process `syz.2.10854'. [ 1287.157029][ T5251] netlink: 148 bytes leftover after parsing attributes in process `syz.2.10868'. [ 1287.343822][ T5256] netlink: 2 bytes leftover after parsing attributes in process `syz.1.10870'. [ 1287.436405][ T5256] device batadv_slave_1 entered promiscuous mode [ 1288.238369][ T5275] FAULT_INJECTION: forcing a failure. [ 1288.238369][ T5275] name failslab, interval 1, probability 0, space 0, times 0 [ 1288.253834][ T5274] netlink: 'syz.4.10877': attribute type 3 has an invalid length. [ 1288.344652][ T5275] CPU: 0 PID: 5275 Comm: syz.2.10876 Not tainted syzkaller #0 [ 1288.352178][ T5275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1288.362255][ T5275] Call Trace: [ 1288.365560][ T5275] [ 1288.368511][ T5275] dump_stack_lvl+0x188/0x250 [ 1288.373215][ T5275] ? show_regs_print_info+0x20/0x20 [ 1288.378447][ T5275] ? load_image+0x400/0x400 [ 1288.382985][ T5275] ? __might_sleep+0xf0/0xf0 [ 1288.387587][ T5275] ? __lock_acquire+0x7d10/0x7d10 [ 1288.392636][ T5275] should_fail+0x38c/0x4c0 [ 1288.397077][ T5275] should_failslab+0x5/0x20 [ 1288.401606][ T5275] slab_pre_alloc_hook+0x51/0xc0 [ 1288.406587][ T5275] ? __d_alloc+0x2a/0x6f0 [ 1288.410928][ T5275] kmem_cache_alloc+0x3d/0x290 [ 1288.415714][ T5275] __d_alloc+0x2a/0x6f0 [ 1288.419897][ T5275] ? alloc_file+0x3f9/0x4f0 [ 1288.424418][ T5275] d_alloc_pseudo+0x19/0x70 [ 1288.429078][ T5275] alloc_file_pseudo+0xe0/0x200 [ 1288.433960][ T5275] ? alloc_empty_file_noaccount+0x80/0x80 [ 1288.439701][ T5275] ? put_pid+0xc3/0x120 [ 1288.443888][ T5275] ? init_peercred+0x29f/0x340 [ 1288.448692][ T5275] sock_alloc_file+0xb3/0x240 [ 1288.453402][ T5275] __sys_socketpair+0x372/0x540 [ 1288.458379][ T5275] __x64_sys_socketpair+0x97/0xb0 [ 1288.463428][ T5275] do_syscall_64+0x4c/0xa0 [ 1288.467854][ T5275] ? clear_bhb_loop+0x30/0x80 [ 1288.472538][ T5275] ? clear_bhb_loop+0x30/0x80 [ 1288.477238][ T5275] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1288.483150][ T5275] RIP: 0033:0x7fe09cc69799 [ 1288.487581][ T5275] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1288.507197][ T5275] RSP: 002b:00007fe09aec3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 1288.515629][ T5275] RAX: ffffffffffffffda RBX: 00007fe09cee2fa0 RCX: 00007fe09cc69799 [ 1288.523628][ T5275] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000001 [ 1288.531613][ T5275] RBP: 00007fe09aec3090 R08: 0000000000000000 R09: 0000000000000000 [ 1288.539608][ T5275] R10: 00002000000029c0 R11: 0000000000000246 R12: 0000000000000002 [ 1288.547595][ T5275] R13: 00007fe09cee3038 R14: 00007fe09cee2fa0 R15: 00007ffd860d6188 [ 1288.555630][ T5275] [ 1288.621755][ T5274] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.10877'. [ 1288.815581][ T5269] device syzkaller0 entered promiscuous mode [ 1290.160874][ T5298] netlink: 'syz.7.10885': attribute type 10 has an invalid length. [ 1290.411927][ T5298] netlink: 'syz.7.10885': attribute type 11 has an invalid length. [ 1290.670572][ T5306] netlink: 'syz.1.10888': attribute type 16 has an invalid length. [ 1290.792875][ T5306] netlink: 48 bytes leftover after parsing attributes in process `syz.1.10888'. [ 1291.211768][ T5311] netlink: 'syz.2.10889': attribute type 10 has an invalid length. [ 1291.841738][T32619] Bluetooth: hci2: command 0x0406 tx timeout [ 1292.804637][ T5340] netlink: 'syz.5.10899': attribute type 10 has an invalid length. [ 1293.004122][ T5330] delete_channel: no stack [ 1293.019847][ T5339] netlink: 'syz.5.10899': attribute type 11 has an invalid length. [ 1295.092971][ C1] ------------[ cut here ]------------ [ 1295.092985][ C1] WARNING: CPU: 1 PID: 5364 at mm/maccess.c:226 copy_from_user_nofault+0x160/0x1c0 [ 1295.093025][ C1] Modules linked in: [ 1295.093035][ C1] CPU: 1 PID: 5364 Comm: syz.5.10905 Not tainted syzkaller #0 [ 1295.093051][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1295.093060][ C1] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 1295.093079][ C1] Code: 24 45 31 f6 31 ff 89 de e8 5d 94 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 e0 90 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 1295.093095][ C1] RSP: 0018:fffffe000005d8f8 EFLAGS: 00010006 [ 1295.093111][ C1] RAX: ffffffff81a09160 RBX: 0000000000000008 RCX: ffff88802a6fd940 [ 1295.093133][ C1] RDX: 0000000000110000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1295.093145][ C1] RBP: 0000000000000000 R08: ffff88802a6fd947 R09: 1ffff110054dfb28 [ 1295.093159][ C1] R10: dffffc0000000000 R11: ffffed10054dfb29 R12: ffff88802a6ff0c8 [ 1295.093171][ C1] R13: 00007ffffffff000 R14: fffffe000005d968 R15: 0000000020000000 [ 1295.093182][ C1] FS: 00007f256d3c46c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 1295.093195][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1295.093206][ C1] CR2: 00007f7f5d8fc6b8 CR3: 000000005bd4d000 CR4: 00000000003506e0 [ 1295.093219][ C1] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 1295.093229][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1295.093239][ C1] Call Trace: [ 1295.093244][ C1] <#DB> [ 1295.093255][ C1] bpf_probe_read_compat+0xdd/0x170 [ 1295.093279][ C1] bpf_prog_63d51858d7cca270+0x3d/0x288 [ 1295.093307][ C1] bpf_overflow_handler+0x3fd/0x4a0 [ 1295.093330][ C1] ? perf_event_switch_output+0x730/0x730 [ 1295.093351][ C1] ? trace_call_bpf+0x515/0x5b0 [ 1295.093368][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 1295.093387][ C1] __perf_event_overflow+0x364/0x530 [ 1295.093408][ C1] perf_swevent_event+0x4ad/0x530 [ 1295.093428][ C1] perf_bp_event+0x276/0x320 [ 1295.093445][ C1] ? perf_trace_lock_acquire+0x340/0x3e0 [ 1295.093463][ C1] ? perf_event_free_bpf_prog+0x110/0x110 [ 1295.093504][ C1] ? rcu_lock_acquire+0x9/0x30 [ 1295.093521][ C1] ? read_lock_is_recursive+0x10/0x10 [ 1295.093545][ C1] hw_breakpoint_exceptions_notify+0x152/0x470 [ 1295.093565][ C1] atomic_notifier_call_chain+0x15d/0x280 [ 1295.093586][ C1] notify_die+0x141/0x1a0 [ 1295.093603][ C1] ? srcu_init_notifier_head+0x90/0x90 [ 1295.093624][ C1] ? exc_debug+0x6e/0x130 [ 1295.093650][ C1] ? trace_hardirqs_off_finish+0x57/0x1f0 [ 1295.093669][ C1] notify_debug+0x20/0x30 [ 1295.093683][ C1] exc_debug+0xcf/0x130 [ 1295.093699][ C1] asm_exc_debug+0x1a/0x40 [ 1295.093712][ C1] RIP: 0010:copy_user_generic_unrolled+0x89/0xc0 [ 1295.093727][ C1] Code: 38 4c 89 47 20 4c 89 4f 28 4c 89 57 30 4c 89 5f 38 48 8d 76 40 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 <4c> 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a [ 1295.093739][ C1] RSP: 0018:ffffc9000364fa60 EFLAGS: 00040202 [ 1295.093749][ C1] RAX: ffffffff83e3cf01 RBX: 0000000000000008 RCX: 0000000000000001 [ 1295.093757][ C1] RDX: 0000000000000000 RSI: 0000200000000300 RDI: ffffc9000364fc40 [ 1295.093766][ C1] RBP: 0000000000000000 R08: 0000000000000002 R09: 1ffff920006c9f88 [ 1295.093774][ C1] R10: dffffc0000000000 R11: fffff520006c9f89 R12: 00007ffffffff000 [ 1295.093783][ C1] R13: 0000200000000308 R14: ffffc9000364fc40 R15: 0000200000000300 [ 1295.093799][ C1] ? _copy_from_user+0x71/0x170 [ 1295.093818][ C1] [ 1295.093822][ C1] [ 1295.093826][ C1] _copy_from_user+0xfa/0x170 [ 1295.093842][ C1] __copy_msghdr_from_user+0x48a/0x630 [ 1295.093859][ C1] ? verify_lock_unused+0x140/0x140 [ 1295.093878][ C1] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 1295.093907][ C1] ___sys_sendmsg+0x19a/0x2e0 [ 1295.093929][ C1] ? __sys_sendmsg+0x2a0/0x2a0 [ 1295.093954][ C1] ? percpu_counter_add_batch+0x13b/0x160 [ 1295.093992][ C1] __se_sys_sendmsg+0x1af/0x290 [ 1295.094010][ C1] ? __x64_sys_sendmsg+0x80/0x80 [ 1295.094023][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1295.094049][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 1295.094067][ C1] do_syscall_64+0x4c/0xa0 [ 1295.094078][ C1] ? clear_bhb_loop+0x30/0x80 [ 1295.094089][ C1] ? clear_bhb_loop+0x30/0x80 [ 1295.094103][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1295.094116][ C1] RIP: 0033:0x7f256f16a799 [ 1295.094133][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1295.094142][ C1] RSP: 002b:00007f256d3c4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1295.094154][ C1] RAX: ffffffffffffffda RBX: 00007f256f3e3fa0 RCX: 00007f256f16a799 [ 1295.094164][ C1] RDX: 0900000000000000 RSI: 0000200000000500 RDI: 0000000000000005 [ 1295.094173][ C1] RBP: 00007f256f200bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1295.094181][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1295.094188][ C1] R13: 00007f256f3e4038 R14: 00007f256f3e3fa0 R15: 00007ffcbcf84c98 [ 1295.094211][ C1] [ 1295.094221][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1295.094228][ C1] CPU: 1 PID: 5364 Comm: syz.5.10905 Not tainted syzkaller #0 [ 1295.094239][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1295.094246][ C1] Call Trace: [ 1295.094250][ C1] <#DB> [ 1295.094255][ C1] dump_stack_lvl+0x188/0x250 [ 1295.094274][ C1] ? show_regs_print_info+0x20/0x20 [ 1295.094290][ C1] ? load_image+0x400/0x400 [ 1295.094315][ C1] panic+0x2e5/0x810 [ 1295.094334][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 1295.094358][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 1295.094374][ C1] __warn+0x248/0x2b0 [ 1295.094389][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 1295.094405][ C1] report_bug+0x1b7/0x2e0 [ 1295.094426][ C1] handle_bug+0x3a/0x70 [ 1295.094438][ C1] exc_invalid_op+0x16/0x40 [ 1295.094451][ C1] asm_exc_invalid_op+0x16/0x20 [ 1295.094463][ C1] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 1295.094477][ C1] Code: 24 45 31 f6 31 ff 89 de e8 5d 94 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 e0 90 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 1295.094487][ C1] RSP: 0018:fffffe000005d8f8 EFLAGS: 00010006 [ 1295.094497][ C1] RAX: ffffffff81a09160 RBX: 0000000000000008 RCX: ffff88802a6fd940 [ 1295.094506][ C1] RDX: 0000000000110000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1295.094513][ C1] RBP: 0000000000000000 R08: ffff88802a6fd947 R09: 1ffff110054dfb28 [ 1295.094522][ C1] R10: dffffc0000000000 R11: ffffed10054dfb29 R12: ffff88802a6ff0c8 [ 1295.094531][ C1] R13: 00007ffffffff000 R14: fffffe000005d968 R15: 0000000020000000 [ 1295.094547][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 1295.094566][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 1295.094584][ C1] bpf_probe_read_compat+0xdd/0x170 [ 1295.094602][ C1] bpf_prog_63d51858d7cca270+0x3d/0x288 [ 1295.094615][ C1] bpf_overflow_handler+0x3fd/0x4a0 [ 1295.094635][ C1] ? perf_event_switch_output+0x730/0x730 [ 1295.094653][ C1] ? trace_call_bpf+0x515/0x5b0 [ 1295.094670][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 1295.094687][ C1] __perf_event_overflow+0x364/0x530 [ 1295.094715][ C1] perf_swevent_event+0x4ad/0x530 [ 1295.094733][ C1] perf_bp_event+0x276/0x320 [ 1295.094749][ C1] ? perf_trace_lock_acquire+0x340/0x3e0 [ 1295.094765][ C1] ? perf_event_free_bpf_prog+0x110/0x110 [ 1295.094803][ C1] ? rcu_lock_acquire+0x9/0x30 [ 1295.094818][ C1] ? read_lock_is_recursive+0x10/0x10 [ 1295.094840][ C1] hw_breakpoint_exceptions_notify+0x152/0x470 [ 1295.094858][ C1] atomic_notifier_call_chain+0x15d/0x280 [ 1295.094878][ C1] notify_die+0x141/0x1a0 [ 1295.094894][ C1] ? srcu_init_notifier_head+0x90/0x90 [ 1295.094914][ C1] ? exc_debug+0x6e/0x130 [ 1295.094927][ C1] ? trace_hardirqs_off_finish+0x57/0x1f0 [ 1295.094944][ C1] notify_debug+0x20/0x30 [ 1295.094957][ C1] exc_debug+0xcf/0x130 [ 1295.094973][ C1] asm_exc_debug+0x1a/0x40 [ 1295.094984][ C1] RIP: 0010:copy_user_generic_unrolled+0x89/0xc0 [ 1295.094998][ C1] Code: 38 4c 89 47 20 4c 89 4f 28 4c 89 57 30 4c 89 5f 38 48 8d 76 40 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 <4c> 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a [ 1295.095009][ C1] RSP: 0018:ffffc9000364fa60 EFLAGS: 00040202 [ 1295.095019][ C1] RAX: ffffffff83e3cf01 RBX: 0000000000000008 RCX: 0000000000000001 [ 1295.095027][ C1] RDX: 0000000000000000 RSI: 0000200000000300 RDI: ffffc9000364fc40 [ 1295.095036][ C1] RBP: 0000000000000000 R08: 0000000000000002 R09: 1ffff920006c9f88 [ 1295.095044][ C1] R10: dffffc0000000000 R11: fffff520006c9f89 R12: 00007ffffffff000 [ 1295.095054][ C1] R13: 0000200000000308 R14: ffffc9000364fc40 R15: 0000200000000300 [ 1295.095070][ C1] ? _copy_from_user+0x71/0x170 [ 1295.095088][ C1] [ 1295.095091][ C1] [ 1295.095095][ C1] _copy_from_user+0xfa/0x170 [ 1295.095110][ C1] __copy_msghdr_from_user+0x48a/0x630 [ 1295.095130][ C1] ? verify_lock_unused+0x140/0x140 [ 1295.095149][ C1] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 1295.095177][ C1] ___sys_sendmsg+0x19a/0x2e0 [ 1295.095199][ C1] ? __sys_sendmsg+0x2a0/0x2a0 [ 1295.095223][ C1] ? percpu_counter_add_batch+0x13b/0x160 [ 1295.095260][ C1] __se_sys_sendmsg+0x1af/0x290 [ 1295.095277][ C1] ? __x64_sys_sendmsg+0x80/0x80 [ 1295.095291][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1295.095317][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 1295.095334][ C1] do_syscall_64+0x4c/0xa0 [ 1295.095346][ C1] ? clear_bhb_loop+0x30/0x80 [ 1295.095357][ C1] ? clear_bhb_loop+0x30/0x80 [ 1295.095372][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1295.095385][ C1] RIP: 0033:0x7f256f16a799 [ 1295.095395][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1295.095406][ C1] RSP: 002b:00007f256d3c4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1295.095417][ C1] RAX: ffffffffffffffda RBX: 00007f256f3e3fa0 RCX: 00007f256f16a799 [ 1295.095426][ C1] RDX: 0900000000000000 RSI: 0000200000000500 RDI: 0000000000000005 [ 1295.095435][ C1] RBP: 00007f256f200bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1295.095443][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1295.095450][ C1] R13: 00007f256f3e4038 R14: 00007f256f3e3fa0 R15: 00007ffcbcf84c98 [ 1295.095473][ C1] [ 1295.095779][ C1] Kernel Offset: disabled [ 1295.095801][ C1] [ 1295.095804][ C1] ================================ [ 1295.095808][ C1] WARNING: inconsistent lock state [ 1295.095814][ C1] syzkaller #0 Not tainted [ 1295.095821][ C1] -------------------------------- [ 1295.095824][ C1] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 1295.095830][ C1] syz.5.10905/5364 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 1295.095844][ C1] ffffffff8c313578 ((console_sem).lock){-.-.}-{2:2}, at: down_trylock+0x1c/0xa0 [ 1295.095876][ C1] {INITIAL USE} state was registered at: [ 1295.095881][ C1] irq event stamp: 1158 [ 1295.095886][ C1] hardirqs last enabled at (1157): [] syscall_enter_from_user_mode+0x21/0x70 [ 1295.095905][ C1] hardirqs last disabled at (1158): [] exc_debug+0x6e/0x130 [ 1295.095920][ C1] softirqs last enabled at (1140): [] l2tp_ip_open+0x13c/0x190 [ 1295.095939][ C1] softirqs last disabled at (1138): [] l2tp_ip_open+0x71/0x190 [ 1295.095957][ C1] [ 1295.095957][ C1] other info that might help us debug this: [ 1295.095961][ C1] Possible unsafe locking scenario: [ 1295.095961][ C1] [ 1295.095965][ C1] CPU0 [ 1295.095967][ C1] ---- [ 1295.095970][ C1] lock((console_sem).lock); [ 1295.095978][ C1] [ 1295.095980][ C1] lock((console_sem).lock); [ 1295.095988][ C1] [ 1295.095988][ C1] *** DEADLOCK *** [ 1295.095988][ C1] [ 1295.095991][ C1] no locks held by syz.5.10905/5364. [ 1295.095997][ C1] [ 1295.095997][ C1] stack backtrace: [ 1295.096000][ C1] CPU: 1 PID: 5364 Comm: syz.5.10905 Not tainted syzkaller #0 [ 1295.096012][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1295.096019][ C1] Call Trace: [ 1295.096023][ C1] <#DB> [ 1295.096028][ C1] dump_stack_lvl+0x188/0x250 [ 1295.096047][ C1] ? show_regs_print_info+0x20/0x20 [ 1295.096069][ C1] ? print_usage_bug+0x42a/0x690 [ 1295.096082][ C1] ? verify_lock_unused+0x18/0x140 [ 1295.096102][ C1] lock_acquire+0x2c3/0x400 [ 1295.096126][ C1] ? down_trylock+0x1c/0xa0 [ 1295.096143][ C1] ? read_lock_is_recursive+0x10/0x10 [ 1295.096165][ C1] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 1295.096185][ C1] _raw_spin_lock_irqsave+0xb0/0x100 [ 1295.096198][ C1] ? down_trylock+0x1c/0xa0 [ 1295.096213][ C1] ? _raw_spin_lock+0x40/0x40 [ 1295.096226][ C1] ? verify_lock_unused+0x18/0x140 [ 1295.096249][ C1] down_trylock+0x1c/0xa0 [ 1295.096266][ C1] __down_trylock_console_sem+0xd4/0x1f0 [ 1295.096281][ C1] ? is_console_locked+0x5/0x10 [ 1295.096293][ C1] ? panic+0x37b/0x810 [ 1295.096307][ C1] ? console_trylock+0x70/0x70 [ 1295.096321][ C1] ? __lock_acquire+0x7d10/0x7d10 [ 1295.096338][ C1] ? give_up_console+0x20/0x20 [ 1295.096360][ C1] console_unblank+0x28/0x180 [ 1295.096374][ C1] panic+0x37b/0x810 [ 1295.096394][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 1295.096418][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 1295.096435][ C1] __warn+0x248/0x2b0 [ 1295.096450][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 1295.096467][ C1] report_bug+0x1b7/0x2e0 [ 1295.096488][ C1] handle_bug+0x3a/0x70 [ 1295.096501][ C1] exc_invalid_op+0x16/0x40 [ 1295.096515][ C1] asm_exc_invalid_op+0x16/0x20 [ 1295.096527][ C1] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 1295.096543][ C1] Code: 24 45 31 f6 31 ff 89 de e8 5d 94 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 e0 90 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 1295.096555][ C1] RSP: 0018:fffffe000005d8f8 EFLAGS: 00010006 [ 1295.096565][ C1] RAX: ffffffff81a09160 RBX: 0000000000000008 RCX: ffff88802a6fd940 [ 1295.096575][ C1] RDX: 0000000000110000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1295.096584][ C1] RBP: 0000000000000000 R08: ffff88802a6fd947 R09: 1ffff110054dfb28 [ 1295.096594][ C1] R10: dffffc0000000000 R11: ffffed10054dfb29 R12: ffff88802a6ff0c8 [ 1295.096604][ C1] R13: 00007ffffffff000 R14: fffffe000005d968 R15: 0000000020000000 [ 1295.096621][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 1295.096641][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 1295.096659][ C1] bpf_probe_read_compat+0xdd/0x170 [ 1295.096679][ C1] bpf_prog_63d51858d7cca270+0x3d/0x288 [ 1295.096692][ C1] bpf_overflow_handler+0x3fd/0x4a0 [ 1295.096713][ C1] ? perf_event_switch_output+0x730/0x730 [ 1295.096733][ C1] ? trace_call_bpf+0x515/0x5b0 [ 1295.096750][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 1295.096768][ C1] __perf_event_overflow+0x364/0x530 [ 1295.096787][ C1] perf_swevent_event+0x4ad/0x530 [ 1295.096806][ C1] perf_bp_event+0x276/0x320 [ 1295.096822][ C1] ? perf_trace_lock_acquire+0x340/0x3e0 [ 1295.096839][ C1] ? perf_event_free_bpf_prog+0x110/0x110 [ 1295.096891][ C1] ? rcu_lock_acquire+0x9/0x30 [ 1295.096907][ C1] ? read_lock_is_recursive+0x10/0x10 [ 1295.096929][ C1] hw_breakpoint_exceptions_notify+0x152/0x470 [ 1295.096947][ C1] atomic_notifier_call_chain+0x15d/0x280 [ 1295.096966][ C1] notify_die+0x141/0x1a0 [ 1295.096983][ C1] ? srcu_init_notifier_head+0x90/0x90 [ 1295.097019][ C1] ? exc_debug+0x6e/0x130 [ 1295.097032][ C1] ? trace_hardirqs_off_finish+0x57/0x1f0 [ 1295.097048][ C1] notify_debug+0x20/0x30 [ 1295.097061][ C1] exc_debug+0xcf/0x130 [ 1295.097076][ C1] asm_exc_debug+0x1a/0x40 [ 1295.097086][ C1] RIP: 0010:copy_user_generic_unrolled+0x89/0xc0 [ 1295.097100][ C1] Code: 38 4c 89 47 20 4c 89 4f 28 4c 89 57 30 4c 89 5f 38 48 8d 76 40 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 <4c> 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a [ 1295.097110][ C1] RSP: 0018:ffffc9000364fa60 EFLAGS: 00040202 [ 1295.097119][ C1] RAX: ffffffff83e3cf01 RBX: 0000000000000008 RCX: 0000000000000001 [ 1295.097132][ C1] RDX: 0000000000000000 RSI: 0000200000000300 RDI: ffffc9000364fc40 [ 1295.097140][ C1] RBP: 0000000000000000 R08: 0000000000000002 R09: 1ffff920006c9f88 [ 1295.097148][ C1] R10: dffffc0000000000 R11: fffff520006c9f89 R12: 00007ffffffff000 [ 1295.097158][ C1] R13: 0000200000000308 R14: ffffc9000364fc40 R15: 0000200000000300 [ 1295.097172][ C1] ? _copy_from_user+0x71/0x170 [ 1295.097189][ C1] [ 1295.097192][ C1] [ 1295.097196][ C1] _copy_from_user+0xfa/0x170 [ 1295.097229][ C1] __copy_msghdr_from_user+0x48a/0x630 [ 1295.097244][ C1] ? verify_lock_unused+0x140/0x140 [ 1295.097262][ C1] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 1295.097288][ C1] ___sys_sendmsg+0x19a/0x2e0 [ 1295.097309][ C1] ? __sys_sendmsg+0x2a0/0x2a0 [ 1295.097332][ C1] ? percpu_counter_add_batch+0x13b/0x160 [ 1295.097366][ C1] __se_sys_sendmsg+0x1af/0x290 [ 1295.097382][ C1] ? __x64_sys_sendmsg+0x80/0x80 [ 1295.097395][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1295.097419][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 1295.097436][ C1] do_syscall_64+0x4c/0xa0 [ 1295.097447][ C1] ? clear_bhb_loop+0x30/0x80 [ 1295.097458][ C1] ? clear_bhb_loop+0x30/0x80 [ 1295.097472][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1295.097484][ C1] RIP: 0033:0x7f256f16a799 [ 1295.097494][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1295.097504][ C1] RSP: 002b:00007f256d3c4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1295.097515][ C1] RAX: ffffffffffffffda RBX: 00007f256f3e3fa0 RCX: 00007f256f16a799 [ 1295.097525][ C1] RDX: 0900000000000000 RSI: 0000200000000500 RDI: 0000000000000005 [ 1295.097533][ C1] RBP: 00007f256f200bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1295.097541][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1295.097548][ C1] R13: 00007f256f3e4038 R14: 00007f256f3e3fa0 R15: 00007ffcbcf84c98 [ 1295.097569][ C1]