last executing test programs: 26m47.018015464s ago: executing program 1 (id=3688): perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0xecc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffd}}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) close(r0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) recvmsg$unix(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000800)=""/111, 0x6f}], 0x1}, 0x40012040) perf_event_open(0x0, 0x0, 0x9, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x80, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0xfc, 0x6, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x800000000000002, 0x1}, 0x2008, 0x401, 0x0, 0x0, 0x4, 0x0, 0x7, 0x0, 0x0, 0x0, 0xa5c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xb0000}, 0x805, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000005c0)=r4, 0x12) r7 = openat$cgroup_ro(r5, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000040)=0x1, 0x12) socketpair(0x1, 0x1, 0x0, &(0x7f0000000540)) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) 26m45.770912553s ago: executing program 1 (id=3690): perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x20000000000000}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x27) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000680)=@base={0xa, 0x16, 0xb4, 0x3}, 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000006b11"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5}, 0x94) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 26m44.720556289s ago: executing program 1 (id=3694): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0xb00000000000000, &(0x7f0000004080)=@base={0x8, 0x4, 0x4, 0xbf26, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3000000, 0x4}, 0x50) socketpair(0x1e, 0x1, 0x0, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, 0x0) 26m44.008710868s ago: executing program 1 (id=3701): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000380), 0x8) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f00000004c0)="e97742535e8b287fe3856295b753", 0x0, 0x1004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003400)={0x10, 0x2, &(0x7f0000000500)=ANY=[@ANYBLOB="850000000e0000009500000000000000c4268fe6ef44203e"], &(0x7f0000003240)='GPL\x00'}, 0xc01) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0xf, 0x4, 0x8, 0x1}, 0x37) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xf, &(0x7f00000016c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='syzkaller\x00'}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r7, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r8, &(0x7f0000000240)={0x0, 0xfffffffffffffd8e, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x80) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg(r8, &(0x7f0000000600)={&(0x7f0000000540)=@rc, 0x80, 0x0, 0x0, &(0x7f0000000740)=ANY=[], 0xa0}, 0x8000004) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000340)=ANY=[@ANYRES32=r4, @ANYRES32=r6, @ANYBLOB="0500000000"], 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r4}, 0x4) 26m42.349041756s ago: executing program 4 (id=3708): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x308) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'macsec0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000080)) 26m42.282296707s ago: executing program 1 (id=3709): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r0, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r1, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) r4 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r3}, 0x8) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r2, r0, 0x0, r4}, 0x10) 26m42.008245014s ago: executing program 4 (id=3711): r0 = gettid() r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018350000022000000000000000000000850000002b00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r3, &(0x7f0000000000), 0x2a979d) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x11, 0x2c, 0xa3, 0xfa, 0x0, 0xe, 0xb02a0, 0x4, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x7fffffff, 0x4, @perf_config_ext={0x6, 0x6}, 0x100000, 0x5, 0x3, 0x8, 0xe, 0x8, 0x8, 0x0, 0x10000, 0x0, 0x2ca74d41}, r0, 0xa, r2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r4 = perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x2) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48) ioctl$TUNSETSTEERINGEBPF(r5, 0x800454e0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40042409, 0x1) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x3, 0x0, 0xfe, 0x0, 0x3ff, 0x162a2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000000, 0x40}, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000b40)={0x2, 0x80, 0xf2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1702, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x1, @perf_config_ext={0x0, 0x2}, 0x240, 0x80000000002, 0x1, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x200ffd, 0x0, 0xb3}, 0x0, 0x1, r4, 0x0) openat$cgroup_ro(r5, &(0x7f0000000780)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x10, 0x3, 0x0, 0x0, 0xb, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffe52}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') 26m41.529957804s ago: executing program 1 (id=3713): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000240), 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r2}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r3}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x5, &(0x7f0000000340)=ANY=[@ANYRES16=r1], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x7f, 0x0, 0x0, 0x7602, 0x7f, 0x80120, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x8, 0x5, 0x200, 0x2, 0x3, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x5) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 26m38.858320421s ago: executing program 4 (id=3717): syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) 26m37.712642763s ago: executing program 4 (id=3723): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002240)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xf920, 0x0, 0x0, 0x0, 0x0, 0x13e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711232000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 26m37.321749188s ago: executing program 4 (id=3724): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x9549, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x9, 0x5}, 0x8a1, 0x404, 0x0, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYRES8=r0], 0x0}, 0x94) socketpair(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x8010e000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2002}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0xc884}, 0x0, 0x0, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0x9) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="09200000000000000000000000a9e67f56bd481f5e00000008000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000940), &(0x7f0000000200), 0xa7c, 0xffffffffffffffff, 0x0, 0xfffe}, 0x38) 26m36.081320486s ago: executing program 4 (id=3728): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) close(0xffffffffffffffff) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{}, 0x0, &(0x7f00000003c0)='%pI4 \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x0, 0x0, 0x0, 0x7, 0xf4, &(0x7f0000000640)=""/244, 0x40f00, 0x54, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x4, 0xc, 0xb, 0xffffffe9}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10400c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0900000015000000080000004000"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61680, 0x20, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 26m26.479128144s ago: executing program 32 (id=3713): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000240), 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r2}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r3}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x5, &(0x7f0000000340)=ANY=[@ANYRES16=r1], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x7f, 0x0, 0x0, 0x7602, 0x7f, 0x80120, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x8, 0x5, 0x200, 0x2, 0x3, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x5) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 26m20.858630706s ago: executing program 33 (id=3728): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) close(0xffffffffffffffff) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{}, 0x0, &(0x7f00000003c0)='%pI4 \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x0, 0x0, 0x0, 0x7, 0xf4, &(0x7f0000000640)=""/244, 0x40f00, 0x54, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x4, 0xc, 0xb, 0xffffffe9}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10400c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0900000015000000080000004000"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61680, 0x20, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 26m2.44520868s ago: executing program 0 (id=3787): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x80, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x7d}]}, 0x0, 0x1000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x85, 0x1, 0x0, 0x0, 0x0, 0x2, 0x20022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x9, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, 0x0, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00'}, 0x94) 26m1.824311784s ago: executing program 0 (id=3789): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070250000000000fbffffff1af8ff00000000bfa100000000000007010000f8ffffffb70100000000000000030000870000008500000007000000850000009e00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x140, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) 26m0.318332976s ago: executing program 0 (id=3799): r0 = perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x1, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f0000000400)=ANY=[@ANYBLOB="180000008f000000000000000b00000018110000", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf0900000000000055090100000000009500000000000000bd0afeff00000000d500f4ff0100030018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010000006500000006000000bf91000000000000b702000003000000850000002a000000b7000000"], &(0x7f0000000080)='GPL\x00', 0x7, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0x2f}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002080)={&(0x7f0000001ec0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x9, 0x2, 0x0, 0x4, 0x1, 0x1, [{0x7, 0x2, 0x7}, {0x5, 0x4, 0x3}]}]}}, 0x0, 0x3e, 0x0, 0x1}, 0x28) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x71, 0x5, 0x8, 0x8, 0x0, 0x1f, 0x40444, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x1}, 0xb06, 0x3, 0x8, 0x1, 0x7f, 0x800, 0x5, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(0x3) 25m59.204400243s ago: executing program 0 (id=3793): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x8002, 0x7}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r2, 0x0, 0x0}, 0x20) 25m58.435273322s ago: executing program 0 (id=3794): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x400200, 0x0) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x0) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000080)) r2 = perf_event_open(&(0x7f0000000800)={0x1, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x7ca7ee9c3aa57886, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x3}, 0x0, 0xff7dffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0xe, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x4, @perf_bp={0x0, 0x9}, 0x0, 0xb, 0x8000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89a0, &(0x7f0000000080)) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="000000000d000000020000000500000000000000", @ANYRES32, @ANYBLOB="01f000"/20, @ANYRES32=0x0, @ANYRES32=0xffffffffffffffff], 0x50) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89a2, &(0x7f0000000080)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=0xffffffffffffffff, 0x4, 0x0, 0x9, &(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) openat$cgroup(0xffffffffffffffff, &(0x7f0000000300)='syz1\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x1, 0x12) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES16=r8, @ANYRES32, @ANYRES32, @ANYBLOB="c3fc874692cbf7937aba200f00000000000000002e5f0b0ccd6d745ae578d100000000000000b5c334a4354500b615", @ANYBLOB, @ANYRESHEX=r8, @ANYRESDEC=r6, @ANYRES64=r2], 0x20) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0x1c, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r9, @ANYRES16=r3, @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018110000", @ANYRES32=r9, @ANYBLOB="0001000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000185000000b7000000000000009500000000000000"], &(0x7f0000000bc0)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85100000010000009500000000000000850000007600000095"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0xa6, &(0x7f0000000340)=""/166}, 0x80) r11 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r10}, 0x8) close(r11) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000500)=ANY=[@ANYRES32=r9, @ANYRES32=r5, @ANYBLOB="0c0000001c20000000000000", @ANYRES32=r11, @ANYBLOB="fd8a7ae1fa291c9774c7c38babd3f631c7b222c1885f79c3ee553daca66a39b8d80cdb43b786a99a3fa3caa8ec2e1a04bfd84d1fdfefef2837cc261cbfc271b990d718289e280f0726eada27aa2789fa4a56e943cf31028bcc112dae2957ccf5a7bbe5688a71c725e5c018b53619bbddce3c69ca8d6549df4d947ecc3fd3faaacb0fe7d4d3bd27e8003fa286830873f2242e7a1decccf08082ef1cda0e532163a025f17997f7346b85ec6b92c9ad5ccf5ff5ec0d54f0a7c5b891a424278007110cfd5e5a239e17216d6a5a0422862f677e0e00000000000000", @ANYRES64=0x0], 0x20) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000200)=[{0x5c}, {0x6}]}) 25m57.285636584s ago: executing program 0 (id=3797): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x7, 0x0, 0x10, 0xfc, 0x0, 0x0, 0x200, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x6531aa1a, 0xeb}, 0x0, 0xc8, 0x9, 0x0, 0xffffffffffffffff, 0x5a, 0x0, 0x0, 0x8, 0x0, 0x200000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40) write$cgroup_subtree(r6, 0x0, 0x15) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r7, &(0x7f0000000280), 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) close(0xffffffffffffffff) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r8) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r10) r11 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r11, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r6, 0x4010744d, &(0x7f0000000180)) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@generic={0x0}, 0x18) close(r9) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) syz_clone(0x20083500, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 25m41.806786767s ago: executing program 34 (id=3797): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x7, 0x0, 0x10, 0xfc, 0x0, 0x0, 0x200, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x6531aa1a, 0xeb}, 0x0, 0xc8, 0x9, 0x0, 0xffffffffffffffff, 0x5a, 0x0, 0x0, 0x8, 0x0, 0x200000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40) write$cgroup_subtree(r6, 0x0, 0x15) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r7, &(0x7f0000000280), 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) close(0xffffffffffffffff) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r8) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r10) r11 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r11, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r6, 0x4010744d, &(0x7f0000000180)) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@generic={0x0}, 0x18) close(r9) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) syz_clone(0x20083500, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 4.659403251s ago: executing program 2 (id=10637): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%ps \x00'}, 0x20) r1 = socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffff00, 0x3}, 0x0, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRES32=0x1, @ANYBLOB='\x00'/10, @ANYRES16=r0, @ANYRES64=r1, @ANYBLOB="2c3438e71c184559f2449f4ed22073c5c85dc3e04e29ca4b4d4bad2157619e1fe260f2c2ff3741c81af5365362a99f8ce716630cb178249a1302de01e9cceaca7bf2fb4a672f582b3fb07f0bb42186e7f316c6faa510fbca2ebb455d5eb9513cf1c6d137a18b1a48e01658c8d1170978d37464490d6f73e39690bedbda3f19efe79417e07879e74798e51ad44853e6"], 0x48) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815001b000605142603600e12080005007a010401a800160020e0034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup/syz1\x00', 0x200002, 0x0) r4 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000040)=@in6={0xa, 0x4e23, 0xd, @local, 0x7}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="f1", 0x1}], 0x1}, 0x40040) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff229, 0x1, @perf_config_ext={0x80000001, 0x1}, 0x8041, 0x7, 0x0, 0x0, 0x0, 0x7, 0x200, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d000a847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={r0}, 0x4) r6 = socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x28, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000380)=':-\x00') sendmsg$inet(r6, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) close(r6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1004}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x5}, @initr0, @exit, @alu={0x4, 0x0, 0x4, 0x3, 0xf}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) 4.495871448s ago: executing program 7 (id=10638): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x300c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x406}, 0x20) r0 = socket$kcm(0x2b, 0x1, 0x0) close(r0) r1 = bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, 0x0, 0x0) close(r2) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4008804) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000036c0)={{}, &(0x7f0000000000), &(0x7f0000000300)=r1}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000037c0)=ANY=[], 0x50) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 4.495153939s ago: executing program 6 (id=10639): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x21, &(0x7f0000000140)=[{&(0x7f00000004c0)="d8000000190081154e81f782db4cb904021d0800fd02fe02e8fe50a10a000548258848000c600e41b0000900ac00080325000000040015000a00ff150048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x21, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000dad17156", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b703000000000000a500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000b500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb9040220080406037c09e8fe55a10a0015400600142603600e122f00160006000400a8000600200003400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) socket$kcm(0x21, 0x2, 0x2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r5, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="03000016e8eefa38c9dbee000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) perf_event_open$cgroup(&(0x7f00000000c0)={0x2, 0x80, 0x15, 0x1, 0x0, 0xff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x1081, 0x5, 0x8, 0x0, 0x8, 0x7, 0xffff, 0x0, 0x579, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) r7 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r7, 0x29, 0x14, &(0x7f0000000100), 0x120) setsockopt$sock_attach_bpf(r7, 0x29, 0x15, &(0x7f00000000c0), 0xb9) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$kcm(0x2, 0x6, 0x0) setsockopt$sock_attach_bpf(r9, 0x1, 0xf, &(0x7f0000000000), 0x4) sendmsg$inet(r9, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) openat$cgroup(r1, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000002b00)={r8, 0x20, &(0x7f0000002ac0)={0x0, 0x0, 0x0, &(0x7f0000002a00)=""/181, 0xb5}}, 0x10) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000480)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000500010004000600eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 4.179905421s ago: executing program 7 (id=10642): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x10000}, 0x50) (fail_nth: 15) 4.102192174s ago: executing program 2 (id=10644): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xb, 0x6, 0x0, 0x0, 0x0, 0x40000000000, 0x24010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1a2d, 0x0, 0x800004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4}, 0x0, 0x5, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x9, 0x0, &(0x7f0000000040)="ded6e0966ec1cf6ba4", 0x0, 0x0, 0x3}, 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB], 0xfe33) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0xfe33) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb1850, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x23, &(0x7f0000000040), 0xf7) socket$kcm(0x2, 0x1, 0x84) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$sock(r3, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000500)="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", 0xfd0}, {0x0}], 0x2, &(0x7f0000001680)=[@mark={{0x14, 0x1, 0x24, 0xc}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0xd}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @mark={{0x14, 0x1, 0x24, 0xb3}}, @timestamping={{0x14}}], 0x90}, 0x40000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r4, 0x4) syz_clone(0x630c0700, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0x2ee0}], 0x13, 0x0, 0x0, 0x10000000}, 0x12cd) close(0x3) 3.765822291s ago: executing program 6 (id=10645): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe33) r2 = socket$kcm(0x1e, 0x4, 0x0) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0, 0x4}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xe70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x4) socket$kcm(0x1e, 0x4, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, 0x0, 0x2, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="2e0000002a00818a04fb7fec598f866b29924a6f130000005e14060800000000000000000f0000000280a71802dd", 0x2e}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000000)={r2}) write$cgroup_devices(r5, &(0x7f0000000280)=ANY=[@ANYBLOB='b *:4\trwr'], 0xa) 3.429867487s ago: executing program 7 (id=10646): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe33) r2 = socket$kcm(0x1e, 0x4, 0x0) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0, 0x4}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xe70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x4) socket$kcm(0x1e, 0x4, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f00000002c0)='devices.allow\x00', 0x2, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="2e0000002a00818a04fb7fec598f866b29924a6f130000005e14060800000000000000000f0000000280a71802dd", 0x2e}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000000)={r2}) write$cgroup_devices(r5, &(0x7f0000000280)=ANY=[@ANYBLOB='b *:4\trwr'], 0xa) 3.427124408s ago: executing program 5 (id=10647): r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x2b, &(0x7f0000002640), 0x42) r1 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r1, 0x29, 0x21, &(0x7f0000000200), 0x4) sendmsg$kcm(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0xc4140) r2 = bpf$OBJ_GET_MAP(0x7, 0x0, 0xffffffffffffff28) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0xa}, 0x10c002, 0x2000ac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x8, 0x2, 0x0, 0x0, 0x0, 0x6149, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x1}, 0x0, 0xa, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x4000000, r3, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000380), &(0x7f0000000000), 0x1, 0x700}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000f40)='./cgroup.net/syz0\x00', 0x200002, 0x0) recvmsg(r1, &(0x7f00000016c0)={&(0x7f00000012c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000001580)=[{&(0x7f0000001340)=""/12, 0xc}, {&(0x7f0000001380)=""/249, 0xf9}, {&(0x7f0000001480)=""/15, 0xf}, {&(0x7f00000014c0)=""/145, 0x91}], 0x4, &(0x7f00000015c0)=""/221, 0xdd}, 0x40010142) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000004000000080000003d00000041000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000400"/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000180), 0x1003, r4}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r4, &(0x7f0000000080), &(0x7f0000000540)=""/210}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000f00)={r2, 0x58, &(0x7f0000000e80)}, 0x10) 3.319337485s ago: executing program 3 (id=10648): r0 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r0, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x19, &(0x7f0000000000)=r4, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[], 0x48) r5 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e6026, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x9}, 0x402, 0x1000, 0x0, 0x1, 0x7, 0x400000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000080)='cpu\t&-&\t\t\xb65\t\x00\x00\x7f\xff\xff\xff\x9f\x14\xd3\x8bl\x92:\xf2\xff\x1c\x1d\xa8\xc5Qa\xd0\xf6\x14\x98\x04\xaa\f\xf9\xeapI\x15\xf2L\x93\t\x86\xe8\xd8\x04\x14\xd8L\xaa\xcfM\x9e\xc8\b\xbd\x9d\x99\xc9\x02P\x99Ow\xdb0\xa1utw\xae\x99\x1e\x91\xd7\x83\x18\xa6\xbfp\xe5\x9f\xc9\xe4[{\xff\x90\xde\x1c\t\xbc[\x89\x16\xa5\x12\x14\xce\xaf!\x06\x13\'\x9a\x1eH\xfc\x93\xde\x83\xfb\xc9\xf5x\xefc\xf0\x87E\xca\xa6BRi\xb0U\xc1&W(N\xe06rT\xe0\xe2\xe9\xb9\xaf@\x11-c(2a\xb7B9B\x1f\x12\xf9,/\x8f\x92\x00\x11}\xbc:D\xdb\x92\x80=mel\xea\xdd\xa0\xe9d\t\xa6\x19\x84.hWe\x9at\xbc\xc3\xceA\xb4\xca8\xed\xb9^e\xf2`\xa4\xf7E\xc9\x01\xf7\x00\xf3\xadnn\x9b\x17\x98\xe4Q\x17<\x92\xb2\xa9%\xe7\x83\xf7\xef\xc9\f8R\xa0\x00C\xa0x\x91~XAs*{\xda\xb0BC\xad\xf6\xca\xe72\xb32h\xe1\xb0\xf3-\xd0W\x04\xf6\xfe\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\bq\a\x00\x00\x00h\x1dMD\x99#\xe2\x98{\xeb\x88\r`t6\xdd\xc1\xa1\xf7\xaa\xe7\xf2\t\x13~\xf28\xd2\x0ey\xa4\xd9\x1ds\xa6\xaa\xfa\xd1T\xf3\xda\x85\x18n?\xb1\xf21G\x12\x17\xe6\xa9\x8f\x16\x7f\x00\x00\x00\x04&]K\xef@n_\xb5@\x94\x90\x84\xdf\x97d`9\xe3[\x97\xcd\xcbQ8\xbd|v\x8c') bpf$ITER_CREATE(0x21, 0x0, 0x0) 3.054645089s ago: executing program 6 (id=10649): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876cff0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a70d251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080) socket$kcm(0x10, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x10}, 0x18) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[], &(0x7f00000000c0)='GPL\x00'}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0xf, 0x4, 0x8, 0xb}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r2, r1, 0x7}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000002c0)}, {&(0x7f0000000900)="2b7fda52f2552225d60758357472ea4fa951bef523a1fff18ff103ba0f47b005b3f73c0e5c1e125078643267aa7a9f5b38ac3263697ff040e2152427f257fc5cc382527db37a1a11d00c243b853f7f3887d52fe13d4515755ae48521740c820ec773f280f3a231a959f9c233b9ce44912cc8fe69dafc854b55e33bf7becd43d09311dd47dba542d515e609ccb48fd1cfacbfc6fc27664c56a24e67d58fd4bced39d12e800eae5b55ea68c65e612d8d44929ff196d42b92a4e287cf1c7e1a5d11d5c7c0", 0xc3}], 0x2}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfec1}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000780)="7910", &(0x7f0000001a40), 0x1007, r3}, 0x38) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000600)={0x0, &(0x7f00000006c0)=""/145, &(0x7f0000000480), &(0x7f0000000780), 0x4, r3}, 0x38) 3.015016926s ago: executing program 5 (id=10650): r0 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r0, 0x110, 0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x4) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) (async, rerun: 32) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00'], 0xfe33) (async, rerun: 32) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async, rerun: 32) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) (async, rerun: 64) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00'}) (rerun: 64) r3 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) (async) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000"], 0x0}, 0x94) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001f80)={r2, 0xe0, &(0x7f0000001e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000001cc0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000001d00)=[0x0], &(0x7f0000001d40)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8d, &(0x7f0000001d80)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001dc0), &(0x7f0000001e00), 0x8, 0x38, 0x8, 0x8, &(0x7f0000001e40)}}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001fc0)='io.stat\x00', 0x0, 0x0) (async) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000020c0)=@o_path={&(0x7f0000002080)='./file0\x00', 0x0, 0x0, r1}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002140)={0x6, 0x19, &(0x7f0000000280)=@raw=[@ringbuf_query, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, @tail_call, @jmp={0x5, 0x1, 0x8, 0x4, 0x8, 0x80, 0xfffffffffffffff0}, @cb_func={0x18, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa}}], &(0x7f0000000380)='GPL\x00', 0x10, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0x42, '\x00', r5, 0x25, r6, 0x8, &(0x7f0000002000)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000002040)={0x0, 0xf, 0x1, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000002100)=[r3, r7], 0x0, 0x10, 0x7ff}, 0x94) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018edff00000000000c0000ff0b"], 0x0, 0x26, 0x0, 0x4}, 0x28) (async, rerun: 32) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89a0, &(0x7f0000000080)) (async, rerun: 32) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89a2, &(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) recvmsg$unix(r9, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r10, &(0x7f0000000000)=ANY=[], 0xfdef) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="00000000000000002702000014005800b7030000000000008500000059000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000c80)='syzkaller\x00'}, 0x94) 2.959495196s ago: executing program 3 (id=10651): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x4481, 0x4, 0x0, 0x0, 0x3, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x746f2f51, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001c00810ce00f80ecdb4cb9f207c804a01f000000400007fb0a0002000a0ada1b40d80300000000000000", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 2.719015835s ago: executing program 5 (id=10652): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x300c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x406}, 0x20) r0 = socket$kcm(0x2b, 0x1, 0x0) close(r0) r1 = bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, 0x0, 0x0) close(r2) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4008804) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000036c0)={{}, &(0x7f0000000000), &(0x7f0000000300)=r1}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000037c0)=ANY=[], 0x50) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.629917481s ago: executing program 3 (id=10653): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x18, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x10000}, 0x50) 2.553110933s ago: executing program 2 (id=10654): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%ps \x00'}, 0x20) r1 = socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffff00, 0x3}, 0x0, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRES32=0x1, @ANYBLOB='\x00'/10, @ANYRES16=r0, @ANYRES64=r1, @ANYBLOB="2c3438e71c184559f2449f4ed22073c5c85dc3e04e29ca4b4d4bad2157619e1fe260f2c2ff3741c81af5365362a99f8ce716630cb178249a1302de01e9cceaca7bf2fb4a672f582b3fb07f0bb42186e7f316c6faa510fbca2ebb455d5eb9513cf1c6d137a18b1a48e01658c8d1170978d37464490d6f73e39690bedbda3f19efe79417e07879e74798e51ad44853e6"], 0x48) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815001b000605142603600e12080005007a010401a800160020e0034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup/syz1\x00', 0x200002, 0x0) r4 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000040)=@in6={0xa, 0x4e23, 0xd, @local, 0x7}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="f1", 0x1}], 0x1}, 0x40040) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff229, 0x1, @perf_config_ext={0x80000001, 0x1}, 0x8041, 0x7, 0x0, 0x0, 0x0, 0x7, 0x200, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d000a847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={r0}, 0x4) r6 = socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x28, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000380)=':-\x00') sendmsg$inet(r6, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) close(r6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1004}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x5}, @initr0, @exit, @alu={0x4, 0x0, 0x4, 0x3, 0xf}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) 2.419562156s ago: executing program 3 (id=10655): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x21, &(0x7f0000000140)=[{&(0x7f00000004c0)="d8000000190081154e81f782db4cb904021d0800fd02fe02e8fe50a10a000548258848000c600e41b0000900ac00080325000000040015000a00ff150048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x21, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000dad17156", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b703000000000000a500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000b500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb9040220080406037c09e8fe55a10a0015400600142603600e122f00160006000400a8000600200003400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) socket$kcm(0x21, 0x2, 0x2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r5, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="03000016e8eefa38c9dbee000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) perf_event_open$cgroup(&(0x7f00000000c0)={0x2, 0x80, 0x15, 0x1, 0x0, 0xff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x1081, 0x5, 0x8, 0x0, 0x8, 0x7, 0xffff, 0x0, 0x579, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) r7 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r7, 0x29, 0x14, &(0x7f0000000100), 0x120) setsockopt$sock_attach_bpf(r7, 0x29, 0x15, &(0x7f00000000c0), 0xb9) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$kcm(0x2, 0x6, 0x0) setsockopt$sock_attach_bpf(r9, 0x1, 0xf, &(0x7f0000000000), 0x4) sendmsg$inet(r9, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) openat$cgroup(r1, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000002b00)={r8, 0x20, &(0x7f0000002ac0)={0x0, 0x0, 0x0, &(0x7f0000002a00)=""/181, 0xb5}}, 0x10) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000480)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000500010004000600eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 2.418904046s ago: executing program 6 (id=10656): socket$kcm(0x10, 0x2, 0x0) (async) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x1}, 0x201, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) (async) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0600000004000000ad3700005c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00FLE'], 0x50) (async, rerun: 64) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) r2 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000880)={0x0, r0}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000800ecff040000000000000700000000005f09512e005f00"], &(0x7f00000007c0)=""/91, 0x2c, 0x5b, 0x1, 0x2, 0x10000, @value=r2}, 0x28) (async, rerun: 32) r3 = socket$kcm(0xf, 0x3, 0x2) (rerun: 32) sendmsg$inet(r3, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async, rerun: 32) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00'], 0x5) (async) r7 = openat$cgroup_int(r4, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) (async) write$cgroup_subtree(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="2c63707520af34ec9e32d04b83f2d906afe17811b80dea7f2b"], 0x5) write$cgroup_int(r7, 0x0, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x13, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000006b8a00fe00000000c7080000010000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb7020000080000fa18230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b704000008000000850000004a00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_int(r8, &(0x7f0000000080)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x281}], 0x1}, 0x0) (async) write$cgroup_subtree(r9, &(0x7f00000002c0)=ANY=[], 0x8) 2.371785694s ago: executing program 5 (id=10657): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000040)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000003c0)='%pS \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0xe, 0x48000000, &(0x7f0000000300)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f}, 0x50) 2.291605537s ago: executing program 7 (id=10658): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) (fail_nth: 18) 2.118628966s ago: executing program 6 (id=10659): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe33) r2 = socket$kcm(0x1e, 0x4, 0x0) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0, 0x4}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xe70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x4) socket$kcm(0x1e, 0x4, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, 0x0, 0x2, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="2e0000002a00818a04fb7fec598f866b29924a6f130000005e14060800000000000000000f0000000280a71802dd", 0x2e}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000000)={r2}) write$cgroup_devices(r5, &(0x7f0000000280)=ANY=[@ANYBLOB='b *:4\trwr'], 0xa) 1.727508571s ago: executing program 5 (id=10660): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%ps \x00'}, 0x20) r1 = socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffff00, 0x3}, 0x0, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRES32=0x1, @ANYBLOB='\x00'/10, @ANYRES16=r0, @ANYRES64=r1, @ANYBLOB="2c3438e71c184559f2449f4ed22073c5c85dc3e04e29ca4b4d4bad2157619e1fe260f2c2ff3741c81af5365362a99f8ce716630cb178249a1302de01e9cceaca7bf2fb4a672f582b3fb07f0bb42186e7f316c6faa510fbca2ebb455d5eb9513cf1c6d137a18b1a48e01658c8d1170978d37464490d6f73e39690bedbda3f19efe79417e07879e74798e51ad44853e6"], 0x48) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815001b000605142603600e12080005007a010401a800160020e0034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup/syz1\x00', 0x200002, 0x0) r4 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000040)=@in6={0xa, 0x4e23, 0xd, @local, 0x7}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="f1", 0x1}], 0x1}, 0x40040) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff229, 0x1, @perf_config_ext={0x80000001, 0x1}, 0x8041, 0x7, 0x0, 0x0, 0x0, 0x7, 0x200, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d000a847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={r0}, 0x4) r6 = socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x28, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000380)=':-\x00') sendmsg$inet(r7, &(0x7f0000001000)={&(0x7f0000000280)={0x2, 0x4e23, @private=0xa010100}, 0x10, 0x0}, 0x40) sendmsg$inet(r6, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1004}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x5}, @initr0, @exit, @alu={0x4, 0x0, 0x4, 0x3, 0xf}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) 1.639159276s ago: executing program 7 (id=10661): r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x2b, &(0x7f0000002640), 0x42) r1 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r1, 0x29, 0x21, &(0x7f0000000200), 0x4) sendmsg$kcm(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0xc4140) r2 = bpf$OBJ_GET_MAP(0x7, 0x0, 0xffffffffffffff28) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0xa}, 0x10c002, 0x2000ac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x8, 0x2, 0x0, 0x0, 0x0, 0x6149, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x1}, 0x0, 0xa, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x4000000, r3, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000380), &(0x7f0000000000), 0x1, 0x700}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000f40)='./cgroup.net/syz0\x00', 0x200002, 0x0) recvmsg(r1, &(0x7f00000016c0)={&(0x7f00000012c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000001580)=[{&(0x7f0000001340)=""/12, 0xc}, {&(0x7f0000001380)=""/249, 0xf9}, {&(0x7f0000001480)=""/15, 0xf}, {&(0x7f00000014c0)=""/145, 0x91}], 0x4, &(0x7f00000015c0)=""/221, 0xdd}, 0x40010142) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000004000000080000003d00000041000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000400"/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000180), 0x1003, r4}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r4, &(0x7f0000000080), &(0x7f0000000540)=""/210}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000f00)={r2, 0x58, &(0x7f0000000e80)}, 0x10) 1.638505316s ago: executing program 3 (id=10662): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000001180)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc, 0x0, 0x4, 0x0, 0xfffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000"], 0x0, 0x2000000}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x15}, 0x80) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0035b69fdb90d984"], 0x0, 0x26}, 0x28) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2000}, 0x48) 1.599859863s ago: executing program 2 (id=10663): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x12, 0x5, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x1}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000380)={r0, &(0x7f0000000280), 0x0}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000fbff9500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES16=0x0], 0x48) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x33, 0x43a1b976, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, 0x0, &(0x7f00000002c0)}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x10c002, 0xac5d, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@rights={{0x14, 0x1, 0x1, [r5]}}], 0x18, 0x1}, 0x24048014) close(r3) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000740)={r2, 0x0, 0x0}, 0x20) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) r7 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000001a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x1, 0xbd, &(0x7f000000cf3d)=""/189, 0x40f00}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='}\\\xd7\'\x00') setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0x11, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)={@map=r2, 0xffffffffffffffff, 0x2d, 0x8, r6}, 0x20) r8 = perf_event_open$cgroup(&(0x7f0000000200)={0x4, 0x80, 0xb, 0x5, 0x3, 0xa8, 0x0, 0xa07b, 0x3c402, 0xd, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x40, 0x4, @perf_config_ext={0x8507, 0x6}, 0x20, 0x5, 0x2000, 0x2, 0x3ff, 0x436, 0x5, 0x0, 0x8, 0x0, 0x3}, 0xffffffffffffffff, 0x10, r1, 0x8) perf_event_open$cgroup(&(0x7f0000000100)={0x2, 0x80, 0x4, 0x84, 0x36, 0xfb, 0x0, 0xefde, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x40000000, 0x2, @perf_bp={&(0x7f0000000080), 0x1}, 0x2800, 0xffffffffffffffff, 0x8, 0x7, 0xffffffffffffffff, 0xd, 0xf, 0x0, 0xc}, r6, 0xd, r8, 0x4) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) 1.3738468s ago: executing program 6 (id=10664): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xb, 0x6, 0x0, 0x0, 0x0, 0x40000000000, 0x24010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1a2d, 0x0, 0x800004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4}, 0x0, 0x5, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x9, 0x0, &(0x7f0000000040)="ded6e0966ec1cf6ba4", 0x0, 0x0, 0x3}, 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB], 0xfe33) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0xfe33) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb1850, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x23, &(0x7f0000000040), 0xf7) socket$kcm(0x2, 0x1, 0x84) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$sock(r3, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000500)="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", 0xfd0}, {0x0}], 0x2, &(0x7f0000001680)=[@mark={{0x14, 0x1, 0x24, 0xc}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0xd}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @mark={{0x14, 0x1, 0x24, 0xb3}}, @timestamping={{0x14}}], 0x90}, 0x40000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r4, 0x4) syz_clone(0x630c0700, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0x2ee0}], 0x13, 0x0, 0x0, 0x10000000}, 0x12cd) close(0x3) 1.333030747s ago: executing program 7 (id=10665): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x4481, 0x4, 0x0, 0x0, 0x3, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x746f2f51, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001c00810ce00f80ecdb4cb9f207c804a01f000000400007fb0a0002000a0ada1b40d80300000000000000", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 1.211670108s ago: executing program 3 (id=10666): r0 = socket$kcm(0xa, 0x1, 0x0) socketpair(0x1, 0x3, 0x8, &(0x7f0000000100)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe5}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_subtree(r2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="378303076844268cb89e14f00806", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r4 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x1, 0x4100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x1, @perf_config_ext={0x100000000, 0xeb8}, 0x21, 0x0, 0x0, 0x0, 0x3, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xa, 0x4, 0x208, 0xb}, 0x50) syz_clone(0x111, 0x0, 0x9, 0x0, 0x0, 0x0) r5 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000010010000010000000000000000000000100000000000"], 0x28}, 0xfc40) r6 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x28}, 0xfc40) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r7 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000001080)=ANY=[@ANYRESDEC], 0x31) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') recvmsg$kcm(r6, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000182284dda9fb0d0ad80fa46168be1a4550e37920adf77c5529fc5f39ac594e1f6f1ae29ce82e673ae1ab922d71480ce8ffa2e9a968a69897b252d74357750dd02d81c449adf7bc5fdfc1b453b48d484c9bcc99f8f0a9b3a923200e784ce8883c7be1590a12e4759442", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xeedb, 0x0, 0x0, 0x0, 0xd3}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='syzkaller\x00', 0x3a214ff7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r9, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f90624fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000440)="a6", 0xffffff58}], 0x1}, 0x40001) 985.919836ms ago: executing program 2 (id=10667): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x300c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x406}, 0x20) r0 = socket$kcm(0x2b, 0x1, 0x0) close(r0) r1 = bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, 0x0, 0x0) close(r2) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4008804) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000036c0)={{}, &(0x7f0000000000), &(0x7f0000000300)=r1}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000037c0)=ANY=[], 0x50) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 959.3174ms ago: executing program 5 (id=10668): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile]}}, &(0x7f0000000580)=""/245, 0x26, 0xf5, 0x1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0x1, &(0x7f0000000000)=@raw=[@ldst], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r1}, 0x80) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x3) r2 = syz_clone(0x10400, &(0x7f0000000580)="8555451985e93ae51af05b6faec3bc8aa826dc25ea7622f4b639d1aec6e11b4509d48399a1eccb34f145a531180e02dae7b3b76502d3429b5311c8aeda564a0304188c520b9116aba382e63fad54ba2a4357bc3c54decb76be04b191009485f9eb3ccc97333eca2879d8ac8ce1272cf6879c6ef81da9ec7709e9aa0a3a95daedd999a92404dc9d92d3a0befa8f4e93a829a3d37d7d5ef06d945e84aac44c3bcd2b4b85afa8fdbed3d060f2ac21406b19df1e8ecc", 0xb4, 0x0, &(0x7f00000006c0), &(0x7f0000000700)="04d978da36bb2c23a54ea29983340e62175bf3fbb155019f2d08f30d06fd1e1c6cbece4588724071") r3 = socket$kcm(0x10, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000002c0)=r4, 0x4) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) syz_open_procfs$namespace(r2, &(0x7f0000000840)='ns/mnt\x00') r5 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x104010, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0xf}, 0x6303, 0xe8, 0x0, 0x4, 0x0, 0x7, 0xffff, 0x0, 0x0, 0x0, 0x8001}, 0xffffffffffffffff, 0x0, r5, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x3, 0xad, 0x9, 0x2, 0x0, 0x9d, 0x800, 0x5, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x8820, 0x40000, 0x3, 0x7, 0x0, 0x10000, 0xa}, r2, 0x9, r5, 0x9) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000980)="1400000036000b63717abc0d0ed898000500cf77", 0x14}], 0x1}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00'}, 0x90) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r7, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x1, &(0x7f0000000080)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0xb, '\x00', r8}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r8, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000540), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x18000000000002a0, 0x1f, 0x0, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb080600017f", 0x0, 0x104, 0x6000000000000000, 0x10c, 0x0, &(0x7f0000000400)="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"}, 0x50) 0s ago: executing program 2 (id=10669): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe33) r2 = socket$kcm(0x1e, 0x4, 0x0) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0, 0x4}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xe70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x4) socket$kcm(0x1e, 0x4, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f00000002c0)='devices.allow\x00', 0x2, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="2e0000002a00818a04fb7fec598f866b29924a6f130000005e14060800000000000000000f0000000280a71802dd", 0x2e}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000000)={r2}) write$cgroup_devices(r5, &(0x7f0000000280)=ANY=[@ANYBLOB='b *:4\trwr'], 0xa) kernel console output (not intermixed with test programs): 2368.617277][ T4926] ? __x64_sys_sendmsg+0x80/0x80 [ 2368.622311][ T4926] ? lockdep_hardirqs_on+0x94/0x140 [ 2368.627665][ T4926] do_syscall_64+0x4c/0xa0 [ 2368.632234][ T4926] ? clear_bhb_loop+0x60/0xb0 [ 2368.637089][ T4926] ? clear_bhb_loop+0x60/0xb0 [ 2368.642100][ T4926] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2368.648151][ T4926] RIP: 0033:0x7f2db3b9c819 [ 2368.652724][ T4926] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2368.673009][ T4926] RSP: 002b:00007f2db49c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2368.682372][ T4926] RAX: ffffffffffffffda RBX: 00007f2db3e16090 RCX: 00007f2db3b9c819 [ 2368.691024][ T4926] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000009 [ 2368.699179][ T4926] RBP: 00007f2db49c7090 R08: 0000000000000000 R09: 0000000000000000 [ 2368.707379][ T4926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2368.715511][ T4926] R13: 00007f2db3e16128 R14: 00007f2db3e16090 R15: 00007ffce975b438 [ 2368.723738][ T4926] [ 2371.237018][ T4948] netlink: 132 bytes leftover after parsing attributes in process `syz.6.9685'. [ 2372.282076][ T4948] netlink: 65039 bytes leftover after parsing attributes in process `syz.6.9685'. [ 2372.504786][ T4966] netlink: 'syz.6.9690': attribute type 21 has an invalid length. [ 2372.513176][ T4966] netlink: 'syz.6.9690': attribute type 1 has an invalid length. [ 2372.522627][ T4966] netlink: 144 bytes leftover after parsing attributes in process `syz.6.9690'. [ 2372.835920][ T4971] FAULT_INJECTION: forcing a failure. [ 2372.835920][ T4971] name failslab, interval 1, probability 0, space 0, times 0 [ 2372.884410][ T4971] CPU: 1 PID: 4971 Comm: syz.2.9691 Not tainted syzkaller #0 [ 2372.891900][ T4971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2372.902019][ T4971] Call Trace: [ 2372.905425][ T4971] [ 2372.908423][ T4971] dump_stack_lvl+0x188/0x24e [ 2372.913181][ T4971] ? sctp_sendmsg+0x15b0/0x2940 [ 2372.918119][ T4971] ? ___sys_sendmsg+0x2a2/0x360 [ 2372.923064][ T4971] ? show_regs_print_info+0x12/0x12 [ 2372.928348][ T4971] ? load_image+0x400/0x400 [ 2372.932940][ T4971] should_fail_ex+0x399/0x4d0 [ 2372.938211][ T4971] should_failslab+0x5/0x20 [ 2372.942811][ T4971] slab_pre_alloc_hook+0x59/0x310 [ 2372.947930][ T4971] ? sctp_add_bind_addr+0x89/0x350 [ 2372.953263][ T4971] __kmem_cache_alloc_node+0x4f/0x260 [ 2372.959093][ T4971] ? sctp_add_bind_addr+0x89/0x350 [ 2372.964314][ T4971] kmalloc_trace+0x26/0xe0 [ 2372.968811][ T4971] sctp_add_bind_addr+0x89/0x350 [ 2372.974119][ T4971] sctp_copy_local_addr_list+0x311/0x4e0 [ 2372.980217][ T4971] ? sctp_copy_local_addr_list+0xa1/0x4e0 [ 2372.986191][ T4971] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 2372.992515][ T4971] ? sctp_v4_is_any+0x31/0x50 [ 2372.997271][ T4971] ? sctp_copy_one_addr+0x93/0x660 [ 2373.002541][ T4971] sctp_bind_addr_copy+0xaf/0x3c0 [ 2373.007731][ T4971] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 2373.014310][ T4971] sctp_connect_new_asoc+0x2f5/0x6a0 [ 2373.019772][ T4971] ? __sctp_connect+0xd80/0xd80 [ 2373.024960][ T4971] ? __local_bh_enable_ip+0x136/0x1c0 [ 2373.030792][ T4971] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 2373.036684][ T4971] ? security_sctp_bind_connect+0x85/0xb0 [ 2373.042580][ T4971] sctp_sendmsg+0x15b0/0x2940 [ 2373.047535][ T4971] ? aa_sk_perm+0x791/0x950 [ 2373.052494][ T4971] ? sctp_getsockopt+0x8a0/0x8a0 [ 2373.057529][ T4971] ? __might_fault+0xa6/0x120 [ 2373.062461][ T4971] ? aa_af_perm+0x340/0x340 [ 2373.067837][ T4971] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 2373.074459][ T4971] ? inet_sendmsg+0xe5/0x2f0 [ 2373.079395][ T4971] ? inet_send_prepare+0x260/0x260 [ 2373.084758][ T4971] ____sys_sendmsg+0x5be/0x970 [ 2373.089731][ T4971] ? __sys_sendmsg_sock+0x30/0x30 [ 2373.095017][ T4971] ? __import_iovec+0x315/0x500 [ 2373.100244][ T4971] ? import_iovec+0x6f/0xa0 [ 2373.104824][ T4971] ___sys_sendmsg+0x2a2/0x360 [ 2373.109599][ T4971] ? __sys_sendmsg+0x290/0x290 [ 2373.114459][ T4971] ? __lock_acquire+0x7d10/0x7d10 [ 2373.119938][ T4971] __se_sys_sendmsg+0x1bb/0x2a0 [ 2373.124980][ T4971] ? __x64_sys_sendmsg+0x80/0x80 [ 2373.130403][ T4971] ? lockdep_hardirqs_on+0x94/0x140 [ 2373.135760][ T4971] do_syscall_64+0x4c/0xa0 [ 2373.140481][ T4971] ? clear_bhb_loop+0x60/0xb0 [ 2373.145457][ T4971] ? clear_bhb_loop+0x60/0xb0 [ 2373.150469][ T4971] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2373.156523][ T4971] RIP: 0033:0x7fbdbbd9c819 [ 2373.161004][ T4971] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2373.181477][ T4971] RSP: 002b:00007fbdbcd38028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2373.190222][ T4971] RAX: ffffffffffffffda RBX: 00007fbdbc015fa0 RCX: 00007fbdbbd9c819 [ 2373.198265][ T4971] RDX: 0000000004000044 RSI: 00002000000003c0 RDI: 0000000000000003 [ 2373.206415][ T4971] RBP: 00007fbdbcd38090 R08: 0000000000000000 R09: 0000000000000000 [ 2373.214808][ T4971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2373.223196][ T4971] R13: 00007fbdbc016038 R14: 00007fbdbc015fa0 R15: 00007ffe2a84b488 [ 2373.231359][ T4971] [ 2375.172544][ T5019] netlink: 'syz.5.9706': attribute type 2 has an invalid length. [ 2375.251647][ T5019] device 1 entered promiscuous mode [ 2375.622490][ T5030] netlink: 'syz.2.9709': attribute type 10 has an invalid length. [ 2377.869972][ T5074] netlink: 'syz.6.9727': attribute type 10 has an invalid length. [ 2378.377714][ T5079] delete_channel: no stack [ 2379.051431][ T5098] netlink: 126588 bytes leftover after parsing attributes in process `syz.5.9735'. [ 2380.922320][ T5126] netlink: 'syz.7.9745': attribute type 10 has an invalid length. [ 2381.390048][ T5136] netlink: 126632 bytes leftover after parsing attributes in process `syz.2.9750'. [ 2381.487356][ T5136] netlink: 8192 bytes leftover after parsing attributes in process `syz.2.9750'. [ 2382.844277][ T3007] Bluetooth: hci0: command 0x0406 tx timeout [ 2384.293925][ T5173] netlink: 'syz.7.9758': attribute type 10 has an invalid length. [ 2384.476482][ T5176] netlink: 'syz.3.9760': attribute type 2 has an invalid length. [ 2384.613181][ T5176] device 0 entered promiscuous mode [ 2384.837048][ T5187] Â: renamed from pim6reg1 [ 2385.065060][ T5197] netlink: 156 bytes leftover after parsing attributes in process `syz.3.9768'. [ 2385.204414][ T5200] netlink: 60 bytes leftover after parsing attributes in process `syz.7.9767'. [ 2385.954230][ T5200] device caif0 entered promiscuous mode [ 2385.977337][ T5196] netlink: 14 bytes leftover after parsing attributes in process `syz.7.9767'. [ 2387.105268][ T5236] FAULT_INJECTION: forcing a failure. [ 2387.105268][ T5236] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2387.109469][ T5233] netlink: 'syz.6.9774': attribute type 10 has an invalid length. [ 2387.141487][ T5236] CPU: 0 PID: 5236 Comm: syz.2.9777 Not tainted syzkaller #0 [ 2387.149232][ T5236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2387.159637][ T5236] Call Trace: [ 2387.163053][ T5236] [ 2387.166028][ T5236] dump_stack_lvl+0x188/0x24e [ 2387.171026][ T5236] ? show_regs_print_info+0x12/0x12 [ 2387.176300][ T5236] ? load_image+0x400/0x400 [ 2387.180874][ T5236] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2387.187113][ T5236] should_fail_ex+0x399/0x4d0 [ 2387.191942][ T5236] copyin+0x1b/0x120 [ 2387.196079][ T5236] _copy_from_iter+0x559/0x1130 [ 2387.201000][ T5236] ? copyout_mc+0x110/0x110 [ 2387.205668][ T5236] ? __check_object_size+0x500/0xa40 [ 2387.211113][ T5236] skb_copy_datagram_from_iter+0xef/0x690 [ 2387.217343][ T5236] ? skb_put+0x117/0x210 [ 2387.221830][ T5236] packet_sendmsg+0x3727/0x4e60 [ 2387.226845][ T5236] ? __might_sleep+0xd0/0xd0 [ 2387.231786][ T5236] ? irqentry_enter+0x33/0x50 [ 2387.237074][ T5236] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2387.243328][ T5236] ? aa_sk_perm+0x81f/0x950 [ 2387.248166][ T5236] ? rcu_is_watching+0x11/0xa0 [ 2387.253094][ T5236] ? packet_getsockopt+0x9a0/0x9a0 [ 2387.258414][ T5236] ? aa_sock_msg_perm+0x94/0x150 [ 2387.263679][ T5236] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2387.269061][ T5236] ? security_socket_sendmsg+0x7c/0xa0 [ 2387.274672][ T5236] ? packet_getsockopt+0x9a0/0x9a0 [ 2387.279841][ T5236] ____sys_sendmsg+0x5be/0x970 [ 2387.284693][ T5236] ? __sys_sendmsg_sock+0x30/0x30 [ 2387.290061][ T5236] ? __import_iovec+0x315/0x500 [ 2387.294975][ T5236] ? import_iovec+0x6f/0xa0 [ 2387.299819][ T5236] ___sys_sendmsg+0x2a2/0x360 [ 2387.304784][ T5236] ? __sys_sendmsg+0x290/0x290 [ 2387.309722][ T5236] ? irqentry_enter+0x33/0x50 [ 2387.314500][ T5236] __se_sys_sendmsg+0x1bb/0x2a0 [ 2387.319544][ T5236] ? __x64_sys_sendmsg+0x80/0x80 [ 2387.324668][ T5236] ? syscall_enter_from_user_mode+0x3f/0x80 [ 2387.330820][ T5236] do_syscall_64+0x4c/0xa0 [ 2387.335308][ T5236] ? clear_bhb_loop+0x60/0xb0 [ 2387.340406][ T5236] ? clear_bhb_loop+0x60/0xb0 [ 2387.345526][ T5236] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2387.351576][ T5236] RIP: 0033:0x7fbdbbd9c819 [ 2387.356172][ T5236] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2387.376019][ T5236] RSP: 002b:00007fbdbcd38028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2387.384504][ T5236] RAX: ffffffffffffffda RBX: 00007fbdbc015fa0 RCX: 00007fbdbbd9c819 [ 2387.392636][ T5236] RDX: 0000000024000008 RSI: 00002000000000c0 RDI: 0000000000000005 [ 2387.400685][ T5236] RBP: 00007fbdbcd38090 R08: 0000000000000000 R09: 0000000000000000 [ 2387.409112][ T5236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2387.417411][ T5236] R13: 00007fbdbc016038 R14: 00007fbdbc015fa0 R15: 00007ffe2a84b488 [ 2387.425670][ T5236] [ 2387.502808][ T5239] netlink: 60 bytes leftover after parsing attributes in process `syz.7.9778'. [ 2387.530596][ T5239] netlink: 60 bytes leftover after parsing attributes in process `syz.7.9778'. [ 2387.571458][ T5244] netlink: 60 bytes leftover after parsing attributes in process `syz.7.9778'. [ 2387.867915][ T5248] netlink: 60 bytes leftover after parsing attributes in process `syz.6.9782'. [ 2387.914769][ T5248] device caif0 entered promiscuous mode [ 2388.009380][ T5248] netlink: 14 bytes leftover after parsing attributes in process `syz.6.9782'. [ 2388.378502][ T5249] Â: renamed from pim6reg1 [ 2395.298567][ T5280] netlink: 'syz.3.9792': attribute type 39 has an invalid length. [ 2395.311181][ T5289] device syzkaller0 entered promiscuous mode [ 2396.783222][ T5304] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9798'. [ 2396.842722][ T5304] device caif0 entered promiscuous mode [ 2396.854482][ T5308] netlink: 14 bytes leftover after parsing attributes in process `syz.3.9798'. [ 2397.206228][ T5315] Â: renamed from pim6reg1 [ 2399.241628][ T5342] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9809'. [ 2400.387597][ T5342] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9809'. [ 2400.433533][ T5345] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9809'. [ 2400.731849][ T5348] netlink: 'syz.2.9812': attribute type 2 has an invalid length. [ 2400.767401][ T5348] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.9812'. [ 2401.340666][ T5356] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9815'. [ 2401.429732][ T5356] device caif0 entered promiscuous mode [ 2401.476519][ T5359] netlink: 14 bytes leftover after parsing attributes in process `syz.2.9815'. [ 2401.837975][ T5380] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.9822'. [ 2401.910719][ T5379] netlink: 'syz.7.9824': attribute type 10 has an invalid length. [ 2402.102955][ T5381] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9822'. [ 2402.272815][ T5387] netlink: 'syz.3.9826': attribute type 10 has an invalid length. [ 2402.645199][ T5391] delete_channel: no stack [ 2402.949627][ T5397] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.9830'. [ 2403.397473][ T5420] netlink: 'syz.3.9837': attribute type 10 has an invalid length. [ 2403.608487][ T5429] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.9840'. [ 2403.839986][ T5429] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9840'. [ 2403.917827][ T5435] netlink: 'syz.3.9852': attribute type 10 has an invalid length. [ 2404.010571][ T5437] netlink: 'syz.6.9841': attribute type 10 has an invalid length. [ 2404.355721][ T5446] netlink: 'syz.7.9843': attribute type 3 has an invalid length. [ 2404.363826][ T5446] netlink: 13435 bytes leftover after parsing attributes in process `syz.7.9843'. [ 2404.468907][ T5444] netlink: 76 bytes leftover after parsing attributes in process `syz.5.9845'. [ 2406.368538][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 2406.375192][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 2408.125317][ T5471] netlink: 'syz.7.9856': attribute type 10 has an invalid length. [ 2408.465068][ T5483] netlink: 'syz.5.9858': attribute type 7 has an invalid length. [ 2408.514530][ T5483] netlink: 'syz.5.9858': attribute type 1 has an invalid length. [ 2408.522684][ T5483] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.9858'. [ 2408.916754][ T5484] pimreg: tun_chr_ioctl cmd 1074812118 [ 2409.162762][ T5489] delete_channel: no stack [ 2409.333598][ T5499] netlink: 4595 bytes leftover after parsing attributes in process `syz.6.9863'. [ 2409.468355][ T5505] netlink: 'syz.2.9864': attribute type 10 has an invalid length. [ 2409.511630][ T5505] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9864'. [ 2409.582388][ T5505] bridge0: port 4(ipvlan1) entered blocking state [ 2409.625467][ T5505] bridge0: port 4(ipvlan1) entered disabled state [ 2409.678590][ T5505] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 2409.814557][ T5503] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9863'. [ 2411.242858][ T5530] netlink: 'syz.2.9874': attribute type 39 has an invalid length. [ 2411.321301][ T5537] FAULT_INJECTION: forcing a failure. [ 2411.321301][ T5537] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2411.397136][ T5537] CPU: 0 PID: 5537 Comm: syz.3.9875 Not tainted syzkaller #0 [ 2411.404983][ T5537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2411.415274][ T5537] Call Trace: [ 2411.418639][ T5537] [ 2411.421625][ T5537] dump_stack_lvl+0x188/0x24e [ 2411.426397][ T5537] ? show_regs_print_info+0x12/0x12 [ 2411.432040][ T5537] ? load_image+0x400/0x400 [ 2411.436803][ T5537] ? __lock_acquire+0x7d10/0x7d10 [ 2411.442082][ T5537] should_fail_ex+0x399/0x4d0 [ 2411.446915][ T5537] _copy_from_user+0x2c/0x170 [ 2411.451942][ T5537] iovec_from_user+0x143/0x360 [ 2411.457235][ T5537] __import_iovec+0x6d/0x500 [ 2411.461988][ T5537] import_iovec+0x6f/0xa0 [ 2411.466406][ T5537] ___sys_sendmsg+0x252/0x360 [ 2411.471290][ T5537] ? __sys_sendmsg+0x290/0x290 [ 2411.476362][ T5537] ? __lock_acquire+0x7d10/0x7d10 [ 2411.481617][ T5537] __se_sys_sendmsg+0x1bb/0x2a0 [ 2411.486737][ T5537] ? __x64_sys_sendmsg+0x80/0x80 [ 2411.491880][ T5537] ? lockdep_hardirqs_on+0x94/0x140 [ 2411.497437][ T5537] do_syscall_64+0x4c/0xa0 [ 2411.501946][ T5537] ? clear_bhb_loop+0x60/0xb0 [ 2411.506704][ T5537] ? clear_bhb_loop+0x60/0xb0 [ 2411.511695][ T5537] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2411.517782][ T5537] RIP: 0033:0x7facdfd9c819 [ 2411.522520][ T5537] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2411.542643][ T5537] RSP: 002b:00007face0bcd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2411.551573][ T5537] RAX: ffffffffffffffda RBX: 00007face0016090 RCX: 00007facdfd9c819 [ 2411.559870][ T5537] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 2411.568111][ T5537] RBP: 00007face0bcd090 R08: 0000000000000000 R09: 0000000000000000 [ 2411.576211][ T5537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2411.584516][ T5537] R13: 00007face0016128 R14: 00007face0016090 R15: 00007ffed6dbc298 [ 2411.593106][ T5537] [ 2411.708210][ T5539] netlink: 132 bytes leftover after parsing attributes in process `syz.6.9877'. [ 2411.837124][ T5542] netlink: 'syz.3.9878': attribute type 10 has an invalid length. [ 2411.877419][ T5542] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9878'. [ 2411.909964][ T5542] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 2412.077248][ T5546] netlink: 'syz.6.9880': attribute type 39 has an invalid length. [ 2412.383495][ T5551] netlink: 'syz.2.9882': attribute type 10 has an invalid length. [ 2413.722234][ T5565] netlink: 'syz.3.9888': attribute type 10 has an invalid length. [ 2413.995980][ T5575] netlink: 'syz.6.9892': attribute type 10 has an invalid length. [ 2414.073642][ T5575] netlink: 40 bytes leftover after parsing attributes in process `syz.6.9892'. [ 2414.169855][ T5575] bridge0: port 3(ipvlan1) entered blocking state [ 2414.214909][ T5575] bridge0: port 3(ipvlan1) entered disabled state [ 2414.285205][ T5575] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 2414.867334][T28120] device syz_tun left promiscuous mode [ 2414.873392][T28120] GPL: port 1(syz_tun) entered disabled state [ 2414.886332][ T4276] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2414.910070][ T4276] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2414.920413][ T4276] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2414.931098][ T4276] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2414.955015][ T4276] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2414.962804][ T4276] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2415.151902][T17620] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2415.343495][ T5609] netlink: 'syz.6.9903': attribute type 11 has an invalid length. [ 2415.362424][ T5609] netlink: 'syz.6.9903': attribute type 11 has an invalid length. [ 2415.383250][ T5609] netlink: 193500 bytes leftover after parsing attributes in process `syz.6.9903'. [ 2416.264448][ T5616] netlink: 'syz.6.9904': attribute type 10 has an invalid length. [ 2416.333479][T17620] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2416.493113][T17620] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2417.004466][ T3007] Bluetooth: hci3: command 0x0409 tx timeout [ 2418.694319][ T3007] Bluetooth: hci2: command 0x0406 tx timeout [ 2418.719896][T17620] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2419.090397][ T4276] Bluetooth: hci3: command 0x041b tx timeout [ 2419.185173][ T5657] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.9912'. [ 2419.230941][ T5595] chnl_net:caif_netlink_parms(): no params data found [ 2419.279517][ T5659] netlink: 'syz.6.9916': attribute type 10 has an invalid length. [ 2419.372341][T17620] device 0 left promiscuous mode [ 2419.629836][ T5595] bridge0: port 1(bridge_slave_0) entered blocking state [ 2419.671378][ T5595] bridge0: port 1(bridge_slave_0) entered disabled state [ 2419.726718][ T5595] device bridge_slave_0 entered promiscuous mode [ 2419.791139][ T5595] bridge0: port 2(bridge_slave_1) entered blocking state [ 2419.827066][ T5595] bridge0: port 2(bridge_slave_1) entered disabled state [ 2420.028670][ T5595] device bridge_slave_1 entered promiscuous mode [ 2420.358243][ T5595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2420.386449][ T5595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2420.483409][ T5595] team0: Port device team_slave_0 added [ 2420.493341][ T5595] team0: Port device team_slave_1 added [ 2420.525742][ T5595] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2420.541799][ T5595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2420.572307][ T5595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2420.593178][ T5595] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2420.601534][ T5595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2420.638379][ T5595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2420.942939][ T5595] device hsr_slave_0 entered promiscuous mode [ 2420.951163][ T5595] device hsr_slave_1 entered promiscuous mode [ 2420.959638][ T5595] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2420.984373][ T5595] Cannot create hsr debugfs directory [ 2420.990060][T17620] device 1 left promiscuous mode [ 2421.164674][ T4276] Bluetooth: hci3: command 0x040f tx timeout [ 2421.417459][ T5697] FAULT_INJECTION: forcing a failure. [ 2421.417459][ T5697] name failslab, interval 1, probability 0, space 0, times 0 [ 2421.462549][ T5697] CPU: 0 PID: 5697 Comm: syz.6.9923 Not tainted syzkaller #0 [ 2421.470023][ T5697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2421.480409][ T5697] Call Trace: [ 2421.483841][ T5697] [ 2421.486816][ T5697] dump_stack_lvl+0x188/0x24e [ 2421.491830][ T5697] ? show_regs_print_info+0x12/0x12 [ 2421.497271][ T5697] ? load_image+0x400/0x400 [ 2421.501839][ T5697] ? __lock_acquire+0x7d10/0x7d10 [ 2421.507013][ T5697] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2421.513412][ T5697] should_fail_ex+0x399/0x4d0 [ 2421.518151][ T5697] should_failslab+0x5/0x20 [ 2421.522891][ T5697] slab_pre_alloc_hook+0x59/0x310 [ 2421.528636][ T5697] kmem_cache_alloc+0x56/0x2f0 [ 2421.533564][ T5697] ? prepare_creds+0x3c/0x610 [ 2421.538528][ T5697] prepare_creds+0x3c/0x610 [ 2421.543277][ T5697] copy_creds+0x146/0xd50 [ 2421.547857][ T5697] copy_process+0x932/0x4030 [ 2421.552630][ T5697] ? idle_dummy+0x10/0x10 [ 2421.557040][ T5697] kernel_clone+0x24b/0x900 [ 2421.561699][ T5697] ? create_io_thread+0x170/0x170 [ 2421.566902][ T5697] __x64_sys_clone+0x1a7/0x220 [ 2421.571770][ T5697] ? __ia32_sys_vfork+0x140/0x140 [ 2421.576980][ T5697] ? lock_chain_count+0x20/0x20 [ 2421.581927][ T5697] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2421.588605][ T5697] ? lockdep_hardirqs_on+0x94/0x140 [ 2421.594227][ T5697] do_syscall_64+0x4c/0xa0 [ 2421.599601][ T5697] ? clear_bhb_loop+0x60/0xb0 [ 2421.604363][ T5697] ? clear_bhb_loop+0x60/0xb0 [ 2421.609204][ T5697] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2421.615175][ T5697] RIP: 0033:0x7f2db3b9c819 [ 2421.619749][ T5697] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2421.639851][ T5697] RSP: 002b:00007f2db49e7fd8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 2421.648697][ T5697] RAX: ffffffffffffffda RBX: 00007f2db3e15fa0 RCX: 00007f2db3b9c819 [ 2421.656869][ T5697] RDX: 0000200000000140 RSI: 0000000000000000 RDI: 0000000020346480 [ 2421.665087][ T5697] RBP: 00007f2db49e8090 R08: 0000000000000000 R09: 0000000000000000 [ 2421.673670][ T5697] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 2421.681875][ T5697] R13: 00007f2db3e16038 R14: 00007f2db3e15fa0 R15: 00007ffce975b438 [ 2421.690086][ T5697] [ 2422.306909][ T5713] netlink: 'syz.6.9928': attribute type 10 has an invalid length. [ 2422.344982][ T5713] netlink: 40 bytes leftover after parsing attributes in process `syz.6.9928'. [ 2422.398393][ T5713] bridge0: port 3(team0) entered blocking state [ 2422.435213][ T5713] bridge0: port 3(team0) entered disabled state [ 2422.501625][ T5713] device team0 entered promiscuous mode [ 2422.523648][ T5713] device team_slave_0 entered promiscuous mode [ 2422.552782][ T5713] device team_slave_1 entered promiscuous mode [ 2422.590900][ T5713] bridge0: port 3(team0) entered blocking state [ 2422.598524][ T5713] bridge0: port 3(team0) entered forwarding state [ 2422.722735][ T5713] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2422.843175][ T5715] netlink: 'syz.7.9929': attribute type 10 has an invalid length. [ 2423.244291][ T4276] Bluetooth: hci3: command 0x0419 tx timeout [ 2424.999920][ T5595] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2425.255742][ T5595] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2425.272454][ T5595] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2425.292820][ T5595] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2425.552651][ T5757] netlink: 'syz.3.9943': attribute type 10 has an invalid length. [ 2425.628688][T17620] device hsr_slave_0 left promiscuous mode [ 2425.650537][T17620] device hsr_slave_1 left promiscuous mode [ 2425.711739][T17620] device veth0_macvtap left promiscuous mode [ 2425.754736][T17620] device veth1_vlan left promiscuous mode [ 2425.760675][T17620] device veth0_vlan left promiscuous mode [ 2427.202727][T17620] team0 (unregistering): Port device geneve1 removed [ 2427.462462][T17620] team0 (unregistering): Port device macvlan0 removed [ 2427.900820][T17620] team0 (unregistering): Port device team_slave_1 removed [ 2427.986625][T17620] team0 (unregistering): Port device team_slave_0 removed [ 2428.049117][T17620] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2428.115919][T17620] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2428.503415][T17620] bond0 (unregistering): Released all slaves [ 2428.564445][ T5781] netlink: 'syz.7.9949': attribute type 39 has an invalid length. [ 2428.572684][ T5789] netlink: 14463 bytes leftover after parsing attributes in process `syz.6.9951'. [ 2428.585219][ T5790] netlink: 'syz.6.9951': attribute type 10 has an invalid length. [ 2428.599169][ T5790] device geneve0 entered promiscuous mode [ 2428.665924][ T5790] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 2428.965399][ T5595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2429.051748][ T5595] 8021q: adding VLAN 0 to HW filter on device team0 [ 2429.071732][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2429.097120][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2429.148290][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2429.186159][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2429.209226][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 2429.216917][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2429.272311][ T5802] netlink: 'syz.6.9954': attribute type 2 has an invalid length. [ 2429.312593][ T5802] netlink: 'syz.6.9954': attribute type 4 has an invalid length. [ 2429.353290][ T5802] netlink: 132 bytes leftover after parsing attributes in process `syz.6.9954'. [ 2429.420966][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2429.439519][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2429.483381][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2429.520181][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 2429.527652][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2429.575366][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2429.664833][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2429.701787][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2429.711401][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2429.756619][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2429.775872][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2429.805824][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2429.847832][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2429.868079][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2429.906291][ T5813] netlink: 'syz.6.9957': attribute type 10 has an invalid length. [ 2429.953662][ T5595] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2429.990921][ T5817] FAULT_INJECTION: forcing a failure. [ 2429.990921][ T5817] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2430.007409][ T5595] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2430.015865][ T5817] CPU: 1 PID: 5817 Comm: syz.3.9958 Not tainted syzkaller #0 [ 2430.023488][ T5817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2430.034214][ T5817] Call Trace: [ 2430.037657][ T5817] [ 2430.040722][ T5817] dump_stack_lvl+0x188/0x24e [ 2430.045899][ T5817] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2430.052095][ T5817] ? show_regs_print_info+0x12/0x12 [ 2430.057442][ T5817] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2430.064347][ T5817] ? dump_stack+0x5/0x12 [ 2430.068742][ T5817] should_fail_ex+0x399/0x4d0 [ 2430.073570][ T5817] _copy_from_user+0x2c/0x170 [ 2430.078512][ T5817] iovec_from_user+0x143/0x360 [ 2430.083508][ T5817] __import_iovec+0x6d/0x500 [ 2430.088239][ T5817] import_iovec+0x6f/0xa0 [ 2430.092794][ T5817] ___sys_sendmsg+0x252/0x360 [ 2430.097568][ T5817] ? __sys_sendmsg+0x290/0x290 [ 2430.102476][ T5817] ? perf_trace_preemptirq_template+0xa8/0x320 [ 2430.108941][ T5817] ? irqentry_enter+0x33/0x50 [ 2430.113777][ T5817] __se_sys_sendmsg+0x1bb/0x2a0 [ 2430.118763][ T5817] ? __x64_sys_sendmsg+0x80/0x80 [ 2430.123766][ T5817] do_syscall_64+0x4c/0xa0 [ 2430.128324][ T5817] ? clear_bhb_loop+0x60/0xb0 [ 2430.133234][ T5817] ? clear_bhb_loop+0x60/0xb0 [ 2430.138096][ T5817] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2430.144035][ T5817] RIP: 0033:0x7facdfd9c819 [ 2430.148501][ T5817] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2430.169048][ T5817] RSP: 002b:00007face0bee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2430.178290][ T5817] RAX: ffffffffffffffda RBX: 00007face0015fa0 RCX: 00007facdfd9c819 [ 2430.186584][ T5817] RDX: 0000000020040014 RSI: 0000200000000080 RDI: 0000000000000004 [ 2430.194591][ T5817] RBP: 00007face0bee090 R08: 0000000000000000 R09: 0000000000000000 [ 2430.202850][ T5817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2430.210942][ T5817] R13: 00007face0016038 R14: 00007face0015fa0 R15: 00007ffed6dbc298 [ 2430.219146][ T5817] [ 2430.255178][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2430.266063][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2430.305662][ T5811] netlink: 'syz.2.9956': attribute type 2 has an invalid length. [ 2430.377076][ T5811] netlink: 'syz.2.9956': attribute type 4 has an invalid length. [ 2430.394521][ T5811] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9956'. [ 2430.509136][ T5820] netlink: 65043 bytes leftover after parsing attributes in process `syz.7.9959'. [ 2430.808166][ T5831] FAULT_INJECTION: forcing a failure. [ 2430.808166][ T5831] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2430.872677][ T5831] CPU: 1 PID: 5831 Comm: syz.7.9962 Not tainted syzkaller #0 [ 2430.880141][ T5831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2430.890458][ T5831] Call Trace: [ 2430.893958][ T5831] [ 2430.896946][ T5831] dump_stack_lvl+0x188/0x24e [ 2430.901874][ T5831] ? show_regs_print_info+0x12/0x12 [ 2430.907155][ T5831] ? load_image+0x400/0x400 [ 2430.911748][ T5831] ? __lock_acquire+0x7d10/0x7d10 [ 2430.917208][ T5831] ? slab_post_alloc_hook+0x4b/0x480 [ 2430.922554][ T5831] should_fail_ex+0x399/0x4d0 [ 2430.927391][ T5831] prepare_alloc_pages+0x1e2/0x5f0 [ 2430.932757][ T5831] __alloc_pages+0x130/0x4f0 [ 2430.937943][ T5831] ? kasan_populate_vmalloc_pte+0xa4/0xf0 [ 2430.943986][ T5831] ? zone_statistics+0x170/0x170 [ 2430.949131][ T5831] ? __rwlock_init+0x140/0x140 [ 2430.954216][ T5831] ? do_raw_spin_unlock+0x11d/0x230 [ 2430.959822][ T5831] __get_free_pages+0x8/0x30 [ 2430.964480][ T5831] kasan_populate_vmalloc_pte+0x31/0xf0 [ 2430.970165][ T5831] ? __apply_to_page_range+0x977/0xd10 [ 2430.975695][ T5831] __apply_to_page_range+0x989/0xd10 [ 2430.981054][ T5831] ? kasan_populate_vmalloc+0x70/0x70 [ 2430.986496][ T5831] alloc_vmap_area+0x178f/0x18c0 [ 2430.991595][ T5831] ? vm_map_ram+0xab0/0xab0 [ 2430.996251][ T5831] ? rcu_is_watching+0x11/0xa0 [ 2431.001809][ T5831] __get_vm_area_node+0x158/0x330 [ 2431.007027][ T5831] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2431.013189][ T5831] __vmalloc_node_range+0x357/0x13b0 [ 2431.018807][ T5831] ? array_map_alloc+0x27c/0x6f0 [ 2431.023920][ T5831] ? ct_nmi_exit+0x145/0x1c0 [ 2431.028746][ T5831] ? ct_irq_exit_irqson+0x113/0x170 [ 2431.034793][ T5831] ? memset+0x1e/0x40 [ 2431.038926][ T5831] ? free_vm_area+0x50/0x50 [ 2431.043572][ T5831] ? apparmor_capable+0x12c/0x190 [ 2431.048660][ T5831] ? bpf_lsm_capable+0x5/0x10 [ 2431.053606][ T5831] ? security_capable+0x85/0xb0 [ 2431.058516][ T5831] bpf_map_area_alloc+0xd4/0xe0 [ 2431.063585][ T5831] ? array_map_alloc+0x27c/0x6f0 [ 2431.068841][ T5831] array_map_alloc+0x27c/0x6f0 [ 2431.073743][ T5831] prog_array_map_alloc+0x176/0x1f0 [ 2431.079067][ T5831] map_create+0x534/0x1000 [ 2431.083708][ T5831] ? bpf_lsm_bpf+0x5/0x10 [ 2431.088089][ T5831] __sys_bpf+0x38b/0x780 [ 2431.092745][ T5831] ? bpf_link_show_fdinfo+0x380/0x380 [ 2431.098263][ T5831] ? lock_chain_count+0x20/0x20 [ 2431.103602][ T5831] __x64_sys_bpf+0x78/0x90 [ 2431.108061][ T5831] do_syscall_64+0x4c/0xa0 [ 2431.112749][ T5831] ? clear_bhb_loop+0x60/0xb0 [ 2431.117761][ T5831] ? clear_bhb_loop+0x60/0xb0 [ 2431.122650][ T5831] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2431.129033][ T5831] RIP: 0033:0x7ff12839c819 [ 2431.133587][ T5831] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2431.153940][ T5831] RSP: 002b:00007ff129334028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2431.162773][ T5831] RAX: ffffffffffffffda RBX: 00007ff128615fa0 RCX: 00007ff12839c819 [ 2431.171394][ T5831] RDX: 0000000000000050 RSI: 0000200000000c40 RDI: 0000000000000000 [ 2431.179480][ T5831] RBP: 00007ff129334090 R08: 0000000000000000 R09: 0000000000000000 [ 2431.187659][ T5831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2431.196202][ T5831] R13: 00007ff128616038 R14: 00007ff128615fa0 R15: 00007ffd806d3668 [ 2431.204577][ T5831] [ 2431.470583][ T5836] netlink: 'syz.7.9963': attribute type 19 has an invalid length. [ 2431.485249][ T5836] netlink: 40 bytes leftover after parsing attributes in process `syz.7.9963'. [ 2431.537369][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2431.545946][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2431.560043][ T5595] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2432.001064][ T5848] FAULT_INJECTION: forcing a failure. [ 2432.001064][ T5848] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2432.056241][ T5846] netlink: 'syz.2.9965': attribute type 10 has an invalid length. [ 2432.088051][ T5848] CPU: 0 PID: 5848 Comm: syz.7.9967 Not tainted syzkaller #0 [ 2432.095839][ T5848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2432.106494][ T5848] Call Trace: [ 2432.109927][ T5848] [ 2432.112962][ T5848] dump_stack_lvl+0x188/0x24e [ 2432.117729][ T5848] ? show_regs_print_info+0x12/0x12 [ 2432.123190][ T5848] ? load_image+0x400/0x400 [ 2432.128134][ T5848] ? __lock_acquire+0x7d10/0x7d10 [ 2432.133620][ T5848] should_fail_ex+0x399/0x4d0 [ 2432.138867][ T5848] _copy_from_user+0x2c/0x170 [ 2432.143908][ T5848] iovec_from_user+0x143/0x360 [ 2432.149205][ T5848] __import_iovec+0x6d/0x500 [ 2432.154089][ T5848] import_iovec+0x6f/0xa0 [ 2432.159177][ T5848] ___sys_recvmsg+0x4b6/0x590 [ 2432.164215][ T5848] ? __sys_recvmsg+0x290/0x290 [ 2432.169162][ T5848] ? __fget_files+0x28/0x4b0 [ 2432.174084][ T5848] ? __fget_files+0x43d/0x4b0 [ 2432.178854][ T5848] __x64_sys_recvmsg+0x205/0x2e0 [ 2432.183923][ T5848] ? perf_trace_preemptirq_template+0x268/0x320 [ 2432.190524][ T5848] ? ___sys_recvmsg+0x590/0x590 [ 2432.195544][ T5848] ? lockdep_hardirqs_on+0x94/0x140 [ 2432.200905][ T5848] do_syscall_64+0x4c/0xa0 [ 2432.205680][ T5848] ? clear_bhb_loop+0x60/0xb0 [ 2432.210710][ T5848] ? clear_bhb_loop+0x60/0xb0 [ 2432.215639][ T5848] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2432.221772][ T5848] RIP: 0033:0x7ff12839c819 [ 2432.226415][ T5848] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2432.246526][ T5848] RSP: 002b:00007ff129334028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 2432.255111][ T5848] RAX: ffffffffffffffda RBX: 00007ff128615fa0 RCX: 00007ff12839c819 [ 2432.263497][ T5848] RDX: 0000000000000000 RSI: 0000200000000ac0 RDI: 0000000000000006 [ 2432.271707][ T5848] RBP: 00007ff129334090 R08: 0000000000000000 R09: 0000000000000000 [ 2432.279922][ T5848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2432.288161][ T5848] R13: 00007ff128616038 R14: 00007ff128615fa0 R15: 00007ffd806d3668 [ 2432.296660][ T5848] [ 2432.371270][ T5846] team0: Device veth1_macvtap failed to register rx_handler [ 2432.488192][ T5855] netlink: 'syz.3.9968': attribute type 6 has an invalid length. [ 2432.513893][ T5855] netlink: 164 bytes leftover after parsing attributes in process `syz.3.9968'. [ 2432.541094][ T5851] netlink: 'syz.7.9967': attribute type 10 has an invalid length. [ 2432.558165][ T5851] team0: Device veth1_macvtap failed to register rx_handler [ 2433.252978][T29041] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2433.286754][T29041] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2433.296559][ T5866] netlink: 'syz.7.9971': attribute type 10 has an invalid length. [ 2433.306620][ T5866] netlink: 40 bytes leftover after parsing attributes in process `syz.7.9971'. [ 2433.342240][ T5866] bridge0: port 3(team0) entered blocking state [ 2433.361687][ T5866] bridge0: port 3(team0) entered disabled state [ 2433.389225][ T5866] device team0 entered promiscuous mode [ 2433.398607][ T5869] netlink: 'syz.3.9972': attribute type 3 has an invalid length. [ 2433.414342][ T5866] device team_slave_0 entered promiscuous mode [ 2433.424684][ T5869] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.9972'. [ 2433.428046][ T5866] device team_slave_1 entered promiscuous mode [ 2433.456247][ T5866] device geneve1 entered promiscuous mode [ 2433.464006][ T5866] device netdevsim0 entered promiscuous mode [ 2433.554153][ T5866] bridge0: port 3(team0) entered blocking state [ 2433.565694][ T5866] bridge0: port 3(team0) entered forwarding state [ 2434.343078][T29040] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2434.367637][T29040] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2434.385731][T29040] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2434.417407][T29040] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2434.440498][ T5595] device veth0_vlan entered promiscuous mode [ 2434.491093][ T5595] device veth1_vlan entered promiscuous mode [ 2434.588782][T29041] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2434.608940][T29041] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2434.618875][T29041] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2434.726838][T29041] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2435.418556][ T5595] device veth0_macvtap entered promiscuous mode [ 2435.462929][ T5887] netlink: 'syz.2.9978': attribute type 4 has an invalid length. [ 2435.485704][ T5887] netlink: 168 bytes leftover after parsing attributes in process `syz.2.9978'. [ 2435.502858][ T5888] netlink: 'syz.2.9978': attribute type 25 has an invalid length. [ 2435.523310][ T5888] netlink: 'syz.2.9978': attribute type 29 has an invalid length. [ 2435.532635][ T5889] netlink: 5 bytes leftover after parsing attributes in process `syz.2.9978'. [ 2435.551734][T17620] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2435.586850][ T5595] device veth1_macvtap entered promiscuous mode [ 2435.705907][ T5595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2435.724003][ T5595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2435.735087][ T5595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2435.748051][ T5595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2435.763852][ T5595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2435.786763][ T5595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2435.797534][ T5595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2435.808481][ T5595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2435.821554][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2435.836777][ T5895] netlink: 'syz.7.9980': attribute type 10 has an invalid length. [ 2435.850491][T29041] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2435.860971][T29041] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2435.881151][ T5595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2435.902782][ T5595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2435.913575][ T5595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2435.930822][ T5595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2435.941049][ T5595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2435.954209][ T5595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2435.964647][ T5595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2435.975953][ T5595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2436.008249][ T5900] netlink: 'syz.2.9981': attribute type 11 has an invalid length. [ 2436.023009][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2436.033533][ T5900] netlink: 177608 bytes leftover after parsing attributes in process `syz.2.9981'. [ 2436.065481][T29040] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2436.067326][ T5897] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2436.087106][T29040] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2436.111909][ T5595] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2436.142556][ T5595] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2436.159218][ T5595] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2436.170379][ T5595] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2436.274523][ T5904] FAULT_INJECTION: forcing a failure. [ 2436.274523][ T5904] name failslab, interval 1, probability 0, space 0, times 0 [ 2436.310750][ T5904] CPU: 0 PID: 5904 Comm: syz.6.9983 Not tainted syzkaller #0 [ 2436.318315][ T5904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2436.328695][ T5904] Call Trace: [ 2436.332117][ T5904] [ 2436.335216][ T5904] dump_stack_lvl+0x188/0x24e [ 2436.340291][ T5904] ? verify_lock_unused+0x140/0x140 [ 2436.345669][ T5904] ? show_regs_print_info+0x12/0x12 [ 2436.351215][ T5904] ? load_image+0x400/0x400 [ 2436.355867][ T5904] ? crng_make_state+0x1d1/0xb00 [ 2436.361117][ T5904] ? sctp_sendmsg+0x15b0/0x2940 [ 2436.366261][ T5904] should_fail_ex+0x399/0x4d0 [ 2436.371293][ T5904] should_failslab+0x5/0x20 [ 2436.376168][ T5904] slab_pre_alloc_hook+0x59/0x310 [ 2436.381250][ T5904] ? sctp_add_bind_addr+0x89/0x350 [ 2436.386416][ T5904] __kmem_cache_alloc_node+0x4f/0x260 [ 2436.391949][ T5904] ? sctp_add_bind_addr+0x89/0x350 [ 2436.397388][ T5904] kmalloc_trace+0x26/0xe0 [ 2436.401948][ T5904] sctp_add_bind_addr+0x89/0x350 [ 2436.406948][ T5904] sctp_copy_local_addr_list+0x311/0x4e0 [ 2436.412961][ T5904] ? sctp_copy_local_addr_list+0xa1/0x4e0 [ 2436.419053][ T5904] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 2436.425552][ T5904] ? sctp_v4_is_any+0x31/0x50 [ 2436.430389][ T5904] ? sctp_copy_one_addr+0x93/0x660 [ 2436.436182][ T5904] sctp_bind_addr_copy+0x185/0x3c0 [ 2436.441570][ T5904] sctp_connect_new_asoc+0x2f5/0x6a0 [ 2436.446999][ T5904] ? __sctp_connect+0xd80/0xd80 [ 2436.452163][ T5904] ? __local_bh_enable_ip+0x136/0x1c0 [ 2436.457695][ T5904] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 2436.463460][ T5904] ? security_sctp_bind_connect+0x85/0xb0 [ 2436.469227][ T5904] sctp_sendmsg+0x15b0/0x2940 [ 2436.474148][ T5904] ? aa_sk_perm+0x791/0x950 [ 2436.478716][ T5904] ? sctp_getsockopt+0x8a0/0x8a0 [ 2436.483835][ T5904] ? __might_fault+0xa6/0x120 [ 2436.488647][ T5904] ? aa_af_perm+0x340/0x340 [ 2436.493455][ T5904] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 2436.499920][ T5904] ? inet_sendmsg+0xe5/0x2f0 [ 2436.504546][ T5904] ? inet_send_prepare+0x260/0x260 [ 2436.509688][ T5904] ____sys_sendmsg+0x5be/0x970 [ 2436.514502][ T5904] ? __sys_sendmsg_sock+0x30/0x30 [ 2436.519564][ T5904] ? __import_iovec+0x315/0x500 [ 2436.524470][ T5904] ? import_iovec+0x6f/0xa0 [ 2436.529222][ T5904] ___sys_sendmsg+0x2a2/0x360 [ 2436.534297][ T5904] ? __sys_sendmsg+0x290/0x290 [ 2436.539284][ T5904] ? __lock_acquire+0x7d10/0x7d10 [ 2436.544856][ T5904] __se_sys_sendmsg+0x1bb/0x2a0 [ 2436.550093][ T5904] ? __x64_sys_sendmsg+0x80/0x80 [ 2436.555263][ T5904] ? lockdep_hardirqs_on+0x94/0x140 [ 2436.560762][ T5904] do_syscall_64+0x4c/0xa0 [ 2436.565489][ T5904] ? clear_bhb_loop+0x60/0xb0 [ 2436.570392][ T5904] ? clear_bhb_loop+0x60/0xb0 [ 2436.575391][ T5904] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2436.581680][ T5904] RIP: 0033:0x7f2db3b9c819 [ 2436.586506][ T5904] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2436.607036][ T5904] RSP: 002b:00007f2db49e8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2436.615952][ T5904] RAX: ffffffffffffffda RBX: 00007f2db3e15fa0 RCX: 00007f2db3b9c819 [ 2436.624419][ T5904] RDX: 0000000022044880 RSI: 00002000000004c0 RDI: 0000000000000005 [ 2436.632907][ T5904] RBP: 00007f2db49e8090 R08: 0000000000000000 R09: 0000000000000000 [ 2436.641829][ T5904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2436.650306][ T5904] R13: 00007f2db3e16038 R14: 00007f2db3e15fa0 R15: 00007ffce975b438 [ 2436.658684][ T5904] [ 2437.643407][T17620] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2437.683235][T17620] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2437.715134][T29040] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2437.787043][T29040] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2437.824909][T29040] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2437.837997][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2438.370778][ T5917] device lo entered promiscuous mode [ 2438.441370][ T5917] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2438.506009][ T5918] netlink: 'syz.7.9989': attribute type 10 has an invalid length. [ 2438.773474][ T5928] netlink: 132 bytes leftover after parsing attributes in process `syz.5.9891'. [ 2439.026230][ T5931] netlink: 'syz.2.9992': attribute type 10 has an invalid length. [ 2439.876718][T28585] device syz_tun left promiscuous mode [ 2439.882643][T28585] GPL: port 1(syz_tun) entered disabled state [ 2440.008000][ T3007] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2440.019234][ T3007] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2440.029222][ T3007] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2440.045404][ T3007] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2440.056514][T25897] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2440.074579][T25897] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2440.225441][ T5959] netlink: 'syz.2.10001': attribute type 10 has an invalid length. [ 2440.659358][ T5967] netlink: 'syz.2.10003': attribute type 10 has an invalid length. [ 2441.194054][ T5954] chnl_net:caif_netlink_parms(): no params data found [ 2441.242663][ T5976] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10007'. [ 2441.474449][ T5954] bridge0: port 1(bridge_slave_0) entered blocking state [ 2441.482204][ T5954] bridge0: port 1(bridge_slave_0) entered disabled state [ 2441.527649][ T5954] device bridge_slave_0 entered promiscuous mode [ 2441.582030][ T5954] bridge0: port 2(bridge_slave_1) entered blocking state [ 2441.631247][ T5954] bridge0: port 2(bridge_slave_1) entered disabled state [ 2441.683570][ T5954] device bridge_slave_1 entered promiscuous mode [ 2441.876609][ T5954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2441.947278][ T5954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2442.136457][ T4276] Bluetooth: hci4: command 0x0409 tx timeout [ 2442.697521][ T5954] team0: Port device team_slave_0 added [ 2442.737481][ T5954] team0: Port device team_slave_1 added [ 2442.805343][ T5954] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2442.812392][ T5954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2442.924349][ T5954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2442.953415][ T5954] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2443.016051][ T5954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2443.068913][ T5954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2443.094926][ T5994] netlink: 'syz.3.10012': attribute type 10 has an invalid length. [ 2443.250425][ T5954] device hsr_slave_0 entered promiscuous mode [ 2443.261794][ T5954] device hsr_slave_1 entered promiscuous mode [ 2443.273244][ T5954] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2443.289671][ T5954] Cannot create hsr debugfs directory [ 2443.767741][ T5954] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2444.213192][ T3007] Bluetooth: hci4: command 0x041b tx timeout [ 2444.825896][ T5954] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2445.007397][ T5954] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2445.185440][ T5954] device netdevsim0 left promiscuous mode [ 2445.209719][ T5954] team0: Port device netdevsim0 removed [ 2445.224714][ T5954] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2445.563385][ T5954] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 2445.629422][ T5954] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 2445.660248][ T5954] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 2445.743960][ T5954] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 2445.779315][ T6033] netlink: 'syz.6.10026': attribute type 10 has an invalid length. [ 2445.939938][ T5954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2446.017806][ T5954] 8021q: adding VLAN 0 to HW filter on device team0 [ 2446.035189][ T5421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2446.053183][ T5421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2446.099067][ T5421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2446.123388][ T5421] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2446.144475][ T5421] bridge0: port 1(bridge_slave_0) entered blocking state [ 2446.151701][ T5421] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2446.171062][ T5421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2446.215260][ T5421] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2446.228159][ T5421] bridge0: port 2(bridge_slave_1) entered blocking state [ 2446.235462][ T5421] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2446.284395][ T3007] Bluetooth: hci4: command 0x040f tx timeout [ 2446.307284][ T5421] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2446.328827][ T5421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2446.375966][ T5421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2446.430502][ T5421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2446.474609][ T5421] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2446.483902][ T5421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2446.511300][ T5421] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2447.121985][ T6054] FAULT_INJECTION: forcing a failure. [ 2447.121985][ T6054] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2447.214664][ T6054] CPU: 0 PID: 6054 Comm: syz.3.10035 Not tainted syzkaller #0 [ 2447.222226][ T6054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2447.233396][ T6054] Call Trace: [ 2447.236993][ T6054] [ 2447.240013][ T6054] dump_stack_lvl+0x188/0x24e [ 2447.245051][ T6054] ? show_regs_print_info+0x12/0x12 [ 2447.250500][ T6054] ? load_image+0x400/0x400 [ 2447.255243][ T6054] ? __might_fault+0xa6/0x120 [ 2447.260098][ T6054] should_fail_ex+0x399/0x4d0 [ 2447.264935][ T6054] copyin+0x1b/0x120 [ 2447.268910][ T6054] _copy_from_iter+0x447/0x1130 [ 2447.273952][ T6054] ? copyout_mc+0x110/0x110 [ 2447.278625][ T6054] ? copyout_mc+0x110/0x110 [ 2447.283216][ T6054] ? __virt_addr_valid+0x188/0x540 [ 2447.288660][ T6054] ? page_copy_sane+0x194/0x390 [ 2447.293986][ T6054] copy_page_from_iter+0x77/0x100 [ 2447.299231][ T6054] skb_copy_datagram_from_iter+0x2b3/0x690 [ 2447.305551][ T6054] unix_dgram_sendmsg+0x5fb/0x16e0 [ 2447.310908][ T6054] ? aa_sk_perm+0x81f/0x950 [ 2447.315544][ T6054] ? __might_fault+0xa6/0x120 [ 2447.320342][ T6054] ? unix_dgram_poll+0x680/0x680 [ 2447.325328][ T6054] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 2447.331813][ T6054] ? aa_sock_msg_perm+0x94/0x150 [ 2447.336971][ T6054] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2447.342304][ T6054] ? security_socket_sendmsg+0x7c/0xa0 [ 2447.347985][ T6054] ? unix_dgram_poll+0x680/0x680 [ 2447.353305][ T6054] ____sys_sendmsg+0x5be/0x970 [ 2447.358365][ T6054] ? __sys_sendmsg_sock+0x30/0x30 [ 2447.363434][ T6054] ? __import_iovec+0x315/0x500 [ 2447.368417][ T6054] ? import_iovec+0x6f/0xa0 [ 2447.372995][ T6054] ___sys_sendmsg+0x2a2/0x360 [ 2447.377830][ T6054] ? __sys_sendmsg+0x290/0x290 [ 2447.383114][ T6054] ? __lock_acquire+0x7d10/0x7d10 [ 2447.388337][ T6054] __se_sys_sendmsg+0x1bb/0x2a0 [ 2447.393349][ T6054] ? ct_nmi_exit+0x145/0x1c0 [ 2447.398085][ T6054] ? __x64_sys_sendmsg+0x80/0x80 [ 2447.403126][ T6054] ? lockdep_hardirqs_on+0x94/0x140 [ 2447.408443][ T6054] do_syscall_64+0x4c/0xa0 [ 2447.412917][ T6054] ? clear_bhb_loop+0x60/0xb0 [ 2447.417742][ T6054] ? clear_bhb_loop+0x60/0xb0 [ 2447.422741][ T6054] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2447.429081][ T6054] RIP: 0033:0x7facdfd9c819 [ 2447.433530][ T6054] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2447.453716][ T6054] RSP: 002b:00007face0bcd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2447.462355][ T6054] RAX: ffffffffffffffda RBX: 00007face0016090 RCX: 00007facdfd9c819 [ 2447.470377][ T6054] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000009 [ 2447.478570][ T6054] RBP: 00007face0bcd090 R08: 0000000000000000 R09: 0000000000000000 [ 2447.486572][ T6054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2447.495045][ T6054] R13: 00007face0016128 R14: 00007face0016090 R15: 00007ffed6dbc298 [ 2447.503244][ T6054] [ 2448.364269][ T3007] Bluetooth: hci4: command 0x0419 tx timeout [ 2449.140976][ T5954] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2449.174423][ T5954] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2449.243302][ T5421] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2449.275522][ T5421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2449.309035][ T5421] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2449.328414][ T5421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2449.343138][ T5421] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2449.378437][ T5421] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2450.558686][T17137] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2450.572786][T17137] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2450.610908][ T5954] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2451.989877][T17137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2452.007509][T17137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2452.051755][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2452.072861][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2452.095101][ T5954] device veth0_vlan entered promiscuous mode [ 2452.111161][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2452.121754][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2452.147397][ T5954] device veth1_vlan entered promiscuous mode [ 2452.196292][ T5954] device veth0_macvtap entered promiscuous mode [ 2452.208796][ T5954] device veth1_macvtap entered promiscuous mode [ 2452.218051][T17620] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2452.230358][T17620] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2452.255462][T17620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2452.272371][T17620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2452.282015][T17620] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2452.308307][T17620] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2452.333038][ T5954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2452.356444][ T5954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2452.375620][ T5954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2452.399991][ T5954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2452.428726][ T5954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2452.451824][ T5954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2452.472542][ T5954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2452.493792][ T5954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2452.512086][ T5954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2452.525142][ T5954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2452.548738][ T5954] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2452.571962][T17620] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2452.591930][T17620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2452.606239][ T5954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2452.626988][ T5954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2452.652449][ T5954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2452.673149][ T5954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2452.684670][ T5954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2452.705151][ T5954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2452.721915][ T5954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2452.747449][ T5954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2452.772917][ T5954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2452.792087][ T5954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2452.813279][ T5954] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2452.837296][T17620] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2452.858615][T17620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2452.886542][ T5954] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2452.905101][ T5954] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2452.921531][ T5954] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2452.932831][ T5954] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2453.339667][ T5421] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2453.358040][ T5421] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2453.417546][ T5421] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2453.455301][ T5421] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2453.472192][ T6113] tap0: tun_chr_ioctl cmd 1074025677 [ 2453.480385][ T5421] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2453.488551][ T6113] tap0: linktype set to 0 [ 2453.508958][ T5421] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2453.633010][ T6118] netlink: 'syz.7.9991': attribute type 4 has an invalid length. [ 2453.662832][ T6118] netlink: 168 bytes leftover after parsing attributes in process `syz.7.9991'. [ 2453.987217][ T6125] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10056'. [ 2454.847734][ T6152] netlink: 50095 bytes leftover after parsing attributes in process `syz.2.10066'. [ 2456.545592][ T6166] netlink: 'syz.6.10068': attribute type 10 has an invalid length. [ 2456.574604][ T6166] netlink: 40 bytes leftover after parsing attributes in process `syz.6.10068'. [ 2456.595405][ T6166] bridge0: port 4(ipvlan1) entered blocking state [ 2456.636974][ T6166] bridge0: port 4(ipvlan1) entered disabled state [ 2456.677559][ T6166] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 2456.752803][ T6172] netlink: 'syz.3.10071': attribute type 4 has an invalid length. [ 2456.776718][ T6175] netlink: 'syz.7.10072': attribute type 29 has an invalid length. [ 2456.787249][ T6172] netlink: 168 bytes leftover after parsing attributes in process `syz.3.10071'. [ 2456.831430][ T6175] netlink: 'syz.7.10072': attribute type 29 has an invalid length. [ 2456.938876][ T6175] netlink: 'syz.7.10072': attribute type 29 has an invalid length. [ 2457.001428][ T6182] FAULT_INJECTION: forcing a failure. [ 2457.001428][ T6182] name failslab, interval 1, probability 0, space 0, times 0 [ 2457.032265][ T6177] netlink: 'syz.7.10072': attribute type 29 has an invalid length. [ 2457.063293][ T6175] netlink: 'syz.7.10072': attribute type 29 has an invalid length. [ 2457.094712][ T6182] CPU: 1 PID: 6182 Comm: syz.5.10074 Not tainted syzkaller #0 [ 2457.102385][ T6182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2457.113043][ T6182] Call Trace: [ 2457.116497][ T6182] [ 2457.119479][ T6182] dump_stack_lvl+0x188/0x24e [ 2457.124253][ T6182] ? show_regs_print_info+0x12/0x12 [ 2457.129613][ T6182] ? load_image+0x400/0x400 [ 2457.134633][ T6182] ? should_fail_ex+0x31e/0x4d0 [ 2457.139693][ T6182] should_fail_ex+0x399/0x4d0 [ 2457.144707][ T6182] should_failslab+0x5/0x20 [ 2457.149481][ T6182] slab_pre_alloc_hook+0x59/0x310 [ 2457.154677][ T6182] ? sk_prot_alloc+0xe7/0x210 [ 2457.159782][ T6182] __kmem_cache_alloc_node+0x4f/0x260 [ 2457.165234][ T6182] ? sk_prot_alloc+0xe7/0x210 [ 2457.169983][ T6182] __kmalloc+0xa0/0x240 [ 2457.174221][ T6182] sk_prot_alloc+0xe7/0x210 [ 2457.179000][ T6182] ? sk_alloc+0x20/0x340 [ 2457.183570][ T6182] sk_alloc+0x36/0x340 [ 2457.187704][ T6182] ? bpf_ctx_init+0x163/0x1a0 [ 2457.192441][ T6182] ? bpf_prog_test_run_skb+0x26f/0x12a0 [ 2457.198414][ T6182] bpf_prog_test_run_skb+0x35e/0x12a0 [ 2457.204155][ T6182] ? bpf_prog_test_run+0x253/0x390 [ 2457.209435][ T6182] ? cpu_online+0xa0/0xa0 [ 2457.214014][ T6182] bpf_prog_test_run+0x31e/0x390 [ 2457.219237][ T6182] __sys_bpf+0x62b/0x780 [ 2457.223600][ T6182] ? bpf_link_show_fdinfo+0x380/0x380 [ 2457.229148][ T6182] ? lock_chain_count+0x20/0x20 [ 2457.234161][ T6182] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2457.240227][ T6182] __x64_sys_bpf+0x78/0x90 [ 2457.244885][ T6182] do_syscall_64+0x4c/0xa0 [ 2457.249380][ T6182] ? clear_bhb_loop+0x60/0xb0 [ 2457.254131][ T6182] ? clear_bhb_loop+0x60/0xb0 [ 2457.258994][ T6182] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2457.265133][ T6182] RIP: 0033:0x7fae6f99c819 [ 2457.270066][ T6182] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2457.290260][ T6182] RSP: 002b:00007fae70889028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2457.299001][ T6182] RAX: ffffffffffffffda RBX: 00007fae6fc16090 RCX: 00007fae6f99c819 [ 2457.307581][ T6182] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 2457.316148][ T6182] RBP: 00007fae70889090 R08: 0000000000000000 R09: 0000000000000000 [ 2457.324284][ T6182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2457.332511][ T6182] R13: 00007fae6fc16128 R14: 00007fae6fc16090 R15: 00007fff9dc9d168 [ 2457.340659][ T6182] [ 2457.365401][ T6175] netlink: 16222 bytes leftover after parsing attributes in process `syz.7.10072'. [ 2457.752652][ T6192] netlink: 132 bytes leftover after parsing attributes in process `syz.6.10078'. [ 2459.337581][ T6217] netlink: 'syz.5.10085': attribute type 11 has an invalid length. [ 2459.414340][ T6219] FAULT_INJECTION: forcing a failure. [ 2459.414340][ T6219] name failslab, interval 1, probability 0, space 0, times 0 [ 2459.455355][ T6217] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.10085'. [ 2459.563682][ T6219] CPU: 1 PID: 6219 Comm: syz.2.10092 Not tainted syzkaller #0 [ 2459.571816][ T6219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2459.582589][ T6219] Call Trace: [ 2459.586336][ T6219] [ 2459.590041][ T6219] dump_stack_lvl+0x188/0x24e [ 2459.594968][ T6219] ? show_regs_print_info+0x12/0x12 [ 2459.600316][ T6219] ? load_image+0x400/0x400 [ 2459.604925][ T6219] should_fail_ex+0x399/0x4d0 [ 2459.610442][ T6219] should_failslab+0x5/0x20 [ 2459.615086][ T6219] slab_pre_alloc_hook+0x59/0x310 [ 2459.620347][ T6219] kmem_cache_alloc+0x56/0x2f0 [ 2459.625462][ T6219] ? dst_alloc+0x101/0x160 [ 2459.629946][ T6219] ? ipv6_sysctl_rtcache_flush+0xf0/0xf0 [ 2459.635637][ T6219] dst_alloc+0x101/0x160 [ 2459.640034][ T6219] ip6_rt_cache_alloc+0x3af/0xa30 [ 2459.645189][ T6219] ? rt6_find_cached_rt+0x270/0x270 [ 2459.650461][ T6219] ? rt6_find_cached_rt+0x21d/0x270 [ 2459.655937][ T6219] ip6_pol_route+0x105f/0x12a0 [ 2459.660767][ T6219] ? ip6_pol_route+0x16d/0x12a0 [ 2459.665849][ T6219] ? trace_fib6_table_lookup+0x250/0x250 [ 2459.671535][ T6219] ? err_ptr+0x1a0/0x1a0 [ 2459.675994][ T6219] fib6_rule_lookup+0x208/0x5d0 [ 2459.681075][ T6219] ? ip6_route_output_flags_noref+0x390/0x390 [ 2459.687283][ T6219] ? fib6_lookup+0x2d0/0x2d0 [ 2459.692104][ T6219] ? dev_get_by_index_rcu+0xf0/0x110 [ 2459.697797][ T6219] ? __ipv6_addr_type+0xce/0x2f0 [ 2459.703072][ T6219] ? ip6_route_output_flags_noref+0x230/0x390 [ 2459.709304][ T6219] ip6_route_output_flags+0xe3/0x330 [ 2459.714637][ T6219] ? ip6_route_output_flags+0x27/0x330 [ 2459.720225][ T6219] ip6_dst_lookup_tail+0x1aa/0x1510 [ 2459.725745][ T6219] ? ip6_dst_lookup+0x60/0x60 [ 2459.730465][ T6219] ? txopt_get+0x76/0x3f0 [ 2459.735015][ T6219] ? txopt_get+0x76/0x3f0 [ 2459.739424][ T6219] ? txopt_get+0x340/0x3f0 [ 2459.743882][ T6219] ? tomoyo_check_acl+0x378/0x3f0 [ 2459.749030][ T6219] ? fl6_sock_lookup+0xc0/0xc0 [ 2459.753923][ T6219] ip6_dst_lookup_flow+0x44/0xd0 [ 2459.758912][ T6219] rawv6_sendmsg+0xca6/0x1700 [ 2459.763835][ T6219] ? compat_rawv6_ioctl+0x60/0x60 [ 2459.769209][ T6219] ? aa_sk_perm+0x81f/0x950 [ 2459.773898][ T6219] ? tomoyo_socket_sendmsg_permission+0x212/0x2f0 [ 2459.780466][ T6219] ? inet_sendmsg+0x78/0x2f0 [ 2459.785554][ T6219] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2459.791152][ T6219] ? security_socket_sendmsg+0x7c/0xa0 [ 2459.796766][ T6219] ? inet_send_prepare+0x260/0x260 [ 2459.802552][ T6219] ____sys_sendmsg+0x5be/0x970 [ 2459.807540][ T6219] ? __sys_sendmsg_sock+0x30/0x30 [ 2459.812805][ T6219] ? __import_iovec+0x315/0x500 [ 2459.817915][ T6219] ? import_iovec+0x6f/0xa0 [ 2459.822553][ T6219] ___sys_sendmsg+0x2a2/0x360 [ 2459.827785][ T6219] ? __sys_sendmsg+0x290/0x290 [ 2459.832866][ T6219] ? __lock_acquire+0x7d10/0x7d10 [ 2459.838156][ T6219] __se_sys_sendmsg+0x1bb/0x2a0 [ 2459.843422][ T6219] ? __x64_sys_sendmsg+0x80/0x80 [ 2459.848445][ T6219] ? lockdep_hardirqs_on+0x94/0x140 [ 2459.853804][ T6219] do_syscall_64+0x4c/0xa0 [ 2459.858365][ T6219] ? clear_bhb_loop+0x60/0xb0 [ 2459.863368][ T6219] ? clear_bhb_loop+0x60/0xb0 [ 2459.868379][ T6219] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2459.874418][ T6219] RIP: 0033:0x7fbdbbd9c819 [ 2459.878968][ T6219] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2459.899608][ T6219] RSP: 002b:00007fbdbcd17028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2459.908067][ T6219] RAX: ffffffffffffffda RBX: 00007fbdbc016090 RCX: 00007fbdbbd9c819 [ 2459.916111][ T6219] RDX: 0000000020000884 RSI: 0000200000000000 RDI: 000000000000000d [ 2459.924122][ T6219] RBP: 00007fbdbcd17090 R08: 0000000000000000 R09: 0000000000000000 [ 2459.932167][ T6219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2459.940213][ T6219] R13: 00007fbdbc016128 R14: 00007fbdbc016090 R15: 00007ffe2a84b488 [ 2459.948325][ T6219] [ 2459.964145][ T4276] Bluetooth: hci1: command 0x0406 tx timeout [ 2460.234549][ T6220] IPv6: Can't replace route, no match found [ 2460.258442][ T6222] netlink: 144 bytes leftover after parsing attributes in process `syz.7.10086'. [ 2460.629065][ T6222] team0: Port device team_slave_0 removed [ 2460.658889][ T6222] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 2461.164993][ T6230] netlink: 'syz.3.10087': attribute type 10 has an invalid length. [ 2461.530791][ T6236] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.10088'. [ 2461.686643][ T6248] netlink: 129384 bytes leftover after parsing attributes in process `syz.7.10093'. [ 2462.195092][ T6247] can: request_module (can-proto-0) failed. [ 2463.543763][ T6266] netlink: 'syz.6.10100': attribute type 1 has an invalid length. [ 2463.744783][ T6273] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10099'. [ 2466.709035][ T6310] netlink: 'syz.6.10112': attribute type 13 has an invalid length. [ 2466.725368][ T6310] netlink: 24859 bytes leftover after parsing attributes in process `syz.6.10112'. [ 2467.581493][ T6333] netlink: 15007 bytes leftover after parsing attributes in process `syz.6.10120'. [ 2467.822814][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 2467.829527][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 2471.032072][ T6347] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 2471.051531][ T6347] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 2471.062445][ T6347] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 2471.605242][ T6367] IPv6: pim6reg1: Disabled Multicast RS [ 2472.636802][ T6379] netlink: 'syz.6.10134': attribute type 28 has an invalid length. [ 2472.651109][ T6382] netlink: 'syz.6.10134': attribute type 28 has an invalid length. [ 2474.476406][ T6400] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.10139'. [ 2474.715806][ T6409] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.10142'. [ 2474.754831][ T6406] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.10142'. [ 2475.240450][ T6421] netlink: 2639 bytes leftover after parsing attributes in process `syz.7.10156'. [ 2475.255265][ T6422] netlink: 2639 bytes leftover after parsing attributes in process `syz.7.10156'. [ 2475.311077][ T6429] raw_sendmsg: syz.6.10148 forgot to set AF_INET. Fix it! [ 2475.383741][ T6425] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.10147'. [ 2475.631465][ T6435] netlink: 'syz.3.10152': attribute type 10 has an invalid length. [ 2476.210469][ T6447] FAULT_INJECTION: forcing a failure. [ 2476.210469][ T6447] name failslab, interval 1, probability 0, space 0, times 0 [ 2476.223722][ T6447] CPU: 0 PID: 6447 Comm: syz.3.10157 Not tainted syzkaller #0 [ 2476.231604][ T6447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2476.241984][ T6447] Call Trace: [ 2476.245324][ T6447] [ 2476.248390][ T6447] dump_stack_lvl+0x188/0x24e [ 2476.253971][ T6447] ? show_regs_print_info+0x12/0x12 [ 2476.259471][ T6447] ? load_image+0x400/0x400 [ 2476.264325][ T6447] ? addrconf_prefix_route+0x249/0x320 [ 2476.270112][ T6447] ? sock_do_ioctl+0xfb/0x320 [ 2476.275202][ T6447] ? __se_sys_ioctl+0xfa/0x170 [ 2476.280312][ T6447] ? do_syscall_64+0x4c/0xa0 [ 2476.285256][ T6447] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2476.291586][ T6447] should_fail_ex+0x399/0x4d0 [ 2476.296338][ T6447] should_failslab+0x5/0x20 [ 2476.301075][ T6447] slab_pre_alloc_hook+0x59/0x310 [ 2476.306709][ T6447] kmem_cache_alloc+0x56/0x2f0 [ 2476.311997][ T6447] ? fib6_add_1+0x9ab/0x1430 [ 2476.316765][ T6447] fib6_add_1+0x9ab/0x1430 [ 2476.321420][ T6447] fib6_add+0x1d0/0x3d10 [ 2476.325844][ T6447] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 2476.332862][ T6447] ? ip_fib_metrics_init+0x427/0x710 [ 2476.338476][ T6447] ? fib6_update_sernum_stub+0x110/0x110 [ 2476.344565][ T6447] ? do_raw_spin_lock+0x128/0x2f0 [ 2476.349691][ T6447] ? __rwlock_init+0x140/0x140 [ 2476.354533][ T6447] ? ip6_route_add+0x71/0x130 [ 2476.359300][ T6447] ip6_route_add+0x86/0x130 [ 2476.364318][ T6447] addrconf_prefix_route+0x249/0x320 [ 2476.369863][ T6447] ? addrconf_get_prefix_route+0x780/0x780 [ 2476.375927][ T6447] ? ipv6_count_addresses+0x190/0x190 [ 2476.381379][ T6447] ? addrconf_add_ifaddr+0x143/0x1b0 [ 2476.387090][ T6447] ? __lock_acquire+0x7d10/0x7d10 [ 2476.392303][ T6447] inet6_addr_add+0x4fe/0x9b0 [ 2476.397259][ T6447] addrconf_add_ifaddr+0x156/0x1b0 [ 2476.402766][ T6447] ? addrconf_set_dstaddr+0x320/0x320 [ 2476.408455][ T6447] ? __lock_acquire+0x7d10/0x7d10 [ 2476.413915][ T6447] ? slab_free_freelist_hook+0x131/0x1a0 [ 2476.419775][ T6447] inet6_ioctl+0x16b/0x280 [ 2476.424248][ T6447] ? __kmem_cache_free+0xb6/0x1f0 [ 2476.429659][ T6447] ? inet6_getname+0x640/0x640 [ 2476.434662][ T6447] ? tomoyo_path_number_perm+0x205/0x650 [ 2476.440893][ T6447] ? tomoyo_path_number_perm+0x5a4/0x650 [ 2476.446946][ T6447] ? tomoyo_path_number_perm+0x205/0x650 [ 2476.452931][ T6447] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 2476.458585][ T6447] sock_do_ioctl+0xfb/0x320 [ 2476.463149][ T6447] ? sock_show_fdinfo+0xb0/0xb0 [ 2476.468233][ T6447] sock_ioctl+0x4d2/0x710 [ 2476.472713][ T6447] ? sock_poll+0x410/0x410 [ 2476.477372][ T6447] ? bpf_lsm_file_ioctl+0x5/0x10 [ 2476.482882][ T6447] ? security_file_ioctl+0x7c/0xa0 [ 2476.488239][ T6447] ? sock_poll+0x410/0x410 [ 2476.493180][ T6447] __se_sys_ioctl+0xfa/0x170 [ 2476.497961][ T6447] do_syscall_64+0x4c/0xa0 [ 2476.502445][ T6447] ? clear_bhb_loop+0x60/0xb0 [ 2476.507366][ T6447] ? clear_bhb_loop+0x60/0xb0 [ 2476.512263][ T6447] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2476.518478][ T6447] RIP: 0033:0x7facdfd9c819 [ 2476.522949][ T6447] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2476.543935][ T6447] RSP: 002b:00007face0bee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2476.552505][ T6447] RAX: ffffffffffffffda RBX: 00007face0015fa0 RCX: 00007facdfd9c819 [ 2476.560638][ T6447] RDX: 0000200000000000 RSI: 0000000000008916 RDI: 0000000000000007 [ 2476.568672][ T6447] RBP: 00007face0bee090 R08: 0000000000000000 R09: 0000000000000000 [ 2476.576873][ T6447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2476.585675][ T6447] R13: 00007face0016038 R14: 00007face0015fa0 R15: 00007ffed6dbc298 [ 2476.593872][ T6447] [ 2477.171352][ T6470] device pim6reg1 entered promiscuous mode [ 2479.995643][ T6507] wlan1: mtu greater than device maximum [ 2480.625270][ T6523] netlink: 55631 bytes leftover after parsing attributes in process `syz.6.10178'. [ 2480.714869][ T6523] netlink: 6332 bytes leftover after parsing attributes in process `syz.6.10178'. [ 2481.813419][ T6542] device syzkaller0 entered promiscuous mode [ 2483.024043][ T6561] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10190'. [ 2490.139381][ T6631] netlink: 'syz.6.10211': attribute type 2 has an invalid length. [ 2490.181491][ T6631] netlink: 17267 bytes leftover after parsing attributes in process `syz.6.10211'. [ 2491.475422][ T6654] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.10219'. [ 2491.495403][ T6654] bridge_slave_1: default FDB implementation only supports local addresses [ 2492.167167][ T6677] netlink: 1047 bytes leftover after parsing attributes in process `syz.7.10227'. [ 2492.232155][ T6677] bridge_slave_1: default FDB implementation only supports local addresses [ 2492.506716][ T6682] FAULT_INJECTION: forcing a failure. [ 2492.506716][ T6682] name failslab, interval 1, probability 0, space 0, times 0 [ 2492.561934][ T6682] CPU: 1 PID: 6682 Comm: syz.6.10228 Not tainted syzkaller #0 [ 2492.572281][ T6682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2492.583412][ T6682] Call Trace: [ 2492.587319][ T6682] [ 2492.591142][ T6682] dump_stack_lvl+0x188/0x24e [ 2492.596481][ T6682] ? show_regs_print_info+0x12/0x12 [ 2492.601931][ T6682] ? load_image+0x400/0x400 [ 2492.607046][ T6682] ? __might_sleep+0xd0/0xd0 [ 2492.612486][ T6682] ? __lock_acquire+0x7d10/0x7d10 [ 2492.617818][ T6682] should_fail_ex+0x399/0x4d0 [ 2492.622712][ T6682] should_failslab+0x5/0x20 [ 2492.627531][ T6682] slab_pre_alloc_hook+0x59/0x310 [ 2492.632921][ T6682] ? do_syscall_64+0x4c/0xa0 [ 2492.637894][ T6682] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2492.644725][ T6682] kmem_cache_alloc_node+0x5a/0x320 [ 2492.650314][ T6682] ? __alloc_skb+0xfc/0x7e0 [ 2492.655149][ T6682] __alloc_skb+0xfc/0x7e0 [ 2492.659970][ T6682] netlink_dump+0x1ee/0xd00 [ 2492.665214][ T6682] ? apparmor_capable+0x12c/0x190 [ 2492.670369][ T6682] ? bpf_lsm_capable+0x5/0x10 [ 2492.675250][ T6682] ? netlink_lookup+0x200/0x200 [ 2492.680545][ T6682] ? __inet_diag_dump_start+0x805/0x970 [ 2492.686326][ T6682] __netlink_dump_start+0x537/0x6f0 [ 2492.692141][ T6682] inet_diag_rcv_msg_compat+0x207/0x420 [ 2492.697843][ T6682] ? __inet_diag_dump+0x380/0x380 [ 2492.703072][ T6682] ? sock_diag_rcv_msg+0x142/0x5f0 [ 2492.708309][ T6682] ? inet_diag_rcv_msg_compat+0x420/0x420 [ 2492.714323][ T6682] ? inet_diag_dump_start_compat+0x20/0x20 [ 2492.721038][ T6682] ? inet_diag_dump+0x50/0x50 [ 2492.725934][ T6682] ? __inet_diag_dump+0x380/0x380 [ 2492.731226][ T6682] sock_diag_rcv_msg+0x3cc/0x5f0 [ 2492.736308][ T6682] netlink_rcv_skb+0x1fb/0x450 [ 2492.741481][ T6682] ? sock_diag_bind+0xa0/0xa0 [ 2492.746324][ T6682] ? netlink_ack+0x1170/0x1170 [ 2492.751337][ T6682] ? netlink_deliver_tap+0x2e/0x1b0 [ 2492.756657][ T6682] sock_diag_rcv+0x26/0x40 [ 2492.761690][ T6682] netlink_unicast+0x74d/0x8d0 [ 2492.766978][ T6682] netlink_sendmsg+0x8ad/0xbd0 [ 2492.771973][ T6682] ? netlink_getsockopt+0x550/0x550 [ 2492.777474][ T6682] ? aa_sock_msg_perm+0x94/0x150 [ 2492.782795][ T6682] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2492.788267][ T6682] ? security_socket_sendmsg+0x7c/0xa0 [ 2492.794222][ T6682] ? netlink_getsockopt+0x550/0x550 [ 2492.800016][ T6682] ____sys_sendmsg+0x5be/0x970 [ 2492.805174][ T6682] ? __sys_sendmsg_sock+0x30/0x30 [ 2492.810481][ T6682] ? __import_iovec+0x315/0x500 [ 2492.815752][ T6682] ? import_iovec+0x6f/0xa0 [ 2492.820467][ T6682] ___sys_sendmsg+0x2a2/0x360 [ 2492.825371][ T6682] ? __sys_sendmsg+0x290/0x290 [ 2492.830509][ T6682] ? __lock_acquire+0x7d10/0x7d10 [ 2492.835999][ T6682] __se_sys_sendmsg+0x1bb/0x2a0 [ 2492.841158][ T6682] ? ct_nmi_exit+0x145/0x1c0 [ 2492.845939][ T6682] ? __x64_sys_sendmsg+0x80/0x80 [ 2492.851053][ T6682] ? lockdep_hardirqs_on+0x94/0x140 [ 2492.856642][ T6682] do_syscall_64+0x4c/0xa0 [ 2492.861344][ T6682] ? clear_bhb_loop+0x60/0xb0 [ 2492.866130][ T6682] ? clear_bhb_loop+0x60/0xb0 [ 2492.871178][ T6682] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2492.877171][ T6682] RIP: 0033:0x7f2db3b9c819 [ 2492.881682][ T6682] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2492.901725][ T6682] RSP: 002b:00007f2db49e8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2492.910675][ T6682] RAX: ffffffffffffffda RBX: 00007f2db3e15fa0 RCX: 00007f2db3b9c819 [ 2492.919184][ T6682] RDX: 0000000000040040 RSI: 0000200000000000 RDI: 0000000000000003 [ 2492.927662][ T6682] RBP: 00007f2db49e8090 R08: 0000000000000000 R09: 0000000000000000 [ 2492.935687][ T6682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2492.943795][ T6682] R13: 00007f2db3e16038 R14: 00007f2db3e15fa0 R15: 00007ffce975b438 [ 2492.951957][ T6682] [ 2494.690325][ T6711] netlink: 'syz.3.10235': attribute type 1 has an invalid length. [ 2497.218451][ T6748] netlink: 'syz.5.10245': attribute type 10 has an invalid length. [ 2497.232089][ T6748] netlink: 40 bytes leftover after parsing attributes in process `syz.5.10245'. [ 2497.265059][ T6748] bridge0: port 3(veth0_vlan) entered blocking state [ 2497.272862][ T6748] bridge0: port 3(veth0_vlan) entered disabled state [ 2497.296609][ T6748] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 2499.853249][ T6784] netlink: 1047 bytes leftover after parsing attributes in process `syz.6.10257'. [ 2500.023745][ T6784] bridge_slave_1: default FDB implementation only supports local addresses [ 2500.916368][ T6810] netlink: 830 bytes leftover after parsing attributes in process `syz.5.10269'. [ 2502.351000][ T6813] netlink: 144 bytes leftover after parsing attributes in process `syz.2.10270'. [ 2502.969499][ T6834] netlink: 1047 bytes leftover after parsing attributes in process `syz.7.10277'. [ 2503.029444][ T6834] bridge_slave_1: default FDB implementation only supports local addresses [ 2503.185334][ T6835] netlink: 1047 bytes leftover after parsing attributes in process `syz.6.10276'. [ 2503.287151][ T6835] bridge_slave_1: default FDB implementation only supports local addresses [ 2506.971867][ T6883] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.10292'. [ 2506.992678][ T6883] bridge_slave_1: default FDB implementation only supports local addresses [ 2508.788529][ T6898] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.10299'. [ 2509.704370][ T6926] device bridge_slave_1 left promiscuous mode [ 2509.721326][ T6926] bridge0: port 2(bridge_slave_1) entered disabled state [ 2509.757583][ T6926] device bridge_slave_0 left promiscuous mode [ 2509.788744][ T6926] bridge0: port 1(bridge_slave_0) entered disabled state [ 2510.071122][ T6924] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.10306'. [ 2510.096816][ T6924] bridge_slave_1: default FDB implementation only supports local addresses [ 2511.819886][ T6967] device macsec0 entered promiscuous mode [ 2511.839563][ T6967] netlink: 'syz.5.10323': attribute type 3 has an invalid length. [ 2511.861987][ T6967] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.10323'. [ 2512.301551][ T6979] device team0 left promiscuous mode [ 2512.351559][ T6979] device team_slave_0 left promiscuous mode [ 2512.364516][ T6979] device team_slave_1 left promiscuous mode [ 2512.404592][ T6979] bridge0: port 3(team0) entered disabled state [ 2512.445572][ T6979] device bridge_slave_1 left promiscuous mode [ 2512.452108][ T6979] bridge0: port 2(bridge_slave_1) entered disabled state [ 2512.510439][ T6979] device bridge_slave_0 left promiscuous mode [ 2512.534639][ T6979] bridge0: port 1(bridge_slave_0) entered disabled state [ 2513.687371][ T6990] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.10330'. [ 2513.702322][ T6990] bridge_slave_1: default FDB implementation only supports local addresses [ 2514.127023][ T7002] netlink: 'syz.2.10337': attribute type 1 has an invalid length. [ 2514.930343][ T7010] netlink: 'syz.2.10339': attribute type 29 has an invalid length. [ 2514.963343][ T7010] netlink: 'syz.2.10339': attribute type 29 has an invalid length. [ 2514.995273][ T7010] netlink: 'syz.2.10339': attribute type 29 has an invalid length. [ 2515.014455][ T7010] netlink: 'syz.2.10339': attribute type 29 has an invalid length. [ 2515.064678][ T7010] netlink: 'syz.2.10339': attribute type 29 has an invalid length. [ 2515.103982][ T7010] netlink: 'syz.2.10339': attribute type 29 has an invalid length. [ 2515.133167][ T7010] netlink: 'syz.2.10339': attribute type 21 has an invalid length. [ 2515.644743][ T7027] netlink: 'syz.2.10346': attribute type 27 has an invalid length. [ 2515.675195][ T7027] netlink: 164 bytes leftover after parsing attributes in process `syz.2.10346'. [ 2517.017676][ T7042] netlink: 1047 bytes leftover after parsing attributes in process `syz.6.10347'. [ 2517.044943][ T7042] bridge_slave_1: default FDB implementation only supports local addresses [ 2517.840782][ T7038] delete_channel: no stack [ 2519.792916][ T7087] netlink: 'syz.2.10361': attribute type 19 has an invalid length. [ 2519.834841][ T7087] netlink: 14552 bytes leftover after parsing attributes in process `syz.2.10361'. [ 2522.606641][ T7148] netlink: 'syz.2.10382': attribute type 21 has an invalid length. [ 2522.626414][ T7148] netlink: 128 bytes leftover after parsing attributes in process `syz.2.10382'. [ 2522.639075][ T7148] netlink: 'syz.2.10382': attribute type 4 has an invalid length. [ 2522.868014][ T7157] netlink: 144 bytes leftover after parsing attributes in process `syz.6.10385'. [ 2523.479257][ T7175] FAULT_INJECTION: forcing a failure. [ 2523.479257][ T7175] name failslab, interval 1, probability 0, space 0, times 0 [ 2523.496007][ T7175] CPU: 0 PID: 7175 Comm: syz.6.10389 Not tainted syzkaller #0 [ 2523.503563][ T7175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2523.514115][ T7175] Call Trace: [ 2523.517553][ T7175] [ 2523.520714][ T7175] dump_stack_lvl+0x188/0x24e [ 2523.525634][ T7175] ? show_regs_print_info+0x12/0x12 [ 2523.531438][ T7175] ? load_image+0x400/0x400 [ 2523.536196][ T7175] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2523.542421][ T7175] ? lock_chain_count+0x20/0x20 [ 2523.547619][ T7175] should_fail_ex+0x399/0x4d0 [ 2523.552800][ T7175] should_failslab+0x5/0x20 [ 2523.557359][ T7175] slab_pre_alloc_hook+0x59/0x310 [ 2523.562460][ T7175] ? sctp_add_bind_addr+0x89/0x350 [ 2523.567903][ T7175] __kmem_cache_alloc_node+0x4f/0x260 [ 2523.573440][ T7175] ? sctp_add_bind_addr+0x89/0x350 [ 2523.578708][ T7175] kmalloc_trace+0x26/0xe0 [ 2523.583289][ T7175] sctp_add_bind_addr+0x89/0x350 [ 2523.588427][ T7175] sctp_copy_local_addr_list+0x311/0x4e0 [ 2523.594251][ T7175] ? sctp_copy_local_addr_list+0xa1/0x4e0 [ 2523.600118][ T7175] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 2523.606242][ T7175] ? sctp_v4_is_any+0x31/0x50 [ 2523.611070][ T7175] ? sctp_copy_one_addr+0x93/0x660 [ 2523.616415][ T7175] sctp_bind_addr_copy+0xaf/0x3c0 [ 2523.621524][ T7175] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 2523.628003][ T7175] sctp_connect_new_asoc+0x2f5/0x6a0 [ 2523.633435][ T7175] ? __sctp_connect+0xd80/0xd80 [ 2523.638325][ T7175] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 2523.644293][ T7175] ? security_sctp_bind_connect+0x85/0xb0 [ 2523.650281][ T7175] sctp_sendmsg+0x15b0/0x2940 [ 2523.655109][ T7175] ? sctp_getsockopt+0x8a0/0x8a0 [ 2523.660099][ T7175] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2523.666508][ T7175] ? inet_sendmsg+0xe5/0x2f0 [ 2523.671222][ T7175] ? inet_send_prepare+0x260/0x260 [ 2523.676382][ T7175] ____sys_sendmsg+0x5be/0x970 [ 2523.681211][ T7175] ? __sys_sendmsg_sock+0x30/0x30 [ 2523.686278][ T7175] ? __import_iovec+0x315/0x500 [ 2523.691189][ T7175] ? import_iovec+0x6f/0xa0 [ 2523.695760][ T7175] ___sys_sendmsg+0x2a2/0x360 [ 2523.700538][ T7175] ? __sys_sendmsg+0x290/0x290 [ 2523.705376][ T7175] ? ktime_get_real_ts64+0x440/0x440 [ 2523.710725][ T7175] __se_sys_sendmsg+0x1bb/0x2a0 [ 2523.715973][ T7175] ? __x64_sys_sendmsg+0x80/0x80 [ 2523.721026][ T7175] ? lockdep_hardirqs_on+0x94/0x140 [ 2523.726483][ T7175] do_syscall_64+0x4c/0xa0 [ 2523.731249][ T7175] ? clear_bhb_loop+0x60/0xb0 [ 2523.736088][ T7175] ? clear_bhb_loop+0x60/0xb0 [ 2523.740849][ T7175] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2523.746943][ T7175] RIP: 0033:0x7f2db3b9c819 [ 2523.751418][ T7175] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2523.771428][ T7175] RSP: 002b:00007f2db49e8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2523.780167][ T7175] RAX: ffffffffffffffda RBX: 00007f2db3e15fa0 RCX: 00007f2db3b9c819 [ 2523.788264][ T7175] RDX: 00000000000003e8 RSI: 00002000000004c0 RDI: 0000000000000039 [ 2523.796360][ T7175] RBP: 00007f2db49e8090 R08: 0000000000000000 R09: 0000000000000000 [ 2523.804397][ T7175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2523.812578][ T7175] R13: 00007f2db3e16038 R14: 00007f2db3e15fa0 R15: 00007ffce975b438 [ 2523.820905][ T7175] [ 2523.873020][ T7177] netlink: 'syz.3.10390': attribute type 1 has an invalid length. [ 2523.890654][ T7177] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.10390'. [ 2525.456938][ T5421] device hsr_slave_0 left promiscuous mode [ 2525.468885][ T5421] device hsr_slave_1 left promiscuous mode [ 2525.485121][ T5421] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2525.508797][ T5421] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2525.556579][ T5421] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2525.612482][ T5421] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2525.647492][ T5421] device team0 left promiscuous mode [ 2525.667025][ T5421] device team_slave_0 left promiscuous mode [ 2525.710034][ T5421] device team_slave_1 left promiscuous mode [ 2525.719841][ T5421] device geneve1 left promiscuous mode [ 2525.747577][ T5421] bridge0: port 3(team0) entered disabled state [ 2525.788980][ T5421] device bridge_slave_1 left promiscuous mode [ 2525.829520][ T5421] bridge0: port 2(bridge_slave_1) entered disabled state [ 2525.898086][ T5421] device bridge_slave_0 left promiscuous mode [ 2525.941041][ T5421] bridge0: port 1(bridge_slave_0) entered disabled state [ 2526.165206][ T5421] device veth1_vlan left promiscuous mode [ 2526.202222][ T5421] device veth0_vlan left promiscuous mode [ 2526.479980][ T7206] delete_channel: no stack [ 2526.637878][ T7226] netlink: 'syz.5.10405': attribute type 29 has an invalid length. [ 2526.787960][ T5421] team0 (unregistering): Port device geneve1 removed [ 2527.372460][ T5421] team0 (unregistering): Port device team_slave_1 removed [ 2527.431441][ T5421] team0 (unregistering): Port device team_slave_0 removed [ 2527.492007][ T5421] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2527.548368][ T5421] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2527.849305][ T5421] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 2527.970794][ T5421] bond0 (unregistering): Released all slaves [ 2528.091828][ T7221] netlink: 'syz.3.10404': attribute type 21 has an invalid length. [ 2528.110852][ T7221] netlink: 128 bytes leftover after parsing attributes in process `syz.3.10404'. [ 2528.145953][ T7221] netlink: 'syz.3.10404': attribute type 4 has an invalid length. [ 2528.216019][ T7226] netlink: 'syz.5.10405': attribute type 29 has an invalid length. [ 2529.313980][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 2529.320607][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 2529.353170][ T7244] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2529.360810][ T7244] IPv6: NLM_F_CREATE should be set when creating new route [ 2529.368242][ T7244] IPv6: NLM_F_CREATE should be set when creating new route [ 2529.375795][ T7244] IPv6: NLM_F_CREATE should be set when creating new route [ 2529.601359][ T7250] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.10412'. [ 2529.670190][ T7254] netlink: 'syz.5.10414': attribute type 27 has an invalid length. [ 2529.685204][ T7250] bridge_slave_1: default FDB implementation only supports local addresses [ 2529.705393][ T7254] netlink: 164 bytes leftover after parsing attributes in process `syz.5.10414'. [ 2530.084345][ T7258] bridge0: port 3(dummy0) entered disabled state [ 2530.091742][ T7258] bridge0: port 2(bridge_slave_1) entered disabled state [ 2530.104330][ T7258] bridge0: port 1(bridge_slave_0) entered disabled state [ 2530.703615][ T7277] netlink: 'syz.5.10419': attribute type 21 has an invalid length. [ 2530.755169][ T7277] netlink: 128 bytes leftover after parsing attributes in process `syz.5.10419'. [ 2530.817788][ T7277] netlink: 'syz.5.10419': attribute type 4 has an invalid length. [ 2530.975478][ T7266] delete_channel: no stack [ 2531.833719][ T7300] netlink: 1047 bytes leftover after parsing attributes in process `syz.6.10426'. [ 2531.854663][ T7300] bridge_slave_1: default FDB implementation only supports local addresses [ 2532.222022][ T7309] FAULT_INJECTION: forcing a failure. [ 2532.222022][ T7309] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2532.260743][ T7309] CPU: 1 PID: 7309 Comm: syz.5.10431 Not tainted syzkaller #0 [ 2532.268471][ T7309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2532.278607][ T7309] Call Trace: [ 2532.282057][ T7309] [ 2532.285032][ T7309] dump_stack_lvl+0x188/0x24e [ 2532.289842][ T7309] ? show_regs_print_info+0x12/0x12 [ 2532.295209][ T7309] ? load_image+0x400/0x400 [ 2532.299777][ T7309] ? __lock_acquire+0x7d10/0x7d10 [ 2532.304884][ T7309] should_fail_ex+0x399/0x4d0 [ 2532.309884][ T7309] _copy_from_user+0x2c/0x170 [ 2532.314622][ T7309] __sys_bpf+0x2ea/0x780 [ 2532.319038][ T7309] ? bpf_link_show_fdinfo+0x380/0x380 [ 2532.324494][ T7309] ? lock_chain_count+0x20/0x20 [ 2532.329515][ T7309] __x64_sys_bpf+0x78/0x90 [ 2532.334209][ T7309] do_syscall_64+0x4c/0xa0 [ 2532.338703][ T7309] ? clear_bhb_loop+0x60/0xb0 [ 2532.343536][ T7309] ? clear_bhb_loop+0x60/0xb0 [ 2532.348460][ T7309] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2532.354424][ T7309] RIP: 0033:0x7fae6f99c819 [ 2532.358921][ T7309] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2532.378872][ T7309] RSP: 002b:00007fae708aa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2532.387507][ T7309] RAX: ffffffffffffffda RBX: 00007fae6fc15fa0 RCX: 00007fae6f99c819 [ 2532.395876][ T7309] RDX: 0000000000000094 RSI: 0000200000000140 RDI: 0000000000000005 [ 2532.404081][ T7309] RBP: 00007fae708aa090 R08: 0000000000000000 R09: 0000000000000000 [ 2532.412794][ T7309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2532.420999][ T7309] R13: 00007fae6fc16038 R14: 00007fae6fc15fa0 R15: 00007fff9dc9d168 [ 2532.429383][ T7309] [ 2532.588750][ T7314] netlink: 'syz.7.10432': attribute type 29 has an invalid length. [ 2532.613416][ T7314] netlink: 'syz.7.10432': attribute type 29 has an invalid length. [ 2532.643900][ T7313] netlink: 'syz.7.10432': attribute type 29 has an invalid length. [ 2532.687192][ T7313] netlink: 'syz.7.10432': attribute type 3 has an invalid length. [ 2532.724174][ T7313] netlink: 105116 bytes leftover after parsing attributes in process `syz.7.10432'. [ 2533.497559][ T7339] netlink: 1047 bytes leftover after parsing attributes in process `syz.5.10441'. [ 2533.524764][ T7339] bridge_slave_1: default FDB implementation only supports local addresses [ 2535.623461][ T7372] netlink: 'syz.6.10452': attribute type 29 has an invalid length. [ 2535.649616][ T7372] netlink: 'syz.6.10452': attribute type 29 has an invalid length. [ 2536.712133][ T7399] netlink: 14 bytes leftover after parsing attributes in process `syz.6.10460'. [ 2537.206827][ T7399] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2537.230465][ T7399] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2537.284659][ T7399] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 2537.315314][ T7399] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 2537.338773][ T7399] bond0 (unregistering): Released all slaves [ 2538.022526][ T7428] netlink: 'syz.7.10469': attribute type 29 has an invalid length. [ 2538.096610][ T7428] netlink: 'syz.7.10469': attribute type 29 has an invalid length. [ 2538.842904][ T7437] netlink: 'syz.5.10474': attribute type 27 has an invalid length. [ 2538.890456][ T7437] netlink: 164 bytes leftover after parsing attributes in process `syz.5.10474'. [ 2539.560596][ T7448] sctp: [Deprecated]: syz.3.10467 (pid 7448) Use of int in maxseg socket option. [ 2539.560596][ T7448] Use struct sctp_assoc_value instead [ 2539.920850][ T7460] netlink: 'syz.2.10481': attribute type 21 has an invalid length. [ 2539.964239][ T7460] netlink: 'syz.2.10481': attribute type 2 has an invalid length. [ 2540.539063][ T7469] netlink: 1047 bytes leftover after parsing attributes in process `syz.5.10483'. [ 2540.668330][ T7469] bridge_slave_1: default FDB implementation only supports local addresses [ 2541.161619][ T7478] netlink: 'syz.3.10485': attribute type 29 has an invalid length. [ 2541.175018][ T7478] netlink: 'syz.3.10485': attribute type 29 has an invalid length. [ 2541.564314][ T3007] Bluetooth: hci3: command 0x0406 tx timeout [ 2542.569954][ T7513] netlink: 'syz.3.10497': attribute type 21 has an invalid length. [ 2542.584351][ T7513] netlink: 128 bytes leftover after parsing attributes in process `syz.3.10497'. [ 2542.593846][ T7513] netlink: 'syz.3.10497': attribute type 4 has an invalid length. [ 2542.760670][ T7516] netlink: 'syz.2.10498': attribute type 21 has an invalid length. [ 2542.811190][ T7520] netlink: 1047 bytes leftover after parsing attributes in process `syz.5.10500'. [ 2542.852804][ T7520] bridge_slave_1: default FDB implementation only supports local addresses [ 2543.845462][ T7535] netlink: 'syz.3.10504': attribute type 27 has an invalid length. [ 2543.863045][ T7535] netlink: 164 bytes leftover after parsing attributes in process `syz.3.10504'. [ 2545.745343][ T7562] netlink: 'syz.7.10511': attribute type 21 has an invalid length. [ 2545.854611][ T7564] FAULT_INJECTION: forcing a failure. [ 2545.854611][ T7564] name failslab, interval 1, probability 0, space 0, times 0 [ 2545.928587][ T7564] CPU: 0 PID: 7564 Comm: syz.6.10512 Not tainted syzkaller #0 [ 2545.936416][ T7564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2545.946803][ T7564] Call Trace: [ 2545.950236][ T7564] [ 2545.953300][ T7564] dump_stack_lvl+0x188/0x24e [ 2545.958067][ T7564] ? show_regs_print_info+0x12/0x12 [ 2545.963388][ T7564] ? load_image+0x400/0x400 [ 2545.968273][ T7564] ? __might_sleep+0xd0/0xd0 [ 2545.973023][ T7564] ? __lock_acquire+0x7d10/0x7d10 [ 2545.978402][ T7564] should_fail_ex+0x399/0x4d0 [ 2545.983365][ T7564] should_failslab+0x5/0x20 [ 2545.987929][ T7564] slab_pre_alloc_hook+0x59/0x310 [ 2545.993208][ T7564] ? genl_family_rcv_msg_doit+0x279/0x330 [ 2545.999274][ T7564] kmem_cache_alloc_node+0x5a/0x320 [ 2546.004806][ T7564] ? __alloc_skb+0xfc/0x7e0 [ 2546.009638][ T7564] __alloc_skb+0xfc/0x7e0 [ 2546.014134][ T7564] netlink_ack+0x372/0x1170 [ 2546.018812][ T7564] ? genl_rcv_msg+0x604/0x790 [ 2546.023590][ T7564] ? genl_bind+0x360/0x360 [ 2546.028333][ T7564] ? netlink_dump+0xd00/0xd00 [ 2546.033350][ T7564] netlink_rcv_skb+0x280/0x450 [ 2546.038362][ T7564] ? genl_bind+0x360/0x360 [ 2546.043044][ T7564] ? netlink_ack+0x1170/0x1170 [ 2546.047909][ T7564] ? down_read+0x1a8/0x2d0 [ 2546.052496][ T7564] genl_rcv+0x24/0x40 [ 2546.056543][ T7564] netlink_unicast+0x74d/0x8d0 [ 2546.061479][ T7564] netlink_sendmsg+0x8ad/0xbd0 [ 2546.066417][ T7564] ? netlink_getsockopt+0x550/0x550 [ 2546.071876][ T7564] ? aa_sock_msg_perm+0x94/0x150 [ 2546.077071][ T7564] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2546.082426][ T7564] ? security_socket_sendmsg+0x7c/0xa0 [ 2546.087975][ T7564] ? netlink_getsockopt+0x550/0x550 [ 2546.093262][ T7564] ____sys_sendmsg+0x5be/0x970 [ 2546.098114][ T7564] ? __sys_sendmsg_sock+0x30/0x30 [ 2546.103308][ T7564] ? __import_iovec+0x315/0x500 [ 2546.108320][ T7564] ? import_iovec+0x6f/0xa0 [ 2546.112971][ T7564] ___sys_sendmsg+0x2a2/0x360 [ 2546.117754][ T7564] ? __sys_sendmsg+0x290/0x290 [ 2546.122705][ T7564] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2546.129311][ T7564] __se_sys_sendmsg+0x1bb/0x2a0 [ 2546.134512][ T7564] ? __x64_sys_sendmsg+0x80/0x80 [ 2546.139554][ T7564] ? lockdep_hardirqs_on+0x94/0x140 [ 2546.144933][ T7564] do_syscall_64+0x4c/0xa0 [ 2546.149619][ T7564] ? clear_bhb_loop+0x60/0xb0 [ 2546.154472][ T7564] ? clear_bhb_loop+0x60/0xb0 [ 2546.159555][ T7564] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2546.165520][ T7564] RIP: 0033:0x7f2db3b9c819 [ 2546.169999][ T7564] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2546.190130][ T7564] RSP: 002b:00007f2db49e8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2546.198615][ T7564] RAX: ffffffffffffffda RBX: 00007f2db3e15fa0 RCX: 00007f2db3b9c819 [ 2546.206720][ T7564] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 2546.215147][ T7564] RBP: 00007f2db49e8090 R08: 0000000000000000 R09: 0000000000000000 [ 2546.223194][ T7564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2546.231662][ T7564] R13: 00007f2db3e16038 R14: 00007f2db3e15fa0 R15: 00007ffce975b438 [ 2546.240795][ T7564] [ 2546.303626][ T7573] netlink: 'syz.7.10513': attribute type 21 has an invalid length. [ 2546.322714][ T7573] netlink: 128 bytes leftover after parsing attributes in process `syz.7.10513'. [ 2546.344556][ T7573] netlink: 'syz.7.10513': attribute type 4 has an invalid length. [ 2547.330008][ T7594] netlink: 1047 bytes leftover after parsing attributes in process `syz.6.10522'. [ 2547.361381][ T7594] bridge_slave_1: default FDB implementation only supports local addresses [ 2547.759644][ T7604] netlink: 'syz.3.10525': attribute type 21 has an invalid length. [ 2548.411908][ T7618] netlink: 'syz.6.10531': attribute type 21 has an invalid length. [ 2548.440968][ T7618] netlink: 128 bytes leftover after parsing attributes in process `syz.6.10531'. [ 2548.514439][ T7618] netlink: 'syz.6.10531': attribute type 4 has an invalid length. [ 2548.658280][ T7627] sock: sock_set_timeout: `syz.5.10534' (pid 7627) tries to set negative timeout [ 2549.433871][ T7642] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.10540'. [ 2549.496941][ T7642] bridge_slave_1: default FDB implementation only supports local addresses [ 2550.878209][ T7676] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.10555'. [ 2550.922239][ T7676] bridge_slave_1: default FDB implementation only supports local addresses [ 2551.523493][ T7696] netlink: 'syz.6.10561': attribute type 21 has an invalid length. [ 2551.540014][ T7696] netlink: 128 bytes leftover after parsing attributes in process `syz.6.10561'. [ 2551.594478][ T7702] netlink: 'syz.7.10572': attribute type 27 has an invalid length. [ 2551.603106][ T7702] netlink: 164 bytes leftover after parsing attributes in process `syz.7.10572'. [ 2551.626371][ T7696] netlink: 'syz.6.10561': attribute type 4 has an invalid length. [ 2551.636815][ T7703] netlink: 122896 bytes leftover after parsing attributes in process `syz.6.10561'. [ 2551.663434][ T7703] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 2551.861092][ T7712] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.10564'. [ 2552.778783][ T7728] netlink: 'syz.5.10571': attribute type 27 has an invalid length. [ 2552.808900][ T7728] netlink: 164 bytes leftover after parsing attributes in process `syz.5.10571'. [ 2552.935950][ T7731] netlink: 1047 bytes leftover after parsing attributes in process `syz.7.10570'. [ 2553.019815][ T7731] bridge_slave_1: default FDB implementation only supports local addresses [ 2553.111161][ T7715] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.10565'. [ 2553.314746][ T7715] device wg2 entered promiscuous mode [ 2553.658162][ T7744] FAULT_INJECTION: forcing a failure. [ 2553.658162][ T7744] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2553.724672][ T7744] CPU: 1 PID: 7744 Comm: syz.2.10576 Not tainted syzkaller #0 [ 2553.732694][ T7744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2553.743709][ T7744] Call Trace: [ 2553.747068][ T7744] [ 2553.750185][ T7744] dump_stack_lvl+0x188/0x24e [ 2553.755092][ T7744] ? show_regs_print_info+0x12/0x12 [ 2553.760527][ T7744] ? load_image+0x400/0x400 [ 2553.765149][ T7744] ? __lock_acquire+0x7d10/0x7d10 [ 2553.770631][ T7744] ? snprintf+0xe5/0x140 [ 2553.775150][ T7744] should_fail_ex+0x399/0x4d0 [ 2553.780205][ T7744] _copy_to_user+0x2c/0x130 [ 2553.784891][ T7744] simple_read_from_buffer+0xe3/0x150 [ 2553.790889][ T7744] proc_fail_nth_read+0x1a6/0x220 [ 2553.796293][ T7744] ? proc_fault_inject_write+0x310/0x310 [ 2553.802035][ T7744] ? fsnotify_perm+0x248/0x550 [ 2553.806984][ T7744] ? proc_fault_inject_write+0x310/0x310 [ 2553.812838][ T7744] vfs_read+0x2de/0xa00 [ 2553.817511][ T7744] ? kernel_read+0x1e0/0x1e0 [ 2553.822341][ T7744] ? __fget_files+0x28/0x4b0 [ 2553.827258][ T7744] ? __fget_files+0x28/0x4b0 [ 2553.832012][ T7744] ? __fget_files+0x43d/0x4b0 [ 2553.836886][ T7744] ? __fdget_pos+0x2ae/0x360 [ 2553.841917][ T7744] ? ksys_read+0x71/0x250 [ 2553.846465][ T7744] ksys_read+0x14c/0x250 [ 2553.850814][ T7744] ? vfs_write+0xa30/0xa30 [ 2553.855423][ T7744] ? lockdep_hardirqs_on+0x94/0x140 [ 2553.861002][ T7744] do_syscall_64+0x4c/0xa0 [ 2553.865782][ T7744] ? clear_bhb_loop+0x60/0xb0 [ 2553.870869][ T7744] ? clear_bhb_loop+0x60/0xb0 [ 2553.875895][ T7744] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2553.882020][ T7744] RIP: 0033:0x7fbdbbd5d04e [ 2553.886781][ T7744] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2553.906813][ T7744] RSP: 002b:00007fbdbcd37fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2553.915389][ T7744] RAX: ffffffffffffffda RBX: 00007fbdbcd386c0 RCX: 00007fbdbbd5d04e [ 2553.923633][ T7744] RDX: 000000000000000f RSI: 00007fbdbcd380a0 RDI: 0000000000000004 [ 2553.932116][ T7744] RBP: 00007fbdbcd38090 R08: 0000000000000000 R09: 0000000000000000 [ 2553.940446][ T7744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2553.948723][ T7744] R13: 00007fbdbc016038 R14: 00007fbdbc015fa0 R15: 00007ffe2a84b488 [ 2553.956843][ T7744] [ 2554.928125][ T7762] netlink: 'syz.5.10582': attribute type 27 has an invalid length. [ 2554.960255][ T7762] netlink: 164 bytes leftover after parsing attributes in process `syz.5.10582'. [ 2555.224347][ T7772] netlink: 'syz.3.10586': attribute type 27 has an invalid length. [ 2555.245698][ T7772] netlink: 164 bytes leftover after parsing attributes in process `syz.3.10586'. [ 2555.658401][ T7785] netlink: 1047 bytes leftover after parsing attributes in process `syz.5.10589'. [ 2555.704949][ T7785] bridge_slave_1: default FDB implementation only supports local addresses [ 2555.937626][ T7792] mac80211_hwsim hwsim207 ªªªªªª: renamed from wlan0 [ 2556.173356][ T7807] netlink: 'syz.2.10594': attribute type 10 has an invalid length. [ 2556.587929][ T7813] netlink: 'syz.3.10600': attribute type 27 has an invalid length. [ 2556.618442][ T7813] netlink: 164 bytes leftover after parsing attributes in process `syz.3.10600'. [ 2557.543803][ T7836] netlink: 'syz.2.10604': attribute type 27 has an invalid length. [ 2557.594536][ T7836] netlink: 164 bytes leftover after parsing attributes in process `syz.2.10604'. [ 2557.605700][ T7835] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2557.613719][ T7835] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2557.695156][ T7835] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2557.724436][ T7835] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2557.847879][ T7835] bond0: (slave batadv0): Releasing backup interface [ 2557.935914][ T7845] netlink: 830 bytes leftover after parsing attributes in process `syz.6.10607'. [ 2557.966771][ T7842] netlink: 1047 bytes leftover after parsing attributes in process `syz.7.10606'. [ 2557.992432][ T7848] netlink: 'syz.2.10608': attribute type 29 has an invalid length. [ 2558.001332][ T7842] bridge_slave_1: default FDB implementation only supports local addresses [ 2558.038477][ T7848] netlink: 'syz.2.10608': attribute type 29 has an invalid length. [ 2558.063698][ T7851] netlink: 'syz.2.10608': attribute type 29 has an invalid length. [ 2558.119354][ T7848] netlink: 'syz.2.10608': attribute type 29 has an invalid length. [ 2558.174438][ T7852] netlink: 'syz.5.10609': attribute type 39 has an invalid length. [ 2558.440492][ T7851] netlink: 'syz.2.10608': attribute type 21 has an invalid length. [ 2558.457852][ T7851] netlink: 128 bytes leftover after parsing attributes in process `syz.2.10608'. [ 2558.498943][ T7851] netlink: 'syz.2.10608': attribute type 4 has an invalid length. [ 2558.617457][ T7867] netlink: 'syz.3.10614': attribute type 8 has an invalid length. [ 2558.647939][ T7867] netlink: 104088 bytes leftover after parsing attributes in process `syz.3.10614'. [ 2558.805799][ T7867] netlink: 32 bytes leftover after parsing attributes in process `syz.3.10614'. [ 2558.873459][ T7871] netlink: 170140 bytes leftover after parsing attributes in process `syz.2.10615'. [ 2559.250221][ T7882] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10619'. [ 2559.346397][ T7886] FAULT_INJECTION: forcing a failure. [ 2559.346397][ T7886] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2559.377286][ T7886] CPU: 0 PID: 7886 Comm: syz.2.10619 Not tainted syzkaller #0 [ 2559.384933][ T7886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2559.395233][ T7886] Call Trace: [ 2559.399010][ T7886] [ 2559.402019][ T7886] dump_stack_lvl+0x188/0x24e [ 2559.407040][ T7886] ? show_regs_print_info+0x12/0x12 [ 2559.412516][ T7886] ? load_image+0x400/0x400 [ 2559.417322][ T7886] ? __lock_acquire+0x7d10/0x7d10 [ 2559.422697][ T7886] should_fail_ex+0x399/0x4d0 [ 2559.427981][ T7886] _copy_from_user+0x2c/0x170 [ 2559.432830][ T7886] iovec_from_user+0x143/0x360 [ 2559.437697][ T7886] __import_iovec+0x6d/0x500 [ 2559.442457][ T7886] import_iovec+0x6f/0xa0 [ 2559.446984][ T7886] ___sys_sendmsg+0x252/0x360 [ 2559.451945][ T7886] ? __sys_sendmsg+0x290/0x290 [ 2559.457093][ T7886] ? __lock_acquire+0x7d10/0x7d10 [ 2559.462217][ T7886] __se_sys_sendmsg+0x1bb/0x2a0 [ 2559.467241][ T7886] ? __x64_sys_sendmsg+0x80/0x80 [ 2559.472553][ T7886] ? lockdep_hardirqs_on+0x94/0x140 [ 2559.477835][ T7886] do_syscall_64+0x4c/0xa0 [ 2559.482342][ T7886] ? clear_bhb_loop+0x60/0xb0 [ 2559.487104][ T7886] ? clear_bhb_loop+0x60/0xb0 [ 2559.491942][ T7886] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2559.497986][ T7886] RIP: 0033:0x7fbdbbd9c819 [ 2559.502464][ T7886] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2559.522682][ T7886] RSP: 002b:00007fbdbcd17028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2559.531513][ T7886] RAX: ffffffffffffffda RBX: 00007fbdbc016090 RCX: 00007fbdbbd9c819 [ 2559.539840][ T7886] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000006 [ 2559.548056][ T7886] RBP: 00007fbdbcd17090 R08: 0000000000000000 R09: 0000000000000000 [ 2559.556182][ T7886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2559.564441][ T7886] R13: 00007fbdbc016128 R14: 00007fbdbc016090 R15: 00007ffe2a84b488 [ 2559.572676][ T7886] [ 2559.629537][ T7885] device syzkaller0 entered promiscuous mode [ 2559.639344][ T7890] netlink: 128 bytes leftover after parsing attributes in process `syz.6.10621'. [ 2562.551512][ T7892] device syzkaller0 entered promiscuous mode [ 2562.559908][ T7895] netlink: 763 bytes leftover after parsing attributes in process `syz.2.10623'. [ 2562.571256][ T7902] netlink: 1047 bytes leftover after parsing attributes in process `syz.5.10624'. [ 2562.594474][ T7902] bridge_slave_1: default FDB implementation only supports local addresses [ 2563.947574][ T7937] validate_nla: 9 callbacks suppressed [ 2563.947610][ T7937] netlink: 'syz.3.10635': attribute type 27 has an invalid length. [ 2563.962768][ T7937] netlink: 164 bytes leftover after parsing attributes in process `syz.3.10635'. [ 2566.196039][ T7923] netlink: 'syz.5.10631': attribute type 2 has an invalid length. [ 2566.208108][ T7923] netlink: 'syz.5.10631': attribute type 8 has an invalid length. [ 2566.218365][ T7923] netlink: 132 bytes leftover after parsing attributes in process `syz.5.10631'. [ 2566.233402][ T7924] netlink: 'syz.5.10631': attribute type 2 has an invalid length. [ 2566.250298][ T7924] netlink: 'syz.5.10631': attribute type 8 has an invalid length. [ 2566.259988][ T7924] netlink: 132 bytes leftover after parsing attributes in process `syz.5.10631'. [ 2566.277955][ T7940] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.10636'. [ 2566.301734][ T7940] bridge_slave_1: default FDB implementation only supports local addresses [ 2566.347348][ T7942] netlink: 'syz.2.10637': attribute type 27 has an invalid length. [ 2566.370659][ T7942] netlink: 164 bytes leftover after parsing attributes in process `syz.2.10637'. [ 2566.514697][ T7946] netlink: 'syz.6.10639': attribute type 21 has an invalid length. [ 2566.536189][ T7946] netlink: 128 bytes leftover after parsing attributes in process `syz.6.10639'. [ 2566.624710][ T7951] netlink: 'syz.5.10640': attribute type 27 has an invalid length. [ 2566.631244][ T7946] netlink: 'syz.6.10639': attribute type 4 has an invalid length. [ 2566.663609][ T7951] netlink: 164 bytes leftover after parsing attributes in process `syz.5.10640'. [ 2566.742854][ T7956] FAULT_INJECTION: forcing a failure. [ 2566.742854][ T7956] name failslab, interval 1, probability 0, space 0, times 0 [ 2566.795065][ T7956] CPU: 0 PID: 7956 Comm: syz.7.10642 Not tainted syzkaller #0 [ 2566.802811][ T7956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2566.813368][ T7956] Call Trace: [ 2566.817856][ T7956] [ 2566.820839][ T7956] dump_stack_lvl+0x188/0x24e [ 2566.825866][ T7956] ? show_regs_print_info+0x12/0x12 [ 2566.831136][ T7956] ? load_image+0x400/0x400 [ 2566.835799][ T7956] ? __might_sleep+0xd0/0xd0 [ 2566.840737][ T7956] ? __lock_acquire+0x7d10/0x7d10 [ 2566.846103][ T7956] should_fail_ex+0x399/0x4d0 [ 2566.850940][ T7956] should_failslab+0x5/0x20 [ 2566.855606][ T7956] slab_pre_alloc_hook+0x59/0x310 [ 2566.860701][ T7956] ? __get_vm_area_node+0x122/0x330 [ 2566.866158][ T7956] __kmem_cache_alloc_node+0x4f/0x260 [ 2566.871687][ T7956] ? __get_vm_area_node+0x122/0x330 [ 2566.877124][ T7956] kmalloc_node_trace+0x22/0xe0 [ 2566.882154][ T7956] __get_vm_area_node+0x122/0x330 [ 2566.887365][ T7956] vmap+0xf5/0x2c0 [ 2566.891420][ T7956] ? bpf_ringbuf_alloc+0x33b/0x560 [ 2566.896883][ T7956] bpf_ringbuf_alloc+0x33b/0x560 [ 2566.901891][ T7956] ringbuf_map_alloc+0x1ac/0x2d0 [ 2566.906885][ T7956] map_create+0x534/0x1000 [ 2566.911342][ T7956] ? bpf_lsm_bpf+0x5/0x10 [ 2566.915804][ T7956] __sys_bpf+0x38b/0x780 [ 2566.920189][ T7956] ? bpf_link_show_fdinfo+0x380/0x380 [ 2566.925646][ T7956] ? lock_chain_count+0x20/0x20 [ 2566.930544][ T7956] __x64_sys_bpf+0x78/0x90 [ 2566.935086][ T7956] do_syscall_64+0x4c/0xa0 [ 2566.939551][ T7956] ? clear_bhb_loop+0x60/0xb0 [ 2566.944513][ T7956] ? clear_bhb_loop+0x60/0xb0 [ 2566.949328][ T7956] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2566.955531][ T7956] RIP: 0033:0x7f2fbeb9c819 [ 2566.960167][ T7956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2566.980339][ T7956] RSP: 002b:00007f2fbfa2a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2566.988991][ T7956] RAX: ffffffffffffffda RBX: 00007f2fbee15fa0 RCX: 00007f2fbeb9c819 [ 2566.997014][ T7956] RDX: 0000000000000050 RSI: 00002000000000c0 RDI: 0000000000000000 [ 2567.005506][ T7956] RBP: 00007f2fbfa2a090 R08: 0000000000000000 R09: 0000000000000000 [ 2567.013631][ T7956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2567.022002][ T7956] R13: 00007f2fbee16038 R14: 00007f2fbee15fa0 R15: 00007ffca86e3578 [ 2567.030381][ T7956] [ 2567.164570][ T3007] Bluetooth: hci4: command 0x0406 tx timeout [ 2567.967482][ T7974] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.10651'. [ 2568.004743][ T7974] bridge_slave_1: default FDB implementation only supports local addresses [ 2568.520822][ T7991] netlink: 'syz.2.10654': attribute type 27 has an invalid length. [ 2568.555142][ T7991] netlink: 164 bytes leftover after parsing attributes in process `syz.2.10654'. [ 2568.584957][ T7994] netlink: 128 bytes leftover after parsing attributes in process `syz.3.10655'. [ 2568.768696][ T8003] FAULT_INJECTION: forcing a failure. [ 2568.768696][ T8003] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2568.805245][ T8003] CPU: 1 PID: 8003 Comm: syz.7.10658 Not tainted syzkaller #0 [ 2568.812804][ T8003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2568.823106][ T8003] Call Trace: [ 2568.826588][ T8003] [ 2568.829655][ T8003] dump_stack_lvl+0x188/0x24e [ 2568.834405][ T8003] ? show_regs_print_info+0x12/0x12 [ 2568.839671][ T8003] ? load_image+0x400/0x400 [ 2568.844411][ T8003] ? __might_fault+0xa6/0x120 [ 2568.849209][ T8003] should_fail_ex+0x399/0x4d0 [ 2568.853963][ T8003] copyin+0x1b/0x120 [ 2568.857918][ T8003] _copy_from_iter+0x447/0x1130 [ 2568.863055][ T8003] ? copyout_mc+0x110/0x110 [ 2568.867809][ T8003] ? copyout_mc+0x110/0x110 [ 2568.872651][ T8003] ? __virt_addr_valid+0x188/0x540 [ 2568.878019][ T8003] ? page_copy_sane+0x194/0x390 [ 2568.882944][ T8003] copy_page_from_iter+0x77/0x100 [ 2568.888076][ T8003] skb_copy_datagram_from_iter+0x2b3/0x690 [ 2568.894402][ T8003] unix_dgram_sendmsg+0x5fb/0x16e0 [ 2568.899873][ T8003] ? aa_sk_perm+0x81f/0x950 [ 2568.904626][ T8003] ? __might_fault+0xa6/0x120 [ 2568.909360][ T8003] ? unix_dgram_poll+0x680/0x680 [ 2568.914362][ T8003] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 2568.920837][ T8003] ? aa_sock_msg_perm+0x94/0x150 [ 2568.925811][ T8003] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2568.931259][ T8003] ? security_socket_sendmsg+0x7c/0xa0 [ 2568.937039][ T8003] ? unix_dgram_poll+0x680/0x680 [ 2568.942037][ T8003] ____sys_sendmsg+0x5be/0x970 [ 2568.946870][ T8003] ? __sys_sendmsg_sock+0x30/0x30 [ 2568.952034][ T8003] ? __import_iovec+0x315/0x500 [ 2568.957024][ T8003] ? import_iovec+0x6f/0xa0 [ 2568.961861][ T8003] ___sys_sendmsg+0x2a2/0x360 [ 2568.966693][ T8003] ? __sys_sendmsg+0x290/0x290 [ 2568.971710][ T8003] ? __lock_acquire+0x7d10/0x7d10 [ 2568.977178][ T8003] __se_sys_sendmsg+0x1bb/0x2a0 [ 2568.982183][ T8003] ? __x64_sys_sendmsg+0x80/0x80 [ 2568.987198][ T8003] ? lockdep_hardirqs_on+0x94/0x140 [ 2568.992695][ T8003] do_syscall_64+0x4c/0xa0 [ 2568.997606][ T8003] ? clear_bhb_loop+0x60/0xb0 [ 2569.002533][ T8003] ? clear_bhb_loop+0x60/0xb0 [ 2569.007276][ T8003] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2569.013397][ T8003] RIP: 0033:0x7f2fbeb9c819 [ 2569.017859][ T8003] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2569.037866][ T8003] RSP: 002b:00007f2fbfa2a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2569.046698][ T8003] RAX: ffffffffffffffda RBX: 00007f2fbee15fa0 RCX: 00007f2fbeb9c819 [ 2569.055523][ T8003] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000007 [ 2569.064188][ T8003] RBP: 00007f2fbfa2a090 R08: 0000000000000000 R09: 0000000000000000 [ 2569.072491][ T8003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2569.080772][ T8003] R13: 00007f2fbee16038 R14: 00007f2fbee15fa0 R15: 00007ffca86e3578 [ 2569.089145][ T8003] [ 2569.198497][ T8007] validate_nla: 2 callbacks suppressed [ 2569.198537][ T8007] netlink: 'syz.5.10660': attribute type 27 has an invalid length. [ 2569.215080][ T8007] netlink: 164 bytes leftover after parsing attributes in process `syz.5.10660'. [ 2569.711465][ T8023] netlink: 1047 bytes leftover after parsing attributes in process `syz.7.10665'. [ 2569.722454][ T8023] bridge_slave_1: default FDB implementation only supports local addresses [ 2585.662717][ T4276] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2585.672843][ T4276] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2585.683930][ T4276] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2585.693357][ T4276] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2585.703031][ T4276] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 2585.711696][ T4276] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2585.824611][ T4276] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2585.841623][ T4276] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2585.850351][ T4276] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2585.866159][ T4276] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2585.874299][ T4276] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 2585.882198][ T4276] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2586.900710][ T3007] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 2586.910705][ T3007] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 2586.924373][ T3007] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 2586.934550][ T3007] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 2586.950580][T25897] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 2586.958186][T25897] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 2587.024337][T25897] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 2587.041479][T25897] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 2587.052463][T25897] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 2587.072935][T25897] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 2587.081117][T25897] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 2587.089668][T25897] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 2587.649616][T25897] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 2587.665324][T25897] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 2587.678566][T25897] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 2587.687112][T25897] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 2587.695541][T25897] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 2587.703008][T25897] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 2587.804322][T25897] Bluetooth: hci5: command 0x0409 tx timeout [ 2587.964365][T25897] Bluetooth: hci6: command 0x0409 tx timeout [ 2589.004341][T25897] Bluetooth: hci7: command 0x0409 tx timeout [ 2589.164402][T25897] Bluetooth: hci8: command 0x0409 tx timeout [ 2589.724383][T25897] Bluetooth: hci9: command 0x0409 tx timeout [ 2589.884243][T25897] Bluetooth: hci5: command 0x041b tx timeout [ 2590.044445][T25897] Bluetooth: hci6: command 0x041b tx timeout [ 2591.084355][T25897] Bluetooth: hci7: command 0x041b tx timeout [ 2591.244245][T25897] Bluetooth: hci8: command 0x041b tx timeout [ 2591.804271][T25897] Bluetooth: hci9: command 0x041b tx timeout [ 2591.964375][T25897] Bluetooth: hci5: command 0x040f tx timeout [ 2592.124325][T25897] Bluetooth: hci6: command 0x040f tx timeout [ 2593.164328][T25897] Bluetooth: hci7: command 0x040f tx timeout [ 2593.324256][T25897] Bluetooth: hci8: command 0x040f tx timeout [ 2593.884902][T25897] Bluetooth: hci9: command 0x040f tx timeout [ 2594.044246][T25897] Bluetooth: hci5: command 0x0419 tx timeout [ 2594.204384][T25897] Bluetooth: hci6: command 0x0419 tx timeout [ 2595.244401][T25897] Bluetooth: hci7: command 0x0419 tx timeout [ 2595.404269][T25897] Bluetooth: hci8: command 0x0419 tx timeout [ 2595.964258][T25897] Bluetooth: hci9: command 0x0419 tx timeout [ 2597.084341][T13921] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 0-.... } 2662 jiffies s: 657125 root: 0x1/. [ 2597.108405][T13921] rcu: blocking rcu_node structures (internal RCU debug): [ 2597.133607][T13921] Sending NMI from CPU 1 to CPUs 0: [ 2597.139290][ C0] NMI backtrace for cpu 0 [ 2597.139305][ C0] CPU: 0 PID: 8025 Comm: syz.3.10666 Not tainted syzkaller #0 [ 2597.139325][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2597.139337][ C0] RIP: 0010:__lock_acquire+0x10cf/0x7d10 [ 2597.139371][ C0] Code: 1f 00 00 c1 e8 03 25 f8 03 00 00 48 8d b8 40 92 af 90 be 08 00 00 00 e8 2f 30 6f 00 48 0f a3 1d 47 3f 4b 0f 0f 83 8c 01 00 00 <48> 8d 04 5b c1 e0 06 48 8d 98 00 11 48 90 49 b8 00 00 00 00 00 fc [ 2597.139388][ C0] RSP: 0018:ffffc90000006d20 EFLAGS: 00000057 [ 2597.139405][ C0] RAX: 0000000000000001 RBX: 000000000000002c RCX: ffffffff816452f1 [ 2597.139418][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff90af9240 [ 2597.139431][ C0] RBP: ffffc90000006f70 R08: ffffffff90af9247 R09: 1ffffffff215f248 [ 2597.139446][ C0] R10: dffffc0000000000 R11: fffffbfff215f249 R12: 00000000a00424dd [ 2597.139460][ C0] R13: 000000007d6f40c2 R14: 00000000334dffec R15: ffff88802dba8ad0 [ 2597.139474][ C0] FS: 00007face0bcd6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 2597.139491][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2597.139505][ C0] CR2: 000000110c3235eb CR3: 000000007e04a000 CR4: 00000000003506f0 [ 2597.139521][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2597.139533][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 2597.139545][ C0] Call Trace: [ 2597.139551][ C0] [ 2597.139562][ C0] ? mark_lock+0x94/0x320 [ 2597.139595][ C0] ? verify_lock_unused+0x140/0x140 [ 2597.139624][ C0] ? mark_lock+0x94/0x320 [ 2597.139650][ C0] ? verify_lock_unused+0x140/0x140 [ 2597.139674][ C0] ? __lock_acquire+0x12f4/0x7d10 [ 2597.139700][ C0] ? verify_lock_unused+0x140/0x140 [ 2597.139729][ C0] lock_acquire+0x1bb/0x4a0 [ 2597.139753][ C0] ? __virt_addr_valid+0x188/0x540 [ 2597.139783][ C0] ? read_lock_is_recursive+0x10/0x10 [ 2597.139811][ C0] ? rcu_read_unlock+0x8c/0xa0 [ 2597.139837][ C0] ? __virt_addr_valid+0x188/0x540 [ 2597.139862][ C0] __virt_addr_valid+0x1a5/0x540 [ 2597.139886][ C0] ? __virt_addr_valid+0x188/0x540 [ 2597.139912][ C0] kasan_addr_to_slab+0x9/0xc0 [ 2597.139946][ C0] __kasan_record_aux_stack+0xf/0xc0 [ 2597.139964][ C0] irq_work_queue_on+0x10f/0x260 [ 2597.139994][ C0] rcu_read_unlock_special+0x3c9/0x510 [ 2597.140016][ C0] ? __rcu_read_unlock+0xd0/0xd0 [ 2597.140036][ C0] ? __perf_cgroup_move+0x150/0x150 [ 2597.140069][ C0] __rcu_read_unlock+0x78/0xd0 [ 2597.140088][ C0] perf_event_output_forward+0x271/0x2f0 [ 2597.140117][ C0] ? perf_event_output_forward+0xbe/0x2f0 [ 2597.140143][ C0] ? perf_get_page_size+0x430/0x430 [ 2597.140176][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 2597.140206][ C0] __perf_event_overflow+0x448/0x610 [ 2597.140238][ C0] perf_swevent_event+0x315/0x570 [ 2597.140267][ C0] ? perf_tp_event+0xc30/0xc30 [ 2597.140294][ C0] ? perf_trace_buf_alloc+0x300/0x300 [ 2597.140320][ C0] perf_tp_event+0x3e7/0xc30 [ 2597.140347][ C0] ? perf_tp_event+0xc30/0xc30 [ 2597.140376][ C0] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 2597.140404][ C0] ? sched_clock_cpu+0x6e/0x260 [ 2597.140446][ C0] ? kvm_sched_clock_read+0x14/0x40 [ 2597.140463][ C0] ? sched_clock_cpu+0x6e/0x260 [ 2597.140487][ C0] perf_trace_run_bpf_submit+0xf3/0x1c0 [ 2597.140518][ C0] perf_trace_preemptirq_template+0x268/0x320 [ 2597.140545][ C0] ? asm_sysvec_irq_work+0x16/0x20 [ 2597.140571][ C0] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 2597.140599][ C0] ? __irq_exit_rcu+0x147/0x230 [ 2597.140617][ C0] ? irq_exit_rcu+0x20/0x20 [ 2597.140635][ C0] ? asm_sysvec_irq_work+0x16/0x20 [ 2597.140660][ C0] trace_irq_enable_rcuidle+0xd3/0x140 [ 2597.140687][ C0] trace_hardirqs_on+0x24/0x40 [ 2597.140711][ C0] asm_sysvec_irq_work+0x16/0x20 [ 2597.140735][ C0] RIP: 0010:rcu_read_unlock_special+0x7f/0x510 [ 2597.140755][ C0] Code: eb 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 2b 42 c7 44 2b 08 f8 f3 f3 f3 65 44 8b 35 d2 33 95 7e 41 f7 c6 00 00 f0 00 74 40 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 42 c7 44 2b 08 [ 2597.140771][ C0] RSP: 0018:ffffc900000079c0 EFLAGS: 00000206 [ 2597.140786][ C0] RAX: e64d81c1ce814900 RBX: 1ffff92000000f40 RCX: e64d81c1ce814900 [ 2597.140801][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8c10a0 RDI: ffffffff8adf11a0 [ 2597.140816][ C0] RBP: ffffc90000007ac0 R08: ffffffff90af92df R09: 1ffffffff215f25b [ 2597.140831][ C0] R10: dffffc0000000000 R11: fffffbfff215f25c R12: 0000000000000246 [ 2597.140845][ C0] R13: dffffc0000000000 R14: ffff8880b8e3b900 R15: 0000000000000001 [ 2597.140867][ C0] ? ip6_rcv_core+0x1730/0x1750 [ 2597.140898][ C0] ? __rcu_read_unlock+0xd0/0xd0 [ 2597.140919][ C0] ? ip6_rcv_finish_core+0x420/0x420 [ 2597.140950][ C0] __rcu_read_unlock+0x78/0xd0 [ 2597.140969][ C0] ? process_backlog+0x2cb/0x6f0 [ 2597.140986][ C0] process_backlog+0x410/0x6f0 [ 2597.141010][ C0] ? trigger_rx_softirq+0x60/0x60 [ 2597.141027][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2597.141055][ C0] ? lock_chain_count+0x20/0x20 [ 2597.141087][ C0] __napi_poll+0xc0/0x460 [ 2597.141114][ C0] ? net_rx_action+0x30b/0xb20 [ 2597.141133][ C0] net_rx_action+0x5dd/0xb20 [ 2597.141155][ C0] ? net_tx_action+0x930/0x930 [ 2597.141172][ C0] ? detach_timer+0x350/0x350 [ 2597.141190][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2597.141218][ C0] ? lock_chain_count+0x20/0x20 [ 2597.141247][ C0] handle_softirqs+0x2a1/0x930 [ 2597.141267][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 2597.141286][ C0] ? do_softirq+0x210/0x210 [ 2597.141305][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 2597.141325][ C0] __irq_exit_rcu+0x13b/0x230 [ 2597.141342][ C0] ? irq_exit_rcu+0x20/0x20 [ 2597.141364][ C0] irq_exit_rcu+0x5/0x20 [ 2597.141380][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 2597.141401][ C0] [ 2597.141407][ C0] [ 2597.141413][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2597.141437][ C0] RIP: 0010:lock_acquire+0x225/0x4a0 [ 2597.141463][ C0] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3d 04 f8 0f 85 f0 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 44 3d 00 00 00 00 00 43 c7 44 3d 08 00 00 00 00 65 48 8b 04 [ 2597.141478][ C0] RSP: 0018:ffffc9000c26f380 EFLAGS: 00000206 [ 2597.141493][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: e64d81c1ce814900 [ 2597.141506][ C0] RDX: 0000000000000000 RSI: ffffffff8a8c2220 RDI: ffffffff8adf11a0 [ 2597.141519][ C0] RBP: ffffc9000c26f4a0 R08: dffffc0000000000 R09: 1ffffffff215f248 [ 2597.141532][ C0] R10: dffffc0000000000 R11: fffffbfff215f249 R12: 0000000000000000 [ 2597.141545][ C0] R13: 1ffff9200184de7c R14: 0000000000000246 R15: dffffc0000000000 [ 2597.141570][ C0] ? read_lock_is_recursive+0x10/0x10 [ 2597.141600][ C0] ? page_ext_put+0x98/0xb0 [ 2597.141625][ C0] ? pfn_valid+0xcd/0x420 [ 2597.141651][ C0] pfn_valid+0xe9/0x420 [ 2597.141675][ C0] ? pfn_valid+0xcd/0x420 [ 2597.141700][ C0] page_table_check_set+0x25/0x6d0 [ 2597.141728][ C0] copy_page_range+0x24ea/0x3900 [ 2597.141757][ C0] ? lock_chain_count+0x20/0x20 [ 2597.141801][ C0] ? pfn_valid+0x450/0x450 [ 2597.141834][ C0] ? up_write+0x1bb/0x420 [ 2597.141858][ C0] copy_mm+0xec3/0x1690 [ 2597.141879][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 2597.141904][ C0] ? copy_signal+0x680/0x680 [ 2597.141923][ C0] ? lockdep_init_map_type+0x98/0x8d0 [ 2597.141957][ C0] ? __init_rwsem+0x11e/0x160 [ 2597.141979][ C0] ? copy_signal+0x556/0x680 [ 2597.142001][ C0] copy_process+0x1979/0x4030 [ 2597.142027][ C0] ? copy_process+0x94d/0x4030 [ 2597.142051][ C0] ? idle_dummy+0x10/0x10 [ 2597.142081][ C0] kernel_clone+0x24b/0x900 [ 2597.142103][ C0] ? create_io_thread+0x170/0x170 [ 2597.142131][ C0] __x64_sys_clone+0x1a7/0x220 [ 2597.142152][ C0] ? __ia32_sys_vfork+0x140/0x140 [ 2597.142177][ C0] ? lock_chain_count+0x20/0x20 [ 2597.142207][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2597.142235][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 2597.142257][ C0] do_syscall_64+0x4c/0xa0 [ 2597.142283][ C0] ? clear_bhb_loop+0x60/0xb0 [ 2597.142307][ C0] ? clear_bhb_loop+0x60/0xb0 [ 2597.142332][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2597.142355][ C0] RIP: 0033:0x7facdfd9c819 [ 2597.142371][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2597.142386][ C0] RSP: 002b:00007face0bccfd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2597.142404][ C0] RAX: ffffffffffffffda RBX: 00007face0016090 RCX: 00007facdfd9c819 [ 2597.142419][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 2597.142430][ C0] RBP: 00007facdfe32c91 R08: 0000000000000000 R09: 0000000000000000 [ 2597.142443][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2597.142455][ C0] R13: 00007face0016128 R14: 00007face0016090 R15: 00007ffed6dbc298 [ 2597.142475][ C0]