last executing test programs: 11m37.3364797s ago: executing program 1 (id=4647): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)) socketpair(0x1f, 0x1, 0x7, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_open_procfs$namespace(0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="09000000160000000800000040"], 0x50) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xcd9}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0xd00a}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x80000001, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x5}, 0x50) socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x9, r4}, 0x94) 11m36.047213093s ago: executing program 1 (id=4653): socketpair(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8905, &(0x7f00000012c0)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) socket$kcm(0x2, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@struct={0x2}]}, {0x0, [0x0]}}, 0x0, 0x27, 0x0, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2a, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x440200, 0x0) sendmsg$inet(r3, &(0x7f0000000640)={&(0x7f0000000000)={0x2a, 0x0, @broadcast}, 0x10, 0x0}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x0, 0x0, &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000080711029275bf0db750000000000950000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) sendmsg$tipc(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000240)="cf9a37a7805e9dfa339b1345cbbe06af9ba2b4e94aabb77d3f76a35f178f5ff6bd6da231bcc37a471d4067db34ac9ae4f68092c689bf44967baa474d5ebe27382de587bf97d4301ddf6d3a8f0d7423c9d6", 0x51}, {&(0x7f0000000300)="c35ed5a66bd80ff615fa16b39498f1d3b5b32b40f837fa26d8cc0488d092d671e1a0cbec381a35ad5a412db6b2f74ef5821a3173a361663b8ea77773980673c28787ca9cbaf9281554c1f930c2cf818ef22edcecb60cbba2b2f4b84e1d944a4ac3887d673d91077fa96fc2e122dcccfdcd7b748edbcae7906d1861797d80adc4b553e0eb237848a06f07d2090d3769589318ff80b8b4b9dc68241d6b52cb621a822e90f419b2cbb03e246fb4b7187a3d1517968aca4325a420bc026209fb11b82b93c722e2581a28e6be4d9aaac997fceca851", 0xd3}, {&(0x7f0000000400)="d90a3240ee7981540c4188f37c0e510f", 0x10}, {&(0x7f0000000500)="7c056ab516ed15c6311ecf50c1c63ffbc52dec220581a3736fb88708da97a1dbd151e74870016eed494dc7fd2831552098f2a4a43bd64ddb7d383573760e69ca500088b924a3800b9742df0e9b531dd6265d077701c1b0758eb4084128b905dc7c6e558f6582", 0x66}, {&(0x7f00000005c0)="225a65ecf85b1e8db31fb2bc2e454878899b819d100799aea6c53ff177ee9dc464ba3aa592d235f65d8331e8cb53963bcdcef27a91a9602718b6147932b5bad61052b6acfe4c52693b72bec815e0ca01e13682c1641ac41c19f269f2cf25cdc583e55c9f37684e9a814645ad8d7d7e6edad321a655b57a8d4d37a98d3a270fb314e2812c04f2c20c13ded9e0c4abbbd66d0b3faa2463e1be5cb43fc7f424027ead3b254d5fbdfc0e", 0xa8}, {&(0x7f00000006c0)="7e562cacc8b0f203384644a0e779823e9ad300bb6e4b7cf96d40ded7fdb0beef2009198d303798e150550d5723193d9012463a88d540ab6da73e4976bb1bea02bc2cb77e0c46ac390279feb8397e5de250fa54cb66b82d04c0dbfa3082f1da8a942d8661ae44ad005f3cba332213a25936566d0e338c173fbb96915558ddab1d132e7d7b3d9999a02ea82205b8e8fc2efd0f3f3b57a8b9b09e41a67cff278f8cfe0e79d2e5e0189ac41068b703cdc7ae316b296276c32c5817f5dc4246a0b031e4cae06643c858c6f7f287eb246005554d331e0b97b9ccaafe981f2e40bad6c1683c4b4a868f735ce2ecdd1f", 0xec}, {&(0x7f00000007c0)="18c2a15e73713d4e2b5557114408a73186f2878edba6885e869408a8ca047175e08e59287d941121f47226909167e5a1b394bb6cf3601386534748bd170c7027cc59ea591a15ea5c3b615ced4f3731b490ade96d978f4d426c1e1dcdfe7ffd44a30799a825d49bac2f1eccba0c6269231be9f5b50aaf6e52b72e6b98b2b678eb0ad6", 0x82}], 0x7, &(0x7f0000000980), 0x0, 0x4004010}, 0x4) socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000080)) write$cgroup_devices(r2, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0309004d8871ef2885634a8270e7112b00000000000000000000000000ac141401827511d5b4d3a9f536f4"], 0xee8a) 11m29.710151224s ago: executing program 1 (id=4678): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x4, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x34}, 0x94) openat$ppp(0xffffffffffffff9c, 0x0, 0x8901, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x2980, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4861}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r1, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b06, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"}) 11m29.230282587s ago: executing program 1 (id=4682): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)) socketpair(0x1f, 0x1, 0x7, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_open_procfs$namespace(0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="09000000160000000800000040"], 0x50) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xcd9}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0xd00a}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x80000001, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x5}, 0x50) socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x9, r4}, 0x94) 11m27.806359813s ago: executing program 1 (id=4689): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socketpair(0x1f, 0x1, 0x7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) syz_open_procfs$namespace(0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="09000000160000000800000040"], 0x50) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xcd9}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0xd00a}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x80000001, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x5}, 0x50) socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x9, r4}, 0x94) 11m26.497407036s ago: executing program 1 (id=4694): socketpair(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8905, &(0x7f00000012c0)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) socket$kcm(0x2, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@struct={0x2}]}, {0x0, [0x0]}}, 0x0, 0x27, 0x0, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2a, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x440200, 0x0) sendmsg$inet(r3, &(0x7f0000000640)={&(0x7f0000000000)={0x2a, 0x0, @broadcast}, 0x10, 0x0}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x0, 0x0, &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000080711029275bf0db750000000000950000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) sendmsg$tipc(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000240)="cf9a37a7805e9dfa339b1345cbbe06af9ba2b4e94aabb77d3f76a35f178f5ff6bd6da231bcc37a471d4067db34ac9ae4f68092c689bf44967baa474d5ebe27382de587bf97d4301ddf6d3a8f0d7423c9d6", 0x51}, {&(0x7f0000000300)="c35ed5a66bd80ff615fa16b39498f1d3b5b32b40f837fa26d8cc0488d092d671e1a0cbec381a35ad5a412db6b2f74ef5821a3173a361663b8ea77773980673c28787ca9cbaf9281554c1f930c2cf818ef22edcecb60cbba2b2f4b84e1d944a4ac3887d673d91077fa96fc2e122dcccfdcd7b748edbcae7906d1861797d80adc4b553e0eb237848a06f07d2090d3769589318ff80b8b4b9dc68241d6b52cb621a822e90f419b2cbb03e246fb4b7187a3d1517968aca4325a420bc026209fb11b82b93c722e2581a28e6be4d9aaac997fceca851", 0xd3}, {&(0x7f0000000400)="d90a3240ee7981540c4188f37c0e510f", 0x10}, {&(0x7f0000000500)="7c056ab516ed15c6311ecf50c1c63ffbc52dec220581a3736fb88708da97a1dbd151e74870016eed494dc7fd2831552098f2a4a43bd64ddb7d383573760e69ca500088b924a3800b9742df0e9b531dd6265d077701c1b0758eb4084128b905dc7c6e558f6582", 0x66}, {&(0x7f00000005c0)="225a65ecf85b1e8db31fb2bc2e454878899b819d100799aea6c53ff177ee9dc464ba3aa592d235f65d8331e8cb53963bcdcef27a91a9602718b6147932b5bad61052b6acfe4c52693b72bec815e0ca01e13682c1641ac41c19f269f2cf25cdc583e55c9f37684e9a814645ad8d7d7e6edad321a655b57a8d4d37a98d3a270fb314e2812c04f2c20c13ded9e0c4abbbd66d0b3faa2463e1be5cb43fc7f424027ead3b254d5fbdfc0e", 0xa8}, {&(0x7f00000006c0)="7e562cacc8b0f203384644a0e779823e9ad300bb6e4b7cf96d40ded7fdb0beef2009198d303798e150550d5723193d9012463a88d540ab6da73e4976bb1bea02bc2cb77e0c46ac390279feb8397e5de250fa54cb66b82d04c0dbfa3082f1da8a942d8661ae44ad005f3cba332213a25936566d0e338c173fbb96915558ddab1d132e7d7b3d9999a02ea82205b8e8fc2efd0f3f3b57a8b9b09e41a67cff278f8cfe0e79d2e5e0189ac41068b703cdc7ae316b296276c32c5817f5dc4246a0b031e4cae06643c858c6f7f287eb246005554d331e0b97b9ccaafe981f2e40bad6c1683c4b4a868f735ce2ecdd1f", 0xec}, {&(0x7f00000007c0)="18c2a15e73713d4e2b5557114408a73186f2878edba6885e869408a8ca047175e08e59287d941121f47226909167e5a1b394bb6cf3601386534748bd170c7027cc59ea591a15ea5c3b615ced4f3731b490ade96d978f4d426c1e1dcdfe7ffd44a30799a825d49bac2f1eccba0c6269231be9f5b50aaf6e52b72e6b98b2b678eb0ad6", 0x82}], 0x7, 0x0, 0x0, 0x4004010}, 0x4) socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000080)) write$cgroup_devices(r2, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0309004d8871ef2885634a8270e7112b00000000000000000000000000ac141401827511d5b4d3a9f536f45a"], 0xee8a) 11m11.311507514s ago: executing program 32 (id=4694): socketpair(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8905, &(0x7f00000012c0)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) socket$kcm(0x2, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@struct={0x2}]}, {0x0, [0x0]}}, 0x0, 0x27, 0x0, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2a, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x440200, 0x0) sendmsg$inet(r3, &(0x7f0000000640)={&(0x7f0000000000)={0x2a, 0x0, @broadcast}, 0x10, 0x0}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x0, 0x0, &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000080711029275bf0db750000000000950000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) sendmsg$tipc(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000240)="cf9a37a7805e9dfa339b1345cbbe06af9ba2b4e94aabb77d3f76a35f178f5ff6bd6da231bcc37a471d4067db34ac9ae4f68092c689bf44967baa474d5ebe27382de587bf97d4301ddf6d3a8f0d7423c9d6", 0x51}, {&(0x7f0000000300)="c35ed5a66bd80ff615fa16b39498f1d3b5b32b40f837fa26d8cc0488d092d671e1a0cbec381a35ad5a412db6b2f74ef5821a3173a361663b8ea77773980673c28787ca9cbaf9281554c1f930c2cf818ef22edcecb60cbba2b2f4b84e1d944a4ac3887d673d91077fa96fc2e122dcccfdcd7b748edbcae7906d1861797d80adc4b553e0eb237848a06f07d2090d3769589318ff80b8b4b9dc68241d6b52cb621a822e90f419b2cbb03e246fb4b7187a3d1517968aca4325a420bc026209fb11b82b93c722e2581a28e6be4d9aaac997fceca851", 0xd3}, {&(0x7f0000000400)="d90a3240ee7981540c4188f37c0e510f", 0x10}, {&(0x7f0000000500)="7c056ab516ed15c6311ecf50c1c63ffbc52dec220581a3736fb88708da97a1dbd151e74870016eed494dc7fd2831552098f2a4a43bd64ddb7d383573760e69ca500088b924a3800b9742df0e9b531dd6265d077701c1b0758eb4084128b905dc7c6e558f6582", 0x66}, {&(0x7f00000005c0)="225a65ecf85b1e8db31fb2bc2e454878899b819d100799aea6c53ff177ee9dc464ba3aa592d235f65d8331e8cb53963bcdcef27a91a9602718b6147932b5bad61052b6acfe4c52693b72bec815e0ca01e13682c1641ac41c19f269f2cf25cdc583e55c9f37684e9a814645ad8d7d7e6edad321a655b57a8d4d37a98d3a270fb314e2812c04f2c20c13ded9e0c4abbbd66d0b3faa2463e1be5cb43fc7f424027ead3b254d5fbdfc0e", 0xa8}, {&(0x7f00000006c0)="7e562cacc8b0f203384644a0e779823e9ad300bb6e4b7cf96d40ded7fdb0beef2009198d303798e150550d5723193d9012463a88d540ab6da73e4976bb1bea02bc2cb77e0c46ac390279feb8397e5de250fa54cb66b82d04c0dbfa3082f1da8a942d8661ae44ad005f3cba332213a25936566d0e338c173fbb96915558ddab1d132e7d7b3d9999a02ea82205b8e8fc2efd0f3f3b57a8b9b09e41a67cff278f8cfe0e79d2e5e0189ac41068b703cdc7ae316b296276c32c5817f5dc4246a0b031e4cae06643c858c6f7f287eb246005554d331e0b97b9ccaafe981f2e40bad6c1683c4b4a868f735ce2ecdd1f", 0xec}, {&(0x7f00000007c0)="18c2a15e73713d4e2b5557114408a73186f2878edba6885e869408a8ca047175e08e59287d941121f47226909167e5a1b394bb6cf3601386534748bd170c7027cc59ea591a15ea5c3b615ced4f3731b490ade96d978f4d426c1e1dcdfe7ffd44a30799a825d49bac2f1eccba0c6269231be9f5b50aaf6e52b72e6b98b2b678eb0ad6", 0x82}], 0x7, 0x0, 0x0, 0x4004010}, 0x4) socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000080)) write$cgroup_devices(r2, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0309004d8871ef2885634a8270e7112b00000000000000000000000000ac141401827511d5b4d3a9f536f45a"], 0xee8a) 9.895979483s ago: executing program 5 (id=8019): perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x8, 0x4, 0x0, 0x3ff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400001, 0x0, @perf_config_ext={0xb, 0x6}, 0x14411, 0xc8, 0x200, 0x3, 0xfffffffffffffff7, 0x0, 0x7fff, 0x0, 0x3}, 0x0, 0x10, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001780)={0xffffffffffffffff, 0xe0, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000024, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, &(0x7f0000001300)=[0x0, 0x0], &(0x7f0000001400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x84, &(0x7f0000001480)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000014c0), &(0x7f0000001580), 0x8, 0x10, 0x8, 0x8, &(0x7f00000015c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x75, '\x00', r3, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000ffffffff0000000000000000850000004100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xb90, 0x0, &(0x7f0000000300)="557a657b35ea1d3760c52858576f", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00'}, 0x90) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r5, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xf, &(0x7f00000000c0)=@ringbuf, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', r6}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0xa, 0x4, 0x1, 0x0, r7}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r8}, &(0x7f0000000840), &(0x7f0000000880)=r7}, 0x20) close(r7) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r8, &(0x7f0000000900)}, 0x20) syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000640)={r2, 0x58, &(0x7f00000005c0)}, 0x10) 6.760313931s ago: executing program 5 (id=8025): socket$kcm(0x10, 0x7, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb1b0018000000000000000c0000000c0000000200000000000000000091ed000000000000"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0xecc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000b00)={0x0, 0xf22fff7f, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0xc00e}], 0x9, &(0x7f00000001c0)=[@ip_tos_int={{0x7ff4d4260000}}, @ip_ttl={{0x14}}, @ip_ttl={{0x14}}, @ip_tos_u8={{0x11}}, @ip_tos_u8={{0x11, 0x2}}, @ip_retopts={{0x0, 0x0, 0x7, {[@lsrr, @generic={0x0, 0x0, "96"}, @generic={0x0, 0x0, "206a77bdd1a004129054e7704a"}]}}}], 0xf}, 0x0) r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5, 0x8000001, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x6000000000000000}, 0x0, 0x1, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340), 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000070000000100010009"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0900000005000000080000000f00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000001c5e83c4e230109fc85ca80725521e3bcff67042d4c8d5eb1871e743a69b16171317fbd371c813e0af09544d"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000"], 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000007c0)={r0, 0x20, &(0x7f0000000780)={&(0x7f0000000680)=""/111, 0x6f, 0x0, &(0x7f0000000700)=""/118, 0x76}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x14, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="b785150069645410c0c2281ea534891446ac83e3e6c7dadac8a2579ba21181d55b8cab80c45d4996eadf5a3d89881847e343ef337c647efdf5a1d18188563f11c225e7de44348b8c195a64e38fbfae4b05b943bef4fa56b8e64e1f81c227713c3e", @ANYRESDEC=r6], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f00000001c0), 0x12) r9 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdir(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000400)={0x3, 0x80, 0xf9, 0x66, 0x7, 0x3, 0x0, 0x2, 0x2, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0x8, 0x7}, 0x910, 0x8, 0xae3343a, 0x9, 0x981, 0x40, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffffffffff8}, r9, 0x2, r4, 0x1) 6.40686256s ago: executing program 0 (id=8028): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x4, 0x2, 0x0, 0x6}, {0x10000002, 0x3, 0x0, 0xc}]}, 0x94) close(0x3) r1 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000)=r4, 0x10) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, 0x0}, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001940)='{', 0x1}], 0x1}, 0x80d1) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000180)=[{&(0x7f0000001940)='{', 0xffe0}], 0x1}, 0x80d1) 6.312763582s ago: executing program 2 (id=8029): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e0200", 0x4}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x1}, 0x201, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2f"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x54}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018030000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00000000000000000000000900000000000000000000000900000000000000000000000a02"], 0x0, 0x96}, 0x28) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000900"/38], &(0x7f0000000040)=""/247, 0x26, 0xf7, 0x1}, 0x28) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r1, 0x127, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001000), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0xdd86, 0x2c}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000080)='b', 0x28}], 0x1}, 0x0) 5.98395253s ago: executing program 0 (id=8031): r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500), 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="2b64657669636573208b463934314903e2d3a3a42a74987dc3131c411643f8240a47fe9f3df2d6ce37febd8c89ddf5e38e7d020b8d700660f1bd4acc80c706d8817c2800717a0ecc7af5d9884172bb34cd3742994ff8499e9c15bc52422eebf4bbf968b4fdb0eb19fd4afa99af72"], 0x9) (async) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e24, @empty}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000000000001000000000000000100100000b"], 0x28}, 0x4044454) (async, rerun: 32) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f00000029c0)=ANY=[@ANYBLOB="1802000000000000000000000000000085100000010000009500000000000000180000000001000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb709000008000000b703000000000028850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0x98, &(0x7f00000001c0)=""/152, 0x41000, 0xa}, 0x94) (async, rerun: 32) socket$kcm(0x29, 0x7, 0x0) (async, rerun: 32) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async, rerun: 32) r4 = socket$kcm(0xa, 0x5, 0x0) write$cgroup_devices(r4, 0x0, 0x9) (async) r5 = socket$kcm(0x2, 0x1, 0x84) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@fallback=r3, 0x1d, 0x0, 0x5a65, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r9 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000004c0)=@o_path={&(0x7f0000000400)='./file0\x00', 0x0, 0x30, r3}, 0x18) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="150000e212000000", @ANYRES32=r2, @ANYBLOB, @ANYRES32=r9, @ANYBLOB, @ANYRES64=r8], 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) r10 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r11) (async) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f00000005c0)="df", 0x34000}], 0x1}, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r6) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000a40)={&(0x7f0000000540)="8cf23b2e22283c74331f43b39391ea21ceb571e6d801820ef50798591d5dd36dc3cfc4972643157b4792c142821dd9a00e90380b701957ac637d85336acf377d484139202aee2e4ecdb94341902ad5c891063a32c1d79e694fabe534db7c4166b2a6cc6580782a8a83103759c0104019a140eef41e2d5ebd7cacdb3419a800fe", &(0x7f00000007c0)=""/219, &(0x7f00000008c0)="702b51ca138650d1e96d525e4f293565f4d3367a8ab7dc4c553354eb16ff8273dcb50e1f4709d222d4276bb6e97555d3fac35de1334f3059c333e1ced7a8e6051ce2e83e8d813d9b268c932570a199fcb74e65c4abb6b41f7d492c97dcafdf80c342a3f51024bd605c27d0d6ce495ce5b72ac7d3be73e8405793132c201418ad10ba163a6e9238052764c23275934f179b91a06b7c4b119dfbaca2ddf51f2782714623c3a049d4202ee9a0bee53eb170244596513d01d6341ca41c71fcf291ec937ba77957674c3607afa3d2d92bf22e", &(0x7f00000009c0)="c2ba53202efd28056e923a673b95cda087b427bf32252713938054db0601fc41646101c745212badb363dc389ae7527667c8e4d8d2ee11f52403e51e255eaad7b5cdcc430f1d2efed629c2937421ea88f771461d9e293d868ffe9cbadafe22ef4251900db5f5", 0x7, r7}, 0x38) 5.944126261s ago: executing program 2 (id=8032): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, 0x0, 0x0, 0xfffffdff, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000400), 0x3252d27a, r3}, 0x38) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000180)=r4) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000"], 0xffdd) (fail_nth: 2) 5.654273819s ago: executing program 0 (id=8033): socket$kcm(0x2, 0x3, 0x106) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x3, 0x80, 0x0, 0x0, 0x5b, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc9, 0x1}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, 0x0, 0x0) recvmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x48) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$sock(r2, &(0x7f0000000740)={&(0x7f00000000c0)=@l2tp={0x2, 0x0, @loopback, 0x2}, 0x80, &(0x7f0000000680)=[{&(0x7f00000001c0)="6a110bc6a31e1a177424329af18d3150a3cee2ddc6a38a5d8f77db1964d814f6a840390ac6628ff4ba42715cc96c6ffbb9bdb5", 0x33}, {&(0x7f0000000500)="47548b59740ca5aa246f37206f14841771d37905945f3175d338e5aa18f029d93dcba9a320d5e7c464ed98ca230da173c76e3b4bf75fe92ee422afe68fe3736a17354950dd2263112977a548c8ad65550f421d53d2a95a838055c4f7f74172bd09a25a4ddf3e4d7c7006d8552750b32de2a7de9619c369649b0cce4a036d85f720072c9a14c094a51daa78e7f3f26e5153d4a8a5d5af9de0f5ef83f25e14201e464aaa298615109a4ffe417cf6c82d12caac5e17584eabf8e1c9c3649fe1c074f866a3ffc79e491353de25b81561f6d6787a0a7b997f63b2f08def4c36df2cbae8a8a3d44de843656c26e13700a22e16dc03326b", 0xf4}, {&(0x7f0000000600)="68b1a707402bcbb5a744135a6bb48c5310fb725a82680d4487ef00dcc04531e654b5909c80be8ec3c42d3a5ba2c21eb1867fa9779ac48fc3886eb49f297fed6c8743704bde8f0d9ab8b9eb4f56fa3fea7a14f5a939596807e9a78299b8ae96870b18a3e9173183f94d1a58e2829a22", 0x6f}], 0x3, &(0x7f00000006c0)=[@timestamping={{0x14}}, @mark={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0x80000001}}], 0x48}, 0x8800) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="020000000080000800"/20, @ANYRES16=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0xd) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x5, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r3}]}, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000060400000000000000000000010500000008000000000000000000000300000000010000000200000004000000000000000000000b"], 0x0, 0x5a}, 0x28) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) setsockopt$sock_attach_bpf(r2, 0x88, 0x67, &(0x7f00000002c0)=r4, 0x4) r5 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r5, &(0x7f00000005c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0xd7, &(0x7f0000000080), 0x1}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20400, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0}, 0x8061, 0x3, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x3, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r6, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 5.653596599s ago: executing program 4 (id=8034): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) (fail_nth: 2) 5.184057621s ago: executing program 5 (id=8035): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xe, 0x4, 0x4, 0x8}, 0x50) close(0xffffffffffffffff) r0 = socket$kcm(0x29, 0x2, 0x0) r1 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x830d}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r1}) sendmsg$inet(r0, &(0x7f0000000580)={&(0x7f0000000200)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, &(0x7f00000004c0)=[{0x0}, {&(0x7f00000002c0)}, {&(0x7f0000000440)="096e5662411f607cd02715119927899952002e1b7e91fbce50548f67225f647b9ea54263432611430896344c54fd8f0af0a661b90c198a69f262a1e7098dcbce6be0275ae029c6132e96cdebc49474081f5cf44c78", 0x55}], 0x3}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc81e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x4846, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x5}, 0x4, 0x7fff, 0x0, 0x0, 0x0, 0xc7df}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r2], 0x128}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf8}, 0x10020) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x1f6, 0x0, &(0x7f0000000740)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x2a}, 0x94) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f0000000080)) syz_clone(0xc920000, 0x0, 0x0, 0x0, 0x0, 0x0) 4.850712729s ago: executing program 4 (id=8036): perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x8, 0x4, 0x0, 0x3ff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400001, 0x0, @perf_config_ext={0xb, 0x6}, 0x14411, 0xc8, 0x200, 0x3, 0xfffffffffffffff7, 0x0, 0x7fff, 0x0, 0x3}, 0x0, 0x10, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001780)={0xffffffffffffffff, 0xe0, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000024, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, &(0x7f0000001300)=[0x0, 0x0], &(0x7f0000001400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x84, &(0x7f0000001480)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000014c0), &(0x7f0000001580), 0x8, 0x10, 0x8, 0x8, &(0x7f00000015c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x75, '\x00', r3, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000ffffffff0000000000000000850000004100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xb90, 0x0, &(0x7f0000000300)="557a657b35ea1d3760c52858576f", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00'}, 0x90) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r5, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xf, &(0x7f00000000c0)=@ringbuf, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', r6}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0xa, 0x4, 0x1, 0x0, r7}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r8}, &(0x7f0000000840), &(0x7f0000000880)=r7}, 0x20) close(r7) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r8, &(0x7f0000000900)}, 0x20) syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000640)={r2, 0x58, &(0x7f00000005c0)}, 0x10) 4.79042328s ago: executing program 3 (id=8037): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)}, 0x0) socket$kcm(0x1e, 0x1, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x5411, &(0x7f0000000000)={'syzkaller1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}}) r3 = socket$kcm(0x10, 0x6, 0x10) sendmsg$kcm(r3, 0x0, 0x0) write$cgroup_subtree(r0, 0x0, 0xfe33) r4 = socket$kcm(0x10, 0x2, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101880, 0x0) r6 = perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0xffffffffffffff03, 0x1}, 0x10201, 0x0, 0x3, 0x5, 0x4000000, 0x4, 0x401, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, 0x0, 0x5}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_msg=0x7}, 0x94) r9 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=ANY=[@ANYBLOB="1200000002000000080000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/17, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0f00"/28], 0x48) close(r8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r9}, &(0x7f0000000000), &(0x7f0000000100)=r8}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r9}, 0x0, 0x0}, 0x20) close(r5) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r10, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r5, 0xc008744c, &(0x7f0000000180)) sendmsg$kcm(r4, 0x0, 0x0) 2.01273929s ago: executing program 0 (id=8038): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xe, 0x4, 0x4, 0x8}, 0x50) close(0xffffffffffffffff) r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x30}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x830d}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) sendmsg$inet(r0, &(0x7f0000000580)={&(0x7f0000000200)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, &(0x7f00000004c0)=[{0x0}, {&(0x7f00000002c0)}, {&(0x7f0000000440)="096e5662411f607cd02715119927899952002e1b7e91fbce50548f67225f647b9ea54263432611430896344c54fd8f0af0a661b90c198a69f262a1e7098dcbce6be0275ae029c6132e96cdebc49474081f5cf44c78", 0x55}], 0x3}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc81e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x4846, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x5}, 0x4, 0x7fff, 0x0, 0x0, 0x0, 0xc7df}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r3], 0x128}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf8}, 0x10020) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x1f6, 0x0, &(0x7f0000000740)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x2a}, 0x94) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8946, &(0x7f0000000080)) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x4, 0x0, 0xfe, 0x0, 0x800, 0x20000, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0, 0x1, 0xffffffffffffffff, 0x0) syz_clone(0xc920000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.01232934s ago: executing program 5 (id=8039): r0 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="0201000902000000e4a17c4ec80500c9", 0x10}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x56}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x5, &(0x7f0000000680)=ANY=[@ANYBLOB="1838000000000000000000000800000018100000", @ANYRES32, @ANYBLOB="00040000000000009500000000710000"], &(0x7f0000000040)='syzkaller\x00', 0x3, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x22) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f0000000080)='cpuset.mem_exclusive\x00', 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x11, &(0x7f00000002c0)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc041389810039000000060fe30c000000000e0027008f000000028002922d1f", 0x2e}], 0x1}, 0x40) 2.0117921s ago: executing program 2 (id=8040): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xe, 0x4, 0x4, 0x8}, 0x50) socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef42d430f6296b72a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed40000000022278d00031e5388ee5c867ddd58211d6ece3ccb0cd2b6d3cffd962867a3a2f624f992daa94a6a556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff020000000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409e011f1264d43f153b3d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7000026a4e739c60f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf3f704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eedd9068ca1457870eb30d219e23ccc8e06dddeb61799257ab5000013c86ba99523d61a00000000c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb8629aeec90e6d1857da822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae200f279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522e8dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f34a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be10ba7dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2db484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b00ffffff7f000000000801f71d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cf0d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67856ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e2b8e7370baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b09000000d31df213c802d74797056fd3bca8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221fff0f0000705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f14fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008f3a20b49fe7636806867283e35cff8d00e7b251bab3cf6377a24f8e8d4bda7503674bc94bf7f4d2fa6f25944bf0a186436d9f6831995976328a1fdc78492c65c1434855dc35c3cf7cf9610c5387794443c99b304799114132362849c3fa85d6379729ff9094933db0cfbe8887c50b87e1469fdf454cef4cbc5f7bf384000000000000a4e8c1a25f47c440144a9776be6cb40aafdb9d3cc8f6a6050974e1c4000000000000008b753f4e1bef9556efcc087a99dbf231167013a4b2eaf6338a0b100c98a331dffc09"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x30}, 0x48) socket$kcm(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x830d}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc81e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x4846, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x5}, 0x4, 0x7fff, 0x0, 0x0, 0x0, 0xc7df}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 2.01133513s ago: executing program 4 (id=8041): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002240)=ANY=[], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x3500000000000000) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x33}, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000000000001000000000000000100100000b"], 0x28}, 0x4044454) r1 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0xb, &(0x7f00000000c0), 0x42) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x2000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x4, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffd, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r3 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r3, 0x1, 0xc, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r5}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x3b}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="180300000000000000000000009bd63f0c83c4aed537000000851000000600000018100000", @ANYRES32, @ANYBLOB="000000000000000066000000866f000018000000000000000000000000000000950000000000000064030000080000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) sendmsg$kcm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)}, 0x24000000) r6 = socket$kcm(0x2b, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x5452, &(0x7f0000000100)) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20004810) close(r6) 1.947408421s ago: executing program 3 (id=8042): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x4, 0x2, 0x0, 0x6}, {0x10000002, 0x3, 0x0, 0xc}]}, 0x94) close(0x3) r1 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000)=r4, 0x10) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, 0x0}, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001940)='{', 0x1}], 0x1}, 0x80d1) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000180)=[{&(0x7f0000001940)='{', 0xffe0}], 0x1}, 0x80d1) 1.639217089s ago: executing program 3 (id=8043): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="09000000160000000800000040"], 0x50) r1 = socket$kcm(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r1, 0x84, 0x4, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0x4, 0x900, 0x1, 0x28}, 0x50) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1b, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x3}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r6}, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000000)={0x2, &(0x7f0000000400)=[{0x30, 0xff, 0x6, 0xfffff00c}, {0x6, 0xff, 0x9, 0x1}]}) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000f80)={r6}, 0xc) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="5400020029000b05d25a806f8c6394f90424fc602f0011002e2f0120053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xcd9}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0xd00a}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r7}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.628963979s ago: executing program 5 (id=8044): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad94ed406f21caf5adcf920569c00cc1199684fa75814709fea019af247c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c7160ec83070000020000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafedcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd89346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12282ce24463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f09000000000000004fc4bda3453602004535a976eacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a191852c9ae031db044b2353199546609f9f69a6cfefdf879d447df53f3b9b70d10355b00300000000000000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f58fab987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45b418a18217747ae442e31560e5b741445ea2a1acee2a81425ff000000d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51423b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f88735fce5115dc83ed73d8ee4a91322608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf5000000000000fa08ad0631c4b839688b22c4da2a6bc4cf45854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296bb2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692ba74b531b65c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652decbe579b03ed84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf5392882df78b0983e662dc0cb64b77f3f006b6b25443197ae93f0be6de5a703d003f00720943c0e4b33af00000000000000000021a688b2d7007fcc4b59f719afb0b3b7e0aee306ca70fe42bf4984a68f40e1fc043a03a17e4744359b87dc27c82d51cbeb64e52a28daeb6a78d6fe06181ecc840000"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x16, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x2}, 0x10}, 0x94) close(0x3) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000017000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0x8, &(0x7f0000000940)=ANY=[@ANYRESDEC=r0, @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000000000000c000000b70000000000000095000000001f0000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xe, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x6, &(0x7f0000000000), 0x84) r3 = socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380), 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0xf, 0x0, 0x5d31, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340)}, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0x9, &(0x7f0000000540)=@raw=[@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @exit], &(0x7f00000005c0)='GPL\x00', 0x4, 0xac, &(0x7f00000006c0)=""/172, 0x41100, 0x30, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000b40)={0x2, 0xe, 0x9, 0x4}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000b80)=[r1, r1], &(0x7f0000000c40)=[{0x5, 0x4, 0x6, 0xb}, {0x1, 0x3, 0x0, 0x9}, {0x1, 0x4, 0x10, 0x5}, {0x5, 0x5, 0xd, 0x9}, {0x4, 0x3, 0xd}], 0x10, 0x40}, 0x94) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5c00000014006b03000000d86e6c1d0010ffff0af32c6e021fffffff000000000f00000017d3a705251e6182949a369f3d3b48dfd8cd3f9367c1fa51f60a64c9f4d4938037e786a6d0bdd7000000000000eaffffffb3d59256a5a2fd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) write$cgroup_subtree(r3, &(0x7f0000001a00)=ANY=[], 0xfe33) recvmsg$kcm(r3, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001a40)=""/4095, 0xfff}], 0x1}, 0x0) recvmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x50be}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="5400020029000b05d25a806f8c6394f90424fc602f0011002f2f2f00053582c137153e370248018000f01700d1", 0x2d}], 0x1, 0x0, 0x0, 0x5000000}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000002c0)=@ax25={{}, [@bcast, @remote, @default, @rose, @default, @remote, @rose, @bcast]}, 0x80, &(0x7f0000000500), 0x0, &(0x7f00000001c0)=""/52, 0x34}, 0x2000) recvmsg$kcm(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x10, 0x3, 0x10) 1.534264042s ago: executing program 4 (id=8045): socket$kcm(0x2, 0x3, 0x106) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x3, 0x80, 0x0, 0x0, 0x5b, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc9, 0x1}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, 0x0, 0x0) recvmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x48) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$sock(r2, &(0x7f0000000740)={&(0x7f00000000c0)=@l2tp={0x2, 0x0, @loopback, 0x2}, 0x80, &(0x7f0000000680)=[{&(0x7f00000001c0)="6a110bc6a31e1a177424329af18d3150a3cee2ddc6a38a5d8f77db1964d814f6a840390ac6628ff4ba42715cc96c6ffbb9bdb5", 0x33}, {&(0x7f0000000500)="47548b59740ca5aa246f37206f14841771d37905945f3175d338e5aa18f029d93dcba9a320d5e7c464ed98ca230da173c76e3b4bf75fe92ee422afe68fe3736a17354950dd2263112977a548c8ad65550f421d53d2a95a838055c4f7f74172bd09a25a4ddf3e4d7c7006d8552750b32de2a7de9619c369649b0cce4a036d85f720072c9a14c094a51daa78e7f3f26e5153d4a8a5d5af9de0f5ef83f25e14201e464aaa298615109a4ffe417cf6c82d12caac5e17584eabf8e1c9c3649fe1c074f866a3ffc79e491353de25b81561f6d6787a0a7b997f63b2f08def4c36df2cbae8a8a3d44de843656c26e13700a22e16dc03326b", 0xf4}, {&(0x7f0000000600)="68b1a707402bcbb5a744135a6bb48c5310fb725a82680d4487ef00dcc04531e654b5909c80be8ec3c42d3a5ba2c21eb1867fa9779ac48fc3886eb49f297fed6c8743704bde8f0d9ab8b9eb4f56fa3fea7a14f5a939596807e9a78299b8ae96870b18a3e9173183f94d1a58e2829a22", 0x6f}], 0x3, &(0x7f00000006c0)=[@timestamping={{0x14}}, @mark={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0x80000001}}], 0x48}, 0x8800) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="020000000080000800"/20, @ANYRES16=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0xd) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x5, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r3}]}, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000060400000000000000000000010500000008000000000000000000000300000000010000000200000004000000000000000000000b"], 0x0, 0x5a}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ced4fbd44e24eb0d34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3a06d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796efea77aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece72f2090000f44a3210223fdae7ed04935c3c90941576aebc8619d73415cda2130f5011e4845505000001000000004f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c040035cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bf463261135e24d154114df1381b02a0dcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f884cc4806f40300966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e1700000000000000000000000000000000000000000000000000000520500002952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9a33c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a62415f78000000005f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c81c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b40824095135861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac00000b0000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e5dd921a5eadd4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293d5c833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e602c28ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f257aac5af18d8c6b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e29b10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe8e4cd14dc5c1eb98b63198f6f830745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b51c34a5384f2cf51180c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af243b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380ecf1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb79f558982d57c556ca1427b5960b79990565ca2a20996fcba472213744d3a156979651596afde2b0089f023fcfccd072bd6ea8445fc787390d71ec61d5b7b0f05f6931914bf49aa0d66eff294271a93e32f54f281068514a4cd2d0700a43df59e9924e4affdbd22405e675e9d7cdc10546571131831d4dc8c8363077a908d9ae4f27ff095f5b07667f93a3573d3fabfca58ee0a6b6a691102bb3c7be4dc5b816853275e7ae8c13ec341bad15353fad794b46c4fd73e1b4cc78de2156cb158870d5b8446dae9ba5f7f244e6cf8f6791671057347208a313ebbcb72b04706005670f2b0055e440d72c7c3316982c6ebe8675458cf6bb393b007f5cedb7bc411834600000000000000000000000000a20071b07d568a8150ed646b4978d0226d9651647a5999ae7c7c85322a215fcdb1adbad63499518fe0d10145d430422c78367dfa941f74b63f3884565ac89c673da2c2b1172be5f2cd1f3f453ebddd432bd24c73fa773b739e20fcec16a821230654a383ac1868495f67d942c772ca75e09073dbe9307ff5cac7c2c411149a4d989a8a019e068da218d4bc34e4102fd2f97397331e4cd70b4915582b635f07ca87f00dc929f902540f565c20add8675b79e005cf0277d954697317b907b77fa5d6b7feaebaf676a2a37de8aa70748fee4bc198ffd3e2de11eb0eff896fd94de0805ba6b1054a7b3e300d4581e9af62a1ecaee96d2819b3d192e5b9561eb622da25450f586be14017a1cf74f89a1dd18af004decfe266134c3d036ae7996931fe6008a73ed34c35f0da4ffee1fe63bc1af6ef1b4731d50b8ceb582a1e9c6e8d97f8290cc105754f592d16ccdb1df8636d7ca5e372cea97dd0f005cc7092b126dd46758917fb0d94b8483d403bd451429cc1660f0b5a529d8134dc2702f6d8e2f943d98fbe50a3ba653f13f98a00fcbf311f9758ade8e4eb87b4b9fb2d387f5d8c4bdcab2fff9ed8c9de961fd831a070381c8020352fea7c334b2959ddd956701a7ea415e224a81c9fa1ebbabe74f7743e09b6c8b72650b51d5c2000ef3679c039b3604374fc1af7ab354204afbd24f0e701bc08a98452ce2668617e85e0d876f5a8b6d9b777f1c384d8a9883e4262defb6b9aab8d5b76bc91ca50f87966797da2499ca0ac76707c0408a7b6d8708fe7714988babdc11f"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r4 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r4, &(0x7f00000005c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0xd7, &(0x7f0000000080), 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20400, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0}, 0x8061, 0x3, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x3, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 1.525748432s ago: executing program 2 (id=8046): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x20100, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0x5, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0xa, 0x3, 0x3a) r1 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r1, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080), 0x0, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x37}}], 0x18}, 0x0) close(0x3) socket$kcm(0x10, 0x2, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open$cgroup(0x0, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x5, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f00000007c0)={&(0x7f0000000300)=@x25={0x9, @remote}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000540)=""/14, 0xe}, {&(0x7f00000006c0)=""/54, 0x36}, {&(0x7f0000000700)=""/14, 0xe}], 0x3, &(0x7f0000000780)=""/50, 0x32}, 0x100) r3 = socket$kcm(0xf, 0x3, 0x2) write$cgroup_devices(r3, 0x0, 0xfefb) socket$kcm(0x10, 0x2, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b90402000000008000000000150010001400259070f409000d2000000a000e4006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee05e6756cfb39b0590b4800089e408e8d8ef52b49816277cf4090000001fb791643a5e08001b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db701000000eafad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6cce50dd6e4edef3d939acd92954b43370e970100"/216, 0xd8}], 0x1}, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_lsm={0x18, 0x0, &(0x7f0000000180), &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r5, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)=r5}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000680)={r6, &(0x7f0000000480)="1a8636f56adfde937d0d611d8f81e6f8f1b9a6672309660be2269e054b1f67abf6a0b33574e62fd107ffab8a96f3551ef6cd9e563f405382cb8777671a952a4f1f8ce39de6331a9f71122cb5713e07d74516b77b97b0874a9fc32af554b09c35fe463233bf66f1aa44380d8983ab506795db4338e4f29e346611783e4f1842ab7d55e91259e3f16a7bda8f7fda6c1bef34c9ad0ed3f33d2731b3e8d82178124cce78bfb42ca8b79e2b0ef1cc", &(0x7f00000005c0)=""/170}, 0x20) 973.196536ms ago: executing program 0 (id=8047): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{0x1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x30, &(0x7f0000001c40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, {}, {}, [@generic={0x9, 0x8, 0x7, 0x3, 0x211}, @map_idx={0x18, 0x12, 0x5, 0x0, 0x48000008}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb}}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x4}, @map_val={0x18, 0x5, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x3}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x20}, 0x94) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2d0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x10c002, 0xac5d, 0x10000200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xc}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x48}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x8, &(0x7f0000000100), 0x120) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x98ffffff}, 0x4000880) r3 = perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x4, 0x0, 0xfe, 0x0, 0x800, 0x20000, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffff7, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x0, 0x64317119, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0x80000000001fe) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)=""/50, 0x32}, {&(0x7f0000000100)=""/48, 0x30}, {&(0x7f0000000300)=""/206, 0xce}, {&(0x7f0000000a80)=""/4088, 0xff8}, {&(0x7f0000000500)=""/116, 0x74}, {&(0x7f0000000400)=""/227, 0xe3}, {&(0x7f0000002980)=""/4090, 0xffa}, {&(0x7f0000000200)=""/24, 0x18}], 0x8}, 0x12000) 971.032516ms ago: executing program 3 (id=8048): perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x11, 0x2, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x11, 0x200000000000002, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="020a000402000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) write$cgroup_devices(r0, &(0x7f0000002700)=ANY=[], 0xffdd) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) r3 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r3, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) sendmsg(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000440)="a6", 0xffffff58}], 0x1}, 0x40001) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0040011004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x8000) 610.642965ms ago: executing program 5 (id=8049): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)="5c00000015006b05c84e21000ab16d6e2306750044b6705e6717d30461bc24eeb556a705251e6182149a36c23d3048dfd8cdbf9367b098fa51f60a64c9f408000000e78626d0bdd50000b6c0504bb9189d9393e9bd1c1b7818b122e6", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="130300007800911fdabcf8b3077fa54a07"], 0xfe33) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000700)="797be51b5b10d6859597f116813b7e028454aa0cfda63730752fec6524f7a86f07fbe8fea84b28f31a1412374b8f2b1f935809f96733ab5fc3bf7d49b19cafb837bf6608a34e5d6bd34a025de163315d8cb16ae90923645ccf0e8a3e124e8e2848e4e631398ce30979cd0e35cc84555b1cc04652b6e6f292b0beb1f488e9026b57ebf5bacf771129c15bd3693a1ac851e487b2089d8a2f2f", 0x98}, {&(0x7f00000007c0)="7dad4155feaa5853eb4449d6e7027e1067f1d487cd972a54d434ecf4e7052513425706dd8d6a2b6234dd3c9c24f1983d70c01e29b67c08c1c443fae522c543b89d925c6ec020352f40d2ba6053a216393faf1dbdc4a38df3c8ecd86f0e3d1e7bb22f95acfbff249e0b8f580a49c0a4677cfdaa15e5e4cbf28e9f73aa3030f19d72d3372a85a97848f70e75593010f615ba9af604764e1c6846a572f98bdedde99a6c7ebc4867bb03e8691d82dab02bd2e4554f7740a2395d14c32355ad7586307ea33864f0a7203f8bc32ee590818faae646bdc3dc4907a44c36b05ac6afe31130bc3323f2e5510ca9a716840b", 0xed}, {&(0x7f0000000a00)="ba5a04dccfcfa72fe2d8e91e587598b3c47973ea9edbae71c4e34a7d5eb56de54d6105514ae04095989e2e5a4affdfb9c6b04d21e78059ffb6774574380a73ec681984e4eccf5367afc78c80983f12549b67312a8cfa302f116a95c87cfddd10cbbdb14ac1205aa8039804b0da7a03f3b8af46ad1f65c5cc8c7a08c487549173f0d2de2c5c925007d76abf391055927521a7f83477fe500b19aa79a60f5f9e5e9e4e3692f888787f7cad5f5e95ec6f75fc1fe8708061fe61032764c8af27b60c5db1ec77814571b764f989bca7f259618de098e8f1bc8855b8", 0xd9}, {&(0x7f0000000b00)="ea45679db1ba223ae844522d3c32fb5f5abf6df5cfdeef2dcad832064c985ea475dac21b5dbfe853b74aef4b73dd527647cae3a18a560abd148f36afd2313654f2a377f69427aad0775046987ae848a74c6d3fabf79cf02e992ec672ce258237d4170e15864b05a83da8c7abb69d6ad724f7bc6874511bf03bd7c50d3627d9b642f3137c8fb52f830f14ac38cd9c9ac50f31eb5bbe0d12b0f5197445ec4d6febb2588b6ae58d3613", 0xa8}, {&(0x7f0000000bc0)="9901796eefcaad67d3caf6b06c9688f585e51406e42ba89303353fd1afb07fc0154e14909b6c53183bf1fabdf6b22db8b951360db200ac25af2519ddac140e55c74edb967206cea2683bf25ee877a5e37d47bc03d37d4b5ad65e38f67dccbcae16f42ccfc9d9dce2d970e9e4a8e3618d4a3bb28c2b6f51d5278fc5e3667ce64078acbf91ea8353c45d87db7c31ba734ed7b491602d26729cc8f7dace4b604dec4b72f586e4ca78d3f699cc8c9a78978fd15ca9cdd828dc1826f2", 0xba}], 0x5, &(0x7f0000001580)=ANY=[@ANYBLOB="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"], 0x408}, 0x4000) r1 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a9"], 0xfdef) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x14, 0x0, 0x0, 0x0, 0x6, 0x30, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r1, r2}, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f00000002c0)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) r4 = perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89a0, &(0x7f0000000080)) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000d80)={@cgroup=r2, 0xa, 0x1, 0x800, &(0x7f00000008c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000d00)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000d40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02"], 0x31) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x2, 0x3}, 0x0, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x80200000, &(0x7f00000001c0)="e1079049702d1982be9667e0c73f6e76a31b662bbf788e32ef5fab9a7dd950436cbe69064647aebdaaab0120a610b986e1c5c0ce8f9d25d6b13fba04afa275e3bd57efc785a24f86d061677a87b38701ea2b2fd5d0908a66ebcec57e18c9537ea079dfba5fa125d667394d857cc8d159f838c6ba1305a9f2c4a28736b7a5a9aa114c7e77e0bf01d8375100199bf563d237cc4246f8477cbb0caef11b34015855b888e72b4c516416bf81afb541be27112b2d5882a76488c180a84d4ff9ce9185ef89eff993bf04730ca8e76570cf", 0xce, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000500)="01038f655a092cf82d8f9975af8af56bed9446af751a1b4a84985e9dea0de3b1516a583499467620eeb074551acbd5c210fa5ba7a4dffc27123f684e7088c380fc019619a96f1cd1302e82178c0937ec6c9f8f4cc697dfc2d3b532b0e9d5e858cea79436fb9eeafb1abd631b058d47e6639bbf38aa8295607970865d0bb304c6a4889ba0c492adc73fe9e5247c4c316cce076da4b8f5bb7fc41bd1550024a6a8a29794493b43f2") perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xffffffff}, r5, 0x100000000003, 0xffffffffffffffff, 0x0) 575.688436ms ago: executing program 3 (id=8050): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0xdd86, 0x2c}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000080)='b', 0x28}], 0x1}, 0x0) 478.107778ms ago: executing program 2 (id=8051): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401c5820, &(0x7f0000001000)=0x8000) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000000)) 477.246079ms ago: executing program 4 (id=8052): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)}, 0x0) socket$kcm(0x1e, 0x1, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x5411, &(0x7f0000000000)={'syzkaller1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}}) r3 = socket$kcm(0x10, 0x6, 0x10) sendmsg$kcm(r3, 0x0, 0x0) write$cgroup_subtree(r0, 0x0, 0xfe33) r4 = socket$kcm(0x10, 0x2, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101880, 0x0) r6 = perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0xffffffffffffff03, 0x1}, 0x10201, 0x0, 0x3, 0x5, 0x4000000, 0x4, 0x401, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, 0x0, 0x5}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_msg=0x7}, 0x94) r9 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=ANY=[@ANYBLOB="1200000002000000080000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/17, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0f00"/28], 0x48) close(r8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r9}, &(0x7f0000000000), &(0x7f0000000100)=r8}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r9}, 0x0, 0x0}, 0x20) close(r5) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r10, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r5, 0xc008744c, &(0x7f0000000180)) sendmsg$kcm(r4, 0x0, 0x0) 415.15947ms ago: executing program 3 (id=8053): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xe, 0x4, 0x4, 0x8}, 0x50) close(0xffffffffffffffff) r0 = socket$kcm(0x29, 0x2, 0x0) r1 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x830d}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r1}) sendmsg$inet(r0, &(0x7f0000000580)={&(0x7f0000000200)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, &(0x7f00000004c0)=[{0x0}, {&(0x7f00000002c0)}, {&(0x7f0000000440)="096e5662411f607cd02715119927899952002e1b7e91fbce50548f67225f647b9ea54263432611430896344c54fd8f0af0a661b90c198a69f262a1e7098dcbce6be0275ae029c6132e96cdebc49474081f5cf44c78", 0x55}], 0x3}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc81e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x4846, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x5}, 0x4, 0x7fff, 0x0, 0x0, 0x0, 0xc7df}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r2], 0x128}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf8}, 0x10020) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x1f6, 0x0, &(0x7f0000000740)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x2a}, 0x94) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f0000000080)) syz_clone(0xc920000, 0x0, 0x0, 0x0, 0x0, 0x0) 144.937527ms ago: executing program 2 (id=8054): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x4, 0x2, 0x0, 0x6}, {0x10000002, 0x3, 0x0, 0xc}]}, 0x94) close(0x3) r1 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000)=r4, 0x10) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, 0x0}, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001940)='{', 0x1}], 0x1}, 0x80d1) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000180)=[{&(0x7f0000001940)='{', 0xffe0}], 0x1}, 0x80d1) 57.384549ms ago: executing program 4 (id=8055): perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x8, 0x4, 0x0, 0x3ff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400001, 0x0, @perf_config_ext={0xb, 0x6}, 0x14411, 0xc8, 0x200, 0x3, 0xfffffffffffffff7, 0x0, 0x7fff, 0x0, 0x3}, 0x0, 0x10, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001780)={0xffffffffffffffff, 0xe0, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000024, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, &(0x7f0000001300)=[0x0, 0x0], &(0x7f0000001400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x84, &(0x7f0000001480)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000014c0), &(0x7f0000001580), 0x8, 0x10, 0x8, 0x8, &(0x7f00000015c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x75, '\x00', r3, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000ffffffff0000000000000000850000004100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xb90, 0x0, &(0x7f0000000300)="557a657b35ea1d3760c52858576f", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00'}, 0x90) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r5, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xf, &(0x7f00000000c0)=@ringbuf, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', r6}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0xa, 0x4, 0x1, 0x0, r7}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r8}, &(0x7f0000000840), &(0x7f0000000880)=r7}, 0x20) close(r7) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r8, &(0x7f0000000900)}, 0x20) syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000640)={r2, 0x58, &(0x7f00000005c0)}, 0x10) 0s ago: executing program 0 (id=8056): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002240)=ANY=[], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x3500000000000000) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x33}, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000000000001000000000000000100100000b"], 0x28}, 0x4044454) r1 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0xb, &(0x7f00000000c0), 0x42) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x2000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x4, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffd, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r3 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r3, 0x1, 0xc, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r5}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x3b}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="180300000000000000000000009bd63f0c83c4aed537000000851000000600000018100000", @ANYRES32, @ANYBLOB="000000000000000066000000866f000018000000000000000000000000000000950000000000000064030000080000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) sendmsg$kcm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)}, 0x24000000) r6 = socket$kcm(0x2b, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x5452, &(0x7f0000000100)) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20004810) close(r6) kernel console output (not intermixed with test programs): > [ 1458.568876][T23687] netlink: 'syz.2.6615': attribute type 3 has an invalid length. [ 1458.737531][T23688] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.6615'. [ 1459.028907][T23696] FAULT_INJECTION: forcing a failure. [ 1459.028907][T23696] name failslab, interval 1, probability 0, space 0, times 0 [ 1459.058984][T23696] CPU: 1 PID: 23696 Comm: syz.0.6618 Not tainted syzkaller #0 [ 1459.066545][T23696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1459.076651][T23696] Call Trace: [ 1459.079975][T23696] [ 1459.082948][T23696] dump_stack_lvl+0x188/0x24e [ 1459.087701][T23696] ? show_regs_print_info+0x12/0x12 [ 1459.092965][T23696] ? load_image+0x410/0x410 [ 1459.097531][T23696] ? __lock_acquire+0x7c40/0x7c40 [ 1459.102627][T23696] should_fail_ex+0x390/0x4c0 [ 1459.107378][T23696] should_failslab+0x5/0x20 [ 1459.111937][T23696] slab_pre_alloc_hook+0x59/0x300 [ 1459.117018][T23696] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 1459.123688][T23696] ? bpf_test_init+0x9f/0x140 [ 1459.128437][T23696] __kmem_cache_alloc_node+0x4f/0x270 [ 1459.133878][T23696] ? bpf_test_init+0x9f/0x140 [ 1459.138627][T23696] __kmalloc+0xa3/0x240 [ 1459.142855][T23696] bpf_test_init+0x9f/0x140 [ 1459.147421][T23696] bpf_prog_test_run_xdp+0x488/0xf80 [ 1459.152773][T23696] ? __lock_acquire+0x7c40/0x7c40 [ 1459.157872][T23696] ? dev_put+0x80/0x80 [ 1459.162047][T23696] ? bpf_prog_test_run+0x310/0x390 [ 1459.167226][T23696] ? dev_put+0x80/0x80 [ 1459.171352][T23696] bpf_prog_test_run+0x31c/0x390 [ 1459.176346][T23696] __sys_bpf+0x62b/0x780 [ 1459.180640][T23696] ? bpf_link_show_fdinfo+0x380/0x380 [ 1459.186081][T23696] ? lock_chain_count+0x20/0x20 [ 1459.191026][T23696] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1459.197078][T23696] __x64_sys_bpf+0x78/0x90 [ 1459.201554][T23696] do_syscall_64+0x4c/0xa0 [ 1459.206064][T23696] ? clear_bhb_loop+0x60/0xb0 [ 1459.210800][T23696] ? clear_bhb_loop+0x60/0xb0 [ 1459.215545][T23696] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1459.221504][T23696] RIP: 0033:0x7f7fb1b9e019 [ 1459.226004][T23696] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1459.245672][T23696] RSP: 002b:00007f7fb2ac9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1459.254147][T23696] RAX: ffffffffffffffda RBX: 00007f7fb1e25fa0 RCX: 00007f7fb1b9e019 [ 1459.262172][T23696] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1459.270182][T23696] RBP: 00007f7fb2ac9090 R08: 0000000000000000 R09: 0000000000000000 [ 1459.278211][T23696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1459.286208][T23696] R13: 00007f7fb1e26038 R14: 00007f7fb1e25fa0 R15: 00007ffc9ab869f8 [ 1459.294229][T23696] [ 1462.521600][T23715] netlink: 'syz.0.6626': attribute type 41 has an invalid length. [ 1463.034525][T23730] FAULT_INJECTION: forcing a failure. [ 1463.034525][T23730] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1463.106960][T23730] CPU: 1 PID: 23730 Comm: syz.2.6632 Not tainted syzkaller #0 [ 1463.114539][T23730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1463.124672][T23730] Call Trace: [ 1463.128011][T23730] [ 1463.130989][T23730] dump_stack_lvl+0x188/0x24e [ 1463.135738][T23730] ? show_regs_print_info+0x12/0x12 [ 1463.141007][T23730] ? load_image+0x410/0x410 [ 1463.145584][T23730] ? __lock_acquire+0x7c40/0x7c40 [ 1463.150765][T23730] should_fail_ex+0x390/0x4c0 [ 1463.155525][T23730] _copy_from_user+0x2c/0x170 [ 1463.160256][T23730] iovec_from_user+0x143/0x360 [ 1463.165086][T23730] __import_iovec+0x6c/0x510 [ 1463.169755][T23730] import_iovec+0x6f/0xa0 [ 1463.174146][T23730] ___sys_sendmsg+0x252/0x360 [ 1463.178905][T23730] ? __sys_sendmsg+0x2a0/0x2a0 [ 1463.183773][T23730] ? __lock_acquire+0x7c40/0x7c40 [ 1463.188923][T23730] __se_sys_sendmsg+0x1c3/0x2b0 [ 1463.193837][T23730] ? __x64_sys_sendmsg+0x80/0x80 [ 1463.198900][T23730] ? lockdep_hardirqs_on+0x94/0x140 [ 1463.204157][T23730] do_syscall_64+0x4c/0xa0 [ 1463.208620][T23730] ? clear_bhb_loop+0x60/0xb0 [ 1463.213340][T23730] ? clear_bhb_loop+0x60/0xb0 [ 1463.218069][T23730] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1463.224034][T23730] RIP: 0033:0x7f924119e019 [ 1463.228493][T23730] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1463.248144][T23730] RSP: 002b:00007f92420e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1463.256609][T23730] RAX: ffffffffffffffda RBX: 00007f9241425fa0 RCX: 00007f924119e019 [ 1463.264814][T23730] RDX: 0000000004040c04 RSI: 0000200000000080 RDI: 0000000000000005 [ 1463.272829][T23730] RBP: 00007f92420e7090 R08: 0000000000000000 R09: 0000000000000000 [ 1463.280878][T23730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1463.289019][T23730] R13: 00007f9241426038 R14: 00007f9241425fa0 R15: 00007ffc67191848 [ 1463.297079][T23730] [ 1463.373872][T23734] netlink: 'syz.5.6631': attribute type 10 has an invalid length. [ 1463.532402][T23739] netlink: 'syz.5.6631': attribute type 13 has an invalid length. [ 1463.578627][T23739] netlink: 152 bytes leftover after parsing attributes in process `syz.5.6631'. [ 1463.589300][T23739] syz_tun: refused to change device tx_queue_len [ 1463.595714][T23739] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1463.629806][T23736] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6634'. [ 1464.060554][T23746] netlink: 'syz.3.6636': attribute type 10 has an invalid length. [ 1464.122562][T23746] bridge0: port 2(bridge_slave_1) entered disabled state [ 1464.168896][T23746] device bridge_slave_1 left promiscuous mode [ 1464.179274][T23746] bridge0: port 2(bridge_slave_1) entered disabled state [ 1464.284766][T23748] __sock_release: fasync list not empty! [ 1464.575073][T23766] netlink: 'syz.3.6642': attribute type 29 has an invalid length. [ 1464.601559][T23766] netlink: 'syz.3.6642': attribute type 29 has an invalid length. [ 1464.904103][T23758] device syzkaller0 entered promiscuous mode [ 1465.759983][T23792] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.6652'. [ 1468.498708][T23783] syzkaller0: tun_chr_ioctl cmd 1074025680 [ 1468.510586][T23805] netlink: 'syz.4.6653': attribute type 10 has an invalid length. [ 1468.545690][T23805] bridge0: port 2(bridge_slave_1) entered disabled state [ 1468.594598][T23805] device bridge_slave_1 left promiscuous mode [ 1468.616380][T23805] bridge0: port 2(bridge_slave_1) entered disabled state [ 1468.969806][T23823] netlink: 'syz.5.6660': attribute type 3 has an invalid length. [ 1469.807887][T23833] __sock_release: fasync list not empty! [ 1470.254606][T23845] device syzkaller0 entered promiscuous mode [ 1471.073525][T23872] __sock_release: fasync list not empty! [ 1472.750075][T23905] FAULT_INJECTION: forcing a failure. [ 1472.750075][T23905] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1472.781799][T23905] CPU: 1 PID: 23905 Comm: syz.3.6692 Not tainted syzkaller #0 [ 1472.789363][T23905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1472.799482][T23905] Call Trace: [ 1472.802817][T23905] [ 1472.805805][T23905] dump_stack_lvl+0x188/0x24e [ 1472.810692][T23905] ? show_regs_print_info+0x12/0x12 [ 1472.816013][T23905] ? load_image+0x410/0x410 [ 1472.820567][T23905] ? __lock_acquire+0x7c40/0x7c40 [ 1472.825632][T23905] ? __bpf_prog_test_run_raw_tp+0x2a6/0x430 [ 1472.831561][T23905] should_fail_ex+0x390/0x4c0 [ 1472.836305][T23905] _copy_to_user+0x2c/0x130 [ 1472.840836][T23905] bpf_prog_test_run_raw_tp+0x4de/0x680 [ 1472.846422][T23905] ? trace_bpf_test_finish+0x220/0x220 [ 1472.851925][T23905] ? trace_bpf_test_finish+0x220/0x220 [ 1472.857529][T23905] bpf_prog_test_run+0x31c/0x390 [ 1472.862518][T23905] __sys_bpf+0x62b/0x780 [ 1472.866796][T23905] ? bpf_link_show_fdinfo+0x380/0x380 [ 1472.872214][T23905] ? lock_chain_count+0x20/0x20 [ 1472.877106][T23905] __x64_sys_bpf+0x78/0x90 [ 1472.881559][T23905] do_syscall_64+0x4c/0xa0 [ 1472.886012][T23905] ? clear_bhb_loop+0x60/0xb0 [ 1472.890720][T23905] ? clear_bhb_loop+0x60/0xb0 [ 1472.895428][T23905] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1472.901353][T23905] RIP: 0033:0x7fc2f5d9e019 [ 1472.905793][T23905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1472.925426][T23905] RSP: 002b:00007fc2f6ba0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1472.933922][T23905] RAX: ffffffffffffffda RBX: 00007fc2f6025fa0 RCX: 00007fc2f5d9e019 [ 1472.941926][T23905] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 1472.949923][T23905] RBP: 00007fc2f6ba0090 R08: 0000000000000000 R09: 0000000000000000 [ 1472.958094][T23905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1472.966097][T23905] R13: 00007fc2f6026038 R14: 00007fc2f6025fa0 R15: 00007ffd161acce8 [ 1472.974136][T23905] [ 1474.261513][T23921] FAULT_INJECTION: forcing a failure. [ 1474.261513][T23921] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1474.275076][T23921] CPU: 0 PID: 23921 Comm: syz.3.6697 Not tainted syzkaller #0 [ 1474.282604][T23921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1474.292808][T23921] Call Trace: [ 1474.296134][T23921] [ 1474.299109][T23921] dump_stack_lvl+0x188/0x24e [ 1474.303853][T23921] ? show_regs_print_info+0x12/0x12 [ 1474.309125][T23921] ? load_image+0x410/0x410 [ 1474.313692][T23921] ? __lock_acquire+0x7c40/0x7c40 [ 1474.318790][T23921] should_fail_ex+0x390/0x4c0 [ 1474.323547][T23921] _copy_from_user+0x2c/0x170 [ 1474.328289][T23921] __copy_msghdr+0x384/0x560 [ 1474.332958][T23921] ___sys_sendmsg+0x210/0x360 [ 1474.337695][T23921] ? __sys_sendmsg+0x2a0/0x2a0 [ 1474.342548][T23921] ? __lock_acquire+0x7c40/0x7c40 [ 1474.347638][T23921] __se_sys_sendmsg+0x1c3/0x2b0 [ 1474.352552][T23921] ? __x64_sys_sendmsg+0x80/0x80 [ 1474.357564][T23921] ? lockdep_hardirqs_on+0x94/0x140 [ 1474.362892][T23921] do_syscall_64+0x4c/0xa0 [ 1474.367455][T23921] ? clear_bhb_loop+0x60/0xb0 [ 1474.372172][T23921] ? clear_bhb_loop+0x60/0xb0 [ 1474.376906][T23921] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1474.383563][T23921] RIP: 0033:0x7fc2f5d9e019 [ 1474.388020][T23921] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1474.408027][T23921] RSP: 002b:00007fc2f6ba0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1474.416746][T23921] RAX: ffffffffffffffda RBX: 00007fc2f6025fa0 RCX: 00007fc2f5d9e019 [ 1474.424843][T23921] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000003 [ 1474.433160][T23921] RBP: 00007fc2f6ba0090 R08: 0000000000000000 R09: 0000000000000000 [ 1474.441355][T23921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1474.449451][T23921] R13: 00007fc2f6026038 R14: 00007fc2f6025fa0 R15: 00007ffd161acce8 [ 1474.457463][T23921] [ 1475.619615][T23863] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.6675'. [ 1475.720540][T23932] netlink: 'syz.3.6704': attribute type 29 has an invalid length. [ 1475.834930][T23934] netlink: 'syz.5.6705': attribute type 41 has an invalid length. [ 1476.328348][T23944] __sock_release: fasync list not empty! [ 1476.996724][T23963] FAULT_INJECTION: forcing a failure. [ 1476.996724][T23963] name failslab, interval 1, probability 0, space 0, times 0 [ 1477.048161][T23963] CPU: 0 PID: 23963 Comm: syz.3.6714 Not tainted syzkaller #0 [ 1477.055735][T23963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1477.065926][T23963] Call Trace: [ 1477.069247][T23963] [ 1477.072207][T23963] dump_stack_lvl+0x188/0x24e [ 1477.076940][T23963] ? show_regs_print_info+0x12/0x12 [ 1477.082187][T23963] ? load_image+0x410/0x410 [ 1477.086738][T23963] ? __lock_acquire+0x7c40/0x7c40 [ 1477.091813][T23963] should_fail_ex+0x390/0x4c0 [ 1477.096531][T23963] should_failslab+0x5/0x20 [ 1477.101092][T23963] slab_pre_alloc_hook+0x59/0x300 [ 1477.106156][T23963] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 1477.112800][T23963] ? bpf_test_init+0x9f/0x140 [ 1477.117515][T23963] __kmem_cache_alloc_node+0x4f/0x270 [ 1477.122940][T23963] ? bpf_test_init+0x9f/0x140 [ 1477.127664][T23963] __kmalloc+0xa3/0x240 [ 1477.131973][T23963] bpf_test_init+0x9f/0x140 [ 1477.136603][T23963] bpf_prog_test_run_xdp+0x488/0xf80 [ 1477.141921][T23963] ? __lock_acquire+0x7c40/0x7c40 [ 1477.146993][T23963] ? dev_put+0x80/0x80 [ 1477.151130][T23963] ? dev_put+0x80/0x80 [ 1477.155251][T23963] bpf_prog_test_run+0x31c/0x390 [ 1477.160239][T23963] __sys_bpf+0x62b/0x780 [ 1477.164525][T23963] ? bpf_link_show_fdinfo+0x380/0x380 [ 1477.169970][T23963] ? lock_chain_count+0x20/0x20 [ 1477.174868][T23963] __x64_sys_bpf+0x78/0x90 [ 1477.179321][T23963] do_syscall_64+0x4c/0xa0 [ 1477.183797][T23963] ? clear_bhb_loop+0x60/0xb0 [ 1477.188522][T23963] ? clear_bhb_loop+0x60/0xb0 [ 1477.193234][T23963] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1477.199168][T23963] RIP: 0033:0x7fc2f5d9e019 [ 1477.203615][T23963] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1477.223255][T23963] RSP: 002b:00007fc2f6ba0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1477.231698][T23963] RAX: ffffffffffffffda RBX: 00007fc2f6025fa0 RCX: 00007fc2f5d9e019 [ 1477.239695][T23963] RDX: 0000000000000050 RSI: 0000200000000540 RDI: 000000000000000a [ 1477.247692][T23963] RBP: 00007fc2f6ba0090 R08: 0000000000000000 R09: 0000000000000000 [ 1477.255689][T23963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1477.263949][T23963] R13: 00007fc2f6026038 R14: 00007fc2f6025fa0 R15: 00007ffd161acce8 [ 1477.271967][T23963] [ 1477.369294][T23965] device syzkaller0 entered promiscuous mode [ 1477.407380][T23971] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.6716'. [ 1477.788583][T23981] FAULT_INJECTION: forcing a failure. [ 1477.788583][T23981] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1477.871765][T23981] CPU: 1 PID: 23981 Comm: syz.4.6718 Not tainted syzkaller #0 [ 1477.879498][T23981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1477.889607][T23981] Call Trace: [ 1477.892938][T23981] [ 1477.895914][T23981] dump_stack_lvl+0x188/0x24e [ 1477.900670][T23981] ? show_regs_print_info+0x12/0x12 [ 1477.906033][T23981] ? load_image+0x410/0x410 [ 1477.910614][T23981] ? __lock_acquire+0x7c40/0x7c40 [ 1477.915751][T23981] should_fail_ex+0x390/0x4c0 [ 1477.920499][T23981] _copy_from_user+0x2c/0x170 [ 1477.925247][T23981] iovec_from_user+0x143/0x360 [ 1477.930098][T23981] __import_iovec+0x6c/0x510 [ 1477.934756][T23981] ? __might_fault+0xa6/0x120 [ 1477.939496][T23981] import_iovec+0x6f/0xa0 [ 1477.943907][T23981] ___sys_recvmsg+0x4b2/0x590 [ 1477.948665][T23981] ? __sys_recvmsg+0x2a0/0x2a0 [ 1477.953519][T23981] ? common_file_perm+0x171/0x1c0 [ 1477.958624][T23981] ? __fget_files+0x3fc/0x460 [ 1477.963359][T23981] __x64_sys_recvmsg+0x20d/0x2e0 [ 1477.968384][T23981] ? ___sys_recvmsg+0x590/0x590 [ 1477.973298][T23981] ? lockdep_hardirqs_on+0x94/0x140 [ 1477.978530][T23981] do_syscall_64+0x4c/0xa0 [ 1477.982994][T23981] ? clear_bhb_loop+0x60/0xb0 [ 1477.987758][T23981] ? clear_bhb_loop+0x60/0xb0 [ 1477.992473][T23981] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1477.998402][T23981] RIP: 0033:0x7f1d8639e019 [ 1478.002861][T23981] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1478.022592][T23981] RSP: 002b:00007f1d87338028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1478.031075][T23981] RAX: ffffffffffffffda RBX: 00007f1d86626090 RCX: 00007f1d8639e019 [ 1478.039104][T23981] RDX: 0000000000000003 RSI: 0000200000001940 RDI: 0000000000000003 [ 1478.047128][T23981] RBP: 00007f1d87338090 R08: 0000000000000000 R09: 0000000000000000 [ 1478.055198][T23981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1478.063241][T23981] R13: 00007f1d86626128 R14: 00007f1d86626090 R15: 00007ffe3c4bf598 [ 1478.071264][T23981] [ 1479.880688][T24013] FAULT_INJECTION: forcing a failure. [ 1479.880688][T24013] name failslab, interval 1, probability 0, space 0, times 0 [ 1479.921662][T24013] CPU: 0 PID: 24013 Comm: syz.4.6728 Not tainted syzkaller #0 [ 1479.929333][T24013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1479.939628][T24013] Call Trace: [ 1479.942966][T24013] [ 1479.945949][T24013] dump_stack_lvl+0x188/0x24e [ 1479.950696][T24013] ? show_regs_print_info+0x12/0x12 [ 1479.955962][T24013] ? load_image+0x410/0x410 [ 1479.960532][T24013] ? __lock_acquire+0x7c40/0x7c40 [ 1479.965634][T24013] should_fail_ex+0x390/0x4c0 [ 1479.970441][T24013] should_failslab+0x5/0x20 [ 1479.975009][T24013] slab_pre_alloc_hook+0x59/0x300 [ 1479.980635][T24013] ? bpf_prog_test_run_skb+0x23e/0x18e0 [ 1479.986280][T24013] __kmem_cache_alloc_node+0x4f/0x270 [ 1479.991735][T24013] ? bpf_prog_test_run_skb+0x23e/0x18e0 [ 1479.997354][T24013] __kmalloc+0xa3/0x240 [ 1480.001624][T24013] bpf_prog_test_run_skb+0x23e/0x18e0 [ 1480.007066][T24013] ? __fget_files+0x28/0x460 [ 1480.011728][T24013] ? __fget_files+0x3fc/0x460 [ 1480.016481][T24013] ? cpu_online+0xa0/0xa0 [ 1480.020880][T24013] bpf_prog_test_run+0x31c/0x390 [ 1480.025891][T24013] __sys_bpf+0x62b/0x780 [ 1480.030641][T24013] ? bpf_link_show_fdinfo+0x380/0x380 [ 1480.036099][T24013] ? lock_chain_count+0x20/0x20 [ 1480.041035][T24013] __x64_sys_bpf+0x78/0x90 [ 1480.045520][T24013] do_syscall_64+0x4c/0xa0 [ 1480.050007][T24013] ? clear_bhb_loop+0x60/0xb0 [ 1480.054751][T24013] ? clear_bhb_loop+0x60/0xb0 [ 1480.059490][T24013] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1480.065449][T24013] RIP: 0033:0x7f1d8639e019 [ 1480.069920][T24013] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1480.089688][T24013] RSP: 002b:00007f1d87359028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1480.098168][T24013] RAX: ffffffffffffffda RBX: 00007f1d86625fa0 RCX: 00007f1d8639e019 [ 1480.106255][T24013] RDX: 0000000000000050 RSI: 00002000000004c0 RDI: 000000000000000a [ 1480.114371][T24013] RBP: 00007f1d87359090 R08: 0000000000000000 R09: 0000000000000000 [ 1480.122455][T24013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1480.130493][T24013] R13: 00007f1d86626038 R14: 00007f1d86625fa0 R15: 00007ffe3c4bf598 [ 1480.138537][T24013] [ 1480.252947][T24015] FAULT_INJECTION: forcing a failure. [ 1480.252947][T24015] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1480.267886][T24015] CPU: 1 PID: 24015 Comm: syz.4.6730 Not tainted syzkaller #0 [ 1480.275429][T24015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1480.285551][T24015] Call Trace: [ 1480.288885][T24015] [ 1480.291870][T24015] dump_stack_lvl+0x188/0x24e [ 1480.296619][T24015] ? show_regs_print_info+0x12/0x12 [ 1480.301894][T24015] ? load_image+0x410/0x410 [ 1480.306459][T24015] ? __lock_acquire+0x7c40/0x7c40 [ 1480.311544][T24015] should_fail_ex+0x390/0x4c0 [ 1480.316285][T24015] _copy_from_user+0x2c/0x170 [ 1480.321018][T24015] bpf_obj_get_info_by_fd+0xda7/0x2f70 [ 1480.326894][T24015] ? __lock_acquire+0x7c40/0x7c40 [ 1480.332069][T24015] ? verify_lock_unused+0x140/0x140 [ 1480.337344][T24015] ? bpf_map_get_fd_by_id+0x330/0x330 [ 1480.342778][T24015] ? get_pid_task+0x1c/0x1e0 [ 1480.347446][T24015] ? __might_fault+0xa6/0x120 [ 1480.352173][T24015] ? __lock_acquire+0x7c40/0x7c40 [ 1480.357266][T24015] ? __might_fault+0xa6/0x120 [ 1480.361995][T24015] ? __might_fault+0xc2/0x120 [ 1480.366763][T24015] ? __might_fault+0xa6/0x120 [ 1480.371490][T24015] ? bpf_lsm_bpf+0x5/0x10 [ 1480.375864][T24015] ? security_bpf+0x7a/0xa0 [ 1480.380412][T24015] __sys_bpf+0x505/0x780 [ 1480.384714][T24015] ? bpf_link_show_fdinfo+0x380/0x380 [ 1480.390148][T24015] ? lock_chain_count+0x20/0x20 [ 1480.395055][T24015] __x64_sys_bpf+0x78/0x90 [ 1480.399642][T24015] do_syscall_64+0x4c/0xa0 [ 1480.404182][T24015] ? clear_bhb_loop+0x60/0xb0 [ 1480.409020][T24015] ? clear_bhb_loop+0x60/0xb0 [ 1480.413732][T24015] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1480.419658][T24015] RIP: 0033:0x7f1d8639e019 [ 1480.424102][T24015] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1480.443745][T24015] RSP: 002b:00007f1d87359028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1480.452195][T24015] RAX: ffffffffffffffda RBX: 00007f1d86625fa0 RCX: 00007f1d8639e019 [ 1480.460731][T24015] RDX: 0000000000000010 RSI: 0000200000000180 RDI: 000000000000000f [ 1480.468735][T24015] RBP: 00007f1d87359090 R08: 0000000000000000 R09: 0000000000000000 [ 1480.476747][T24015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1480.484754][T24015] R13: 00007f1d86626038 R14: 00007f1d86625fa0 R15: 00007ffe3c4bf598 [ 1480.492773][T24015] [ 1482.405837][T24001] netlink: 'syz.2.6725': attribute type 41 has an invalid length. [ 1482.415435][T24011] netlink: 'syz.3.6727': attribute type 10 has an invalid length. [ 1482.634458][T24033] FAULT_INJECTION: forcing a failure. [ 1482.634458][T24033] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1482.689415][T24033] CPU: 0 PID: 24033 Comm: syz.2.6735 Not tainted syzkaller #0 [ 1482.696978][T24033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1482.707085][T24033] Call Trace: [ 1482.710408][T24033] [ 1482.713393][T24033] dump_stack_lvl+0x188/0x24e [ 1482.718140][T24033] ? show_regs_print_info+0x12/0x12 [ 1482.723452][T24033] ? load_image+0x410/0x410 [ 1482.728072][T24033] ? __lock_acquire+0x7c40/0x7c40 [ 1482.733177][T24033] ? snprintf+0xe5/0x140 [ 1482.737485][T24033] should_fail_ex+0x390/0x4c0 [ 1482.742233][T24033] _copy_to_user+0x2c/0x130 [ 1482.746811][T24033] simple_read_from_buffer+0xe3/0x150 [ 1482.752242][T24033] proc_fail_nth_read+0x1a6/0x220 [ 1482.757331][T24033] ? proc_fault_inject_write+0x310/0x310 [ 1482.763060][T24033] ? fsnotify_perm+0x248/0x550 [ 1482.767896][T24033] ? proc_fault_inject_write+0x310/0x310 [ 1482.773594][T24033] vfs_read+0x2db/0x960 [ 1482.777825][T24033] ? kernel_read+0x1e0/0x1e0 [ 1482.782528][T24033] ? __fget_files+0x28/0x460 [ 1482.787186][T24033] ? __fget_files+0x3fc/0x460 [ 1482.791944][T24033] ? __fdget_pos+0x2ae/0x360 [ 1482.796595][T24033] ? ksys_read+0x70/0x260 [ 1482.800992][T24033] ksys_read+0x14d/0x260 [ 1482.805370][T24033] ? vfs_write+0x9a0/0x9a0 [ 1482.809872][T24033] ? lockdep_hardirqs_on+0x94/0x140 [ 1482.815143][T24033] do_syscall_64+0x4c/0xa0 [ 1482.819626][T24033] ? clear_bhb_loop+0x60/0xb0 [ 1482.824366][T24033] ? clear_bhb_loop+0x60/0xb0 [ 1482.829160][T24033] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1482.835112][T24033] RIP: 0033:0x7f924115e84e [ 1482.839582][T24033] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1482.859243][T24033] RSP: 002b:00007f92420e6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1482.867721][T24033] RAX: ffffffffffffffda RBX: 00007f92420e76c0 RCX: 00007f924115e84e [ 1482.875740][T24033] RDX: 000000000000000f RSI: 00007f92420e70a0 RDI: 0000000000000005 [ 1482.883760][T24033] RBP: 00007f92420e7090 R08: 0000000000000000 R09: 0000000000000000 [ 1482.891783][T24033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1482.899899][T24033] R13: 00007f9241426038 R14: 00007f9241425fa0 R15: 00007ffc67191848 [ 1482.907952][T24033] [ 1484.579839][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.586405][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.536474][T24071] netlink: 'syz.5.6745': attribute type 41 has an invalid length. [ 1485.764510][T24075] netlink: 'syz.3.6747': attribute type 10 has an invalid length. [ 1486.616301][ T4278] Bluetooth: hci2: command 0x0406 tx timeout [ 1486.804849][T24092] __sock_release: fasync list not empty! [ 1488.057226][T24121] netlink: 'syz.5.6764': attribute type 41 has an invalid length. [ 1490.638673][T24160] netlink: 10 bytes leftover after parsing attributes in process `syz.0.6777'. [ 1491.180127][T24172] netlink: 'syz.0.6782': attribute type 41 has an invalid length. [ 1491.686717][T24179] bond0: (slave dummy0): Error: Slave device does not support XDP [ 1491.754779][T24181] netlink: 'syz.5.6783': attribute type 10 has an invalid length. [ 1491.795643][T24181] bridge0: port 2(bridge_slave_1) entered disabled state [ 1491.876710][T24181] device bridge_slave_1 left promiscuous mode [ 1491.893381][T24181] bridge0: port 2(bridge_slave_1) entered disabled state [ 1491.942959][T24181] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1495.030359][T24228] netlink: 'syz.0.6797': attribute type 41 has an invalid length. [ 1496.236247][T24242] bond0: (slave dummy0): Error: Slave device does not support XDP [ 1497.333898][T24243] netlink: 'syz.2.6802': attribute type 10 has an invalid length. [ 1498.072434][T24253] netlink: 10 bytes leftover after parsing attributes in process `syz.5.6806'. [ 1498.892307][T24278] netlink: 'syz.0.6813': attribute type 16 has an invalid length. [ 1498.942311][T24278] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6813'. [ 1499.088646][T24278] netlink: 77588 bytes leftover after parsing attributes in process `syz.0.6813'. [ 1499.131522][T24278] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1499.306402][T24278] CPU: 1 PID: 24278 Comm: syz.0.6813 Not tainted syzkaller #0 [ 1499.314095][T24278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1499.324259][T24278] Call Trace: [ 1499.327614][T24278] [ 1499.330695][T24278] dump_stack_lvl+0x188/0x24e [ 1499.335471][T24278] ? show_regs_print_info+0x12/0x12 [ 1499.340752][T24278] ? load_image+0x410/0x410 [ 1499.345394][T24278] sysfs_warn_dup+0x8a/0xa0 [ 1499.349971][T24278] sysfs_do_create_link_sd+0xc0/0x110 [ 1499.355430][T24278] device_add+0x83b/0x1050 [ 1499.360035][T24278] wiphy_register+0x1d8b/0x2aa0 [ 1499.365021][T24278] ? cfg80211_event_work+0x40/0x40 [ 1499.370223][T24278] ? minstrel_ht_alloc+0x894/0xa20 [ 1499.375445][T24278] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1499.381645][T24278] ieee80211_register_hw+0x2d48/0x39f0 [ 1499.387229][T24278] ? ieee80211_register_hw+0xee1/0x39f0 [ 1499.392866][T24278] ? ieee80211_register_hw+0xee1/0x39f0 [ 1499.398668][T24278] ? ieee80211_tasklet_handler+0x20/0x20 [ 1499.404479][T24278] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1499.410448][T24278] ? __debug_object_init+0xed/0x440 [ 1499.415920][T24278] ? memset+0x1e/0x40 [ 1499.419978][T24278] ? __hrtimer_init+0x189/0x270 [ 1499.424895][T24278] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1499.430686][T24278] ? memcpy+0x3c/0x60 [ 1499.434809][T24278] hwsim_new_radio_nl+0xab7/0xc90 [ 1499.439914][T24278] genl_family_rcv_msg_doit+0x22f/0x350 [ 1499.445514][T24278] ? end_current_label_crit_section+0x170/0x170 [ 1499.451825][T24278] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1499.457779][T24278] ? bpf_lsm_capable+0x5/0x10 [ 1499.462528][T24278] ? security_capable+0x85/0xb0 [ 1499.467457][T24278] genl_rcv_msg+0x601/0x790 [ 1499.472027][T24278] ? genl_bind+0x360/0x360 [ 1499.476525][T24278] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1499.482941][T24278] netlink_rcv_skb+0x1ef/0x440 [ 1499.487761][T24278] ? genl_bind+0x360/0x360 [ 1499.492248][T24278] ? netlink_ack+0x1160/0x1160 [ 1499.497099][T24278] ? down_read+0x1a8/0x2d0 [ 1499.501580][T24278] genl_rcv+0x24/0x40 [ 1499.505623][T24278] netlink_unicast+0x7ad/0x920 [ 1499.510460][T24278] netlink_sendmsg+0x8ad/0xbd0 [ 1499.515292][T24278] ? netlink_getsockopt+0x550/0x550 [ 1499.520548][T24278] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1499.526155][T24278] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1499.531680][T24278] ? security_socket_sendmsg+0x7c/0xa0 [ 1499.537383][T24278] ? netlink_getsockopt+0x550/0x550 [ 1499.542843][T24278] ____sys_sendmsg+0x5ed/0x9a0 [ 1499.547896][T24278] ? __sys_sendmsg_sock+0x30/0x30 [ 1499.553017][T24278] ? __import_iovec+0x306/0x510 [ 1499.557954][T24278] ? import_iovec+0x6f/0xa0 [ 1499.562519][T24278] ___sys_sendmsg+0x2a2/0x360 [ 1499.567264][T24278] ? __sys_sendmsg+0x2a0/0x2a0 [ 1499.572293][T24278] __se_sys_sendmsg+0x1c3/0x2b0 [ 1499.577380][T24278] ? __x64_sys_sendmsg+0x80/0x80 [ 1499.582549][T24278] ? lockdep_hardirqs_on+0x94/0x140 [ 1499.587885][T24278] do_syscall_64+0x4c/0xa0 [ 1499.592657][T24278] ? clear_bhb_loop+0x60/0xb0 [ 1499.597775][T24278] ? clear_bhb_loop+0x60/0xb0 [ 1499.602957][T24278] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1499.608900][T24278] RIP: 0033:0x7f7fb1b9e019 [ 1499.613362][T24278] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1499.633116][T24278] RSP: 002b:00007f7fb2ac9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1499.641584][T24278] RAX: ffffffffffffffda RBX: 00007f7fb1e25fa0 RCX: 00007f7fb1b9e019 [ 1499.649690][T24278] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000010 [ 1499.657700][T24278] RBP: 00007f7fb1c3500c R08: 0000000000000000 R09: 0000000000000000 [ 1499.665735][T24278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1499.673755][T24278] R13: 00007f7fb1e26038 R14: 00007f7fb1e25fa0 R15: 00007ffc9ab869f8 [ 1499.681903][T24278] [ 1500.317028][T24298] netlink: 'syz.3.6817': attribute type 41 has an invalid length. [ 1501.419119][T24304] __sock_release: fasync list not empty! [ 1501.498001][T24309] netlink: 'syz.0.6821': attribute type 10 has an invalid length. [ 1501.527324][T24309] bridge0: port 2(bridge_slave_1) entered disabled state [ 1501.574902][T24309] device bridge_slave_1 left promiscuous mode [ 1501.666614][T24309] bridge0: port 2(bridge_slave_1) entered disabled state [ 1501.729033][T24309] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1502.009260][T24315] netlink: 'syz.2.6825': attribute type 10 has an invalid length. [ 1502.129131][T24323] FAULT_INJECTION: forcing a failure. [ 1502.129131][T24323] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1502.143335][T24323] CPU: 0 PID: 24323 Comm: syz.0.6828 Not tainted syzkaller #0 [ 1502.150871][T24323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1502.161188][T24323] Call Trace: [ 1502.164502][T24323] [ 1502.167479][T24323] dump_stack_lvl+0x188/0x24e [ 1502.172223][T24323] ? show_regs_print_info+0x12/0x12 [ 1502.177485][T24323] ? load_image+0x410/0x410 [ 1502.182053][T24323] ? __lock_acquire+0x7c40/0x7c40 [ 1502.187152][T24323] ? snprintf+0xe5/0x140 [ 1502.191453][T24323] should_fail_ex+0x390/0x4c0 [ 1502.196204][T24323] _copy_to_user+0x2c/0x130 [ 1502.200757][T24323] simple_read_from_buffer+0xe3/0x150 [ 1502.206163][T24323] proc_fail_nth_read+0x1a6/0x220 [ 1502.211313][T24323] ? proc_fault_inject_write+0x310/0x310 [ 1502.217013][T24323] ? fsnotify_perm+0x248/0x550 [ 1502.221830][T24323] ? proc_fault_inject_write+0x310/0x310 [ 1502.227527][T24323] vfs_read+0x2db/0x960 [ 1502.231737][T24323] ? kernel_read+0x1e0/0x1e0 [ 1502.236366][T24323] ? __fget_files+0x28/0x460 [ 1502.240999][T24323] ? __fget_files+0x3fc/0x460 [ 1502.245715][T24323] ? __fdget_pos+0x2ae/0x360 [ 1502.250365][T24323] ? ksys_read+0x70/0x260 [ 1502.254735][T24323] ksys_read+0x14d/0x260 [ 1502.259107][T24323] ? vfs_write+0x9a0/0x9a0 [ 1502.263567][T24323] ? lockdep_hardirqs_on+0x94/0x140 [ 1502.268823][T24323] do_syscall_64+0x4c/0xa0 [ 1502.273314][T24323] ? clear_bhb_loop+0x60/0xb0 [ 1502.278026][T24323] ? clear_bhb_loop+0x60/0xb0 [ 1502.282762][T24323] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1502.288708][T24323] RIP: 0033:0x7f7fb1b5e84e [ 1502.293266][T24323] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1502.313085][T24323] RSP: 002b:00007f7fb2ac8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1502.321736][T24323] RAX: ffffffffffffffda RBX: 00007f7fb2ac96c0 RCX: 00007f7fb1b5e84e [ 1502.329768][T24323] RDX: 000000000000000f RSI: 00007f7fb2ac90a0 RDI: 0000000000000008 [ 1502.337769][T24323] RBP: 00007f7fb2ac9090 R08: 0000000000000000 R09: 0000000000000000 [ 1502.345785][T24323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1502.353791][T24323] R13: 00007f7fb1e26038 R14: 00007f7fb1e25fa0 R15: 00007ffc9ab869f8 [ 1502.361808][T24323] [ 1502.453917][T24315] team0 (unregistering): Port device team_slave_0 removed [ 1502.517212][T24315] team0 (unregistering): Port device team_slave_1 removed [ 1502.592833][T24318] netlink: 'syz.2.6825': attribute type 10 has an invalid length. [ 1504.662992][T24366] netlink: 'syz.3.6837': attribute type 41 has an invalid length. [ 1504.959791][T24372] device sit0 entered promiscuous mode [ 1505.069763][T24375] FAULT_INJECTION: forcing a failure. [ 1505.069763][T24375] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1505.134484][T24375] CPU: 0 PID: 24375 Comm: syz.2.6840 Not tainted syzkaller #0 [ 1505.142094][T24375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1505.152238][T24375] Call Trace: [ 1505.155563][T24375] [ 1505.158539][T24375] dump_stack_lvl+0x188/0x24e [ 1505.163287][T24375] ? show_regs_print_info+0x12/0x12 [ 1505.168543][T24375] ? load_image+0x410/0x410 [ 1505.173107][T24375] ? __lock_acquire+0x7c40/0x7c40 [ 1505.178200][T24375] ? perf_trace_lock+0xf8/0x390 [ 1505.183113][T24375] should_fail_ex+0x390/0x4c0 [ 1505.187862][T24375] strncpy_from_user+0x32/0x340 [ 1505.192787][T24375] bpf_prog_load+0x200/0x1530 [ 1505.197538][T24375] ? map_freeze+0x390/0x390 [ 1505.202197][T24375] ? __might_fault+0xa6/0x120 [ 1505.206939][T24375] ? __might_fault+0xa6/0x120 [ 1505.211667][T24375] ? __might_fault+0xc2/0x120 [ 1505.216403][T24375] ? __might_fault+0xa6/0x120 [ 1505.221138][T24375] ? bpf_lsm_bpf+0x5/0x10 [ 1505.225608][T24375] ? security_bpf+0x7a/0xa0 [ 1505.230176][T24375] __sys_bpf+0x5b8/0x780 [ 1505.234479][T24375] ? bpf_link_show_fdinfo+0x380/0x380 [ 1505.239938][T24375] ? lock_chain_count+0x20/0x20 [ 1505.244863][T24375] __x64_sys_bpf+0x78/0x90 [ 1505.249351][T24375] do_syscall_64+0x4c/0xa0 [ 1505.253823][T24375] ? clear_bhb_loop+0x60/0xb0 [ 1505.258561][T24375] ? clear_bhb_loop+0x60/0xb0 [ 1505.263308][T24375] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1505.269284][T24375] RIP: 0033:0x7f924119e019 [ 1505.273750][T24375] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1505.293448][T24375] RSP: 002b:00007f92420e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1505.301927][T24375] RAX: ffffffffffffffda RBX: 00007f9241425fa0 RCX: 00007f924119e019 [ 1505.309953][T24375] RDX: 0000000000000048 RSI: 000020000000e000 RDI: 0000000000000005 [ 1505.317974][T24375] RBP: 00007f92420e7090 R08: 0000000000000000 R09: 0000000000000000 [ 1505.326004][T24375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1505.334049][T24375] R13: 00007f9241426038 R14: 00007f9241425fa0 R15: 00007ffc67191848 [ 1505.342098][T24375] [ 1505.821912][T24386] netlink: 'syz.5.6854': attribute type 41 has an invalid length. [ 1507.804376][T24420] __sock_release: fasync list not empty! [ 1510.703981][T24424] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.6867'. [ 1510.721656][T24430] netlink: 'syz.5.6857': attribute type 16 has an invalid length. [ 1510.750437][T24430] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6857'. [ 1510.931106][T24430] netlink: 77588 bytes leftover after parsing attributes in process `syz.5.6857'. [ 1511.060180][T24430] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1511.069208][T24430] CPU: 1 PID: 24430 Comm: syz.5.6857 Not tainted syzkaller #0 [ 1511.076757][T24430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1511.086857][T24430] Call Trace: [ 1511.090179][T24430] [ 1511.093173][T24430] dump_stack_lvl+0x188/0x24e [ 1511.097913][T24430] ? show_regs_print_info+0x12/0x12 [ 1511.103195][T24430] ? load_image+0x410/0x410 [ 1511.107769][T24430] sysfs_warn_dup+0x8a/0xa0 [ 1511.112317][T24430] sysfs_do_create_link_sd+0xc0/0x110 [ 1511.117759][T24430] device_add+0x83b/0x1050 [ 1511.122270][T24430] wiphy_register+0x1d8b/0x2aa0 [ 1511.127207][T24430] ? cfg80211_event_work+0x40/0x40 [ 1511.132389][T24430] ? minstrel_ht_alloc+0x894/0xa20 [ 1511.137559][T24430] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1511.143671][T24430] ieee80211_register_hw+0x2d48/0x39f0 [ 1511.149197][T24430] ? ieee80211_register_hw+0xee1/0x39f0 [ 1511.154786][T24430] ? ieee80211_register_hw+0xee1/0x39f0 [ 1511.160425][T24430] ? ieee80211_tasklet_handler+0x20/0x20 [ 1511.166129][T24430] ? __hrtimer_init+0xe0/0x270 [ 1511.170942][T24430] ? __hrtimer_init+0x116/0x270 [ 1511.175976][T24430] ? __hrtimer_init+0x189/0x270 [ 1511.180915][T24430] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1511.186720][T24430] ? memcpy+0x3c/0x60 [ 1511.190759][T24430] hwsim_new_radio_nl+0xab7/0xc90 [ 1511.195870][T24430] genl_family_rcv_msg_doit+0x22f/0x350 [ 1511.201543][T24430] ? end_current_label_crit_section+0x170/0x170 [ 1511.207869][T24430] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1511.213815][T24430] ? bpf_lsm_capable+0x5/0x10 [ 1511.218791][T24430] ? security_capable+0x85/0xb0 [ 1511.223722][T24430] genl_rcv_msg+0x601/0x790 [ 1511.228291][T24430] ? genl_bind+0x360/0x360 [ 1511.232747][T24430] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1511.239164][T24430] netlink_rcv_skb+0x1ef/0x440 [ 1511.243979][T24430] ? genl_bind+0x360/0x360 [ 1511.248441][T24430] ? netlink_ack+0x1160/0x1160 [ 1511.253272][T24430] ? down_read+0x1a8/0x2d0 [ 1511.257733][T24430] genl_rcv+0x24/0x40 [ 1511.261751][T24430] netlink_unicast+0x7ad/0x920 [ 1511.266586][T24430] netlink_sendmsg+0x8ad/0xbd0 [ 1511.271423][T24430] ? netlink_getsockopt+0x550/0x550 [ 1511.276811][T24430] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1511.282479][T24430] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1511.287819][T24430] ? security_socket_sendmsg+0x7c/0xa0 [ 1511.293329][T24430] ? netlink_getsockopt+0x550/0x550 [ 1511.298626][T24430] ____sys_sendmsg+0x5ed/0x9a0 [ 1511.303489][T24430] ? __sys_sendmsg_sock+0x30/0x30 [ 1511.308561][T24430] ? __import_iovec+0x306/0x510 [ 1511.313559][T24430] ? import_iovec+0x6f/0xa0 [ 1511.318117][T24430] ___sys_sendmsg+0x2a2/0x360 [ 1511.322856][T24430] ? __sys_sendmsg+0x2a0/0x2a0 [ 1511.327763][T24430] __se_sys_sendmsg+0x1c3/0x2b0 [ 1511.332673][T24430] ? __x64_sys_sendmsg+0x80/0x80 [ 1511.337700][T24430] ? lockdep_hardirqs_on+0x94/0x140 [ 1511.342955][T24430] do_syscall_64+0x4c/0xa0 [ 1511.347416][T24430] ? clear_bhb_loop+0x60/0xb0 [ 1511.352156][T24430] ? clear_bhb_loop+0x60/0xb0 [ 1511.356907][T24430] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1511.362839][T24430] RIP: 0033:0x7f6a38f9e019 [ 1511.367298][T24430] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1511.387123][T24430] RSP: 002b:00007f6a39ef4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1511.395586][T24430] RAX: ffffffffffffffda RBX: 00007f6a39225fa0 RCX: 00007f6a38f9e019 [ 1511.403688][T24430] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000010 [ 1511.411700][T24430] RBP: 00007f6a3903500c R08: 0000000000000000 R09: 0000000000000000 [ 1511.419800][T24430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1511.427820][T24430] R13: 00007f6a39226038 R14: 00007f6a39225fa0 R15: 00007ffdb3af4868 [ 1511.435865][T24430] [ 1511.870750][T24446] netlink: 'syz.4.6864': attribute type 41 has an invalid length. [ 1512.018204][T24441] netlink: 154020 bytes leftover after parsing attributes in process `syz.3.6862'. [ 1512.126672][T24441] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 1512.496466][T24460] __sock_release: fasync list not empty! [ 1515.123420][T24502] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.6880'. [ 1515.431461][T24506] netlink: 'syz.4.6881': attribute type 41 has an invalid length. [ 1515.891078][T24510] __sock_release: fasync list not empty! [ 1519.169972][T24551] netlink: 'syz.5.6893': attribute type 10 has an invalid length. [ 1519.923774][T24554] __sock_release: fasync list not empty! [ 1520.815820][T24559] netlink: 'syz.0.6895': attribute type 41 has an invalid length. [ 1521.472142][ T4278] Bluetooth: hci0: unexpected subevent 0x04 length: 150 > 11 [ 1524.830005][T24594] netlink: 'syz.0.6908': attribute type 10 has an invalid length. [ 1525.064605][T24597] __sock_release: fasync list not empty! [ 1527.472734][T24625] netlink: 'syz.3.6918': attribute type 41 has an invalid length. [ 1528.015315][T24639] netlink: 'syz.0.6924': attribute type 29 has an invalid length. [ 1528.052229][T24639] netlink: 'syz.0.6924': attribute type 29 has an invalid length. [ 1528.088254][T24634] __sock_release: fasync list not empty! [ 1528.110834][T24640] netlink: 'syz.0.6924': attribute type 29 has an invalid length. [ 1528.203968][T24639] netlink: 'syz.0.6924': attribute type 29 has an invalid length. [ 1529.053049][T24652] netlink: 'syz.5.6926': attribute type 10 has an invalid length. [ 1529.698800][T24667] __sock_release: fasync list not empty! [ 1529.762846][T24674] netlink: 'syz.0.6935': attribute type 10 has an invalid length. [ 1529.821302][T24674] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1530.029088][T24682] netlink: 'syz.5.6938': attribute type 41 has an invalid length. [ 1530.634605][T24692] netlink: 'syz.4.6942': attribute type 10 has an invalid length. [ 1531.216253][T24713] FAULT_INJECTION: forcing a failure. [ 1531.216253][T24713] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1531.240577][T24713] CPU: 0 PID: 24713 Comm: syz.5.6948 Not tainted syzkaller #0 [ 1531.248137][T24713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1531.258239][T24713] Call Trace: [ 1531.261590][T24713] [ 1531.264563][T24713] dump_stack_lvl+0x188/0x24e [ 1531.269305][T24713] ? show_regs_print_info+0x12/0x12 [ 1531.274577][T24713] ? load_image+0x410/0x410 [ 1531.279118][T24713] ? __lock_acquire+0x7c40/0x7c40 [ 1531.284167][T24713] ? __bpf_prog_test_run_raw_tp+0x2a6/0x430 [ 1531.290123][T24713] should_fail_ex+0x390/0x4c0 [ 1531.294842][T24713] _copy_to_user+0x2c/0x130 [ 1531.299407][T24713] bpf_prog_test_run_raw_tp+0x4de/0x680 [ 1531.305040][T24713] ? trace_bpf_test_finish+0x220/0x220 [ 1531.310672][T24713] ? trace_bpf_test_finish+0x220/0x220 [ 1531.316192][T24713] bpf_prog_test_run+0x31c/0x390 [ 1531.321198][T24713] __sys_bpf+0x62b/0x780 [ 1531.325503][T24713] ? bpf_link_show_fdinfo+0x380/0x380 [ 1531.330952][T24713] ? lock_chain_count+0x20/0x20 [ 1531.335869][T24713] __x64_sys_bpf+0x78/0x90 [ 1531.340354][T24713] do_syscall_64+0x4c/0xa0 [ 1531.344827][T24713] ? clear_bhb_loop+0x60/0xb0 [ 1531.349559][T24713] ? clear_bhb_loop+0x60/0xb0 [ 1531.354304][T24713] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1531.360249][T24713] RIP: 0033:0x7f6a38f9e019 [ 1531.364842][T24713] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1531.384502][T24713] RSP: 002b:00007f6a39ef4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1531.392975][T24713] RAX: ffffffffffffffda RBX: 00007f6a39225fa0 RCX: 00007f6a38f9e019 [ 1531.401023][T24713] RDX: 000000000000000c RSI: 0000200000000500 RDI: 000000000000000a [ 1531.409047][T24713] RBP: 00007f6a39ef4090 R08: 0000000000000000 R09: 0000000000000000 [ 1531.417066][T24713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1531.425088][T24713] R13: 00007f6a39226038 R14: 00007f6a39225fa0 R15: 00007ffdb3af4868 [ 1531.433131][T24713] [ 1531.612809][T24718] FAULT_INJECTION: forcing a failure. [ 1531.612809][T24718] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1531.693864][T24718] CPU: 0 PID: 24718 Comm: syz.2.6951 Not tainted syzkaller #0 [ 1531.701430][T24718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1531.711918][T24718] Call Trace: [ 1531.715300][T24718] [ 1531.718326][T24718] dump_stack_lvl+0x188/0x24e [ 1531.723115][T24718] ? show_regs_print_info+0x12/0x12 [ 1531.728383][T24718] ? load_image+0x410/0x410 [ 1531.732967][T24718] ? __lock_acquire+0x7c40/0x7c40 [ 1531.738097][T24718] should_fail_ex+0x390/0x4c0 [ 1531.742849][T24718] _copy_from_user+0x2c/0x170 [ 1531.747592][T24718] __copy_msghdr+0x384/0x560 [ 1531.752251][T24718] ___sys_sendmsg+0x210/0x360 [ 1531.757006][T24718] ? __sys_sendmsg+0x2a0/0x2a0 [ 1531.761837][T24718] ? __lock_acquire+0x7c40/0x7c40 [ 1531.766915][T24718] __se_sys_sendmsg+0x1c3/0x2b0 [ 1531.771807][T24718] ? ct_nmi_exit+0x145/0x1c0 [ 1531.776432][T24718] ? __x64_sys_sendmsg+0x80/0x80 [ 1531.781433][T24718] ? lockdep_hardirqs_on+0x94/0x140 [ 1531.786813][T24718] do_syscall_64+0x4c/0xa0 [ 1531.791368][T24718] ? clear_bhb_loop+0x60/0xb0 [ 1531.796082][T24718] ? clear_bhb_loop+0x60/0xb0 [ 1531.800805][T24718] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1531.806851][T24718] RIP: 0033:0x7f924119e019 [ 1531.811388][T24718] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1531.831036][T24718] RSP: 002b:00007f92420e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1531.839484][T24718] RAX: ffffffffffffffda RBX: 00007f9241425fa0 RCX: 00007f924119e019 [ 1531.847502][T24718] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000005 [ 1531.855509][T24718] RBP: 00007f92420e7090 R08: 0000000000000000 R09: 0000000000000000 [ 1531.863509][T24718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1531.871508][T24718] R13: 00007f9241426038 R14: 00007f9241425fa0 R15: 00007ffc67191848 [ 1531.879521][T24718] [ 1532.236125][T24728] bond0: (slave wlan1): Error: Slave device does not support XDP [ 1532.305421][T24733] netlink: 'syz.0.6955': attribute type 10 has an invalid length. [ 1532.482117][T24732] __sock_release: fasync list not empty! [ 1532.655704][T24738] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.6959'. [ 1532.707435][T24745] netlink: 'syz.0.6960': attribute type 41 has an invalid length. [ 1534.143444][T24765] __sock_release: fasync list not empty! [ 1534.634378][T24772] bond0: (slave dummy0): Error: Slave device does not support XDP [ 1534.719076][T24778] netlink: 'syz.5.6971': attribute type 10 has an invalid length. [ 1535.181917][T24792] netlink: 'syz.2.6978': attribute type 41 has an invalid length. [ 1535.389544][T24800] FAULT_INJECTION: forcing a failure. [ 1535.389544][T24800] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1535.463351][T24800] CPU: 1 PID: 24800 Comm: syz.0.6980 Not tainted syzkaller #0 [ 1535.470930][T24800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1535.481141][T24800] Call Trace: [ 1535.484485][T24800] [ 1535.487473][T24800] dump_stack_lvl+0x188/0x24e [ 1535.492232][T24800] ? show_regs_print_info+0x12/0x12 [ 1535.497507][T24800] ? load_image+0x410/0x410 [ 1535.502094][T24800] ? __lock_acquire+0x7c40/0x7c40 [ 1535.507193][T24800] should_fail_ex+0x390/0x4c0 [ 1535.511944][T24800] _copy_from_user+0x2c/0x170 [ 1535.516696][T24800] kstrtouint_from_user+0xda/0x170 [ 1535.521891][T24800] ? kstrtol_from_user+0x190/0x190 [ 1535.527097][T24800] proc_fail_nth_write+0x8b/0x200 [ 1535.532182][T24800] ? proc_fail_nth_read+0x220/0x220 [ 1535.537439][T24800] ? common_file_perm+0x171/0x1c0 [ 1535.542612][T24800] ? proc_fail_nth_read+0x220/0x220 [ 1535.547886][T24800] vfs_write+0x2dc/0x9a0 [ 1535.552186][T24800] ? file_end_write+0x250/0x250 [ 1535.557086][T24800] ? __fget_files+0x28/0x460 [ 1535.561723][T24800] ? __fget_files+0x3fc/0x460 [ 1535.566473][T24800] ? __fdget_pos+0x2ae/0x360 [ 1535.571114][T24800] ? ksys_write+0x70/0x260 [ 1535.575581][T24800] ksys_write+0x14d/0x260 [ 1535.579961][T24800] ? __ia32_sys_read+0x80/0x80 [ 1535.584956][T24800] ? lockdep_hardirqs_on+0x94/0x140 [ 1535.590684][T24800] do_syscall_64+0x4c/0xa0 [ 1535.595151][T24800] ? clear_bhb_loop+0x60/0xb0 [ 1535.599889][T24800] ? clear_bhb_loop+0x60/0xb0 [ 1535.604808][T24800] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1535.610752][T24800] RIP: 0033:0x7f7fb1b5e84e [ 1535.615295][T24800] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1535.635065][T24800] RSP: 002b:00007f7fb2aa7fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1535.643520][T24800] RAX: ffffffffffffffda RBX: 00007f7fb2aa86c0 RCX: 00007f7fb1b5e84e [ 1535.651526][T24800] RDX: 0000000000000001 RSI: 00007f7fb2aa80a0 RDI: 0000000000000004 [ 1535.659558][T24800] RBP: 00007f7fb2aa8090 R08: 0000000000000000 R09: 0000000000000000 [ 1535.667732][T24800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1535.675752][T24800] R13: 00007f7fb1e26128 R14: 00007f7fb1e26090 R15: 00007ffc9ab869f8 [ 1535.683789][T24800] [ 1536.078465][T24802] __sock_release: fasync list not empty! [ 1536.944679][T24821] netlink: 'syz.2.6986': attribute type 10 has an invalid length. [ 1537.574912][T24823] netlink: 'syz.4.6987': attribute type 10 has an invalid length. [ 1537.775172][T24831] __sock_release: fasync list not empty! [ 1538.184318][T24848] netlink: 'syz.5.6996': attribute type 41 has an invalid length. [ 1538.261345][T24846] __sock_release: fasync list not empty! [ 1538.998569][T24864] netlink: 'syz.4.7000': attribute type 10 has an invalid length. [ 1539.077648][T24864] team0: Device ipvlan1 failed to register rx_handler [ 1539.544842][T24874] netlink: 'syz.3.7004': attribute type 10 has an invalid length. [ 1539.754297][T24880] netlink: 'syz.0.7007': attribute type 4 has an invalid length. [ 1539.780750][T24880] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7007'. [ 1539.827020][T24880] wlan1: mtu less than device minimum [ 1540.344305][T24882] __sock_release: fasync list not empty! [ 1540.603770][T24893] netlink: 'syz.2.7012': attribute type 41 has an invalid length. [ 1541.701651][T24918] netlink: 'syz.0.7018': attribute type 10 has an invalid length. [ 1541.735237][T24918] team0: Device ipvlan1 failed to register rx_handler [ 1543.563134][T24956] netlink: 'syz.5.7029': attribute type 41 has an invalid length. [ 1544.084880][T24968] netlink: 'syz.3.7033': attribute type 10 has an invalid length. [ 1544.123217][T24968] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 1544.710670][T24980] netlink: 'syz.3.7037': attribute type 39 has an invalid length. [ 1546.294977][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.301525][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1547.278096][T24996] bond0: (slave dummy0): Error: Slave device does not support XDP [ 1548.122164][T25006] bond0: (slave wlan1): Error: Slave device does not support XDP [ 1548.672452][T25020] netlink: 'syz.5.7047': attribute type 41 has an invalid length. [ 1549.312989][T25033] tun0: tun_chr_ioctl cmd 1074025675 [ 1549.352279][T25033] tun0: persist enabled [ 1549.374398][T25034] tun0: tun_chr_ioctl cmd 1074025675 [ 1549.396782][T25034] tun0: persist enabled [ 1549.654637][T25036] netlink: 'syz.3.7052': attribute type 10 has an invalid length. [ 1549.867448][T25042] netlink: 'syz.0.7065': attribute type 41 has an invalid length. [ 1550.421847][T25052] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7058'. [ 1550.487124][T25052] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7058'. [ 1550.535084][T25054] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7058'. [ 1550.582010][T25057] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7058'. [ 1551.014565][T25063] netlink: 'syz.3.7061': attribute type 10 has an invalid length. [ 1551.121045][T25065] netlink: 'syz.0.7062': attribute type 10 has an invalid length. [ 1551.200564][T25067] netlink: 'syz.4.7063': attribute type 10 has an invalid length. [ 1551.871120][T25089] bond0: (slave dummy0): Error: Slave device does not support XDP [ 1552.486027][T25104] bond0: (slave wlan1): Error: Slave device does not support XDP [ 1552.520567][T25104] netlink: 'syz.0.7077': attribute type 10 has an invalid length. [ 1552.781760][T25114] netlink: 'syz.0.7079': attribute type 10 has an invalid length. [ 1553.094905][T25120] bond0: (slave dummy0): Error: Slave device does not support XDP [ 1553.156131][T25125] netlink: 'syz.2.7082': attribute type 10 has an invalid length. [ 1553.628550][T25134] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.7087'. [ 1553.841998][T25130] bond0: (slave wlan1): Error: Slave device does not support XDP [ 1553.940195][T25136] bond0: (slave dummy0): Error: Slave device does not support XDP [ 1553.994090][T25142] netlink: 'syz.5.7089': attribute type 10 has an invalid length. [ 1554.106542][T25141] netlink: 'syz.4.7091': attribute type 10 has an invalid length. [ 1554.665154][T25163] bond0: (slave wlan1): Error: Slave device does not support XDP [ 1554.686119][T25163] netlink: 'syz.0.7097': attribute type 10 has an invalid length. [ 1555.229033][T25177] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7103'. [ 1555.328278][T25177] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7103'. [ 1555.484317][T25178] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7103'. [ 1555.673124][T25181] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7103'. [ 1555.923659][T25190] bond0: (slave dummy0): Error: Slave device does not support XDP [ 1556.017304][T25183] netlink: 'syz.4.7105': attribute type 10 has an invalid length. [ 1556.061264][T25180] netlink: 'syz.5.7104': attribute type 10 has an invalid length. [ 1556.552655][T25205] netlink: 'syz.3.7111': attribute type 39 has an invalid length. [ 1556.619420][T25205] device macvlan0 entered promiscuous mode [ 1556.729773][T25204] netlink: 'syz.4.7109': attribute type 10 has an invalid length. [ 1557.284476][T25208] __sock_release: fasync list not empty! [ 1557.724404][T25229] netlink: 'syz.3.7119': attribute type 10 has an invalid length. [ 1557.749966][T25232] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7118'. [ 1557.816278][T25232] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7118'. [ 1557.917738][T25231] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7118'. [ 1557.968765][T25235] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7118'. [ 1558.069082][T25234] netlink: 'syz.4.7120': attribute type 10 has an invalid length. [ 1559.336148][T25263] FAULT_INJECTION: forcing a failure. [ 1559.336148][T25263] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1559.360644][T25259] __sock_release: fasync list not empty! [ 1559.412086][T25263] CPU: 0 PID: 25263 Comm: syz.5.7129 Not tainted syzkaller #0 [ 1559.419647][T25263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1559.429761][T25263] Call Trace: [ 1559.433167][T25263] [ 1559.436136][T25263] dump_stack_lvl+0x188/0x24e [ 1559.440880][T25263] ? show_regs_print_info+0x12/0x12 [ 1559.446131][T25263] ? load_image+0x410/0x410 [ 1559.450723][T25263] ? __lock_acquire+0x7c40/0x7c40 [ 1559.455842][T25263] should_fail_ex+0x390/0x4c0 [ 1559.460622][T25263] _copy_from_user+0x2c/0x170 [ 1559.465361][T25263] iovec_from_user+0x143/0x360 [ 1559.470243][T25263] __import_iovec+0x6c/0x510 [ 1559.474922][T25263] import_iovec+0x6f/0xa0 [ 1559.479320][T25263] ___sys_sendmsg+0x252/0x360 [ 1559.484075][T25263] ? __sys_sendmsg+0x2a0/0x2a0 [ 1559.489003][T25263] ? __lock_acquire+0x7c40/0x7c40 [ 1559.494108][T25263] __se_sys_sendmsg+0x1c3/0x2b0 [ 1559.499012][T25263] ? ct_nmi_exit+0x145/0x1c0 [ 1559.503655][T25263] ? __x64_sys_sendmsg+0x80/0x80 [ 1559.508680][T25263] ? lockdep_hardirqs_on+0x94/0x140 [ 1559.513988][T25263] do_syscall_64+0x4c/0xa0 [ 1559.518494][T25263] ? clear_bhb_loop+0x60/0xb0 [ 1559.523263][T25263] ? clear_bhb_loop+0x60/0xb0 [ 1559.528032][T25263] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1559.533978][T25263] RIP: 0033:0x7f6a38f9e019 [ 1559.538462][T25263] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1559.558215][T25263] RSP: 002b:00007f6a39ef4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1559.566691][T25263] RAX: ffffffffffffffda RBX: 00007f6a39225fa0 RCX: 00007f6a38f9e019 [ 1559.574706][T25263] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003 [ 1559.582723][T25263] RBP: 00007f6a39ef4090 R08: 0000000000000000 R09: 0000000000000000 [ 1559.590740][T25263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1559.598754][T25263] R13: 00007f6a39226038 R14: 00007f6a39225fa0 R15: 00007ffdb3af4868 [ 1559.606790][T25263] [ 1560.793332][T25274] bond0: (slave dummy0): Error: Slave device does not support XDP [ 1560.905227][T25279] netlink: 'syz.5.7133': attribute type 10 has an invalid length. [ 1561.240647][T25283] netlink: 'syz.0.7136': attribute type 10 has an invalid length. [ 1561.461552][T25290] netlink: 'syz.3.7139': attribute type 10 has an invalid length. [ 1561.547555][T25289] bond0: (slave dummy0): Error: Slave device does not support XDP [ 1561.622646][T25296] netlink: 'syz.5.7138': attribute type 10 has an invalid length. [ 1562.342973][T25302] bond0: (slave wlan1): Error: Slave device does not support XDP [ 1562.553930][T25307] netlink: 'syz.2.7146': attribute type 10 has an invalid length. [ 1562.646001][T25305] netlink: 'syz.0.7144': attribute type 10 has an invalid length. [ 1562.871431][T25316] bond0: (slave dummy0): Error: Slave device does not support XDP [ 1563.020304][T25319] netlink: 'syz.5.7149': attribute type 10 has an invalid length. [ 1563.895876][T25343] netlink: 'syz.2.7158': attribute type 41 has an invalid length. [ 1564.635072][T25355] netlink: 'syz.3.7161': attribute type 39 has an invalid length. [ 1565.044147][T25360] netlink: 'syz.3.7162': attribute type 10 has an invalid length. [ 1565.861750][T25386] device macvlan0 entered promiscuous mode [ 1566.694919][T25412] validate_nla: 1 callbacks suppressed [ 1566.694960][T25412] netlink: 'syz.5.7180': attribute type 10 has an invalid length. [ 1567.244641][T25427] netlink: 'syz.2.7187': attribute type 39 has an invalid length. [ 1567.288325][T25427] device macvlan0 entered promiscuous mode [ 1568.349759][T25443] __sock_release: fasync list not empty! [ 1568.553432][T25446] netlink: 'syz.0.7194': attribute type 10 has an invalid length. [ 1568.747048][T25453] FAULT_INJECTION: forcing a failure. [ 1568.747048][T25453] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1568.791408][T25455] netlink: 'syz.5.7197': attribute type 39 has an invalid length. [ 1568.810431][T25453] CPU: 1 PID: 25453 Comm: syz.3.7198 Not tainted syzkaller #0 [ 1568.817992][T25453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1568.828098][T25453] Call Trace: [ 1568.831494][T25453] [ 1568.834467][T25453] dump_stack_lvl+0x188/0x24e [ 1568.839215][T25453] ? show_regs_print_info+0x12/0x12 [ 1568.844471][T25453] ? load_image+0x410/0x410 [ 1568.849032][T25453] ? __lock_acquire+0x7c40/0x7c40 [ 1568.854128][T25453] should_fail_ex+0x390/0x4c0 [ 1568.858872][T25453] _copy_from_user+0x2c/0x170 [ 1568.863605][T25453] kstrtouint_from_user+0xda/0x170 [ 1568.868819][T25453] ? kstrtol_from_user+0x190/0x190 [ 1568.874008][T25453] proc_fail_nth_write+0x8b/0x200 [ 1568.879091][T25453] ? proc_fail_nth_read+0x220/0x220 [ 1568.884429][T25453] ? common_file_perm+0x171/0x1c0 [ 1568.889607][T25453] ? proc_fail_nth_read+0x220/0x220 [ 1568.894867][T25453] vfs_write+0x2dc/0x9a0 [ 1568.899189][T25453] ? file_end_write+0x250/0x250 [ 1568.904196][T25453] ? __fget_files+0x28/0x460 [ 1568.908854][T25453] ? __fget_files+0x3fc/0x460 [ 1568.913607][T25453] ? __fdget_pos+0x2ae/0x360 [ 1568.918254][T25453] ? ksys_write+0x70/0x260 [ 1568.922775][T25453] ksys_write+0x14d/0x260 [ 1568.927278][T25453] ? __ia32_sys_read+0x80/0x80 [ 1568.932103][T25453] ? lockdep_hardirqs_on+0x94/0x140 [ 1568.937339][T25453] do_syscall_64+0x4c/0xa0 [ 1568.941794][T25453] ? clear_bhb_loop+0x60/0xb0 [ 1568.946517][T25453] ? clear_bhb_loop+0x60/0xb0 [ 1568.951244][T25453] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1568.957351][T25453] RIP: 0033:0x7fc2f5d5e84e [ 1568.961800][T25453] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1568.981441][T25453] RSP: 002b:00007fc2f6b9ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1568.989893][T25453] RAX: ffffffffffffffda RBX: 00007fc2f6ba06c0 RCX: 00007fc2f5d5e84e [ 1568.997997][T25453] RDX: 0000000000000001 RSI: 00007fc2f6ba00a0 RDI: 0000000000000005 [ 1569.005998][T25453] RBP: 00007fc2f6ba0090 R08: 0000000000000000 R09: 0000000000000000 [ 1569.014009][T25453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1569.022010][T25453] R13: 00007fc2f6026038 R14: 00007fc2f6025fa0 R15: 00007ffd161acce8 [ 1569.030029][T25453] [ 1569.251221][T25465] netlink: 'syz.5.7202': attribute type 39 has an invalid length. [ 1570.159595][T25482] __sock_release: fasync list not empty! [ 1570.361560][T25486] netlink: 'syz.3.7210': attribute type 10 has an invalid length. [ 1570.453823][T25494] netlink: 'syz.0.7211': attribute type 39 has an invalid length. [ 1570.472933][T25494] device macvlan0 entered promiscuous mode [ 1570.550144][T25491] netlink: 'syz.2.7214': attribute type 39 has an invalid length. [ 1570.605870][T25498] netlink: 'syz.3.7215': attribute type 10 has an invalid length. [ 1570.633032][T25498] team0: Device hsr_slave_0 failed to register rx_handler [ 1571.101157][T25500] bond0: (slave dummy0): Error: Slave device does not support XDP [ 1571.157636][T25504] netlink: 'syz.2.7216': attribute type 10 has an invalid length. [ 1571.957966][T25517] netlink: 'syz.0.7220': attribute type 41 has an invalid length. [ 1572.488575][T25528] netlink: 'syz.3.7226': attribute type 39 has an invalid length. [ 1572.653926][T25525] __sock_release: fasync list not empty! [ 1572.705063][T25529] netlink: 'syz.2.7225': attribute type 10 has an invalid length. [ 1573.284349][T25538] netlink: 'syz.3.7230': attribute type 10 has an invalid length. [ 1574.002908][T25563] netlink: 'syz.2.7239': attribute type 10 has an invalid length. [ 1574.038742][T25566] netlink: 'syz.3.7240': attribute type 39 has an invalid length. [ 1574.327367][T25574] netlink: 60 bytes leftover after parsing attributes in process `syz.5.7243'. [ 1574.430465][T25574] netlink: 60 bytes leftover after parsing attributes in process `syz.5.7243'. [ 1574.477961][T25571] __sock_release: fasync list not empty! [ 1574.892101][T25583] netlink: 'syz.4.7246': attribute type 10 has an invalid length. [ 1575.218814][T25589] __sock_release: fasync list not empty! [ 1575.931595][T25597] netlink: 'syz.4.7252': attribute type 10 has an invalid length. [ 1576.184027][T25605] netlink: 'syz.5.7254': attribute type 39 has an invalid length. [ 1576.272687][T25577] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.7245'. [ 1576.360560][T25577] bridge_slave_1: default FDB implementation only supports local addresses [ 1576.899572][T25619] __sock_release: fasync list not empty! [ 1577.215189][T25623] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7257'. [ 1577.278525][T25633] netlink: 'syz.2.7262': attribute type 39 has an invalid length. [ 1577.338245][T25623] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7257'. [ 1577.623106][T25643] netlink: 'syz.2.7266': attribute type 39 has an invalid length. [ 1577.853838][T25645] netlink: 'syz.5.7265': attribute type 10 has an invalid length. [ 1577.909926][T25652] FAULT_INJECTION: forcing a failure. [ 1577.909926][T25652] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1577.967034][T25652] CPU: 1 PID: 25652 Comm: syz.2.7268 Not tainted syzkaller #0 [ 1577.974597][T25652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1577.984703][T25652] Call Trace: [ 1577.988028][T25652] [ 1577.990995][T25652] dump_stack_lvl+0x188/0x24e [ 1577.995743][T25652] ? show_regs_print_info+0x12/0x12 [ 1578.001008][T25652] ? load_image+0x410/0x410 [ 1578.005559][T25652] ? __lock_acquire+0x7c40/0x7c40 [ 1578.010680][T25652] should_fail_ex+0x390/0x4c0 [ 1578.015422][T25652] _copy_to_user+0x2c/0x130 [ 1578.019980][T25652] bpf_prog_test_run_syscall+0x33b/0x4b0 [ 1578.025661][T25652] ? sock_gen_cookie+0x60/0x60 [ 1578.030482][T25652] ? sock_gen_cookie+0x60/0x60 [ 1578.035297][T25652] bpf_prog_test_run+0x31c/0x390 [ 1578.040332][T25652] __sys_bpf+0x62b/0x780 [ 1578.044624][T25652] ? bpf_link_show_fdinfo+0x380/0x380 [ 1578.050064][T25652] ? lock_chain_count+0x20/0x20 [ 1578.054967][T25652] __x64_sys_bpf+0x78/0x90 [ 1578.059433][T25652] do_syscall_64+0x4c/0xa0 [ 1578.063899][T25652] ? clear_bhb_loop+0x60/0xb0 [ 1578.068705][T25652] ? clear_bhb_loop+0x60/0xb0 [ 1578.073436][T25652] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1578.079378][T25652] RIP: 0033:0x7f924119e019 [ 1578.083830][T25652] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1578.103590][T25652] RSP: 002b:00007f92420e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1578.112048][T25652] RAX: ffffffffffffffda RBX: 00007f9241425fa0 RCX: 00007f924119e019 [ 1578.120090][T25652] RDX: 0000000000000048 RSI: 0000200000000340 RDI: 000000000000000a [ 1578.128101][T25652] RBP: 00007f92420e7090 R08: 0000000000000000 R09: 0000000000000000 [ 1578.136196][T25652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1578.144211][T25652] R13: 00007f9241426038 R14: 00007f9241425fa0 R15: 00007ffc67191848 [ 1578.152238][T25652] [ 1578.685043][T25665] __sock_release: fasync list not empty! [ 1578.994428][T25680] netlink: 'syz.2.7279': attribute type 39 has an invalid length. [ 1580.118880][T25707] netlink: 188 bytes leftover after parsing attributes in process `syz.2.7283'. [ 1580.153719][T25707] ksmbd: Daemon and kernel module version mismatch. ksmbd: 2, kernel module: 1. User-space ksmbd should terminate. [ 1580.916900][T25719] netlink: 'syz.2.7291': attribute type 39 has an invalid length. [ 1582.413401][T25760] netlink: 'syz.5.7302': attribute type 21 has an invalid length. [ 1582.644149][T25765] bond0: (slave dummy0): Error: Slave device does not support XDP [ 1582.756304][T25769] netlink: 140 bytes leftover after parsing attributes in process `syz.5.7302'. [ 1582.883820][T25769] netlink: 10 bytes leftover after parsing attributes in process `syz.5.7302'. [ 1583.010757][T25769] bond0: (slave bond_slave_0): Releasing backup interface [ 1583.113059][T25769] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 1583.722873][T25781] netlink: 'syz.0.7307': attribute type 10 has an invalid length. [ 1583.835726][T25781] 8021q: adding VLAN 0 to HW filter on device team0 [ 1583.867515][T25781] bond0: (slave team0): Enslaving as an active interface with an up link [ 1583.890195][T25753] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.7300'. [ 1583.901228][T25753] bridge_slave_1: default FDB implementation only supports local addresses [ 1584.669921][T25806] FAULT_INJECTION: forcing a failure. [ 1584.669921][T25806] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1584.707771][T25806] CPU: 1 PID: 25806 Comm: syz.3.7317 Not tainted syzkaller #0 [ 1584.715345][T25806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1584.725534][T25806] Call Trace: [ 1584.728892][T25806] [ 1584.731867][T25806] dump_stack_lvl+0x188/0x24e [ 1584.736608][T25806] ? show_regs_print_info+0x12/0x12 [ 1584.741869][T25806] ? load_image+0x410/0x410 [ 1584.746436][T25806] ? __lock_acquire+0x7c40/0x7c40 [ 1584.751540][T25806] ? snprintf+0xe5/0x140 [ 1584.755873][T25806] should_fail_ex+0x390/0x4c0 [ 1584.760619][T25806] _copy_to_user+0x2c/0x130 [ 1584.765173][T25806] simple_read_from_buffer+0xe3/0x150 [ 1584.770629][T25806] proc_fail_nth_read+0x1a6/0x220 [ 1584.775723][T25806] ? proc_fault_inject_write+0x310/0x310 [ 1584.781438][T25806] ? fsnotify_perm+0x248/0x550 [ 1584.786286][T25806] ? proc_fault_inject_write+0x310/0x310 [ 1584.791980][T25806] vfs_read+0x2db/0x960 [ 1584.796230][T25806] ? kernel_read+0x1e0/0x1e0 [ 1584.800885][T25806] ? __fget_files+0x28/0x460 [ 1584.805542][T25806] ? __fget_files+0x3fc/0x460 [ 1584.810298][T25806] ? __fdget_pos+0x2ae/0x360 [ 1584.814987][T25806] ? ksys_read+0x70/0x260 [ 1584.819397][T25806] ksys_read+0x14d/0x260 [ 1584.823692][T25806] ? vfs_write+0x9a0/0x9a0 [ 1584.828184][T25806] ? lockdep_hardirqs_on+0x94/0x140 [ 1584.833425][T25806] do_syscall_64+0x4c/0xa0 [ 1584.837878][T25806] ? clear_bhb_loop+0x60/0xb0 [ 1584.842871][T25806] ? clear_bhb_loop+0x60/0xb0 [ 1584.847613][T25806] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1584.853543][T25806] RIP: 0033:0x7fc2f5d5e84e [ 1584.857986][T25806] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1584.877625][T25806] RSP: 002b:00007fc2f6b9ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1584.886163][T25806] RAX: ffffffffffffffda RBX: 00007fc2f6ba06c0 RCX: 00007fc2f5d5e84e [ 1584.894182][T25806] RDX: 000000000000000f RSI: 00007fc2f6ba00a0 RDI: 0000000000000005 [ 1584.902216][T25806] RBP: 00007fc2f6ba0090 R08: 0000000000000000 R09: 0000000000000000 [ 1584.910244][T25806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1584.918292][T25806] R13: 00007fc2f6026038 R14: 00007fc2f6025fa0 R15: 00007ffd161acce8 [ 1584.926412][T25806] [ 1585.728935][T25826] netlink: 'syz.5.7323': attribute type 10 has an invalid length. [ 1585.904688][T25826] 8021q: adding VLAN 0 to HW filter on device team0 [ 1586.026912][T25826] bond0: (slave team0): Enslaving as an active interface with an up link [ 1586.980311][T25847] netlink: 194236 bytes leftover after parsing attributes in process `syz.3.7327'. [ 1587.006134][T25847] netlink: zone id is out of range [ 1587.059865][T25847] netlink: zone id is out of range [ 1587.086226][T25847] netlink: zone id is out of range [ 1587.167749][T25847] netlink: zone id is out of range [ 1587.172985][T25847] netlink: zone id is out of range [ 1587.295691][T25846] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.7325'. [ 1587.311405][T25847] netlink: zone id is out of range [ 1587.358835][T25846] bridge_slave_1: default FDB implementation only supports local addresses [ 1587.371140][T25847] netlink: zone id is out of range [ 1587.405842][T25847] netlink: zone id is out of range [ 1587.441680][T25847] netlink: zone id is out of range [ 1589.421660][T25876] netlink: 'syz.3.7336': attribute type 10 has an invalid length. [ 1590.044590][T25892] netlink: 'syz.0.7341': attribute type 39 has an invalid length. [ 1590.487955][T25893] netlink: 'syz.3.7340': attribute type 10 has an invalid length. [ 1590.869902][T25903] FAULT_INJECTION: forcing a failure. [ 1590.869902][T25903] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1590.945683][T25903] CPU: 0 PID: 25903 Comm: syz.4.7345 Not tainted syzkaller #0 [ 1590.953252][T25903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1590.963370][T25903] Call Trace: [ 1590.966702][T25903] [ 1590.969682][T25903] dump_stack_lvl+0x188/0x24e [ 1590.974437][T25903] ? show_regs_print_info+0x12/0x12 [ 1590.979867][T25903] ? load_image+0x410/0x410 [ 1590.984426][T25903] ? __lock_acquire+0x7c40/0x7c40 [ 1590.989539][T25903] should_fail_ex+0x390/0x4c0 [ 1590.994281][T25903] _copy_from_user+0x2c/0x170 [ 1590.999020][T25903] __copy_msghdr+0x384/0x560 [ 1591.003762][T25903] ___sys_sendmsg+0x210/0x360 [ 1591.008499][T25903] ? __sys_sendmsg+0x2a0/0x2a0 [ 1591.013349][T25903] ? ktime_get+0x7b/0x270 [ 1591.017763][T25903] __se_sys_sendmsg+0x1c3/0x2b0 [ 1591.022679][T25903] ? __x64_sys_sendmsg+0x80/0x80 [ 1591.027688][T25903] ? lockdep_hardirqs_on+0x94/0x140 [ 1591.032936][T25903] do_syscall_64+0x4c/0xa0 [ 1591.037406][T25903] ? clear_bhb_loop+0x60/0xb0 [ 1591.042139][T25903] ? clear_bhb_loop+0x60/0xb0 [ 1591.046869][T25903] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1591.052916][T25903] RIP: 0033:0x7f1d8639e019 [ 1591.057380][T25903] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1591.077036][T25903] RSP: 002b:00007f1d87359028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1591.085681][T25903] RAX: ffffffffffffffda RBX: 00007f1d86625fa0 RCX: 00007f1d8639e019 [ 1591.093710][T25903] RDX: 0000000000000000 RSI: 0000200000007940 RDI: 000000000000003a [ 1591.101729][T25903] RBP: 00007f1d87359090 R08: 0000000000000000 R09: 0000000000000000 [ 1591.109752][T25903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1591.117768][T25903] R13: 00007f1d86626038 R14: 00007f1d86625fa0 R15: 00007ffe3c4bf598 [ 1591.125806][T25903] [ 1591.815113][T25915] __sock_release: fasync list not empty! [ 1592.141711][T25925] netlink: 'syz.4.7352': attribute type 10 has an invalid length. [ 1592.252096][T25933] netlink: 'syz.5.7354': attribute type 39 has an invalid length. [ 1592.639782][T25938] netlink: 'syz.4.7356': attribute type 10 has an invalid length. [ 1592.930721][T25949] bond0: (slave wlan1): Error: Slave device does not support XDP [ 1592.976940][T25949] netlink: 'syz.0.7360': attribute type 10 has an invalid length. [ 1593.328693][T25957] __sock_release: fasync list not empty! [ 1593.481120][T25964] netlink: 'syz.2.7365': attribute type 39 has an invalid length. [ 1593.803657][T25971] bond0: (slave wlan1): Error: Slave device does not support XDP [ 1593.844433][T25977] netlink: 'syz.0.7367': attribute type 10 has an invalid length. [ 1594.023891][T25974] bond0: (slave dummy0): Error: Slave device does not support XDP [ 1594.066264][T25974] netlink: 'syz.5.7368': attribute type 10 has an invalid length. [ 1595.082380][T26000] __sock_release: fasync list not empty! [ 1595.238257][T26006] validate_nla: 2 callbacks suppressed [ 1595.238277][T26006] netlink: 'syz.0.7379': attribute type 39 has an invalid length. [ 1595.575574][T26012] netlink: 'syz.4.7382': attribute type 10 has an invalid length. [ 1596.501950][T26040] netlink: 'syz.5.7389': attribute type 41 has an invalid length. [ 1596.903059][T26045] __sock_release: fasync list not empty! [ 1597.484883][T26059] netlink: 'syz.2.7394': attribute type 39 has an invalid length. [ 1597.897703][T26058] netlink: 'syz.3.7393': attribute type 10 has an invalid length. [ 1598.958146][T26073] bond0: (slave dummy0): Error: Slave device does not support XDP [ 1598.991148][T26073] netlink: 'syz.2.7398': attribute type 10 has an invalid length. [ 1599.243043][T26085] __sock_release: fasync list not empty! [ 1599.278479][T26090] netlink: 'syz.0.7406': attribute type 41 has an invalid length. [ 1601.373644][T26136] __sock_release: fasync list not empty! [ 1601.701911][T26145] netlink: 'syz.5.7424': attribute type 41 has an invalid length. [ 1602.902848][T26173] netlink: 'syz.0.7436': attribute type 10 has an invalid length. [ 1602.916417][T26173] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7436'. [ 1602.936640][T26173] device team0 entered promiscuous mode [ 1602.950609][T26165] __sock_release: fasync list not empty! [ 1602.957224][T26173] device team_slave_0 entered promiscuous mode [ 1602.964349][T26173] device team_slave_1 entered promiscuous mode [ 1602.980501][T26173] bond0: (slave team0): Releasing backup interface [ 1603.062691][T26173] bridge0: port 2(team0) entered blocking state [ 1603.076406][T26173] bridge0: port 2(team0) entered disabled state [ 1603.234418][T26181] netlink: 'syz.5.7439': attribute type 39 has an invalid length. [ 1603.725045][T26192] netlink: 'syz.3.7445': attribute type 41 has an invalid length. [ 1603.970181][T26197] netlink: 'syz.5.7447': attribute type 10 has an invalid length. [ 1604.223375][T26205] __sock_release: fasync list not empty! [ 1605.529034][T26236] netlink: 60 bytes leftover after parsing attributes in process `syz.5.7458'. [ 1605.576234][T26236] netlink: 60 bytes leftover after parsing attributes in process `syz.5.7458'. [ 1605.757197][T26239] netlink: 60 bytes leftover after parsing attributes in process `syz.5.7458'. [ 1605.850133][T26241] __sock_release: fasync list not empty! [ 1605.884861][T26244] netlink: 'syz.2.7461': attribute type 10 has an invalid length. [ 1606.167254][T26251] netlink: 'syz.3.7465': attribute type 41 has an invalid length. [ 1606.267294][T26253] netlink: 'syz.4.7466': attribute type 17 has an invalid length. [ 1606.276184][T26253] netlink: 152 bytes leftover after parsing attributes in process `syz.4.7466'. [ 1606.295676][T26253] net_ratelimit: 7 callbacks suppressed [ 1606.295814][T26253] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1606.530753][T26255] bond0: (slave dummy0): Error: Slave device does not support XDP [ 1606.619455][T26255] netlink: 'syz.2.7467': attribute type 10 has an invalid length. [ 1607.166391][T26266] bond0: (slave wlan1): Error: Slave device does not support XDP [ 1607.305251][T26269] netlink: 'syz.0.7481': attribute type 10 has an invalid length. [ 1607.440034][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.446529][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.086171][T26279] bond0: (slave dummy0): Error: Slave device does not support XDP [ 1608.170906][T26283] netlink: 'syz.2.7474': attribute type 10 has an invalid length. [ 1609.074180][T26293] __sock_release: fasync list not empty! [ 1609.079347][T26296] FAULT_INJECTION: forcing a failure. [ 1609.079347][T26296] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1609.147449][T26296] CPU: 0 PID: 26296 Comm: syz.0.7478 Not tainted syzkaller #0 [ 1609.155003][T26296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1609.165094][T26296] Call Trace: [ 1609.168530][T26296] [ 1609.171481][T26296] dump_stack_lvl+0x188/0x24e [ 1609.176303][T26296] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1609.182676][T26296] ? show_regs_print_info+0x12/0x12 [ 1609.188007][T26296] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1609.194226][T26296] should_fail_ex+0x390/0x4c0 [ 1609.199036][T26296] _copy_from_user+0x2c/0x170 [ 1609.203920][T26296] __copy_msghdr+0x384/0x560 [ 1609.208556][T26296] ___sys_sendmsg+0x210/0x360 [ 1609.213360][T26296] ? __sys_sendmsg+0x2a0/0x2a0 [ 1609.218188][T26296] ? __lock_acquire+0x7c40/0x7c40 [ 1609.223280][T26296] __se_sys_sendmsg+0x1c3/0x2b0 [ 1609.228186][T26296] ? ct_nmi_exit+0x145/0x1c0 [ 1609.232817][T26296] ? __x64_sys_sendmsg+0x80/0x80 [ 1609.237975][T26296] ? lockdep_hardirqs_on+0x94/0x140 [ 1609.243241][T26296] do_syscall_64+0x4c/0xa0 [ 1609.247692][T26296] ? clear_bhb_loop+0x60/0xb0 [ 1609.252418][T26296] ? clear_bhb_loop+0x60/0xb0 [ 1609.257133][T26296] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1609.263062][T26296] RIP: 0033:0x7f7fb1b9e019 [ 1609.267505][T26296] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1609.287141][T26296] RSP: 002b:00007f7fb2ac9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1609.295595][T26296] RAX: ffffffffffffffda RBX: 00007f7fb1e25fa0 RCX: 00007f7fb1b9e019 [ 1609.303610][T26296] RDX: 0000000000088010 RSI: 0000200000000340 RDI: 0000000000000012 [ 1609.311645][T26296] RBP: 00007f7fb2ac9090 R08: 0000000000000000 R09: 0000000000000000 [ 1609.319666][T26296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1609.327668][T26296] R13: 00007f7fb1e26038 R14: 00007f7fb1e25fa0 R15: 00007ffc9ab869f8 [ 1609.335764][T26296] [ 1610.050833][T26317] netlink: 'syz.4.7484': attribute type 41 has an invalid length. [ 1610.383170][T26323] bond0: (slave dummy0): Error: Slave device does not support XDP [ 1610.482155][T26326] netlink: 'syz.5.7486': attribute type 10 has an invalid length. [ 1610.539218][T26328] netlink: 'syz.3.7488': attribute type 17 has an invalid length. [ 1610.581479][T26328] netlink: 152 bytes leftover after parsing attributes in process `syz.3.7488'. [ 1610.649697][T26328] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1611.338027][T26342] __sock_release: fasync list not empty! [ 1611.939393][T26356] netlink: 'syz.0.7496': attribute type 39 has an invalid length. [ 1612.473135][T26365] bond0: (slave wlan1): Error: Slave device does not support XDP [ 1612.559333][T26369] netlink: 'syz.0.7500': attribute type 10 has an invalid length. [ 1612.895604][T26381] netlink: 'syz.0.7504': attribute type 41 has an invalid length. [ 1613.588527][T26388] __sock_release: fasync list not empty! [ 1614.310627][T26400] netlink: 'syz.0.7510': attribute type 39 has an invalid length. [ 1615.079855][T26411] bond0: (slave dummy0): Error: Slave device does not support XDP [ 1615.139099][T26411] netlink: 'syz.5.7514': attribute type 10 has an invalid length. [ 1615.175036][T26419] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7516'. [ 1615.184554][T26419] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7516'. [ 1615.979568][T26430] netlink: 'syz.0.7520': attribute type 41 has an invalid length. [ 1617.009264][T26450] bond0: (slave dummy0): Error: Slave device does not support XDP [ 1617.109976][T26453] netlink: 'syz.5.7528': attribute type 10 has an invalid length. [ 1617.448290][T26469] netlink: 'syz.4.7532': attribute type 39 has an invalid length. [ 1618.133526][T26487] netlink: 'syz.3.7541': attribute type 41 has an invalid length. [ 1619.211941][T26508] netlink: 'syz.0.7546': attribute type 10 has an invalid length. [ 1619.942386][T26533] netlink: 'syz.4.7558': attribute type 41 has an invalid length. [ 1620.748586][T26545] netlink: 'syz.2.7562': attribute type 10 has an invalid length. [ 1621.252459][T26558] __sock_release: fasync list not empty! [ 1621.504617][T26570] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7572'. [ 1621.514428][T26570] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7572'. [ 1622.248705][T26583] netlink: 'syz.4.7577': attribute type 41 has an invalid length. [ 1622.849488][T26595] __sock_release: fasync list not empty! [ 1623.329587][T26603] netlink: 'syz.2.7584': attribute type 39 has an invalid length. [ 1625.002024][T26636] __sock_release: fasync list not empty! [ 1625.520928][T26650] netlink: 'syz.0.7598': attribute type 41 has an invalid length. [ 1625.791305][T26655] netlink: 'syz.5.7600': attribute type 39 has an invalid length. [ 1627.455527][T26692] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7613'. [ 1627.483593][T26692] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7613'. [ 1627.934477][T26701] netlink: 'syz.3.7617': attribute type 41 has an invalid length. [ 1630.296681][T26738] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7630'. [ 1630.385256][T26738] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7630'. [ 1630.750308][T26753] netlink: 'syz.3.7634': attribute type 41 has an invalid length. [ 1631.075188][T26760] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7637'. [ 1631.146189][T26760] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7637'. [ 1631.781758][T26773] netlink: 'syz.0.7651': attribute type 41 has an invalid length. [ 1632.939515][T26783] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7644'. [ 1633.045066][T26783] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7644'. [ 1633.443423][T26791] bond0: (slave wlan1): Error: Slave device does not support XDP [ 1633.562699][T26796] netlink: 'syz.0.7646': attribute type 10 has an invalid length. [ 1633.949984][T26806] netlink: 60 bytes leftover after parsing attributes in process `syz.5.7652'. [ 1634.016253][T26806] netlink: 60 bytes leftover after parsing attributes in process `syz.5.7652'. [ 1634.669074][T26821] netlink: 'syz.5.7657': attribute type 41 has an invalid length. [ 1635.074226][T26830] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7660'. [ 1635.096760][T26830] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7660'. [ 1635.774987][T26844] netlink: 'syz.5.7674': attribute type 41 has an invalid length. [ 1636.278014][T26855] bond0: (slave dummy0): Error: Slave device does not support XDP [ 1636.334564][T26858] netlink: 'syz.2.7666': attribute type 10 has an invalid length. [ 1636.649998][T26863] netlink: 'syz.3.7670': attribute type 10 has an invalid length. [ 1637.082979][T26873] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7673'. [ 1637.117416][T26873] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7673'. [ 1638.440132][T26904] netlink: 'syz.3.7683': attribute type 41 has an invalid length. [ 1638.613096][T26907] bond0: (slave dummy0): Error: Slave device does not support XDP [ 1638.650997][T26907] netlink: 'syz.5.7685': attribute type 10 has an invalid length. [ 1638.877231][T26912] netlink: 'syz.2.7687': attribute type 10 has an invalid length. [ 1640.007618][T26928] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7690'. [ 1640.026533][T26928] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7690'. [ 1640.929707][T26949] netlink: 'syz.3.7698': attribute type 39 has an invalid length. [ 1640.969808][T26945] netlink: 'syz.2.7696': attribute type 10 has an invalid length. [ 1641.290014][T26959] netlink: 'syz.3.7701': attribute type 41 has an invalid length. [ 1641.329989][T26963] netlink: 'syz.0.7700': attribute type 10 has an invalid length. [ 1642.931645][T26981] bond0: (slave wlan1): Error: Slave device does not support XDP [ 1642.981533][T26983] netlink: 'syz.0.7708': attribute type 10 has an invalid length. [ 1643.045448][T26987] netlink: 'syz.5.7711': attribute type 39 has an invalid length. [ 1643.639634][T27001] netlink: 'syz.0.7714': attribute type 10 has an invalid length. [ 1643.954200][T27012] netlink: 'syz.5.7718': attribute type 10 has an invalid length. [ 1644.643162][T27025] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7725'. [ 1644.672950][T27025] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7725'. [ 1644.974905][T27024] __sock_release: fasync list not empty! [ 1644.995609][T27029] netlink: 'syz.2.7724': attribute type 39 has an invalid length. [ 1645.876391][T27043] netlink: 'syz.5.7730': attribute type 10 has an invalid length. [ 1646.386157][T27061] netlink: 'syz.3.7736': attribute type 10 has an invalid length. [ 1647.169737][T27069] __sock_release: fasync list not empty! [ 1647.954736][T27086] netlink: 'syz.2.7745': attribute type 39 has an invalid length. [ 1648.431897][T27101] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7749'. [ 1648.511739][T27101] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7749'. [ 1648.861950][T27109] netlink: 'syz.4.7751': attribute type 10 has an invalid length. [ 1650.364742][T27136] netlink: 'syz.5.7760': attribute type 39 has an invalid length. [ 1651.364040][T27154] netlink: 'syz.0.7767': attribute type 10 has an invalid length. [ 1652.499127][T27176] netlink: 'syz.0.7775': attribute type 39 has an invalid length. [ 1652.738512][T27186] netlink: 'syz.2.7776': attribute type 39 has an invalid length. [ 1653.771669][T27207] netlink: 'syz.2.7781': attribute type 10 has an invalid length. [ 1654.050680][T27213] bond0: (slave dummy0): Error: Slave device does not support XDP [ 1654.237591][T27214] netlink: 'syz.5.7784': attribute type 10 has an invalid length. [ 1655.099431][T27223] netlink: 'syz.3.7788': attribute type 39 has an invalid length. [ 1655.199956][T27227] netlink: 'syz.0.7791': attribute type 39 has an invalid length. [ 1655.280817][T27230] FAULT_INJECTION: forcing a failure. [ 1655.280817][T27230] name failslab, interval 1, probability 0, space 0, times 0 [ 1655.347390][T27230] CPU: 0 PID: 27230 Comm: syz.5.7792 Not tainted syzkaller #0 [ 1655.354949][T27230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1655.365176][T27230] Call Trace: [ 1655.368500][T27230] [ 1655.371601][T27230] dump_stack_lvl+0x188/0x24e [ 1655.376347][T27230] ? show_regs_print_info+0x12/0x12 [ 1655.381604][T27230] ? load_image+0x410/0x410 [ 1655.386168][T27230] ? __lock_acquire+0x7c40/0x7c40 [ 1655.391357][T27230] should_fail_ex+0x390/0x4c0 [ 1655.396123][T27230] should_failslab+0x5/0x20 [ 1655.400689][T27230] slab_pre_alloc_hook+0x59/0x300 [ 1655.405952][T27230] ? bpf_prog_test_run_skb+0x23e/0x18e0 [ 1655.411574][T27230] __kmem_cache_alloc_node+0x4f/0x270 [ 1655.417098][T27230] ? bpf_prog_test_run_skb+0x23e/0x18e0 [ 1655.422731][T27230] __kmalloc+0xa3/0x240 [ 1655.426957][T27230] bpf_prog_test_run_skb+0x23e/0x18e0 [ 1655.432593][T27230] ? __fget_files+0x28/0x460 [ 1655.437246][T27230] ? __fget_files+0x3fc/0x460 [ 1655.442004][T27230] ? cpu_online+0xa0/0xa0 [ 1655.446391][T27230] bpf_prog_test_run+0x31c/0x390 [ 1655.451426][T27230] __sys_bpf+0x62b/0x780 [ 1655.455757][T27230] ? bpf_link_show_fdinfo+0x380/0x380 [ 1655.461228][T27230] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1655.467482][T27230] __x64_sys_bpf+0x78/0x90 [ 1655.471987][T27230] do_syscall_64+0x4c/0xa0 [ 1655.476451][T27230] ? clear_bhb_loop+0x60/0xb0 [ 1655.481266][T27230] ? clear_bhb_loop+0x60/0xb0 [ 1655.486042][T27230] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1655.492085][T27230] RIP: 0033:0x7f6a38f9e019 [ 1655.496549][T27230] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1655.516302][T27230] RSP: 002b:00007f6a39ef4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1655.525392][T27230] RAX: ffffffffffffffda RBX: 00007f6a39225fa0 RCX: 00007f6a38f9e019 [ 1655.533427][T27230] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 1655.541464][T27230] RBP: 00007f6a39ef4090 R08: 0000000000000000 R09: 0000000000000000 [ 1655.549835][T27230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1655.557869][T27230] R13: 00007f6a39226038 R14: 00007f6a39225fa0 R15: 00007ffdb3af4868 [ 1655.563126][T27236] FAULT_INJECTION: forcing a failure. [ 1655.563126][T27236] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1655.565885][T27230] [ 1655.620223][T27236] CPU: 1 PID: 27236 Comm: syz.3.7793 Not tainted syzkaller #0 [ 1655.627801][T27236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1655.637919][T27236] Call Trace: [ 1655.641278][T27236] [ 1655.644263][T27236] dump_stack_lvl+0x188/0x24e [ 1655.649016][T27236] ? show_regs_print_info+0x12/0x12 [ 1655.654293][T27236] ? load_image+0x410/0x410 [ 1655.658872][T27236] ? __lock_acquire+0x7c40/0x7c40 [ 1655.663989][T27236] should_fail_ex+0x390/0x4c0 [ 1655.668735][T27236] _copy_from_user+0x2c/0x170 [ 1655.673570][T27236] iovec_from_user+0x143/0x360 [ 1655.678418][T27236] __import_iovec+0x6c/0x510 [ 1655.683082][T27236] import_iovec+0x6f/0xa0 [ 1655.687483][T27236] ___sys_sendmsg+0x252/0x360 [ 1655.692284][T27236] ? __sys_sendmsg+0x2a0/0x2a0 [ 1655.697146][T27236] ? __lock_acquire+0x7c40/0x7c40 [ 1655.702286][T27236] __se_sys_sendmsg+0x1c3/0x2b0 [ 1655.707222][T27236] ? __x64_sys_sendmsg+0x80/0x80 [ 1655.712337][T27236] ? lockdep_hardirqs_on+0x94/0x140 [ 1655.717615][T27236] do_syscall_64+0x4c/0xa0 [ 1655.722100][T27236] ? clear_bhb_loop+0x60/0xb0 [ 1655.726847][T27236] ? clear_bhb_loop+0x60/0xb0 [ 1655.731592][T27236] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1655.737549][T27236] RIP: 0033:0x7fc2f5d9e019 [ 1655.742026][T27236] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1655.761794][T27236] RSP: 002b:00007fc2f6b7f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1655.770372][T27236] RAX: ffffffffffffffda RBX: 00007fc2f6026090 RCX: 00007fc2f5d9e019 [ 1655.778411][T27236] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 1655.786538][T27236] RBP: 00007fc2f6b7f090 R08: 0000000000000000 R09: 0000000000000000 [ 1655.794565][T27236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1655.802605][T27236] R13: 00007fc2f6026128 R14: 00007fc2f6026090 R15: 00007ffd161acce8 [ 1655.810648][T27236] [ 1657.104057][T27264] netlink: 'syz.0.7800': attribute type 10 has an invalid length. [ 1657.130388][T27259] netlink: 'syz.5.7799': attribute type 10 has an invalid length. [ 1657.179548][T27259] netlink: 2 bytes leftover after parsing attributes in process `syz.5.7799'. [ 1657.533825][T27269] netlink: 'syz.4.7803': attribute type 39 has an invalid length. [ 1657.619826][T27271] netlink: 'syz.5.7804': attribute type 39 has an invalid length. [ 1658.296191][T27285] netlink: 'syz.3.7807': attribute type 10 has an invalid length. [ 1659.624403][T27304] netlink: 'syz.3.7815': attribute type 39 has an invalid length. [ 1659.959519][T27317] netlink: 'syz.2.7818': attribute type 10 has an invalid length. [ 1660.969103][T27335] __sock_release: fasync list not empty! [ 1661.302588][T27343] bond0: (slave dummy0): Error: Slave device does not support XDP [ 1661.444422][T27350] netlink: 'syz.5.7826': attribute type 10 has an invalid length. [ 1661.937286][T27363] netlink: 'syz.0.7831': attribute type 39 has an invalid length. [ 1662.292101][T27370] FAULT_INJECTION: forcing a failure. [ 1662.292101][T27370] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1662.396033][T27370] CPU: 1 PID: 27370 Comm: syz.4.7834 Not tainted syzkaller #0 [ 1662.403599][T27370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1662.413796][T27370] Call Trace: [ 1662.417244][T27370] [ 1662.420225][T27370] dump_stack_lvl+0x188/0x24e [ 1662.425659][T27370] ? show_regs_print_info+0x12/0x12 [ 1662.431044][T27370] ? load_image+0x410/0x410 [ 1662.435794][T27370] ? __lock_acquire+0x7c40/0x7c40 [ 1662.440908][T27370] should_fail_ex+0x390/0x4c0 [ 1662.445651][T27370] _copy_from_user+0x2c/0x170 [ 1662.450512][T27370] iovec_from_user+0x143/0x360 [ 1662.455378][T27370] __import_iovec+0x6c/0x510 [ 1662.460217][T27370] import_iovec+0x6f/0xa0 [ 1662.464966][T27370] ___sys_sendmsg+0x252/0x360 [ 1662.469847][T27370] ? __sys_sendmsg+0x2a0/0x2a0 [ 1662.474698][T27370] ? __lock_acquire+0x7c40/0x7c40 [ 1662.479884][T27370] __se_sys_sendmsg+0x1c3/0x2b0 [ 1662.484904][T27370] ? __x64_sys_sendmsg+0x80/0x80 [ 1662.489924][T27370] ? lockdep_hardirqs_on+0x94/0x140 [ 1662.495183][T27370] do_syscall_64+0x4c/0xa0 [ 1662.499706][T27370] ? clear_bhb_loop+0x60/0xb0 [ 1662.504479][T27370] ? clear_bhb_loop+0x60/0xb0 [ 1662.509309][T27370] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1662.515456][T27370] RIP: 0033:0x7f1d8639e019 [ 1662.519928][T27370] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1662.539676][T27370] RSP: 002b:00007f1d87359028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1662.548179][T27370] RAX: ffffffffffffffda RBX: 00007f1d86625fa0 RCX: 00007f1d8639e019 [ 1662.556209][T27370] RDX: 0000000004050003 RSI: 0000200000000080 RDI: 0000000000000003 [ 1662.564338][T27370] RBP: 00007f1d87359090 R08: 0000000000000000 R09: 0000000000000000 [ 1662.572368][T27370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1662.580395][T27370] R13: 00007f1d86626038 R14: 00007f1d86625fa0 R15: 00007ffe3c4bf598 [ 1662.588443][T27370] [ 1663.247001][T27380] __sock_release: fasync list not empty! [ 1663.995580][T27391] netlink: 'syz.3.7843': attribute type 10 has an invalid length. [ 1664.565242][T27410] netlink: 'syz.3.7847': attribute type 39 has an invalid length. [ 1665.090415][T27431] __sock_release: fasync list not empty! [ 1665.903771][T27445] bond0: (slave dummy0): Error: Slave device does not support XDP [ 1665.986696][T27449] netlink: 'syz.2.7857': attribute type 10 has an invalid length. [ 1666.538725][T27463] netlink: 'syz.3.7863': attribute type 39 has an invalid length. [ 1667.441773][T27481] netlink: 'syz.2.7869': attribute type 10 has an invalid length. [ 1667.594672][T27474] __sock_release: fasync list not empty! [ 1668.256204][T27497] __sock_release: fasync list not empty! [ 1668.870805][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.877260][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1671.472203][T27526] netlink: 'syz.5.7881': attribute type 10 has an invalid length. [ 1671.745213][T27526] team0: Device wg1 is of different type [ 1671.850903][T27531] netlink: 'syz.0.7884': attribute type 39 has an invalid length. [ 1672.369292][T27544] __sock_release: fasync list not empty! [ 1673.443667][T27570] netlink: 'syz.4.7895': attribute type 10 has an invalid length. [ 1674.034792][T27584] netlink: 'syz.3.7901': attribute type 39 has an invalid length. [ 1675.717037][T27590] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7902'. [ 1676.113109][T27605] __sock_release: fasync list not empty! [ 1676.961562][T27625] FAULT_INJECTION: forcing a failure. [ 1676.961562][T27625] name failslab, interval 1, probability 0, space 0, times 0 [ 1677.025686][T27625] CPU: 0 PID: 27625 Comm: syz.0.7912 Not tainted syzkaller #0 [ 1677.033247][T27625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1677.043365][T27625] Call Trace: [ 1677.046696][T27625] [ 1677.049679][T27625] dump_stack_lvl+0x188/0x24e [ 1677.054569][T27625] ? show_regs_print_info+0x12/0x12 [ 1677.059924][T27625] ? load_image+0x410/0x410 [ 1677.064506][T27625] ? __lock_acquire+0x7c40/0x7c40 [ 1677.069703][T27625] should_fail_ex+0x390/0x4c0 [ 1677.074468][T27625] should_failslab+0x5/0x20 [ 1677.079055][T27625] slab_pre_alloc_hook+0x59/0x300 [ 1677.084128][T27625] ? verify_lock_unused+0x140/0x140 [ 1677.089491][T27625] ? bpf_test_init+0x9f/0x140 [ 1677.094200][T27625] __kmem_cache_alloc_node+0x4f/0x270 [ 1677.099611][T27625] ? bpf_test_init+0x9f/0x140 [ 1677.104321][T27625] __kmalloc+0xa3/0x240 [ 1677.108519][T27625] bpf_test_init+0x9f/0x140 [ 1677.113063][T27625] bpf_prog_test_run_xdp+0x488/0xf80 [ 1677.118388][T27625] ? __lock_acquire+0x7c40/0x7c40 [ 1677.123462][T27625] ? dev_put+0x80/0x80 [ 1677.127569][T27625] ? dev_put+0x80/0x80 [ 1677.131680][T27625] bpf_prog_test_run+0x31c/0x390 [ 1677.136661][T27625] __sys_bpf+0x62b/0x780 [ 1677.140939][T27625] ? bpf_link_show_fdinfo+0x380/0x380 [ 1677.146381][T27625] ? lock_chain_count+0x20/0x20 [ 1677.151274][T27625] __x64_sys_bpf+0x78/0x90 [ 1677.155732][T27625] do_syscall_64+0x4c/0xa0 [ 1677.160184][T27625] ? clear_bhb_loop+0x60/0xb0 [ 1677.164978][T27625] ? clear_bhb_loop+0x60/0xb0 [ 1677.169806][T27625] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1677.175763][T27625] RIP: 0033:0x7f7fb1b9e019 [ 1677.180208][T27625] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1677.199938][T27625] RSP: 002b:00007f7fb2ac9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1677.208387][T27625] RAX: ffffffffffffffda RBX: 00007f7fb1e25fa0 RCX: 00007f7fb1b9e019 [ 1677.216474][T27625] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1677.224478][T27625] RBP: 00007f7fb2ac9090 R08: 0000000000000000 R09: 0000000000000000 [ 1677.232478][T27625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1677.240499][T27625] R13: 00007f7fb1e26038 R14: 00007f7fb1e25fa0 R15: 00007ffc9ab869f8 [ 1677.248512][T27625] [ 1678.107684][T27637] netlink: 'syz.4.7916': attribute type 39 has an invalid length. [ 1680.059953][T27655] FAULT_INJECTION: forcing a failure. [ 1680.059953][T27655] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1680.136601][T27655] CPU: 0 PID: 27655 Comm: syz.5.7920 Not tainted syzkaller #0 [ 1680.144225][T27655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1680.154450][T27655] Call Trace: [ 1680.157806][T27655] [ 1680.160800][T27655] dump_stack_lvl+0x188/0x24e [ 1680.165978][T27655] ? show_regs_print_info+0x12/0x12 [ 1680.171456][T27655] ? load_image+0x410/0x410 [ 1680.176054][T27655] ? __lock_acquire+0x7c40/0x7c40 [ 1680.181239][T27655] should_fail_ex+0x390/0x4c0 [ 1680.186151][T27655] _copy_from_user+0x2c/0x170 [ 1680.190917][T27655] __sys_bpf+0x2ea/0x780 [ 1680.195267][T27655] ? bpf_link_show_fdinfo+0x380/0x380 [ 1680.200968][T27655] ? lock_chain_count+0x20/0x20 [ 1680.206052][T27655] __x64_sys_bpf+0x78/0x90 [ 1680.210582][T27655] do_syscall_64+0x4c/0xa0 [ 1680.215426][T27655] ? clear_bhb_loop+0x60/0xb0 [ 1680.220459][T27655] ? clear_bhb_loop+0x60/0xb0 [ 1680.225237][T27655] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1680.231433][T27655] RIP: 0033:0x7f6a38f9e019 [ 1680.235923][T27655] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1680.255884][T27655] RSP: 002b:00007f6a39ef4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1680.264398][T27655] RAX: ffffffffffffffda RBX: 00007f6a39225fa0 RCX: 00007f6a38f9e019 [ 1680.272447][T27655] RDX: 0000000000000010 RSI: 0000200000001d00 RDI: 000000000000000f [ 1680.280507][T27655] RBP: 00007f6a39ef4090 R08: 0000000000000000 R09: 0000000000000000 [ 1680.288571][T27655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1680.296795][T27655] R13: 00007f6a39226038 R14: 00007f6a39225fa0 R15: 00007ffdb3af4868 [ 1680.304896][T27655] [ 1682.715528][T27672] __sock_release: fasync list not empty! [ 1682.742032][T27679] FAULT_INJECTION: forcing a failure. [ 1682.742032][T27679] name failslab, interval 1, probability 0, space 0, times 0 [ 1682.765348][T27679] CPU: 1 PID: 27679 Comm: syz.2.7928 Not tainted syzkaller #0 [ 1682.772908][T27679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1682.783266][T27679] Call Trace: [ 1682.786953][T27679] [ 1682.789943][T27679] dump_stack_lvl+0x188/0x24e [ 1682.794715][T27679] ? show_regs_print_info+0x12/0x12 [ 1682.800058][T27679] ? load_image+0x410/0x410 [ 1682.804695][T27679] ? __lock_acquire+0x7c40/0x7c40 [ 1682.809813][T27679] should_fail_ex+0x390/0x4c0 [ 1682.815006][T27679] should_failslab+0x5/0x20 [ 1682.819571][T27679] slab_pre_alloc_hook+0x59/0x300 [ 1682.824654][T27679] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1682.830799][T27679] kmem_cache_alloc_node+0x5a/0x310 [ 1682.836057][T27679] ? alloc_vmap_area+0x18e/0x18d0 [ 1682.841189][T27679] alloc_vmap_area+0x18e/0x18d0 [ 1682.846104][T27679] ? vm_map_ram+0xab0/0xab0 [ 1682.851017][T27679] ? rcu_is_watching+0x11/0xa0 [ 1682.855854][T27679] __get_vm_area_node+0x158/0x330 [ 1682.860945][T27679] ? __local_bh_enable_ip+0x136/0x1c0 [ 1682.866488][T27679] __vmalloc_node_range+0x357/0x1380 [ 1682.871840][T27679] ? netlink_sendmsg+0x5ec/0xbd0 [ 1682.876875][T27679] ? netlink_insert+0x28d/0x13b0 [ 1682.882074][T27679] ? free_vm_area+0x50/0x50 [ 1682.886655][T27679] ? netlink_sendmsg+0x5ec/0xbd0 [ 1682.891669][T27679] vmalloc+0x75/0x80 [ 1682.895619][T27679] ? netlink_sendmsg+0x5ec/0xbd0 [ 1682.900672][T27679] netlink_sendmsg+0x5ec/0xbd0 [ 1682.905731][T27679] ? netlink_getsockopt+0x550/0x550 [ 1682.911050][T27679] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1682.916755][T27679] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1682.922195][T27679] ? security_socket_sendmsg+0x7c/0xa0 [ 1682.927761][T27679] sock_write_iter+0x2d5/0x3e0 [ 1682.932763][T27679] ? sock_read_iter+0x3a0/0x3a0 [ 1682.937905][T27679] ? common_file_perm+0x171/0x1c0 [ 1682.943019][T27679] vfs_write+0x482/0x9a0 [ 1682.947330][T27679] ? file_end_write+0x250/0x250 [ 1682.952248][T27679] ? __fget_files+0x3fc/0x460 [ 1682.957005][T27679] ? __fdget_pos+0x1d4/0x360 [ 1682.961656][T27679] ? ksys_write+0x70/0x260 [ 1682.966145][T27679] ksys_write+0x14d/0x260 [ 1682.970563][T27679] ? __ia32_sys_read+0x80/0x80 [ 1682.975396][T27679] ? lockdep_hardirqs_on+0x94/0x140 [ 1682.980661][T27679] do_syscall_64+0x4c/0xa0 [ 1682.985147][T27679] ? clear_bhb_loop+0x60/0xb0 [ 1682.986986][T27682] netlink: 'syz.4.7929': attribute type 39 has an invalid length. [ 1682.989912][T27679] ? clear_bhb_loop+0x60/0xb0 [ 1683.002490][T27679] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1683.008445][T27679] RIP: 0033:0x7f924119e019 [ 1683.012921][T27679] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1683.032883][T27679] RSP: 002b:00007f92420c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1683.041361][T27679] RAX: ffffffffffffffda RBX: 00007f9241426090 RCX: 00007f924119e019 [ 1683.049421][T27679] RDX: 000000000000fe33 RSI: 0000200000000000 RDI: 0000000000000005 [ 1683.057539][T27679] RBP: 00007f92420c6090 R08: 0000000000000000 R09: 0000000000000000 [ 1683.065570][T27679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1683.073620][T27679] R13: 00007f9241426128 R14: 00007f9241426090 R15: 00007ffc67191848 [ 1683.081664][T27679] [ 1683.678666][T27679] syz.2.7928: vmalloc error: size 65408, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 1683.707976][T27679] CPU: 0 PID: 27679 Comm: syz.2.7928 Not tainted syzkaller #0 [ 1683.715543][T27679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1683.726086][T27679] Call Trace: [ 1683.729452][T27679] [ 1683.732436][T27679] dump_stack_lvl+0x188/0x24e [ 1683.737184][T27679] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 1683.743666][T27679] ? show_regs_print_info+0x12/0x12 [ 1683.748942][T27679] ? load_image+0x410/0x410 [ 1683.751274][T27694] __sock_release: fasync list not empty! [ 1683.753490][T27679] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 1683.753524][T27679] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 1683.753553][T27679] warn_alloc+0x242/0x330 [ 1683.753589][T27679] ? slab_free_freelist_hook+0x133/0x1b0 [ 1683.753622][T27679] ? zone_watermark_ok_safe+0x270/0x270 [ 1683.753653][T27679] ? __get_vm_area_node+0x16d/0x330 [ 1683.753689][T27679] ? __get_vm_area_node+0x16d/0x330 [ 1683.753717][T27679] ? __local_bh_enable_ip+0x136/0x1c0 [ 1683.753749][T27679] __vmalloc_node_range+0x37c/0x1380 [ 1683.753795][T27679] ? netlink_insert+0x28d/0x13b0 [ 1683.814504][T27679] ? free_vm_area+0x50/0x50 [ 1683.819243][T27679] ? netlink_sendmsg+0x5ec/0xbd0 [ 1683.824262][T27679] vmalloc+0x75/0x80 [ 1683.828331][T27679] ? netlink_sendmsg+0x5ec/0xbd0 [ 1683.833375][T27679] netlink_sendmsg+0x5ec/0xbd0 [ 1683.838281][T27679] ? netlink_getsockopt+0x550/0x550 [ 1683.843520][T27679] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1683.849211][T27679] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1683.854553][T27679] ? security_socket_sendmsg+0x7c/0xa0 [ 1683.860148][T27679] sock_write_iter+0x2d5/0x3e0 [ 1683.864953][T27679] ? sock_read_iter+0x3a0/0x3a0 [ 1683.869842][T27679] ? common_file_perm+0x171/0x1c0 [ 1683.874915][T27679] vfs_write+0x482/0x9a0 [ 1683.879204][T27679] ? file_end_write+0x250/0x250 [ 1683.884099][T27679] ? __fget_files+0x3fc/0x460 [ 1683.888847][T27679] ? __fdget_pos+0x1d4/0x360 [ 1683.893486][T27679] ? ksys_write+0x70/0x260 [ 1683.897981][T27679] ksys_write+0x14d/0x260 [ 1683.902387][T27679] ? __ia32_sys_read+0x80/0x80 [ 1683.907209][T27679] ? lockdep_hardirqs_on+0x94/0x140 [ 1683.912451][T27679] do_syscall_64+0x4c/0xa0 [ 1683.916911][T27679] ? clear_bhb_loop+0x60/0xb0 [ 1683.921841][T27679] ? clear_bhb_loop+0x60/0xb0 [ 1683.926649][T27679] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1683.932579][T27679] RIP: 0033:0x7f924119e019 [ 1683.937042][T27679] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1683.956685][T27679] RSP: 002b:00007f92420c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1683.965139][T27679] RAX: ffffffffffffffda RBX: 00007f9241426090 RCX: 00007f924119e019 [ 1683.973142][T27679] RDX: 000000000000fe33 RSI: 0000200000000000 RDI: 0000000000000005 [ 1683.981168][T27679] RBP: 00007f92420c6090 R08: 0000000000000000 R09: 0000000000000000 [ 1683.989173][T27679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1683.997179][T27679] R13: 00007f9241426128 R14: 00007f9241426090 R15: 00007ffc67191848 [ 1684.005195][T27679] [ 1684.226146][T27679] Mem-Info: [ 1684.229498][T27679] active_anon:21116 inactive_anon:0 isolated_anon:0 [ 1684.229498][T27679] active_file:24504 inactive_file:40586 isolated_file:0 [ 1684.229498][T27679] unevictable:768 dirty:441 writeback:0 [ 1684.229498][T27679] slab_reclaimable:21781 slab_unreclaimable:97200 [ 1684.229498][T27679] mapped:39133 shmem:11890 pagetables:787 [ 1684.229498][T27679] sec_pagetables:0 bounce:0 [ 1684.229498][T27679] kernel_misc_reclaimable:0 [ 1684.229498][T27679] free:1296997 free_pcp:8760 free_cma:0 [ 1684.439609][T27679] Node 0 active_anon:88964kB inactive_anon:0kB active_file:98016kB inactive_file:162144kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:157932kB dirty:1764kB writeback:0kB shmem:50424kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10404kB pagetables:3148kB sec_pagetables:0kB all_unreclaimable? no [ 1684.492151][T27697] __sock_release: fasync list not empty! [ 1684.626069][T27679] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1684.819830][T27679] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1685.014815][T27679] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 1685.032220][T27679] Node 0 DMA32 free:1271328kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:98452kB inactive_anon:0kB active_file:98016kB inactive_file:162152kB unevictable:1536kB writepending:1772kB present:3129332kB managed:2592912kB mlocked:0kB bounce:0kB free_pcp:7948kB local_pcp:5620kB free_cma:0kB [ 1685.117298][T27679] lowmem_reserve[]: 0 0 1 1 1 [ 1685.130960][T27679] Node 0 Normal free:20kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:12kB free_cma:0kB [ 1685.239839][T27679] lowmem_reserve[]: 0 0 0 0 0 [ 1685.244750][T27679] Node 1 Normal free:3891828kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:22628kB local_pcp:10852kB free_cma:0kB [ 1685.366026][T27679] lowmem_reserve[]: 0 0 0 0 0 [ 1685.371076][T27679] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1685.445967][T27679] Node 0 DMA32: 806*4kB (UME) 562*8kB (UE) 408*16kB (UME) 2685*32kB (UME) 1717*64kB (UME) 568*128kB (UME) 154*256kB (UME) 85*512kB (UME) 50*1024kB (UME) 12*2048kB (UME) 201*4096kB (UM) = 1264776kB [ 1685.516390][T27679] Node 0 Normal: 1*4kB (U) 0*8kB 1*16kB (U) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 1685.559638][T27679] Node 1 Normal: 279*4kB (U) 53*8kB (UE) 35*16kB (UME) 36*32kB (UME) 23*64kB (UME) 10*128kB (UME) 3*256kB (UM) 2*512kB (ME) 1*1024kB (U) 2*2048kB (UE) 947*4096kB (M) = 3891828kB [ 1685.643739][T27679] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1685.680049][T27679] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1685.712895][T27679] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1685.741796][T27679] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1685.787687][T27679] 83750 total pagecache pages [ 1685.806022][T27679] 0 pages in swap cache [ 1685.810520][T27679] Free swap = 124728kB [ 1685.830227][T27679] Total swap = 124996kB [ 1685.841977][T27728] netlink: 'syz.0.7943': attribute type 39 has an invalid length. [ 1685.866047][T27679] 2097051 pages RAM [ 1685.880476][T27679] 0 pages HighMem/MovableOnly [ 1685.885370][T27679] 415222 pages reserved [ 1685.911891][T27679] 0 pages cma reserved [ 1686.142238][T27727] __sock_release: fasync list not empty! [ 1686.988287][T27746] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.7946'. [ 1687.187859][T27747] __sock_release: fasync list not empty! [ 1687.887470][T27759] netlink: 'syz.3.7950': attribute type 10 has an invalid length. [ 1689.308970][T27776] netlink: 'syz.4.7958': attribute type 39 has an invalid length. [ 1689.635640][T27778] __sock_release: fasync list not empty! [ 1690.062700][T27786] __sock_release: fasync list not empty! [ 1690.107681][T27794] netlink: 'syz.2.7963': attribute type 39 has an invalid length. [ 1690.604283][T27797] __sock_release: fasync list not empty! [ 1691.579219][T27819] netlink: 'syz.5.7972': attribute type 39 has an invalid length. [ 1692.361446][T27826] netlink: 'syz.4.7975': attribute type 10 has an invalid length. [ 1692.469686][T27826] bridge0: port 1(bridge_slave_0) entered disabled state [ 1692.570241][T27826] bridge0: port 1(bridge_slave_0) entered blocking state [ 1692.579046][T27826] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1692.809101][T27826] team0: Port device bridge0 added [ 1692.872749][T27827] bond0: (slave wlan1): Error: Slave device does not support XDP [ 1693.000394][T27828] netlink: 'syz.0.7974': attribute type 10 has an invalid length. [ 1693.009805][T27837] __sock_release: fasync list not empty! [ 1693.308616][T27845] FAULT_INJECTION: forcing a failure. [ 1693.308616][T27845] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1693.376196][T27845] CPU: 0 PID: 27845 Comm: syz.3.7979 Not tainted syzkaller #0 [ 1693.383894][T27845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1693.394038][T27845] Call Trace: [ 1693.397372][T27845] [ 1693.400361][T27845] dump_stack_lvl+0x188/0x24e [ 1693.405163][T27845] ? show_regs_print_info+0x12/0x12 [ 1693.410448][T27845] ? load_image+0x410/0x410 [ 1693.415065][T27845] ? __lock_acquire+0x7c40/0x7c40 [ 1693.420212][T27845] ? __kasan_slab_alloc+0x6b/0x80 [ 1693.425307][T27845] should_fail_ex+0x390/0x4c0 [ 1693.430141][T27845] strncpy_from_user+0x32/0x340 [ 1693.435094][T27845] getname_flags+0xf2/0x500 [ 1693.439688][T27845] ? syscall_enter_from_user_mode+0x21/0x80 [ 1693.445733][T27845] __x64_sys_unlink+0x38/0x50 [ 1693.450496][T27845] do_syscall_64+0x4c/0xa0 [ 1693.454995][T27845] ? clear_bhb_loop+0x60/0xb0 [ 1693.459732][T27845] ? clear_bhb_loop+0x60/0xb0 [ 1693.464462][T27845] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1693.470583][T27845] RIP: 0033:0x7fc2f5d9e019 [ 1693.475036][T27845] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1693.494806][T27845] RSP: 002b:00007fc2f6ba0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 1693.503306][T27845] RAX: ffffffffffffffda RBX: 00007fc2f6025fa0 RCX: 00007fc2f5d9e019 [ 1693.511583][T27845] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000200 [ 1693.519617][T27845] RBP: 00007fc2f6ba0090 R08: 0000000000000000 R09: 0000000000000000 [ 1693.527716][T27845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1693.535896][T27845] R13: 00007fc2f6026038 R14: 00007fc2f6025fa0 R15: 00007ffd161acce8 [ 1693.543935][T27845] [ 1694.192041][T27853] __sock_release: fasync list not empty! [ 1694.545475][T27872] netlink: 76 bytes leftover after parsing attributes in process `syz.5.7991'. [ 1694.613857][T27870] netlink: 'syz.4.7989': attribute type 10 has an invalid length. [ 1694.647589][T27872] netlink: 132 bytes leftover after parsing attributes in process `syz.5.7991'. [ 1694.717755][T27872] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1694.748569][T27872] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1694.789288][T27872] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1694.833872][T27872] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1694.851890][T27874] __sock_release: fasync list not empty! [ 1695.278485][T27885] FAULT_INJECTION: forcing a failure. [ 1695.278485][T27885] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1695.287973][T27883] __sock_release: fasync list not empty! [ 1695.302119][T27885] CPU: 1 PID: 27885 Comm: syz.3.7994 Not tainted syzkaller #0 [ 1695.309710][T27885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1695.319812][T27885] Call Trace: [ 1695.323142][T27885] [ 1695.326167][T27885] dump_stack_lvl+0x188/0x24e [ 1695.330914][T27885] ? show_regs_print_info+0x12/0x12 [ 1695.336173][T27885] ? load_image+0x410/0x410 [ 1695.340729][T27885] ? __lock_acquire+0x7c40/0x7c40 [ 1695.345824][T27885] should_fail_ex+0x390/0x4c0 [ 1695.350697][T27885] _copy_from_user+0x2c/0x170 [ 1695.355606][T27885] iovec_from_user+0x143/0x360 [ 1695.360616][T27885] __import_iovec+0x6c/0x510 [ 1695.365273][T27885] import_iovec+0x6f/0xa0 [ 1695.369787][T27885] ___sys_sendmsg+0x252/0x360 [ 1695.374542][T27885] ? __sys_sendmsg+0x2a0/0x2a0 [ 1695.379408][T27885] ? __lock_acquire+0x7c40/0x7c40 [ 1695.384516][T27885] __se_sys_sendmsg+0x1c3/0x2b0 [ 1695.389517][T27885] ? ct_nmi_exit+0x145/0x1c0 [ 1695.394250][T27885] ? __x64_sys_sendmsg+0x80/0x80 [ 1695.399255][T27885] ? lockdep_hardirqs_on+0x94/0x140 [ 1695.404605][T27885] do_syscall_64+0x4c/0xa0 [ 1695.409173][T27885] ? clear_bhb_loop+0x60/0xb0 [ 1695.413934][T27885] ? clear_bhb_loop+0x60/0xb0 [ 1695.418671][T27885] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1695.424637][T27885] RIP: 0033:0x7fc2f5d9e019 [ 1695.429627][T27885] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1695.449289][T27885] RSP: 002b:00007fc2f6ba0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1695.458193][T27885] RAX: ffffffffffffffda RBX: 00007fc2f6025fa0 RCX: 00007fc2f5d9e019 [ 1695.466219][T27885] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000009 [ 1695.474234][T27885] RBP: 00007fc2f6ba0090 R08: 0000000000000000 R09: 0000000000000000 [ 1695.482431][T27885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1695.490455][T27885] R13: 00007fc2f6026038 R14: 00007fc2f6025fa0 R15: 00007ffd161acce8 [ 1695.498671][T27885] [ 1696.493284][T27912] netlink: 'syz.0.8003': attribute type 41 has an invalid length. [ 1697.965664][T27950] netlink: 'syz.2.8014': attribute type 29 has an invalid length. [ 1698.013182][T27950] netlink: 'syz.2.8014': attribute type 29 has an invalid length. [ 1698.102631][T27950] netlink: 'syz.2.8014': attribute type 29 has an invalid length. [ 1698.331605][T27957] device syzkaller0 entered promiscuous mode [ 1701.593592][T27991] netlink: 'syz.4.8023': attribute type 41 has an invalid length. [ 1702.495411][T28015] device syzkaller0 entered promiscuous mode [ 1702.594976][T28015] FAULT_INJECTION: forcing a failure. [ 1702.594976][T28015] name failslab, interval 1, probability 0, space 0, times 0 [ 1702.660490][T28020] FAULT_INJECTION: forcing a failure. [ 1702.660490][T28020] name failslab, interval 1, probability 0, space 0, times 0 [ 1702.675995][T28015] CPU: 1 PID: 28015 Comm: syz.2.8032 Not tainted syzkaller #0 [ 1702.683543][T28015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1702.693746][T28015] Call Trace: [ 1702.697245][T28015] [ 1702.700225][T28015] dump_stack_lvl+0x188/0x24e [ 1702.704997][T28015] ? show_regs_print_info+0x12/0x12 [ 1702.710274][T28015] ? load_image+0x410/0x410 [ 1702.714962][T28015] ? __might_sleep+0xd0/0xd0 [ 1702.719619][T28015] ? __lock_acquire+0x7c40/0x7c40 [ 1702.724801][T28015] ? perf_trace_lock_acquire+0x101/0x3f0 [ 1702.730510][T28015] should_fail_ex+0x390/0x4c0 [ 1702.735426][T28015] should_failslab+0x5/0x20 [ 1702.739968][T28015] slab_pre_alloc_hook+0x59/0x300 [ 1702.745035][T28015] kmem_cache_alloc_node+0x5a/0x310 [ 1702.750304][T28015] ? __alloc_skb+0xf9/0x7d0 [ 1702.754872][T28015] __alloc_skb+0xf9/0x7d0 [ 1702.759251][T28015] alloc_skb_with_frags+0xa7/0x710 [ 1702.764402][T28015] ? __might_fault+0xa6/0x120 [ 1702.769131][T28015] ? __lock_acquire+0x7c40/0x7c40 [ 1702.774221][T28015] sock_alloc_send_pskb+0x87f/0x9a0 [ 1702.779516][T28015] ? sock_kzfree_s+0x50/0x50 [ 1702.784155][T28015] ? iov_iter_advance+0x84/0x1a0 [ 1702.789261][T28015] tun_get_user+0x800/0x3c20 [ 1702.793900][T28015] ? rcu_read_unlock+0xa0/0xa0 [ 1702.798715][T28015] ? tun_get+0x1c/0x2e0 [ 1702.802941][T28015] ? __lock_acquire+0x7c40/0x7c40 [ 1702.808003][T28015] ? tun_get+0x1c/0x2e0 [ 1702.812473][T28015] tun_chr_write_iter+0x112/0x1f0 [ 1702.817806][T28015] vfs_write+0x482/0x9a0 [ 1702.822096][T28015] ? file_end_write+0x250/0x250 [ 1702.826987][T28015] ? __fget_files+0x3fc/0x460 [ 1702.831810][T28015] ? __fdget_pos+0x1d4/0x360 [ 1702.836722][T28015] ? ksys_write+0x70/0x260 [ 1702.841196][T28015] ksys_write+0x14d/0x260 [ 1702.845567][T28015] ? __ia32_sys_read+0x80/0x80 [ 1702.850401][T28015] ? lockdep_hardirqs_on+0x94/0x140 [ 1702.855722][T28015] do_syscall_64+0x4c/0xa0 [ 1702.860180][T28015] ? clear_bhb_loop+0x60/0xb0 [ 1702.864908][T28015] ? clear_bhb_loop+0x60/0xb0 [ 1702.869756][T28015] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1702.875962][T28015] RIP: 0033:0x7f924119e019 [ 1702.880504][T28015] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1702.900369][T28015] RSP: 002b:00007f92420e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1702.908856][T28015] RAX: ffffffffffffffda RBX: 00007f9241425fa0 RCX: 00007f924119e019 [ 1702.916882][T28015] RDX: 000000000000ffdd RSI: 0000200000000280 RDI: 0000000000000006 [ 1702.925004][T28015] RBP: 00007f92420e7090 R08: 0000000000000000 R09: 0000000000000000 [ 1702.933126][T28015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1702.941148][T28015] R13: 00007f9241426038 R14: 00007f9241425fa0 R15: 00007ffc67191848 [ 1702.949183][T28015] [ 1702.971001][T28020] CPU: 1 PID: 28020 Comm: syz.4.8034 Not tainted syzkaller #0 [ 1702.978570][T28020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1702.988687][T28020] Call Trace: [ 1702.992039][T28020] [ 1702.995008][T28020] dump_stack_lvl+0x188/0x24e [ 1702.999745][T28020] ? show_regs_print_info+0x12/0x12 [ 1703.005013][T28020] ? load_image+0x410/0x410 [ 1703.009587][T28020] ? __lock_acquire+0x7c40/0x7c40 [ 1703.014719][T28020] should_fail_ex+0x390/0x4c0 [ 1703.019661][T28020] should_failslab+0x5/0x20 [ 1703.024234][T28020] slab_pre_alloc_hook+0x59/0x300 [ 1703.029322][T28020] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 1703.035980][T28020] ? bpf_test_init+0x9f/0x140 [ 1703.040761][T28020] __kmem_cache_alloc_node+0x4f/0x270 [ 1703.046225][T28020] ? bpf_test_init+0x9f/0x140 [ 1703.051428][T28020] __kmalloc+0xa3/0x240 [ 1703.056272][T28020] bpf_test_init+0x9f/0x140 [ 1703.060935][T28020] bpf_prog_test_run_xdp+0x488/0xf80 [ 1703.066288][T28020] ? __lock_acquire+0x7c40/0x7c40 [ 1703.071392][T28020] ? dev_put+0x80/0x80 [ 1703.075537][T28020] ? dev_put+0x80/0x80 [ 1703.079668][T28020] bpf_prog_test_run+0x31c/0x390 [ 1703.084688][T28020] __sys_bpf+0x62b/0x780 [ 1703.089022][T28020] ? bpf_link_show_fdinfo+0x380/0x380 [ 1703.094485][T28020] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1703.100816][T28020] __x64_sys_bpf+0x78/0x90 [ 1703.105305][T28020] do_syscall_64+0x4c/0xa0 [ 1703.109819][T28020] ? clear_bhb_loop+0x60/0xb0 [ 1703.114566][T28020] ? clear_bhb_loop+0x60/0xb0 [ 1703.119323][T28020] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1703.125317][T28020] RIP: 0033:0x7f1d8639e019 [ 1703.129790][T28020] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1703.149815][T28020] RSP: 002b:00007f1d87359028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1703.158642][T28020] RAX: ffffffffffffffda RBX: 00007f1d86625fa0 RCX: 00007f1d8639e019 [ 1703.166949][T28020] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1703.174977][T28020] RBP: 00007f1d87359090 R08: 0000000000000000 R09: 0000000000000000 [ 1703.183213][T28020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1703.191428][T28020] R13: 00007f1d86626038 R14: 00007f1d86625fa0 R15: 00007ffe3c4bf598 [ 1703.199676][T28020] [ 1706.064537][T28021] bond0: (slave wlan1): Error: Slave device does not support XDP [ 1706.074666][T28022] netlink: 'syz.0.8033': attribute type 10 has an invalid length. [ 1706.319927][T28043] netlink: 'syz.5.8039': attribute type 39 has an invalid length. [ 1706.519688][T28045] __sock_release: fasync list not empty! [ 1706.724989][T28055] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.8043'. [ 1706.979283][T28065] netlink: 'syz.4.8045': attribute type 10 has an invalid length. [ 1707.098482][T28068] netlink: 172 bytes leftover after parsing attributes in process `syz.2.8046'. [ 1708.246536][T28080] ------------[ cut here ]------------ [ 1708.252098][T28080] WARNING: CPU: 1 PID: 28080 at kernel/events/core.c:6592 perf_pending_task+0x353/0x480 [ 1708.262057][T28080] Modules linked in: [ 1708.266107][T28080] CPU: 1 PID: 28080 Comm: syz.5.8049 Not tainted syzkaller #0 [ 1708.273625][T28080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1708.283793][T28080] RIP: 0010:perf_pending_task+0x353/0x480 [ 1708.289754][T28080] Code: e8 d2 82 da ff 84 db 75 10 e8 69 80 da ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 59 80 da ff e8 ac d5 58 ff eb e9 e8 4d 80 da ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 43 80 3c 2f 00 0f 85 0a ff ff [ 1708.309487][T28080] RSP: 0018:ffffc9000f0078e8 EFLAGS: 00010293 [ 1708.315618][T28080] RAX: ffffffff81a7add3 RBX: ffff888076e38a58 RCX: ffff88805c96bc00 [ 1708.323870][T28080] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1708.332014][T28080] RBP: ffff888076e38820 R08: ffff88805c96c603 R09: 1ffff1100b92d8c0 [ 1708.340099][T28080] R10: dffffc0000000000 R11: ffffed100b92d8c1 R12: ffff88805c96bc00 [ 1708.348483][T28080] R13: ffff888055532960 R14: 0000000000000000 R15: 1ffff1100edc7104 [ 1708.356633][T28080] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1708.365634][T28080] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1708.372350][T28080] CR2: 00007f6a39ef3ff8 CR3: 00000000711b3000 CR4: 00000000003506e0 [ 1708.380540][T28080] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1708.389043][T28080] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1708.397113][T28080] Call Trace: [ 1708.400438][T28080] [ 1708.403418][T28080] task_work_run+0x1d0/0x260 [ 1708.408324][T28080] ? task_work_cancel+0x220/0x220 [ 1708.413779][T28080] ? do_raw_spin_unlock+0x11d/0x230 [ 1708.419098][T28080] do_exit+0x9d5/0x2570 [ 1708.423449][T28080] ? cgroup_freezing+0x1c/0x340 [ 1708.428506][T28080] ? put_task_struct+0x80/0x80 [ 1708.433342][T28080] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1708.439454][T28080] ? lock_chain_count+0x20/0x20 [ 1708.444687][T28080] do_group_exit+0x229/0x2e0 [ 1708.449442][T28080] ? lockdep_hardirqs_on+0x94/0x140 [ 1708.454713][T28080] get_signal+0x1259/0x1340 [ 1708.459519][T28080] arch_do_signal_or_restart+0xc4/0x1310 [ 1708.465363][T28080] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1708.472092][T28080] ? get_sigframe_size+0x10/0x10 [ 1708.477249][T28080] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1708.483475][T28080] ? exit_to_user_mode_loop+0x3b/0x110 [ 1708.489084][T28080] exit_to_user_mode_loop+0x70/0x110 [ 1708.494453][T28080] exit_to_user_mode_prepare+0xee/0x180 [ 1708.500124][T28080] syscall_exit_to_user_mode+0x16/0x40 [ 1708.505644][T28080] do_syscall_64+0x58/0xa0 [ 1708.510200][T28080] ? clear_bhb_loop+0x60/0xb0 [ 1708.514943][T28080] ? clear_bhb_loop+0x60/0xb0 [ 1708.519747][T28080] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1708.525792][T28080] RIP: 0033:0x7f6a38f9e019 [ 1708.530361][T28080] Code: Unable to access opcode bytes at 0x7f6a38f9dfef. [ 1708.537557][T28080] RSP: 002b:00007f6a39ef40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1708.546379][T28080] RAX: fffffffffffffe00 RBX: 00007f6a39225fa8 RCX: 00007f6a38f9e019 [ 1708.554412][T28080] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f6a39225fa8 [ 1708.562586][T28080] RBP: 00007f6a39225fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1708.570668][T28080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1708.578783][T28080] R13: 00007f6a39226038 R14: 00007ffdb3af4780 R15: 00007ffdb3af4868 [ 1708.586878][T28080] [ 1708.589964][T28080] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1708.597285][T28080] CPU: 1 PID: 28080 Comm: syz.5.8049 Not tainted syzkaller #0 [ 1708.604792][T28080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1708.614894][T28080] Call Trace: [ 1708.618213][T28080] [ 1708.621168][T28080] dump_stack_lvl+0x188/0x24e [ 1708.625895][T28080] ? memcpy+0x3c/0x60 [ 1708.630008][T28080] ? show_regs_print_info+0x12/0x12 [ 1708.635775][T28080] ? load_image+0x410/0x410 [ 1708.640331][T28080] panic+0x2d3/0x710 [ 1708.644263][T28080] ? bpf_jit_dump+0xd0/0xd0 [ 1708.648807][T28080] __warn+0x2f8/0x4f0 [ 1708.652818][T28080] ? perf_pending_task+0x353/0x480 [ 1708.657961][T28080] ? perf_pending_task+0x353/0x480 [ 1708.663273][T28080] report_bug+0x2ba/0x4f0 [ 1708.667755][T28080] ? perf_pending_task+0x353/0x480 [ 1708.673008][T28080] handle_bug+0x3a/0x70 [ 1708.677194][T28080] exc_invalid_op+0x16/0x40 [ 1708.681760][T28080] asm_exc_invalid_op+0x16/0x20 [ 1708.686636][T28080] RIP: 0010:perf_pending_task+0x353/0x480 [ 1708.692397][T28080] Code: e8 d2 82 da ff 84 db 75 10 e8 69 80 da ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 59 80 da ff e8 ac d5 58 ff eb e9 e8 4d 80 da ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 43 80 3c 2f 00 0f 85 0a ff ff [ 1708.712036][T28080] RSP: 0018:ffffc9000f0078e8 EFLAGS: 00010293 [ 1708.718143][T28080] RAX: ffffffff81a7add3 RBX: ffff888076e38a58 RCX: ffff88805c96bc00 [ 1708.726143][T28080] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1708.734140][T28080] RBP: ffff888076e38820 R08: ffff88805c96c603 R09: 1ffff1100b92d8c0 [ 1708.742146][T28080] R10: dffffc0000000000 R11: ffffed100b92d8c1 R12: ffff88805c96bc00 [ 1708.750153][T28080] R13: ffff888055532960 R14: 0000000000000000 R15: 1ffff1100edc7104 [ 1708.758168][T28080] ? perf_pending_task+0x353/0x480 [ 1708.763320][T28080] ? perf_pending_task+0x353/0x480 [ 1708.768458][T28080] task_work_run+0x1d0/0x260 [ 1708.773085][T28080] ? task_work_cancel+0x220/0x220 [ 1708.778505][T28080] ? do_raw_spin_unlock+0x11d/0x230 [ 1708.783736][T28080] do_exit+0x9d5/0x2570 [ 1708.787926][T28080] ? cgroup_freezing+0x1c/0x340 [ 1708.792825][T28080] ? put_task_struct+0x80/0x80 [ 1708.797674][T28080] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1708.803728][T28080] ? lock_chain_count+0x20/0x20 [ 1708.808678][T28080] do_group_exit+0x229/0x2e0 [ 1708.813327][T28080] ? lockdep_hardirqs_on+0x94/0x140 [ 1708.818562][T28080] get_signal+0x1259/0x1340 [ 1708.823203][T28080] arch_do_signal_or_restart+0xc4/0x1310 [ 1708.828908][T28080] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1708.835277][T28080] ? get_sigframe_size+0x10/0x10 [ 1708.840261][T28080] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1708.846470][T28080] ? exit_to_user_mode_loop+0x3b/0x110 [ 1708.851987][T28080] exit_to_user_mode_loop+0x70/0x110 [ 1708.857315][T28080] exit_to_user_mode_prepare+0xee/0x180 [ 1708.862984][T28080] syscall_exit_to_user_mode+0x16/0x40 [ 1708.868484][T28080] do_syscall_64+0x58/0xa0 [ 1708.872960][T28080] ? clear_bhb_loop+0x60/0xb0 [ 1708.877781][T28080] ? clear_bhb_loop+0x60/0xb0 [ 1708.882497][T28080] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1708.888421][T28080] RIP: 0033:0x7f6a38f9e019 [ 1708.892857][T28080] Code: Unable to access opcode bytes at 0x7f6a38f9dfef. [ 1708.899890][T28080] RSP: 002b:00007f6a39ef40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1708.908355][T28080] RAX: fffffffffffffe00 RBX: 00007f6a39225fa8 RCX: 00007f6a38f9e019 [ 1708.916367][T28080] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f6a39225fa8 [ 1708.925135][T28080] RBP: 00007f6a39225fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1708.934462][T28080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1708.943285][T28080] R13: 00007f6a39226038 R14: 00007ffdb3af4780 R15: 00007ffdb3af4868 [ 1708.951525][T28080] [ 1708.955204][T28080] Kernel Offset: disabled [ 1708.959572][T28080] Rebooting in 86400 seconds..