last executing test programs: 19.433324071s ago: executing program 2 (id=4581): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010118000000000000000c0002000000000009000000070000000000000800000000000000000000006100"], 0x0, 0x2d}, 0x12) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$kcm(0x2, 0x1, 0x84) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x7, 0x2, 0x1, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8937, &(0x7f0000000680)='lo:\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x89a2, &(0x7f0000000040)={'bridge0\x00', @random="1400"}) 19.263009133s ago: executing program 0 (id=4583): socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001000a080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce947ee2b49e33538afaeb2713f450ebd010a20ff27fff0000000000000000", 0x89}], 0x1}, 0xff0f000000000000) r0 = getpid() perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x34120, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x7, 0x2}, 0x8386, 0x0, 0x0, 0x0, 0x0, 0x4}, r0, 0x1, 0xffffffffffffffff, 0x3) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_tracing={0x1a, 0xe, &(0x7f00000002c0)=@raw=[@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @jmp={0x5, 0x1, 0x8, 0x3, 0x2, 0xfffffffffffffff8, 0x8}, @generic={0x53, 0x0, 0xf, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0xba2, 0x0, 0x0, 0x0, 0xfffffffb}], &(0x7f0000000340)='GPL\x00', 0x45, 0x0, 0x0, 0x40f00, 0x39, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x0, 0xf, 0x100, 0x2}, 0x10, 0x895b, 0xffffffffffffffff, 0x1, &(0x7f00000003c0)=[0x1, 0x1], &(0x7f0000000400)=[{0x5, 0x4, 0xc}], 0x10, 0x3}, 0x94) r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000008c0)='cgroup.threads\x00', 0x2, 0x0) r3 = getpid() write$cgroup_pid(r2, &(0x7f0000000900)=r3, 0x12) socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000003bc0)={&(0x7f0000000680)=@abs, 0x6e, &(0x7f0000003a40)=[{&(0x7f0000000940)=""/196, 0xb8}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000002980)=""/101, 0x65}, {&(0x7f0000002a00)=""/4096, 0x1e3}, {&(0x7f0000000080)=""/13, 0xd}], 0x5, &(0x7f0000000a40)=[@rights={{0x24}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff]}}], 0xf0}, 0x160) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)={@cgroup, 0xffffffffffffffff, 0x18, 0x8, 0x0, @void, @value=r1}, 0x20) write$cgroup_netprio_ifpriomap(r6, &(0x7f0000000840)={'batadv_slave_0', 0x32, 0x37}, 0x11) r7 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r8 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x40082406, &(0x7f0000000240)='\x00') ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r11, 0x1, 0x32, &(0x7f0000000800)=r5, 0x4) ioctl$SIOCSIFHWADDR(r10, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="8dffffff0600"}) sendmsg$kcm(r7, &(0x7f0000000580)={0x0, 0x28, &(0x7f0000000180)=[{&(0x7f0000000000)="2e0000003600f7ffffff80698c6394090124fc602f6e354016000180008e9279ed91d47825d7563c5ddbeceb16e7", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x40000) r12 = perf_event_open(0x0, 0x0, 0x5, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x2400, 0x8) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000880)=r6, 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r13, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) 19.262629993s ago: executing program 2 (id=4584): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0xc, [@struct={0x4, 0x1, 0x0, 0x4, 0x0, 0x1, [{0xa, 0x3, 0x6}]}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}]}, {0x0, [0x61, 0x0, 0x2e, 0x2e, 0x61, 0x61, 0x2e, 0x61, 0x30, 0x5f]}}, 0x0, 0x64}, 0x28) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000200000000"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8e7}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)='%-5lx \x00'}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0x58, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000dc0), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r13, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r12, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x40000002) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000e80)={{r0, 0xffffffffffffffff}, &(0x7f0000000e00), &(0x7f0000000e40)='%pB \x00'}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000f40)={0x6, 0x17, &(0x7f0000000780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x692, 0x0, 0x0, 0x0, 0x100}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4755}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000900)='syzkaller\x00', 0xef, 0xe, &(0x7f0000000940)=""/14, 0x41000, 0x6, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000d40)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000d80)={0x5, 0xe, 0x1, 0x6}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000ec0)=[r0, r0, r6, r14, r0, r0, r0], &(0x7f0000000f00)=[{0x0, 0x3, 0x6, 0x1}, {0x0, 0x2, 0x8, 0x5}, {0x5, 0x1, 0xe, 0x4}], 0x10, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x1f4, 0x20, 0x0, &(0x7f0000000100)="ff410800b083dcc1010b3efc88643acd3aaf000c0057bd21762ae3fe8892b69c", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50) openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x12, 0xa, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r4}, 0x20) 19.074732716s ago: executing program 0 (id=4586): unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100905, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x4, 0x7, 0x0, 0x0, 0x0, 0x4, 0x12703, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x1, @perf_config_ext={0x0, 0x81}, 0x1828a6, 0xca, 0x2, 0x4, 0x8, 0x400000, 0x4, 0x0, 0xe, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x88080, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) r6 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r5}, 0x8) close(r6) close(0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) recvmsg$unix(r7, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) write$cgroup_int(r6, 0x0, 0x0) recvmsg$unix(r1, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x2a979d) r10 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r11) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001280)={&(0x7f0000000780)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000800)="77e2e3b1600fa26febb5baeea56798473d2a799873f7659f0d02b8cfc7930b0a5ca2905686aaeddf2ed8fb7cdc675dc3767fc420ada7b3652055ac3d9185e783a109965df1be67183c24e062d53858384193cfadddcf1b39a2fc638fb068c827e05ada75021e80380fe517ec59009cf7037103c415b92be82c45324880af350fb600434fa2fc1635ba52cef8c0f3d30b658b906d94b355d5a3aca3af4f4cdc209849989c3d51396ac7", 0xa9}], 0x1, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="20000000000000000100000001000000", @ANYRES32=r5, @ANYRES32=r0, @ANYRES32, @ANYRES32=r7, @ANYBLOB="1c000000000000000100000001000000", @ANYRES32=r7, @ANYRES32, @ANYRES32=r8, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r9, @ANYRES32=r6, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0xee01, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002005cc7b32b40a04c0e477d5f0e14807aefd4ee2c228bfc42b7ba29fd2a13252bb32b5858bc60834d3a3751470eb2766360b3a9be7cad4f4f9af0878ab91a5b26665a764f3e9dccda3aca33894752ad0f530d1032ced12781aef74d7ac16556b43b1076ca82d42c2addd7794a9b27a6d6c850fa940438a13b113a195b3e", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='\x00\x00\x00\x00'], 0xe8, 0x4044080}, 0x1010) recvmsg$unix(r7, &(0x7f0000000700)={&(0x7f0000000200), 0x6e, &(0x7f0000000640)=[{&(0x7f0000000580)=""/88, 0x58}, {&(0x7f0000000600)=""/2, 0x2}], 0x2, &(0x7f0000000680)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xc, 0x3, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0xfffffe00, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) 18.585881983s ago: executing program 3 (id=4590): bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x0, 0x3ff78000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x8, 0x92}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1}, 0x40000004) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x30, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_bp={0x0}, 0x800, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x2, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_subtree(r4, &(0x7f0000000200), 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0xff, 0x0, 0xffffffffffffffff, 0x9010, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0xf50a43945a8ef38c}, 0xce6b9b20411c70f4, 0x800000000000ca, 0x0, 0x9, 0xffffffbffffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0xb) 18.337560637s ago: executing program 3 (id=4591): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x11, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x10, 0x700000000}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x102009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x10, 0x400000002, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x9cdc2384056b48b8) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002640)={&(0x7f0000000040)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000002500)=ANY=[], 0x110}, 0x40000) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1b, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) socketpair(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@volatile={0xe, 0x0, 0x0, 0x9, 0x2}, @fwd={0x2}]}, {0x0, [0x2e]}}, &(0x7f0000000580)=""/135, 0x33, 0x87, 0x0, 0xfffffffa}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x4, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x240000, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000001c0)={'xfrm0\x00', 0x800}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf94b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_bp={0x0}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x200003, 0x6, 0x9, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x1) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f00000000c0)=0x20000000004, 0x6) write$cgroup_int(r7, &(0x7f0000000100)=0x1, 0x12) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000)=r8, 0x10) 18.292125808s ago: executing program 2 (id=4599): bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x0, 0x3ff78000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x8, 0x92}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1}, 0x40000004) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x30, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_bp={0x0}, 0x800, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x2, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_subtree(r4, &(0x7f0000000200), 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0xff, 0x0, 0xffffffffffffffff, 0x9010, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0xf50a43945a8ef38c}, 0xce6b9b20411c70f4, 0x800000000000ca, 0x0, 0x9, 0xffffffbffffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0xb) 18.023231052s ago: executing program 0 (id=4592): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010118000000000000000c0002000000000009000000070000000000000800000000000000000000006100"], 0x0, 0x2d}, 0x12) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$kcm(0x2, 0x1, 0x84) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x7, 0x2, 0x1, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8937, &(0x7f0000000680)='lo:\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x89a2, &(0x7f0000000040)={'bridge0\x00', @random="1400"}) 17.857380474s ago: executing program 2 (id=4593): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x2, 0x4e24, @rand_addr=0x6}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000100)='d', 0x1}], 0x1}, 0x22044880) sendmsg$inet(r0, &(0x7f0000002700)={&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000080)="9a", 0x1}], 0x1}, 0x8040) sendmsg$inet(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000280)=[{&(0x7f00000001c0)="e9", 0x34000}], 0x1, 0x0, 0x25a73}, 0x8054) 17.857050144s ago: executing program 3 (id=4594): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x17) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r0}, @ldst={0x1, 0x3, 0x3}]}, &(0x7f0000000d40)='syzkaller\x00'}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f2, &(0x7f0000000080)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) socketpair(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x541b, &(0x7f0000000080)) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a563301bf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00123d000100000400000d3d000000bc7a46e3988285dcdf12f21308f868fece01008000000000000014e6a065c806539ff5b1326f67958f0a947ee2b49e33", 0x89}], 0x1}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1, 0x1}, 0x8000, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r7, 0x29, 0x4a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7fffffffffffffff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x400}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8922, &(0x7f0000000080)) 17.795463985s ago: executing program 0 (id=4595): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x10006, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r2, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x10, &(0x7f00000003c0)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x22) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x700000000000000, 0x0, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000002140)=ANY=[], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x80) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) r5 = socket$kcm(0xa, 0x2, 0x0) socketpair(0x25, 0xa, 0x1, &(0x7f0000000140)) socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r5, &(0x7f00000001c0)={&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000002900000043"], 0x18}, 0xc) 17.551513428s ago: executing program 1 (id=4596): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0x17}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000240)="2705020059feff000600002fb96dbcf706e105000700810000008100accb", 0x1e}, {&(0x7f00000002c0)="88a8", 0x2}, {&(0x7f00000005c0)="ac37979d1e439e19a3fab5e73acb3e944e5067314670e86878ea780b34a68a9f01b15a9ff9522b89b6c88218d5f257529aa4e34fab88a671ab48b27ac6a4207fe8a270d3d5b82f100a392980a058dddf565e7deaddd88af7ee746b611a2c5033762a03a3b3e135cf3e1b253385ed8c0de1a820324943afbf72b1509334a4815debe79c5d881fe356404ebd716994cc31b9279965133894ceca066cba08977bfd328ee08749c20449017c661b7cfb27f29f4c2a5ef569403ee926899deada9ab15aba6b7054dc68cf2a65ca130aa11ca288230c24a6f2cd9a865615ce0bdeceb0d07f6a9b693d9aea5629b7578a843b98a8", 0xf1}], 0x3, 0x0, 0x0, 0x7f2c80}, 0x0) 17.45618867s ago: executing program 1 (id=4597): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\t\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRESDEC, @ANYRES32=0x0, @ANYRESOCT=0x0], 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) close(0x3) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f00000000c0)={0x3, 0x80, 0x1, 0x0, 0x4, 0x3, 0x0, 0x6, 0x6000, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x576}, 0x40, 0x8, 0x0, 0x9, 0x80000000, 0xc0000000, 0x0, 0x0, 0x401, 0x0, 0x100000001}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f28, 0x0, @perf_bp={0x0}, 0x100904, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c}, 0x0, 0x10, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="1800"/16], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80100, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x100904, 0x401, 0x25, 0x0, 0x1, 0x200, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0xfffffffffffffffc}, 0x104101, 0x4, 0x0, 0x4, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40042409, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x40009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xffffffffffffffff, 0x3fff8000}, 0x0, 0xff, 0x43a1bd76, 0x7, 0x9, 0x3, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0x1000000}, 0x0, 0x0, 0x1, 0x0, 0xffff, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000057700000000000000000000182ec0002020702500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb70200000800c309b703000024000000850000000600000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095000000"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0xc}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) r6 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r6, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x2, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0f000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000001100)={r7, &(0x7f0000000100), &(0x7f0000000000)=""/95, 0x2}, 0x20) setsockopt$sock_attach_bpf(r6, 0x84, 0x1e, &(0x7f0000000000), 0x4) 17.45288868s ago: executing program 0 (id=4598): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_pid(r2, &(0x7f0000000980), 0x20000992) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000040)='GPL\x00', 0x1}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002cc0)={r1, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x53, &(0x7f0000000340), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840), &(0x7f00000008c0), 0x0, 0x5f, &(0x7f0000002ec0)=[{}, {}, {}, {}], 0x6, 0x10, &(0x7f0000002b00), &(0x7f0000002b40), 0x8, 0xd0, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000002d00)={r1, 0xffffffffffffffff}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000002e00)={0x8, 0x2, &(0x7f0000000040)=@raw=[@map_val={0x18, 0x9, 0x2, 0x0, r2}], &(0x7f00000001c0)='syzkaller\x00', 0xfffffffd, 0x4c, &(0x7f0000000680)=""/76, 0x41000, 0x1, '\x00', 0x0, @fallback=0x2f, r1, 0x8, &(0x7f0000000700)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000740)={0x5, 0xc, 0x8, 0x7}, 0x10, r3, r1, 0x5, &(0x7f0000002d40)=[r2, r2, r2, r2, r2, r4], &(0x7f0000002d80)=[{0x0, 0x3, 0x1, 0x8}, {0x5, 0x5, 0xf, 0x8}, {0x1, 0x3, 0xe, 0x5}, {0x5, 0x3, 0x8, 0x9}, {0x3, 0x4, 0xd, 0x9}], 0x10, 0x8}, 0x94) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r6) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) close(0x3) close(0x4) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r8, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) close(0x4) perf_event_open(&(0x7f0000002b80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0xa0ea, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002f00)={0xf, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_int(r1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004460bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac09c51c268811000096859fc57a00000000000000002571cd53b9851b30", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000) recvmsg$kcm(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/223, 0xdf}, {&(0x7f0000000a80)=""/4112, 0x1010}, {&(0x7f0000001ac0)=""/4074, 0xfea}, {&(0x7f0000000940)=""/197, 0xc5}, {&(0x7f0000000280)=""/73, 0x49}, {&(0x7f0000000780)=""/89, 0x59}], 0x6}, 0x42) r9 = socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x29, 0x0, 0x0) recvmsg$kcm(r9, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x10000) 17.42981172s ago: executing program 3 (id=4600): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0xc, [@struct={0x4, 0x1, 0x0, 0x4, 0x0, 0x1, [{0xa, 0x3, 0x6}]}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}]}, {0x0, [0x61, 0x0, 0x2e, 0x2e, 0x61, 0x61, 0x2e, 0x61, 0x30, 0x5f]}}, 0x0, 0x64}, 0x28) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000200000000"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8e7}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)='%-5lx \x00'}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0x58, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000dc0), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r13, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r12, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x40000002) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000e80)={{r0, 0xffffffffffffffff}, &(0x7f0000000e00), &(0x7f0000000e40)='%pB \x00'}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000f40)={0x6, 0x17, &(0x7f0000000780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x692, 0x0, 0x0, 0x0, 0x100}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4755}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000900)='syzkaller\x00', 0xef, 0xe, &(0x7f0000000940)=""/14, 0x41000, 0x6, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000d40)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000d80)={0x5, 0xe, 0x1, 0x6}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000ec0)=[r0, r0, r6, r14, r0, r0, r0], &(0x7f0000000f00)=[{0x0, 0x3, 0x6, 0x1}, {0x0, 0x2, 0x8, 0x5}, {0x5, 0x1, 0xe, 0x4}], 0x10, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x1f4, 0x20, 0x0, &(0x7f0000000100)="ff410800b083dcc1010b3efc88643acd3aaf000c0057bd21762ae3fe8892b69c", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50) openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x12, 0xa, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r4}, 0x20) 16.991176297s ago: executing program 1 (id=4601): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x10884, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8001, 0x590f}, 0x2920, 0x0, 0x0, 0x8, 0x80000000, 0x1, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="14003f0016000b63d25a8064000000000724fc60", 0x14}], 0x1}, 0x0) 16.913910888s ago: executing program 2 (id=4602): bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x0, 0x3ff78000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x8, 0x92}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1}, 0x40000004) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x30, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_bp={0x0}, 0x800, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x2, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_subtree(r4, &(0x7f0000000200), 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0xff, 0x0, 0xffffffffffffffff, 0x9010, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0xf50a43945a8ef38c}, 0xce6b9b20411c70f4, 0x800000000000ca, 0x0, 0x9, 0xffffffbffffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0xb) 16.836174129s ago: executing program 1 (id=4603): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x11, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x10, 0x700000000}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x102009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x10, 0x400000002, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x9cdc2384056b48b8) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002640)={&(0x7f0000000040)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000002500)=ANY=[], 0x110}, 0x40000) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1b, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) socketpair(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@volatile={0xe, 0x0, 0x0, 0x9, 0x2}, @fwd={0x2}]}, {0x0, [0x2e]}}, &(0x7f0000000580)=""/135, 0x33, 0x87, 0x0, 0xfffffffa}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x4, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x240000, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000001c0)={'xfrm0\x00', 0x800}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf94b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_bp={0x0}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x200003, 0x6, 0x9, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x1) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f00000000c0)=0x20000000004, 0x6) write$cgroup_int(r7, &(0x7f0000000100)=0x1, 0x12) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000)=r8, 0x10) 16.428020465s ago: executing program 3 (id=4604): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010118000000000000000c0002000000000009000000070000000000000800000000000000000000006100"], 0x0, 0x2d}, 0x12) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$kcm(0x2, 0x1, 0x84) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x7, 0x2, 0x1, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8937, &(0x7f0000000680)='lo:\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x89a2, &(0x7f0000000040)={'bridge0\x00', @random="1400"}) 16.370690516s ago: executing program 0 (id=4605): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x101000, 0x0) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000380)=0x2) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037", 0x4a}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f00000011c0)=""/4087, 0xff7}, {&(0x7f00000021c0)=""/157, 0x9d}, {&(0x7f00000022c0)=""/120, 0x78}, {&(0x7f0000000240)=""/117, 0x75}], 0x4}, 0x40012100) recvmsg$kcm(r2, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r1}, &(0x7f0000000640), &(0x7f0000000680)=r3}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x29, &(0x7f0000000000), 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x5, 0x83501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x940, 0x4, 0x0, 0x0, 0x6d1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x29, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2281], &(0x7f0000000140)='GPL\x00'}, 0x94) r8 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r8, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) sendmsg(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)="b755f98d8444e5b85b12638b6ed15227bed737ba9551609e397248c4c46eedfc2e08faeddfb25efbe979465cfd39feb5ef739ade90210f0f3e2f50536c4879033d2922ae14cc0ab27ea9edd6bf28fec87e976a67f444bd0f8c8cc82986a578e52a9b88e80802a8d44e4c85590c18e3935b36c01a261e8788ee5c", 0x7a}], 0x1}, 0x20000000) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000040)={r8, r7}) setsockopt$sock_attach_bpf(r8, 0x1, 0x7, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x10884, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8001, 0x590f}, 0x2920, 0x0, 0x0, 0x8, 0x80000000, 0x1, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$kcm(0x10, 0x2, 0x10) r10 = socket$kcm(0x2, 0xa, 0x2) sendmsg$kcm(r10, &(0x7f00000003c0)={&(0x7f0000000000)=@vsock={0x28, 0x0, 0xffffffff}, 0x12, 0x0}, 0x4004911) sendmsg$kcm(r9, &(0x7f00000002c0)={0x0, 0x204, &(0x7f0000000040)=[{&(0x7f00000000c0)="1400000016000b63d25a8064000000000724fc60", 0x14}], 0x1}, 0x0) 16.329845286s ago: executing program 1 (id=4606): perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0xb27f, 0x829b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe11b, 0x0, @perf_bp={0x0, 0x1}, 0xc486d19d431ce5be, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe9}, 0x0, 0xd, 0xffffffffffffffff, 0x8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f0000000180)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10, &(0x7f0000000680)=[{&(0x7f00000001c0)="c5b18baee2cbba60def235894175d60b175129996d823139792b78587dd42d4eeebfa7d6aaca5700a2c4fcc923beffdfa64ff55d75a9d3425bc3ca559ec2b9ca28180d8b517bc7f680ca29291d6986d77a6fa15a7d4d210e0492b2093ef0de9508079256d5d21367ac6cf6d2f37de9ac72eff61ec44794a9d0d54ba2efb11572ef3353625c1cbf71d13010c039e02f64c5694bf561e187597e5fcdc69f040a86630403196ed2f0787613a52763ee5034167f3e34791efd420069abfc49d6148e5cdacace8f4ab0481bf2e48ea99cc2151c9aa57611700a724dd1de7f96b2d7062c1d3be08057f03ce68d439ce1ad3cb82adf48", 0xf3}, {&(0x7f00000002c0)="7604d1ce603635bf98a8e02e555cbd023503e0f0f4bcea2722809685e6ada56ac85d6d772664cdb8ab28b08210ace060e03162568675c0dc321d5998757b9c7f20d9fabf26d0b02b57230323aa0fc9fbb97da93bbfa622f2e39f917969364a36b5e7aa3707e0b2df782c12cddf288a73b4d7faa22f2813a4403208306f350e3c295f34b93dc10240df91fe4ba419deacb6dfc739d8a660d8ad6e0b3822a22a0d53b8400dd38510f784e4bab380e1e3c1e7ea5b3da56d920fd553f60e958b231101cd18", 0xc3}, {&(0x7f00000003c0)="a1f49906d38d241bcf3b4ffce58efd59557816882f23a34f613943289d3f61bbd9c4377765ec9a5e493a5b3b089bbfd6356b84d12a7ba98f4cdd27ca6444b6639facd5f14cf608be9cb9ca0f87592be1a064dc5080813f1fd84170aa667aa0aa46591a6c769a88c116deb1e68ef70d692dd0720a769aede8a7f8b33a44e2e85a46ee8adf093bf0878711e1e2a0ddb6249623b24eb602d2172c846ccb9866336b9e65e5a9501d274c02049694d9e0c148", 0xb0}, {&(0x7f0000000480)="907d3b664caabcad2e0372faacfc41f32ff1af071a00663dcb233182617f021f85e1f3a819c3b1ef12a2918e766919a2d68618c3741ef103d4826937f0ef97ceff545b0dfe2f04d0eb7c0e46e45d71a4de5b89656b5e3778ae3a0eec732e8ba00cf6caace96263e51fd13031ec0a6aea06bc8386ff6c20aa1558ad009a9c0829fde0b0e1fb40d093d99ad6615fda40f1e7d62e9518623d569ede096b1951f0e0ec718a2b81dd9afccb79325574b7b4f2392b4b50cf6a88898b9d4a084946096f36061c1199312150ffb86d77a41c04d79f28b27a6e4098349ac7877fca0883a7b5bf5108284afd15b2b1", 0xea}, {&(0x7f0000000580)="e42fcc937c0b5f8f1961874dbb8d221d93c1e67c2f37cacdb7cb61030b00448f0001b19a128de847ac8bed0f8489e7bb882f5e4dc7672aa3992040378b4a01338cd72523a98b0272157d2f984e6138b1684db83450f04f0daad3d8ae0b8949e9cf68c3e0cc34849872e4dcca8eab365a899ea3ac0ecbbf74a88897ad6777cfeeb30d1c9e589ae48a961943ac58aad691c5b8d8f63edf25b00cc0d8ea222c33109120ede3b06192c4bd27bbee164043f46eb094e8f66cbab929630a6eb85eba0c0debf7b47995a5fabd2d96e15a778babedce3d215cce9bb108adb026cafe06e20e7e80d422a17b5bd38c5c59", 0xec}], 0x5, &(0x7f0000000700)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_ttl={{0x14, 0x0, 0x2, 0xc}}], 0x30}, 0x80a0) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000200)='ns/net\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x11, &(0x7f00000007c0)=@raw=[@map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x4}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100}, @call={0x85, 0x0, 0x0, 0x71}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x1}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}], &(0x7f0000000880)='GPL\x00', 0x1000, 0x9b, &(0x7f00000008c0)=""/155, 0x41000, 0x21, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000980)={0x7, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000009c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000a00)=[{0x3, 0x5, 0x7, 0x6}, {0x0, 0x5, 0xc, 0xa}, {0x3, 0x4, 0x2, 0xc}], 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc81e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4846, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0xfffffea2, 0x0, 0x0}, 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000b00)={r1, r7}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r12, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r14, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r13, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) ioctl$TUNSETIFF(r2, 0xb701, 0x0) r15 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r15, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815000100ef05142603600e12080005007a010401a80016002000024004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb3500a007a290457f0189b316277ce06bbace8017cbd74c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0x11a}], 0x1}, 0x4000000) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8940, &(0x7f0000000000)='.\x1d\xb8\xd8\xa1\x11\xca|\x84nub\x99\xb0\xb6\x8ao\xf2I\xf5\x04\x03\xdai8G\x1e1\x8a\x96C\xc9\x02\xba^M\xeak\xd8\xfa\x17SY\x12\x80\x91') 16.068125201s ago: executing program 1 (id=4607): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x4, 0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000240)}], 0x2}, 0x8080) write$cgroup_subtree(r1, &(0x7f0000000600)=ANY=[@ANYRES64=r1], 0xfe33) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0xc045d6e08e8aad4e, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002880)={&(0x7f0000000240)="cb97a568468e03f008ef2d4681db7b0eb3868220997a463adea79e988ad7bb2cc3533d64deffa0c8305e47efdb30d4b864b53d7f8fb356110dd011e543fbb691f8a38a57276779bfed38fcacb80770fa2caae8ad971d19f10fd82d896624c574107ac2f9ccf867b1ee9fffc3d91509ba2a23fb95ace924940e17f1913cb246c5891ef2b9ae620c2be7fa485879bdf10a16a851", &(0x7f0000000500)=""/203, &(0x7f0000001780)="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", &(0x7f0000002780)="67bdde6953ae2ea3bd8a2e6853516771c5ac9f299268f3a10b5b37dc99df3f9344ce9c1b9980f1a1e62e78300526038aeb6cf213bcf28eb7284363c0869a6837c02a4d26eef36710e642e5232b212ca8791530997d9fa6d55a1eb77a2469e964d9de8b2a39c9a6e5ea792e32647c4c58732a57feef611a505a4c744e3fa143fa6b81384e5e71c3bf989b066f215590005cf359713cade760182a1b67f45a45f0b836584e64c469c4781f7b58926a44ff106e77e6aa341d8d8d07a66769a8ad0f9a920384c2d3e53417e5043bfbaffbef7d1f67e85a7d5e29246d245b82", 0x9627, 0x1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x520, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xa99, 0x3}, 0x8500, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x8020) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="1400000016000b63d25a80648c2594f91c240685", 0x14}], 0x1}, 0x0) r4 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r4, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0xfffd, @multicast1}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000700)="fbd2b9ed29d8974a6ce75f08916a", 0xe}, {&(0x7f00000007c0)="d25bf710e1be938583f8fd9d41e17de159c996072e04e91d87cc599f2c175f6b5862de3d18e2401af6e90065d3eadf", 0x2f}], 0x2}, 0x9c00) 16.045869151s ago: executing program 3 (id=4608): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x10006, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r2, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x10, &(0x7f00000003c0)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x22) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x700000000000000, 0x0, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000002140)=ANY=[], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x80) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) r5 = socket$kcm(0xa, 0x2, 0x0) socketpair(0x25, 0xa, 0x1, &(0x7f0000000140)) socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r5, &(0x7f00000001c0)={&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000002900000043"], 0x18}, 0xc) 15.780813935s ago: executing program 2 (id=4609): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\t\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRESDEC, @ANYRES32=0x0, @ANYRESOCT=0x0], 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) close(0x3) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f00000000c0)={0x3, 0x80, 0x1, 0x0, 0x4, 0x3, 0x0, 0x6, 0x6000, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x576}, 0x40, 0x8, 0x0, 0x9, 0x80000000, 0xc0000000, 0x0, 0x0, 0x401, 0x0, 0x100000001}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f28, 0x0, @perf_bp={0x0}, 0x100904, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c}, 0x0, 0x10, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="1800"/16], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80100, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x100904, 0x401, 0x25, 0x0, 0x1, 0x200, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0xfffffffffffffffc}, 0x104101, 0x4, 0x0, 0x4, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40042409, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x40009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xffffffffffffffff, 0x3fff8000}, 0x0, 0xff, 0x43a1bd76, 0x7, 0x9, 0x3, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0x1000000}, 0x0, 0x0, 0x1, 0x0, 0xffff, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000057700000000000000000000182ec0002020702500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb70200000800c309b703000024000000850000000600000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095000000"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0xc}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) r6 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r6, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x2, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0f000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000001100)={r7, &(0x7f0000000100), &(0x7f0000000000)=""/95, 0x2}, 0x20) setsockopt$sock_attach_bpf(r6, 0x84, 0x1e, &(0x7f0000000000), 0x4) 474.525372ms ago: executing program 32 (id=4605): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x101000, 0x0) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000380)=0x2) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037", 0x4a}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f00000011c0)=""/4087, 0xff7}, {&(0x7f00000021c0)=""/157, 0x9d}, {&(0x7f00000022c0)=""/120, 0x78}, {&(0x7f0000000240)=""/117, 0x75}], 0x4}, 0x40012100) recvmsg$kcm(r2, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r1}, &(0x7f0000000640), &(0x7f0000000680)=r3}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x29, &(0x7f0000000000), 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x5, 0x83501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x940, 0x4, 0x0, 0x0, 0x6d1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x29, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2281], &(0x7f0000000140)='GPL\x00'}, 0x94) r8 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r8, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) sendmsg(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)="b755f98d8444e5b85b12638b6ed15227bed737ba9551609e397248c4c46eedfc2e08faeddfb25efbe979465cfd39feb5ef739ade90210f0f3e2f50536c4879033d2922ae14cc0ab27ea9edd6bf28fec87e976a67f444bd0f8c8cc82986a578e52a9b88e80802a8d44e4c85590c18e3935b36c01a261e8788ee5c", 0x7a}], 0x1}, 0x20000000) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000040)={r8, r7}) setsockopt$sock_attach_bpf(r8, 0x1, 0x7, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x10884, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8001, 0x590f}, 0x2920, 0x0, 0x0, 0x8, 0x80000000, 0x1, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$kcm(0x10, 0x2, 0x10) r10 = socket$kcm(0x2, 0xa, 0x2) sendmsg$kcm(r10, &(0x7f00000003c0)={&(0x7f0000000000)=@vsock={0x28, 0x0, 0xffffffff}, 0x12, 0x0}, 0x4004911) sendmsg$kcm(r9, &(0x7f00000002c0)={0x0, 0x204, &(0x7f0000000040)=[{&(0x7f00000000c0)="1400000016000b63d25a8064000000000724fc60", 0x14}], 0x1}, 0x0) 320.574805ms ago: executing program 33 (id=4607): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x4, 0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000240)}], 0x2}, 0x8080) write$cgroup_subtree(r1, &(0x7f0000000600)=ANY=[@ANYRES64=r1], 0xfe33) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0xc045d6e08e8aad4e, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002880)={&(0x7f0000000240)="cb97a568468e03f008ef2d4681db7b0eb3868220997a463adea79e988ad7bb2cc3533d64deffa0c8305e47efdb30d4b864b53d7f8fb356110dd011e543fbb691f8a38a57276779bfed38fcacb80770fa2caae8ad971d19f10fd82d896624c574107ac2f9ccf867b1ee9fffc3d91509ba2a23fb95ace924940e17f1913cb246c5891ef2b9ae620c2be7fa485879bdf10a16a851", &(0x7f0000000500)=""/203, &(0x7f0000001780)="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", &(0x7f0000002780)="67bdde6953ae2ea3bd8a2e6853516771c5ac9f299268f3a10b5b37dc99df3f9344ce9c1b9980f1a1e62e78300526038aeb6cf213bcf28eb7284363c0869a6837c02a4d26eef36710e642e5232b212ca8791530997d9fa6d55a1eb77a2469e964d9de8b2a39c9a6e5ea792e32647c4c58732a57feef611a505a4c744e3fa143fa6b81384e5e71c3bf989b066f215590005cf359713cade760182a1b67f45a45f0b836584e64c469c4781f7b58926a44ff106e77e6aa341d8d8d07a66769a8ad0f9a920384c2d3e53417e5043bfbaffbef7d1f67e85a7d5e29246d245b82", 0x9627, 0x1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x520, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xa99, 0x3}, 0x8500, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x8020) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="1400000016000b63d25a80648c2594f91c240685", 0x14}], 0x1}, 0x0) r4 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r4, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0xfffd, @multicast1}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000700)="fbd2b9ed29d8974a6ce75f08916a", 0xe}, {&(0x7f00000007c0)="d25bf710e1be938583f8fd9d41e17de159c996072e04e91d87cc599f2c175f6b5862de3d18e2401af6e90065d3eadf", 0x2f}], 0x2}, 0x9c00) 190.428117ms ago: executing program 34 (id=4609): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\t\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRESDEC, @ANYRES32=0x0, @ANYRESOCT=0x0], 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) close(0x3) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f00000000c0)={0x3, 0x80, 0x1, 0x0, 0x4, 0x3, 0x0, 0x6, 0x6000, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x576}, 0x40, 0x8, 0x0, 0x9, 0x80000000, 0xc0000000, 0x0, 0x0, 0x401, 0x0, 0x100000001}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f28, 0x0, @perf_bp={0x0}, 0x100904, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c}, 0x0, 0x10, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="1800"/16], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80100, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x100904, 0x401, 0x25, 0x0, 0x1, 0x200, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0xfffffffffffffffc}, 0x104101, 0x4, 0x0, 0x4, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40042409, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x40009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xffffffffffffffff, 0x3fff8000}, 0x0, 0xff, 0x43a1bd76, 0x7, 0x9, 0x3, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0x1000000}, 0x0, 0x0, 0x1, 0x0, 0xffff, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000057700000000000000000000182ec0002020702500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb70200000800c309b703000024000000850000000600000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095000000"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0xc}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) r6 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r6, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x2, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0f000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000001100)={r7, &(0x7f0000000100), &(0x7f0000000000)=""/95, 0x2}, 0x20) setsockopt$sock_attach_bpf(r6, 0x84, 0x1e, &(0x7f0000000000), 0x4) 0s ago: executing program 35 (id=4608): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x10006, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r2, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x10, &(0x7f00000003c0)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x22) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x700000000000000, 0x0, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000002140)=ANY=[], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x80) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) r5 = socket$kcm(0xa, 0x2, 0x0) socketpair(0x25, 0xa, 0x1, &(0x7f0000000140)) socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r5, &(0x7f00000001c0)={&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000002900000043"], 0x18}, 0xc) kernel console output (not intermixed with test programs): 633.513502][T16175] ? __import_iovec+0x5f2/0x850 [ 633.518362][T16175] ? import_iovec+0x73/0xa0 [ 633.522867][T16175] ___sys_sendmsg+0x2a6/0x360 [ 633.527560][T16175] ? __sys_sendmsg+0x2b0/0x2b0 [ 633.532346][T16175] ? __lock_acquire+0x7d80/0x7d80 [ 633.537391][T16175] __se_sys_sendmsg+0x1d0/0x2c0 [ 633.542246][T16175] ? __x64_sys_sendmsg+0x80/0x80 [ 633.547194][T16175] ? lockdep_hardirqs_on+0x98/0x150 [ 633.552403][T16175] do_syscall_64+0x55/0xb0 [ 633.556862][T16175] ? clear_bhb_loop+0x40/0x90 [ 633.561547][T16175] ? clear_bhb_loop+0x40/0x90 [ 633.566221][T16175] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 633.572124][T16175] RIP: 0033:0x7f948f39ce59 [ 633.576539][T16175] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 633.596172][T16175] RSP: 002b:00007f9490196028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 633.604598][T16175] RAX: ffffffffffffffda RBX: 00007f948f615fa0 RCX: 00007f948f39ce59 [ 633.612574][T16175] RDX: 00000000000003e8 RSI: 00002000000004c0 RDI: 0000000000000006 [ 633.620543][T16175] RBP: 00007f9490196090 R08: 0000000000000000 R09: 0000000000000000 [ 633.628514][T16175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 633.636487][T16175] R13: 00007f948f616038 R14: 00007f948f615fa0 R15: 00007fffee9cbcc8 [ 633.644470][T16175] [ 634.316349][T16189] netlink: 'syz.1.3537': attribute type 153 has an invalid length. [ 634.333877][T16189] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.3537'. [ 634.955828][T16214] FAULT_INJECTION: forcing a failure. [ 634.955828][T16214] name failslab, interval 1, probability 0, space 0, times 0 [ 635.000210][T16214] CPU: 1 PID: 16214 Comm: syz.2.3545 Not tainted syzkaller #0 [ 635.007858][T16214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 635.018042][T16214] Call Trace: [ 635.021378][T16214] [ 635.024371][T16214] dump_stack_lvl+0x18c/0x250 [ 635.029136][T16214] ? show_regs_print_info+0x20/0x20 [ 635.034402][T16214] ? load_image+0x420/0x420 [ 635.038994][T16214] ? __might_sleep+0xe0/0xe0 [ 635.043655][T16214] ? __lock_acquire+0x7d80/0x7d80 [ 635.048761][T16214] should_fail_ex+0x394/0x4c0 [ 635.053535][T16214] should_failslab+0x9/0x20 [ 635.058094][T16214] slab_pre_alloc_hook+0x59/0x300 [ 635.063189][T16214] ? fib_create_info+0xa8d/0x2390 [ 635.068284][T16214] ? fib_create_info+0xa8d/0x2390 [ 635.073369][T16214] __kmem_cache_alloc_node+0x53/0x250 [ 635.078834][T16214] ? fib_create_info+0xa8d/0x2390 [ 635.083910][T16214] __kmalloc+0xa7/0x240 [ 635.088150][T16214] fib_create_info+0xa8d/0x2390 [ 635.093162][T16214] fib_table_insert+0xc6/0x1af0 [ 635.098111][T16214] ? mutex_lock_nested+0x20/0x20 [ 635.103139][T16214] ? bpf_lsm_capable+0x9/0x10 [ 635.107878][T16214] ? security_capable+0x89/0xb0 [ 635.112799][T16214] ? fib_new_table+0x10a/0x2d0 [ 635.117737][T16214] ip_rt_ioctl+0x4cd/0x1180 [ 635.122373][T16214] ? fib_validate_source+0x1330/0x1330 [ 635.128037][T16214] ? __might_fault+0xc6/0x120 [ 635.132778][T16214] ? __might_fault+0xaa/0x120 [ 635.137553][T16214] inet_ioctl+0x49e/0x560 [ 635.141943][T16214] ? tomoyo_path_number_perm+0x217/0x5e0 [ 635.147695][T16214] ? inet_shutdown+0x370/0x370 [ 635.152553][T16214] ? slab_free_freelist_hook+0x130/0x1a0 [ 635.158288][T16214] ? tomoyo_path_number_perm+0x4b7/0x5e0 [ 635.163981][T16214] ? __kmem_cache_free+0xba/0x1f0 [ 635.169127][T16214] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 635.174706][T16214] sock_do_ioctl+0xfc/0x310 [ 635.179290][T16214] ? sock_show_fdinfo+0xb0/0xb0 [ 635.184297][T16214] sock_ioctl+0x5be/0x7e0 [ 635.188701][T16214] ? sock_poll+0x3e0/0x3e0 [ 635.193241][T16214] ? bpf_lsm_file_ioctl+0x9/0x10 [ 635.198234][T16214] ? security_file_ioctl+0x80/0xa0 [ 635.203397][T16214] ? sock_poll+0x3e0/0x3e0 [ 635.207870][T16214] __se_sys_ioctl+0xfd/0x170 [ 635.212532][T16214] do_syscall_64+0x55/0xb0 [ 635.217013][T16214] ? clear_bhb_loop+0x40/0x90 [ 635.221733][T16214] ? clear_bhb_loop+0x40/0x90 [ 635.226479][T16214] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 635.232424][T16214] RIP: 0033:0x7f2ff619ce59 [ 635.236906][T16214] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 635.256575][T16214] RSP: 002b:00007f2ff7058028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 635.265065][T16214] RAX: ffffffffffffffda RBX: 00007f2ff6415fa0 RCX: 00007f2ff619ce59 [ 635.273085][T16214] RDX: 0000200000000100 RSI: 000000000000890b RDI: 0000000000000004 [ 635.281111][T16214] RBP: 00007f2ff7058090 R08: 0000000000000000 R09: 0000000000000000 [ 635.289141][T16214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 635.297158][T16214] R13: 00007f2ff6416038 R14: 00007f2ff6415fa0 R15: 00007ffcb9f8d1a8 [ 635.305272][T16214] [ 636.043791][T16228] netlink: 'syz.3.3548': attribute type 153 has an invalid length. [ 636.051998][T16228] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.3548'. [ 636.920936][T16245] FAULT_INJECTION: forcing a failure. [ 636.920936][T16245] name failslab, interval 1, probability 0, space 0, times 0 [ 636.953559][T16245] CPU: 0 PID: 16245 Comm: syz.0.3553 Not tainted syzkaller #0 [ 636.961116][T16245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 636.971219][T16245] Call Trace: [ 636.974541][T16245] [ 636.977499][T16245] dump_stack_lvl+0x18c/0x250 [ 636.982195][T16245] ? show_regs_print_info+0x20/0x20 [ 636.987419][T16245] ? load_image+0x420/0x420 [ 636.991967][T16245] ? __might_sleep+0xe0/0xe0 [ 636.996607][T16245] ? __lock_acquire+0x7d80/0x7d80 [ 637.001671][T16245] ? mark_lock+0x94/0x320 [ 637.006047][T16245] should_fail_ex+0x394/0x4c0 [ 637.010780][T16245] should_failslab+0x9/0x20 [ 637.015334][T16245] slab_pre_alloc_hook+0x59/0x300 [ 637.020399][T16245] ? tracing_gen_ctx_irq_test+0xbc/0x140 [ 637.026079][T16245] ? perf_swevent_event+0x4be/0x570 [ 637.031314][T16245] ? __get_vm_area_node+0x125/0x370 [ 637.036556][T16245] __kmem_cache_alloc_node+0x53/0x250 [ 637.041981][T16245] ? __get_vm_area_node+0x125/0x370 [ 637.047228][T16245] kmalloc_node_trace+0x26/0xe0 [ 637.052136][T16245] __get_vm_area_node+0x125/0x370 [ 637.057211][T16245] __vmalloc_node_range+0x36f/0x1320 [ 637.062542][T16245] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 637.068135][T16245] ? mark_lock+0x94/0x320 [ 637.072534][T16245] ? aa_get_newest_label+0xfd/0x5c0 [ 637.077778][T16245] ? free_vm_area+0x50/0x50 [ 637.082336][T16245] ? end_current_label_crit_section+0x170/0x170 [ 637.088635][T16245] ? verify_lock_unused+0x140/0x140 [ 637.093885][T16245] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 637.099478][T16245] __vmalloc+0x7a/0x90 [ 637.103590][T16245] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 637.109190][T16245] bpf_prog_alloc_no_stats+0x46/0x430 [ 637.114970][T16245] bpf_prog_alloc+0x3d/0x1a0 [ 637.119606][T16245] bpf_prog_load+0x6b2/0x1610 [ 637.124336][T16245] ? map_freeze+0x420/0x420 [ 637.128884][T16245] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 637.135085][T16245] ? lockdep_hardirqs_on+0x98/0x150 [ 637.140331][T16245] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 637.146543][T16245] ? __sys_bpf+0x5a5/0x890 [ 637.151027][T16245] __sys_bpf+0x5ba/0x890 [ 637.155314][T16245] ? bpf_link_show_fdinfo+0x390/0x390 [ 637.160743][T16245] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 637.166961][T16245] __x64_sys_bpf+0x7c/0x90 [ 637.171409][T16245] do_syscall_64+0x55/0xb0 [ 637.175862][T16245] ? clear_bhb_loop+0x40/0x90 [ 637.180575][T16245] ? clear_bhb_loop+0x40/0x90 [ 637.185293][T16245] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 637.191236][T16245] RIP: 0033:0x7f6c0339ce59 [ 637.195688][T16245] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 637.215346][T16245] RSP: 002b:00007f6c041f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 637.223813][T16245] RAX: ffffffffffffffda RBX: 00007f6c03615fa0 RCX: 00007f6c0339ce59 [ 637.231837][T16245] RDX: 0000000000000094 RSI: 0000200000000700 RDI: 0000000000000005 [ 637.239851][T16245] RBP: 00007f6c041f6090 R08: 0000000000000000 R09: 0000000000000000 [ 637.247833][T16245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 637.255802][T16245] R13: 00007f6c03616038 R14: 00007f6c03615fa0 R15: 00007fff00f6af88 [ 637.263873][T16245] [ 637.290104][T16245] syz.0.3553: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 637.313641][T16245] CPU: 0 PID: 16245 Comm: syz.0.3553 Not tainted syzkaller #0 [ 637.321191][T16245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 637.331304][T16245] Call Trace: [ 637.334604][T16245] [ 637.337562][T16245] dump_stack_lvl+0x18c/0x250 [ 637.342281][T16245] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 637.348476][T16245] ? show_regs_print_info+0x20/0x20 [ 637.353710][T16245] ? load_image+0x420/0x420 [ 637.358256][T16245] warn_alloc+0x246/0x340 [ 637.362622][T16245] ? __get_vm_area_node+0x125/0x370 [ 637.367855][T16245] ? zone_watermark_ok_safe+0x230/0x230 [ 637.373434][T16245] ? rcu_is_watching+0x15/0xb0 [ 637.378240][T16245] ? __get_vm_area_node+0x356/0x370 [ 637.383488][T16245] __vmalloc_node_range+0x394/0x1320 [ 637.388810][T16245] ? mark_lock+0x94/0x320 [ 637.393188][T16245] ? aa_get_newest_label+0xfd/0x5c0 [ 637.398423][T16245] ? free_vm_area+0x50/0x50 [ 637.402954][T16245] ? end_current_label_crit_section+0x170/0x170 [ 637.409212][T16245] ? verify_lock_unused+0x140/0x140 [ 637.414448][T16245] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 637.420007][T16245] __vmalloc+0x7a/0x90 [ 637.424097][T16245] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 637.429667][T16245] bpf_prog_alloc_no_stats+0x46/0x430 [ 637.435054][T16245] bpf_prog_alloc+0x3d/0x1a0 [ 637.439652][T16245] bpf_prog_load+0x6b2/0x1610 [ 637.444333][T16245] ? map_freeze+0x420/0x420 [ 637.448833][T16245] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 637.454990][T16245] ? lockdep_hardirqs_on+0x98/0x150 [ 637.460192][T16245] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 637.466356][T16245] ? __sys_bpf+0x5a5/0x890 [ 637.470858][T16245] __sys_bpf+0x5ba/0x890 [ 637.475115][T16245] ? bpf_link_show_fdinfo+0x390/0x390 [ 637.480510][T16245] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 637.486677][T16245] __x64_sys_bpf+0x7c/0x90 [ 637.491097][T16245] do_syscall_64+0x55/0xb0 [ 637.495512][T16245] ? clear_bhb_loop+0x40/0x90 [ 637.500187][T16245] ? clear_bhb_loop+0x40/0x90 [ 637.504871][T16245] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 637.510781][T16245] RIP: 0033:0x7f6c0339ce59 [ 637.515226][T16245] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 637.534866][T16245] RSP: 002b:00007f6c041f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 637.543324][T16245] RAX: ffffffffffffffda RBX: 00007f6c03615fa0 RCX: 00007f6c0339ce59 [ 637.551338][T16245] RDX: 0000000000000094 RSI: 0000200000000700 RDI: 0000000000000005 [ 637.559348][T16245] RBP: 00007f6c041f6090 R08: 0000000000000000 R09: 0000000000000000 [ 637.567352][T16245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 637.575361][T16245] R13: 00007f6c03616038 R14: 00007f6c03615fa0 R15: 00007fff00f6af88 [ 637.583370][T16245] [ 637.598404][T16245] Mem-Info: [ 637.602470][T16245] active_anon:25726 inactive_anon:0 isolated_anon:0 [ 637.602470][T16245] active_file:18490 inactive_file:40174 isolated_file:0 [ 637.602470][T16245] unevictable:768 dirty:84 writeback:0 [ 637.602470][T16245] slab_reclaimable:10819 slab_unreclaimable:94192 [ 637.602470][T16245] mapped:24873 shmem:17776 pagetables:531 [ 637.602470][T16245] sec_pagetables:0 bounce:0 [ 637.602470][T16245] kernel_misc_reclaimable:0 [ 637.602470][T16245] free:1323038 free_pcp:9140 free_cma:0 [ 637.663377][T16245] Node 0 active_anon:102904kB inactive_anon:0kB active_file:73960kB inactive_file:160496kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:99492kB dirty:336kB writeback:0kB shmem:69568kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10088kB pagetables:2124kB sec_pagetables:0kB all_unreclaimable? no [ 637.706473][T16245] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 637.739704][T16245] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 637.787775][T16245] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 637.793773][T16245] Node 0 DMA32 free:1389792kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:99368kB inactive_anon:0kB active_file:73960kB inactive_file:159664kB unevictable:1536kB writepending:336kB present:3129332kB managed:2586936kB mlocked:0kB bounce:0kB free_pcp:22752kB local_pcp:12396kB free_cma:0kB [ 637.843056][T16254] netlink: 'syz.3.3555': attribute type 11 has an invalid length. [ 637.924384][T16254] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3555'. [ 637.965087][T16245] lowmem_reserve[]: 0 0 0 0 0 [ 637.969917][T16245] Node 0 Normal free:4kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:832kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 638.068536][T16245] lowmem_reserve[]: 0 0 0 0 0 [ 638.098230][T16245] Node 1 Normal free:3887252kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:18876kB local_pcp:10304kB free_cma:0kB [ 638.213696][T16245] lowmem_reserve[]: 0 0 0 0 0 [ 638.218513][T16245] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 638.263340][T16245] Node 0 DMA32: 1783*4kB (UM) 1048*8kB (UME) 456*16kB (UME) 293*32kB (UME) 222*64kB (U) 716*128kB (UM) 232*256kB (UM) 142*512kB (UME) 98*1024kB (UME) 5*2048kB (UM) 248*4096kB (UM) = 1396540kB [ 638.349496][T16245] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 638.392377][T16245] Node 1 Normal: 171*4kB (UME) 55*8kB (UME) 49*16kB (UME) 177*32kB (UME) 42*64kB (UME) 7*128kB (UME) 1*256kB (M) 2*512kB (UE) 0*1024kB 2*2048kB (UE) 945*4096kB (M) = 3887252kB [ 638.441440][T16245] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 638.462520][T16245] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 638.488019][T16245] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 638.517750][T16245] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 638.537758][T16245] 66725 total pagecache pages [ 638.556439][T16245] 0 pages in swap cache [ 638.569614][T16245] Free swap = 124996kB [ 638.595631][T16245] Total swap = 124996kB [ 638.599857][T16245] 2097051 pages RAM [ 638.618204][T16245] 0 pages HighMem/MovableOnly [ 638.622947][T16245] 416931 pages reserved [ 638.645781][T16245] 0 pages cma reserved [ 641.435466][T16273] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 641.441493][T16273] syzkaller1: linktype set to 769 [ 642.847757][T16311] FAULT_INJECTION: forcing a failure. [ 642.847757][T16311] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 642.870564][T16311] CPU: 1 PID: 16311 Comm: syz.2.3571 Not tainted syzkaller #0 [ 642.878117][T16311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 642.888192][T16311] Call Trace: [ 642.891484][T16311] [ 642.894427][T16311] dump_stack_lvl+0x18c/0x250 [ 642.899147][T16311] ? show_regs_print_info+0x20/0x20 [ 642.904364][T16311] ? load_image+0x420/0x420 [ 642.908891][T16311] ? __lock_acquire+0x7d80/0x7d80 [ 642.913932][T16311] ? snprintf+0xe9/0x140 [ 642.918239][T16311] should_fail_ex+0x394/0x4c0 [ 642.922943][T16311] _copy_to_user+0x2f/0xa0 [ 642.927374][T16311] simple_read_from_buffer+0xe7/0x150 [ 642.932762][T16311] proc_fail_nth_read+0x1e8/0x260 [ 642.937802][T16311] ? proc_fault_inject_write+0x360/0x360 [ 642.943442][T16311] ? fsnotify_perm+0x271/0x5e0 [ 642.948207][T16311] ? proc_fault_inject_write+0x360/0x360 [ 642.953845][T16311] vfs_read+0x298/0x990 [ 642.958009][T16311] ? kernel_read+0x1e0/0x1e0 [ 642.962602][T16311] ? __fget_files+0x28/0x460 [ 642.967194][T16311] ? __fget_files+0x3fc/0x460 [ 642.971880][T16311] ? __fdget_pos+0x2a3/0x330 [ 642.976467][T16311] ? ksys_read+0x74/0x260 [ 642.980799][T16311] ksys_read+0x151/0x260 [ 642.985046][T16311] ? vfs_write+0x9a0/0x9a0 [ 642.989470][T16311] ? lockdep_hardirqs_on+0x98/0x150 [ 642.994706][T16311] do_syscall_64+0x55/0xb0 [ 642.999157][T16311] ? clear_bhb_loop+0x40/0x90 [ 643.003851][T16311] ? clear_bhb_loop+0x40/0x90 [ 643.008547][T16311] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 643.014542][T16311] RIP: 0033:0x7f2ff615d68e [ 643.018961][T16311] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 643.038569][T16311] RSP: 002b:00007f2ff7057fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 643.046985][T16311] RAX: ffffffffffffffda RBX: 00007f2ff70586c0 RCX: 00007f2ff615d68e [ 643.054954][T16311] RDX: 000000000000000f RSI: 00007f2ff70580a0 RDI: 0000000000000004 [ 643.062919][T16311] RBP: 00007f2ff7058090 R08: 0000000000000000 R09: 0000000000000000 [ 643.070884][T16311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 643.078854][T16311] R13: 00007f2ff6416038 R14: 00007f2ff6415fa0 R15: 00007ffcb9f8d1a8 [ 643.086842][T16311] [ 643.737396][T16326] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 643.744004][T16326] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 647.257884][T16349] bridge0: port 1(bridge_slave_0) entered disabled state [ 647.266126][T16349] bridge0: entered allmulticast mode [ 647.287022][T16351] netlink: 'syz.0.3583': attribute type 1 has an invalid length. [ 647.427492][T16356] netlink: 'syz.3.3585': attribute type 1 has an invalid length. [ 647.441800][T16360] raw_sendmsg: syz.2.3586 forgot to set AF_INET. Fix it! [ 648.019252][T16380] netlink: 212912 bytes leftover after parsing attributes in process `syz.0.3595'. [ 648.028766][T16380] openvswitch: netlink: IP tunnel dst address not specified [ 648.227512][T16384] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3597'. [ 648.296112][T16386] netlink: 'syz.0.3598': attribute type 10 has an invalid length. [ 648.318444][T16386] team0: Port device geneve1 added [ 650.498996][T16418] FAULT_INJECTION: forcing a failure. [ 650.498996][T16418] name failslab, interval 1, probability 0, space 0, times 0 [ 650.521421][T16421] netlink: 'syz.0.3610': attribute type 10 has an invalid length. [ 650.521885][T16418] CPU: 0 PID: 16418 Comm: syz.3.3608 Not tainted syzkaller #0 [ 650.536773][T16418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 650.546849][T16418] Call Trace: [ 650.550154][T16418] [ 650.553104][T16418] dump_stack_lvl+0x18c/0x250 [ 650.557816][T16418] ? sctp_sendmsg+0x1519/0x27b0 [ 650.562691][T16418] ? ___sys_sendmsg+0x2a6/0x360 [ 650.567557][T16418] ? show_regs_print_info+0x20/0x20 [ 650.572762][T16418] ? load_image+0x420/0x420 [ 650.577277][T16418] should_fail_ex+0x394/0x4c0 [ 650.581970][T16418] should_failslab+0x9/0x20 [ 650.586503][T16418] slab_pre_alloc_hook+0x59/0x300 [ 650.591534][T16418] ? sctp_add_bind_addr+0x8c/0x360 [ 650.596650][T16418] __kmem_cache_alloc_node+0x53/0x250 [ 650.602026][T16418] ? sctp_add_bind_addr+0x8c/0x360 [ 650.607137][T16418] kmalloc_trace+0x2a/0xe0 [ 650.611556][T16418] sctp_add_bind_addr+0x8c/0x360 [ 650.616499][T16418] sctp_copy_local_addr_list+0x31b/0x4e0 [ 650.622226][T16418] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 650.628043][T16418] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 650.634115][T16418] ? sctp_v6_is_any+0x64/0x70 [ 650.638790][T16418] ? sctp_copy_one_addr+0x8c/0x350 [ 650.643979][T16418] sctp_bind_addr_copy+0xb3/0x3c0 [ 650.649008][T16418] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 650.655341][T16418] sctp_connect_new_asoc+0x2f9/0x6a0 [ 650.660641][T16418] ? __sctp_connect+0xd80/0xd80 [ 650.665492][T16418] ? __local_bh_enable_ip+0x13a/0x1c0 [ 650.670868][T16418] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 650.676418][T16418] ? security_sctp_bind_connect+0x89/0xb0 [ 650.682144][T16418] sctp_sendmsg+0x1519/0x27b0 [ 650.686834][T16418] ? sctp_getsockopt+0xb60/0xb60 [ 650.691772][T16418] ? aa_sk_perm+0x83c/0x970 [ 650.696284][T16418] ? aa_af_perm+0x330/0x330 [ 650.700781][T16418] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 650.707198][T16418] ? sock_rps_record_flow+0x19/0x3f0 [ 650.712489][T16418] ? inet_sendmsg+0xce/0x2a0 [ 650.717077][T16418] ? inet_send_prepare+0x250/0x250 [ 650.722195][T16418] ____sys_sendmsg+0x61b/0x980 [ 650.726973][T16418] ? __sys_sendmsg_sock+0x30/0x30 [ 650.731993][T16418] ? __import_iovec+0x5f2/0x850 [ 650.736855][T16418] ? import_iovec+0x73/0xa0 [ 650.741359][T16418] ___sys_sendmsg+0x2a6/0x360 [ 650.746045][T16418] ? get_pid_task+0x20/0x1e0 [ 650.750644][T16418] ? __sys_sendmsg+0x2b0/0x2b0 [ 650.755427][T16418] ? __lock_acquire+0x7d80/0x7d80 [ 650.760473][T16418] __se_sys_sendmsg+0x1d0/0x2c0 [ 650.765328][T16418] ? __x64_sys_sendmsg+0x80/0x80 [ 650.770286][T16418] ? lockdep_hardirqs_on+0x98/0x150 [ 650.775494][T16418] do_syscall_64+0x55/0xb0 [ 650.779918][T16418] ? clear_bhb_loop+0x40/0x90 [ 650.784604][T16418] ? clear_bhb_loop+0x40/0x90 [ 650.789279][T16418] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 650.795179][T16418] RIP: 0033:0x7f948f39ce59 [ 650.799607][T16418] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 650.819213][T16418] RSP: 002b:00007f9490196028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 650.827653][T16418] RAX: ffffffffffffffda RBX: 00007f948f615fa0 RCX: 00007f948f39ce59 [ 650.835624][T16418] RDX: 0000000000000041 RSI: 0000200000000600 RDI: 0000000000000003 [ 650.843594][T16418] RBP: 00007f9490196090 R08: 0000000000000000 R09: 0000000000000000 [ 650.851564][T16418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 650.859533][T16418] R13: 00007f948f616038 R14: 00007f948f615fa0 R15: 00007fffee9cbcc8 [ 650.867526][T16418] [ 651.405520][T16436] netlink: 'syz.2.3615': attribute type 3 has an invalid length. [ 651.414613][T16436] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3615'. [ 651.428561][T16436] tun0: tun_chr_ioctl cmd 1074812118 [ 651.981472][T16444] netlink: 184 bytes leftover after parsing attributes in process `syz.2.3618'. [ 651.992117][T16444] bond0: entered allmulticast mode [ 652.006687][T16444] bond_slave_1: entered allmulticast mode [ 652.012661][T16444] bridge_slave_1: entered allmulticast mode [ 652.131832][T16452] netlink: 'syz.0.3625': attribute type 3 has an invalid length. [ 652.143681][T16452] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3625'. [ 652.176062][T16452] tun0: tun_chr_ioctl cmd 1074812118 [ 652.275061][T16458] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3622'. [ 652.310987][T16458] team0: Port device team_slave_0 removed [ 652.318177][T16458] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 652.655799][T16471] bridge0: port 2(team0) entered disabled state [ 652.662807][T16471] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.676722][T16471] bridge0: entered allmulticast mode [ 653.506249][T16485] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3631'. [ 656.411185][T16489] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.3633'. [ 656.423881][T16494] bridge0: port 3(batadv0) entered blocking state [ 656.430401][T16494] bridge0: port 3(batadv0) entered disabled state [ 656.443956][T16494] batadv0: entered allmulticast mode [ 656.450320][T16494] batadv0: entered promiscuous mode [ 656.474038][T16494] bridge0: port 3(batadv0) entered blocking state [ 656.480656][T16494] bridge0: port 3(batadv0) entered forwarding state [ 656.498507][ T11] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 656.507975][ T11] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 656.646824][T16509] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3638'. [ 656.663420][T16509] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3638'. [ 656.694534][T16504] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3638'. [ 656.998932][T16522] netlink: 'syz.0.3642': attribute type 3 has an invalid length. [ 657.010570][T16522] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3642'. [ 657.022777][T16522] tun0: tun_chr_ioctl cmd 1074812118 [ 657.497309][T16527] netlink: 'syz.1.3645': attribute type 39 has an invalid length. [ 657.970671][T16541] FAULT_INJECTION: forcing a failure. [ 657.970671][T16541] name failslab, interval 1, probability 0, space 0, times 0 [ 658.018217][T16541] CPU: 1 PID: 16541 Comm: syz.3.3651 Not tainted syzkaller #0 [ 658.025774][T16541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 658.035865][T16541] Call Trace: [ 658.039174][T16541] [ 658.042123][T16541] dump_stack_lvl+0x18c/0x250 [ 658.046837][T16541] ? show_regs_print_info+0x20/0x20 [ 658.052067][T16541] ? load_image+0x420/0x420 [ 658.056601][T16541] ? __might_sleep+0xe0/0xe0 [ 658.061234][T16541] ? __lock_acquire+0x7d80/0x7d80 [ 658.066294][T16541] should_fail_ex+0x394/0x4c0 [ 658.071012][T16541] should_failslab+0x9/0x20 [ 658.075541][T16541] slab_pre_alloc_hook+0x59/0x300 [ 658.080581][T16541] kmem_cache_alloc+0x5a/0x2c0 [ 658.085343][T16541] ? security_file_alloc+0x34/0x120 [ 658.090538][T16541] security_file_alloc+0x34/0x120 [ 658.095564][T16541] init_file+0x94/0x1f0 [ 658.099754][T16541] alloc_empty_file+0xb7/0x1d0 [ 658.104553][T16541] alloc_file+0x5b/0x600 [ 658.108828][T16541] alloc_file_pseudo+0x184/0x210 [ 658.113778][T16541] ? alloc_empty_backing_file+0xe0/0xe0 [ 658.119331][T16541] ? _raw_spin_unlock+0x28/0x40 [ 658.124193][T16541] anon_inode_getfd+0xca/0x1c0 [ 658.128964][T16541] btf_new_fd+0x848/0x9e0 [ 658.133310][T16541] ? bpf_btf_show_fdinfo+0x80/0x80 [ 658.138423][T16541] ? capable+0x88/0xe0 [ 658.142494][T16541] __sys_bpf+0x670/0x890 [ 658.146739][T16541] ? bpf_link_show_fdinfo+0x390/0x390 [ 658.152118][T16541] ? lock_chain_count+0x20/0x20 [ 658.156974][T16541] __x64_sys_bpf+0x7c/0x90 [ 658.161392][T16541] do_syscall_64+0x55/0xb0 [ 658.165814][T16541] ? clear_bhb_loop+0x40/0x90 [ 658.170485][T16541] ? clear_bhb_loop+0x40/0x90 [ 658.175161][T16541] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 658.181057][T16541] RIP: 0033:0x7f948f39ce59 [ 658.185473][T16541] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 658.205077][T16541] RSP: 002b:00007f9490196028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 658.213490][T16541] RAX: ffffffffffffffda RBX: 00007f948f615fa0 RCX: 00007f948f39ce59 [ 658.221456][T16541] RDX: 0000000000000028 RSI: 0000200000000140 RDI: 0000000000000012 [ 658.229422][T16541] RBP: 00007f9490196090 R08: 0000000000000000 R09: 0000000000000000 [ 658.237388][T16541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 658.245357][T16541] R13: 00007f948f616038 R14: 00007f948f615fa0 R15: 00007fffee9cbcc8 [ 658.253339][T16541] [ 658.818009][T16558] netlink: 'syz.2.3658': attribute type 3 has an invalid length. [ 658.846650][T16558] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3658'. [ 658.913027][T16561] tun0: tun_chr_ioctl cmd 1074812118 [ 659.270816][T16575] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3665'. [ 660.002099][T16589] netlink: 'syz.0.3669': attribute type 3 has an invalid length. [ 660.010936][T16589] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3669'. [ 660.028033][T16589] tun0: tun_chr_ioctl cmd 1074812118 [ 660.971388][T16605] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3675'. [ 661.122884][T16621] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3680'. [ 662.210230][T16641] netlink: 'syz.1.3686': attribute type 3 has an invalid length. [ 662.220354][T16641] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3686'. [ 662.236592][T16641] tun0: tun_chr_ioctl cmd 1074812118 [ 662.834300][T16657] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3690'. [ 662.889692][T16652] netlink: 'syz.1.3690': attribute type 28 has an invalid length. [ 662.925998][T16652] netlink: 'syz.1.3690': attribute type 29 has an invalid length. [ 662.947008][T16652] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3690'. [ 663.262716][T16673] netlink: 'syz.1.3698': attribute type 3 has an invalid length. [ 663.271559][T16673] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3698'. [ 663.285825][T16673] tun0: tun_chr_ioctl cmd 1074812118 [ 664.509498][T16694] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.3706'. [ 664.573150][T16692] netlink: 209840 bytes leftover after parsing attributes in process `syz.0.3705'. [ 664.720752][T16697] netlink: 763 bytes leftover after parsing attributes in process `syz.2.3707'. [ 665.078880][T16703] delete_channel: no stack [ 665.225887][T16715] netlink: 16182 bytes leftover after parsing attributes in process `syz.1.3711'. [ 665.249369][T16715] netlink: 'syz.1.3711': attribute type 4 has an invalid length. [ 665.294331][T16716] netlink: 'syz.2.3710': attribute type 3 has an invalid length. [ 665.314410][T16716] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3710'. [ 665.344067][T16721] tun0: tun_chr_ioctl cmd 1074812118 [ 665.474224][T16729] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3715'. [ 665.508426][T16725] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3715'. [ 665.534322][T16731] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3715'. [ 666.425354][T16758] netlink: 'syz.1.3726': attribute type 3 has an invalid length. [ 666.434856][T16758] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3726'. [ 666.446078][T16758] tun0: tun_chr_ioctl cmd 1074812118 [ 666.651999][T16760] netlink: 'syz.3.3728': attribute type 1 has an invalid length. [ 666.660951][T16760] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.3728'. [ 666.703787][T16766] netlink: 'syz.0.3735': attribute type 3 has an invalid length. [ 666.728425][T16766] tun0: tun_chr_ioctl cmd 1074812118 [ 667.651532][T16780] batadv0: left allmulticast mode [ 667.670447][T16780] batadv0: left promiscuous mode [ 667.713955][T16780] bridge0: port 3(batadv0) entered disabled state [ 667.746458][T16780] bridge_slave_0: left allmulticast mode [ 667.752181][T16780] bridge_slave_0: left promiscuous mode [ 667.784917][T16780] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.105791][T16796] FAULT_INJECTION: forcing a failure. [ 668.105791][T16796] name failslab, interval 1, probability 0, space 0, times 0 [ 668.128854][T16796] CPU: 0 PID: 16796 Comm: syz.2.3739 Not tainted syzkaller #0 [ 668.136411][T16796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 668.146513][T16796] Call Trace: [ 668.149825][T16796] [ 668.152783][T16796] dump_stack_lvl+0x18c/0x250 [ 668.157507][T16796] ? show_regs_print_info+0x20/0x20 [ 668.162755][T16796] ? load_image+0x420/0x420 [ 668.167296][T16796] ? __might_sleep+0xe0/0xe0 [ 668.171932][T16796] ? __lock_acquire+0x7d80/0x7d80 [ 668.177003][T16796] should_fail_ex+0x394/0x4c0 [ 668.181732][T16796] should_failslab+0x9/0x20 [ 668.186282][T16796] slab_pre_alloc_hook+0x59/0x300 [ 668.191355][T16796] ? __xdp_reg_mem_model+0x1e3/0x5a0 [ 668.196680][T16796] __kmem_cache_alloc_node+0x53/0x250 [ 668.202097][T16796] ? __asan_memset+0x22/0x40 [ 668.206737][T16796] ? __xdp_reg_mem_model+0x1e3/0x5a0 [ 668.212064][T16796] kmalloc_trace+0x2a/0xe0 [ 668.216533][T16796] __xdp_reg_mem_model+0x1e3/0x5a0 [ 668.221699][T16796] ? kvmalloc_node+0x70/0x180 [ 668.226435][T16796] ? kvmalloc_node+0x70/0x180 [ 668.231161][T16796] ? xdp_reg_mem_model+0x40/0x40 [ 668.236156][T16796] xdp_reg_mem_model+0x22/0x40 [ 668.240965][T16796] bpf_test_run_xdp_live+0x262/0x1b30 [ 668.246388][T16796] ? verify_lock_unused+0x140/0x140 [ 668.251638][T16796] ? kasan_set_track+0x4e/0x70 [ 668.256443][T16796] ? __kasan_kmalloc+0x8f/0xa0 [ 668.261250][T16796] ? __kmalloc+0xb7/0x240 [ 668.265626][T16796] ? bpf_test_init+0x9f/0x140 [ 668.270347][T16796] ? bpf_prog_test_run+0x31f/0x390 [ 668.275483][T16796] ? __sys_bpf+0x49d/0x890 [ 668.275514][T16796] ? __x64_sys_bpf+0x7c/0x90 [ 668.275531][T16796] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 668.275569][T16796] ? xdp_convert_md_to_buff+0x330/0x330 [ 668.275627][T16796] ? __lock_acquire+0x7d80/0x7d80 [ 668.275652][T16796] ? __virt_addr_valid+0x10c/0x380 [ 668.275681][T16796] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 668.275709][T16796] ? _copy_from_user+0xa5/0xe0 [ 668.275732][T16796] ? bpf_test_init+0x119/0x140 [ 668.275750][T16796] ? xdp_convert_md_to_buff+0x5b/0x330 [ 668.275776][T16796] bpf_prog_test_run_xdp+0x7d8/0x1140 [ 668.298592][T16790] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 668.301399][T16796] ? __lock_acquire+0x7d80/0x7d80 [ 668.301452][T16796] ? dev_put+0x80/0x80 [ 668.301490][T16796] ? dev_put+0x80/0x80 [ 668.301513][T16796] bpf_prog_test_run+0x31f/0x390 [ 668.301541][T16796] __sys_bpf+0x49d/0x890 [ 668.363623][T16796] ? bpf_link_show_fdinfo+0x390/0x390 [ 668.369056][T16796] ? lock_chain_count+0x20/0x20 [ 668.373942][T16796] __x64_sys_bpf+0x7c/0x90 [ 668.378388][T16796] do_syscall_64+0x55/0xb0 [ 668.382827][T16796] ? clear_bhb_loop+0x40/0x90 [ 668.387533][T16796] ? clear_bhb_loop+0x40/0x90 [ 668.392253][T16796] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 668.398184][T16796] RIP: 0033:0x7f2ff619ce59 [ 668.402628][T16796] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 668.422271][T16796] RSP: 002b:00007f2ff7058028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 668.430717][T16796] RAX: ffffffffffffffda RBX: 00007f2ff6415fa0 RCX: 00007f2ff619ce59 [ 668.438722][T16796] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 000000000000000a [ 668.446725][T16796] RBP: 00007f2ff7058090 R08: 0000000000000000 R09: 0000000000000000 [ 668.454732][T16796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 668.462728][T16796] R13: 00007f2ff6416038 R14: 00007f2ff6415fa0 R15: 00007ffcb9f8d1a8 [ 668.470772][T16796] [ 668.473927][T16790] CPU: 1 PID: 16790 Comm: syz.3.3737 Not tainted syzkaller #0 [ 668.481442][T16790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 668.491547][T16790] Call Trace: [ 668.494872][T16790] [ 668.497835][T16790] dump_stack_lvl+0x18c/0x250 [ 668.502571][T16790] ? lockdep_hardirqs_on+0x98/0x150 [ 668.507824][T16790] ? show_regs_print_info+0x20/0x20 [ 668.513074][T16790] ? dump_stack+0x9/0x20 [ 668.517368][T16790] ? __sanitizer_cov_trace_pc+0x42/0x60 [ 668.522962][T16790] sysfs_warn_dup+0x8e/0xa0 [ 668.527517][T16790] sysfs_do_create_link_sd+0xc0/0x110 [ 668.532936][T16790] device_add_class_symlinks+0x1cf/0x240 [ 668.538599][T16790] device_add+0x4f9/0xc40 [ 668.542947][T16790] wiphy_register+0x1d99/0x2ac0 [ 668.547828][T16790] ? cfg80211_event_work+0x40/0x40 [ 668.552947][T16790] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 668.559120][T16790] ? ieee80211_register_hw+0x29bb/0x3b30 [ 668.564770][T16790] ieee80211_register_hw+0x2dd8/0x3b30 [ 668.570253][T16790] ? ieee80211_register_hw+0xfc1/0x3b30 [ 668.575819][T16790] ? ieee80211_tasklet_handler+0x20/0x20 [ 668.581453][T16790] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 668.587448][T16790] ? __debug_object_init+0xec/0x450 [ 668.592660][T16790] ? __asan_memset+0x22/0x40 [ 668.597258][T16790] ? __hrtimer_init+0x189/0x270 [ 668.602115][T16790] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 668.607893][T16790] ? mac80211_hwsim_free+0x220/0x220 [ 668.613183][T16790] ? rcu_is_watching+0x15/0xb0 [ 668.617964][T16790] ? kstrndup+0xbd/0x140 [ 668.622221][T16790] hwsim_new_radio_nl+0xdad/0x1a70 [ 668.627350][T16790] ? __nla_validate+0x50/0x50 [ 668.632044][T16790] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 668.638425][T16790] ? __nla_parse+0x40/0x50 [ 668.642852][T16790] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 668.649192][T16790] genl_family_rcv_msg_doit+0x21a/0x310 [ 668.654755][T16790] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 668.660650][T16790] ? lockdep_hardirqs_on+0x98/0x150 [ 668.665868][T16790] ? genl_rcv_msg+0x5ef/0x7a0 [ 668.670556][T16790] genl_rcv_msg+0x611/0x7a0 [ 668.675083][T16790] ? genl_bind+0x360/0x360 [ 668.679512][T16790] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 668.685853][T16790] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 668.692463][T16790] netlink_rcv_skb+0x235/0x4c0 [ 668.697238][T16790] ? genl_bind+0x360/0x360 [ 668.701660][T16790] ? netlink_ack+0x1160/0x1160 [ 668.706439][T16790] ? __lock_acquire+0x7d80/0x7d80 [ 668.711477][T16790] ? down_read+0x1ac/0x2e0 [ 668.715910][T16790] genl_rcv+0x28/0x40 [ 668.719897][T16790] netlink_unicast+0x7b1/0x930 [ 668.724672][T16790] netlink_sendmsg+0x8d0/0xbf0 [ 668.729446][T16790] ? netlink_getsockopt+0x590/0x590 [ 668.734648][T16790] ? aa_sock_msg_perm+0x94/0x150 [ 668.739593][T16790] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 668.744883][T16790] ? security_socket_sendmsg+0x80/0xa0 [ 668.750343][T16790] ? netlink_getsockopt+0x590/0x590 [ 668.755635][T16790] ____sys_sendmsg+0x61b/0x980 [ 668.760420][T16790] ? __asan_memset+0x22/0x40 [ 668.765020][T16790] ? __sys_sendmsg_sock+0x30/0x30 [ 668.770054][T16790] ? __import_iovec+0x5f2/0x850 [ 668.774921][T16790] ? import_iovec+0x73/0xa0 [ 668.779431][T16790] ___sys_sendmsg+0x2a6/0x360 [ 668.784118][T16790] ? __sys_sendmsg+0x2b0/0x2b0 [ 668.788932][T16790] __se_sys_sendmsg+0x1d0/0x2c0 [ 668.793787][T16790] ? __x64_sys_sendmsg+0x80/0x80 [ 668.798744][T16790] ? syscall_enter_from_user_mode+0x2e/0x80 [ 668.804659][T16790] do_syscall_64+0x55/0xb0 [ 668.809084][T16790] ? clear_bhb_loop+0x40/0x90 [ 668.813788][T16790] ? clear_bhb_loop+0x40/0x90 [ 668.818471][T16790] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 668.824372][T16790] RIP: 0033:0x7f948f39ce59 [ 668.828789][T16790] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 668.848403][T16790] RSP: 002b:00007f9490196028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 668.856830][T16790] RAX: ffffffffffffffda RBX: 00007f948f615fa0 RCX: 00007f948f39ce59 [ 668.864813][T16790] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 668.872784][T16790] RBP: 00007f948f432e6f R08: 0000000000000000 R09: 0000000000000000 [ 668.880751][T16790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 668.888718][T16790] R13: 00007f948f616038 R14: 00007f948f615fa0 R15: 00007fffee9cbcc8 [ 668.896710][T16790] [ 669.147623][T16806] netlink: 'syz.2.3743': attribute type 3 has an invalid length. [ 669.181296][T16806] tun0: tun_chr_ioctl cmd 1074812118 [ 669.558638][T16815] __nla_validate_parse: 3 callbacks suppressed [ 669.558852][T16815] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3745'. [ 669.615196][T16815] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 670.504179][T16843] netlink: 'syz.2.3753': attribute type 3 has an invalid length. [ 670.513649][T16843] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3753'. [ 670.530659][T16843] tun0: tun_chr_ioctl cmd 1074812118 [ 671.226322][T16868] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3759'. [ 671.396574][T16876] netlink: 'syz.3.3764': attribute type 3 has an invalid length. [ 671.405441][T16876] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3764'. [ 671.418419][T16876] tun0: tun_chr_ioctl cmd 1074812118 [ 672.160078][T16892] tap0: tun_chr_ioctl cmd 1074025677 [ 672.167572][T16892] tap0: linktype set to 778 [ 672.186005][T16892] netlink: 'syz.3.3769': attribute type 3 has an invalid length. [ 672.194894][T16892] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.3769'. [ 672.518746][T16907] netlink: 'syz.0.3775': attribute type 3 has an invalid length. [ 672.534716][T16907] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3775'. [ 672.547296][T16907] tun0: tun_chr_ioctl cmd 1074812118 [ 672.561660][T16910] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3777'. [ 672.571450][T16910] dummy0: entered promiscuous mode [ 672.581947][T16910] dummy0: entered allmulticast mode [ 673.953919][T16934] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.3786'. [ 674.000265][T16937] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3788'. [ 675.110193][T16957] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3795'. [ 675.245525][T16962] netlink: 'syz.3.3796': attribute type 3 has an invalid length. [ 675.253940][T16962] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3796'. [ 675.273546][T16962] tun0: tun_chr_ioctl cmd 1074812118 [ 675.320671][T16964] FAULT_INJECTION: forcing a failure. [ 675.320671][T16964] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 675.343932][T16964] CPU: 0 PID: 16964 Comm: syz.2.3797 Not tainted syzkaller #0 [ 675.351462][T16964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 675.361540][T16964] Call Trace: [ 675.364838][T16964] [ 675.367785][T16964] dump_stack_lvl+0x18c/0x250 [ 675.372500][T16964] ? show_regs_print_info+0x20/0x20 [ 675.377728][T16964] ? load_image+0x420/0x420 [ 675.382259][T16964] ? __might_fault+0xaa/0x120 [ 675.386967][T16964] ? __lock_acquire+0x7d80/0x7d80 [ 675.392015][T16964] should_fail_ex+0x394/0x4c0 [ 675.396703][T16964] _copy_from_user+0x2f/0xe0 [ 675.401326][T16964] kstrtouint_from_user+0xde/0x170 [ 675.406463][T16964] ? kstrtol_from_user+0x190/0x190 [ 675.411600][T16964] proc_fail_nth_write+0x8f/0x250 [ 675.416639][T16964] ? proc_fail_nth_read+0x260/0x260 [ 675.421881][T16964] ? proc_fail_nth_read+0x260/0x260 [ 675.427115][T16964] vfs_write+0x299/0x9a0 [ 675.431414][T16964] ? file_end_write+0x250/0x250 [ 675.436298][T16964] ? __fget_files+0x28/0x460 [ 675.440923][T16964] ? __fget_files+0x3fc/0x460 [ 675.445631][T16964] ? __fdget_pos+0x2a3/0x330 [ 675.450238][T16964] ? ksys_write+0x74/0x260 [ 675.454680][T16964] ksys_write+0x151/0x260 [ 675.459027][T16964] ? __ia32_sys_read+0x90/0x90 [ 675.463811][T16964] ? lockdep_hardirqs_on+0x98/0x150 [ 675.469029][T16964] do_syscall_64+0x55/0xb0 [ 675.473465][T16964] ? clear_bhb_loop+0x40/0x90 [ 675.478151][T16964] ? clear_bhb_loop+0x40/0x90 [ 675.482844][T16964] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 675.488756][T16964] RIP: 0033:0x7f2ff615d68e [ 675.493179][T16964] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 675.512800][T16964] RSP: 002b:00007f2ff7057fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 675.521231][T16964] RAX: ffffffffffffffda RBX: 00007f2ff70586c0 RCX: 00007f2ff615d68e [ 675.529209][T16964] RDX: 0000000000000001 RSI: 00007f2ff70580a0 RDI: 0000000000000007 [ 675.537186][T16964] RBP: 00007f2ff7058090 R08: 0000000000000000 R09: 0000000000000000 [ 675.545164][T16964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 675.553137][T16964] R13: 00007f2ff6416038 R14: 00007f2ff6415fa0 R15: 00007ffcb9f8d1a8 [ 675.561157][T16964] [ 677.285083][T16990] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3806'. [ 677.316596][T16990] netlink: 'syz.1.3806': attribute type 29 has an invalid length. [ 677.328747][T16990] netlink: 'syz.1.3806': attribute type 29 has an invalid length. [ 677.342086][T16990] netlink: 'syz.1.3806': attribute type 29 has an invalid length. [ 677.465071][T16994] netlink: 'syz.3.3807': attribute type 3 has an invalid length. [ 677.492122][T16994] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3807'. [ 677.525238][T16998] tun0: tun_chr_ioctl cmd 1074812118 [ 678.620472][T17021] FAULT_INJECTION: forcing a failure. [ 678.620472][T17021] name failslab, interval 1, probability 0, space 0, times 0 [ 678.649100][T17021] CPU: 1 PID: 17021 Comm: syz.0.3816 Not tainted syzkaller #0 [ 678.656641][T17021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 678.666744][T17021] Call Trace: [ 678.670053][T17021] [ 678.673001][T17021] dump_stack_lvl+0x18c/0x250 [ 678.677730][T17021] ? sctp_sendmsg+0x1519/0x27b0 [ 678.682626][T17021] ? ___sys_sendmsg+0x2a6/0x360 [ 678.687520][T17021] ? show_regs_print_info+0x20/0x20 [ 678.692760][T17021] ? load_image+0x420/0x420 [ 678.697324][T17021] should_fail_ex+0x394/0x4c0 [ 678.702047][T17021] should_failslab+0x9/0x20 [ 678.706596][T17021] slab_pre_alloc_hook+0x59/0x300 [ 678.711667][T17021] ? sctp_add_bind_addr+0x8c/0x360 [ 678.716819][T17021] __kmem_cache_alloc_node+0x53/0x250 [ 678.722233][T17021] ? sctp_add_bind_addr+0x8c/0x360 [ 678.727381][T17021] kmalloc_trace+0x2a/0xe0 [ 678.731842][T17021] sctp_add_bind_addr+0x8c/0x360 [ 678.736834][T17021] sctp_copy_local_addr_list+0x31b/0x4e0 [ 678.742516][T17021] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 678.748286][T17021] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 678.754591][T17021] ? sctp_v6_is_any+0x64/0x70 [ 678.759321][T17021] ? sctp_copy_one_addr+0x8c/0x350 [ 678.764483][T17021] sctp_bind_addr_copy+0xb3/0x3c0 [ 678.769561][T17021] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 678.775944][T17021] sctp_connect_new_asoc+0x2f9/0x6a0 [ 678.781280][T17021] ? __sctp_connect+0xd80/0xd80 [ 678.786169][T17021] ? __local_bh_enable_ip+0x13a/0x1c0 [ 678.791588][T17021] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 678.797174][T17021] ? security_sctp_bind_connect+0x89/0xb0 [ 678.802941][T17021] sctp_sendmsg+0x1519/0x27b0 [ 678.807674][T17021] ? sctp_getsockopt+0xb60/0xb60 [ 678.812652][T17021] ? aa_sk_perm+0x83c/0x970 [ 678.817202][T17021] ? aa_af_perm+0x330/0x330 [ 678.821738][T17021] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 678.828206][T17021] ? sock_rps_record_flow+0x19/0x3f0 [ 678.833562][T17021] ? inet_sendmsg+0xce/0x2a0 [ 678.838203][T17021] ? inet_send_prepare+0x250/0x250 [ 678.840823][T17023] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3817'. [ 678.843342][T17021] ____sys_sendmsg+0x61b/0x980 [ 678.843386][T17021] ? __asan_memset+0x22/0x40 [ 678.843410][T17021] ? __sys_sendmsg_sock+0x30/0x30 [ 678.843427][T17021] ? __import_iovec+0x5f2/0x850 [ 678.843459][T17021] ? import_iovec+0x73/0xa0 [ 678.843478][T17021] ___sys_sendmsg+0x2a6/0x360 [ 678.843497][T17021] ? get_pid_task+0x20/0x1e0 [ 678.843530][T17021] ? __sys_sendmsg+0x2b0/0x2b0 [ 678.843574][T17021] ? __lock_acquire+0x7d80/0x7d80 [ 678.843629][T17021] __se_sys_sendmsg+0x1d0/0x2c0 [ 678.843655][T17021] ? __x64_sys_sendmsg+0x80/0x80 [ 678.843697][T17021] ? lockdep_hardirqs_on+0x98/0x150 [ 678.843729][T17021] do_syscall_64+0x55/0xb0 [ 678.843750][T17021] ? clear_bhb_loop+0x40/0x90 [ 678.843769][T17021] ? clear_bhb_loop+0x40/0x90 [ 678.843790][T17021] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 678.843817][T17021] RIP: 0033:0x7f6c0339ce59 [ 678.843839][T17021] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 678.843856][T17021] RSP: 002b:00007f6c041f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 678.843880][T17021] RAX: ffffffffffffffda RBX: 00007f6c03615fa0 RCX: 00007f6c0339ce59 [ 678.843893][T17021] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000006 [ 678.843906][T17021] RBP: 00007f6c041f6090 R08: 0000000000000000 R09: 0000000000000000 [ 678.843918][T17021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 678.843929][T17021] R13: 00007f6c03616038 R14: 00007f6c03615fa0 R15: 00007fff00f6af88 [ 678.843961][T17021] [ 679.313815][T17029] netlink: 'syz.0.3819': attribute type 3 has an invalid length. [ 679.321805][T17029] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3819'. [ 679.361593][T17032] tun0: tun_chr_ioctl cmd 1074812118 [ 679.569453][T17034] veth1_macvtap: entered allmulticast mode [ 679.600896][T17034] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3821'. [ 679.640220][T17034] team0: Port device team_slave_0 removed [ 679.663868][T17034] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 680.534405][T17062] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3830'. [ 680.552517][T17062] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3830'. [ 680.572174][T17059] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3830'. [ 680.730087][T17065] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.3831'. [ 680.739580][T17065] bridge_slave_1: default FDB implementation only supports local addresses [ 680.799443][T17067] sit0: left promiscuous mode [ 681.436279][T17085] netlink: 'syz.3.3836': attribute type 3 has an invalid length. [ 681.450156][T17085] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3836'. [ 681.468396][T17085] tun0: tun_chr_ioctl cmd 1074812118 [ 681.494079][T17089] @: port 1(netdevsim3) entered blocking state [ 681.500521][T17089] @: port 1(netdevsim3) entered disabled state [ 681.513937][T17089] netdevsim netdevsim1 netdevsim3: entered allmulticast mode [ 681.530040][T17089] netdevsim netdevsim1 netdevsim3: entered promiscuous mode [ 682.349568][T17120] netlink: 'syz.1.3849': attribute type 3 has an invalid length. [ 682.361874][T17120] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3849'. [ 682.377896][T17120] tun0: tun_chr_ioctl cmd 1074812118 [ 683.066796][T17131] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3852'. [ 683.374075][T17138] veth1_macvtap: left allmulticast mode [ 683.463814][T17138] veth1_macvtap: entered allmulticast mode [ 683.546622][T17138] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3855'. [ 683.589003][T17138] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 684.210040][T17148] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3858'. [ 684.273833][T17148] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3858'. [ 684.412177][T17150] netlink: 'syz.3.3859': attribute type 3 has an invalid length. [ 684.456410][T17150] tun0: tun_chr_ioctl cmd 1074812118 [ 686.207982][T17185] netlink: 'syz.1.3872': attribute type 15 has an invalid length. [ 686.229424][T17185] __nla_validate_parse: 1 callbacks suppressed [ 686.229448][T17185] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3872'. [ 686.268452][T17188] netlink: 'syz.3.3873': attribute type 12 has an invalid length. [ 686.270186][T17186] netlink: 'syz.0.3870': attribute type 3 has an invalid length. [ 686.282251][T17188] netlink: 14585 bytes leftover after parsing attributes in process `syz.3.3873'. [ 686.313492][T17186] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3870'. [ 686.318439][T17185] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 686.358311][T17190] tun0: tun_chr_ioctl cmd 1074812118 [ 686.370359][T17185] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.3872'. [ 688.144252][T17229] netlink: 'syz.1.3886': attribute type 3 has an invalid length. [ 688.152298][T17229] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3886'. [ 688.175505][T17229] tun0: tun_chr_ioctl cmd 1074812118 [ 688.427085][T17236] netlink: 'syz.1.3890': attribute type 9 has an invalid length. [ 688.437561][T17236] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.3890'. [ 688.915684][ T49] wlan1: Trigger new scan to find an IBSS to join [ 689.418379][T17259] netlink: 'syz.0.3898': attribute type 3 has an invalid length. [ 689.458209][T17259] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3898'. [ 689.505090][T17263] tun0: tun_chr_ioctl cmd 1074812118 [ 689.752083][T17274] netlink: 'syz.3.3905': attribute type 15 has an invalid length. [ 689.760296][T17274] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3905'. [ 689.867567][T17279] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.3905'. [ 689.879412][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 689.886020][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 689.959732][T17281] mac80211_hwsim hwsim21 wlan1: left promiscuous mode [ 690.024802][T17284] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.3908'. [ 690.718722][T17311] netlink: 'syz.2.3919': attribute type 3 has an invalid length. [ 690.730842][T17311] tun0: tun_chr_ioctl cmd 1074812118 [ 690.737292][T17312] netlink: 'syz.0.3917': attribute type 15 has an invalid length. [ 690.792629][T17312] mac80211_hwsim hwsim28 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 691.344528][T17321] netlink: 'syz.2.3922': attribute type 27 has an invalid length. [ 691.359319][T17321] netlink: 'syz.2.3922': attribute type 4 has an invalid length. [ 691.369163][T17321] __nla_validate_parse: 4 callbacks suppressed [ 691.369180][T17321] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3922'. [ 691.390582][T17324] netlink: 'syz.2.3922': attribute type 27 has an invalid length. [ 691.413308][T17324] netlink: 'syz.2.3922': attribute type 4 has an invalid length. [ 691.421530][T17324] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3922'. [ 691.452809][T17325] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.3923'. [ 691.837426][T17337] mac80211_hwsim hwsim25 wlan1: left promiscuous mode [ 691.916202][T17341] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3929'. [ 691.976156][T17341] tun0: tun_chr_ioctl cmd 1074812118 [ 691.992889][T17348] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3932'. [ 692.792667][T17360] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.3936'. [ 692.914118][ T1007] wlan1: Trigger new scan to find an IBSS to join [ 693.114284][T17373] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3942'. [ 693.126366][T17373] tun0: tun_chr_ioctl cmd 1074812118 [ 693.192035][T17372] validate_nla: 5 callbacks suppressed [ 693.192081][T17372] netlink: 'syz.0.3941': attribute type 9 has an invalid length. [ 693.211254][T17372] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.3941'. [ 693.320214][T17382] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3945'. [ 693.373915][T17382] bond0 (unregistering): left promiscuous mode [ 693.380611][T17382] Ù: left promiscuous mode [ 693.393387][T17382] team0: Port device bond0 removed [ 693.402974][T17382] bond0 (unregistering): (slave 1.@ÿ): Releasing backup interface [ 693.428580][T17382] bond0 (unregistering): (slave cÙ): Releasing backup interface [ 693.437332][T17382] Ù: left allmulticast mode [ 693.449444][T17382] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 693.459385][T17382] bridge_slave_1: left allmulticast mode [ 693.467651][T17382] bond0 (unregistering): Released all slaves [ 693.492246][T17384] netlink: 'syz.0.3946': attribute type 7 has an invalid length. [ 693.507125][T17384] netlink: 'syz.0.3946': attribute type 10 has an invalid length. [ 693.515301][T17384] netlink: 65023 bytes leftover after parsing attributes in process `syz.0.3946'. [ 693.754223][T17394] netlink: 'syz.1.3948': attribute type 153 has an invalid length. [ 694.049298][T17406] netlink: 'syz.0.3953': attribute type 3 has an invalid length. [ 694.072436][T17406] tun0: tun_chr_ioctl cmd 1074812118 [ 694.207824][T17409] netlink: 'syz.2.3955': attribute type 9 has an invalid length. [ 694.493101][T17418] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 694.505254][T17418] bond_slave_1: left allmulticast mode [ 694.519916][T17418] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 694.531952][T17418] bridge_slave_1: left allmulticast mode [ 694.545181][T17418] bond0 (unregistering): Released all slaves [ 694.766694][T17429] delete_channel: no stack [ 695.077503][T17440] netlink: 'syz.3.3967': attribute type 9 has an invalid length. [ 695.122044][T17444] netlink: 'syz.2.3970': attribute type 2 has an invalid length. [ 695.620138][T17471] netlink: 'syz.0.3977': attribute type 3 has an invalid length. [ 695.628799][T17471] tun0: tun_chr_ioctl cmd 1074812118 [ 695.946594][T17477] netlink: 'syz.1.3980': attribute type 21 has an invalid length. [ 695.965435][ T60] wlan1: Trigger new scan to find an IBSS to join [ 696.214374][T17451] delete_channel: no stack [ 696.702134][T17502] __nla_validate_parse: 11 callbacks suppressed [ 696.702199][T17502] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3988'. [ 697.099864][T17517] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3995'. [ 697.111204][T17517] tun0: tun_chr_ioctl cmd 1074812118 [ 697.613626][T17541] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4004'. [ 697.972890][T17549] netlink: 14546 bytes leftover after parsing attributes in process `syz.1.4007'. [ 698.020800][T17551] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4008'. [ 698.042247][T17541] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.4004'. [ 698.071177][T17547] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4006'. [ 698.089771][T17547] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4006'. [ 698.108651][T17541] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.4004'. [ 698.130954][T17547] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4006'. [ 698.224900][T17541] validate_nla: 6 callbacks suppressed [ 698.225309][T17541] netlink: 'syz.3.4004': attribute type 10 has an invalid length. [ 698.305811][T17541] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 698.335984][T17541] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 698.409832][T17559] tun0: tun_chr_ioctl cmd 1074812118 [ 698.999451][ T49] wlan1: Trigger new scan to find an IBSS to join [ 699.166998][T17561] delete_channel: no stack [ 699.793009][T17589] netlink: 'syz.1.4017': attribute type 29 has an invalid length. [ 699.835912][T17589] netlink: 'syz.1.4017': attribute type 29 has an invalid length. [ 699.898397][T17592] netlink: 'syz.0.4019': attribute type 17 has an invalid length. [ 699.930768][T17592] netlink: 'syz.0.4019': attribute type 16 has an invalid length. [ 700.014043][ T11] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 700.506255][T17600] tun0: tun_chr_ioctl cmd 1074812118 [ 701.200318][T17623] netlink: 'syz.0.4032': attribute type 39 has an invalid length. [ 701.378898][T17629] FAULT_INJECTION: forcing a failure. [ 701.378898][T17629] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 701.410973][T17629] CPU: 1 PID: 17629 Comm: syz.3.4033 Not tainted syzkaller #0 [ 701.418525][T17629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 701.428625][T17629] Call Trace: [ 701.431935][T17629] [ 701.434895][T17629] dump_stack_lvl+0x18c/0x250 [ 701.439627][T17629] ? show_regs_print_info+0x20/0x20 [ 701.444864][T17629] ? load_image+0x420/0x420 [ 701.449396][T17629] ? __lock_acquire+0x7d80/0x7d80 [ 701.454467][T17629] ? up_read+0x20/0x20 [ 701.458568][T17629] should_fail_ex+0x394/0x4c0 [ 701.463287][T17629] _copy_to_user+0x2f/0xa0 [ 701.467736][T17629] map_get_next_key+0x4f8/0x620 [ 701.472624][T17629] __sys_bpf+0x715/0x890 [ 701.476904][T17629] ? bpf_link_show_fdinfo+0x390/0x390 [ 701.482327][T17629] ? lock_chain_count+0x20/0x20 [ 701.487218][T17629] __x64_sys_bpf+0x7c/0x90 [ 701.491687][T17629] do_syscall_64+0x55/0xb0 [ 701.496132][T17629] ? clear_bhb_loop+0x40/0x90 [ 701.500839][T17629] ? clear_bhb_loop+0x40/0x90 [ 701.505545][T17629] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 701.511470][T17629] RIP: 0033:0x7f948f39ce59 [ 701.515916][T17629] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 701.535560][T17629] RSP: 002b:00007f9490196028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 701.544022][T17629] RAX: ffffffffffffffda RBX: 00007f948f615fa0 RCX: 00007f948f39ce59 [ 701.552029][T17629] RDX: 0000000000000020 RSI: 0000200000000040 RDI: 0000000000000004 [ 701.560042][T17629] RBP: 00007f9490196090 R08: 0000000000000000 R09: 0000000000000000 [ 701.568047][T17629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 701.576061][T17629] R13: 00007f948f616038 R14: 00007f948f615fa0 R15: 00007fffee9cbcc8 [ 701.584098][T17629] [ 701.716309][T17632] tun0: tun_chr_ioctl cmd 1074812118 [ 703.531402][T17679] FAULT_INJECTION: forcing a failure. [ 703.531402][T17679] name failslab, interval 1, probability 0, space 0, times 0 [ 703.548843][T17679] CPU: 0 PID: 17679 Comm: syz.2.4052 Not tainted syzkaller #0 [ 703.556361][T17679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 703.566446][T17679] Call Trace: [ 703.569754][T17679] [ 703.572706][T17679] dump_stack_lvl+0x18c/0x250 [ 703.577421][T17679] ? show_regs_print_info+0x20/0x20 [ 703.582654][T17679] ? load_image+0x420/0x420 [ 703.587182][T17679] ? __might_sleep+0xe0/0xe0 [ 703.591803][T17679] ? __lock_acquire+0x7d80/0x7d80 [ 703.596940][T17679] ? lockdep_hardirqs_on+0x98/0x150 [ 703.602182][T17679] should_fail_ex+0x394/0x4c0 [ 703.606899][T17679] should_failslab+0x9/0x20 [ 703.611444][T17679] slab_pre_alloc_hook+0x59/0x300 [ 703.616520][T17679] kmem_cache_alloc+0x5a/0x2c0 [ 703.621326][T17679] ? prepare_creds+0x30/0x5d0 [ 703.626041][T17679] prepare_creds+0x30/0x5d0 [ 703.630585][T17679] copy_creds+0x105/0xa70 [ 703.634959][T17679] copy_process+0x973/0x3df0 [ 703.639603][T17679] ? perf_tp_event+0x13f5/0x1550 [ 703.644574][T17679] ? __pidfd_prepare+0x140/0x140 [ 703.649554][T17679] kernel_clone+0x24b/0x8a0 [ 703.654094][T17679] ? create_io_thread+0x190/0x190 [ 703.659178][T17679] __x64_sys_clone+0x1b7/0x230 [ 703.663996][T17679] ? __ia32_sys_vfork+0x140/0x140 [ 703.669085][T17679] ? lock_chain_count+0x20/0x20 [ 703.674079][T17679] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 703.680105][T17679] ? lockdep_hardirqs_on+0x98/0x150 [ 703.685349][T17679] do_syscall_64+0x55/0xb0 [ 703.689806][T17679] ? clear_bhb_loop+0x40/0x90 [ 703.694519][T17679] ? clear_bhb_loop+0x40/0x90 [ 703.699232][T17679] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 703.700682][T17683] tun0: tun_chr_ioctl cmd 1074812118 [ 703.705147][T17679] RIP: 0033:0x7f2ff619ce59 [ 703.705174][T17679] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 703.705188][T17679] RSP: 002b:00007f2ff7057fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 703.705208][T17679] RAX: ffffffffffffffda RBX: 00007f2ff6415fa0 RCX: 00007f2ff619ce59 [ 703.705219][T17679] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000024001000 [ 703.705229][T17679] RBP: 00007f2ff7058090 R08: 0000000000000000 R09: 0000000000000000 [ 703.705240][T17679] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 703.705250][T17679] R13: 00007f2ff6416038 R14: 00007f2ff6415fa0 R15: 00007ffcb9f8d1a8 [ 703.705274][T17679] [ 704.268841][T17694] wlan0: mtu greater than device maximum [ 704.766056][T17709] tun0: tun_chr_ioctl cmd 1074812118 [ 704.887929][T17707] netlink: 'syz.1.4063': attribute type 19 has an invalid length. [ 704.900529][T17707] __nla_validate_parse: 4 callbacks suppressed [ 704.900565][T17707] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4063'. [ 707.475986][T17749] tun0: tun_chr_ioctl cmd 1074812118 [ 708.389336][T17776] tun0: tun_chr_ioctl cmd 1074812118 [ 708.517858][T17782] FAULT_INJECTION: forcing a failure. [ 708.517858][T17782] name failslab, interval 1, probability 0, space 0, times 0 [ 708.530638][T17782] CPU: 1 PID: 17782 Comm: syz.1.4089 Not tainted syzkaller #0 [ 708.538135][T17782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 708.548230][T17782] Call Trace: [ 708.551530][T17782] [ 708.554476][T17782] dump_stack_lvl+0x18c/0x250 [ 708.559190][T17782] ? show_regs_print_info+0x20/0x20 [ 708.564412][T17782] ? load_image+0x420/0x420 [ 708.568950][T17782] ? netdev_core_pick_tx+0x370/0x370 [ 708.574271][T17782] should_fail_ex+0x394/0x4c0 [ 708.578990][T17782] should_failslab+0x9/0x20 [ 708.583538][T17782] slab_pre_alloc_hook+0x59/0x300 [ 708.588623][T17782] kmem_cache_alloc+0x5a/0x2c0 [ 708.593424][T17782] ? skb_clone+0x1eb/0x370 [ 708.597882][T17782] skb_clone+0x1eb/0x370 [ 708.602166][T17782] bpf_clone_redirect+0x16d/0x4a0 [ 708.607228][T17782] bpf_prog_208b094576c80b22+0x5e/0x63 [ 708.612723][T17782] ? lock_chain_count+0x20/0x20 [ 708.617613][T17782] ? preempt_schedule+0xc0/0xd0 [ 708.622502][T17782] ? perf_trace_preemptirq_template+0xac/0x330 [ 708.628713][T17782] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 708.634736][T17782] ? lockdep_softirqs_on+0x5b0/0x5b0 [ 708.640065][T17782] ? lock_chain_count+0x20/0x20 [ 708.644957][T17782] ? __local_bh_disable_ip+0x108/0x1a0 [ 708.650454][T17782] ? __cant_sleep+0x220/0x220 [ 708.655178][T17782] ? __local_bh_enable_ip+0x13a/0x1c0 [ 708.660606][T17782] ? _local_bh_enable+0xa0/0xa0 [ 708.665461][T17782] ? bpf_test_timer_continue+0x135/0x380 [ 708.671098][T17782] ? bpf_test_run+0x174/0x870 [ 708.675785][T17782] bpf_test_run+0x2df/0x870 [ 708.680325][T17782] ? bpf_test_run+0x174/0x870 [ 708.685031][T17782] ? dst_hold+0x70/0x70 [ 708.689206][T17782] ? eth_get_headlen+0x210/0x210 [ 708.694160][T17782] bpf_prog_test_run_skb+0xdbb/0x18f0 [ 708.699584][T17782] ? cpu_online+0x60/0x60 [ 708.703944][T17782] bpf_prog_test_run+0x31f/0x390 [ 708.708926][T17782] __sys_bpf+0x49d/0x890 [ 708.713190][T17782] ? read_tsc+0x9/0x20 [ 708.717286][T17782] ? bpf_link_show_fdinfo+0x390/0x390 [ 708.722699][T17782] ? lock_chain_count+0x20/0x20 [ 708.727593][T17782] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 708.733629][T17782] __x64_sys_bpf+0x7c/0x90 [ 708.738075][T17782] do_syscall_64+0x55/0xb0 [ 708.742526][T17782] ? clear_bhb_loop+0x40/0x90 [ 708.747235][T17782] ? clear_bhb_loop+0x40/0x90 [ 708.752040][T17782] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 708.757985][T17782] RIP: 0033:0x7ff84419ce59 [ 708.762422][T17782] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 708.782040][T17782] RSP: 002b:00007ff844fb7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 708.790461][T17782] RAX: ffffffffffffffda RBX: 00007ff844415fa0 RCX: 00007ff84419ce59 [ 708.798554][T17782] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 708.806534][T17782] RBP: 00007ff844fb7090 R08: 0000000000000000 R09: 0000000000000000 [ 708.814527][T17782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 708.822531][T17782] R13: 00007ff844416038 R14: 00007ff844415fa0 R15: 00007ffd23274c58 [ 708.830522][T17782] [ 708.932772][T17792] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.4093'. [ 708.982772][T17794] FAULT_INJECTION: forcing a failure. [ 708.982772][T17794] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 708.998926][T17794] CPU: 0 PID: 17794 Comm: syz.2.4094 Not tainted syzkaller #0 [ 709.006464][T17794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 709.016536][T17794] Call Trace: [ 709.019829][T17794] [ 709.022754][T17794] dump_stack_lvl+0x18c/0x250 [ 709.027436][T17794] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 709.033614][T17794] ? show_regs_print_info+0x20/0x20 [ 709.038847][T17794] ? load_image+0x420/0x420 [ 709.043371][T17794] should_fail_ex+0x394/0x4c0 [ 709.048090][T17794] prepare_alloc_pages+0x1e1/0x5b0 [ 709.053225][T17794] __alloc_pages+0x134/0x460 [ 709.057859][T17794] ? zone_statistics+0x170/0x170 [ 709.062826][T17794] ? alloc_pages+0x4e1/0x740 [ 709.067423][T17794] ? do_raw_spin_unlock+0x121/0x230 [ 709.072627][T17794] __get_free_pages+0xc/0x30 [ 709.077222][T17794] kasan_populate_vmalloc_pte+0x35/0x100 [ 709.082859][T17794] __apply_to_page_range+0x860/0xdd0 [ 709.088154][T17794] ? kasan_populate_vmalloc+0x70/0x70 [ 709.093530][T17794] ? apply_to_page_range+0x50/0x50 [ 709.098680][T17794] ? do_raw_spin_unlock+0x121/0x230 [ 709.103911][T17794] alloc_vmap_area+0x1d26/0x1e50 [ 709.108897][T17794] ? vm_map_ram+0xcf0/0xcf0 [ 709.113415][T17794] ? rcu_is_watching+0x15/0xb0 [ 709.118188][T17794] __get_vm_area_node+0x162/0x370 [ 709.123221][T17794] __vmalloc_node_range+0x36f/0x1320 [ 709.128508][T17794] ? sock_map_alloc+0x1af/0x2c0 [ 709.133373][T17794] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 709.139533][T17794] ? free_vm_area+0x50/0x50 [ 709.144039][T17794] bpf_map_area_alloc+0xf1/0x110 [ 709.148977][T17794] ? sock_map_alloc+0x1af/0x2c0 [ 709.153915][T17794] sock_map_alloc+0x1af/0x2c0 [ 709.158594][T17794] map_create+0x877/0x12f0 [ 709.163006][T17794] ? __sanitizer_cov_trace_switch+0x65/0xe0 [ 709.168924][T17794] __sys_bpf+0x651/0x890 [ 709.173163][T17794] ? bpf_link_show_fdinfo+0x390/0x390 [ 709.178546][T17794] ? lock_chain_count+0x20/0x20 [ 709.183392][T17794] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 709.189376][T17794] __x64_sys_bpf+0x7c/0x90 [ 709.193788][T17794] do_syscall_64+0x55/0xb0 [ 709.198201][T17794] ? clear_bhb_loop+0x40/0x90 [ 709.202868][T17794] ? clear_bhb_loop+0x40/0x90 [ 709.207624][T17794] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 709.213516][T17794] RIP: 0033:0x7f2ff619ce59 [ 709.217927][T17794] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 709.237527][T17794] RSP: 002b:00007f2ff7058028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 709.245936][T17794] RAX: ffffffffffffffda RBX: 00007f2ff6415fa0 RCX: 00007f2ff619ce59 [ 709.253905][T17794] RDX: 0000000000000048 RSI: 0000200000000580 RDI: 0600000000000000 [ 709.261868][T17794] RBP: 00007f2ff7058090 R08: 0000000000000000 R09: 0000000000000000 [ 709.269829][T17794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 709.277792][T17794] R13: 00007f2ff6416038 R14: 00007f2ff6415fa0 R15: 00007ffcb9f8d1a8 [ 709.285770][T17794] [ 709.368627][T17797] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4095'. [ 709.669991][ T5787] Bluetooth: hci0: unexpected subevent 0x05 length: 150 > 12 [ 709.851084][T17819] tun0: tun_chr_ioctl cmd 1074812118 [ 710.728573][T17843] FAULT_INJECTION: forcing a failure. [ 710.728573][T17843] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 710.742329][T17843] CPU: 0 PID: 17843 Comm: syz.2.4110 Not tainted syzkaller #0 [ 710.749851][T17843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 710.759956][T17843] Call Trace: [ 710.763279][T17843] [ 710.766242][T17843] dump_stack_lvl+0x18c/0x250 [ 710.770971][T17843] ? show_regs_print_info+0x20/0x20 [ 710.776213][T17843] ? load_image+0x420/0x420 [ 710.780753][T17843] ? __lock_acquire+0x7d80/0x7d80 [ 710.785827][T17843] ? map_get_next_key+0x2d2/0x620 [ 710.790883][T17843] should_fail_ex+0x394/0x4c0 [ 710.795602][T17843] _copy_to_user+0x2f/0xa0 [ 710.800093][T17843] map_get_next_key+0x4f8/0x620 [ 710.804985][T17843] ? map_get_next_key+0x2d2/0x620 [ 710.810033][T17843] __sys_bpf+0x715/0x890 [ 710.814283][T17843] ? bpf_link_show_fdinfo+0x390/0x390 [ 710.819700][T17843] ? lock_chain_count+0x20/0x20 [ 710.824599][T17843] __x64_sys_bpf+0x7c/0x90 [ 710.829049][T17843] do_syscall_64+0x55/0xb0 [ 710.833502][T17843] ? clear_bhb_loop+0x40/0x90 [ 710.838204][T17843] ? clear_bhb_loop+0x40/0x90 [ 710.842907][T17843] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 710.848837][T17843] RIP: 0033:0x7f2ff619ce59 [ 710.853282][T17843] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 710.872935][T17843] RSP: 002b:00007f2ff7058028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 710.881396][T17843] RAX: ffffffffffffffda RBX: 00007f2ff6415fa0 RCX: 00007f2ff619ce59 [ 710.889410][T17843] RDX: 0000000000000020 RSI: 0000200000000040 RDI: 0000000000000004 [ 710.897418][T17843] RBP: 00007f2ff7058090 R08: 0000000000000000 R09: 0000000000000000 [ 710.905589][T17843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 710.913602][T17843] R13: 00007f2ff6416038 R14: 00007f2ff6415fa0 R15: 00007ffcb9f8d1a8 [ 710.921627][T17843] [ 711.713331][ T5787] Bluetooth: hci0: command 0x0406 tx timeout [ 711.932261][T17852] netlink: 'syz.3.4116': attribute type 10 has an invalid length. [ 711.944319][T17852] netlink: 212412 bytes leftover after parsing attributes in process `syz.3.4116'. [ 711.963583][T17852] openvswitch: netlink: Flow key attr not present in new flow. [ 712.117001][T17852] netlink: set zone limit has 8 unknown bytes [ 712.273059][T17864] tun0: tun_chr_ioctl cmd 1074812118 [ 712.880890][T17885] mac80211_hwsim hwsim28 .3ãc¤±: renamed from wlan1 (while UP) [ 712.911598][T17885] netlink: 'syz.0.4128': attribute type 3 has an invalid length. [ 712.919774][T17885] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4128'. [ 713.544499][T17900] tun0: tun_chr_ioctl cmd 1074812118 [ 714.185533][T17918] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4139'. [ 714.200338][T17918] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4139'. [ 714.217024][T17918] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4139'. [ 714.232438][T17918] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4139'. [ 714.436400][T17928] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.4145'. [ 714.579377][T17933] netlink: 'syz.0.4147': attribute type 41 has an invalid length. [ 714.625150][T17935] netlink: 'syz.0.4147': attribute type 41 has an invalid length. [ 715.420731][T17947] tun0: tun_chr_ioctl cmd 1074812118 [ 716.943871][T17985] tun0: tun_chr_ioctl cmd 1074812118 [ 716.969329][ T5787] Bluetooth: hci2: unexpected event 0x03 length: 15 > 11 [ 717.271307][T17992] netlink: 'syz.2.4167': attribute type 29 has an invalid length. [ 717.372888][T17992] netlink: 'syz.2.4167': attribute type 29 has an invalid length. [ 717.419005][T17993] netlink: 'syz.2.4167': attribute type 29 has an invalid length. [ 717.473742][T17997] netlink: 'syz.2.4167': attribute type 29 has an invalid length. [ 717.504741][T17999] netlink: 'syz.2.4167': attribute type 29 has an invalid length. [ 717.536683][T17998] netlink: 'syz.3.4168': attribute type 10 has an invalid length. [ 717.548336][T17998] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4168'. [ 717.604250][T18002] netlink: 'syz.1.4170': attribute type 21 has an invalid length. [ 717.612320][T18002] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4170'. [ 718.012329][T18019] netlink: 'syz.0.4177': attribute type 10 has an invalid length. [ 719.281082][T18037] tun0: tun_chr_ioctl cmd 1074812118 [ 720.237172][T18054] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4189'. [ 720.258650][T18054] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.4189'. [ 720.512044][T18068] -1: renamed from syzkaller0 [ 720.650329][T18070] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4194'. [ 720.675843][T18070] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.4194'. [ 720.950944][T18077] tun0: tun_chr_ioctl cmd 1074812118 [ 721.469441][T18084] netlink: 'syz.1.4199': attribute type 10 has an invalid length. [ 721.484774][T18090] sock: sock_set_timeout: `syz.2.4201' (pid 18090) tries to set negative timeout [ 721.507755][T18084] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4199'. [ 721.769300][T18095] netlink: 'syz.2.4203': attribute type 10 has an invalid length. [ 721.782605][T18095] syz_tun: entered promiscuous mode [ 722.036154][T18103] netlink: 208064 bytes leftover after parsing attributes in process `syz.0.4206'. [ 722.107832][T18105] tun0: tun_chr_ioctl cmd 1074812118 [ 722.292889][T18118] netlink: 14546 bytes leftover after parsing attributes in process `syz.1.4212'. [ 722.415724][T18125] netlink: 'syz.1.4212': attribute type 11 has an invalid length. [ 722.443297][T18125] netlink: 168 bytes leftover after parsing attributes in process `syz.1.4212'. [ 723.106679][T18140] netlink: 'syz.0.4218': attribute type 9 has an invalid length. [ 723.122774][T18140] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.4218'. [ 723.278692][T18143] tun0: tun_chr_ioctl cmd 1074812118 [ 723.355895][T18147] delete_channel: no stack [ 723.363109][T18147] delete_channel: no stack [ 724.111227][T18169] netlink: 'syz.1.4227': attribute type 10 has an invalid length. [ 724.148102][T18169] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4227'. [ 725.057169][T18174] batadv0: left allmulticast mode [ 725.062296][T18174] batadv0: left promiscuous mode [ 725.100474][T18174] bridge0: port 3(batadv0) entered disabled state [ 725.118270][T18174] bridge_slave_1: left allmulticast mode [ 725.124383][T18174] bridge_slave_1: left promiscuous mode [ 725.130960][T18174] bridge0: port 2(bridge_slave_1) entered disabled state [ 725.144803][T18174] bridge_slave_0: left promiscuous mode [ 725.150843][T18174] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.329897][T18176] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4228'. [ 725.388287][T18189] tun0: tun_chr_ioctl cmd 1074812118 [ 727.015582][T18226] tun0: tun_chr_ioctl cmd 1074812118 [ 727.280808][T18236] netlink: 'syz.3.4247': attribute type 9 has an invalid length. [ 727.313326][T18236] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.4247'. [ 727.748760][T18253] FAULT_INJECTION: forcing a failure. [ 727.748760][T18253] name failslab, interval 1, probability 0, space 0, times 0 [ 727.783305][T18253] CPU: 1 PID: 18253 Comm: syz.3.4251 Not tainted syzkaller #0 [ 727.790852][T18253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 727.800952][T18253] Call Trace: [ 727.804266][T18253] [ 727.807221][T18253] dump_stack_lvl+0x18c/0x250 [ 727.811932][T18253] ? sctp_sendmsg+0x1519/0x27b0 [ 727.816820][T18253] ? ___sys_sendmsg+0x2a6/0x360 [ 727.821702][T18253] ? show_regs_print_info+0x20/0x20 [ 727.826940][T18253] ? load_image+0x420/0x420 [ 727.831496][T18253] should_fail_ex+0x394/0x4c0 [ 727.836224][T18253] should_failslab+0x9/0x20 [ 727.840763][T18253] slab_pre_alloc_hook+0x59/0x300 [ 727.845829][T18253] ? sctp_add_bind_addr+0x8c/0x360 [ 727.850983][T18253] __kmem_cache_alloc_node+0x53/0x250 [ 727.856417][T18253] ? sctp_add_bind_addr+0x8c/0x360 [ 727.861571][T18253] kmalloc_trace+0x2a/0xe0 [ 727.866039][T18253] sctp_add_bind_addr+0x8c/0x360 [ 727.871024][T18253] sctp_copy_local_addr_list+0x31b/0x4e0 [ 727.876699][T18253] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 727.882466][T18253] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 727.888582][T18253] ? sctp_v6_is_any+0x64/0x70 [ 727.893302][T18253] ? sctp_copy_one_addr+0x8c/0x350 [ 727.898456][T18253] sctp_bind_addr_copy+0xb3/0x3c0 [ 727.903521][T18253] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 727.909896][T18253] sctp_connect_new_asoc+0x2f9/0x6a0 [ 727.915226][T18253] ? __sctp_connect+0xd80/0xd80 [ 727.920107][T18253] ? __local_bh_enable_ip+0x13a/0x1c0 [ 727.925531][T18253] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 727.931108][T18253] ? security_sctp_bind_connect+0x89/0xb0 [ 727.936880][T18253] sctp_sendmsg+0x1519/0x27b0 [ 727.941615][T18253] ? sctp_getsockopt+0xb60/0xb60 [ 727.946601][T18253] ? aa_sk_perm+0x83c/0x970 [ 727.951157][T18253] ? aa_af_perm+0x330/0x330 [ 727.955685][T18253] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 727.962144][T18253] ? sock_rps_record_flow+0x19/0x3f0 [ 727.967472][T18253] ? inet_sendmsg+0xce/0x2a0 [ 727.972098][T18253] ? inet_send_prepare+0x250/0x250 [ 727.977256][T18253] ____sys_sendmsg+0x61b/0x980 [ 727.982071][T18253] ? __sys_sendmsg_sock+0x30/0x30 [ 727.987139][T18253] ? __import_iovec+0x5f2/0x850 [ 727.992033][T18253] ? import_iovec+0x73/0xa0 [ 727.996576][T18253] ___sys_sendmsg+0x2a6/0x360 [ 728.001295][T18253] ? __sys_sendmsg+0x2b0/0x2b0 [ 728.006132][T18253] ? __lock_acquire+0x7d80/0x7d80 [ 728.011229][T18253] __se_sys_sendmsg+0x1d0/0x2c0 [ 728.016128][T18253] ? __x64_sys_sendmsg+0x80/0x80 [ 728.021124][T18253] ? lockdep_hardirqs_on+0x98/0x150 [ 728.026364][T18253] do_syscall_64+0x55/0xb0 [ 728.030815][T18253] ? clear_bhb_loop+0x40/0x90 [ 728.035528][T18253] ? clear_bhb_loop+0x40/0x90 [ 728.040238][T18253] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 728.046173][T18253] RIP: 0033:0x7f948f39ce59 [ 728.050628][T18253] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 728.070287][T18253] RSP: 002b:00007f9490196028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 728.078839][T18253] RAX: ffffffffffffffda RBX: 00007f948f615fa0 RCX: 00007f948f39ce59 [ 728.086868][T18253] RDX: 0000000000000041 RSI: 0000200000000600 RDI: 0000000000000003 [ 728.094892][T18253] RBP: 00007f9490196090 R08: 0000000000000000 R09: 0000000000000000 [ 728.102905][T18253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 728.110918][T18253] R13: 00007f948f616038 R14: 00007f948f615fa0 R15: 00007fffee9cbcc8 [ 728.118961][T18253] [ 728.592093][T18266] tun0: tun_chr_ioctl cmd 1074812118 [ 729.117652][T18287] netlink: 'syz.3.4260': attribute type 10 has an invalid length. [ 729.125759][T18287] netlink: 55 bytes leftover after parsing attributes in process `syz.3.4260'. [ 729.849592][T18304] tun0: tun_chr_ioctl cmd 1074812118 [ 729.962029][T18309] netlink: 'syz.3.4271': attribute type 21 has an invalid length. [ 729.970802][T18309] netlink: 'syz.3.4271': attribute type 13 has an invalid length. [ 729.979081][T18309] netlink: 6188 bytes leftover after parsing attributes in process `syz.3.4271'. [ 730.045948][ T34] .3ãc¤±: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 732.503482][T18360] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4291'. [ 732.526795][T18360] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4291'. [ 732.547555][T18360] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4291'. [ 732.558183][T18360] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4291'. [ 732.952085][T18384] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4300'. [ 733.090843][T18386] netlink: 'syz.2.4301': attribute type 10 has an invalid length. [ 733.438057][T18393] netlink: 'syz.2.4304': attribute type 10 has an invalid length. [ 733.448925][T18393] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4304'. [ 733.730744][T18403] netlink: 'syz.0.4309': attribute type 10 has an invalid length. [ 733.947897][T18414] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4313'. [ 733.998185][T18414] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 734.646425][T18450] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4327'. [ 734.675695][T18450] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 735.088348][T18467] netlink: 'syz.1.4333': attribute type 10 has an invalid length. [ 735.116723][T18467] FAULT_INJECTION: forcing a failure. [ 735.116723][T18467] name failslab, interval 1, probability 0, space 0, times 0 [ 735.155179][T18467] CPU: 1 PID: 18467 Comm: syz.1.4333 Not tainted syzkaller #0 [ 735.162722][T18467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 735.172807][T18467] Call Trace: [ 735.176101][T18467] [ 735.179054][T18467] dump_stack_lvl+0x18c/0x250 [ 735.183776][T18467] ? show_regs_print_info+0x20/0x20 [ 735.188995][T18467] ? load_image+0x420/0x420 [ 735.193508][T18467] ? verify_lock_unused+0x140/0x140 [ 735.198740][T18467] should_fail_ex+0x394/0x4c0 [ 735.203456][T18467] should_failslab+0x9/0x20 [ 735.207985][T18467] slab_pre_alloc_hook+0x59/0x300 [ 735.213039][T18467] kmem_cache_alloc+0x5a/0x2c0 [ 735.217833][T18467] ? skb_clone+0x1eb/0x370 [ 735.222289][T18467] skb_clone+0x1eb/0x370 [ 735.226576][T18467] __netlink_deliver_tap+0x411/0x7f0 [ 735.231899][T18467] ? netlink_deliver_tap+0x2e/0x1b0 [ 735.237132][T18467] netlink_deliver_tap+0x19c/0x1b0 [ 735.242279][T18467] netlink_sendskb+0x68/0x130 [ 735.246983][T18467] netlink_ack+0xcd5/0x1160 [ 735.251503][T18467] ? netlink_dump+0xec0/0xec0 [ 735.256181][T18467] ? ref_tracker_free+0x686/0x830 [ 735.261218][T18467] netlink_rcv_skb+0x2b3/0x4c0 [ 735.265980][T18467] ? rtnetlink_bind+0x80/0x80 [ 735.270660][T18467] ? netlink_ack+0x1160/0x1160 [ 735.275431][T18467] ? __lock_acquire+0x7d80/0x7d80 [ 735.280461][T18467] ? netlink_deliver_tap+0x2e/0x1b0 [ 735.285660][T18467] netlink_unicast+0x7b1/0x930 [ 735.290428][T18467] netlink_sendmsg+0x8d0/0xbf0 [ 735.295195][T18467] ? netlink_getsockopt+0x590/0x590 [ 735.300389][T18467] ? aa_sock_msg_perm+0x94/0x150 [ 735.305326][T18467] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 735.310609][T18467] ? security_socket_sendmsg+0x80/0xa0 [ 735.316063][T18467] ? netlink_getsockopt+0x590/0x590 [ 735.321259][T18467] ____sys_sendmsg+0x61b/0x980 [ 735.326030][T18467] ? __asan_memset+0x22/0x40 [ 735.330619][T18467] ? __sys_sendmsg_sock+0x30/0x30 [ 735.335636][T18467] ? __import_iovec+0x5f2/0x850 [ 735.340487][T18467] ? import_iovec+0x73/0xa0 [ 735.344984][T18467] ___sys_sendmsg+0x2a6/0x360 [ 735.349660][T18467] ? get_pid_task+0x20/0x1e0 [ 735.354255][T18467] ? __sys_sendmsg+0x2b0/0x2b0 [ 735.359824][T18467] ? __lock_acquire+0x7d80/0x7d80 [ 735.364868][T18467] __se_sys_sendmsg+0x1d0/0x2c0 [ 735.369722][T18467] ? __x64_sys_sendmsg+0x80/0x80 [ 735.374669][T18467] ? lockdep_hardirqs_on+0x98/0x150 [ 735.379871][T18467] do_syscall_64+0x55/0xb0 [ 735.384288][T18467] ? clear_bhb_loop+0x40/0x90 [ 735.388958][T18467] ? clear_bhb_loop+0x40/0x90 [ 735.393631][T18467] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 735.399528][T18467] RIP: 0033:0x7ff84419ce59 [ 735.403939][T18467] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 735.423542][T18467] RSP: 002b:00007ff844f96028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 735.431952][T18467] RAX: ffffffffffffffda RBX: 00007ff844416090 RCX: 00007ff84419ce59 [ 735.439920][T18467] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000007 [ 735.447888][T18467] RBP: 00007ff844f96090 R08: 0000000000000000 R09: 0000000000000000 [ 735.455854][T18467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 735.463818][T18467] R13: 00007ff844416128 R14: 00007ff844416090 R15: 00007ffd23274c58 [ 735.471805][T18467] [ 736.742136][T18506] FAULT_INJECTION: forcing a failure. [ 736.742136][T18506] name failslab, interval 1, probability 0, space 0, times 0 [ 736.755727][T18506] CPU: 0 PID: 18506 Comm: syz.1.4348 Not tainted syzkaller #0 [ 736.763241][T18506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 736.773328][T18506] Call Trace: [ 736.776631][T18506] [ 736.779590][T18506] dump_stack_lvl+0x18c/0x250 [ 736.784318][T18506] ? show_regs_print_info+0x20/0x20 [ 736.789561][T18506] ? load_image+0x420/0x420 [ 736.794102][T18506] ? __might_sleep+0xe0/0xe0 [ 736.798719][T18506] ? __lock_acquire+0x7d80/0x7d80 [ 736.803778][T18506] should_fail_ex+0x394/0x4c0 [ 736.808495][T18506] should_failslab+0x9/0x20 [ 736.813031][T18506] slab_pre_alloc_hook+0x59/0x300 [ 736.816420][T18510] netlink: 'syz.0.4349': attribute type 21 has an invalid length. [ 736.818073][T18506] ? __xdp_reg_mem_model+0x1e3/0x5a0 [ 736.818103][T18506] __kmem_cache_alloc_node+0x53/0x250 [ 736.836561][T18506] ? __asan_memset+0x22/0x40 [ 736.841168][T18506] ? __xdp_reg_mem_model+0x1e3/0x5a0 [ 736.846453][T18506] kmalloc_trace+0x2a/0xe0 [ 736.850884][T18506] __xdp_reg_mem_model+0x1e3/0x5a0 [ 736.855991][T18506] ? kvmalloc_node+0x70/0x180 [ 736.860669][T18506] ? kvmalloc_node+0x70/0x180 [ 736.865343][T18506] ? xdp_reg_mem_model+0x40/0x40 [ 736.870283][T18506] xdp_reg_mem_model+0x22/0x40 [ 736.875045][T18506] bpf_test_run_xdp_live+0x262/0x1b30 [ 736.880424][T18506] ? 0xffffffffa0004740 [ 736.884571][T18506] ? 0xffffffffa0004740 [ 736.888715][T18506] ? bpf_dispatcher_change_prog+0xc94/0xf10 [ 736.894614][T18506] ? xdp_convert_md_to_buff+0x330/0x330 [ 736.900187][T18506] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 736.906436][T18506] ? _copy_from_user+0xa5/0xe0 [ 736.911207][T18506] ? bpf_test_init+0x119/0x140 [ 736.915969][T18506] ? xdp_convert_md_to_buff+0x5b/0x330 [ 736.921426][T18506] bpf_prog_test_run_xdp+0x7d8/0x1140 [ 736.926799][T18506] ? __lock_acquire+0x7d80/0x7d80 [ 736.931831][T18506] ? dev_put+0x80/0x80 [ 736.935906][T18506] ? dev_put+0x80/0x80 [ 736.939971][T18506] bpf_prog_test_run+0x31f/0x390 [ 736.944920][T18506] __sys_bpf+0x49d/0x890 [ 736.949162][T18506] ? bpf_link_show_fdinfo+0x390/0x390 [ 736.954546][T18506] ? lock_chain_count+0x20/0x20 [ 736.959400][T18506] __x64_sys_bpf+0x7c/0x90 [ 736.963812][T18506] do_syscall_64+0x55/0xb0 [ 736.968229][T18506] ? clear_bhb_loop+0x40/0x90 [ 736.972898][T18506] ? clear_bhb_loop+0x40/0x90 [ 736.977573][T18506] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 736.983473][T18506] RIP: 0033:0x7ff84419ce59 [ 736.987886][T18506] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 737.007513][T18506] RSP: 002b:00007ff844fb7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 737.015945][T18506] RAX: ffffffffffffffda RBX: 00007ff844415fa0 RCX: 00007ff84419ce59 [ 737.023919][T18506] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 737.031887][T18506] RBP: 00007ff844fb7090 R08: 0000000000000000 R09: 0000000000000000 [ 737.039856][T18506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 737.047821][T18506] R13: 00007ff844416038 R14: 00007ff844415fa0 R15: 00007ffd23274c58 [ 737.055806][T18506] [ 737.060690][T18510] netlink: 168 bytes leftover after parsing attributes in process `syz.0.4349'. [ 737.680794][T18529] netlink: 'syz.3.4356': attribute type 3 has an invalid length. [ 737.700765][T18532] netlink: 1039 bytes leftover after parsing attributes in process `syz.1.4357'. [ 737.723459][T18529] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.4356'. [ 739.497935][T18557] netlink: 'syz.2.4365': attribute type 10 has an invalid length. [ 739.947810][T18557] team0: Port device geneve1 added [ 740.335109][T18566] mac80211_hwsim hwsim24 wlan0: entered promiscuous mode [ 740.361147][T18566] mac80211_hwsim hwsim24 wlan0: entered allmulticast mode [ 742.009118][T18589] can: request_module (can-proto-4) failed. [ 743.835951][T18638] netlink: 'syz.0.4393': attribute type 39 has an invalid length. [ 744.543953][T18646] delete_channel: no stack [ 745.535762][T18677] netlink: 'syz.1.4407': attribute type 3 has an invalid length. [ 745.568114][T18677] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.4407'. [ 745.648168][T18682] netlink: 134736 bytes leftover after parsing attributes in process `syz.2.4408'. [ 746.330632][T18694] netlink: 'syz.2.4413': attribute type 10 has an invalid length. [ 748.059907][T18731] FAULT_INJECTION: forcing a failure. [ 748.059907][T18731] name failslab, interval 1, probability 0, space 0, times 0 [ 748.104705][T18731] CPU: 0 PID: 18731 Comm: syz.1.4427 Not tainted syzkaller #0 [ 748.112243][T18731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 748.122347][T18731] Call Trace: [ 748.125661][T18731] [ 748.128617][T18731] dump_stack_lvl+0x18c/0x250 [ 748.133331][T18731] ? show_regs_print_info+0x20/0x20 [ 748.138563][T18731] ? load_image+0x420/0x420 [ 748.143097][T18731] ? __might_sleep+0xe0/0xe0 [ 748.147718][T18731] ? __lock_acquire+0x7d80/0x7d80 [ 748.152784][T18731] should_fail_ex+0x394/0x4c0 [ 748.157508][T18731] should_failslab+0x9/0x20 [ 748.162053][T18731] slab_pre_alloc_hook+0x59/0x300 [ 748.167117][T18731] ? sk_prot_alloc+0xe7/0x210 [ 748.171832][T18731] ? sk_prot_alloc+0xe7/0x210 [ 748.176547][T18731] __kmem_cache_alloc_node+0x53/0x250 [ 748.181964][T18731] ? sk_prot_alloc+0xe7/0x210 [ 748.186686][T18731] __kmalloc+0xa7/0x240 [ 748.190882][T18731] sk_prot_alloc+0xe7/0x210 [ 748.195421][T18731] ? sk_alloc+0x24/0x350 [ 748.199698][T18731] sk_alloc+0x3a/0x350 [ 748.203797][T18731] ? bpf_ctx_init+0x154/0x190 [ 748.208509][T18731] bpf_prog_test_run_skb+0x371/0x18f0 [ 748.213920][T18731] ? __fget_files+0x28/0x460 [ 748.218544][T18731] ? __fget_files+0x3fc/0x460 [ 748.223257][T18731] ? cpu_online+0x60/0x60 [ 748.227611][T18731] bpf_prog_test_run+0x31f/0x390 [ 748.232584][T18731] __sys_bpf+0x49d/0x890 [ 748.236856][T18731] ? bpf_link_show_fdinfo+0x390/0x390 [ 748.242266][T18731] ? lock_chain_count+0x20/0x20 [ 748.247141][T18731] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 748.253153][T18731] __x64_sys_bpf+0x7c/0x90 [ 748.257597][T18731] do_syscall_64+0x55/0xb0 [ 748.262051][T18731] ? clear_bhb_loop+0x40/0x90 [ 748.266757][T18731] ? clear_bhb_loop+0x40/0x90 [ 748.271468][T18731] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 748.277399][T18731] RIP: 0033:0x7ff84419ce59 [ 748.281846][T18731] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 748.301502][T18731] RSP: 002b:00007ff844fb7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 748.309964][T18731] RAX: ffffffffffffffda RBX: 00007ff844415fa0 RCX: 00007ff84419ce59 [ 748.317989][T18731] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 748.326006][T18731] RBP: 00007ff844fb7090 R08: 0000000000000000 R09: 0000000000000000 [ 748.334018][T18731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 748.342034][T18731] R13: 00007ff844416038 R14: 00007ff844415fa0 R15: 00007ffd23274c58 [ 748.350065][T18731] [ 749.074957][T18748] netlink: 'syz.1.4433': attribute type 39 has an invalid length. [ 749.500959][T18758] tun0: tun_chr_ioctl cmd 1074812118 [ 750.031223][T18766] FAULT_INJECTION: forcing a failure. [ 750.031223][T18766] name failslab, interval 1, probability 0, space 0, times 0 [ 750.045256][T18766] CPU: 0 PID: 18766 Comm: syz.0.4437 Not tainted syzkaller #0 [ 750.052774][T18766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 750.062854][T18766] Call Trace: [ 750.066166][T18766] [ 750.069116][T18766] dump_stack_lvl+0x18c/0x250 [ 750.073822][T18766] ? sctp_sendmsg+0x1519/0x27b0 [ 750.078707][T18766] ? ___sys_sendmsg+0x2a6/0x360 [ 750.083581][T18766] ? show_regs_print_info+0x20/0x20 [ 750.088795][T18766] ? load_image+0x420/0x420 [ 750.093337][T18766] should_fail_ex+0x394/0x4c0 [ 750.098073][T18766] should_failslab+0x9/0x20 [ 750.102615][T18766] slab_pre_alloc_hook+0x59/0x300 [ 750.107668][T18766] ? sctp_add_bind_addr+0x8c/0x360 [ 750.112789][T18766] __kmem_cache_alloc_node+0x53/0x250 [ 750.118180][T18766] ? sctp_add_bind_addr+0x8c/0x360 [ 750.123309][T18766] kmalloc_trace+0x2a/0xe0 [ 750.127736][T18766] sctp_add_bind_addr+0x8c/0x360 [ 750.132682][T18766] sctp_copy_local_addr_list+0x31b/0x4e0 [ 750.138324][T18766] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 750.144050][T18766] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 750.150123][T18766] ? sctp_v4_is_any+0x35/0x60 [ 750.154808][T18766] ? sctp_copy_one_addr+0x8c/0x350 [ 750.160011][T18766] sctp_bind_addr_copy+0xb3/0x3c0 [ 750.165040][T18766] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 750.171373][T18766] sctp_connect_new_asoc+0x2f9/0x6a0 [ 750.176667][T18766] ? __sctp_connect+0xd80/0xd80 [ 750.181518][T18766] ? __local_bh_enable_ip+0x13a/0x1c0 [ 750.186893][T18766] ? _local_bh_enable+0xa0/0xa0 [ 750.191740][T18766] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 750.197550][T18766] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 750.203361][T18766] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 750.208908][T18766] ? security_sctp_bind_connect+0x89/0xb0 [ 750.214635][T18766] sctp_sendmsg+0x1519/0x27b0 [ 750.219353][T18766] ? sctp_getsockopt+0xb60/0xb60 [ 750.224299][T18766] ? aa_sk_perm+0x83c/0x970 [ 750.228813][T18766] ? aa_af_perm+0x330/0x330 [ 750.233329][T18766] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 750.239804][T18766] ? sock_rps_record_flow+0x19/0x3f0 [ 750.245123][T18766] ? inet_sendmsg+0x7e/0x2a0 [ 750.249757][T18766] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 750.255071][T18766] ? inet_send_prepare+0x250/0x250 [ 750.260204][T18766] ____sys_sendmsg+0x61b/0x980 [ 750.265005][T18766] ? __asan_memset+0x22/0x40 [ 750.269643][T18766] ? __sys_sendmsg_sock+0x30/0x30 [ 750.274714][T18766] ? __import_iovec+0x5f2/0x850 [ 750.279603][T18766] ? import_iovec+0x73/0xa0 [ 750.284129][T18766] ___sys_sendmsg+0x2a6/0x360 [ 750.288827][T18766] ? get_pid_task+0x20/0x1e0 [ 750.293457][T18766] ? __sys_sendmsg+0x2b0/0x2b0 [ 750.298268][T18766] ? __lock_acquire+0x7d80/0x7d80 [ 750.303336][T18766] __se_sys_sendmsg+0x1d0/0x2c0 [ 750.308230][T18766] ? __x64_sys_sendmsg+0x80/0x80 [ 750.313235][T18766] ? lockdep_hardirqs_on+0x98/0x150 [ 750.318471][T18766] do_syscall_64+0x55/0xb0 [ 750.322925][T18766] ? clear_bhb_loop+0x40/0x90 [ 750.327637][T18766] ? clear_bhb_loop+0x40/0x90 [ 750.332330][T18766] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 750.338236][T18766] RIP: 0033:0x7f6c0339ce59 [ 750.342659][T18766] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 750.362275][T18766] RSP: 002b:00007f6c041f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 750.370751][T18766] RAX: ffffffffffffffda RBX: 00007f6c03615fa0 RCX: 00007f6c0339ce59 [ 750.378751][T18766] RDX: 0000000000008054 RSI: 0000200000000300 RDI: 0000000000000003 [ 750.386771][T18766] RBP: 00007f6c041f6090 R08: 0000000000000000 R09: 0000000000000000 [ 750.394771][T18766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 750.402754][T18766] R13: 00007f6c03616038 R14: 00007f6c03615fa0 R15: 00007fff00f6af88 [ 750.410749][T18766] [ 751.318898][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 751.326188][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 752.029624][T18796] tun0: tun_chr_ioctl cmd 1074812118 [ 752.041163][T18799] FAULT_INJECTION: forcing a failure. [ 752.041163][T18799] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 752.081609][T18799] CPU: 0 PID: 18799 Comm: syz.1.4448 Not tainted syzkaller #0 [ 752.089161][T18799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 752.099257][T18799] Call Trace: [ 752.102653][T18799] [ 752.105665][T18799] dump_stack_lvl+0x18c/0x250 [ 752.110404][T18799] ? show_regs_print_info+0x20/0x20 [ 752.115665][T18799] ? load_image+0x420/0x420 [ 752.120216][T18799] ? __might_fault+0xaa/0x120 [ 752.124944][T18799] ? __lock_acquire+0x7d80/0x7d80 [ 752.130030][T18799] ? __virt_addr_valid+0x10c/0x380 [ 752.135256][T18799] should_fail_ex+0x394/0x4c0 [ 752.139946][T18799] _copy_from_user+0x2f/0xe0 [ 752.144538][T18799] generic_map_update_batch+0x53e/0x800 [ 752.150092][T18799] ? rcu_read_unlock+0xa0/0xa0 [ 752.154881][T18799] ? __fdget+0x180/0x210 [ 752.159167][T18799] ? rcu_read_unlock+0xa0/0xa0 [ 752.163950][T18799] bpf_map_do_batch+0x3f2/0x600 [ 752.168819][T18799] ? bpf_lsm_audit_rule_free+0x10/0x10 [ 752.174298][T18799] __sys_bpf+0x381/0x890 [ 752.178544][T18799] ? bpf_link_show_fdinfo+0x390/0x390 [ 752.183925][T18799] ? lock_chain_count+0x20/0x20 [ 752.188771][T18799] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 752.194770][T18799] __x64_sys_bpf+0x7c/0x90 [ 752.199191][T18799] do_syscall_64+0x55/0xb0 [ 752.203610][T18799] ? clear_bhb_loop+0x40/0x90 [ 752.208286][T18799] ? clear_bhb_loop+0x40/0x90 [ 752.212962][T18799] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 752.218860][T18799] RIP: 0033:0x7ff84419ce59 [ 752.223281][T18799] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 752.242897][T18799] RSP: 002b:00007ff844f96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 752.251315][T18799] RAX: ffffffffffffffda RBX: 00007ff844416090 RCX: 00007ff84419ce59 [ 752.259289][T18799] RDX: 0000000000000038 RSI: 0000200000000380 RDI: 000000000000001a [ 752.267263][T18799] RBP: 00007ff844f96090 R08: 0000000000000000 R09: 0000000000000000 [ 752.275234][T18799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 752.283243][T18799] R13: 00007ff844416128 R14: 00007ff844416090 R15: 00007ffd23274c58 [ 752.291247][T18799] [ 752.319992][T18801] syzkaller0: entered promiscuous mode [ 752.326934][T18801] syzkaller0: entered allmulticast mode [ 752.766135][T18819] €Â0: renamed from batadv_slave_1 (while UP) [ 753.151841][T18831] tun0: tun_chr_ioctl cmd 1074812118 [ 753.747319][T18839] netlink: 'syz.3.4463': attribute type 153 has an invalid length. [ 753.766915][T18839] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.4463'. [ 754.845999][T18872] tun0: tun_chr_ioctl cmd 1074812118 [ 757.178888][T18912] tun0: tun_chr_ioctl cmd 1074812118 [ 757.275667][T18916] FAULT_INJECTION: forcing a failure. [ 757.275667][T18916] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 757.305191][T18916] CPU: 0 PID: 18916 Comm: syz.1.4488 Not tainted syzkaller #0 [ 757.312820][T18916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 757.323094][T18916] Call Trace: [ 757.326487][T18916] [ 757.329533][T18916] dump_stack_lvl+0x18c/0x250 [ 757.334378][T18916] ? show_regs_print_info+0x20/0x20 [ 757.339713][T18916] ? load_image+0x420/0x420 [ 757.344374][T18916] ? __lock_acquire+0x7d80/0x7d80 [ 757.349535][T18916] ? snprintf+0xe9/0x140 [ 757.353936][T18916] should_fail_ex+0x394/0x4c0 [ 757.358790][T18916] _copy_to_user+0x2f/0xa0 [ 757.363347][T18916] simple_read_from_buffer+0xe7/0x150 [ 757.368905][T18916] proc_fail_nth_read+0x1e8/0x260 [ 757.374088][T18916] ? proc_fault_inject_write+0x360/0x360 [ 757.379909][T18916] ? fsnotify_perm+0x271/0x5e0 [ 757.384799][T18916] ? proc_fault_inject_write+0x360/0x360 [ 757.390601][T18916] vfs_read+0x298/0x990 [ 757.394929][T18916] ? kernel_read+0x1e0/0x1e0 [ 757.399666][T18916] ? __fget_files+0x28/0x460 [ 757.404387][T18916] ? __fget_files+0x3fc/0x460 [ 757.409254][T18916] ? __fdget_pos+0x2a3/0x330 [ 757.413953][T18916] ? ksys_read+0x74/0x260 [ 757.418423][T18916] ksys_read+0x151/0x260 [ 757.422808][T18916] ? vfs_write+0x9a0/0x9a0 [ 757.427376][T18916] ? lockdep_hardirqs_on+0x98/0x150 [ 757.432724][T18916] do_syscall_64+0x55/0xb0 [ 757.437249][T18916] ? clear_bhb_loop+0x40/0x90 [ 757.442029][T18916] ? clear_bhb_loop+0x40/0x90 [ 757.446840][T18916] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 757.452856][T18916] RIP: 0033:0x7ff84415d68e [ 757.457394][T18916] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 757.477151][T18916] RSP: 002b:00007ff844fb6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 757.485728][T18916] RAX: ffffffffffffffda RBX: 00007ff844fb76c0 RCX: 00007ff84415d68e [ 757.493827][T18916] RDX: 000000000000000f RSI: 00007ff844fb70a0 RDI: 0000000000000005 [ 757.501926][T18916] RBP: 00007ff844fb7090 R08: 0000000000000000 R09: 0000000000000000 [ 757.510024][T18916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 757.518111][T18916] R13: 00007ff844416038 R14: 00007ff844415fa0 R15: 00007ffd23274c58 [ 757.526293][T18916] [ 761.001248][T18947] netlink: 'syz.0.4496': attribute type 3 has an invalid length. [ 761.050051][T18947] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4496'. [ 761.072041][ T1007] .3ãc¤±: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 761.085477][T18951] netlink: 'syz.0.4496': attribute type 3 has an invalid length. [ 761.093921][T18951] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4496'. [ 761.650594][T18969] tun0: tun_chr_ioctl cmd 1074812118 [ 763.414234][T19002] netlink: 'syz.3.4513': attribute type 3 has an invalid length. [ 763.422302][T19002] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4513'. [ 763.477749][T19002] tun0: tun_chr_ioctl cmd 1074812118 [ 763.809736][T19017] syzkaller0: entered promiscuous mode [ 763.831382][T19017] syzkaller0: entered allmulticast mode [ 763.900922][T19017] sock: sock_timestamping_bind_phc: sock not bind to device [ 764.192054][T19028] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4523'. [ 764.458993][T19033] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.4524'. [ 764.482034][T19033] netlink: 'syz.2.4524': attribute type 5 has an invalid length. [ 764.796131][T19038] FAULT_INJECTION: forcing a failure. [ 764.796131][T19038] name failslab, interval 1, probability 0, space 0, times 0 [ 764.823709][T19038] CPU: 0 PID: 19038 Comm: syz.2.4526 Not tainted syzkaller #0 [ 764.831255][T19038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 764.841353][T19038] Call Trace: [ 764.844663][T19038] [ 764.847627][T19038] dump_stack_lvl+0x18c/0x250 [ 764.852350][T19038] ? show_regs_print_info+0x20/0x20 [ 764.857594][T19038] ? load_image+0x420/0x420 [ 764.862145][T19038] ? __might_sleep+0xe0/0xe0 [ 764.866777][T19038] ? __lock_acquire+0x7d80/0x7d80 [ 764.871854][T19038] should_fail_ex+0x394/0x4c0 [ 764.876583][T19038] should_failslab+0x9/0x20 [ 764.881132][T19038] slab_pre_alloc_hook+0x59/0x300 [ 764.886202][T19038] ? kvmalloc_node+0x70/0x180 [ 764.890924][T19038] ? kvmalloc_node+0x70/0x180 [ 764.895640][T19038] __kmem_cache_alloc_node+0x53/0x250 [ 764.901056][T19038] ? kvmalloc_node+0x70/0x180 [ 764.905771][T19038] __kmalloc_node+0xa6/0x240 [ 764.910407][T19038] kvmalloc_node+0x70/0x180 [ 764.914962][T19038] page_pool_create+0x1eb/0x5c0 [ 764.919857][T19038] bpf_test_run_xdp_live+0x203/0x1b30 [ 764.925284][T19038] ? 0xffffffffa0004740 [ 764.929471][T19038] ? 0xffffffffa0004740 [ 764.933650][T19038] ? bpf_dispatcher_change_prog+0xc94/0xf10 [ 764.939581][T19038] ? xdp_convert_md_to_buff+0x330/0x330 [ 764.945201][T19038] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 764.951498][T19038] ? xdp_convert_md_to_buff+0x5b/0x330 [ 764.957003][T19038] bpf_prog_test_run_xdp+0x7d8/0x1140 [ 764.962430][T19038] ? __lock_acquire+0x7d80/0x7d80 [ 764.967512][T19038] ? dev_put+0x80/0x80 [ 764.971642][T19038] ? dev_put+0x80/0x80 [ 764.975753][T19038] bpf_prog_test_run+0x31f/0x390 [ 764.980740][T19038] __sys_bpf+0x49d/0x890 [ 764.985033][T19038] ? bpf_link_show_fdinfo+0x390/0x390 [ 764.990468][T19038] ? lock_chain_count+0x20/0x20 [ 764.995376][T19038] __x64_sys_bpf+0x7c/0x90 [ 764.999840][T19038] do_syscall_64+0x55/0xb0 [ 765.004299][T19038] ? clear_bhb_loop+0x40/0x90 [ 765.009005][T19038] ? clear_bhb_loop+0x40/0x90 [ 765.013718][T19038] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 765.019671][T19038] RIP: 0033:0x7f2ff619ce59 [ 765.024134][T19038] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 765.043791][T19038] RSP: 002b:00007f2ff7058028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 765.052244][T19038] RAX: ffffffffffffffda RBX: 00007f2ff6415fa0 RCX: 00007f2ff619ce59 [ 765.060256][T19038] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 765.068277][T19038] RBP: 00007f2ff7058090 R08: 0000000000000000 R09: 0000000000000000 [ 765.076301][T19038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 765.084313][T19038] R13: 00007f2ff6416038 R14: 00007f2ff6415fa0 R15: 00007ffcb9f8d1a8 [ 765.092348][T19038] [ 765.143930][T19038] page_pool_create() gave up with errno -12 [ 765.426719][T19045] netlink: 'syz.2.4529': attribute type 3 has an invalid length. [ 765.445728][T19045] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4529'. [ 765.484009][T19045] tun0: tun_chr_ioctl cmd 1074812118 [ 765.766001][T19055] netlink: 212912 bytes leftover after parsing attributes in process `syz.2.4533'. [ 765.793315][T19055] openvswitch: netlink: IP tunnel dst address not specified [ 766.516548][T19074] netlink: 'syz.0.4538': attribute type 12 has an invalid length. [ 766.553461][T19074] netlink: 'syz.0.4538': attribute type 11 has an invalid length. [ 766.561610][T19074] netlink: 188816 bytes leftover after parsing attributes in process `syz.0.4538'. [ 766.717597][T19077] netlink: 144308 bytes leftover after parsing attributes in process `syz.1.4539'. [ 767.018903][T19086] netlink: 'syz.0.4541': attribute type 3 has an invalid length. [ 767.049956][T19086] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4541'. [ 767.140355][T19086] tun0: tun_chr_ioctl cmd 1074812118 [ 767.345388][T19090] FAULT_INJECTION: forcing a failure. [ 767.345388][T19090] name failslab, interval 1, probability 0, space 0, times 0 [ 767.386298][T19090] CPU: 0 PID: 19090 Comm: syz.2.4544 Not tainted syzkaller #0 [ 767.393835][T19090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 767.403913][T19090] Call Trace: [ 767.407209][T19090] [ 767.410155][T19090] dump_stack_lvl+0x18c/0x250 [ 767.414862][T19090] ? sctp_sendmsg+0x1519/0x27b0 [ 767.419738][T19090] ? ___sys_sendmsg+0x2a6/0x360 [ 767.424617][T19090] ? show_regs_print_info+0x20/0x20 [ 767.429838][T19090] ? load_image+0x420/0x420 [ 767.434374][T19090] should_fail_ex+0x394/0x4c0 [ 767.439083][T19090] should_failslab+0x9/0x20 [ 767.443612][T19090] slab_pre_alloc_hook+0x59/0x300 [ 767.448666][T19090] ? sctp_add_bind_addr+0x8c/0x360 [ 767.453826][T19090] __kmem_cache_alloc_node+0x53/0x250 [ 767.459231][T19090] ? sctp_add_bind_addr+0x8c/0x360 [ 767.464365][T19090] kmalloc_trace+0x2a/0xe0 [ 767.468806][T19090] sctp_add_bind_addr+0x8c/0x360 [ 767.473776][T19090] sctp_copy_local_addr_list+0x31b/0x4e0 [ 767.479433][T19090] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 767.485186][T19090] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 767.491278][T19090] ? sctp_v6_is_any+0x64/0x70 [ 767.495982][T19090] ? sctp_copy_one_addr+0x8c/0x350 [ 767.501144][T19090] sctp_bind_addr_copy+0xb3/0x3c0 [ 767.506200][T19090] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 767.512557][T19090] sctp_connect_new_asoc+0x2f9/0x6a0 [ 767.517871][T19090] ? __sctp_connect+0xd80/0xd80 [ 767.522745][T19090] ? __local_bh_enable_ip+0x13a/0x1c0 [ 767.528147][T19090] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 767.533717][T19090] ? security_sctp_bind_connect+0x89/0xb0 [ 767.539466][T19090] sctp_sendmsg+0x1519/0x27b0 [ 767.544185][T19090] ? sctp_getsockopt+0xb60/0xb60 [ 767.549143][T19090] ? aa_sk_perm+0x83c/0x970 [ 767.553674][T19090] ? aa_af_perm+0x330/0x330 [ 767.558191][T19090] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 767.564627][T19090] ? sock_rps_record_flow+0x19/0x3f0 [ 767.569940][T19090] ? inet_sendmsg+0xce/0x2a0 [ 767.574551][T19090] ? inet_send_prepare+0x250/0x250 [ 767.579685][T19090] ____sys_sendmsg+0x61b/0x980 [ 767.584484][T19090] ? __sys_sendmsg_sock+0x30/0x30 [ 767.589541][T19090] ? __import_iovec+0x5f2/0x850 [ 767.594421][T19090] ? import_iovec+0x73/0xa0 [ 767.598946][T19090] ___sys_sendmsg+0x2a6/0x360 [ 767.603649][T19090] ? __sys_sendmsg+0x2b0/0x2b0 [ 767.608462][T19090] ? trace_call_bpf+0xc3/0x6c0 [ 767.613286][T19090] __se_sys_sendmsg+0x1d0/0x2c0 [ 767.618160][T19090] ? __x64_sys_sendmsg+0x80/0x80 [ 767.623137][T19090] ? lockdep_hardirqs_on+0x98/0x150 [ 767.628361][T19090] do_syscall_64+0x55/0xb0 [ 767.632794][T19090] ? clear_bhb_loop+0x40/0x90 [ 767.637485][T19090] ? clear_bhb_loop+0x40/0x90 [ 767.642186][T19090] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 767.648105][T19090] RIP: 0033:0x7f2ff619ce59 [ 767.652551][T19090] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 767.672184][T19090] RSP: 002b:00007f2ff7058028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 767.680628][T19090] RAX: ffffffffffffffda RBX: 00007f2ff6415fa0 RCX: 00007f2ff619ce59 [ 767.688621][T19090] RDX: 0000000000000041 RSI: 0000200000000600 RDI: 0000000000000003 [ 767.696612][T19090] RBP: 00007f2ff7058090 R08: 0000000000000000 R09: 0000000000000000 [ 767.704602][T19090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 767.712589][T19090] R13: 00007f2ff6416038 R14: 00007f2ff6415fa0 R15: 00007ffcb9f8d1a8 [ 767.720608][T19090] [ 769.026770][T19098] netlink: 'syz.2.4546': attribute type 10 has an invalid length. [ 769.060462][T19102] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.4548'. [ 769.364282][T19113] netlink: 184 bytes leftover after parsing attributes in process `syz.1.4550'. [ 769.524532][T19115] netlink: 'syz.2.4552': attribute type 13 has an invalid length. [ 769.532457][T19115] netlink: 'syz.2.4552': attribute type 58 has an invalid length. [ 769.553303][T19115] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4552'. [ 770.062871][T19128] netlink: 'syz.0.4557': attribute type 3 has an invalid length. [ 770.080121][T19128] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4557'. [ 770.109967][T19128] tun0: tun_chr_ioctl cmd 1074812118 [ 771.465365][T19154] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.4567'. [ 772.140043][T19171] netlink: 'syz.2.4574': attribute type 3 has an invalid length. [ 772.152541][T19171] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4574'. [ 772.170606][T19173] netlink: 'syz.1.4575': attribute type 1 has an invalid length. [ 772.180274][T19171] tun0: tun_chr_ioctl cmd 1074812118 [ 773.197062][T19205] netlink: 'syz.3.4588': attribute type 3 has an invalid length. [ 773.214475][T19205] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4588'. [ 773.260330][T19205] tun0: tun_chr_ioctl cmd 1074812118 [ 775.713939][T19249] bridge0: port 2(batadv0) entered blocking state [ 775.721016][T19249] bridge0: port 2(batadv0) entered disabled state [ 775.738646][T19249] batadv0: entered allmulticast mode [ 775.750845][T19249] batadv0: entered promiscuous mode [ 776.142170][ T12] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 776.151924][ T12] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 793.302145][ T5788] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 793.311932][ T5788] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 793.320380][ T5788] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 793.329505][ T5788] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 793.340098][ T5788] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 793.347924][ T5788] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 793.554773][ T5787] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 793.566029][ T5787] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 793.574267][ T5787] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 793.585095][ T5787] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 793.593366][ T5787] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 793.600782][ T5787] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 793.805017][ T5788] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 793.815213][ T5788] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 793.823337][ T5788] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 793.831847][ T5788] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 793.840063][ T5788] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 793.848872][ T5788] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 793.959418][ T5787] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 793.971174][ T5787] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 793.983826][ T5787] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 794.005797][ T5787] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 794.016020][ T5787] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 794.023730][ T5787] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 794.728736][T19271] chnl_net:caif_netlink_parms(): no params data found [ 795.030842][T19276] chnl_net:caif_netlink_parms(): no params data found [ 795.051272][T19278] chnl_net:caif_netlink_parms(): no params data found [ 795.080118][T19280] chnl_net:caif_netlink_parms(): no params data found [ 795.307116][T19271] bridge0: port 1(bridge_slave_0) entered blocking state [ 795.315432][T19271] bridge0: port 1(bridge_slave_0) entered disabled state [ 795.333279][T19271] bridge_slave_0: entered allmulticast mode [ 795.342384][T19271] bridge_slave_0: entered promiscuous mode [ 795.367235][T19271] bridge0: port 2(bridge_slave_1) entered blocking state [ 795.383363][T19271] bridge0: port 2(bridge_slave_1) entered disabled state [ 795.390751][T19271] bridge_slave_1: entered allmulticast mode [ 795.403264][ T5787] Bluetooth: hci3: command tx timeout [ 795.422917][T19271] bridge_slave_1: entered promiscuous mode [ 795.669043][T19271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 795.713520][ T5787] Bluetooth: hci5: command tx timeout [ 795.794973][T19271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 795.854786][T19280] bridge0: port 1(bridge_slave_0) entered blocking state [ 795.862074][T19280] bridge0: port 1(bridge_slave_0) entered disabled state [ 795.873476][T19280] bridge_slave_0: entered allmulticast mode [ 795.892684][T19280] bridge_slave_0: entered promiscuous mode [ 795.901182][T19278] bridge0: port 1(bridge_slave_0) entered blocking state [ 795.913282][T19278] bridge0: port 1(bridge_slave_0) entered disabled state [ 795.920641][T19278] bridge_slave_0: entered allmulticast mode [ 795.946922][T19278] bridge_slave_0: entered promiscuous mode [ 795.953681][ T5787] Bluetooth: hci6: command tx timeout [ 795.973833][T19276] bridge0: port 1(bridge_slave_0) entered blocking state [ 795.981007][T19276] bridge0: port 1(bridge_slave_0) entered disabled state [ 796.002685][T19276] bridge_slave_0: entered allmulticast mode [ 796.012407][T19276] bridge_slave_0: entered promiscuous mode [ 796.092796][T19280] bridge0: port 2(bridge_slave_1) entered blocking state [ 796.113548][ T5787] Bluetooth: hci7: command tx timeout [ 796.119969][T19280] bridge0: port 2(bridge_slave_1) entered disabled state [ 796.133528][T19280] bridge_slave_1: entered allmulticast mode [ 796.153468][T19280] bridge_slave_1: entered promiscuous mode [ 796.171082][T19278] bridge0: port 2(bridge_slave_1) entered blocking state [ 796.178732][T19278] bridge0: port 2(bridge_slave_1) entered disabled state [ 796.193808][T19278] bridge_slave_1: entered allmulticast mode [ 796.213690][T19278] bridge_slave_1: entered promiscuous mode [ 796.222291][T19276] bridge0: port 2(bridge_slave_1) entered blocking state [ 796.241762][T19276] bridge0: port 2(bridge_slave_1) entered disabled state [ 796.251350][T19276] bridge_slave_1: entered allmulticast mode [ 796.259811][T19276] bridge_slave_1: entered promiscuous mode [ 796.289682][T19271] team0: Port device team_slave_0 added [ 796.324016][ T12] .3ãc¤±: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 796.395245][T19271] team0: Port device team_slave_1 added [ 796.518825][T19280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 796.542712][T19278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 796.572375][T19276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 796.652490][T19280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 797.473605][ T5787] Bluetooth: hci3: command tx timeout [ 797.800158][ T5787] Bluetooth: hci5: command tx timeout [ 798.033488][ T5787] Bluetooth: hci6: command tx timeout [ 798.193436][ T5787] Bluetooth: hci7: command tx timeout [ 799.553451][ T5787] Bluetooth: hci3: command tx timeout [ 799.881180][ T5787] Bluetooth: hci5: command tx timeout [ 800.123112][ T5787] Bluetooth: hci6: command tx timeout [ 800.273506][ T5787] Bluetooth: hci7: command tx timeout [ 801.633466][ T5787] Bluetooth: hci3: command tx timeout [ 801.959821][ T5787] Bluetooth: hci5: command tx timeout [ 802.199081][ T5787] Bluetooth: hci6: command tx timeout [ 802.353537][ T5787] Bluetooth: hci7: command tx timeout [ 812.758050][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 812.765989][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 854.648707][ T5788] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 854.660177][ T5788] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 854.676802][ T5788] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 854.695258][ T5788] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 854.703342][ T5788] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 854.710917][ T5788] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 854.907026][ T5787] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 854.917886][ T5787] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 854.926635][ T5787] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 854.964112][ T5787] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 854.974514][ T5787] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 854.982001][ T5787] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 855.154612][ T5787] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 855.167010][ T5787] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 855.176137][ T5787] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 855.185977][ T5787] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 855.194350][ T5787] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 855.201895][ T5787] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 855.322116][ T5788] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 855.333044][ T5788] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 855.341987][ T5788] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 855.358059][ T5788] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 855.367175][ T5788] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 855.374918][ T5788] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 856.753519][ T5788] Bluetooth: hci8: command tx timeout [ 857.073473][ T5788] Bluetooth: hci9: command tx timeout [ 857.234564][ T5788] Bluetooth: hci10: command tx timeout [ 857.481162][ T5788] Bluetooth: hci11: command tx timeout [ 858.833608][ T5787] Bluetooth: hci8: command tx timeout [ 859.153908][ T5788] Bluetooth: hci9: command tx timeout [ 859.324436][ T5788] Bluetooth: hci10: command tx timeout [ 859.553595][ T5788] Bluetooth: hci11: command tx timeout [ 860.913515][ T5788] Bluetooth: hci8: command tx timeout [ 861.234182][ T5788] Bluetooth: hci9: command tx timeout [ 861.398202][ T5787] Bluetooth: hci10: command tx timeout [ 861.633535][ T5787] Bluetooth: hci11: command tx timeout [ 862.993446][ T5787] Bluetooth: hci8: command tx timeout [ 863.313587][ T5787] Bluetooth: hci9: command tx timeout [ 863.473548][ T5787] Bluetooth: hci10: command tx timeout [ 863.716244][ T5787] Bluetooth: hci11: command tx timeout [ 874.198519][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 874.213258][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 881.143189][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 881.149977][ C0] rcu: 0-....: (10264 ticks this GP) idle=a704/1/0x4000000000000000 softirq=74003/74004 fqs=5209 [ 881.162375][ C0] rcu: hardirqs softirqs csw/system [ 881.168782][ C0] rcu: number: 1363824 172 0 [ 881.175179][ C0] rcu: cputime: 20176 32320 32 ==> 52510(ms) [ 881.183049][ C0] rcu: (t=10504 jiffies g=103285 q=2587 ncpus=2) [ 881.189521][ C0] CPU: 0 PID: 19256 Comm: syz.1.4607 Not tainted syzkaller #0 [ 881.196992][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 881.207043][ C0] RIP: 0010:preempt_count_sub+0x65/0x160 [ 881.212681][ C0] Code: ff ff ff 7f 39 cf 7f 25 81 ff ff 00 00 00 0f 93 c1 84 c0 0f 95 c0 08 c8 74 53 65 8b 05 7c 4e a7 7e f7 df 65 01 3d 73 4e a7 7e <5b> 5d c3 e8 03 79 c9 02 85 c0 74 f4 48 c7 c0 a0 1a 8b 8e 48 c1 e8 [ 881.232278][ C0] RSP: 0018:ffffc90000007380 EFLAGS: 00000213 [ 881.238328][ C0] RAX: 0000000000000102 RBX: dffffc0000000000 RCX: 0000000000000100 [ 881.246286][ C0] RDX: 0000000000000100 RSI: ffffc90000007918 RDI: 00000000ffffffff [ 881.254240][ C0] RBP: 0000000000000002 R08: ffff888079953c00 R09: 0000000000000003 [ 881.262195][ C0] R10: 0000000000000004 R11: 0000000000000100 R12: ffffc90000007918 [ 881.270151][ C0] R13: ffffc90000007468 R14: ffffc90000007960 R15: ffffc90000007478 [ 881.278118][ C0] FS: 00007ff844fb76c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 881.287030][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 881.293599][ C0] CR2: 0000000100000000 CR3: 00000000683d5000 CR4: 00000000003506f0 [ 881.301556][ C0] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 881.309513][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 881.317469][ C0] Call Trace: [ 881.320735][ C0] [ 881.323570][ C0] unwind_next_frame+0x1d1b/0x2990 [ 881.328678][ C0] ? __alloc_skb+0x138/0x2c0 [ 881.333259][ C0] ? __alloc_skb+0x138/0x2c0 [ 881.337830][ C0] ? stack_trace_save+0x100/0x100 [ 881.342840][ C0] arch_stack_walk+0x144/0x190 [ 881.347605][ C0] ? __netdev_alloc_skb+0x10c/0x500 [ 881.352789][ C0] stack_trace_save+0xaa/0x100 [ 881.357539][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 881.362643][ C0] kasan_set_track+0x4e/0x70 [ 881.367222][ C0] ? kasan_set_track+0x4e/0x70 [ 881.371965][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 881.376975][ C0] ? slab_post_alloc_hook+0x6a/0x4d0 [ 881.382250][ C0] ? kmem_cache_alloc_node+0x1af/0x310 [ 881.387691][ C0] ? kmalloc_reserve+0x95/0x240 [ 881.392522][ C0] ? __alloc_skb+0x138/0x2c0 [ 881.397129][ C0] __kasan_slab_alloc+0x6c/0x80 [ 881.401966][ C0] slab_post_alloc_hook+0x6a/0x4d0 [ 881.407075][ C0] kmem_cache_alloc_node+0x1af/0x310 [ 881.412349][ C0] ? kmalloc_reserve+0x95/0x240 [ 881.417186][ C0] kmalloc_reserve+0x95/0x240 [ 881.421863][ C0] __alloc_skb+0x138/0x2c0 [ 881.426266][ C0] __netdev_alloc_skb+0x10c/0x500 [ 881.431275][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 881.437429][ C0] ? kmalloc_reserve+0x240/0x240 [ 881.442378][ C0] __ieee80211_beacon_get+0xd5d/0x1520 [ 881.447830][ C0] ? __ieee80211_beacon_get+0x36/0x1520 [ 881.453374][ C0] ieee80211_beacon_get_tim+0xbf/0x580 [ 881.458821][ C0] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 881.465577][ C0] mac80211_hwsim_beacon_tx+0x3bd/0x770 [ 881.471119][ C0] __iterate_interfaces+0x225/0x4c0 [ 881.476307][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 881.482533][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 881.489712][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 881.495939][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 881.502949][ C0] mac80211_hwsim_beacon+0xbb/0x1b0 [ 881.508137][ C0] ? hw_scan_work+0xf10/0xf10 [ 881.512798][ C0] __hrtimer_run_queues+0x525/0xc10 [ 881.518001][ C0] ? hrtimer_interrupt+0x980/0x980 [ 881.523095][ C0] ? read_tsc+0x9/0x20 [ 881.527158][ C0] hrtimer_run_softirq+0x177/0x290 [ 881.532258][ C0] handle_softirqs+0x27d/0x820 [ 881.537006][ C0] ? read_tsc+0x9/0x20 [ 881.541059][ C0] ? ktime_get+0x24b/0x280 [ 881.545461][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 881.550211][ C0] ? do_softirq+0x1a0/0x1a0 [ 881.554701][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 881.559890][ C0] __irq_exit_rcu+0xd3/0x190 [ 881.564467][ C0] ? irq_exit_rcu+0x20/0x20 [ 881.568966][ C0] irq_exit_rcu+0x9/0x20 [ 881.573194][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 881.578824][ C0] [ 881.581736][ C0] [ 881.584654][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 881.590627][ C0] RIP: 0010:__schedule+0x15d/0x4660 [ 881.595815][ C0] Code: 00 fc ff df 80 3c 08 00 74 08 4c 89 f7 e8 6b 84 53 f7 4d 8b 36 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 <74> 08 4c 89 f7 e8 49 84 53 f7 49 81 3e 9d 6e ac 57 0f 85 c6 16 00 [ 881.615413][ C0] RSP: 0018:ffffc90003747860 EFLAGS: 00000246 [ 881.621466][ C0] RAX: 1ffff920006e8000 RBX: ffffffff8ca7aa30 RCX: dffffc0000000000 [ 881.629425][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90003747a00 [ 881.637396][ C0] RBP: ffffc90003747a70 R08: ffffc900037479ff R09: 0000000000000000 [ 881.645353][ C0] R10: ffffc900037479f0 R11: fffff520006e8f40 R12: 0000000000000001 [ 881.653310][ C0] R13: ffff8880b8e00000 R14: ffffc90003740000 R15: ffff8880b8e3cca0 [ 881.661282][ C0] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 881.666998][ C0] ? perf_trace_preemptirq_template+0x269/0x330 [ 881.673262][ C0] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 881.680446][ C0] ? lock_chain_count+0x20/0x20 [ 881.685285][ C0] ? asan.module_dtor+0x20/0x20 [ 881.690117][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 881.696258][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 881.701450][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 881.707604][ C0] preempt_schedule_irq+0xbf/0x150 [ 881.712701][ C0] ? preempt_schedule_notrace+0x110/0x110 [ 881.718407][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 881.724206][ C0] irqentry_exit+0x67/0x70 [ 881.728617][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 881.734585][ C0] RIP: 0010:kasan_check_range+0x89/0x290 [ 881.740208][ C0] Code: 00 fc ff df 4d 8d 34 19 4d 89 f4 4d 29 dc 49 83 fc 10 7f 29 4d 85 e4 0f 84 3d 01 00 00 4c 89 cb 48 f7 d3 4c 01 fb 41 80 3b 00 <0f> 85 8d 01 00 00 49 ff c3 48 ff c3 75 ee e9 1d 01 00 00 44 89 dd [ 881.759800][ C0] RSP: 0018:ffffc90003747be8 EFLAGS: 00000246 [ 881.765854][ C0] RAX: ffffc90000a37a01 RBX: ffffffffffffffff RCX: ffffffff817b8f6a [ 881.773822][ C0] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffc90000a37a00 [ 881.781774][ C0] RBP: ffffc90003747d30 R08: ffffc90000a37a03 R09: 1ffff92000146f40 [ 881.789731][ C0] R10: dffffc0000000000 R11: fffff52000146f40 R12: 0000000000000001 [ 881.797688][ C0] R13: 00007ff844415fac R14: fffff52000146f41 R15: 1ffff92000146f40 [ 881.805654][ C0] ? futex_wake+0x15a/0x4f0 [ 881.810160][ C0] futex_wake+0x15a/0x4f0 [ 881.814479][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 881.820623][ C0] ? futex_wake_mark+0x150/0x150 [ 881.825548][ C0] ? do_futex+0x336/0x3e0 [ 881.829861][ C0] do_futex+0x35d/0x3e0 [ 881.834002][ C0] ? __ia32_sys_get_robust_list+0x110/0x110 [ 881.839881][ C0] ? lock_chain_count+0x20/0x20 [ 881.844722][ C0] __se_sys_futex+0x3a9/0x440 [ 881.849383][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 881.855524][ C0] ? __x64_sys_futex+0xf0/0xf0 [ 881.860277][ C0] ? __x64_sys_futex+0x21/0xf0 [ 881.865026][ C0] do_syscall_64+0x55/0xb0 [ 881.869430][ C0] ? clear_bhb_loop+0x40/0x90 [ 881.874089][ C0] ? clear_bhb_loop+0x40/0x90 [ 881.878748][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 881.884674][ C0] RIP: 0033:0x7ff84419ce59 [ 881.889119][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 881.908737][ C0] RSP: 002b:00007ff844fb70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 881.917137][ C0] RAX: ffffffffffffffda RBX: 00007ff844415fa8 RCX: 00007ff84419ce59 [ 881.925092][ C0] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ff844415fac [ 881.933043][ C0] RBP: 00007ff844415fa0 R08: 0000000000745a24 R09: 0000000000000000 [ 881.940997][ C0] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 881.948954][ C0] R13: 00007ff844416038 R14: 00007ffd23274b70 R15: 00007ffd23274c58 [ 881.956923][ C0] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)