last executing test programs: 21m17.214605811s ago: executing program 3 (id=125): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000900)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x2420, 0xac5d}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x404, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000020000000000000000000003000000000300000003000000000000000000000000000001050000001000000400000000000000090200"], 0x0, 0x4e}, 0x28) socket$kcm(0x10, 0x400000002, 0x0) socket$kcm(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0xfffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x810000a6, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888fb", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (fail_nth: 2) 21m13.837651641s ago: executing program 3 (id=133): r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000080)=ANY=[@ANYRES8=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x52, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async) r3 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7) (async) recvmsg(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000003200)=""/4073, 0xfe9}, {0x0}, {0x0}, {0x0}], 0x5}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async) recvmsg$kcm(r4, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x104003, 0xac5d, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x0, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r5 = socket$kcm(0x23, 0x5, 0x0) (async) perf_event_open$cgroup(&(0x7f0000004f80)={0x2, 0x80, 0x8e, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) (async) r8 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000d40)}, 0x4000050) (async) sendmsg$kcm(r8, 0x0, 0x480c0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[], 0x0, 0x46}, 0x28) (async) sendmsg$kcm(r5, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x400c84c) (async) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89ed, 0x0) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) (async) gettid() 21m13.232154825s ago: executing program 3 (id=138): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000900)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x2420, 0xac5d}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x404, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000020000000000000000000003000000000300000003000000000000000000000000000001050000001000000400000000000000090200"], 0x0, 0x4e}, 0x28) socket$kcm(0x10, 0x400000002, 0x0) socket$kcm(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0xfffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x810000a6, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888fb", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 21m9.98590118s ago: executing program 3 (id=142): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0xc112, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000010000)=ANY=[@ANYRES8, @ANYBLOB="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"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000010000)="b9fa0307110800a6a4321ab9a703c8e0ffff00124000638477fbac141416e00003f511f8be4c73c30e251f5ce0fa0a", 0x0, 0xfffffffc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 21m6.760957378s ago: executing program 3 (id=150): bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./cgroup\x00'}, 0x18) unlink(&(0x7f0000000080)='./cgroup\x00') bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./cgroup\x00'}, 0x18) (async) unlink(&(0x7f0000000080)='./cgroup\x00') (async) 21m6.16793697s ago: executing program 3 (id=155): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x0, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x23, 0x5, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000004f80)={0x2, 0x80, 0x8e, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="1400000036000b635ef1681c717a3c4a0ed89a5b", 0x14}], 0x1}, 0x0) recvmsg$kcm(r3, &(0x7f0000001d40)={&(0x7f00000005c0)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000001cc0)=[{&(0x7f00000006c0)=""/146, 0x92}, {&(0x7f0000000840)=""/225, 0xe1}, {&(0x7f0000000940)=""/88, 0x58}, {&(0x7f0000000c40)=""/4096, 0x1000}, {&(0x7f0000001c40)=""/73, 0x49}], 0x5}, 0x40012100) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r4 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1c, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) sendmsg$inet(r4, &(0x7f00000000c0)={&(0x7f0000000100)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e068000000110000000000000029000000ad000000fc000000000000001400000000000000000000000200000004000000000000001c000000000000000000000008"], 0x68}, 0x1000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000d40)}, 0x4000050) sendmsg$kcm(r5, 0x0, 0x480c0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[], 0x0, 0x46}, 0x28) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x400c84c) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89ed, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) gettid() r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000020000000850000f9ff00000085000000a00000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0x28, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) syz_clone(0x410a4400, 0x0, 0xfffffffffffffd56, 0x0, 0x0, 0xffffffffffffffff) 20m51.101419064s ago: executing program 32 (id=155): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x0, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x23, 0x5, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000004f80)={0x2, 0x80, 0x8e, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="1400000036000b635ef1681c717a3c4a0ed89a5b", 0x14}], 0x1}, 0x0) recvmsg$kcm(r3, &(0x7f0000001d40)={&(0x7f00000005c0)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000001cc0)=[{&(0x7f00000006c0)=""/146, 0x92}, {&(0x7f0000000840)=""/225, 0xe1}, {&(0x7f0000000940)=""/88, 0x58}, {&(0x7f0000000c40)=""/4096, 0x1000}, {&(0x7f0000001c40)=""/73, 0x49}], 0x5}, 0x40012100) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r4 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1c, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) sendmsg$inet(r4, &(0x7f00000000c0)={&(0x7f0000000100)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e068000000110000000000000029000000ad000000fc000000000000001400000000000000000000000200000004000000000000001c000000000000000000000008"], 0x68}, 0x1000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000d40)}, 0x4000050) sendmsg$kcm(r5, 0x0, 0x480c0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[], 0x0, 0x46}, 0x28) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x400c84c) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89ed, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) gettid() r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000020000000850000f9ff00000085000000a00000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0x28, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) syz_clone(0x410a4400, 0x0, 0xfffffffffffffd56, 0x0, 0x0, 0xffffffffffffffff) 6.814520822s ago: executing program 5 (id=7536): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) socket$kcm(0x2, 0x1000000000000002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x119c21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000800)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd00}, 0x48) setsockopt$sock_attach_bpf(r0, 0x6, 0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000a80)="d80000001d0081044e81f777db44b904021d080201000000b8faffa1bc0001000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c16fb4007134cf6ee08000a0e408e8d8ef075c11503c6bbace801bcb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322107c9fd6", 0x81}, {&(0x7f0000000040)="54f6d4d87eb3f140c5", 0x9}, {&(0x7f0000000980)="027a64c0072ebbb1512b328dda11b4efd4ba07fc642b7e012bea071dbbdea51e41958755533ccce04d3e635cbe848495e723490d8e93db224d82d4fbfe76bd22fd358cd467795ad7febfc220d72f", 0x5d}, {&(0x7f0000000180)="b43e131145604d2586db7b5db9b16b6517f55d9db2b03ddb65cb00187d57e5477da50a0896a79063236dedc98e44182de38a8ece5c1f39c8a2610e7f00cda67c9b961b2a08598e04cb92cec71c91f0294ce3a161a51ea2d5182c0be9ab10d1073613e8817ce1b5c84a99c75c4b9b388cf4904bba169a65bbbc3216bfd8a7b9e63dd79b8a6189272676030f5bf88e552d8781285fd45d5e6b79516598388ad47c89e0d9788d4ab6a84f2056b6ec8cf47b60881b9cb0ce409cd39cd0bd523dc147d957dd3e5171eac51052"}], 0x3, 0x0, 0x0, 0x7400}, 0x10) 6.566058381s ago: executing program 2 (id=7539): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x0, 0x7ffffffc}, {0x1000000a, 0x4, 0x2}], 0x10, 0x2}, 0x94) close(0x3) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e21, 0xabb, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x26}}, 0x802}, 0x80, 0x0}, 0x20004045) close(0x3) socket$kcm(0xa, 0x5, 0x0) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x6e, &(0x7f0000000000)=r3, 0x1c) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000055a60701000000001000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083070000000000000000000055090100000000009500000000000000bf91000000000000b702000000000000850000001c000000b7000000000000009500000000000000392f4f9741994be0481e29c2cff5d6b7d2ca2920aa24f64f"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000200), 0x2, 0x0) 6.190226005s ago: executing program 2 (id=7543): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open$cgroup(&(0x7f0000000300)={0x5, 0x80, 0xf7, 0x7, 0x5, 0x5, 0x0, 0x1, 0xa1142, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xe1, 0x4, @perf_config_ext={0x80000001, 0x2006}, 0x10bbf7, 0x96b, 0x80000000, 0x4, 0x3, 0x5, 0x8, 0x0, 0x4, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x7000000}, 0x0, 0x0, r0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x89fa, &(0x7f0000000900)={'sit0\x00', @random="0000230c1100"}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.freeze\x00', 0x0, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a00)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x1a) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000000100)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0xb, [@func={0xe, 0x0, 0x0, 0xc, 0x5}, @typedef={0x10}, @const={0xa, 0x0, 0x0, 0xa, 0x1}, @int={0x0, 0x0, 0x0, 0x1, 0x0, 0x29, 0x0, 0x20, 0x5}, @volatile={0xf, 0x0, 0x0, 0x9, 0x4}]}, {0x0, [0x61, 0x2e, 0x61, 0x61, 0x2e, 0x2e, 0x0, 0x5f, 0x0]}}, &(0x7f0000000400)=""/117, 0x63, 0x75, 0x1, 0x7}, 0x28) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)}, 0x48040) perf_event_open(&(0x7f0000000700)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_config_ext={0x674d, 0x9}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x77, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) recvmsg$unix(r6, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000), 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f00000010c0)='{', 0x1}], 0x1}, 0x80d1) r8 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r8, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x6, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @multicast1}}}], 0x20}, 0x8000) write$cgroup_subtree(r8, 0x0, 0x97) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000000) syz_clone(0x2048200, &(0x7f0000000540)="d9b66f4dc25a6fd5f60859a34066aa8fd8e4dca9141edbc0ae6a60b9d5b64c802799735503d3e06604c778841c504a25c4ac6fd9b96000f0b15c4f52bdad5d23d551e7f279c044173ffc3824b9020257540d8fa6416b74e9b4e0eb33ebcb985e8e262bbc28742cd787fa7f6b6ec0aab13bc5cea8a2f38a2252546b4b3e57ded2fc0dd524ad986a82cfa4c6ef4497be1d152930c57a7f4aae678006cc0da6817866d3c7b87ef08d48134b35d2", 0xac, &(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680)="c5bc89dcfcacaf559ea4a4f942f4d1db6fc169d8f8b4aef2383c56c3d67aa56d1dd85294f86248725e34091a3ee8a338b709993b6666d703216e27623eeb7c89da7fbc23229077d347c6d9a416f7ddf6f6fba68a") bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r5, r1, 0x0, 0x4, &(0x7f0000000000)='!(\x18\x00'}, 0x30) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x12, 0x80000001, 0x8, 0xc, 0x4, 0xffffffffffffffff, 0x2}, 0x50) 2.825586702s ago: executing program 5 (id=7547): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x15, 0x5, 0x0) recvmsg$kcm(r0, 0x0, 0x160) sendmsg$kcm(r0, 0x0, 0x800) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x248, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000, 0x10001}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1100000004000000040000000001000000000000", @ANYBLOB='\x00\x00', @ANYBLOB], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0100000004000000040000000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xd, &(0x7f0000000280)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @generic={0x7a, 0xa, 0x0, 0xffb8, 0xfffffffe}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0xe, 0x0, &(0x7f00000003c0)='\x00'/14, 0x0, 0xfeff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a03f0fff0ffffff79a4f0ff00000000b7060000ffffffff2e64050000000000750afaff07cd02020404000000247d60b7030000030a00006a0a00fe0000000c8500000027000000b70000000000002995000000000000001da5ad3548ebb63d18c5071c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f0e5eb09d38ac46e99e7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6e0b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8ef534b93dcb34e1da2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa380700000000000000c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f29f8bb35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8cea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82e3568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b1375b129655beb31899e26052cc216f832fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d92177"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) 2.774197847s ago: executing program 1 (id=7548): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6e8, 0xa}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x43, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x2000000000, 0x10000}, 0x4800, 0x2, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4a}, [@ldst={0x6, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48) 2.4759548s ago: executing program 0 (id=7551): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000850000002a000000180100002025642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000089cdc832850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r1, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000f80)="b9ff03319644268cb89914f00800f48e50c4087bd615a8dcc7ee54f820748f2db7d0", 0x0, 0x2005, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x6, 0x1e, &(0x7f0000000500)=r4, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1f, 0x14, &(0x7f0000000840)=ANY=[@ANYRES16=r1, @ANYRES8=r4, @ANYRESOCT=r0, @ANYRES16, @ANYRESHEX, @ANYRESDEC, @ANYRES32=r3, @ANYBLOB="f83091b27f702e6ffd3bdc7e6b6c034e7f8a91146ceec1bcfea25afdc6e2714bda6340ef9297019e577e5b33edc27d9d4cc87b958a8e3a5c8129a797d37ae4af20d998d4963b56bcb29e153279f2ef", @ANYBLOB="03731849439d7060c7384059a400c21702bb67a4e0b99170cabf455afa54c3f4e5315059bdf2d0c5cf3e1697dff69dee01d538eeec27f0e53c4ec89026219f3a531367299ebe2e55a6f4434637afa1eec0eeba7225c356fd15e04b67def2592f245617dbec2aa65e325c7e0b6d8bbc7e3e4d74f51491862284b3e7688e2751d78b56611e22ccce4335730800867e2c71bb751c9e9442", @ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r6) r7 = socket$kcm(0x23, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x1, 0x0, 0x0, 0xfffffe00, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x6, 0x0, 0xc4a, 0x1, 0x0, 0x100000, 0x0, 0x0, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r7, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0xc0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) sendmsg$kcm(r2, &(0x7f00000031c0)={&(0x7f0000000340)=@ieee802154={0x24, @short={0x2, 0x1, 0xaaa0}}, 0x80, 0x0, 0x0, 0x0, 0x250}, 0x44811) close(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000340)='GPL\x00'}, 0x78) r8 = perf_event_open(&(0x7f0000000fc0)={0x2, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xdc101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1, 0x0, 0x4, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r8, 0x2403, 0x6) r9 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r9, &(0x7f0000000500), 0x5744935563dc5412) socketpair(0x2b, 0xa, 0x80000000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x6, 0x4, 0xfff, 0x9, 0x0, 0xffffffffffffffff, 0x7}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x2000}, 0x50) 2.47493372s ago: executing program 1 (id=7552): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1000}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x336) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x3, [@const={0x0, 0x0, 0x0, 0x9, 0x3}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @fwd={0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2}}]}, {0x0, [0x61]}}, 0x0, 0x5b}, 0x28) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x3e1, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080400007c09e8fe55a10a0015c00700142603600e1208001e0000000401a80016001100014003000300036010fab94dcf5c0461c1d6900094007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x8c01, 0x0) close(r3) socketpair(0x1, 0x1, 0x1, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}}) ioctl$TUNGETVNETLE(r3, 0x800454dd, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f00000000c0)={r5}) 2.455802106s ago: executing program 5 (id=7553): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x101ea8, 0x2f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0xffffffffffffffd9) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x5}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0xb9) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071122900000000009500000000a30000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000700, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000200)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) sendmsg$inet(r0, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f00000005c0)="9d2efa8831", 0x5}], 0x1}, 0x4008000) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e00203003d000b08d25a80648c7494f90324fc600b0002400a000000053582c137153e37000c018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 2.362467452s ago: executing program 4 (id=7554): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa10000000000000701", @ANYRESOCT, @ANYRESHEX=0x0], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x13, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES8=r0, @ANYBLOB="0000000000000000b703000000070000850000001b"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000480)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000700)=ANY=[@ANYBLOB="62202a3a2a200f"], 0xa) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') 1.750570012s ago: executing program 4 (id=7555): r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1005e2, 0x2, 0x0, 0x0, 0x2, 0x1000000}, 0xffffffffffffffff, 0x0, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000080), &(0x7f0000000240)=r3}, 0x20) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x5c38) socketpair(0xf, 0x1, 0xb, &(0x7f0000000340)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000300009116144f782db44b904021d08000500142603600e120900210000000401a8001600a400014006000000036010fab94dcf4f0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e012dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5d00040000d6e4edef3d93452a92954b43370e970100"/216, 0xd8}], 0x1}, 0x0) 1.277695114s ago: executing program 2 (id=7556): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x40080, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETVNETLE(r0, 0x400454cc, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000004000000400000004000000041000000", @ANYRES32, @ANYBLOB="00985ef22d5100000000000000000000000000000200000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000180), 0x1003, r1}, 0x38) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="000001001800000000000000100000001000000002000000030000008000001101"], 0x0, 0x2a, 0x0, 0x1}, 0x28) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) sendmsg$inet(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)}, 0x20000010) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYRESDEC], 0x50) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, 0x0, &(0x7f0000000140)=r2}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x200000000000, 0x80420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000040)="3c00000033000b1229ae3f7f03b261130124fc60100c03400b400000002000189215a2681cf6e50400003d490d20b735b16b6a44799406db26a57b35", 0x3c}], 0x1}, 0x0) close(0x3) r6 = socket$kcm(0x2, 0xa, 0x2) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8916, &(0x7f0000000000)={'wlan1\x00', @random="0200ff7fffff"}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xd}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.188374849s ago: executing program 1 (id=7557): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00002a0053"], 0xfe33) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x7f}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000640)=ANY=[@ANYBLOB="1806000000000000aa0000000000000018120000e9fddf20a8e0d965653e68188f72f4448a6495d3a55724e3251e61190000997c3d380d852e5030ccad", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000300000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES64, @ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0xcabb, 0x5}, 0x81, 0x3, 0x0, 0x8, 0x3, 0x200, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00', r5}, 0x18) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000440)={0x3}, 0x8) r6 = socket$kcm(0xf, 0x4, 0x2) sendmsg$inet(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001c40)="0206e7ec02000000ffffffff006d97dc", 0x10}], 0x1}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="d80000001c0081044e81f782db44b9040a1d080214000000020009a118000c000300000001000e1208000f0100910401a80016002000014003000a0203600c00b94dcf5c0461c1d67f6f94007134cf6ee080000000000000000091643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68765730d16a4683f5aeb4edb49905025ccca9e00360db70100000000008008", 0x92}, {&(0x7f0000000240)="fa50b01a81228e0726cf56459007fcb60ba6d75d1e30d4284b219e41cfc97a61568ba88139c2d52bf489c59c3327928bb1354b510db26fbeafd86711065eb109ac3678726462", 0x46}], 0x2, 0x0, 0x0, 0x7400}, 0x404a880) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200000100000085000000a0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f00000000c0)=r10, 0x4) sendmsg$unix(r9, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xb, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="e318d1ff81ae60bcaf1756b518458a0c67081472", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000001c000b63d25a80648c2594f90524fc60", 0x14}], 0x1}, 0x0) r11 = openat$cgroup(0xffffffffffffffff, &(0x7f00000005c0)='syz0\x00', 0x200002, 0x0) r12 = bpf$ITER_CREATE(0x21, &(0x7f0000000600), 0x8) perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x70, 0xfb, 0x4, 0xfb, 0x0, 0x2, 0x50001, 0xb, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0xb3, 0x2, @perf_bp={&(0x7f00000000c0), 0xd}, 0x200, 0xfffffffffffffc01, 0x4, 0x11, 0x46f, 0x9085, 0x8, 0x0, 0x3, 0x0, 0x3}, r11, 0xa, r12, 0x1e) r13 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r13}, 0x8) 1.187493269s ago: executing program 4 (id=7558): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000e80)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffdffffe}, [@call={0x85, 0x0, 0x0, 0xc6}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000000c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x1d, &(0x7f0000000200)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0xa9, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10a194, 0x0, 0x0, 0x9, 0x0, 0x7, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000001080)=ANY=[@ANYBLOB="180000000000000000000000feffffff180100002000732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000050000008500000006000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r4}, 0xc) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='freezer.self_freezing\x00', 0x0, 0x0) ioctl$TUNSETVNETBE(r5, 0x400454de, &(0x7f0000000540)=0x1) r6 = socket$kcm(0x10, 0x2, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(r6, &(0x7f0000000180)={0x0, 0x7b64, &(0x7f0000000280)=[{&(0x7f0000000100)="5c00000012006bab9e3fe3d8fd8978f45225d9ee000000007ea60860160af36504000100080ec000000002009ee517c356a7b0251e61e659ad3af435cf01c937e786a6d0bdd7fcf50e4509c5cc68b7ed9c232d786c35fe0000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r7 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r7, &(0x7f00000010c0)={&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000480)='\\', 0x1}], 0x1}, 0x4000040) r8 = socket$kcm(0x10, 0x2, 0x0) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x90) socket$kcm(0xa, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r9, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000011008b88040f80ec59acbc0413a1f8480f0000005e2900421803001825000a001400000002800000121f", 0x2e}], 0x1}, 0x0) 1.142456372s ago: executing program 0 (id=7559): perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d32, 0x24008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000300)="1400000027000b6c8cff001b0529fc60082fc569", 0x14}, {&(0x7f0000000840)="b5e239403f68675ef321ad051f5993b36744cc39429fe575f73e3c9c96b6f2bd04b3c097406c276aab8270f3486329516a98b0105f33b5ab3900d7468bcfd23082b2c321115ac433113c09a47cb6368485375c70eec7e37cd02d0af84638224d5c71d0d067a0738bcfa9d9472fbd859b0eaae7cf77fd971f18d570f847dfffe5a29b076915306511c43eca8d0612e6b142", 0x91}], 0x2}, 0x400c0c4) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000840)={0x2}, 0x4) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xff, 0x4, 0xc, 0x7f, 0x0, 0x400000001, 0x80494, 0xf, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6, 0x4, @perf_bp={0x0}, 0x100600, 0xfffffffffffffffd, 0x5, 0x7, 0x4, 0x5, 0x8, 0x0, 0x82000008, 0x0, 0x7}, 0x0, 0x11, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0xa, 0x2, 0x73) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x401c5820, &(0x7f0000000000)=0x8) ioctl$SIOCSIFHWADDR(r2, 0x40305829, &(0x7f0000000340)={'lo\x00', @random="3f2f94c100"}) bpf$ITER_CREATE(0x21, &(0x7f0000001140)={r2}, 0x8) sendmsg$inet(r1, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x18, 0x29, 0x3b, 0xc9000000}}, @ip_tos_u8={{0x38, 0x29, 0x37}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) 962.074782ms ago: executing program 5 (id=7560): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xda, 0x0, 0x0, 0x0, 0x0, 0x400000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x0, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x23, 0x5, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000004f80)={0x2, 0x80, 0x8e, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="1400000036000b635ef1681c717a3c4a0ed89a5b", 0x14}], 0x1}, 0x0) recvmsg$kcm(r3, &(0x7f0000001d40)={&(0x7f00000005c0)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000000840)=""/225, 0xe1}, {&(0x7f0000000940)=""/88, 0x58}, {&(0x7f0000000c40)=""/4096, 0x1000}, {&(0x7f0000001c40)=""/73, 0x49}], 0x4}, 0x40012100) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r4 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1c, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) sendmsg$inet(r4, &(0x7f00000000c0)={&(0x7f0000000100)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000fd0000000007000000890704e068000000110000000000000029000000ad000000fc000000000000001400000000000000000000000200000004000000000000001c000000000000000000000008"], 0x68}, 0x1000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000d40)}, 0x4000050) sendmsg$kcm(r5, 0x0, 0x480c0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[], 0x0, 0x46}, 0x28) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x400c84c) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89ed, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) gettid() r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000020000000850000f9ff00000085000000a00000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0x28, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) syz_clone(0x410a4400, 0x0, 0xfffffffffffffd56, 0x0, 0x0, 0xffffffffffffffff) 808.125285ms ago: executing program 0 (id=7561): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) socket$kcm(0x10, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x16, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffa0}, 0x48) 706.508753ms ago: executing program 2 (id=7562): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0x1, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, &(0x7f0000001bc0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001280)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x7e, &(0x7f0000000580)=[{}, {}], 0x10, 0x10, &(0x7f0000000640), &(0x7f0000000600), 0x8, 0xb0, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @restrict={0x9}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x3e}, 0xfffffffffffffe17) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000010c0)={r5, 0x20, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r6, 0x4) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000800)={0x1b, 0x0, 0x0, 0x8001, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x5}, 0x50) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)=@generic={&(0x7f0000000880)='./file0\x00', 0x0, 0x18}, 0x18) r9 = socket$kcm(0x29, 0xf, 0x0) sendmsg(r9, &(0x7f0000001b00)={&(0x7f00000014c0)=@llc={0x1a, 0x110, 0x8, 0xea, 0x1, 0x2}, 0x80, &(0x7f0000001800)=[{&(0x7f0000001540)="88e569a8da01e99de1e75bb3337b43b8cbb5aad9cccabbb71e2defd3713b0c40dc062196d3e34c47e40c24594d1b738e865c1c64f25e1b5fdf8d04466a896f887bf310d73efe188abc053df8ffe4ec7b5c38c35ea6c8d9f4ca348642987b2ef9fe9170b22398990371d655eb4e25449c46063f635bc1a8dff7fce80e3103e72dc07283a7140346a0fa8e79c185fa2f0dd5a418004ca83671ce390ec2b0e3cd708ec902db994491069fdbbfedbd9526615d35414c3c98f8de45fe74a6535905b5e44892d9e072a903", 0xc8}, {&(0x7f0000001640)="aa18f728fa906d4a4a9276573366dbc0b0d5875fae8be00c9a60a3dc1effd017f18d7eb957ecb38fc10d53f7e028196f8c8d0affae52006671bb80b6b6a59d2f60194f6f66c9fc591cbcc358b8556e0fd15338dfb24936c1891adf45baab82583c251ede68bd874f6237aa62dfe57f4f49ff84e6e352e744296bd2142329f784f9481a0a55ca4aa0480857cdb1db1fc5b3dbec40e7cba14c74d5", 0x9a}, {&(0x7f0000001700)="b3d47826192716cbae10265d1890f337d79324686e0a6bc8a5c6404b54c0d2e05f4830cafbe883c1de306e22e14cff47e7c8207b9ac315ba79aae14f53cd3c0f379939b8cb507a23f9f48e848771414505a179fe3b6716ad040efc5ad78961ffd8453020219e540ac1829e181ea099c2a1a18a4d2f8102368ae376aa4d11059b22b4bf0c1a787939e62e59ff1081fe7dd8423a4833eb17c5103c907fb3be47ca20aa12a97f702b75625d41359718a162ee3ce690afe93530f3d73cf8d4ebb0204b212f38755203608344c6649cc2be2236d177f6d8118ed8679f94805caac60661ec", 0xe2}], 0x3, &(0x7f0000001840)=[{0x18, 0x10f, 0xb, "7f7762"}, {0x108, 0x107, 0x9, "f4af9937d3f82f1fa40b9c767a193f9072210fa3a7ea612567f3d2cfa7fa4165d7d743fbed7183e198f125c22a32a96f1fb16e648e9a536b71ffb4ee08ad21fad6bc4c25c01f60863e71f23d0987182cc20643bddbd233fa4978b569a7b11d2074b31b5b8cc8237f035db34471581b7f6859fbc054622409cb147c442ab31b654094501b6310475f8ed8db7c6cc3528382d3d5307670efe8e80802e909f244a2879e58982ff8dd594c75fb5188cc17ab9c8dc89551660284250fbdf43622a8401ccca489e6fe87d8e3c69d3e21cf6e2c1f17fc0bd205bfd4018f4190df260879e1bef24dc2047491687a8cf760a2d3548b"}, {0x78, 0x0, 0x8, "df86639169160b38006e32df90b14862ac8f9350af3ea2aa4a1ea80827310ed2ee425eff94f8854a1da467dfcd09408d257a2232dea4a444bd579344ecf56ac4ebd96aeb9605bd9249a9f35ed7b55ec03b4a55361004efabb1dc11d89c0ba06d09123fb1"}, {0x10, 0x112, 0x9}, {0x68, 0x1, 0x9, "4c463fc4fbd28e48a823f390c518ee60c8a12c8a4f4aa8cba944eb670cff1aac285c7196fdd35d1a0883bcccbf918f92ba6c0fe942c0690be1fd916e916485e78d3fd2966b5ff3065183f7ac5f5579ab74d2f9b67304578e"}, {0x80, 0x108, 0x0, "2ed6167f890f6eaa14e86ee074c841cbbb18ec7d390ee7bd9a8ff0a706f6ba002d95f5f08c5779b61c7614601b1eab99337bf8925481c63cc8992882b76e273c55c28f79e7795683cc8c249befc2f66c4ee07d79346f563308c39c57b7a781ef1c5eb8de9718f5c40fa28f886baa"}, {0x20, 0x118, 0x2, "87ff3f195f8e96c8205537"}], 0x2b0}, 0x40004) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8923, &(0x7f0000002280)={'team0\x00', @random="2b0100004ec6"}) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000940)=@o_path={&(0x7f0000000900)='./file0\x00', 0x0, 0x10}, 0x18) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000980)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x3}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000ac0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000a40), &(0x7f0000000a80)}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000b80)={{0x1, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000b40)='%-010d \x00'}, 0x20) r16 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r17 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0xfffffffffffffeb9, 0x0, 0x0, 0x11}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x1f, 0x1a, &(0x7f00000002c0)=ANY=[@ANYBLOB="18470000fcffffff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa20000000000c1000f7a7427c453ffb703000008000000b704000002000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000850000000100000084a504000800000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000000000008500000086000000"], &(0x7f00000003c0)='GPL\x00', 0xa, 0x88, &(0x7f0000000400)=""/136, 0x41000, 0x0, '\x00', r3, @fallback=0x487508e3476686fe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000007c0)={0x0, 0x6, 0x8, 0x7f}, 0x10, r6, 0xffffffffffffffff, 0x2, &(0x7f0000000bc0)=[r7, r8, r11, r12, 0xffffffffffffffff, r13, r14, r15, r16, 0x1], &(0x7f0000000c00)=[{0x3, 0x1, 0x7, 0x8}, {0x0, 0x5, 0x1, 0xc}], 0x10, 0x1000}, 0x94) r18 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x20, 0x22, &(0x7f0000000d00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r11}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r13}}, @exit, @exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r16}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000e40)='syzkaller\x00', 0x5, 0xd0, &(0x7f0000000e80)=""/208, 0x41000, 0x20, '\x00', r3, @netfilter=0x2d, 0xffffffffffffffff, 0x8, &(0x7f0000000f80)={0x3, 0x4}, 0x8, 0x10, 0x0, 0x0, r4, r17, 0x4, &(0x7f0000000fc0)=[r1, r7, r1, r13, r1, r13], &(0x7f0000001000)=[{0x2, 0x5, 0xa, 0xc}, {0x4, 0x5, 0x3, 0x9}, {0x1, 0xffffffff, 0x2, 0xa}, {0x2, 0x5, 0x5, 0x7}], 0x10, 0x6}, 0x94) syz_open_procfs$namespace(0x0, &(0x7f0000001040)='ns/mnt\x00') sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xfff, 0x80}, 0x107412, 0x0, 0x0, 0x3d603c7d87ed2789, 0x22c000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x3, 0x8, 0x0, 0x0, 0x0, 0x80000000005d2e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xf}, 0x70c8, 0x6, 0xfffffffc, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r19 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r19, 0x29, 0x13, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001480)={r18, 0xe0, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000011c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, &(0x7f0000001200)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x2d, &(0x7f0000001b40)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x68, 0x10, &(0x7f00000012c0), &(0x7f0000001300), 0x8, 0xaf, 0x8, 0x8, &(0x7f0000001340)}}, 0x10) 703.940764ms ago: executing program 1 (id=7563): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x15, 0x5, 0x0) recvmsg$kcm(r0, 0x0, 0x160) sendmsg$kcm(r0, 0x0, 0x800) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x248, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000, 0x10001}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1100000004000000040000000001000000000000", @ANYBLOB='\x00\x00', @ANYBLOB], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0100000004000000040000000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xd, &(0x7f0000000280)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @generic={0x7a, 0xa, 0x0, 0xffb8, 0xfffffffe}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0xe, 0x0, &(0x7f00000003c0)='\x00'/14, 0x0, 0xfeff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a03f0fff0ffffff79a4f0ff00000000b7060000ffffffff2e64050000000000750afaff07cd02020404000000247d60b7030000030a00006a0a00fe0000000c8500000027000000b70000000000002995000000000000001da5ad3548ebb63d18c5071c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f0e5eb09d38ac46e99e7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6e0b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8ef534b93dcb34e1da2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa380700000000000000c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f29f8bb35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8cea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82e3568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b1375b129655beb31899e26052cc216f832fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d92177"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) 667.152774ms ago: executing program 4 (id=7564): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004080000000000000003000000000000000000000002000000000000000000000000000002000000000000000000000004", @ANYRES64=0x0], 0x0, 0x56, 0x0, 0x1, 0x39}, 0x28) 582.419828ms ago: executing program 0 (id=7565): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000300)=@o_path={&(0x7f0000000240)='./file0\x00', 0x0, 0x0, r0}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000008000000000000000000000018120000", @ANYRES32, @ANYBLOB="4941ebcd59afc5bc5f621f200000000000000000b703000000000000513f83c13179221e750a8c1a568534bd850000002f000000b7090000040007009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r2}, 0x8) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYRES16=r0], 0x0, 0x8e}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000080000000100000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="01000000030000c500000000000000000000000049a1be6e3b235302532b110000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0xc0}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x47}, 0x48) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001800599c6d0e00009bd029ef80"], 0xfe33) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000004000000080000000000000001"], 0x40) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x26e1, 0x0) r6 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f0000000500)=r5, 0x4) r7 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r8, 0x1, 0x10, &(0x7f0000000000), 0x4) sendmsg$inet(r8, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x8004) sendmsg$inet(r8, &(0x7f0000002d40)={0x0, 0x0, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r7, 0x4008240b, &(0x7f00000003c0)={0x0, 0x80, 0xff, 0x1, 0x6, 0x6, 0x0, 0x2, 0x1000, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x10001, 0x2, @perf_config_ext={0xffffffffffffffff, 0x2641fb6e}, 0xaa40, 0x7fffffffffffffff, 0x4, 0x6, 0x7, 0x4, 0x4, 0x0, 0x80000001, 0x0, 0xc}) sendmsg$inet(r6, &(0x7f00000004c0)={&(0x7f0000000240)={0x2, 0x3, @broadcast}, 0x10, 0x0}, 0x200440e4) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef59510525ba56dcd79a36c23d3b9844e1571a86ea1698fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 514.303987ms ago: executing program 4 (id=7566): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = socket$kcm(0x15, 0x5, 0x0) sendmsg$inet(r4, &(0x7f00000006c0)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000640)=ANY=[], 0x158}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 491.596393ms ago: executing program 2 (id=7567): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x5, 0x830d}, 0x0, 0xa57b, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = socket$kcm(0xa, 0x5, 0x0) (async) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfff, 0x4}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0xf00, 0x71, 0x10, 0x70}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) (async) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="d8000000140081044e81f782db44b9040a1d080201000000040000a118000200ff030000000000000000000000000001a80016ea1f000840032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f722f054f55153c6f94007134cf6ee08000a09108e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e0060000000000000580bb9ad809d5e1cace81b341139fe3cd4032e8edb12d1d", 0xd9}], 0x1, 0x0, 0x0, 0x7400}, 0x4040c04) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0xb8}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94) (async, rerun: 64) sendmsg$inet(r0, &(0x7f0000001c40)={&(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000001ac0)=[{&(0x7f0000000240)="c3", 0x1}], 0x1}, 0x20000001) setsockopt$sock_attach_bpf(r0, 0x29, 0x1a, 0x0, 0x0) 246.498991ms ago: executing program 0 (id=7568): r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1005e2, 0x2, 0x0, 0x0, 0x2, 0x1000000}, 0xffffffffffffffff, 0x0, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000080), &(0x7f0000000240)=r3}, 0x20) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x5c38) socketpair(0xf, 0x1, 0xb, &(0x7f0000000340)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000300009116144f782db44b904021d08000500142603600e120900210000000401a8001600a400014006000000036010fab94dcf4f0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e012dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5d00040000d6e4edef3d93452a92954b43370e970100"/216, 0xd8}], 0x1}, 0x0) 226.384777ms ago: executing program 1 (id=7569): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1e000000000000000300000007"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x7, 0x4, 0x900, 0x5, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000006000000850000001b000000b700000000000000950000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r1, r0}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000100081044e81f782db44b904021d083911000000000000a1180015000600142603600e120900210000000401a80016000400144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4680000eb4edbb57a5025ccca9e00360db701000000951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43", 0xca}], 0x1}, 0x0) 197.962125ms ago: executing program 5 (id=7570): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0xffffff01, 0x61, 0x14, 0x1c}, [@ldst={0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffff0}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000060000000b00000000000000", @ANYRES32, @ANYBLOB="41fb000000000000000013e2743546daf1b08941c3372fcd862318875f0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socketpair(0x3, 0x5, 0x2, &(0x7f0000000580)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000005c0)=r0, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r3}, 0xc) r4 = socket$kcm(0x10, 0x3, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, [@call={0x85, 0x0, 0x0, 0x29}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000a80)="1d00000033000b12d25a80648c2594f90124fc60100c03400040000000", 0x1d}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0], 0x0, 0xf7, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x75, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) 70.20206ms ago: executing program 2 (id=7571): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={&(0x7f0000000400), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000040), &(0x7f0000000180)=r2}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x4, 0xff, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x100000, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xa, 0xffffffffffffffff, 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r5) r6 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\v\x00'/28], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x10, &(0x7f0000001f40)=ANY=[@ANYBLOB="18000000061ea8000000000010000000181100007d1736b2db68e634778b3591fcac12d9e134f3f099b3e4dc8bc1db5a14fb40e14d350654ef42ecdebc5309910dec83e539ba00b47b45a65ff47d93956e84382c90dda879", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000008500000023000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r10}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000b80)={0x8, 0x0}, 0x8) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0e00000004000000080000000700000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xd, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000004000000000000007f00000018150000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000a07b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000014000000850000002300000095"], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001e80)={0x15, 0x10, &(0x7f0000000540)=ANY=[@ANYBLOB="184b0000ffffffff0000000000000000950000000000000085100000faffffff8510000001000000186200000c00000000000000010100008520000001000000000000000007ff2500000000002020207b1af8ff00060000bfa100000000000007010000f8ffffffb702000008000000b7030000030700008500000006000000"], &(0x7f0000000a40)='syzkaller\x00', 0xfffff800, 0x68, &(0x7f0000000a80)=""/104, 0x41000, 0x8, '\x00', 0x0, @sk_reuseport=0x28, r10, 0x8, &(0x7f0000000b00)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000b40)={0x3, 0x3, 0x4b3b, 0x7}, 0x10, r11, r7, 0x8, &(0x7f0000000bc0)=[r8, r8, r8, r12, r8], &(0x7f0000001e00)=[{0x4, 0x5, 0x1, 0x2}, {0x1, 0x5, 0xe, 0x4}, {0x0, 0x5, 0x1, 0x7}, {0x1, 0x1, 0x5, 0xc}, {0x1, 0x3, 0xf, 0x6}, {0x2, 0x1, 0xe, 0x9}, {0x2, 0x5, 0x1, 0x2}, {0x3, 0x2, 0x9, 0x8}], 0x10, 0x3}, 0x94) syz_clone(0x32a0000, 0x0, 0x0, 0x0, 0x0, 0x0) r13 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x7}, 0x10000c, 0x3, 0x8000c2ba, 0x3, 0x4000000}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r14 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r13, 0x40042408, r14) socket$kcm(0x10, 0x2, 0x10) 40.317179ms ago: executing program 0 (id=7572): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r0}, 0x8) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x9, [@int={0xd, 0x0, 0x0, 0x1, 0x0, 0x14, 0x0, 0x57, 0x4}, @const={0x10, 0x0, 0x0, 0xa, 0x4}]}, {0x0, [0x61, 0x2e, 0x2e, 0x2e, 0x0, 0x5f, 0x0]}}, &(0x7f00000000c0)=""/186, 0x3d, 0xba, 0x1, 0x1}, 0x28) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x80) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{0x1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)='%pB \x00'}, 0x20) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x2bb, '\x00', 0x0, r1, 0x0, 0x3, 0x3}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@map=r4, 0x2, 0x0, 0x2, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r6 = syz_clone(0x40100080, &(0x7f0000000440)="ae9e888cf99d8ef7cc01cac94b52e884130015ab8a74c07b6fd2c693ebf55a29036cbf2310c04f42ac84c9de7a53b70f929364dd3bd8731347cbcf42856b4408a889e007f51fe1fc1899befb48661e52a878cf9d92f978b825c7ad4b309b6f7e1ea38eb57bc97f82d55f0e", 0x6b, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="80ebe4648420c275543cebfe7aa08f3f306b3b940370b34da616d913a8f878e8cc1285ee03e225f2f00ab1768a814699e9111fe16c2b396034c55c52943e921c7539ea6844691efc7a3d37faaede2564a2eb44254dbffcbfb282fd656d43bdedd560c353dfd39995963cf8179ffcadb0a8c2c975a0f9ec701ad6fba5a9cbfb321847ead7ddde216f0376ee6a5f84afde1e695e812a7059cdafdfa74895e2434f0c528db28b74cc8411b26c4ad973423a5f7edb43d13ca15cc72c5f75f7d0c956dce4d15c434aa19382405c8082ac56546f1580b2e6852a4cc2ccf70b3191189afa71963f05a218469e2dba96e579fed365") syz_open_procfs$namespace(r6, &(0x7f0000000640)='ns/time\x00') bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r1, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x1, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0], 0x0, 0x40, &(0x7f0000000780)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000007c0), &(0x7f0000000800), 0x8, 0x35, 0x8, 0x8, &(0x7f0000000840)}}, 0x10) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x4, 0x0, r1, 0x1, '\x00', r7, r2, 0x5, 0x2, 0x2}, 0x50) bpf$LINK_DETACH(0x22, &(0x7f0000000a40)=r1, 0x4) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000a80)={r1}) socket$kcm(0x29, 0x2, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000b40)={{r5, 0xffffffffffffffff}, &(0x7f0000000ac0), &(0x7f0000000b00)='%pK \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000b80)={r10, 0xffffffffffffffff}, 0x4) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000bc0), 0x8a27aa10c69b0a1c, 0x0) ioctl$SIOCSIFHWADDR(r12, 0x8924, &(0x7f0000000c00)={'geneve1\x00', @multicast}) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=@base={0x10, 0x2000000, 0xfffffffd, 0xb, 0x5d7e3980710fcd63, r5, 0x80000001, '\x00', r7, r2, 0x0, 0x1, 0x0, 0x0, @value=r0, @void, @value=r1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f00)={0x18, 0x15, &(0x7f0000000c40)=@raw=[@exit, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @jmp={0x5, 0x0, 0xd, 0xb, 0xa, 0x10, 0x10}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x3}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0xf9}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @generic={0x2, 0xc, 0x3, 0xfffa, 0xb}], &(0x7f0000000d00)='syzkaller\x00', 0x0, 0x3, &(0x7f0000000d40)=""/3, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000d80)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000dc0)={0x0, 0xa, 0x2, 0x7c}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000e80)=[r13, r9], &(0x7f0000000ec0)=[{0x5, 0x5, 0x8, 0x2}, {0x5, 0x3, 0xa, 0xb}, {0x4, 0x2, 0x10, 0x6}, {0x0, 0x5, 0xb, 0x4}], 0x10, 0x9195}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001040)={{r11}, &(0x7f0000000fc0), &(0x7f0000001000)='%pi6 \x00'}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001100)={r5, 0x58, &(0x7f0000001080)}, 0x10) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x4) r14 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001400)={0x11, 0x12, &(0x7f0000001140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3093, 0x0, 0x0, 0x0, 0x75}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ldst={0x1, 0x2, 0x3, 0x6, 0x9, 0xfffffffffffffff8, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000001200)='GPL\x00', 0xfffffffb, 0x48, &(0x7f0000001240)=""/72, 0x1e00, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000012c0)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000001300)={0x3, 0x10, 0x790, 0x9}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000001340)=[r10, r11, r13, r1, 0xffffffffffffffff, r11, r13, r9, r4], &(0x7f0000001380)=[{0x4, 0x2, 0x6, 0x4}, {0x3, 0x3, 0xa, 0x4}, {0x2, 0x5, 0xc, 0x5}, {0x0, 0x1, 0xe, 0x6}, {0x3, 0x5, 0x0, 0x4}], 0x10, 0x687}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000014c0)=r14, 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001500)=r8, 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001540)=r8, 0x4) r15 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000026c0)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x2, '\x00', 0x0, r2, 0x1, 0x3, 0x4}, 0x50) r16 = bpf$MAP_CREATE(0x0, &(0x7f0000002740)=@bloom_filter={0x1e, 0xc, 0x9, 0xffff, 0x100, r9, 0x1, '\x00', r7, r1, 0x5, 0x4, 0x5, 0xf}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002880)={0x3, 0x14, &(0x7f0000001580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @map_val={0x18, 0x6, 0x2, 0x0, r11, 0x0, 0x0, 0x0, 0xa55a}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @alu={0x4, 0x1, 0x2, 0x5, 0x6, 0x80, 0xfffffffffffffff7}, @alu={0x7, 0x1, 0xb, 0x2, 0x2, 0x50, 0xffffffffffffffff}]}, &(0x7f0000001640)='GPL\x00', 0x0, 0x1000, &(0x7f0000001680)=""/4096, 0x1e00, 0x8, '\x00', 0x0, @fallback=0xc, r0, 0x8, &(0x7f0000002680)={0x4, 0x3}, 0x8, 0x10, 0x0, 0x0, r8, 0xffffffffffffffff, 0x5, &(0x7f00000027c0)=[r15, r4, r3, r16], &(0x7f0000002800)=[{0x1, 0x3, 0xa, 0x8}, {0x0, 0x5, 0xb, 0x1}, {0x4, 0x3, 0x3, 0x1}, {0x2, 0x3, 0x8, 0x3}, {0x5, 0x3, 0xd, 0x3}], 0x10, 0x7ff}, 0x94) 39.918099ms ago: executing program 1 (id=7573): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100080, 0x0, 0x0, 0x1}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000058c0)=""/4129, 0x1021}, {&(0x7f0000003400)=""/4058, 0xfda}], 0x2}, 0x10102) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x9, 0x8, 0x0, r1}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0xd, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000810000001815400009e13ad6b3f7cc947d9f4adb99c89ee541883ce92b226dcde7e62d91c898e73961c6a4e9e37b470643b886a03c89f1437290ffe3304a0a8317eec05c4429a232bf8c6a6490ced1bd112a2a31343ecf71f6552d139e3307fc6842d48b261424afc1d5e14719", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001d00000085000000070000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2c, 0x3, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)="5c00000014006b030231a6080c000af32c0cae934c46a7539602000f00e5aa000017d34460bc24ea000007000000000000002756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1000000e6657594f1817d", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="5a6e41dea43e63a3f70cff11c72b", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x4, 0x1b, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000400000008500000017000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x1e, 0x0, &(0x7f0000000040)="38937ca5972cb007ce69e4b8e64a929665fe873800000600000000000000", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x100c, 0xe0, 0x0, 0x0, 0xfffffffffffffffd, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x20) r6 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r6, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000380)=[@ip_retopts={{0x18, 0x0, 0x7, {[@rr={0x7, 0x7, 0x5, [@local]}]}}}], 0x18}, 0x200040c4) 37.17025ms ago: executing program 4 (id=7574): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00002a0053"], 0xfe33) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x7f}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000640)=ANY=[@ANYBLOB="1806000000000000aa0000000000000018120000e9fddf20a8e0d965653e68188f72f4448a6495d3a55724e3251e61190000997c3d380d852e5030ccad", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000300000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES64, @ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0xcabb, 0x5}, 0x81, 0x3, 0x0, 0x8, 0x3, 0x200, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00', r5}, 0x18) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000440)={0x3}, 0x8) r6 = socket$kcm(0xf, 0x4, 0x2) sendmsg$inet(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001c40)="0206e7ec02000000ffffffff006d97dc", 0x10}], 0x1}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="d80000001c0081044e81f782db44b9040a1d080214000000020009a118000c000300000001000e1208000f0100910401a80016002000014003000a0203600c00b94dcf5c0461c1d67f6f94007134cf6ee080000000000000000091643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68765730d16a4683f5aeb4edb49905025ccca9e00360db70100000000008008", 0x92}, {&(0x7f0000000240)="fa50b01a81228e0726cf56459007fcb60ba6d75d1e30d4284b219e41cfc97a61568ba88139c2d52bf489c59c3327928bb1354b510db26fbeafd86711065eb109ac3678726462", 0x46}], 0x2, 0x0, 0x0, 0x7400}, 0x404a880) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200000100000085000000a0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f00000000c0)=r10, 0x4) sendmsg$unix(r9, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xb, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="e318d1ff81ae60bcaf1756b518458a0c67081472", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000001c000b63d25a80648c2594f90524fc60", 0x14}], 0x1}, 0x0) r11 = openat$cgroup(0xffffffffffffffff, &(0x7f00000005c0)='syz0\x00', 0x200002, 0x0) r12 = bpf$ITER_CREATE(0x21, &(0x7f0000000600), 0x8) perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x70, 0xfb, 0x4, 0xfb, 0x0, 0x2, 0x50001, 0xb, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0xb3, 0x2, @perf_bp={&(0x7f00000000c0), 0xd}, 0x200, 0xfffffffffffffc01, 0x4, 0x11, 0x46f, 0x9085, 0x8, 0x0, 0x3, 0x0, 0x3}, r11, 0xa, r12, 0x1e) r13 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r13}, 0x8) 0s ago: executing program 5 (id=7575): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000e80)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffdffffe}, [@call={0x85, 0x0, 0x0, 0xc6}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000000c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x1d, &(0x7f0000000200)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0xa9, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10a194, 0x0, 0x0, 0x9, 0x0, 0x7, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000001080)=ANY=[@ANYBLOB="180000000000000000000000feffffff180100002000732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000050000008500000006000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r4}, 0xc) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='freezer.self_freezing\x00', 0x0, 0x0) ioctl$TUNSETVNETBE(r5, 0x400454de, &(0x7f0000000540)=0x1) r6 = socket$kcm(0x10, 0x2, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(r6, &(0x7f0000000180)={0x0, 0x7b64, &(0x7f0000000280)=[{&(0x7f0000000100)="5c00000012006bab9e3fe3d8fd8978f45225d9ee000000007ea60860160af36504000100080ec000000002009ee517c356a7b0251e61e659ad3af435cf01c937e786a6d0bdd7fcf50e4509c5cc68b7ed9c232d786c35fe0000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r7 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r7, &(0x7f00000010c0)={&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000480)='\\', 0x1}], 0x1}, 0x4000040) r8 = socket$kcm(0x10, 0x2, 0x0) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x90) socket$kcm(0xa, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r9, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000011008b88040f80ec59acbc0413a1f8480f0000005e2900421803001825000a001400000002800000121f", 0x2e}], 0x1}, 0x0) kernel console output (not intermixed with test programs): from eth0 [ 1154.468934][T24790] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1154.500470][T24790] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1154.547245][T24790] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1154.568052][T23020] Bluetooth: hci2: command 0x040f tx timeout [ 1154.965771][T24950] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6314'. [ 1155.070482][T24790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1155.112000][ T5588] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1155.122237][ T5588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1155.167377][T24790] 8021q: adding VLAN 0 to HW filter on device team0 [ 1155.248860][T17267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1155.285226][T17267] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1155.314543][T24956] syz.2.6317[24956] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1155.314636][T24956] syz.2.6317[24956] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1155.336901][T17267] bridge0: port 1(bridge_slave_0) entered blocking state [ 1155.355468][T17267] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1155.450299][T17267] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1155.515111][T17267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1155.640576][T17267] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1155.659474][T17267] bridge0: port 2(bridge_slave_1) entered blocking state [ 1155.666619][T17267] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1155.690456][ T5599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1155.753276][ T5599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1155.792980][T17260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1155.812966][T17260] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1155.832268][T17260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1155.851718][T17260] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1155.914831][T17260] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1155.941696][T17260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1155.970985][T17260] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1155.990355][T17260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1156.007179][T17260] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1156.053028][T24790] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1156.095052][T24974] netlink: 'syz.0.6322': attribute type 39 has an invalid length. [ 1156.638172][T23020] Bluetooth: hci2: command 0x0419 tx timeout [ 1156.902279][T17248] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1156.914630][T17248] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1156.940775][T24790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1157.894515][ T5588] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1157.910033][ T5588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1157.962385][ T5588] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1157.982950][ T5588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1158.006502][T24790] device veth0_vlan entered promiscuous mode [ 1158.035750][ T5588] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1158.093500][ T5588] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1158.111130][T24790] device veth1_vlan entered promiscuous mode [ 1158.215241][T17267] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1158.232122][T17267] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1158.263508][T17267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1158.357745][T17267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1158.447241][T24790] device veth0_macvtap entered promiscuous mode [ 1158.479622][T24790] device veth1_macvtap entered promiscuous mode [ 1158.503966][T25034] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6327'. [ 1158.582982][T24790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1158.609238][T24790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1158.643310][T24790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1158.667720][T24790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1158.687641][T24790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1158.709523][T24790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1158.732824][T24790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1158.753918][ T5216] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1158.771360][ T5216] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1158.790564][ T5216] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1158.810314][ T5216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1158.924770][T24790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1158.966626][T24790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1159.008142][T24790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1159.029033][T24790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1159.066827][T24790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1159.108022][T24790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1159.152746][T24790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1159.190899][ T5216] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1159.223604][ T5216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1159.257079][T25049] netlink: 'syz.5.6333': attribute type 33 has an invalid length. [ 1159.274495][T25049] netlink: 152 bytes leftover after parsing attributes in process `syz.5.6333'. [ 1159.358629][T24790] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1159.367392][T24790] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1159.397164][T24790] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1159.443304][T24790] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1160.997118][T25074] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6336'. [ 1161.034406][T25074] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6336'. [ 1161.299045][T17260] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1161.349232][T17260] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1161.424294][ T5599] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1161.455962][T25100] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.6341'. [ 1161.500865][ T5588] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1161.521389][ T5588] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1161.525589][T25104] netlink: 'syz.5.6343': attribute type 33 has an invalid length. [ 1161.557730][T25104] netlink: 152 bytes leftover after parsing attributes in process `syz.5.6343'. [ 1161.591299][T17260] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1162.013598][T25106] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6342'. [ 1162.516850][T25121] netlink: 'syz.4.6346': attribute type 10 has an invalid length. [ 1165.979263][T25119] netlink: 'syz.4.6346': attribute type 10 has an invalid length. [ 1166.003528][T25141] device wlan1 entered promiscuous mode [ 1166.011358][T25143] netlink: 'syz.2.6354': attribute type 33 has an invalid length. [ 1166.021907][T25143] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6354'. [ 1166.255257][T25157] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6359'. [ 1166.590173][T25161] netlink: 'syz.4.6361': attribute type 39 has an invalid length. [ 1167.340139][T25183] netlink: 'syz.0.6368': attribute type 33 has an invalid length. [ 1167.363491][T25183] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6368'. [ 1167.760416][T25189] netlink: 'syz.0.6369': attribute type 10 has an invalid length. [ 1169.975866][T25189] device wlan1 left promiscuous mode [ 1170.576022][T25213] netlink: 'syz.1.6378': attribute type 39 has an invalid length. [ 1170.627708][T25217] netlink: 'syz.5.6379': attribute type 33 has an invalid length. [ 1170.668173][T25217] netlink: 152 bytes leftover after parsing attributes in process `syz.5.6379'. [ 1170.830271][T25221] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1170.837764][T25221] IPv6: NLM_F_CREATE should be set when creating new route [ 1170.845396][T25221] IPv6: NLM_F_CREATE should be set when creating new route [ 1170.852911][T25221] IPv6: NLM_F_CREATE should be set when creating new route [ 1171.067459][T25222] netlink: 'syz.0.6382': attribute type 2 has an invalid length. [ 1171.099759][T25222] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6382'. [ 1174.077633][T23020] Bluetooth: hci4: command 0x0406 tx timeout [ 1174.202883][T25247] FAULT_INJECTION: forcing a failure. [ 1174.202883][T25247] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1174.267657][T25247] CPU: 1 PID: 25247 Comm: syz.0.6390 Not tainted syzkaller #0 [ 1174.275160][T25247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1174.285229][T25247] Call Trace: [ 1174.288518][T25247] [ 1174.291462][T25247] dump_stack_lvl+0x188/0x24e [ 1174.296162][T25247] ? show_regs_print_info+0x12/0x12 [ 1174.301378][T25247] ? load_image+0x410/0x410 [ 1174.305906][T25247] ? __lock_acquire+0x7c40/0x7c40 [ 1174.311047][T25247] should_fail_ex+0x390/0x4c0 [ 1174.315751][T25247] _copy_from_user+0x2c/0x170 [ 1174.320453][T25247] __sys_bpf+0x2ea/0x780 [ 1174.324718][T25247] ? bpf_link_show_fdinfo+0x380/0x380 [ 1174.330119][T25247] ? lock_chain_count+0x20/0x20 [ 1174.334992][T25247] __x64_sys_bpf+0x78/0x90 [ 1174.339425][T25247] do_syscall_64+0x4c/0xa0 [ 1174.343861][T25247] ? clear_bhb_loop+0x60/0xb0 [ 1174.348558][T25247] ? clear_bhb_loop+0x60/0xb0 [ 1174.353251][T25247] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1174.359165][T25247] RIP: 0033:0x7f2c9599e159 [ 1174.363590][T25247] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1174.383206][T25247] RSP: 002b:00007f2c93bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1174.391653][T25247] RAX: ffffffffffffffda RBX: 00007f2c95c25fa0 RCX: 00007f2c9599e159 [ 1174.399613][T25247] RDX: 0000000000000094 RSI: 0000200000000140 RDI: 0000000000000005 [ 1174.407578][T25247] RBP: 00007f2c93bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1174.415886][T25247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1174.423853][T25247] R13: 00007f2c95c26038 R14: 00007f2c95c25fa0 R15: 00007ffedc980368 [ 1174.431845][T25247] [ 1174.722934][T25261] netlink: 'syz.1.6395': attribute type 33 has an invalid length. [ 1174.746537][T25261] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6395'. [ 1177.122240][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.128647][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.958081][T25285] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1177.965364][T25285] IPv6: NLM_F_CREATE should be set when creating new route [ 1177.972668][T25285] IPv6: NLM_F_CREATE should be set when creating new route [ 1177.979931][T25285] IPv6: NLM_F_CREATE should be set when creating new route [ 1178.044648][T25287] netlink: 'syz.5.6401': attribute type 2 has an invalid length. [ 1178.062166][T25287] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6401'. [ 1178.193121][T25296] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6403'. [ 1178.245889][T25296] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6403'. [ 1178.320100][T25298] FAULT_INJECTION: forcing a failure. [ 1178.320100][T25298] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1178.360702][T25298] CPU: 1 PID: 25298 Comm: syz.2.6404 Not tainted syzkaller #0 [ 1178.368211][T25298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1178.378286][T25298] Call Trace: [ 1178.381578][T25298] [ 1178.384517][T25298] dump_stack_lvl+0x188/0x24e [ 1178.389211][T25298] ? show_regs_print_info+0x12/0x12 [ 1178.394419][T25298] ? load_image+0x410/0x410 [ 1178.398941][T25298] ? __lock_acquire+0x7c40/0x7c40 [ 1178.403989][T25298] should_fail_ex+0x390/0x4c0 [ 1178.408686][T25298] strncpy_from_user+0x32/0x340 [ 1178.413563][T25298] bpf_prog_load+0x200/0x1530 [ 1178.418271][T25298] ? map_freeze+0x390/0x390 [ 1178.422784][T25298] ? __might_fault+0xa6/0x120 [ 1178.427478][T25298] ? __might_fault+0xa6/0x120 [ 1178.432166][T25298] ? __might_fault+0xc2/0x120 [ 1178.436854][T25298] ? __might_fault+0xa6/0x120 [ 1178.441541][T25298] ? bpf_lsm_bpf+0x5/0x10 [ 1178.445884][T25298] ? security_bpf+0x7a/0xa0 [ 1178.450419][T25298] __sys_bpf+0x5b8/0x780 [ 1178.454685][T25298] ? bpf_link_show_fdinfo+0x380/0x380 [ 1178.460085][T25298] ? lock_chain_count+0x20/0x20 [ 1178.464957][T25298] __x64_sys_bpf+0x78/0x90 [ 1178.469425][T25298] do_syscall_64+0x4c/0xa0 [ 1178.473851][T25298] ? clear_bhb_loop+0x60/0xb0 [ 1178.478539][T25298] ? clear_bhb_loop+0x60/0xb0 [ 1178.483228][T25298] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1178.489138][T25298] RIP: 0033:0x7f3df7f9e159 [ 1178.493557][T25298] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1178.513159][T25298] RSP: 002b:00007f3df8f26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1178.521563][T25298] RAX: ffffffffffffffda RBX: 00007f3df8225fa0 RCX: 00007f3df7f9e159 [ 1178.529524][T25298] RDX: 0000000000000094 RSI: 0000200000000140 RDI: 0000000000000005 [ 1178.537491][T25298] RBP: 00007f3df8f26090 R08: 0000000000000000 R09: 0000000000000000 [ 1178.545466][T25298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1178.553427][T25298] R13: 00007f3df8226038 R14: 00007f3df8225fa0 R15: 00007ffe29b2f2d8 [ 1178.561403][T25298] [ 1178.773633][T25310] netlink: 'syz.5.6409': attribute type 33 has an invalid length. [ 1178.827788][T25310] netlink: 152 bytes leftover after parsing attributes in process `syz.5.6409'. [ 1179.173940][T25323] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6414'. [ 1179.231244][T25326] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1179.238643][T25326] IPv6: NLM_F_CREATE should be set when creating new route [ 1179.246076][T25326] IPv6: NLM_F_CREATE should be set when creating new route [ 1179.253645][T25326] IPv6: NLM_F_CREATE should be set when creating new route [ 1182.204643][T25327] netlink: 'syz.4.6415': attribute type 2 has an invalid length. [ 1182.225388][T25327] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6415'. [ 1182.520358][T25335] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6417'. [ 1182.550069][T25335] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6417'. [ 1182.638992][T25340] FAULT_INJECTION: forcing a failure. [ 1182.638992][T25340] name failslab, interval 1, probability 0, space 0, times 0 [ 1182.701762][T25340] CPU: 0 PID: 25340 Comm: syz.0.6419 Not tainted syzkaller #0 [ 1182.709278][T25340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1182.719355][T25340] Call Trace: [ 1182.722649][T25340] [ 1182.725593][T25340] dump_stack_lvl+0x188/0x24e [ 1182.730293][T25340] ? show_regs_print_info+0x12/0x12 [ 1182.735507][T25340] ? load_image+0x410/0x410 [ 1182.740027][T25340] ? __might_sleep+0xd0/0xd0 [ 1182.744632][T25340] ? __lock_acquire+0x7c40/0x7c40 [ 1182.749682][T25340] should_fail_ex+0x390/0x4c0 [ 1182.754383][T25340] should_failslab+0x5/0x20 [ 1182.758899][T25340] slab_pre_alloc_hook+0x59/0x300 [ 1182.763938][T25340] ? __get_vm_area_node+0x122/0x330 [ 1182.769233][T25340] __kmem_cache_alloc_node+0x4f/0x270 [ 1182.774618][T25340] ? __get_vm_area_node+0x122/0x330 [ 1182.779827][T25340] kmalloc_node_trace+0x22/0xe0 [ 1182.784672][T25340] __get_vm_area_node+0x122/0x330 [ 1182.789694][T25340] __vmalloc_node_range+0x357/0x1380 [ 1182.794971][T25340] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 1182.800590][T25340] ? aa_get_newest_label+0xf9/0x5b0 [ 1182.805784][T25340] ? free_vm_area+0x50/0x50 [ 1182.810280][T25340] ? end_current_label_crit_section+0x170/0x170 [ 1182.816514][T25340] ? __lock_acquire+0x7c40/0x7c40 [ 1182.821537][T25340] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 1182.827079][T25340] __vmalloc+0x76/0x80 [ 1182.831139][T25340] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 1182.836685][T25340] bpf_prog_alloc_no_stats+0x37/0x3a0 [ 1182.842049][T25340] ? bpf_prog_alloc+0x13/0x1b0 [ 1182.846810][T25340] bpf_prog_alloc+0x1c/0x1b0 [ 1182.851395][T25340] bpf_prog_load+0x7d4/0x1530 [ 1182.856078][T25340] ? map_freeze+0x390/0x390 [ 1182.860573][T25340] ? __might_fault+0xa6/0x120 [ 1182.865244][T25340] ? __might_fault+0xa6/0x120 [ 1182.869918][T25340] ? __might_fault+0xc2/0x120 [ 1182.874585][T25340] ? __might_fault+0xa6/0x120 [ 1182.879258][T25340] ? bpf_lsm_bpf+0x5/0x10 [ 1182.883576][T25340] ? security_bpf+0x7a/0xa0 [ 1182.888080][T25340] __sys_bpf+0x5b8/0x780 [ 1182.892315][T25340] ? bpf_link_show_fdinfo+0x380/0x380 [ 1182.897689][T25340] ? lock_chain_count+0x20/0x20 [ 1182.902536][T25340] __x64_sys_bpf+0x78/0x90 [ 1182.906941][T25340] do_syscall_64+0x4c/0xa0 [ 1182.911347][T25340] ? clear_bhb_loop+0x60/0xb0 [ 1182.916009][T25340] ? clear_bhb_loop+0x60/0xb0 [ 1182.920679][T25340] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1182.926565][T25340] RIP: 0033:0x7f2c9599e159 [ 1182.930969][T25340] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1182.950560][T25340] RSP: 002b:00007f2c93bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1182.958964][T25340] RAX: ffffffffffffffda RBX: 00007f2c95c25fa0 RCX: 00007f2c9599e159 [ 1182.966924][T25340] RDX: 0000000000000094 RSI: 0000200000000140 RDI: 0000000000000005 [ 1182.974883][T25340] RBP: 00007f2c93bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1182.982856][T25340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1182.990827][T25340] R13: 00007f2c95c26038 R14: 00007f2c95c25fa0 R15: 00007ffedc980368 [ 1182.998838][T25340] [ 1183.069347][T25342] netlink: 'syz.4.6420': attribute type 39 has an invalid length. [ 1183.071226][T25340] syz.0.6419: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 1183.176221][T25340] CPU: 1 PID: 25340 Comm: syz.0.6419 Not tainted syzkaller #0 [ 1183.183730][T25340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1183.193799][T25340] Call Trace: [ 1183.197090][T25340] [ 1183.200028][T25340] dump_stack_lvl+0x188/0x24e [ 1183.204728][T25340] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 1183.211235][T25340] ? show_regs_print_info+0x12/0x12 [ 1183.216449][T25340] ? load_image+0x410/0x410 [ 1183.221059][T25340] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 1183.227495][T25340] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 1183.234018][T25340] warn_alloc+0x242/0x330 [ 1183.238385][T25340] ? __get_vm_area_node+0x122/0x330 [ 1183.243597][T25340] ? zone_watermark_ok_safe+0x270/0x270 [ 1183.249164][T25340] ? rcu_is_watching+0x11/0xa0 [ 1183.253962][T25340] ? __get_vm_area_node+0x318/0x330 [ 1183.259188][T25340] __vmalloc_node_range+0x37c/0x1380 [ 1183.264507][T25340] ? aa_get_newest_label+0xf9/0x5b0 [ 1183.269724][T25340] ? free_vm_area+0x50/0x50 [ 1183.274240][T25340] ? end_current_label_crit_section+0x170/0x170 [ 1183.280504][T25340] ? __lock_acquire+0x7c40/0x7c40 [ 1183.285546][T25340] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 1183.291110][T25340] __vmalloc+0x76/0x80 [ 1183.295193][T25340] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 1183.300757][T25340] bpf_prog_alloc_no_stats+0x37/0x3a0 [ 1183.306140][T25340] ? bpf_prog_alloc+0x13/0x1b0 [ 1183.310919][T25340] bpf_prog_alloc+0x1c/0x1b0 [ 1183.315525][T25340] bpf_prog_load+0x7d4/0x1530 [ 1183.320227][T25340] ? map_freeze+0x390/0x390 [ 1183.324741][T25340] ? __might_fault+0xa6/0x120 [ 1183.329439][T25340] ? __might_fault+0xa6/0x120 [ 1183.334123][T25340] ? __might_fault+0xc2/0x120 [ 1183.338805][T25340] ? __might_fault+0xa6/0x120 [ 1183.343490][T25340] ? bpf_lsm_bpf+0x5/0x10 [ 1183.347827][T25340] ? security_bpf+0x7a/0xa0 [ 1183.352347][T25340] __sys_bpf+0x5b8/0x780 [ 1183.356604][T25340] ? bpf_link_show_fdinfo+0x380/0x380 [ 1183.361998][T25340] ? lock_chain_count+0x20/0x20 [ 1183.366870][T25340] __x64_sys_bpf+0x78/0x90 [ 1183.371303][T25340] do_syscall_64+0x4c/0xa0 [ 1183.375725][T25340] ? clear_bhb_loop+0x60/0xb0 [ 1183.380410][T25340] ? clear_bhb_loop+0x60/0xb0 [ 1183.385090][T25340] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1183.390978][T25340] RIP: 0033:0x7f2c9599e159 [ 1183.395381][T25340] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1183.414977][T25340] RSP: 002b:00007f2c93bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1183.423380][T25340] RAX: ffffffffffffffda RBX: 00007f2c95c25fa0 RCX: 00007f2c9599e159 [ 1183.431342][T25340] RDX: 0000000000000094 RSI: 0000200000000140 RDI: 0000000000000005 [ 1183.439302][T25340] RBP: 00007f2c93bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1183.447260][T25340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1183.455220][T25340] R13: 00007f2c95c26038 R14: 00007f2c95c25fa0 R15: 00007ffedc980368 [ 1183.463190][T25340] [ 1183.576828][T23020] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1183.601682][T23020] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1183.612467][T23020] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1183.622328][T23020] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1183.638757][T23020] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1183.647142][T23020] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1183.745434][T25340] Mem-Info: [ 1183.749020][T25340] active_anon:17441 inactive_anon:0 isolated_anon:0 [ 1183.749020][T25340] active_file:21916 inactive_file:40400 isolated_file:0 [ 1183.749020][T25340] unevictable:768 dirty:179 writeback:0 [ 1183.749020][T25340] slab_reclaimable:21405 slab_unreclaimable:101296 [ 1183.749020][T25340] mapped:30205 shmem:1373 pagetables:632 [ 1183.749020][T25340] sec_pagetables:0 bounce:0 [ 1183.749020][T25340] kernel_misc_reclaimable:0 [ 1183.749020][T25340] free:1296276 free_pcp:9339 free_cma:0 [ 1183.754300][T25352] netlink: 'syz.1.6424': attribute type 11 has an invalid length. [ 1183.796090][T25340] Node 0 active_anon:69764kB inactive_anon:0kB active_file:87664kB inactive_file:161404kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120820kB dirty:712kB writeback:0kB shmem:3956kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11328kB pagetables:2528kB sec_pagetables:0kB all_unreclaimable? no [ 1183.847193][T25352] netlink: 'syz.1.6424': attribute type 11 has an invalid length. [ 1183.867361][T25352] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.6424'. [ 1183.878332][T25340] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1183.909527][T25340] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1183.937325][T25340] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 1183.943500][T25340] Node 0 DMA32 free:1275136kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:69864kB inactive_anon:0kB active_file:87664kB inactive_file:161404kB unevictable:1536kB writepending:712kB present:3129332kB managed:2592896kB mlocked:0kB bounce:0kB free_pcp:34280kB local_pcp:19628kB free_cma:0kB [ 1183.976282][T25340] lowmem_reserve[]: 0 0 1 1 1 [ 1183.981401][T25340] Node 0 Normal free:16kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:12kB free_cma:0kB [ 1184.009007][T25340] lowmem_reserve[]: 0 0 0 0 0 [ 1184.013839][T25340] Node 1 Normal free:3903272kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:9344kB local_pcp:0kB free_cma:0kB [ 1184.043671][T25340] lowmem_reserve[]: 0 0 0 0 0 [ 1184.049943][T25340] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1184.063129][T25340] Node 0 DMA32: 3416*4kB (UME) 1062*8kB (UME) 443*16kB (UME) 2729*32kB (UME) 698*64kB (UME) 505*128kB (UME) 566*256kB (UM) 267*512kB (UME) 109*1024kB (UM) 38*2048kB (UME) 141*4096kB (UM) = 1274464kB [ 1184.086014][T25340] Node 0 Normal: 0*4kB 2*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 1184.099478][T25340] Node 1 Normal: 236*4kB (UME) 43*8kB (UE) 36*16kB (UME) 153*32kB (UME) 67*64kB (UME) 20*128kB (UME) 8*256kB (UM) 3*512kB (UM) 1*1024kB (E) 1*2048kB (E) 948*4096kB (M) = 3903272kB [ 1184.120783][T25340] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1184.130691][T25340] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1184.140582][T25340] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1184.207614][T25340] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1184.217304][T25340] 63689 total pagecache pages [ 1184.254407][T25340] 0 pages in swap cache [ 1184.287737][T25340] Free swap = 124472kB [ 1184.291927][T25340] Total swap = 124996kB [ 1184.298594][T25340] 2097051 pages RAM [ 1184.302472][T25340] 0 pages HighMem/MovableOnly [ 1184.307225][T25340] 415226 pages reserved [ 1184.312076][T25340] 0 pages cma reserved [ 1184.528800][T25363] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6426'. [ 1184.665421][T25379] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6431'. [ 1184.705222][T25379] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6431'. [ 1184.777412][T25348] chnl_net:caif_netlink_parms(): no params data found [ 1184.970725][T25388] netlink: 'syz.4.6436': attribute type 2 has an invalid length. [ 1185.052701][T25384] netlink: 'syz.1.6434': attribute type 39 has an invalid length. [ 1185.241988][T25348] bridge0: port 1(bridge_slave_0) entered blocking state [ 1185.278859][T25348] bridge0: port 1(bridge_slave_0) entered disabled state [ 1185.301310][T25348] device bridge_slave_0 entered promiscuous mode [ 1185.310180][T25348] bridge0: port 2(bridge_slave_1) entered blocking state [ 1185.317370][T25348] bridge0: port 2(bridge_slave_1) entered disabled state [ 1185.326243][T25348] device bridge_slave_1 entered promiscuous mode [ 1185.442159][T17258] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1185.515565][T25348] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1185.543202][T25348] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1185.619708][T17258] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1185.655673][T25348] team0: Port device team_slave_0 added [ 1185.675954][T25348] team0: Port device team_slave_1 added [ 1185.682659][T12042] Bluetooth: hci3: command 0x0409 tx timeout [ 1185.760245][T17258] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1185.847116][T25413] netlink: 10 bytes leftover after parsing attributes in process `syz.2.6443'. [ 1185.959097][T17258] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1185.993171][T25348] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1186.010864][T25348] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1186.085953][T25348] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1186.139057][T25348] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1186.209477][T25348] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1186.255415][T25348] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1186.267092][T25424] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6445'. [ 1186.284215][T25424] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6445'. [ 1186.361300][T25419] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6444'. [ 1186.527766][T25419] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1186.570764][T25419] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1186.615397][T25419] bond0 (unregistering): Released all slaves [ 1186.711988][T25348] device hsr_slave_0 entered promiscuous mode [ 1186.730532][T25348] device hsr_slave_1 entered promiscuous mode [ 1186.737171][T25348] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1186.763069][T25348] Cannot create hsr debugfs directory [ 1186.866667][T25438] netlink: 'syz.0.6451': attribute type 39 has an invalid length. [ 1187.757800][T23020] Bluetooth: hci3: command 0x041b tx timeout [ 1188.568704][T25486] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6458'. [ 1188.594658][T25486] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6458'. [ 1189.445987][T23020] Bluetooth: hci5: command 0x0406 tx timeout [ 1189.798791][T25527] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.6470'. [ 1189.839911][T23020] Bluetooth: hci3: command 0x040f tx timeout [ 1189.880410][T25526] netlink: 'syz.0.6469': attribute type 39 has an invalid length. [ 1191.038360][T25535] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6471'. [ 1191.057622][T25535] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6471'. [ 1191.213327][T25348] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1191.326778][T25348] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1191.345666][T25348] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1191.394089][T25546] netlink: 'syz.1.6474': attribute type 21 has an invalid length. [ 1191.468369][T25348] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1191.917845][T23020] Bluetooth: hci3: command 0x0419 tx timeout [ 1192.055946][T17258] team0: Port device wlan1 removed [ 1192.456634][T25572] netlink: 'syz.4.6482': attribute type 2 has an invalid length. [ 1192.694237][T17258] device bridge_slave_0 left promiscuous mode [ 1192.732459][T17258] bridge0: port 1(bridge_slave_0) entered disabled state [ 1193.001127][T17258] device veth1_macvtap left promiscuous mode [ 1193.007230][T17258] device veth0_macvtap left promiscuous mode [ 1193.034866][T17258] device veth1_vlan left promiscuous mode [ 1193.865100][T17258] team0 (unregistering): Port device geneve1 removed [ 1194.004473][T17258] team0 (unregistering): Port device vlan0 removed [ 1194.198226][T17258] team0 (unregistering): Port device team_slave_1 removed [ 1194.232824][T17258] team0 (unregistering): Port device team_slave_0 removed [ 1194.608102][T25596] netlink: 'syz.1.6485': attribute type 39 has an invalid length. [ 1194.617293][T25609] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6486'. [ 1194.647665][T25609] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6486'. [ 1194.665719][T25348] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1194.768869][T17248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1194.788325][T17248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1194.850081][T25348] 8021q: adding VLAN 0 to HW filter on device team0 [ 1194.889517][ T5579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1194.912984][ T5579] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1194.988765][ T5579] bridge0: port 1(bridge_slave_0) entered blocking state [ 1194.995909][ T5579] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1195.065864][ T5579] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1195.080602][ T5579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1195.127329][ T5579] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1195.188180][ T5579] bridge0: port 2(bridge_slave_1) entered blocking state [ 1195.195357][ T5579] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1195.271340][ T5579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1195.330394][ T5579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1195.350628][ T5579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1195.390756][ T5579] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1195.423221][ T5579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1195.456375][ T5579] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1195.486603][T25348] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1195.519157][T25348] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1195.558154][ T5579] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1195.566637][ T5579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1195.599342][ T5579] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1195.631644][ T5579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1195.661364][ T5579] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1195.699475][ T5579] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1196.207354][T17248] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1196.230480][T17248] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1196.254939][T25348] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1196.982254][ T5579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1197.002168][ T5579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1197.056266][ T5579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1197.073195][ T5579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1197.090724][T25348] device veth0_vlan entered promiscuous mode [ 1197.099651][ T5579] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1197.109228][ T5579] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1197.121998][T25348] device veth1_vlan entered promiscuous mode [ 1197.164326][ T5579] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1197.179799][ T5579] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1197.188295][ T5579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1197.197091][ T5579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1197.215493][T25348] device veth0_macvtap entered promiscuous mode [ 1197.247507][T25348] device veth1_macvtap entered promiscuous mode [ 1197.278095][T25348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1197.288817][T25348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1197.299149][T25348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1197.309998][T25348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1197.320456][T25348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1197.331320][T25348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1197.341600][T25348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1197.353897][T25348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1197.366668][T25348] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1197.381671][ T5579] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1197.392397][ T5579] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1197.400849][ T5579] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1197.410111][ T5579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1197.421710][T25348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1197.433115][T25348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1197.444052][T25348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1197.462352][T25348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1197.474693][T25348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1197.487990][T25348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1197.498073][T25348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1197.508745][T25348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1197.520234][T25348] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1197.529829][T17248] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1197.548318][T17248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1197.572708][T25348] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1197.581984][T25348] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1197.593679][T25348] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1197.606564][T25348] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1198.224853][ T5216] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1198.257652][ T5216] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1198.322951][ T5599] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1198.403515][ T5579] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1198.414185][ T5579] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1198.473585][T25692] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6498'. [ 1198.521963][T25692] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6498'. [ 1198.577976][T17248] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1198.703177][T25699] netlink: 'syz.5.6422': attribute type 33 has an invalid length. [ 1198.727891][T25699] netlink: 152 bytes leftover after parsing attributes in process `syz.5.6422'. [ 1198.776069][T25697] netlink: 'syz.1.6501': attribute type 39 has an invalid length. [ 1198.955692][T25708] netlink: 'syz.0.6502': attribute type 29 has an invalid length. [ 1199.284059][T25721] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.6506'. [ 1199.473632][T25708] netlink: 'syz.0.6502': attribute type 29 has an invalid length. [ 1199.501495][T25712] netlink: 'syz.0.6502': attribute type 29 has an invalid length. [ 1199.517400][T25715] netlink: 'syz.0.6502': attribute type 29 has an invalid length. [ 1199.558069][T25722] netlink: 14 bytes leftover after parsing attributes in process `syz.5.6505'. [ 1199.661989][T25722] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1199.690085][T25722] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1199.749412][T25722] bond0 (unregistering): Released all slaves [ 1199.882466][T25727] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.6507'. [ 1199.992978][T25727] debugfs: Directory '.! 5‚Á7>7H€' with parent 'ieee80211' already present! [ 1200.249327][T25734] netlink: 'syz.0.6509': attribute type 10 has an invalid length. [ 1203.562714][T25751] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6514'. [ 1203.577125][T25751] netlink: 152 bytes leftover after parsing attributes in process `syz.5.6514'. [ 1203.596107][T25753] netlink: 'syz.2.6515': attribute type 33 has an invalid length. [ 1203.637793][T25753] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6515'. [ 1203.898635][T25756] netlink: 9286 bytes leftover after parsing attributes in process `syz.5.6518'. [ 1204.020650][T25766] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.6521'. [ 1204.127020][T25766] netlink: zone id is out of range [ 1204.139882][T25766] netlink: zone id is out of range [ 1204.171904][T25766] netlink: del zone limit has 4 unknown bytes [ 1204.797776][T12042] Bluetooth: hci0: command 0x0406 tx timeout [ 1204.868664][T25780] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6523'. [ 1205.048083][T25795] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6528'. [ 1205.057091][T25795] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6528'. [ 1205.365484][T25799] netlink: 134056 bytes leftover after parsing attributes in process `syz.5.6529'. [ 1205.439349][T25798] netlink: 134056 bytes leftover after parsing attributes in process `syz.5.6529'. [ 1205.524550][T25806] netlink: 'syz.4.6531': attribute type 33 has an invalid length. [ 1205.943022][T25817] ksmbd: Daemon and kernel module version mismatch. ksmbd: 2, kernel module: 1. User-space ksmbd should terminate. [ 1208.709225][T25826] netlink: 'syz.1.6535': attribute type 10 has an invalid length. [ 1208.790096][T25826] team0: Device hsr_slave_0 failed to register rx_handler [ 1209.324903][T25854] __nla_validate_parse: 2 callbacks suppressed [ 1209.324920][T25854] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6541'. [ 1209.357685][T25854] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6541'. [ 1209.720814][T25864] netlink: 'syz.1.6547': attribute type 33 has an invalid length. [ 1209.771841][T25864] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6547'. [ 1209.929897][T25872] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6558'. [ 1209.963562][T25872] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6558'. [ 1213.093557][T25889] netlink: 'syz.5.6553': attribute type 21 has an invalid length. [ 1213.163724][T25889] netlink: 'syz.5.6553': attribute type 2 has an invalid length. [ 1213.188516][T25889] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6553'. [ 1214.419080][T25934] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6565'. [ 1214.459746][T25934] netlink: 152 bytes leftover after parsing attributes in process `syz.5.6565'. [ 1215.785819][T25955] netlink: 144 bytes leftover after parsing attributes in process `syz.5.6573'. [ 1220.096669][T26005] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6590'. [ 1220.127852][T26005] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6590'. [ 1220.347395][T26020] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6593'. [ 1220.358498][T26020] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6593'. [ 1224.289404][T26059] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6604'. [ 1224.297670][T26054] netlink: 188 bytes leftover after parsing attributes in process `syz.2.6606'. [ 1224.317815][T26059] netlink: 152 bytes leftover after parsing attributes in process `syz.5.6604'. [ 1224.367767][T26054] ksmbd: Unknown IPC event: 10, ignore. [ 1224.445073][T26054] netlink: 'syz.2.6606': attribute type 3 has an invalid length. [ 1224.502129][T26054] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6606'. [ 1224.828292][T26065] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6608'. [ 1228.482288][T26101] netlink: 'syz.4.6619': attribute type 3 has an invalid length. [ 1228.504775][T26101] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.6619'. [ 1228.833761][T26104] ¥: port 1(team0) entered blocking state [ 1228.896566][T26104] ¥: port 1(team0) entered disabled state [ 1228.960602][T26104] device team0 entered promiscuous mode [ 1228.989704][T26104] device team_slave_0 entered promiscuous mode [ 1229.069010][T26104] device team_slave_1 entered promiscuous mode [ 1229.173056][T26112] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6620'. [ 1229.193419][T26112] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6620'. [ 1229.246641][T26113] device team0 left promiscuous mode [ 1229.275237][T26113] device team_slave_0 left promiscuous mode [ 1229.308015][T26113] device team_slave_1 left promiscuous mode [ 1229.314364][T26113] ¥: port 1(team0) entered disabled state [ 1229.390005][T26115] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6623'. [ 1229.666377][T26121] netlink: 188 bytes leftover after parsing attributes in process `syz.4.6625'. [ 1229.722708][T26121] ksmbd: Unknown IPC event: 10, ignore. [ 1229.873271][T26128] netlink: 'syz.4.6625': attribute type 3 has an invalid length. [ 1229.908132][T26127] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6635'. [ 1229.917756][T26128] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6625'. [ 1233.205597][T26146] netlink: 'syz.2.6631': attribute type 27 has an invalid length. [ 1233.258630][T26146] netlink: 'syz.2.6631': attribute type 3 has an invalid length. [ 1233.321576][T26146] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6631'. [ 1234.029814][T26173] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6642'. [ 1234.121489][T26173] netlink: 125520 bytes leftover after parsing attributes in process `syz.4.6642'. [ 1234.256569][T26172] netlink: 14 bytes leftover after parsing attributes in process `syz.5.6643'. [ 1234.312079][T26176] netlink: 188 bytes leftover after parsing attributes in process `syz.0.6644'. [ 1234.346477][T26176] ksmbd: Unknown IPC event: 10, ignore. [ 1234.416156][T26176] netlink: 'syz.0.6644': attribute type 3 has an invalid length. [ 1234.449579][T26176] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6644'. [ 1237.351922][T26185] netlink: 763 bytes leftover after parsing attributes in process `syz.4.6646'. [ 1238.043628][T26208] ¥: port 1(team0) entered blocking state [ 1238.071120][T26208] ¥: port 1(team0) entered disabled state [ 1238.112954][T26208] device team0 entered promiscuous mode [ 1238.199995][T26208] device team_slave_0 entered promiscuous mode [ 1238.331880][T26208] device team_slave_1 entered promiscuous mode [ 1238.497059][T26210] netlink: 'syz.2.6654': attribute type 19 has an invalid length. [ 1238.547809][T26210] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6654'. [ 1238.559929][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.566988][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.630887][T26207] netlink: 'syz.2.6654': attribute type 19 has an invalid length. [ 1238.728440][T26207] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6654'. [ 1239.184422][T26240] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6660'. [ 1239.391794][T26244] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6660'. [ 1240.615778][T26264] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6668'. [ 1240.743195][T26271] netlink: 44 bytes leftover after parsing attributes in process `syz.5.6671'. [ 1240.851734][T26269] netlink: 'syz.4.6670': attribute type 27 has an invalid length. [ 1240.925401][T26269] netlink: 'syz.4.6670': attribute type 3 has an invalid length. [ 1241.010177][T26269] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6670'. [ 1241.076331][T26282] netlink: 'syz.2.6673': attribute type 1 has an invalid length. [ 1241.116401][T26282] netlink: 131740 bytes leftover after parsing attributes in process `syz.2.6673'. [ 1241.313878][T26285] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6674'. [ 1241.701542][T26298] netlink: 10 bytes leftover after parsing attributes in process `syz.5.6680'. [ 1241.741468][T26298] netlink: 'syz.5.6680': attribute type 10 has an invalid length. [ 1245.144486][T26305] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6682'. [ 1248.721679][T26341] netlink: 'syz.2.6692': attribute type 21 has an invalid length. [ 1249.156494][T26357] netlink: 'syz.0.6698': attribute type 3 has an invalid length. [ 1249.176618][T26356] netlink: 'syz.4.6696': attribute type 39 has an invalid length. [ 1249.201500][T26357] netlink: 'syz.0.6698': attribute type 8 has an invalid length. [ 1249.257867][T26357] netlink: 'syz.0.6698': attribute type 7 has an invalid length. [ 1249.259292][T26352] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6697'. [ 1249.265628][T26357] netlink: 194740 bytes leftover after parsing attributes in process `syz.0.6698'. [ 1249.685062][T26360] netlink: 'syz.0.6700': attribute type 23 has an invalid length. [ 1251.188929][T26389] tipc: Started in network mode [ 1251.193850][T26389] tipc: Node identity 9215a268, cluster identity 4711 [ 1251.247828][T26389] tipc: Node number set to 2450891368 [ 1251.567704][T26395] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6712'. [ 1252.684144][T26416] netlink: 'syz.4.6719': attribute type 33 has an invalid length. [ 1252.772578][T26416] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6719'. [ 1252.939516][T26414] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1253.148795][T26414] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1253.257432][T26421] can: request_module (can-proto-0) failed. [ 1253.607818][T26426] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6723'. [ 1253.732452][T26435] netlink: 'syz.2.6724': attribute type 39 has an invalid length. [ 1254.367496][T26458] netlink: 'syz.0.6732': attribute type 33 has an invalid length. [ 1254.389869][T26458] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6732'. [ 1254.904043][T26481] netlink: 14 bytes leftover after parsing attributes in process `syz.5.6738'. [ 1255.082619][T26490] netlink: 'syz.1.6742': attribute type 1 has an invalid length. [ 1255.101506][T26490] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.6742'. [ 1255.268776][T26492] netlink: 'syz.2.6740': attribute type 39 has an invalid length. [ 1255.404924][T26502] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6745'. [ 1255.418867][T26502] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6745'. [ 1255.441773][T26502] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6745'. [ 1255.594850][T26508] netlink: 'syz.0.6747': attribute type 33 has an invalid length. [ 1255.608926][T26508] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6747'. [ 1255.744053][T26515] netlink: 'syz.2.6748': attribute type 3 has an invalid length. [ 1256.807446][T26542] __nla_validate_parse: 2 callbacks suppressed [ 1256.807489][T26542] netlink: 3529 bytes leftover after parsing attributes in process `syz.5.6759'. [ 1256.825651][T26542] netlink: 52477 bytes leftover after parsing attributes in process `syz.5.6759'. [ 1256.835860][T26542] netlink: 71676 bytes leftover after parsing attributes in process `syz.5.6759'. [ 1256.887327][T26545] netlink: 'syz.1.6758': attribute type 39 has an invalid length. [ 1256.913440][T26549] netlink: 14556 bytes leftover after parsing attributes in process `syz.5.6759'. [ 1256.975083][T26542] netlink: 'syz.5.6759': attribute type 21 has an invalid length. [ 1256.997485][T26553] netlink: 'syz.4.6762': attribute type 33 has an invalid length. [ 1257.007205][T26553] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6762'. [ 1257.547802][T26579] netlink: 148 bytes leftover after parsing attributes in process `syz.5.6768'. [ 1257.914281][T26586] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6772'. [ 1258.059001][T26598] netlink: 'syz.1.6776': attribute type 33 has an invalid length. [ 1258.066893][T26598] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6776'. [ 1258.501024][T26618] netlink: 10 bytes leftover after parsing attributes in process `syz.2.6785'. [ 1259.647211][T26643] validate_nla: 1 callbacks suppressed [ 1259.647245][T26643] netlink: 'syz.1.6794': attribute type 39 has an invalid length. [ 1262.247311][T26660] netlink: 'syz.0.6798': attribute type 39 has an invalid length. [ 1263.786964][T26718] netlink: 'syz.1.6814': attribute type 39 has an invalid length. [ 1263.960983][T26723] FAULT_INJECTION: forcing a failure. [ 1263.960983][T26723] name failslab, interval 1, probability 0, space 0, times 0 [ 1264.040432][T26720] netlink: 'syz.4.6815': attribute type 39 has an invalid length. [ 1264.085837][T26723] CPU: 1 PID: 26723 Comm: syz.4.6815 Not tainted syzkaller #0 [ 1264.093358][T26723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1264.103418][T26723] Call Trace: [ 1264.106697][T26723] [ 1264.109623][T26723] dump_stack_lvl+0x188/0x24e [ 1264.114301][T26723] ? show_regs_print_info+0x12/0x12 [ 1264.119490][T26723] ? load_image+0x410/0x410 [ 1264.123990][T26723] ? __might_sleep+0xd0/0xd0 [ 1264.128575][T26723] ? __lock_acquire+0x7c40/0x7c40 [ 1264.133603][T26723] should_fail_ex+0x390/0x4c0 [ 1264.138288][T26723] should_failslab+0x5/0x20 [ 1264.142782][T26723] slab_pre_alloc_hook+0x59/0x300 [ 1264.147804][T26723] ? __lock_acquire+0x138a/0x7c40 [ 1264.152823][T26723] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 1264.158537][T26723] __kmem_cache_alloc_node+0x4f/0x270 [ 1264.163904][T26723] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 1264.169614][T26723] __kmalloc+0xa3/0x240 [ 1264.173853][T26723] tomoyo_realpath_from_path+0xe2/0x5c0 [ 1264.179397][T26723] ? tomoyo_domain+0xd2/0x120 [ 1264.184067][T26723] ? tomoyo_path_number_perm+0x205/0x650 [ 1264.189692][T26723] tomoyo_path_number_perm+0x22f/0x650 [ 1264.195144][T26723] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1264.200592][T26723] ? ksys_write+0x1ce/0x260 [ 1264.205086][T26723] ? common_file_perm+0x171/0x1c0 [ 1264.210126][T26723] ? __fget_files+0x28/0x460 [ 1264.214716][T26723] security_file_ioctl+0x6c/0xa0 [ 1264.219646][T26723] __se_sys_ioctl+0x48/0x170 [ 1264.224233][T26723] do_syscall_64+0x4c/0xa0 [ 1264.228639][T26723] ? clear_bhb_loop+0x60/0xb0 [ 1264.233305][T26723] ? clear_bhb_loop+0x60/0xb0 [ 1264.237972][T26723] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1264.243858][T26723] RIP: 0033:0x7fa90799e159 [ 1264.248267][T26723] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1264.267862][T26723] RSP: 002b:00007fa9087df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1264.276275][T26723] RAX: ffffffffffffffda RBX: 00007fa907c26090 RCX: 00007fa90799e159 [ 1264.284233][T26723] RDX: 00f0ff1f0000000a RSI: 000000008010743f RDI: 000000000000000a [ 1264.292196][T26723] RBP: 00007fa9087df090 R08: 0000000000000000 R09: 0000000000000000 [ 1264.300153][T26723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1264.308113][T26723] R13: 00007fa907c26128 R14: 00007fa907c26090 R15: 00007fff2aa49938 [ 1264.316088][T26723] [ 1264.418706][T26722] netlink: 'syz.2.6816': attribute type 8 has an invalid length. [ 1264.426480][T26722] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.6816'. [ 1264.628650][T26723] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1265.757442][T26757] netlink: 'syz.5.6827': attribute type 10 has an invalid length. [ 1265.832581][T26757] device wg1 entered promiscuous mode [ 1265.845647][T26757] team0: Device wg1 is of different type [ 1266.194796][T26763] netlink: 'syz.2.6830': attribute type 39 has an invalid length. [ 1266.390109][T26772] netlink: 'syz.1.6834': attribute type 21 has an invalid length. [ 1266.432422][T26772] IPv6: NLM_F_CREATE should be specified when creating new route [ 1266.538969][T26778] netlink: 3291 bytes leftover after parsing attributes in process `syz.0.6836'. [ 1266.630169][T26775] netlink: 'syz.1.6834': attribute type 39 has an invalid length. [ 1266.914886][T26788] FAULT_INJECTION: forcing a failure. [ 1266.914886][T26788] name failslab, interval 1, probability 0, space 0, times 0 [ 1266.972244][T26784] netlink: 'syz.5.6839': attribute type 39 has an invalid length. [ 1267.038232][T26788] CPU: 0 PID: 26788 Comm: syz.5.6839 Not tainted syzkaller #0 [ 1267.045750][T26788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1267.055821][T26788] Call Trace: [ 1267.059117][T26788] [ 1267.062056][T26788] dump_stack_lvl+0x188/0x24e [ 1267.066751][T26788] ? show_regs_print_info+0x12/0x12 [ 1267.071970][T26788] ? load_image+0x410/0x410 [ 1267.076506][T26788] ? __might_sleep+0xd0/0xd0 [ 1267.081117][T26788] ? __lock_acquire+0x7c40/0x7c40 [ 1267.086169][T26788] should_fail_ex+0x390/0x4c0 [ 1267.090877][T26788] should_failslab+0x5/0x20 [ 1267.095400][T26788] slab_pre_alloc_hook+0x59/0x300 [ 1267.100440][T26788] ? tomoyo_encode+0x28a/0x550 [ 1267.105219][T26788] __kmem_cache_alloc_node+0x4f/0x270 [ 1267.110616][T26788] ? tomoyo_encode+0x28a/0x550 [ 1267.115398][T26788] __kmalloc+0xa3/0x240 [ 1267.119576][T26788] tomoyo_encode+0x28a/0x550 [ 1267.124191][T26788] tomoyo_realpath_from_path+0x578/0x5c0 [ 1267.129845][T26788] ? tomoyo_domain+0xd2/0x120 [ 1267.134544][T26788] ? tomoyo_path_number_perm+0x205/0x650 [ 1267.140192][T26788] tomoyo_path_number_perm+0x22f/0x650 [ 1267.145673][T26788] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1267.151147][T26788] ? ksys_write+0x1ce/0x260 [ 1267.155672][T26788] ? common_file_perm+0x171/0x1c0 [ 1267.160745][T26788] ? __fget_files+0x28/0x460 [ 1267.165365][T26788] security_file_ioctl+0x6c/0xa0 [ 1267.170321][T26788] __se_sys_ioctl+0x48/0x170 [ 1267.174933][T26788] do_syscall_64+0x4c/0xa0 [ 1267.179361][T26788] ? clear_bhb_loop+0x60/0xb0 [ 1267.184049][T26788] ? clear_bhb_loop+0x60/0xb0 [ 1267.188737][T26788] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1267.194659][T26788] RIP: 0033:0x7f016e79e159 [ 1267.199091][T26788] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1267.218713][T26788] RSP: 002b:00007f016f5b1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1267.227142][T26788] RAX: ffffffffffffffda RBX: 00007f016ea26090 RCX: 00007f016e79e159 [ 1267.235127][T26788] RDX: 00f0ff1f0000000a RSI: 000000008010743f RDI: 000000000000000a [ 1267.243110][T26788] RBP: 00007f016f5b1090 R08: 0000000000000000 R09: 0000000000000000 [ 1267.251093][T26788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1267.259077][T26788] R13: 00007f016ea26128 R14: 00007f016ea26090 R15: 00007ffdcac7f6d8 [ 1267.267076][T26788] [ 1267.401071][T26788] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1268.365114][T26812] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6848'. [ 1268.607050][T26817] netlink: 'syz.4.6850': attribute type 39 has an invalid length. [ 1268.733987][T26815] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6849'. [ 1269.907718][T26839] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6853'. [ 1269.968929][T26839] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6853'. [ 1270.017435][T26843] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6853'. [ 1270.087140][T26848] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6853'. [ 1270.141048][T26849] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6853'. [ 1270.531175][T26862] FAULT_INJECTION: forcing a failure. [ 1270.531175][T26862] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1270.614988][T26859] netlink: 'syz.1.6859': attribute type 39 has an invalid length. [ 1270.660777][T26862] CPU: 1 PID: 26862 Comm: syz.1.6859 Not tainted syzkaller #0 [ 1270.668292][T26862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1270.678360][T26862] Call Trace: [ 1270.681662][T26862] [ 1270.684601][T26862] dump_stack_lvl+0x188/0x24e [ 1270.689295][T26862] ? show_regs_print_info+0x12/0x12 [ 1270.694502][T26862] ? load_image+0x410/0x410 [ 1270.699026][T26862] ? __lock_acquire+0x7c40/0x7c40 [ 1270.704067][T26862] ? mutex_lock_nested+0x10/0x10 [ 1270.709027][T26862] should_fail_ex+0x390/0x4c0 [ 1270.713715][T26862] _copy_to_user+0x2c/0x130 [ 1270.718211][T26862] ppp_ioctl+0xdb9/0x1b20 [ 1270.722649][T26862] ? ppp_poll+0x250/0x250 [ 1270.726970][T26862] ? __fget_files+0x28/0x460 [ 1270.731561][T26862] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1270.736490][T26862] ? security_file_ioctl+0x7c/0xa0 [ 1270.741590][T26862] ? ppp_poll+0x250/0x250 [ 1270.745916][T26862] __se_sys_ioctl+0xfa/0x170 [ 1270.750499][T26862] do_syscall_64+0x4c/0xa0 [ 1270.754905][T26862] ? clear_bhb_loop+0x60/0xb0 [ 1270.759577][T26862] ? clear_bhb_loop+0x60/0xb0 [ 1270.764243][T26862] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1270.770132][T26862] RIP: 0033:0x7f92f4d9e159 [ 1270.774535][T26862] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1270.794141][T26862] RSP: 002b:00007f92f5c84028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1270.802553][T26862] RAX: ffffffffffffffda RBX: 00007f92f5026090 RCX: 00007f92f4d9e159 [ 1270.810520][T26862] RDX: 00f0ff1f0000000a RSI: 000000008010743f RDI: 000000000000000a [ 1270.818489][T26862] RBP: 00007f92f5c84090 R08: 0000000000000000 R09: 0000000000000000 [ 1270.826453][T26862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1270.834416][T26862] R13: 00007f92f5026128 R14: 00007f92f5026090 R15: 00007ffca4ee9498 [ 1270.842396][T26862] [ 1271.103333][T26872] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6861'. [ 1271.357676][T23020] Bluetooth: hci2: command 0x0406 tx timeout [ 1274.150781][T26876] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6863'. [ 1274.678245][T26887] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6868'. [ 1274.715082][T26887] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6868'. [ 1274.832980][T26891] netlink: 'syz.0.6870': attribute type 33 has an invalid length. [ 1274.867737][T26891] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6870'. [ 1276.253579][T26915] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6876'. [ 1276.930851][T26928] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6882'. [ 1276.958015][T26928] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6882'. [ 1278.036530][T26944] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.6885'. [ 1278.090004][T26954] netlink: 14 bytes leftover after parsing attributes in process `syz.5.6889'. [ 1278.899333][T26976] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6896'. [ 1278.965134][T26976] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6896'. [ 1279.132659][T26982] FAULT_INJECTION: forcing a failure. [ 1279.132659][T26982] name failslab, interval 1, probability 0, space 0, times 0 [ 1279.227017][T26982] CPU: 1 PID: 26982 Comm: syz.2.6898 Not tainted syzkaller #0 [ 1279.234535][T26982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1279.244608][T26982] Call Trace: [ 1279.247904][T26982] [ 1279.250860][T26982] dump_stack_lvl+0x188/0x24e [ 1279.255570][T26982] ? show_regs_print_info+0x12/0x12 [ 1279.260798][T26982] ? load_image+0x410/0x410 [ 1279.265340][T26982] ? __might_sleep+0xd0/0xd0 [ 1279.269958][T26982] ? __lock_acquire+0x7c40/0x7c40 [ 1279.275021][T26982] should_fail_ex+0x390/0x4c0 [ 1279.279736][T26982] should_failslab+0x5/0x20 [ 1279.284257][T26982] slab_pre_alloc_hook+0x59/0x300 [ 1279.289307][T26982] ? __lock_acquire+0x138a/0x7c40 [ 1279.294349][T26982] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 1279.300094][T26982] __kmem_cache_alloc_node+0x4f/0x270 [ 1279.305500][T26982] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 1279.311253][T26982] __kmalloc+0xa3/0x240 [ 1279.315444][T26982] tomoyo_realpath_from_path+0xe2/0x5c0 [ 1279.321020][T26982] ? tomoyo_domain+0xd2/0x120 [ 1279.325749][T26982] ? tomoyo_path_number_perm+0x205/0x650 [ 1279.331402][T26982] tomoyo_path_number_perm+0x22f/0x650 [ 1279.336872][T26982] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1279.342329][T26982] ? ksys_write+0x1ce/0x260 [ 1279.346840][T26982] ? common_file_perm+0x171/0x1c0 [ 1279.351908][T26982] ? __fget_files+0x28/0x460 [ 1279.356515][T26982] security_file_ioctl+0x6c/0xa0 [ 1279.361457][T26982] __se_sys_ioctl+0x48/0x170 [ 1279.366050][T26982] do_syscall_64+0x4c/0xa0 [ 1279.370461][T26982] ? clear_bhb_loop+0x60/0xb0 [ 1279.375131][T26982] ? clear_bhb_loop+0x60/0xb0 [ 1279.379806][T26982] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1279.385705][T26982] RIP: 0033:0x7f3df7f9e159 [ 1279.390120][T26982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1279.409723][T26982] RSP: 002b:00007f3df8f26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1279.418136][T26982] RAX: ffffffffffffffda RBX: 00007f3df8225fa0 RCX: 00007f3df7f9e159 [ 1279.426103][T26982] RDX: 0000200000000080 RSI: 00000000000089f4 RDI: 0000000000000005 [ 1279.434066][T26982] RBP: 00007f3df8f26090 R08: 0000000000000000 R09: 0000000000000000 [ 1279.442032][T26982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1279.449994][T26982] R13: 00007f3df8226038 R14: 00007f3df8225fa0 R15: 00007ffe29b2f2d8 [ 1279.457983][T26982] [ 1279.531929][T26981] netlink: 'syz.4.6899': attribute type 2 has an invalid length. [ 1279.602903][T26981] netlink: 'syz.4.6899': attribute type 1 has an invalid length. [ 1279.757781][T26981] netlink: 170140 bytes leftover after parsing attributes in process `syz.4.6899'. [ 1279.889673][T26982] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1280.227830][T27001] netlink: 14 bytes leftover after parsing attributes in process `syz.5.6905'. [ 1280.416995][T27008] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6908'. [ 1282.874440][T27047] __nla_validate_parse: 3 callbacks suppressed [ 1282.874458][T27047] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6919'. [ 1284.799366][T27049] FAULT_INJECTION: forcing a failure. [ 1284.799366][T27049] name failslab, interval 1, probability 0, space 0, times 0 [ 1284.837794][T27049] CPU: 1 PID: 27049 Comm: syz.1.6922 Not tainted syzkaller #0 [ 1284.845299][T27049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1284.855370][T27049] Call Trace: [ 1284.858664][T27049] [ 1284.861612][T27049] dump_stack_lvl+0x188/0x24e [ 1284.866319][T27049] ? show_regs_print_info+0x12/0x12 [ 1284.871538][T27049] ? load_image+0x410/0x410 [ 1284.876071][T27049] ? __might_sleep+0xd0/0xd0 [ 1284.880683][T27049] ? __lock_acquire+0x7c40/0x7c40 [ 1284.885724][T27049] should_fail_ex+0x390/0x4c0 [ 1284.890416][T27049] should_failslab+0x5/0x20 [ 1284.894917][T27049] slab_pre_alloc_hook+0x59/0x300 [ 1284.899950][T27049] ? tomoyo_encode+0x28a/0x550 [ 1284.904716][T27049] __kmem_cache_alloc_node+0x4f/0x270 [ 1284.910092][T27049] ? tomoyo_encode+0x28a/0x550 [ 1284.914851][T27049] __kmalloc+0xa3/0x240 [ 1284.919037][T27049] tomoyo_encode+0x28a/0x550 [ 1284.923640][T27049] tomoyo_realpath_from_path+0x578/0x5c0 [ 1284.929273][T27049] ? tomoyo_domain+0xd2/0x120 [ 1284.933958][T27049] ? tomoyo_path_number_perm+0x205/0x650 [ 1284.939590][T27049] tomoyo_path_number_perm+0x22f/0x650 [ 1284.945051][T27049] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1284.950511][T27049] ? ksys_write+0x1ce/0x260 [ 1284.955015][T27049] ? common_file_perm+0x171/0x1c0 [ 1284.960086][T27049] ? __fget_files+0x28/0x460 [ 1284.964693][T27049] security_file_ioctl+0x6c/0xa0 [ 1284.969634][T27049] __se_sys_ioctl+0x48/0x170 [ 1284.974234][T27049] do_syscall_64+0x4c/0xa0 [ 1284.978646][T27049] ? clear_bhb_loop+0x60/0xb0 [ 1284.983317][T27049] ? clear_bhb_loop+0x60/0xb0 [ 1284.987992][T27049] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1284.993901][T27049] RIP: 0033:0x7f92f4d9e159 [ 1284.998336][T27049] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1285.017943][T27049] RSP: 002b:00007f92f5ca5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1285.026355][T27049] RAX: ffffffffffffffda RBX: 00007f92f5025fa0 RCX: 00007f92f4d9e159 [ 1285.034322][T27049] RDX: 0000200000000080 RSI: 00000000000089f4 RDI: 0000000000000005 [ 1285.042302][T27049] RBP: 00007f92f5ca5090 R08: 0000000000000000 R09: 0000000000000000 [ 1285.050275][T27049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1285.058252][T27049] R13: 00007f92f5026038 R14: 00007f92f5025fa0 R15: 00007ffca4ee9498 [ 1285.066255][T27049] [ 1285.116695][T27049] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1285.167168][T27056] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6923'. [ 1285.218072][T27056] netlink: 152 bytes leftover after parsing attributes in process `syz.5.6923'. [ 1285.317086][T27061] netlink: 'syz.1.6927': attribute type 33 has an invalid length. [ 1285.347364][T27061] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6927'. [ 1285.563040][T27066] netlink: 'syz.0.6928': attribute type 3 has an invalid length. [ 1285.581448][T27066] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.6928'. [ 1285.872463][T27076] netlink: 14 bytes leftover after parsing attributes in process `syz.5.6932'. [ 1286.774989][T27095] netlink: 'syz.4.6939': attribute type 33 has an invalid length. [ 1286.814425][T27095] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6939'. [ 1287.035567][T27103] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6942'. [ 1287.065047][T27103] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6942'. [ 1287.750497][T27113] netlink: 'syz.5.6946': attribute type 39 has an invalid length. [ 1287.967039][T27122] netlink: 'syz.2.6951': attribute type 3 has an invalid length. [ 1287.999178][T27122] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6951'. [ 1288.333183][T27127] netlink: 'syz.2.6951': attribute type 3 has an invalid length. [ 1288.396305][T27127] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6951'. [ 1288.887135][T27141] netlink: 'syz.0.6955': attribute type 33 has an invalid length. [ 1288.946916][T27141] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6955'. [ 1288.985631][T27143] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6956'. [ 1289.001664][T27143] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6956'. [ 1290.431022][T27174] netlink: 'syz.4.6967': attribute type 39 has an invalid length. [ 1290.491258][T27182] netlink: 'syz.0.6970': attribute type 33 has an invalid length. [ 1290.559123][T27182] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6970'. [ 1290.616207][T27187] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6972'. [ 1290.644362][T27187] netlink: 152 bytes leftover after parsing attributes in process `syz.5.6972'. [ 1290.895306][T27197] netlink: 'syz.0.6984': attribute type 33 has an invalid length. [ 1290.929707][T27197] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6984'. [ 1291.049860][T27201] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.6977'. [ 1292.775405][T27237] netlink: 'syz.1.6988': attribute type 39 has an invalid length. [ 1293.126527][T27241] netlink: 'syz.2.6989': attribute type 33 has an invalid length. [ 1293.163096][T27241] __nla_validate_parse: 2 callbacks suppressed [ 1293.163110][T27241] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6989'. [ 1293.739669][T27258] netlink: 'syz.2.6994': attribute type 29 has an invalid length. [ 1293.797334][T27260] netlink: 'syz.2.6994': attribute type 11 has an invalid length. [ 1293.823309][T27253] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6991'. [ 1293.890334][T27258] netlink: 'syz.2.6994': attribute type 29 has an invalid length. [ 1293.917627][T27260] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.6994'. [ 1293.963745][T27259] netlink: 'syz.2.6994': attribute type 29 has an invalid length. [ 1294.467797][T27273] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6999'. [ 1294.476791][T27273] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6999'. [ 1294.567531][T27257] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1295.558624][T27304] netlink: 14 bytes leftover after parsing attributes in process `syz.0.7009'. [ 1295.665636][T27310] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7013'. [ 1295.792086][T27310] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7013'. [ 1295.848722][T27319] netlink: 'syz.5.7015': attribute type 13 has an invalid length. [ 1295.881103][T27319] netlink: 24859 bytes leftover after parsing attributes in process `syz.5.7015'. [ 1295.971351][T27324] netlink: 'syz.1.7016': attribute type 29 has an invalid length. [ 1296.099187][T27322] netlink: 'syz.0.7017': attribute type 39 has an invalid length. [ 1296.131470][T27324] netlink: 'syz.1.7016': attribute type 29 has an invalid length. [ 1296.266863][T27328] netlink: 'syz.1.7016': attribute type 29 has an invalid length. [ 1296.328477][T27329] netlink: 'syz.1.7016': attribute type 29 has an invalid length. [ 1297.407645][T27360] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7028'. [ 1297.720081][T27369] netlink: zone id is out of range [ 1297.725470][T27369] netlink: zone id is out of range [ 1297.751547][T27369] netlink: zone id is out of range [ 1297.768139][T27369] netlink: get zone limit has 8 unknown bytes [ 1298.026255][T27381] netlink: 'syz.4.7033': attribute type 33 has an invalid length. [ 1298.690934][T27416] __nla_validate_parse: 4 callbacks suppressed [ 1298.690950][T27416] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7043'. [ 1298.764941][T27416] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7043'. [ 1298.891949][T27424] netlink: 'syz.1.7044': attribute type 27 has an invalid length. [ 1298.907888][T27424] netlink: 'syz.1.7044': attribute type 3 has an invalid length. [ 1299.498182][T27435] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7048'. [ 1300.013434][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.019842][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.047454][T27450] netlink: 'syz.2.7051': attribute type 3 has an invalid length. [ 1300.088459][T27450] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.7051'. [ 1300.109704][T27447] netlink: 13439 bytes leftover after parsing attributes in process `syz.0.7052'. [ 1300.427187][T27457] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.7051'. [ 1300.604578][T27472] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7056'. [ 1300.613878][T27472] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7056'. [ 1300.663713][T27477] bridge0: port 2(bridge_slave_1) entered disabled state [ 1300.691157][T27477] device bridge_slave_1 left promiscuous mode [ 1300.709316][T27477] bridge0: port 2(bridge_slave_1) entered disabled state [ 1301.133717][T27496] validate_nla: 4 callbacks suppressed [ 1301.133733][T27496] netlink: 'syz.1.7062': attribute type 5 has an invalid length. [ 1301.470796][T27503] netlink: 'syz.1.7064': attribute type 39 has an invalid length. [ 1301.507857][T27504] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.7065'. [ 1301.546417][T27506] netlink: 10 bytes leftover after parsing attributes in process `syz.0.7066'. [ 1301.708330][T27506] netlink: 'syz.0.7066': attribute type 39 has an invalid length. [ 1302.987056][T27543] tun0: tun_chr_ioctl cmd 2147767507 [ 1303.173626][T27542] netlink: 'syz.5.7079': attribute type 10 has an invalid length. [ 1303.236381][T27542] batman_adv: batadv0: Adding interface: virt_wifi0 [ 1303.267825][T27542] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1303.328396][T27542] batman_adv: batadv0: Interface activated: virt_wifi0 [ 1303.385258][T27554] netlink: 'syz.0.7080': attribute type 39 has an invalid length. [ 1303.646862][T27566] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 1303.735526][T27563] netlink: 'syz.2.7085': attribute type 39 has an invalid length. [ 1304.324419][T27585] tun0: tun_chr_ioctl cmd 1074812118 [ 1304.432498][T27592] netlink: 'syz.4.7094': attribute type 16 has an invalid length. [ 1304.478942][T27592] __nla_validate_parse: 3 callbacks suppressed [ 1304.478984][T27592] netlink: 156 bytes leftover after parsing attributes in process `syz.4.7094'. [ 1304.803477][T27595] netlink: 14 bytes leftover after parsing attributes in process `syz.5.7089'. [ 1304.818221][T27598] netlink: 'syz.2.7095': attribute type 13 has an invalid length. [ 1304.858613][T27598] netlink: 14581 bytes leftover after parsing attributes in process `syz.2.7095'. [ 1304.917265][T27601] netlink: 212908 bytes leftover after parsing attributes in process `syz.0.7096'. [ 1304.963672][T27601] netlink: zone id is out of range [ 1305.236312][T27604] netlink: 'syz.4.7097': attribute type 39 has an invalid length. [ 1305.639080][T27630] netlink: 'syz.2.7102': attribute type 39 has an invalid length. [ 1306.402497][T27645] netlink: 14 bytes leftover after parsing attributes in process `syz.2.7108'. [ 1307.068089][T27665] validate_nla: 2 callbacks suppressed [ 1307.068123][T27665] netlink: 'syz.5.7111': attribute type 2 has an invalid length. [ 1307.083170][T27665] netlink: 'syz.5.7111': attribute type 1 has an invalid length. [ 1307.112386][T27665] netlink: 'syz.5.7111': attribute type 4 has an invalid length. [ 1307.136006][T27665] netlink: 208312 bytes leftover after parsing attributes in process `syz.5.7111'. [ 1307.197950][T12042] Bluetooth: hci3: command 0x0406 tx timeout [ 1307.304383][T27665] netlink: 'syz.5.7111': attribute type 2 has an invalid length. [ 1307.396644][T27665] netlink: 'syz.5.7111': attribute type 1 has an invalid length. [ 1307.450001][T27665] netlink: 'syz.5.7111': attribute type 4 has an invalid length. [ 1307.527862][T27665] netlink: 208312 bytes leftover after parsing attributes in process `syz.5.7111'. [ 1307.553589][T27665] netlink: 'syz.5.7111': attribute type 2 has an invalid length. [ 1307.604638][T27665] netlink: 'syz.5.7111': attribute type 1 has an invalid length. [ 1307.652668][T27665] netlink: 'syz.5.7111': attribute type 4 has an invalid length. [ 1307.677869][T27665] netlink: 208312 bytes leftover after parsing attributes in process `syz.5.7111'. [ 1307.712163][T27689] netlink: 'syz.0.7118': attribute type 21 has an invalid length. [ 1308.337140][T27705] netlink: 14 bytes leftover after parsing attributes in process `syz.5.7123'. [ 1310.298161][T27735] device syzkaller0 entered promiscuous mode [ 1312.725990][T27758] netlink: 10 bytes leftover after parsing attributes in process `syz.5.7139'. [ 1312.736365][T27759] netlink: 14 bytes leftover after parsing attributes in process `syz.0.7137'. [ 1312.756362][T27763] validate_nla: 3 callbacks suppressed [ 1312.756371][T27763] netlink: 'syz.5.7139': attribute type 39 has an invalid length. [ 1313.044920][T27770] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7140'. [ 1313.120688][T27770] : renamed from caif0 [ 1313.221956][T27770] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 1314.310869][T27807] netlink: 14 bytes leftover after parsing attributes in process `syz.5.7151'. [ 1315.096919][T27797] delete_channel: no stack [ 1315.426057][T27838] netlink: 134056 bytes leftover after parsing attributes in process `syz.5.7159'. [ 1315.936494][T27853] netlink: 212908 bytes leftover after parsing attributes in process `syz.4.7162'. [ 1315.982135][T27853] netlink: zone id is out of range [ 1316.445567][T27865] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.7165'. [ 1316.728782][T27861] netlink: 14 bytes leftover after parsing attributes in process `syz.2.7163'. [ 1316.964972][T27869] netlink: 10 bytes leftover after parsing attributes in process `syz.4.7168'. [ 1317.134971][T27874] netlink: 'syz.4.7168': attribute type 39 has an invalid length. [ 1317.981602][T27902] netlink: 'syz.5.7176': attribute type 2 has an invalid length. [ 1318.003697][T27902] netlink: 'syz.5.7176': attribute type 4 has an invalid length. [ 1318.048473][T27902] netlink: 132 bytes leftover after parsing attributes in process `syz.5.7176'. [ 1318.284900][T27912] netlink: 763 bytes leftover after parsing attributes in process `syz.4.7178'. [ 1318.971666][T27929] netlink: 'syz.5.7181': attribute type 39 has an invalid length. [ 1319.147043][T27923] netlink: 14 bytes leftover after parsing attributes in process `syz.2.7180'. [ 1320.068351][T27951] netlink: 'syz.2.7187': attribute type 21 has an invalid length. [ 1320.152242][T27951] netlink: 'syz.2.7187': attribute type 1 has an invalid length. [ 1320.195165][T27957] netlink: 'syz.5.7191': attribute type 2 has an invalid length. [ 1320.215664][T27957] netlink: 175020 bytes leftover after parsing attributes in process `syz.5.7191'. [ 1320.237918][T27955] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7187'. [ 1320.770318][T23020] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 1321.025013][T27970] netlink: 9286 bytes leftover after parsing attributes in process `syz.5.7194'. [ 1321.589326][T27985] netlink: 'syz.1.7200': attribute type 29 has an invalid length. [ 1321.666080][T27981] netlink: 'syz.0.7199': attribute type 39 has an invalid length. [ 1321.817068][T27985] netlink: 'syz.1.7200': attribute type 29 has an invalid length. [ 1321.840452][T27986] netlink: 'syz.1.7200': attribute type 29 has an invalid length. [ 1321.875405][T27991] netlink: 14 bytes leftover after parsing attributes in process `syz.2.7198'. [ 1322.299875][T12042] Bluetooth: hci4: ISO packet for unknown connection handle 10 [ 1322.469709][T28004] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.7205'. [ 1323.458629][T28022] IPv6: NLM_F_CREATE should be specified when creating new route [ 1323.571066][T28025] validate_nla: 3 callbacks suppressed [ 1323.571083][T28025] netlink: 'syz.0.7211': attribute type 2 has an invalid length. [ 1323.702914][T28022] netlink: 1 bytes leftover after parsing attributes in process `syz.0.7211'. [ 1325.123818][T28025] device .*! entered promiscuous mode [ 1325.594660][T28053] netlink: 'syz.4.7218': attribute type 39 has an invalid length. [ 1326.098883][T28071] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.7224'. [ 1326.507363][T28077] netlink: 830 bytes leftover after parsing attributes in process `syz.2.7227'. [ 1327.005757][T28077] netlink: 'syz.2.7227': attribute type 8 has an invalid length. [ 1327.016896][T28077] netlink: 'syz.2.7227': attribute type 1 has an invalid length. [ 1327.123801][T28077] netlink: 104088 bytes leftover after parsing attributes in process `syz.2.7227'. [ 1327.509747][T28099] netlink: 48 bytes leftover after parsing attributes in process `syz.5.7234'. [ 1327.871181][T28103] ¥: port 1(team0) entered blocking state [ 1327.877022][T28103] ¥: port 1(team0) entered disabled state [ 1327.934237][T28103] device team0 entered promiscuous mode [ 1327.942398][T28103] device team_slave_0 entered promiscuous mode [ 1327.988866][T28103] device team_slave_1 entered promiscuous mode [ 1328.034034][T28106] device team0 left promiscuous mode [ 1328.085743][T28106] device team_slave_0 left promiscuous mode [ 1328.099498][T28106] device team_slave_1 left promiscuous mode [ 1328.123116][T28106] ¥: port 1(team0) entered disabled state [ 1328.701874][T28128] netlink: 'syz.4.7240': attribute type 39 has an invalid length. [ 1329.362145][T28142] netlink: 154020 bytes leftover after parsing attributes in process `syz.1.7247'. [ 1329.397725][T28142] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 1329.472800][T28143] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7247'. [ 1331.273724][T28201] FAULT_INJECTION: forcing a failure. [ 1331.273724][T28201] name failslab, interval 1, probability 0, space 0, times 0 [ 1331.323483][T28201] CPU: 0 PID: 28201 Comm: syz.1.7266 Not tainted syzkaller #0 [ 1331.330992][T28201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1331.341058][T28201] Call Trace: [ 1331.344350][T28201] [ 1331.347295][T28201] dump_stack_lvl+0x188/0x24e [ 1331.351984][T28201] ? show_regs_print_info+0x12/0x12 [ 1331.357184][T28201] ? load_image+0x410/0x410 [ 1331.361705][T28201] ? __might_sleep+0xd0/0xd0 [ 1331.366310][T28201] ? __lock_acquire+0x7c40/0x7c40 [ 1331.371357][T28201] should_fail_ex+0x390/0x4c0 [ 1331.376058][T28201] should_failslab+0x5/0x20 [ 1331.380574][T28201] slab_pre_alloc_hook+0x59/0x300 [ 1331.385617][T28201] kmem_cache_alloc_node+0x5a/0x310 [ 1331.390831][T28201] ? __alloc_skb+0xf9/0x7d0 [ 1331.395349][T28201] __alloc_skb+0xf9/0x7d0 [ 1331.399692][T28201] netlink_sendmsg+0x654/0xbd0 [ 1331.404483][T28201] ? netlink_getsockopt+0x550/0x550 [ 1331.409695][T28201] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1331.415259][T28201] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1331.420555][T28201] ? security_socket_sendmsg+0x7c/0xa0 [ 1331.426029][T28201] ? netlink_getsockopt+0x550/0x550 [ 1331.431240][T28201] ____sys_sendmsg+0x5ed/0x9a0 [ 1331.436024][T28201] ? __sys_sendmsg_sock+0x30/0x30 [ 1331.441060][T28201] ? __import_iovec+0x306/0x510 [ 1331.445931][T28201] ? import_iovec+0x6f/0xa0 [ 1331.450454][T28201] ___sys_sendmsg+0x2a2/0x360 [ 1331.455144][T28201] ? __sys_sendmsg+0x2a0/0x2a0 [ 1331.459936][T28201] ? __lock_acquire+0x7c40/0x7c40 [ 1331.465003][T28201] __se_sys_sendmsg+0x1c3/0x2b0 [ 1331.469866][T28201] ? __x64_sys_sendmsg+0x80/0x80 [ 1331.474829][T28201] ? lockdep_hardirqs_on+0x94/0x140 [ 1331.480044][T28201] do_syscall_64+0x4c/0xa0 [ 1331.484469][T28201] ? clear_bhb_loop+0x60/0xb0 [ 1331.489160][T28201] ? clear_bhb_loop+0x60/0xb0 [ 1331.493853][T28201] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1331.499763][T28201] RIP: 0033:0x7f92f4d9e159 [ 1331.504190][T28201] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1331.523804][T28201] RSP: 002b:00007f92f5ca5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1331.532231][T28201] RAX: ffffffffffffffda RBX: 00007f92f5025fa0 RCX: 00007f92f4d9e159 [ 1331.540216][T28201] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000005 [ 1331.548204][T28201] RBP: 00007f92f5ca5090 R08: 0000000000000000 R09: 0000000000000000 [ 1331.556185][T28201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1331.564170][T28201] R13: 00007f92f5026038 R14: 00007f92f5025fa0 R15: 00007ffca4ee9498 [ 1331.572174][T28201] [ 1331.641117][T28211] netlink: 'syz.2.7267': attribute type 21 has an invalid length. [ 1331.657348][T28211] netlink: 'syz.2.7267': attribute type 1 has an invalid length. [ 1331.683948][T28211] netlink: 100 bytes leftover after parsing attributes in process `syz.2.7267'. [ 1331.795222][T28203] netlink: 14 bytes leftover after parsing attributes in process `syz.5.7265'. [ 1332.273318][T28238] mac80211_hwsim hwsim53 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1332.502850][T28247] netlink: 14556 bytes leftover after parsing attributes in process `syz.2.7277'. [ 1332.566320][T28244] netlink: 14556 bytes leftover after parsing attributes in process `syz.2.7277'. [ 1333.592588][T28273] netlink: 'syz.0.7285': attribute type 7 has an invalid length. [ 1333.868130][T28282] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7291'. [ 1333.903187][T28282] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7291'. [ 1333.977191][T28289] mac80211_hwsim hwsim47 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1334.025855][T28288] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7291'. [ 1334.167240][T28287] netlink: 14 bytes leftover after parsing attributes in process `syz.5.7287'. [ 1334.374096][T28301] FAULT_INJECTION: forcing a failure. [ 1334.374096][T28301] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1334.420534][T28301] CPU: 1 PID: 28301 Comm: syz.4.7297 Not tainted syzkaller #0 [ 1334.428040][T28301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1334.438108][T28301] Call Trace: [ 1334.441397][T28301] [ 1334.444335][T28301] dump_stack_lvl+0x188/0x24e [ 1334.449029][T28301] ? show_regs_print_info+0x12/0x12 [ 1334.454246][T28301] ? load_image+0x410/0x410 [ 1334.458768][T28301] ? __might_fault+0xa6/0x120 [ 1334.463467][T28301] should_fail_ex+0x390/0x4c0 [ 1334.468169][T28301] copyin+0x1b/0x120 [ 1334.472086][T28301] _copy_from_iter+0x447/0x1130 [ 1334.476968][T28301] ? copyout_mc+0x110/0x110 [ 1334.481487][T28301] ? __virt_addr_valid+0x188/0x540 [ 1334.486696][T28301] ? __virt_addr_valid+0x188/0x540 [ 1334.491823][T28301] ? __virt_addr_valid+0x467/0x540 [ 1334.496950][T28301] ? __phys_addr_symbol+0x2b/0x70 [ 1334.501995][T28301] ? __check_object_size+0x4f6/0xa70 [ 1334.507295][T28301] netlink_sendmsg+0x755/0xbd0 [ 1334.512077][T28301] ? netlink_getsockopt+0x550/0x550 [ 1334.517292][T28301] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1334.522854][T28301] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1334.528150][T28301] ? security_socket_sendmsg+0x7c/0xa0 [ 1334.533624][T28301] ? netlink_getsockopt+0x550/0x550 [ 1334.538832][T28301] ____sys_sendmsg+0x5ed/0x9a0 [ 1334.543616][T28301] ? __sys_sendmsg_sock+0x30/0x30 [ 1334.548650][T28301] ? __import_iovec+0x306/0x510 [ 1334.553521][T28301] ? import_iovec+0x6f/0xa0 [ 1334.558041][T28301] ___sys_sendmsg+0x2a2/0x360 [ 1334.562730][T28301] ? __sys_sendmsg+0x2a0/0x2a0 [ 1334.567522][T28301] ? __lock_acquire+0x7c40/0x7c40 [ 1334.572581][T28301] __se_sys_sendmsg+0x1c3/0x2b0 [ 1334.577443][T28301] ? __x64_sys_sendmsg+0x80/0x80 [ 1334.582403][T28301] ? lockdep_hardirqs_on+0x94/0x140 [ 1334.587624][T28301] do_syscall_64+0x4c/0xa0 [ 1334.592047][T28301] ? clear_bhb_loop+0x60/0xb0 [ 1334.596731][T28301] ? clear_bhb_loop+0x60/0xb0 [ 1334.601418][T28301] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1334.607329][T28301] RIP: 0033:0x7fa90799e159 [ 1334.611756][T28301] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1334.631369][T28301] RSP: 002b:00007fa908800028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1334.639791][T28301] RAX: ffffffffffffffda RBX: 00007fa907c25fa0 RCX: 00007fa90799e159 [ 1334.647775][T28301] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000005 [ 1334.655753][T28301] RBP: 00007fa908800090 R08: 0000000000000000 R09: 0000000000000000 [ 1334.663731][T28301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1334.671712][T28301] R13: 00007fa907c26038 R14: 00007fa907c25fa0 R15: 00007fff2aa49938 [ 1334.679707][T28301] [ 1334.719025][ T5599] wlan1: Trigger new scan to find an IBSS to join [ 1334.756933][T28305] netlink: 'syz.2.7298': attribute type 3 has an invalid length. [ 1334.783325][T28305] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.7298'. [ 1334.866858][T28305] netlink: 'syz.2.7298': attribute type 3 has an invalid length. [ 1334.900480][T28305] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.7298'. [ 1334.947159][T28305] netlink: 'syz.2.7298': attribute type 3 has an invalid length. [ 1334.989056][T28305] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.7298'. [ 1335.023955][T28305] netlink: 'syz.2.7298': attribute type 3 has an invalid length. [ 1335.033487][T28305] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.7298'. [ 1335.101191][T28305] netlink: 'syz.2.7298': attribute type 3 has an invalid length. [ 1335.133738][T28305] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.7298'. [ 1335.192648][T28305] netlink: 'syz.2.7298': attribute type 3 has an invalid length. [ 1335.277839][T28305] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.7298'. [ 1335.299238][T28305] netlink: 'syz.2.7298': attribute type 3 has an invalid length. [ 1335.319224][T28305] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.7298'. [ 1335.360578][T28305] netlink: 'syz.2.7298': attribute type 3 has an invalid length. [ 1335.423634][T28305] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.7298'. [ 1335.469776][T28305] netlink: 'syz.2.7298': attribute type 3 has an invalid length. [ 1335.477540][T28305] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.7298'. [ 1335.722913][T28327] bridge0: port 2(bridge_slave_1) entered disabled state [ 1335.731861][T28327] bridge0: port 1(bridge_slave_0) entered disabled state [ 1337.535439][T28329] device bridge_slave_1 left promiscuous mode [ 1337.543598][T28329] bridge0: port 2(bridge_slave_1) entered disabled state [ 1337.565629][T28329] device bridge_slave_0 left promiscuous mode [ 1337.582866][T28329] bridge0: port 1(bridge_slave_0) entered disabled state [ 1337.678762][T17258] wlan1: Trigger new scan to find an IBSS to join [ 1337.689029][T28338] netlink: 128 bytes leftover after parsing attributes in process `syz.1.7308'. [ 1337.705106][T28338] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1337.750010][T28338] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1337.999943][T28356] FAULT_INJECTION: forcing a failure. [ 1337.999943][T28356] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1338.083521][T28356] CPU: 0 PID: 28356 Comm: syz.1.7314 Not tainted syzkaller #0 [ 1338.091041][T28356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1338.101109][T28356] Call Trace: [ 1338.104392][T28356] [ 1338.107329][T28356] dump_stack_lvl+0x188/0x24e [ 1338.112025][T28356] ? show_regs_print_info+0x12/0x12 [ 1338.117238][T28356] ? load_image+0x410/0x410 [ 1338.121760][T28356] ? __might_fault+0xa6/0x120 [ 1338.126454][T28356] should_fail_ex+0x390/0x4c0 [ 1338.131155][T28356] copyin+0x1b/0x120 [ 1338.135076][T28356] _copy_from_iter+0x559/0x1130 [ 1338.139956][T28356] ? copyout_mc+0x110/0x110 [ 1338.144565][T28356] ? __virt_addr_valid+0x188/0x540 [ 1338.149695][T28356] ? __virt_addr_valid+0x188/0x540 [ 1338.154822][T28356] ? __virt_addr_valid+0x467/0x540 [ 1338.159951][T28356] ? __phys_addr_symbol+0x2b/0x70 [ 1338.164992][T28356] ? __check_object_size+0x4f6/0xa70 [ 1338.170300][T28356] netlink_sendmsg+0x755/0xbd0 [ 1338.175080][T28356] ? netlink_getsockopt+0x550/0x550 [ 1338.180290][T28356] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1338.185853][T28356] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1338.191241][T28356] ? security_socket_sendmsg+0x7c/0xa0 [ 1338.196715][T28356] ? netlink_getsockopt+0x550/0x550 [ 1338.201931][T28356] ____sys_sendmsg+0x5ed/0x9a0 [ 1338.206714][T28356] ? __sys_sendmsg_sock+0x30/0x30 [ 1338.211748][T28356] ? __import_iovec+0x306/0x510 [ 1338.216620][T28356] ? import_iovec+0x6f/0xa0 [ 1338.221136][T28356] ___sys_sendmsg+0x2a2/0x360 [ 1338.225835][T28356] ? __sys_sendmsg+0x2a0/0x2a0 [ 1338.230631][T28356] ? __lock_acquire+0x7c40/0x7c40 [ 1338.235695][T28356] __se_sys_sendmsg+0x1c3/0x2b0 [ 1338.240565][T28356] ? __x64_sys_sendmsg+0x80/0x80 [ 1338.245522][T28356] ? lockdep_hardirqs_on+0x94/0x140 [ 1338.250733][T28356] do_syscall_64+0x4c/0xa0 [ 1338.255139][T28356] ? clear_bhb_loop+0x60/0xb0 [ 1338.259813][T28356] ? clear_bhb_loop+0x60/0xb0 [ 1338.264478][T28356] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1338.270364][T28356] RIP: 0033:0x7f92f4d9e159 [ 1338.274771][T28356] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1338.294370][T28356] RSP: 002b:00007f92f5ca5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1338.302776][T28356] RAX: ffffffffffffffda RBX: 00007f92f5025fa0 RCX: 00007f92f4d9e159 [ 1338.310737][T28356] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000005 [ 1338.318702][T28356] RBP: 00007f92f5ca5090 R08: 0000000000000000 R09: 0000000000000000 [ 1338.326665][T28356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1338.334629][T28356] R13: 00007f92f5026038 R14: 00007f92f5025fa0 R15: 00007ffca4ee9498 [ 1338.342601][T28356] [ 1338.410498][T28353] : port 1(ip6gretap0) entered blocking state [ 1338.425359][T28353] : port 1(ip6gretap0) entered disabled state [ 1338.473443][T28353] device ip6gretap0 entered promiscuous mode [ 1338.504758][T28363] device ip6gretap0 left promiscuous mode [ 1338.515618][T28363] : port 1(ip6gretap0) entered disabled state [ 1338.626105][T28362] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 1339.827130][T28395] FAULT_INJECTION: forcing a failure. [ 1339.827130][T28395] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1339.882460][T28395] CPU: 0 PID: 28395 Comm: syz.4.7327 Not tainted syzkaller #0 [ 1339.889979][T28395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1339.900054][T28395] Call Trace: [ 1339.903346][T28395] [ 1339.906294][T28395] dump_stack_lvl+0x188/0x24e [ 1339.911009][T28395] ? show_regs_print_info+0x12/0x12 [ 1339.916229][T28395] ? load_image+0x410/0x410 [ 1339.920757][T28395] ? __might_fault+0xa6/0x120 [ 1339.925460][T28395] should_fail_ex+0x390/0x4c0 [ 1339.930166][T28395] copyin+0x1b/0x120 [ 1339.934083][T28395] _copy_from_iter+0x559/0x1130 [ 1339.938969][T28395] ? copyout_mc+0x110/0x110 [ 1339.943497][T28395] ? __virt_addr_valid+0x188/0x540 [ 1339.948632][T28395] ? __virt_addr_valid+0x188/0x540 [ 1339.953747][T28395] ? __virt_addr_valid+0x467/0x540 [ 1339.958856][T28395] ? __phys_addr_symbol+0x2b/0x70 [ 1339.963892][T28395] ? __check_object_size+0x4f6/0xa70 [ 1339.969186][T28395] netlink_sendmsg+0x755/0xbd0 [ 1339.973969][T28395] ? netlink_getsockopt+0x550/0x550 [ 1339.979171][T28395] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1339.984725][T28395] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1339.990007][T28395] ? security_socket_sendmsg+0x7c/0xa0 [ 1339.995462][T28395] ? netlink_getsockopt+0x550/0x550 [ 1340.000837][T28395] ____sys_sendmsg+0x5ed/0x9a0 [ 1340.005627][T28395] ? __sys_sendmsg_sock+0x30/0x30 [ 1340.010644][T28395] ? __import_iovec+0x306/0x510 [ 1340.015502][T28395] ? import_iovec+0x6f/0xa0 [ 1340.020008][T28395] ___sys_sendmsg+0x2a2/0x360 [ 1340.024692][T28395] ? __sys_sendmsg+0x2a0/0x2a0 [ 1340.029477][T28395] ? __lock_acquire+0x7c40/0x7c40 [ 1340.034532][T28395] __se_sys_sendmsg+0x1c3/0x2b0 [ 1340.039383][T28395] ? __x64_sys_sendmsg+0x80/0x80 [ 1340.044333][T28395] ? lockdep_hardirqs_on+0x94/0x140 [ 1340.049534][T28395] do_syscall_64+0x4c/0xa0 [ 1340.053945][T28395] ? clear_bhb_loop+0x60/0xb0 [ 1340.058621][T28395] ? clear_bhb_loop+0x60/0xb0 [ 1340.063292][T28395] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1340.069184][T28395] RIP: 0033:0x7fa90799e159 [ 1340.073592][T28395] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1340.093211][T28395] RSP: 002b:00007fa908800028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1340.101633][T28395] RAX: ffffffffffffffda RBX: 00007fa907c25fa0 RCX: 00007fa90799e159 [ 1340.109599][T28395] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000005 [ 1340.117571][T28395] RBP: 00007fa908800090 R08: 0000000000000000 R09: 0000000000000000 [ 1340.125541][T28395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1340.133505][T28395] R13: 00007fa907c26038 R14: 00007fa907c25fa0 R15: 00007fff2aa49938 [ 1340.141490][T28395] [ 1340.587162][T28399] __nla_validate_parse: 4 callbacks suppressed [ 1340.587248][T28399] netlink: 14 bytes leftover after parsing attributes in process `syz.1.7329'. [ 1341.678277][ T5216] wlan1: Trigger new scan to find an IBSS to join [ 1343.537991][T17248] wlan1: Creating new IBSS network, BSSID 86:99:58:57:9e:74 [ 1344.072924][T28439] : port 1(ip6gretap0) entered blocking state [ 1344.098681][T28439] : port 1(ip6gretap0) entered disabled state [ 1344.098872][T28441] FAULT_INJECTION: forcing a failure. [ 1344.098872][T28441] name failslab, interval 1, probability 0, space 0, times 0 [ 1344.133034][T28439] device ip6gretap0 entered promiscuous mode [ 1344.205726][T28442] device ip6gretap0 left promiscuous mode [ 1344.231058][T28442] : port 1(ip6gretap0) entered disabled state [ 1344.258919][T28441] CPU: 0 PID: 28441 Comm: syz.4.7341 Not tainted syzkaller #0 [ 1344.266460][T28441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1344.276539][T28441] Call Trace: [ 1344.279818][T28441] [ 1344.282742][T28441] dump_stack_lvl+0x188/0x24e [ 1344.287428][T28441] ? show_regs_print_info+0x12/0x12 [ 1344.292620][T28441] ? load_image+0x410/0x410 [ 1344.297120][T28441] ? verify_lock_unused+0x140/0x140 [ 1344.302322][T28441] should_fail_ex+0x390/0x4c0 [ 1344.307012][T28441] should_failslab+0x5/0x20 [ 1344.311513][T28441] slab_pre_alloc_hook+0x59/0x300 [ 1344.316540][T28441] kmem_cache_alloc+0x56/0x2f0 [ 1344.321301][T28441] ? skb_clone+0x1e7/0x370 [ 1344.325712][T28441] skb_clone+0x1e7/0x370 [ 1344.329948][T28441] __netlink_deliver_tap+0x3e4/0x7e0 [ 1344.335234][T28441] ? netlink_deliver_tap+0x2e/0x1b0 [ 1344.340422][T28441] netlink_deliver_tap+0x19c/0x1b0 [ 1344.345524][T28441] netlink_unicast+0x777/0x920 [ 1344.350285][T28441] netlink_sendmsg+0x8ad/0xbd0 [ 1344.355044][T28441] ? netlink_getsockopt+0x550/0x550 [ 1344.360235][T28441] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1344.365788][T28441] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1344.371065][T28441] ? security_socket_sendmsg+0x7c/0xa0 [ 1344.376531][T28441] ? netlink_getsockopt+0x550/0x550 [ 1344.381724][T28441] ____sys_sendmsg+0x5ed/0x9a0 [ 1344.386488][T28441] ? __sys_sendmsg_sock+0x30/0x30 [ 1344.391500][T28441] ? __import_iovec+0x306/0x510 [ 1344.396361][T28441] ? import_iovec+0x6f/0xa0 [ 1344.400889][T28441] ___sys_sendmsg+0x2a2/0x360 [ 1344.405562][T28441] ? __sys_sendmsg+0x2a0/0x2a0 [ 1344.410333][T28441] ? __lock_acquire+0x7c40/0x7c40 [ 1344.415367][T28441] __se_sys_sendmsg+0x1c3/0x2b0 [ 1344.420207][T28441] ? ct_nmi_exit+0x145/0x1c0 [ 1344.424792][T28441] ? __x64_sys_sendmsg+0x80/0x80 [ 1344.429728][T28441] ? lockdep_hardirqs_on+0x94/0x140 [ 1344.434923][T28441] do_syscall_64+0x4c/0xa0 [ 1344.439328][T28441] ? clear_bhb_loop+0x60/0xb0 [ 1344.443991][T28441] ? clear_bhb_loop+0x60/0xb0 [ 1344.448656][T28441] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1344.454544][T28441] RIP: 0033:0x7fa90799e159 [ 1344.458950][T28441] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1344.478546][T28441] RSP: 002b:00007fa908800028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1344.486946][T28441] RAX: ffffffffffffffda RBX: 00007fa907c25fa0 RCX: 00007fa90799e159 [ 1344.494905][T28441] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000005 [ 1344.502869][T28441] RBP: 00007fa908800090 R08: 0000000000000000 R09: 0000000000000000 [ 1344.510829][T28441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1344.518790][T28441] R13: 00007fa907c26038 R14: 00007fa907c25fa0 R15: 00007fff2aa49938 [ 1344.526765][T28441] [ 1344.711462][T28448] netlink: 212908 bytes leftover after parsing attributes in process `syz.0.7343'. [ 1344.735300][T28448] netlink: zone id is out of range [ 1344.932239][T28451] netlink: 'syz.4.7344': attribute type 10 has an invalid length. [ 1345.019607][T28451] bridge0: port 2(bridge_slave_1) entered disabled state [ 1345.076155][T28451] device bridge_slave_1 left promiscuous mode [ 1345.098424][T28451] bridge0: port 2(bridge_slave_1) entered disabled state [ 1345.193515][T28459] netlink: 'syz.0.7347': attribute type 2 has an invalid length. [ 1345.258845][T28459] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.7347'. [ 1345.454679][T28463] netlink: 14 bytes leftover after parsing attributes in process `syz.1.7348'. [ 1345.510234][T28475] netlink: 'syz.4.7351': attribute type 3 has an invalid length. [ 1345.550703][T28475] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7351'. [ 1348.398033][T28482] netlink: 'syz.2.7352': attribute type 10 has an invalid length. [ 1348.609103][T28488] FAULT_INJECTION: forcing a failure. [ 1348.609103][T28488] name failslab, interval 1, probability 0, space 0, times 0 [ 1348.714492][T28488] CPU: 0 PID: 28488 Comm: syz.0.7355 Not tainted syzkaller #0 [ 1348.722007][T28488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1348.732073][T28488] Call Trace: [ 1348.735362][T28488] [ 1348.738309][T28488] dump_stack_lvl+0x188/0x24e [ 1348.743008][T28488] ? show_regs_print_info+0x12/0x12 [ 1348.748221][T28488] ? load_image+0x410/0x410 [ 1348.752743][T28488] ? __might_sleep+0xd0/0xd0 [ 1348.757346][T28488] ? __lock_acquire+0x7c40/0x7c40 [ 1348.762395][T28488] should_fail_ex+0x390/0x4c0 [ 1348.767097][T28488] should_failslab+0x5/0x20 [ 1348.771615][T28488] slab_pre_alloc_hook+0x59/0x300 [ 1348.776657][T28488] kmem_cache_alloc_node+0x5a/0x310 [ 1348.781871][T28488] ? __alloc_skb+0xf9/0x7d0 [ 1348.786396][T28488] __alloc_skb+0xf9/0x7d0 [ 1348.790737][T28488] netlink_ack+0x373/0x1160 [ 1348.795267][T28488] ? ref_tracker_free+0x682/0x830 [ 1348.800314][T28488] ? refcount_inc+0x70/0x70 [ 1348.804837][T28488] ? netlink_dump+0xcd0/0xcd0 [ 1348.809534][T28488] ? __copy_skb_header+0x3ba/0x4f0 [ 1348.814658][T28488] ? __skb_clone+0x446/0x6c0 [ 1348.819258][T28488] netlink_rcv_skb+0x26d/0x440 [ 1348.824021][T28488] ? rtnetlink_bind+0x80/0x80 [ 1348.828701][T28488] ? netlink_ack+0x1160/0x1160 [ 1348.833468][T28488] ? netlink_deliver_tap+0x2e/0x1b0 [ 1348.838668][T28488] netlink_unicast+0x7ad/0x920 [ 1348.843429][T28488] netlink_sendmsg+0x8ad/0xbd0 [ 1348.848186][T28488] ? netlink_getsockopt+0x550/0x550 [ 1348.853376][T28488] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1348.858922][T28488] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1348.864201][T28488] ? security_socket_sendmsg+0x7c/0xa0 [ 1348.869655][T28488] ? netlink_getsockopt+0x550/0x550 [ 1348.874847][T28488] ____sys_sendmsg+0x5ed/0x9a0 [ 1348.879613][T28488] ? __sys_sendmsg_sock+0x30/0x30 [ 1348.884631][T28488] ? __import_iovec+0x306/0x510 [ 1348.889486][T28488] ? import_iovec+0x6f/0xa0 [ 1348.893989][T28488] ___sys_sendmsg+0x2a2/0x360 [ 1348.898664][T28488] ? __sys_sendmsg+0x2a0/0x2a0 [ 1348.903430][T28488] ? __lock_acquire+0x7c40/0x7c40 [ 1348.908552][T28488] __se_sys_sendmsg+0x1c3/0x2b0 [ 1348.913394][T28488] ? __x64_sys_sendmsg+0x80/0x80 [ 1348.918329][T28488] ? lockdep_hardirqs_on+0x94/0x140 [ 1348.923542][T28488] do_syscall_64+0x4c/0xa0 [ 1348.927962][T28488] ? clear_bhb_loop+0x60/0xb0 [ 1348.932644][T28488] ? clear_bhb_loop+0x60/0xb0 [ 1348.937314][T28488] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1348.943209][T28488] RIP: 0033:0x7f2c9599e159 [ 1348.947621][T28488] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1348.967224][T28488] RSP: 002b:00007f2c93bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1348.975632][T28488] RAX: ffffffffffffffda RBX: 00007f2c95c25fa0 RCX: 00007f2c9599e159 [ 1348.983603][T28488] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000005 [ 1348.991578][T28488] RBP: 00007f2c93bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1348.999549][T28488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1349.007509][T28488] R13: 00007f2c95c26038 R14: 00007f2c95c25fa0 R15: 00007ffedc980368 [ 1349.015483][T28488] [ 1349.520229][T28489] device syzkaller0 entered promiscuous mode [ 1349.569019][T28497] : port 1(ip6gretap0) entered blocking state [ 1349.580668][T28497] : port 1(ip6gretap0) entered disabled state [ 1349.613721][T28497] device ip6gretap0 entered promiscuous mode [ 1352.221913][T28499] device ip6gretap0 left promiscuous mode [ 1352.227867][T28499] : port 1(ip6gretap0) entered disabled state [ 1352.444149][T28520] netlink: 2639 bytes leftover after parsing attributes in process `syz.0.7365'. [ 1355.645311][T28536] netlink: 212908 bytes leftover after parsing attributes in process `syz.1.7369'. [ 1355.687048][T28533] syzkaller0: tun_chr_ioctl cmd 1074025680 [ 1355.694569][T28536] netlink: zone id is out of range [ 1355.751449][T28533] netlink: 'syz.5.7370': attribute type 11 has an invalid length. [ 1356.390810][T28553] netlink: 14 bytes leftover after parsing attributes in process `syz.1.7375'. [ 1358.274766][T28583] netlink: 15119 bytes leftover after parsing attributes in process `syz.0.7383'. [ 1358.776004][T28592] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7386'. [ 1361.314090][T28600] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7389'. [ 1361.467860][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.474249][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.659081][T28608] netlink: 14 bytes leftover after parsing attributes in process `syz.4.7388'. [ 1362.432430][T28634] netlink: 'syz.0.7396': attribute type 3 has an invalid length. [ 1362.458481][T28634] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.7396'. [ 1363.581285][T28666] netlink: 15998 bytes leftover after parsing attributes in process `syz.0.7401'. [ 1364.460591][T28678] netlink: 14 bytes leftover after parsing attributes in process `syz.4.7404'. [ 1364.511009][T28680] FAULT_INJECTION: forcing a failure. [ 1364.511009][T28680] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1364.582899][T28680] CPU: 1 PID: 28680 Comm: syz.0.7406 Not tainted syzkaller #0 [ 1364.590413][T28680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1364.600481][T28680] Call Trace: [ 1364.603771][T28680] [ 1364.606714][T28680] dump_stack_lvl+0x188/0x24e [ 1364.611409][T28680] ? show_regs_print_info+0x12/0x12 [ 1364.616618][T28680] ? load_image+0x410/0x410 [ 1364.621144][T28680] ? __lock_acquire+0x7c40/0x7c40 [ 1364.626202][T28680] should_fail_ex+0x390/0x4c0 [ 1364.630901][T28680] _copy_from_user+0x2c/0x170 [ 1364.635592][T28680] __sys_bpf+0x2ea/0x780 [ 1364.639849][T28680] ? bpf_link_show_fdinfo+0x380/0x380 [ 1364.645258][T28680] ? lock_chain_count+0x20/0x20 [ 1364.650133][T28680] __x64_sys_bpf+0x78/0x90 [ 1364.654565][T28680] do_syscall_64+0x4c/0xa0 [ 1364.658988][T28680] ? clear_bhb_loop+0x60/0xb0 [ 1364.663676][T28680] ? clear_bhb_loop+0x60/0xb0 [ 1364.668360][T28680] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1364.674271][T28680] RIP: 0033:0x7f2c9599e159 [ 1364.678694][T28680] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1364.698311][T28680] RSP: 002b:00007f2c93bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1364.706729][T28680] RAX: ffffffffffffffda RBX: 00007f2c95c25fa0 RCX: 00007f2c9599e159 [ 1364.714725][T28680] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 1364.722688][T28680] RBP: 00007f2c93bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1364.730651][T28680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1364.738611][T28680] R13: 00007f2c95c26038 R14: 00007f2c95c25fa0 R15: 00007ffedc980368 [ 1364.746582][T28680] [ 1364.840237][T28686] mac80211_hwsim hwsim47 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1364.941589][T28690] netlink: 'syz.4.7411': attribute type 3 has an invalid length. [ 1364.969910][T28690] netlink: 'syz.4.7411': attribute type 1 has an invalid length. [ 1364.975042][T28693] netlink: 'syz.2.7412': attribute type 3 has an invalid length. [ 1364.978617][T28690] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7411'. [ 1364.992118][T28693] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.7412'. [ 1365.269361][T28707] netlink: 'syz.5.7414': attribute type 10 has an invalid length. [ 1365.331523][T28707] netlink: 164 bytes leftover after parsing attributes in process `syz.5.7414'. [ 1365.481149][T28707] device team0 left promiscuous mode [ 1365.522882][T28707] device team_slave_0 left promiscuous mode [ 1365.556304][T28707] device team_slave_1 left promiscuous mode [ 1365.600462][T28707] ¥: port 1(team0) entered disabled state [ 1365.917078][T28722] netlink: 146340 bytes leftover after parsing attributes in process `syz.2.7420'. [ 1366.022250][T28722] openvswitch: netlink: Key type 386 is out of range max 32 [ 1366.162430][T28726] netlink: 14 bytes leftover after parsing attributes in process `syz.5.7421'. [ 1366.516497][T28734] FAULT_INJECTION: forcing a failure. [ 1366.516497][T28734] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1366.548828][T28734] CPU: 0 PID: 28734 Comm: syz.0.7424 Not tainted syzkaller #0 [ 1366.556328][T28734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1366.566391][T28734] Call Trace: [ 1366.569680][T28734] [ 1366.572623][T28734] dump_stack_lvl+0x188/0x24e [ 1366.577319][T28734] ? show_regs_print_info+0x12/0x12 [ 1366.582532][T28734] ? load_image+0x410/0x410 [ 1366.587055][T28734] ? __lock_acquire+0x7c40/0x7c40 [ 1366.592091][T28734] ? __bpf_prog_test_run_raw_tp+0x2a6/0x430 [ 1366.597989][T28734] should_fail_ex+0x390/0x4c0 [ 1366.602689][T28734] _copy_to_user+0x2c/0x130 [ 1366.607300][T28734] bpf_prog_test_run_raw_tp+0x4de/0x680 [ 1366.612868][T28734] ? trace_bpf_test_finish+0x220/0x220 [ 1366.618359][T28734] ? trace_bpf_test_finish+0x220/0x220 [ 1366.623840][T28734] bpf_prog_test_run+0x31c/0x390 [ 1366.628800][T28734] __sys_bpf+0x62b/0x780 [ 1366.633080][T28734] ? bpf_link_show_fdinfo+0x380/0x380 [ 1366.638489][T28734] ? lock_chain_count+0x20/0x20 [ 1366.643364][T28734] __x64_sys_bpf+0x78/0x90 [ 1366.647799][T28734] do_syscall_64+0x4c/0xa0 [ 1366.652225][T28734] ? clear_bhb_loop+0x60/0xb0 [ 1366.656913][T28734] ? clear_bhb_loop+0x60/0xb0 [ 1366.661607][T28734] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1366.667515][T28734] RIP: 0033:0x7f2c9599e159 [ 1366.671939][T28734] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1366.691553][T28734] RSP: 002b:00007f2c93bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1366.699978][T28734] RAX: ffffffffffffffda RBX: 00007f2c95c25fa0 RCX: 00007f2c9599e159 [ 1366.707967][T28734] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 1366.715949][T28734] RBP: 00007f2c93bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1366.723934][T28734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1366.731921][T28734] R13: 00007f2c95c26038 R14: 00007f2c95c25fa0 R15: 00007ffedc980368 [ 1366.739907][T28734] [ 1366.795294][T28740] netlink: 'syz.2.7425': attribute type 29 has an invalid length. [ 1366.808903][T28740] netlink: 'syz.2.7425': attribute type 29 has an invalid length. [ 1366.847974][T28736] netlink: 'syz.2.7425': attribute type 29 has an invalid length. [ 1367.839769][T28766] netlink: 'syz.4.7430': attribute type 3 has an invalid length. [ 1367.847718][T28766] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.7430'. [ 1368.502972][T28787] netlink: 14 bytes leftover after parsing attributes in process `syz.5.7437'. [ 1369.374566][T28798] FAULT_INJECTION: forcing a failure. [ 1369.374566][T28798] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1369.503591][T28798] CPU: 0 PID: 28798 Comm: syz.4.7441 Not tainted syzkaller #0 [ 1369.511103][T28798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1369.521169][T28798] Call Trace: [ 1369.524454][T28798] [ 1369.527388][T28798] dump_stack_lvl+0x188/0x24e [ 1369.532080][T28798] ? show_regs_print_info+0x12/0x12 [ 1369.537301][T28798] ? load_image+0x410/0x410 [ 1369.541828][T28798] ? __lock_acquire+0x7c40/0x7c40 [ 1369.546877][T28798] should_fail_ex+0x390/0x4c0 [ 1369.551574][T28798] _copy_from_user+0x2c/0x170 [ 1369.556267][T28798] kstrtouint_from_user+0xda/0x170 [ 1369.561394][T28798] ? kstrtol_from_user+0x190/0x190 [ 1369.566540][T28798] proc_fail_nth_write+0x8b/0x200 [ 1369.571582][T28798] ? proc_fail_nth_read+0x220/0x220 [ 1369.576794][T28798] ? common_file_perm+0x171/0x1c0 [ 1369.581845][T28798] ? proc_fail_nth_read+0x220/0x220 [ 1369.587063][T28798] vfs_write+0x2dc/0x9a0 [ 1369.591336][T28798] ? file_end_write+0x250/0x250 [ 1369.596207][T28798] ? __fget_files+0x28/0x460 [ 1369.600816][T28798] ? __fget_files+0x3fc/0x460 [ 1369.605518][T28798] ? __fdget_pos+0x2ae/0x360 [ 1369.610123][T28798] ? ksys_write+0x70/0x260 [ 1369.614566][T28798] ksys_write+0x14d/0x260 [ 1369.618920][T28798] ? __ia32_sys_read+0x80/0x80 [ 1369.623707][T28798] ? lockdep_hardirqs_on+0x94/0x140 [ 1369.628922][T28798] do_syscall_64+0x4c/0xa0 [ 1369.633349][T28798] ? clear_bhb_loop+0x60/0xb0 [ 1369.638038][T28798] ? clear_bhb_loop+0x60/0xb0 [ 1369.642727][T28798] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1369.648635][T28798] RIP: 0033:0x7fa90795e98e [ 1369.653059][T28798] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1369.672675][T28798] RSP: 002b:00007fa9087fffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1369.681093][T28798] RAX: ffffffffffffffda RBX: 00007fa9088006c0 RCX: 00007fa90795e98e [ 1369.689059][T28798] RDX: 0000000000000001 RSI: 00007fa9088000a0 RDI: 0000000000000004 [ 1369.697031][T28798] RBP: 00007fa908800090 R08: 0000000000000000 R09: 0000000000000000 [ 1369.704988][T28798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1369.712947][T28798] R13: 00007fa907c26038 R14: 00007fa907c25fa0 R15: 00007fff2aa49938 [ 1369.720920][T28798] [ 1370.521281][T28837] netlink: 'syz.1.7452': attribute type 22 has an invalid length. [ 1370.557912][T28837] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7452'. [ 1371.072045][T28848] netlink: 14 bytes leftover after parsing attributes in process `syz.4.7453'. [ 1371.195999][T28862] device syzkaller0 entered promiscuous mode [ 1371.898945][T28869] netlink: 14 bytes leftover after parsing attributes in process `syz.0.7470'. [ 1373.609640][ T5221] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1375.602628][T28887] netlink: 5427 bytes leftover after parsing attributes in process `syz.0.7464'. [ 1375.647863][T28887] netlink: 52477 bytes leftover after parsing attributes in process `syz.0.7464'. [ 1375.801841][T28887] netlink: 71676 bytes leftover after parsing attributes in process `syz.0.7464'. [ 1375.941298][T28896] netlink: 'syz.1.7465': attribute type 10 has an invalid length. [ 1377.361025][T28911] netlink: 122896 bytes leftover after parsing attributes in process `syz.5.7471'. [ 1377.626629][T28926] netlink: 14 bytes leftover after parsing attributes in process `syz.4.7476'. [ 1380.748589][T28940] netlink: 'syz.4.7481': attribute type 21 has an invalid length. [ 1380.767860][T28940] IPv6: NLM_F_CREATE should be specified when creating new route [ 1380.808814][T28940] IPv6: Can't replace route, no match found [ 1381.284217][T28955] netlink: 194236 bytes leftover after parsing attributes in process `syz.2.7485'. [ 1381.405036][T28955] netlink: zone id is out of range [ 1381.646519][T28955] netlink: zone id is out of range [ 1381.700791][T28955] netlink: zone id is out of range [ 1381.753954][T28955] netlink: zone id is out of range [ 1381.767732][T28955] netlink: zone id is out of range [ 1381.784724][T28955] netlink: zone id is out of range [ 1381.797243][T28955] netlink: zone id is out of range [ 1381.856920][T28955] netlink: zone id is out of range [ 1381.896608][T28969] netlink: 'syz.1.7488': attribute type 12 has an invalid length. [ 1381.917400][T28955] netlink: zone id is out of range [ 1381.931798][T28969] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7488'. [ 1381.956530][T28955] netlink: zone id is out of range [ 1383.510872][T29010] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.7501'. [ 1383.642098][T29010] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.7501'. [ 1384.301248][T29039] netlink: 74712 bytes leftover after parsing attributes in process `syz.2.7506'. [ 1384.504145][T29039] debugfs: Directory '.! 5‚Á7>7H€' with parent 'ieee80211' already present! [ 1387.833976][T29079] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 1387.850677][T29079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1388.225695][T29091] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7523'. [ 1388.269338][T29091] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7523'. [ 1388.319721][T29091] netlink: 33 bytes leftover after parsing attributes in process `syz.5.7523'. [ 1388.362348][T29091] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7523'. [ 1388.397796][T29091] netlink: 33 bytes leftover after parsing attributes in process `syz.5.7523'. [ 1388.434240][T29098] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7526'. [ 1388.448130][T29091] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7523'. [ 1388.461067][T29091] netlink: 33 bytes leftover after parsing attributes in process `syz.5.7523'. [ 1388.484354][T29100] netlink: 144 bytes leftover after parsing attributes in process `syz.0.7527'. [ 1388.499587][T29100] net_ratelimit: 142 callbacks suppressed [ 1388.499601][T29100] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1388.525038][T29098] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7526'. [ 1388.877131][T29108] netlink: 'syz.5.7528': attribute type 10 has an invalid length. [ 1389.436764][T29120] netlink: 'syz.1.7533': attribute type 33 has an invalid length. [ 1389.445043][T29120] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1389.467412][T29120] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1389.506651][T29130] netlink: zone id is out of range [ 1389.520910][T29130] netlink: zone id is out of range [ 1389.532991][T29130] netlink: zone id is out of range [ 1389.543934][T29130] netlink: zone id is out of range [ 1389.565002][T29130] netlink: zone id is out of range [ 1389.577130][T29130] netlink: zone id is out of range [ 1389.588521][T29130] netlink: zone id is out of range [ 1389.601029][T29130] netlink: zone id is out of range [ 1389.843158][T29136] netlink: 'syz.4.7537': attribute type 2 has an invalid length. [ 1389.860884][T29136] netlink: 'syz.4.7537': attribute type 1 has an invalid length. [ 1389.871579][T29137] netlink: 'syz.1.7538': attribute type 2 has an invalid length. [ 1394.166719][T29190] netlink: 'syz.1.7552': attribute type 21 has an invalid length. [ 1394.692567][T29204] __nla_validate_parse: 6 callbacks suppressed [ 1394.692584][T29204] netlink: 194236 bytes leftover after parsing attributes in process `syz.5.7553'. [ 1394.854059][T29204] net_ratelimit: 142 callbacks suppressed [ 1394.854074][T29204] netlink: zone id is out of range [ 1394.937188][T29204] netlink: zone id is out of range [ 1395.004166][T29204] netlink: zone id is out of range [ 1395.031346][T29204] netlink: zone id is out of range [ 1395.036518][T29204] netlink: zone id is out of range [ 1395.087627][T29204] netlink: zone id is out of range [ 1395.110211][T29204] netlink: zone id is out of range [ 1395.137746][T29204] netlink: zone id is out of range [ 1395.153247][T29204] netlink: zone id is out of range [ 1395.176183][T29204] netlink: zone id is out of range [ 1395.451117][T29213] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.7557'. [ 1395.633719][T29213] netlink: 'syz.1.7557': attribute type 12 has an invalid length. [ 1395.662834][T29213] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7557'. [ 1395.690394][T29216] netlink: 14 bytes leftover after parsing attributes in process `syz.4.7558'. [ 1396.057724][T29236] netlink: 'syz.0.7565': attribute type 2 has an invalid length. [ 1396.599299][T29252] ================================================================== [ 1396.607408][T29252] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6c9/0x920 [ 1396.615225][T29252] Write of size 56 at addr ffff88807e1dba90 by task syz.2.7571/29252 [ 1396.623272][T29252] [ 1396.625578][T29252] CPU: 0 PID: 29252 Comm: syz.2.7571 Not tainted syzkaller #0 [ 1396.633022][T29252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1396.643080][T29252] Call Trace: [ 1396.646365][T29252] [ 1396.649302][T29252] dump_stack_lvl+0x188/0x24e [ 1396.653985][T29252] ? __lock_acquire+0x7c40/0x7c40 [ 1396.659002][T29252] ? show_regs_print_info+0x12/0x12 [ 1396.664198][T29252] ? load_image+0x410/0x410 [ 1396.668723][T29252] ? __virt_addr_valid+0x467/0x540 [ 1396.673847][T29252] ? __bpf_get_stackid+0x6c9/0x920 [ 1396.678943][T29252] print_report+0xa8/0x210 [ 1396.683351][T29252] kasan_report+0x10b/0x140 [ 1396.687850][T29252] ? __bpf_get_stackid+0x6c9/0x920 [ 1396.692950][T29252] kasan_check_range+0x235/0x290 [ 1396.697886][T29252] ? __bpf_get_stackid+0x6c9/0x920 [ 1396.702986][T29252] memcpy+0x3c/0x60 [ 1396.706788][T29252] __bpf_get_stackid+0x6c9/0x920 [ 1396.711742][T29252] bpf_get_stackid_pe+0x33f/0x400 [ 1396.716782][T29252] bpf_prog_ee9fdca00c0e1e15+0x28/0x3d [ 1396.722237][T29252] bpf_overflow_handler+0x6d1/0x790 [ 1396.727437][T29252] ? bpf_overflow_handler+0xd9/0x790 [ 1396.732718][T29252] ? perf_swevent_overflow+0x230/0x230 [ 1396.738173][T29252] ? __perf_event_account_interrupt+0x187/0x280 [ 1396.744409][T29252] __perf_event_overflow+0x457/0x630 [ 1396.749689][T29252] ? perf_swevent_event+0x1d5/0x570 [ 1396.754881][T29252] perf_swevent_event+0x315/0x570 [ 1396.759899][T29252] ? perf_tp_event+0xc10/0xc10 [ 1396.764660][T29252] ___perf_sw_event+0x498/0x6d0 [ 1396.769507][T29252] ? ___perf_sw_event+0x184/0x6d0 [ 1396.774525][T29252] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 1396.780937][T29252] ? __lock_acquire+0x1465/0x7c40 [ 1396.785963][T29252] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1396.791935][T29252] ? lock_chain_count+0x20/0x20 [ 1396.796777][T29252] __perf_sw_event+0x135/0x260 [ 1396.801536][T29252] do_user_addr_fault+0x497/0xb20 [ 1396.806560][T29252] ? trace_hardirqs_off_finish+0x86/0x180 [ 1396.812291][T29252] exc_page_fault+0x60/0x100 [ 1396.816876][T29252] asm_exc_page_fault+0x22/0x30 [ 1396.821715][T29252] RIP: 0010:strncpy_from_user+0x148/0x340 [ 1396.827427][T29252] Code: 00 00 00 4c 89 e6 e8 57 b0 44 fd 49 83 fc 07 0f 86 9a 00 00 00 4c 89 74 24 08 48 c7 44 24 10 f8 ff ff ff 45 31 ed 4c 89 3c 24 <4f> 8b 3c 2f 48 b8 ff fe fe fe fe fe fe fe 49 8d 2c 07 4d 89 fe 49 [ 1396.847044][T29252] RSP: 0018:ffffc90003fe7b50 EFLAGS: 00050246 [ 1396.853100][T29252] RAX: ffffffff843d8669 RBX: ffffc90003fe7c70 RCX: ffff888019b25a00 [ 1396.861060][T29252] RDX: 0000000000000002 RSI: 000000000000007f RDI: 0000000000000007 [ 1396.869016][T29252] RBP: 0000000000000000 R08: ffff888019b25a00 R09: 0000000000000003 [ 1396.876972][T29252] R10: 0000000000000002 R11: 0000000000000002 R12: 000000000000007f [ 1396.884928][T29252] R13: 0000000000000000 R14: 000000000000007f R15: 0000000000000000 [ 1396.892892][T29252] ? strncpy_from_user+0x129/0x340 [ 1396.898004][T29252] bpf_prog_load+0x200/0x1530 [ 1396.902680][T29252] ? map_freeze+0x390/0x390 [ 1396.907174][T29252] ? __might_fault+0xa6/0x120 [ 1396.911843][T29252] ? __might_fault+0xa6/0x120 [ 1396.916508][T29252] ? __might_fault+0xc2/0x120 [ 1396.921167][T29252] ? __might_fault+0xa6/0x120 [ 1396.925828][T29252] ? bpf_lsm_bpf+0x5/0x10 [ 1396.930144][T29252] ? security_bpf+0x7a/0xa0 [ 1396.934638][T29252] __sys_bpf+0x5b8/0x780 [ 1396.938877][T29252] ? bpf_link_show_fdinfo+0x380/0x380 [ 1396.944246][T29252] ? lock_chain_count+0x20/0x20 [ 1396.949091][T29252] __x64_sys_bpf+0x78/0x90 [ 1396.953501][T29252] do_syscall_64+0x4c/0xa0 [ 1396.957905][T29252] ? clear_bhb_loop+0x60/0xb0 [ 1396.962574][T29252] ? clear_bhb_loop+0x60/0xb0 [ 1396.967241][T29252] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1396.973126][T29252] RIP: 0033:0x7f3df7f9e159 [ 1396.977527][T29252] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1396.997131][T29252] RSP: 002b:00007f3df8f26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1397.005556][T29252] RAX: ffffffffffffffda RBX: 00007f3df8225fa0 RCX: 00007f3df7f9e159 [ 1397.013518][T29252] RDX: 0000000000000094 RSI: 0000200000000140 RDI: 0000000000000005 [ 1397.021477][T29252] RBP: 00007f3df803506b R08: 0000000000000000 R09: 0000000000000000 [ 1397.029436][T29252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1397.037392][T29252] R13: 00007f3df8226038 R14: 00007f3df8225fa0 R15: 00007ffe29b2f2d8 [ 1397.045358][T29252] [ 1397.048364][T29252] [ 1397.050671][T29252] Allocated by task 29252: [ 1397.055064][T29252] kasan_set_track+0x4b/0x70 [ 1397.059650][T29252] __kasan_kmalloc+0x8e/0xa0 [ 1397.064236][T29252] __kmalloc_node+0xb2/0x240 [ 1397.068818][T29252] bpf_map_area_alloc+0x47/0xe0 [ 1397.073654][T29252] prealloc_elems_and_freelist+0x86/0x1c0 [ 1397.079372][T29252] stack_map_alloc+0x386/0x510 [ 1397.084124][T29252] map_create+0x524/0xff0 [ 1397.088445][T29252] __sys_bpf+0x38b/0x780 [ 1397.092676][T29252] __x64_sys_bpf+0x78/0x90 [ 1397.097078][T29252] do_syscall_64+0x4c/0xa0 [ 1397.101483][T29252] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1397.107368][T29252] [ 1397.109676][T29252] Last potentially related work creation: [ 1397.115371][T29252] kasan_save_stack+0x3a/0x60 [ 1397.120038][T29252] __kasan_record_aux_stack+0xb2/0xc0 [ 1397.125395][T29252] call_rcu+0x14f/0x950 [ 1397.129541][T29252] __nf_register_net_hook+0x787/0x910 [ 1397.134905][T29252] nf_register_net_hook+0xae/0x190 [ 1397.140004][T29252] nf_register_net_hooks+0x40/0x1a0 [ 1397.145205][T29252] nf_ct_netns_do_get+0x20f/0x5b0 [ 1397.150221][T29252] nf_ct_netns_inet_get+0x3b/0x150 [ 1397.155319][T29252] nf_conncount_init+0x123/0x380 [ 1397.160307][T29252] ovs_ct_init+0x260/0x420 [ 1397.164740][T29252] ovs_init_net+0x1e2/0x240 [ 1397.169256][T29252] ops_init+0x360/0x5e0 [ 1397.173400][T29252] setup_net+0x4f2/0xbd0 [ 1397.177631][T29252] copy_net_ns+0x33e/0x5b0 [ 1397.182034][T29252] create_new_namespaces+0x3ce/0x700 [ 1397.187305][T29252] copy_namespaces+0x3ae/0x410 [ 1397.192056][T29252] copy_process+0x199b/0x4070 [ 1397.196720][T29252] kernel_clone+0x24b/0x900 [ 1397.201210][T29252] __x64_sys_clone+0x1a7/0x220 [ 1397.205960][T29252] do_syscall_64+0x4c/0xa0 [ 1397.210360][T29252] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1397.216247][T29252] [ 1397.218554][T29252] Second to last potentially related work creation: [ 1397.225119][T29252] kasan_save_stack+0x3a/0x60 [ 1397.229785][T29252] __kasan_record_aux_stack+0xb2/0xc0 [ 1397.235140][T29252] call_rcu+0x14f/0x950 [ 1397.239302][T29252] nf_unregister_net_hooks+0xc7/0x130 [ 1397.244677][T29252] nf_ct_netns_put+0x2ce/0x510 [ 1397.249436][T29252] nf_conncount_destroy+0x3d/0x150 [ 1397.254539][T29252] ovs_ct_exit_finish+0xa1/0x210 [ 1397.259476][T29252] ovs_exit_net+0xe9/0x7a0 [ 1397.263886][T29252] cleanup_net+0x703/0xba0 [ 1397.268298][T29252] process_one_work+0x8ab/0x1160 [ 1397.273299][T29252] worker_thread+0xaf5/0x12a0 [ 1397.277971][T29252] kthread+0x29d/0x330 [ 1397.282028][T29252] ret_from_fork+0x1f/0x30 [ 1397.286494][T29252] [ 1397.288803][T29252] The buggy address belongs to the object at ffff88807e1dba80 [ 1397.288803][T29252] which belongs to the cache kmalloc-cg-64 of size 64 [ 1397.302928][T29252] The buggy address is located 16 bytes inside of [ 1397.302928][T29252] 64-byte region [ffff88807e1dba80, ffff88807e1dbac0) [ 1397.316010][T29252] [ 1397.318318][T29252] The buggy address belongs to the physical page: [ 1397.324712][T29252] page:ffffea0001f876c0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7e1db [ 1397.334850][T29252] memcg:ffff888072aeb801 [ 1397.339074][T29252] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 1397.346622][T29252] raw: 00fff00000000200 ffffea000171db80 dead000000000007 ffff888017442780 [ 1397.355191][T29252] raw: 0000000000000000 0000000080200020 00000001ffffffff ffff888072aeb801 [ 1397.363755][T29252] page dumped because: kasan: bad access detected [ 1397.370151][T29252] page_owner tracks the page as allocated [ 1397.375847][T29252] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 4553, tgid 4547 (syz.3.62), ts 102127353826, free_ts 102072551848 [ 1397.393902][T29252] post_alloc_hook+0x173/0x1a0 [ 1397.398663][T29252] get_page_from_freelist+0x206b/0x2180 [ 1397.404198][T29252] __alloc_pages+0x1ec/0x4f0 [ 1397.408776][T29252] alloc_slab_page+0x5d/0x180 [ 1397.413443][T29252] new_slab+0x87/0x2d0 [ 1397.417497][T29252] ___slab_alloc+0xbc5/0x1240 [ 1397.422158][T29252] __kmem_cache_alloc_node+0x126/0x270 [ 1397.427605][T29252] __kmalloc_node+0xa2/0x240 [ 1397.432186][T29252] kvmalloc_node+0x6c/0x180 [ 1397.436742][T29252] nf_hook_entries_grow+0x31a/0x760 [ 1397.441928][T29252] __nf_register_net_hook+0x2c9/0x910 [ 1397.447286][T29252] nf_register_net_hook+0xae/0x190 [ 1397.452385][T29252] nf_register_net_hooks+0x40/0x1a0 [ 1397.457577][T29252] nf_defrag_ipv6_enable+0x83/0x110 [ 1397.462815][T29252] nf_ct_netns_do_get+0x1e4/0x5b0 [ 1397.467830][T29252] nf_ct_netns_inet_get+0x3b/0x150 [ 1397.472927][T29252] page last free stack trace: [ 1397.477583][T29252] free_unref_page_prepare+0x8e5/0x9e0 [ 1397.483032][T29252] free_unref_page+0x2e/0x3f0 [ 1397.487697][T29252] skb_release_data+0x654/0x7e0 [ 1397.492529][T29252] kfree_skb_reason+0x163/0x370 [ 1397.497367][T29252] ip6_pkt_discard+0x18/0x20 [ 1397.501942][T29252] ip6_sublist_rcv+0xde5/0x1110 [ 1397.506784][T29252] ipv6_list_rcv+0x3ec/0x440 [ 1397.511365][T29252] __netif_receive_skb_list_core+0x57e/0x770 [ 1397.517327][T29252] netif_receive_skb_list_internal+0x93f/0xca0 [ 1397.523473][T29252] netif_receive_skb_list+0x51/0x4e0 [ 1397.528747][T29252] bpf_test_run_xdp_live+0x17ac/0x1a90 [ 1397.534194][T29252] bpf_prog_test_run_xdp+0x757/0xf80 [ 1397.539466][T29252] bpf_prog_test_run+0x31c/0x390 [ 1397.544394][T29252] __sys_bpf+0x62b/0x780 [ 1397.548624][T29252] __x64_sys_bpf+0x78/0x90 [ 1397.553029][T29252] do_syscall_64+0x4c/0xa0 [ 1397.557429][T29252] [ 1397.559737][T29252] Memory state around the buggy address: [ 1397.565349][T29252] ffff88807e1db980: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 1397.573391][T29252] ffff88807e1dba00: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 1397.581431][T29252] >ffff88807e1dba80: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 1397.589474][T29252] ^ [ 1397.594824][T29252] ffff88807e1dbb00: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 1397.602866][T29252] ffff88807e1dbb80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 1397.610908][T29252] ================================================================== [ 1397.618963][T29252] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1397.626137][T29252] CPU: 0 PID: 29252 Comm: syz.2.7571 Not tainted syzkaller #0 [ 1397.633577][T29252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1397.643618][T29252] Call Trace: [ 1397.646888][T29252] [ 1397.649808][T29252] dump_stack_lvl+0x188/0x24e [ 1397.654478][T29252] ? memcpy+0x3c/0x60 [ 1397.658448][T29252] ? show_regs_print_info+0x12/0x12 [ 1397.663631][T29252] ? load_image+0x410/0x410 [ 1397.668130][T29252] panic+0x2d3/0x710 [ 1397.672013][T29252] ? bpf_jit_dump+0xd0/0xd0 [ 1397.676503][T29252] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1397.682395][T29252] ? _raw_spin_unlock+0x40/0x40 [ 1397.687232][T29252] ? print_memory_metadata+0x314/0x400 [ 1397.692683][T29252] check_panic_on_warn+0x80/0xa0 [ 1397.697609][T29252] ? __bpf_get_stackid+0x6c9/0x920 [ 1397.702706][T29252] end_report+0x66/0x110 [ 1397.706938][T29252] kasan_report+0x118/0x140 [ 1397.711430][T29252] ? __bpf_get_stackid+0x6c9/0x920 [ 1397.716531][T29252] kasan_check_range+0x235/0x290 [ 1397.721464][T29252] ? __bpf_get_stackid+0x6c9/0x920 [ 1397.726562][T29252] memcpy+0x3c/0x60 [ 1397.730355][T29252] __bpf_get_stackid+0x6c9/0x920 [ 1397.735284][T29252] bpf_get_stackid_pe+0x33f/0x400 [ 1397.740297][T29252] bpf_prog_ee9fdca00c0e1e15+0x28/0x3d [ 1397.745743][T29252] bpf_overflow_handler+0x6d1/0x790 [ 1397.750928][T29252] ? bpf_overflow_handler+0xd9/0x790 [ 1397.756199][T29252] ? perf_swevent_overflow+0x230/0x230 [ 1397.761647][T29252] ? __perf_event_account_interrupt+0x187/0x280 [ 1397.767877][T29252] __perf_event_overflow+0x457/0x630 [ 1397.773149][T29252] ? perf_swevent_event+0x1d5/0x570 [ 1397.778342][T29252] perf_swevent_event+0x315/0x570 [ 1397.783356][T29252] ? perf_tp_event+0xc10/0xc10 [ 1397.788113][T29252] ___perf_sw_event+0x498/0x6d0 [ 1397.792953][T29252] ? ___perf_sw_event+0x184/0x6d0 [ 1397.797972][T29252] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 1397.804376][T29252] ? __lock_acquire+0x1465/0x7c40 [ 1397.809402][T29252] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1397.815372][T29252] ? lock_chain_count+0x20/0x20 [ 1397.820211][T29252] __perf_sw_event+0x135/0x260 [ 1397.824966][T29252] do_user_addr_fault+0x497/0xb20 [ 1397.829983][T29252] ? trace_hardirqs_off_finish+0x86/0x180 [ 1397.835692][T29252] exc_page_fault+0x60/0x100 [ 1397.840271][T29252] asm_exc_page_fault+0x22/0x30 [ 1397.845104][T29252] RIP: 0010:strncpy_from_user+0x148/0x340 [ 1397.850812][T29252] Code: 00 00 00 4c 89 e6 e8 57 b0 44 fd 49 83 fc 07 0f 86 9a 00 00 00 4c 89 74 24 08 48 c7 44 24 10 f8 ff ff ff 45 31 ed 4c 89 3c 24 <4f> 8b 3c 2f 48 b8 ff fe fe fe fe fe fe fe 49 8d 2c 07 4d 89 fe 49 [ 1397.870409][T29252] RSP: 0018:ffffc90003fe7b50 EFLAGS: 00050246 [ 1397.876462][T29252] RAX: ffffffff843d8669 RBX: ffffc90003fe7c70 RCX: ffff888019b25a00 [ 1397.884431][T29252] RDX: 0000000000000002 RSI: 000000000000007f RDI: 0000000000000007 [ 1397.892387][T29252] RBP: 0000000000000000 R08: ffff888019b25a00 R09: 0000000000000003 [ 1397.900343][T29252] R10: 0000000000000002 R11: 0000000000000002 R12: 000000000000007f [ 1397.908303][T29252] R13: 0000000000000000 R14: 000000000000007f R15: 0000000000000000 [ 1397.916264][T29252] ? strncpy_from_user+0x129/0x340 [ 1397.921371][T29252] bpf_prog_load+0x200/0x1530 [ 1397.926051][T29252] ? map_freeze+0x390/0x390 [ 1397.930548][T29252] ? __might_fault+0xa6/0x120 [ 1397.935214][T29252] ? __might_fault+0xa6/0x120 [ 1397.939873][T29252] ? __might_fault+0xc2/0x120 [ 1397.944554][T29252] ? __might_fault+0xa6/0x120 [ 1397.949229][T29252] ? bpf_lsm_bpf+0x5/0x10 [ 1397.953555][T29252] ? security_bpf+0x7a/0xa0 [ 1397.958056][T29252] __sys_bpf+0x5b8/0x780 [ 1397.962300][T29252] ? bpf_link_show_fdinfo+0x380/0x380 [ 1397.967676][T29252] ? lock_chain_count+0x20/0x20 [ 1397.972523][T29252] __x64_sys_bpf+0x78/0x90 [ 1397.976936][T29252] do_syscall_64+0x4c/0xa0 [ 1397.981342][T29252] ? clear_bhb_loop+0x60/0xb0 [ 1397.986007][T29252] ? clear_bhb_loop+0x60/0xb0 [ 1397.990671][T29252] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1397.996560][T29252] RIP: 0033:0x7f3df7f9e159 [ 1398.000968][T29252] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1398.020564][T29252] RSP: 002b:00007f3df8f26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1398.028965][T29252] RAX: ffffffffffffffda RBX: 00007f3df8225fa0 RCX: 00007f3df7f9e159 [ 1398.036924][T29252] RDX: 0000000000000094 RSI: 0000200000000140 RDI: 0000000000000005 [ 1398.044904][T29252] RBP: 00007f3df803506b R08: 0000000000000000 R09: 0000000000000000 [ 1398.052863][T29252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1398.060818][T29252] R13: 00007f3df8226038 R14: 00007f3df8225fa0 R15: 00007ffe29b2f2d8 [ 1398.068782][T29252] [ 1398.072137][T29252] Kernel Offset: disabled [ 1398.076471][T29252] Rebooting in 86400 seconds..