last executing test programs: 3m55.257845861s ago: executing program 3 (id=60): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x2}, 0x8000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4861, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r1 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x1, 0x0, 0xfffffffc, 0x7}, {0x2000002}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402", 0x11}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x6e, &(0x7f0000000000)=r4, 0x12) ioctl$SIOCSIFHWADDR(r0, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="8000230d1100"}) bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x5, 0x84) socket$kcm(0x11, 0x200000000000002, 0x300) socket$kcm(0x2, 0x5, 0x84) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x2, 0xfffd, 0x0, 0xbf22}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x12000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x2, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x40, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$kcm(0xa, 0x3, 0x73) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11}, 0x94) 3m54.754825507s ago: executing program 3 (id=67): bpf$TOKEN_CREATE(0x24, &(0x7f0000000500), 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1e, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b400000000000003dd0a00000000000073013500000000009500000000000000b38a595efa0578208e8354bb546620e3690771f5bf003326913779cfaf84efb8b3f976c934b37c6aab214e75d6019bf1582d07e5b5351fb88008465255c682"], &(0x7f0000000340)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000700)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={r0, 0xe0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000005c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000600), &(0x7f0000000640)=[0x0], 0x0, 0x33, &(0x7f0000000680)=[{}], 0x8, 0x10, &(0x7f0000000840), &(0x7f0000000880), 0x8, 0xd8, 0x8, 0x8, &(0x7f00000008c0)}}, 0x6) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x40, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x2, 0x1, 0x7}, {0x0, 0x3, 0xfffffffd, 0x1}, {0x1, 0x1, 0x10, 0x8}]}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90124fc60100c02000c0c0400053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r5 = socket$kcm(0x2, 0x5, 0x84) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(r5, 0x84, 0x72, 0x0, 0x0) write$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r6 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@cgroup=0xffffffffffffffff, 0x8, 0x1, 0x2, &(0x7f0000000200)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r9 = openat$cgroup_int(r7, &(0x7f00000001c0)='memory.low\x00', 0x2, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@fallback=r9, 0xffffffffffffffff, 0xc, 0x2014, 0x0, @value, @void, @void, @void, r8}, 0x20) r10 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000380), 0x4) socket$kcm(0x29, 0x2, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@cgroup=r2, r3, 0x21, 0x2018, r3, @value=r10, @void, @void, @void, r8}, 0x20) 3m54.452714727s ago: executing program 3 (id=70): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x85, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x8, 0x7, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x2c}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) close(r1) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x70, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x44, &(0x7f0000000140)='&#d\f\xc1xU\xbc\xdfPVF\x9d:\xc6\xb7\x97\xea\x1cXvm`\xed\'\rqG}\xea*e\x83\xe6\xaf\x13Xa\xeb\r\xfb\x87\xead\xbd\\\xc3\x7f\xa0\x1677\xbd\xc4\xbe\xe1\x88\xde\xb9\v\xc23W^\xdc\xa7I\x18'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[@ANYBLOB='-0'], 0x9) syz_clone(0x22086180, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce"], 0xfdef) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000), 0xfdef) openat$cgroup_netprio_ifpriomap(r2, &(0x7f00000000c0), 0x2, 0x0) 3m53.38623506s ago: executing program 3 (id=92): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5c00000014006b03000000d86e6c1d0010ffff0af32c6e021fffffff000000000f00000017d3a705251e6182949a369f3d3b48dfd8cd3f9367c1fa51f60a64c9f4d4938037e786a6d0bdd7000000000000eaffffffb3d59256a5a2fd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) close(r1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x7, 0x0, 0x200000, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f3, &(0x7f0000000080)) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xf3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x10, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r3, &(0x7f0000000000)="1a5bac", 0x0}, 0x20) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000007044f16c01b1fbfd000000000000008af65f0df9928941994cc8c173fac5688671085a86d143c59fed0e57feb97f422c51d8e63b4ed9e295df3ccd1a55752dfc2f32f14b6c8f0e7413c3e9caaad30dcb412d0f54623f388bb2c63d2b1f7d83cd0cc021867bb4aee9967a6ee83e1b18fd8beca7d7eddcd96634"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x80) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair(0x29, 0x6, 0x478b08cb, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000140), 0x4) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r6) r7 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000ffffffffffff05000000", @ANYRES32=0x1], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x8916, &(0x7f0000000000)={r7}) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000400)=0x1) 3m52.944091834s ago: executing program 3 (id=87): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7, 0x9e0}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x207}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000b00)=ANY=[@ANYBLOB="180000000000000000000000000000008500000029000000180100002020702500000000f11f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000e000000850000000600000095000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe, 0x0, &(0x7f0000000300)="14fd54ab72df97e6256c00000000", 0x0, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) (async) sendmsg$inet(r2, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000900)='T', 0x1}], 0x1}, 0x4048841) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x17, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x8, 0x8, 0x4, 0xfd, 0x0, 0x0, 0x9ae29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1010000, 0x1, @perf_config_ext={0x9, 0x80}, 0x900, 0x0, 0x20, 0x2, 0x1ff, 0x0, 0x0, 0x0, 0x2ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x4) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"/467], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffe1}, 0x48) 3m51.788819451s ago: executing program 3 (id=97): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000005c0)="d80000001d0081054e81f783db4cb904020000000091b49b74fc3ca10a0015000600142603600e1208000f0000000401040001000047880000000000035c0461c1d67f6f94007134cf6efb8000feea60d8a8a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad509d5e1cace0d81ed0bffece0b42a9ecbee5de6ccffffffff00000000b6278754ca397c388b0dd6e4edef", 0xcb}], 0x1}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x0, 0x3, 0x0, &(0x7f0000000380)="adbd8b1441b5aa0fc865b756c3b28bf51777aa2849e7c92c28120dc77e75783cbe094fe3548f5732ebc11299dbfdb9532727db0f1acf30e2ef81cc7ff1a08521d1417d499eb826eea4078c8aafb25c21f32341c8469f3699a030eed830631787ae8360e958559f7a55b58eb2f8aacd7109731581e8360000", 0xe}, 0x13) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x2002, 0x0) ioctl$TUNGETFEATURES(r4, 0x800454cf, &(0x7f0000000880)) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) close(0xffffffffffffffff) sendmsg$kcm(r5, &(0x7f0000000c40)={&(0x7f0000000100)=@xdp={0x2c, 0x6, 0x0, 0x10}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000840)="4b65b3a654486aef16b53a44cfb8e1ba58993ba9fba7af5b789494f6d96000ba2d40c49cdb96ea7474b1f7b3606685b230ce509fd48fcdecca8c5f9be528a43361387dd7b6f4274db3c62613f1b17ca7c11262a4bb49db0f1e6b4644844f7b26adcd56540ba53f1aa1ff5756e4eadaf031fdaf7711d2444d55b22b0c2f6e2f411c22717109a7c7c7546fb8ab82bc98e9a0d5368c02d42155e9e03dbddd179f2383ba330f2caf0b74325834a0b0e47ea1f5643dcee0e54b16f0195c6393009d899863ead8928424ac4a870e1821142a", 0xcf}, {&(0x7f0000000940)="3af80ae67958f54ae710175a0756171f3aa61cba40cffa0099e048a0fde61200c14477b0299d7848cc4fabc72a377b2b855ef85647986b36a9975b45", 0x3c}, {&(0x7f0000000980)="8e822d8e125cf3248f1f7185eee49a4248ba785cb61fba7826967512fc0f604a5506ac88db3a24a1408e3c5368e357e044a36d4229ca998dd53744f763d1b3f392aa8dec3e736f78a3d14137f78b118ec44a59f07c5046a8", 0x58}], 0x3, &(0x7f0000000a40)=[{0x70, 0x3a, 0x7, "ce1f85047692cdce497177072c7f1937dca96dfeb31f4f31c51a456a7ddcc804c92c9b37caa518e8702e3e677130cedae147cb9ddf282830919534eba5916aa1f75ac0e7fc39dcb47eeb5ad1231558830e68f8a502e70e56a09cd61aaab4"}, {0x68, 0x101, 0x9, "83c73031f07b1743eec771cba571f3531839437110979051c3237bea46020fb97c412af4e33b9b06a641b77ce4ea83cf05fa7d67c5615d8516e23fb72a0cff908c57652d9858d787f781c949d61decff685272a9"}, {0x100, 0x110, 0x2a52, "c8ee653721687d82f8b419c72d96a7b87bb672f3a79a167d24f58d95c61e321d18a639fed6572d8924b2e8a0f918b1e3aaca6e4500a0d8c8db3de5d566f2c130289ec6cedf71d342d17cb7d7f952817a40c8a7010fe723a636cd9a9848f3652652c24233d1ef517cf3c24abb56948f3140a00b2c79a9ea00b212e26478a3563f638b40b136a9bb9959173ee024b7a5afe90a4835e79dd1631a23b231553e97bcbf488cb45ca838f2877097c9149c3e239c67bdf24f3899d8a7ae88838893779bf477803c469bc6f57cb08af6e78d5a72a668c3c321e71c965a13e077eb20599d5e673f58e58232616a4d"}], 0x1d8}, 0x40) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r7, 0x84, 0x31, 0x0, 0x0) sendmsg(r6, &(0x7f0000002240)={0x0, 0x0, 0x0}, 0x24004080) syz_open_procfs$namespace(0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r6, 0x0, 0x0}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_ext={0x1c, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x829c, 0x0, 0x0, 0x40f00, 0xd, '\x00', 0x0, 0x0, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2aea5, r6, 0x0, &(0x7f0000000780)}, 0x94) socketpair(0x2, 0x6, 0x5, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) 3m36.233283723s ago: executing program 32 (id=97): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000005c0)="d80000001d0081054e81f783db4cb904020000000091b49b74fc3ca10a0015000600142603600e1208000f0000000401040001000047880000000000035c0461c1d67f6f94007134cf6efb8000feea60d8a8a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad509d5e1cace0d81ed0bffece0b42a9ecbee5de6ccffffffff00000000b6278754ca397c388b0dd6e4edef", 0xcb}], 0x1}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x0, 0x3, 0x0, &(0x7f0000000380)="adbd8b1441b5aa0fc865b756c3b28bf51777aa2849e7c92c28120dc77e75783cbe094fe3548f5732ebc11299dbfdb9532727db0f1acf30e2ef81cc7ff1a08521d1417d499eb826eea4078c8aafb25c21f32341c8469f3699a030eed830631787ae8360e958559f7a55b58eb2f8aacd7109731581e8360000", 0xe}, 0x13) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x2002, 0x0) ioctl$TUNGETFEATURES(r4, 0x800454cf, &(0x7f0000000880)) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) close(0xffffffffffffffff) sendmsg$kcm(r5, &(0x7f0000000c40)={&(0x7f0000000100)=@xdp={0x2c, 0x6, 0x0, 0x10}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000840)="4b65b3a654486aef16b53a44cfb8e1ba58993ba9fba7af5b789494f6d96000ba2d40c49cdb96ea7474b1f7b3606685b230ce509fd48fcdecca8c5f9be528a43361387dd7b6f4274db3c62613f1b17ca7c11262a4bb49db0f1e6b4644844f7b26adcd56540ba53f1aa1ff5756e4eadaf031fdaf7711d2444d55b22b0c2f6e2f411c22717109a7c7c7546fb8ab82bc98e9a0d5368c02d42155e9e03dbddd179f2383ba330f2caf0b74325834a0b0e47ea1f5643dcee0e54b16f0195c6393009d899863ead8928424ac4a870e1821142a", 0xcf}, {&(0x7f0000000940)="3af80ae67958f54ae710175a0756171f3aa61cba40cffa0099e048a0fde61200c14477b0299d7848cc4fabc72a377b2b855ef85647986b36a9975b45", 0x3c}, {&(0x7f0000000980)="8e822d8e125cf3248f1f7185eee49a4248ba785cb61fba7826967512fc0f604a5506ac88db3a24a1408e3c5368e357e044a36d4229ca998dd53744f763d1b3f392aa8dec3e736f78a3d14137f78b118ec44a59f07c5046a8", 0x58}], 0x3, &(0x7f0000000a40)=[{0x70, 0x3a, 0x7, "ce1f85047692cdce497177072c7f1937dca96dfeb31f4f31c51a456a7ddcc804c92c9b37caa518e8702e3e677130cedae147cb9ddf282830919534eba5916aa1f75ac0e7fc39dcb47eeb5ad1231558830e68f8a502e70e56a09cd61aaab4"}, {0x68, 0x101, 0x9, "83c73031f07b1743eec771cba571f3531839437110979051c3237bea46020fb97c412af4e33b9b06a641b77ce4ea83cf05fa7d67c5615d8516e23fb72a0cff908c57652d9858d787f781c949d61decff685272a9"}, {0x100, 0x110, 0x2a52, "c8ee653721687d82f8b419c72d96a7b87bb672f3a79a167d24f58d95c61e321d18a639fed6572d8924b2e8a0f918b1e3aaca6e4500a0d8c8db3de5d566f2c130289ec6cedf71d342d17cb7d7f952817a40c8a7010fe723a636cd9a9848f3652652c24233d1ef517cf3c24abb56948f3140a00b2c79a9ea00b212e26478a3563f638b40b136a9bb9959173ee024b7a5afe90a4835e79dd1631a23b231553e97bcbf488cb45ca838f2877097c9149c3e239c67bdf24f3899d8a7ae88838893779bf477803c469bc6f57cb08af6e78d5a72a668c3c321e71c965a13e077eb20599d5e673f58e58232616a4d"}], 0x1d8}, 0x40) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r7, 0x84, 0x31, 0x0, 0x0) sendmsg(r6, &(0x7f0000002240)={0x0, 0x0, 0x0}, 0x24004080) syz_open_procfs$namespace(0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r6, 0x0, 0x0}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_ext={0x1c, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x829c, 0x0, 0x0, 0x40f00, 0xd, '\x00', 0x0, 0x0, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2aea5, r6, 0x0, &(0x7f0000000780)}, 0x94) socketpair(0x2, 0x6, 0x5, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) 2.986378416s ago: executing program 2 (id=2265): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x141341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) ioctl$TUNSETLINK(r1, 0x400454cd, 0x312) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e488a8637286dd"], 0x17) 2.631555427s ago: executing program 4 (id=2271): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x400, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x8a, 0x0, 0x0, 0x0, 0x0, 0x68020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x204, 0x2000000000, 0x0, 0x6, 0x9, 0x2, 0x0, 0x0, 0x20000, 0x0, 0x4}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x23, &(0x7f0000000040), 0xcf) sendmsg$inet(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x80) 2.498174961s ago: executing program 2 (id=2274): socket$kcm(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.freeze\x00', 0x26e1, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xd, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2420, 0x0, 0x0, 0x3, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0200000004000000080000000f00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="001000"/28], 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000"], 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x430, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x7, 0xfffffff9, 0x9, 0xc6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xc, 0x830d}, 0x100600, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$cgroup_subtree(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa000086dd"], 0xcfa4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0xf, &(0x7f00000001c0), 0x4) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80180, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001a00599c6d0e000091d028ef80"], 0xfe33) openat$cgroup(r4, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x1e, 0x2, 0x0) r5 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0xffffe00000000000}, 0x12800, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0xc2b}) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.437178783s ago: executing program 4 (id=2276): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000028c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000e1e, 0x0, 0x60e}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200010000100000450000000000000000cd97001000000000000000"], 0x50) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b50000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702561344db9fcb59d80000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x29, 0x5, 0x0) socketpair(0x26, 0xa, 0xa47, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000500)={r3}) 2.289908647s ago: executing program 0 (id=2277): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x12, 0xa, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r2, &(0x7f0000000040)}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=r4, @ANYRES32=r0, @ANYRESHEX=r3], 0x10) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r4, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f00000003c0)=r0}, 0x20) close(r6) close(r5) r7 = socket$kcm(0x10, 0x3, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x8000000000000001, 0x420, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x3}, 0x4, 0x0, 0x4000, 0x0, 0x4, 0x3224ba86}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/233}, {&(0x7f0000000000)=""/61}, {&(0x7f00000002c0)=""/84}], 0x1a8}, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000340)=@generic={&(0x7f0000000240)='./file0\x00', r0}, 0x18) sendmsg$inet(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046bf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d4938037e70e4509c5bb00000000e513aeac9bf2bee150d5fe8600000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) 2.2100541s ago: executing program 1 (id=2278): r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000700)=[{&(0x7f0000001040)="0d113311d7af2c7d0a6b8bcc01b77974", 0x10}], 0x1, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x3a}, @multicast1}}}], 0x20}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="61123000000000006113100000000000bf2000000000000016000200071b48013d030100000000009500000000000000bc26000000000000bf67000000000000070200000fff07276702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001840)=@base={0x5, 0x7, 0x2, 0x4}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@map=r2, 0xd, 0x1, 0x8001, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000440)=']\x00', 0x0}, 0x30) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000480)={r4}, 0x4b) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000400)={@fallback=r1, r1, 0x16, 0x0, r1, @void, @value=r5, @void, @void, r3}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000010080000850000002d00000018110000", @ANYRES32=r2, @ANYBLOB="0000b7086cfe7059c600f4acf8ff00000000bfa200000000000007020000f8ffffffb704000000000000850000000300000095000000000000"], &(0x7f0000000100)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000280)=r7) 2.102206364s ago: executing program 4 (id=2279): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f00, 0xf, 0x2f, &(0x7f00000007c0)="9f44948721919580684010a49e66", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x33) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x13, 0x0, 0x300) r1 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x5, 0x98128, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x7ffffffffffffffd, 0x200000000000000}, 0x104300, 0x7, 0xfffffffe, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, r1, 0x0) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8, 0x0, 0x0, 0xed00, 0x0, 0x0, 0x0, 0x7ffffffd}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r2}, @generic={0x24, 0x8, 0x0, 0x0, 0xb000}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x80) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x9) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00001594ff00"], 0x48) socket$kcm(0x21, 0x2, 0x2) socketpair(0x24, 0xa, 0x0, &(0x7f0000000600)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000780)={0x2, &(0x7f00000001c0)=[{0x25, 0x0, 0x1, 0xfffffffe}, {0x2, 0x0, 0xfe}]}) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000000000000000000000000007f18010000220000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x33) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x7, 0x4}, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) 1.978095488s ago: executing program 0 (id=2280): socket$kcm(0x10, 0x2, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x10896, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x68}, 0x0) r1 = socket$kcm(0x22, 0x0, 0x26) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x880, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000100)=[{0x35, 0x0, 0x3}, {0x34, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x6}]}) socket$kcm(0x29, 0x0, 0x0) r3 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.threads\x00', 0x2, 0x0) r4 = getpid() write$cgroup_pid(r3, &(0x7f00000002c0)=r4, 0x12) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00'}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)=@generic={&(0x7f0000000340)='./file0\x00', 0x0, 0x10}, 0x18) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000003c0)=@generic={&(0x7f0000000300)='./file0\x00', r6}, 0x18) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000780)={0x2, &(0x7f00000001c0)}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x1e, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="180000006a00810200afef3a0b04a2377caf604bf96b1324", 0x18}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB, @ANYBLOB="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"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x943}, 0x94) r8 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000200)='syz1\x00', 0x200002, 0x0) openat$cgroup_pressure(r8, &(0x7f0000000640)='io.pressure\x00', 0x2, 0x0) 1.976156617s ago: executing program 1 (id=2281): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$kcm(0xa, 0x2, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0xffffffff, 0xfffffffd, 0xe}, {0x10000002, 0x0, 0x4, 0x2}]}, 0x94) r1 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r5 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r5, 0x84, 0x64, &(0x7f0000000000)=r8, 0x10) r9 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10400002}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r11) recvmsg$unix(r10, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r9, 0x84, 0x64, &(0x7f0000000000)=r12, 0x10) setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000)=r4, 0x10) openat$cgroup_subtree(r0, &(0x7f0000000180), 0x2, 0x0) socket$kcm(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.idle_time\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r13, 0x1, 0x2a, &(0x7f0000000100)=r14, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r14, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r16 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000230000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000dfb703000000000000850000006d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', r15, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r16}, 0xc) socket$kcm(0x2b, 0x1, 0x0) 1.864047061s ago: executing program 1 (id=2282): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000000100000122000028"], 0x50) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x6, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x2}, 0x4002, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0xd00, 0x1c0000000000000, 0x90a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$kcm(0x10, 0x3, 0x0) write$cgroup_subtree(r0, &(0x7f0000001ec0)=ANY=[@ANYBLOB="13120000120091ef04e9befbbd00005c0a"], 0xfe33) recvmsg$kcm(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000039c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/233, 0xe9}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/87, 0x57}, {&(0x7f0000000400)=""/211, 0xd3}, {&(0x7f0000000b00)=""/157, 0xffffff8c}, {&(0x7f00000008c0)=""/210, 0xd2}, {&(0x7f0000000280)=""/209, 0xd1}], 0x8}, 0x0) recvmsg$kcm(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x42) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x10004, 0xe2, &(0x7f0000000340)=""/226, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x865}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x13, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="180000dd0700000000000000090900007311a0ca50a0371f7a1865aaea2e9075788b00000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) socket$kcm(0xa, 0x1, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000500), 0xc}, 0xa0d2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) socket$kcm(0x2, 0x200000000000001, 0x106) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = openat$cgroup_devices(r1, 0x0, 0x2, 0x0) write$cgroup_devices(r4, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 1.626062679s ago: executing program 5 (id=2284): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f00000000c0), 0x12) (async, rerun: 64) write$cgroup_int(r2, &(0x7f0000000100)=0x1, 0x12) (rerun: 64) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x10, r0}, 0x18) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000008500000029000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)=r0}, 0x20) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r5, &(0x7f0000000140), 0x0}, 0x20) (async, rerun: 64) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001480)={r0, 0xe0, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000011c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000001200)=[0x0, 0x0], &(0x7f0000001240)=[0x0, 0x0], 0x0, 0x9, &(0x7f0000001280)=[{}], 0x8, 0x10, &(0x7f00000012c0), &(0x7f0000001300), 0x8, 0xf5, 0x8, 0x8, &(0x7f0000001340)}}, 0x10) (async, rerun: 64) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001580)=@generic={&(0x7f0000001540)='./file0\x00', 0x0, 0x8}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001640)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000015c0), &(0x7f0000001600)=r0}, 0x20) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001680)=@base={0x4, 0xfffffff1, 0x3ff, 0x5, 0x5031a, 0x1, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x2}, 0x50) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001780)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001700), &(0x7f0000001740)}, 0x20) (async) r11 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100803}, 0xffffffffffffffff, 0x0, r11, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001800)=@bpf_tracing={0x1a, 0x1a, &(0x7f0000001040)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @map_fd={0x18, 0x3, 0x1, 0x0, r3}, @generic={0x8, 0x5, 0x6, 0xa, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @map_val={0x18, 0x423006693d9f0b9d, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x8}, @jmp={0x5, 0x0, 0x5, 0x6, 0x3, 0x20, 0x1}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], &(0x7f0000001140)='GPL\x00', 0x9, 0x35, &(0x7f0000001180)=""/53, 0x41100, 0x21, '\x00', r6, 0x19, 0xffffffffffffffff, 0x8, &(0x7f00000014c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001500)={0x2, 0x1, 0x3, 0x2}, 0x10, 0x16a55, 0xffffffffffffffff, 0x0, &(0x7f00000017c0)=[r7, r0, r8, 0xffffffffffffffff, 0xffffffffffffffff, r9, r10, 0x1, r11], 0x0, 0x10, 0xfffffffb}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0xfffffffffffffdab, &(0x7f0000000100)="b9ff03316844268cb89e14f008004c6ce6b18987f7c57ee005000000000002", 0x0, 0xfffffffd, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.603729109s ago: executing program 0 (id=2285): socket$kcm(0xa, 0x1, 0x106) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0xd, r0, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x7ff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) r1 = bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x4, 0x80, 0x63, 0xe6, 0xe2, 0xec, 0x0, 0x5, 0x20012, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0x8}, 0x1, 0x9b3, 0x8, 0x1, 0x9, 0x5, 0xf6, 0x0, 0x2, 0x0, 0x3}, 0x0, 0x0, r1, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xf, 0x59, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x1, 0x3, 0x0, 0x0, 0x0, 0x181, 0xb004, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x55de775e6d34caea}, 0x100048, 0xb, 0x0, 0x0, 0x0, 0xffff0000, 0x0, 0x0, 0xfffffffe, 0x0, 0x4000040000000001}, 0x0, 0x0, 0xffffffffffffffff, 0x12) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="180000000000000000000000001000006112c400000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x80) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x36}, 0x94) socket$kcm(0x10, 0x2, 0x0) socketpair(0x18, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(r3, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000500)="d8000000180081054e81f782db4cb904021d0800fe007c05e8fe55a10a0015000300142603600e12080005007f370401a8001600200006000400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0) close(0x3) close(0xffffffffffffffff) r5 = socket$kcm(0x22, 0x2, 0x21) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, 0x0) 1.56214325s ago: executing program 5 (id=2286): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x400, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x8a, 0x0, 0x0, 0x0, 0x0, 0x68020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x204, 0x2000000000, 0x0, 0x6, 0x9, 0x2, 0x0, 0x0, 0x20000, 0x0, 0x4}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x23, &(0x7f0000000040), 0xcf) sendmsg$inet(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x80) 1.429585995s ago: executing program 2 (id=2287): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x4156, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffc, 0x1}, 0x18404, 0x0, 0xfffffffe, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x4156, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffc, 0x1}, 0x18404, 0x0, 0xfffffffe, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000000, 0x1}, 0x7000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000000c0)="2e00000039000511d25a80698c63940d0224fc602f6e35400c000200680ec00037153e370a0001", 0x27}], 0x1, 0x0, 0x0, 0x39c}, 0x0) sendmsg$kcm(r1, &(0x7f0000001b40)={&(0x7f0000000300)=@rc={0x1f, @none, 0xf5}, 0x80, &(0x7f0000001b00)=[{&(0x7f0000000b00)="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", 0x1000}], 0x1}, 0x40) socket$kcm(0x10, 0x2, 0x4) (async) r2 = socket$kcm(0x10, 0x2, 0x4) close(r2) (async) close(r2) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000380)={0x0, 0x0}) close(r3) (async) close(r3) socket$kcm(0x10, 0x400000002, 0x0) setsockopt$sock_attach_bpf(r3, 0x10e, 0xb, &(0x7f0000000180), 0x4) sendmsg$inet(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="6000000068007f089e", 0x59}, {&(0x7f0000000640)="68cabf2dfb58fc021d6b689866f05d480004fbffffffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae24f89a565ee52dcd729cd39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc36024aa400", 0x57}], 0x2}, 0x0) (async) sendmsg$inet(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="6000000068007f089e", 0x59}, {&(0x7f0000000640)="68cabf2dfb58fc021d6b689866f05d480004fbffffffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae24f89a565ee52dcd729cd39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc36024aa400", 0x57}], 0x2}, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0xe, &(0x7f0000000000), 0x4) (async) setsockopt$sock_attach_bpf(r1, 0x6, 0xe, &(0x7f0000000000), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="06000000040000001810000089"], 0x48) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="06000000040000001810000089"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=""/103, &(0x7f0000000600), &(0x7f0000001b40), 0x80, r4, 0x0, 0x7}, 0x38) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r5 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x14, 0x4, 0x8, 0x5, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000040)={r6, &(0x7f0000000680), &(0x7f0000000600)=""/73}, 0x28) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x5, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x2) (async) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)}, 0x20000000) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000ea210000000000000000000000faff0700"/39], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r7, &(0x7f0000000780)}, 0x20) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r9 = bpf$ITER_CREATE(0xb, &(0x7f00000002c0)={r8}, 0x8) write$cgroup_int(r9, &(0x7f00000001c0), 0xfffffdef) 1.427797245s ago: executing program 1 (id=2288): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010004080c00bdad01409bbc7a46e39a54cbbda812176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0x7}, 0x8084) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="05000000040000000400000004"], 0x50) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r2, 0x0, 0xf7e5) write$cgroup_subtree(r2, 0x0, 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40000000000fb68c0b65e126b76a75dbc416b0329a900006b113a000000000000000400000000000008000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) socket$kcm(0x2, 0x2, 0x73) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="1c0000005e007f089e", 0x9}, {&(0x7f0000000240)="05000000bd867b388b241bd819a34656f3a624", 0x13}], 0x2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) socketpair$unix(0x1, 0x2, 0x0, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xb, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0xa, [@datasec={0x3, 0x0, 0x0, 0xf, 0x3, [], "fb662e"}, @union={0x0, 0x0, 0x0, 0x5, 0x0, 0x0, [{}, {0x0, 0x0, 0xffffffc0}, {0x4}, {}]}, @datasec={0x0, 0x0, 0x0, 0xf, 0xffffffffffffff39, [], "b3cd43"}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x4e}, 0x20) perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x6c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x800}, 0x0, 0x0, 0x0, 0x3, 0x6, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x2) r5 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000b000140020203600e4109000800ac00060311000000160012000a00fc000000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r5, 0x29, 0x14, &(0x7f0000000100), 0x120) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r7, 0x6, 0xa, &(0x7f0000000500), 0x4) setsockopt$sock_attach_bpf(r5, 0x29, 0x15, &(0x7f00000000c0), 0xb9) recvmsg(r2, &(0x7f0000000680)={&(0x7f0000000280)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/103, 0x67}, {&(0x7f0000000380)=""/29, 0x1d}, {&(0x7f0000000580)=""/25, 0x19}], 0x3, &(0x7f0000000640)=""/21, 0x15}, 0x0) sendmsg$sock(r5, &(0x7f0000000d80)={&(0x7f0000000200)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-aesni\x00'}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000b00)="dd09d91278b51579f457135dddd085ef297420b28e5fbe2a23f7c7f04cb8a61b67d19e11d77bb73b77a0128213e6846de78528a07d7fc8f82223210b1fe0add8348e7a0d13a9b1511ab9de09b3c8a4639e60f5091d6b59d99535a25214f6059b08a76d90c4a31df6380f54ccc5d373f7fab3c231f61ab86763", 0x79}], 0x1, &(0x7f0000000c80)}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b705000008e0ffff8400007ea97f0b0000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x2, 0xf, &(0x7f0000000880)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x76}}, {{0x6, 0x0, 0x2, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.417784695s ago: executing program 5 (id=2289): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000003c0)=[{}]}, 0x94) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x94510, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd, 0x6, 0x5, 0xa, 0x8001, 0x0, 0x0, 0x0, 0x4713}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x131002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x1}, 0xd0a42e14fd8a78b9, 0x0, 0xffffffff, 0x0, 0x40000000, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000080), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="76658e682a5f746f5f6261746164763231"], 0x12) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000008c0)={'veth1_vlan\x00', 0x8000}) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)="de33d2a69d579b7b"}, {&(0x7f0000000040)="79102b2b6130a26ba8bbbef0dd582cf3d693cf4ef098f145ec70c174c65d291d4e339d1e662b26a5dcd2dd8f19124aa5b1774339203c9b"}, {&(0x7f00000000c0)="695914beff12e47140e579d3797c4796da4e2c1379ec53a415cb57381c98839f924d828c9a7aedc80f0fd538456a8ac8de71a74a89ae152795d8caa54f492d6dcc36f216b5c855fd6153d5098f97cc613c5bcb1470bb3959abcdd34e7cd3149815ed94fb7d06ca298184f963245dbb3b9711ccd883e5462f24d6b3188b7ee334f81f27d5999ffd62a71967f897bab423232d66eb8a20552c6ede9f6a8aa3880273fe287a966b851e7013cceb53492d33b2c8df84f8f87272437487b9c836dbdbc8367012292aec4f767ace068a118c38a95038543f5a75d947df45cc43cc4f5d4c2fc279141d94388482bafd880c1367"}, {&(0x7f00000001c0)="6a71af2f1d65aa4a3e301bdff42e1df66ab2b83341cced492d667fdf34bace2e406ebf6b2107f6a5c99e8a3f7969bb8b24a1d46549bc5e061f845e02cbe2ec63075c505a2ae080be85c54ad6303f1bd73bf9d153f430d2c2f3a7c02ad4eb4a4240adf723b2d51f4f8bed6d8f4a71eb1c3ad690fa4a51f82b050fd80c9961d77dda59f230e6529d29c4b54a303c547f38a7740ea77c5bc4fd5e10c9e6d27f4b39391c6a8801f740a5fee9f164619d4fd0ee5f5277b301621db4977220c9b90ca942796ca663c7f76f2fd5b3d23c0d1e10dcef6f13bd5fdd06362bbf"}, {&(0x7f00000002c0)="5d93645b6dd41a7a3dc53d2b177e5cbf283418387d15705a43db56d9ff8db40dc48aa9552cbc250e05cb91aac010e55db028d71896b3557c7cf2d10fd3f8691fff5b5db067face6ed4cb7d000d1d37d036af1678e7cf974c692747344646fe694613b81878683498adf7f76570cfc33fa94a8c25ab84f84847ace52aa11cb4bf582d22e0aa49972e510e5d3262b0942dff094152916964984ef3c807340369999dff96272a350f15a931489d93789ee6e363175547ba3ff528d6"}, {&(0x7f0000000380)}, {&(0x7f00000003c0)="fccac25589353d5526694ca73d37b2097162ee027267e955cc493595b653a0bd686341a999ab2281d5b19a88ac0a36b74e072748449527e7c05a948d90ee694ddaf793c1369f389313f591b50ef4764fe1332d0358cf7c33e2355df8e03aa18a2514be388da9834efaae65fa610100b3353e2015da4b2d39daf11edad7f3c3ad3d3521cf8a09f6c90335ba07eaafc1a0901184879cb770483cdb568e8d45c687098aee70eec0177691356b1384"}, {&(0x7f0000000480)="2cbf28d5acb1ecb753ab800479d7c2151b13bb3b55c8eaa29385dc0009964bd1b6c3e0db14eb1584777f75dd11"}, {&(0x7f00000004c0)="5b407701beb2715b3d18925347ae6d2425c2a06a8c74f26e1cc8b5a79f5e5a8b4aebbf68b0719bc0b4ad9bb9057052298537c493a97e660f1719100cd21122fd4bb20fe626253c09a45837a22401c48cdaa23ad2a4e3fd1bacdac07394456c0d3429"}], 0x0, 0x0, 0x4f, 0x1f00c00e}, 0x40) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x6, &(0x7f0000000880)=ANY=[@ANYBLOB="184b730e673e22063f215567ca3851690000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000008510000008000000"], &(0x7f0000000600)='syzkaller\x00', 0x4, 0x4f, &(0x7f0000000640)=""/79, 0x40f00, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x8, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000700)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000740)=[{0x2, 0x5, 0x8, 0x5}, {0x0, 0x5, 0xc, 0x5}, {0x3, 0x1, 0xa, 0x3}, {0x0, 0x5, 0x2, 0xc}], 0x10, 0x9}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000840)={0xffffffffffffffff, r5}) 1.234154921s ago: executing program 0 (id=2290): ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x6) r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_type(r0, &(0x7f0000000040), 0x9) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000300)={0x0, 0x4}, 0xc) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000340)={&(0x7f0000000080)="b684adcc8d98be888bca8f78ee5601711e49b7f0f94d559021c9a3c0d9be025094e3ba100b482f46e1ae95db4b4227d4ae373059f43d4dc529aafc8ecf551be09676261dbeea4fb0aacb4093a2e45d7864a644721fadeb0fbab14bfe46ecf2454f2bd15b0ac3d10e131450f9a99f9cf1e0386017c6e124a205835596531fd28410152618e4c0899189edaf953c30e8b3e331c12569a7d3e903d33d84bea44fe3b70a826b237981b6cf90a916f7bd5dea7f5391aef0bc5de8ba85997d4571caca03382a986360e8a3507c92b1debe8abd6e7c7b417636d4a3ebafbfac933fd87b95d26159c6a113ec502adb1dab49acb6874266305ae4bd", &(0x7f0000000180)=""/241, &(0x7f0000000280)="ea93d5c76c698f028651e3878c25b8a6d030151894d5c0e8e97e3a16", &(0x7f00000002c0)="b1831fdcbf9a073db1", 0xc, r1, 0x4}, 0x38) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000580)={&(0x7f00000003c0), 0x6e, &(0x7f0000000540)=[{&(0x7f0000000440)=""/200, 0xc8}], 0x1}, 0x2000) sendmsg$unix(r2, &(0x7f0000000780)={&(0x7f00000005c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000640)="1f0531a6e04c613e94c4ae4d37e2f5d304369bc1c13572c5ab18a16af8744574ba52319ad2227056fffdfd4415ff41bf39373dd3a6b7c9bb5eeb88fd907f2910d43ed5", 0x43}, {&(0x7f00000006c0)="5527357741a553aac6cbbaf0f83d2bf11dd049765787f1a7da3a60596fb71f04ef8e21aaf0c8bb0e2a3e1594c718b8eecb3ed685d17e1af18bb73d467b321d5fc3edddcf03a817ee787d0192799f0a6192194d3a3268f91c123c6bf27f0fa71dda749ecf3fe15bea0cc8ba0336ed1b4f4cc9f4", 0x73}], 0x2, 0x0, 0x0, 0x200000d0}, 0x44015) mkdir(&(0x7f00000007c0)='./file0\x00', 0x3) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$TUNSETVNETBE(r3, 0x400454de, &(0x7f0000000840)=0x1) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000880)={0x8000}, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNGETSNDBUF(r3, 0x800454d3, &(0x7f0000000900)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000b00)={r1, 0x58, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c80)={&(0x7f0000000b40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x5, [@typedef={0x5}, @var={0x2, 0x0, 0x0, 0xe, 0x4, 0x2}]}, {0x0, [0x61, 0x0, 0x30]}}, &(0x7f0000000b80)=""/211, 0x39, 0xd3, 0x1, 0x1ff}, 0x28) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001000)={0x11, 0x1c, &(0x7f0000000d40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xc}, @jmp={0x5, 0x0, 0x1, 0x1, 0x7, 0x0, 0xfffffffffffffff0}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffff8}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000e40)='GPL\x00', 0x3, 0xd1, &(0x7f0000000e80)=""/209, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000f80)={0x4, 0xf, 0x987a, 0xffffff45}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=[r1], 0x0, 0x10, 0x9}, 0x94) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000010c0)={0x1b, 0x0, 0x0, 0x9, 0x0, r1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x1d, 0xa, &(0x7f0000000940)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x3, 0x0, 0x3, 0x5, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x27343661}, @call={0x85, 0x0, 0x0, 0x74}, @jmp={0x5, 0x1, 0x1, 0x9, 0x8, 0xc, 0x10}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffe01}]}, &(0x7f00000009c0)='syzkaller\x00', 0x6, 0x4b, &(0x7f0000000a00)=""/75, 0x40f00, 0x0, '\x00', r5, @lsm=0x2b, r6, 0x8, &(0x7f0000000cc0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000d00)={0x4, 0xf, 0x3, 0x2}, 0x10, 0xffffffffffffffff, r7, 0x0, &(0x7f0000001140)=[r8, r1, r1, r1, r1], &(0x7f0000001180), 0x10, 0x1}, 0x94) r9 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001280), 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f00000012c0)={[{0x2b, 'freezer'}, {0x2d, 'cpuset'}, {0x2d, 'blkio'}, {0x2d, 'net_prio'}, {0x2b, 'pids'}, {0x2b, 'devices'}]}, 0x31) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={&(0x7f0000001300)='./file0/file0\x00', 0x0, 0x18}, 0x18) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000001500)={&(0x7f0000001380)="d52fd37e5ef51365a07714ca6a8a72b829d24a65dabf88b973c6a25733b58ddb057a609ee5a2edd94cca8d4d0c3046fb2ca3fcdad7450c73edcb17bfb9e4e1006381fbf5c8d8782a539769810af94e0b1f24bc6df0c89061e6c1ab03bb96bb5c13d9b06e78eb76708331d9f985e8aa906ad90ba8ced15a53", &(0x7f0000001400)=""/36, &(0x7f0000001440)="a852d0064e1d123606b93f814e326fe4584e06de710890188667ac6d5c3a5ede49e2a16573273f1d2ab670dbfb0939e3e1259214d669a4", &(0x7f0000001480)="634e9fdeb5bb51847f401dc07c460451bbd2c11d0c45a5f2fe65db469e8359b31c5eaf9e04c929318ecf4f9bf229f99a1021d6b22eff898b8ce1917a90cbf9f1aa960fbeee2bb3eb6335c0693fd90397191862062de696a780275f98d546f760db73ec2022dc2f081d38cfea0a109d7c82b49a865dc3375db0", 0x1ff, r1, 0x4}, 0x38) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001800)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001840)={0x1b, 0x0, 0x0, 0x6, 0x0, r8, 0xa0e, '\x00', 0x0, r6, 0x5, 0x2, 0x3}, 0x50) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001940)={0x30, 0x29, &(0x7f0000001540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffa}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x5}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8dd}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @initr0={0x18, 0x0, 0x0, 0x0, 0xe4f, 0x0, 0x0, 0x0, 0xd}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f00000016c0)='syzkaller\x00', 0x80, 0xbe, &(0x7f0000001700)=""/190, 0x40f00, 0x7e, '\x00', 0x0, 0x0, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x5, 0xf, 0x800, 0x2}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000018c0)=[r10, r1, 0xffffffffffffffff, r8, r11, r8, r8], &(0x7f0000001900)=[{0x5, 0x2, 0x7, 0x6}, {0x5, 0x2, 0x6, 0x9}, {0x3, 0x1, 0xb, 0x1}], 0x10, 0x8}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000001a00)=r12, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001bc0)={&(0x7f0000001a40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x8, [@volatile={0x6, 0x0, 0x0, 0x9, 0x2}, @int={0xd, 0x0, 0x0, 0x1, 0x0, 0x64, 0x0, 0x5b}, @typedef={0xb}]}, {0x0, [0x2e, 0x0, 0x30, 0x5f, 0x61, 0x61]}}, &(0x7f0000001ac0)=""/246, 0x48, 0xf6, 0x1, 0xcb51}, 0x28) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001e00)={0x19, 0x6, &(0x7f0000001c00)=@framed={{0x18, 0x0, 0x0, 0x0, 0xae, 0x0, 0x0, 0x0, 0x8}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @ldst={0x3, 0x2, 0x3, 0x4, 0x6, 0x0, 0xfffffffffffffffe}, @generic={0x5, 0x6, 0x1, 0x1}]}, &(0x7f0000001c40)='syzkaller\x00', 0x7, 0x4b, &(0x7f0000001c80)=""/75, 0x0, 0x10, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001d00)={0x2, 0x8, 0x9b, 0x1}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000001d40)=[r11, r8, r10, r1, r10, r1, r1], &(0x7f0000001d80)=[{0x1, 0x3, 0x4, 0x4}, {0x5, 0x3, 0xa, 0xc}, {0x0, 0x5, 0xc, 0x3}, {0x3, 0x2, 0xd, 0x8}, {0x0, 0x1, 0x6, 0xe}, {0x4, 0x1, 0x9, 0x10}], 0x10, 0x8}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r13) 1.197188532s ago: executing program 4 (id=2291): socket$kcm(0xa, 0x2, 0x73) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="85000000"], 0x0, 0x5}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x3, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218100000", @ANYRES32=r0, @ANYBLOB="000000000000000018100000", @ANYRES32=r1, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r2, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000034d, &(0x7f0000001d00), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003505d25a806f8c6394f97e24fc60", 0x14}], 0x1, 0x0, 0x0, 0x74000000}, 0x10) 958.03643ms ago: executing program 5 (id=2292): r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)=r2}, 0x20) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f00000001c0)=r2}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r2, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000004c0)=[0x0, 0x0], &(0x7f0000000500)=[0x0], 0x0, 0xa0, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000006c0), &(0x7f0000000700), 0x8, 0x85, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x9, &(0x7f0000000340)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8b}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], &(0x7f00000003c0)='syzkaller\x00', 0x10000, 0x0, 0x0, 0x41100, 0x15, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000980)={0x6, 0x2}, 0x8, 0x10, &(0x7f00000009c0)={0x5, 0x2, 0x86, 0xffffff94}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000a00)=[{0x3, 0x4, 0x10, 0x2}, {0x4, 0x4, 0xf, 0x1}, {0x1, 0x4, 0xf, 0x9}, {0x4, 0x5, 0x1}, {0x5, 0x2, 0x5, 0x1}, {0x5, 0x2, 0x10, 0xb}], 0x10, 0x10000}, 0x94) 874.055462ms ago: executing program 2 (id=2293): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, 0xffff, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x7, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x3, 0x9}}, @volatile={0x4, 0x0, 0x0, 0x9, 0x1}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x6}]}, @float={0x3, 0x0, 0x0, 0x10, 0x10}, @ptr={0x9, 0x0, 0x0, 0x2, 0x5}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0xc, 0x0, 0x31, 0x2}, @const={0x7fffffff, 0x0, 0x0, 0xa, 0x3}]}, {0x0, [0x30, 0x30, 0x5f, 0x30, 0x2e]}}, &(0x7f00000002c0)=""/13, 0x8b, 0xd, 0x0, 0xd9}, 0x28) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000000)=ANY=[@ANYRESDEC=r1, @ANYRES8=r3, @ANYRES32=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5) perf_event_open(0x0, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r1, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000040)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000080)=[0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xd1, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000003c0), &(0x7f00000004c0), 0x8, 0xa0, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000880)=r6, 0x4) r7 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r8, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000300)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x42, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x49, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000007400000095000000d1090feb1931f8612d77c845d47358b7cad59a1c07467899b8"], &(0x7f0000000240)='syzkaller\x00', 0x10000000, 0x6e, &(0x7f0000000280)=""/110, 0x41100, 0x7c, '\x00', r9, 0x0, r10, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x1, 0x6, 0x0, 0x0, 0x0, 0x20, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x5, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x75324cc7ada9, 0x0) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a1d08020a000000040000a118000200fec0000000000e1208000f0100810401a80016ea1f0006400303000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x4, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x4a}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x624c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x4ad3, 0x34c}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r12 = perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0xffb, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x19, 0x20000000c2}, 0x0, 0x6, 0x4082c5, 0x0, 0x6, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r12, 0x40042408, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_REFRESH(r12, 0x2402, 0x0) perf_event_open(0x0, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 846.135293ms ago: executing program 5 (id=2294): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x101000, 0x6, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0xd0e4, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffffa, 0x4, @perf_bp={0x0, 0x6}, 0x19183, 0x1, 0x5, 0xb, 0xa, 0x904813a5, 0x4, 0x0, 0x0, 0x0, 0xffffffffffff0000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x10, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, @fallback=0x27}, 0x94) socketpair(0xa, 0x1, 0x0, &(0x7f0000000000)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x10, 0x749}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x1e}}, 0x0}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x8309}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@s}, @call={0x85, 0x0, 0x0, 0x5}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b"], 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10}, 0x18) 727.588987ms ago: executing program 4 (id=2295): bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000002c0)={&(0x7f0000000000)="d5fa05db8074796c6b31cfbbb24cf4733964f302ee6694aba18a44c0d39724bc254bfb1b27d7232f32897d76e1cb3ee2db2fd0cd81810c014bd83985609a79fa29143e2708351c4ca84b1f41b8ec08ea1d568d084e340ad1466ea36008a946ce1b237dc96ead98dfee577c10739182", &(0x7f0000000100)=""/200, &(0x7f0000000200)="eaa0a316e5daa358f748f8f9a584c0fea5c4541678a1eef7565989273e0c499291995c60b61e5e291da612e96362fc44c83390e7f2620f06cb3b2c13ef20d864e861e77e3e9b3abc744dd621c3066578fb5a1b06c990cf88f320d85c2d844b02bfce988f38a89e9476670ac9fd5a1621bea42a1cab979de885df0a335cc45b35c4d612d32f8b790f7dd507a053a145b489c7b4f93d5851d44c3e", &(0x7f0000000080), 0x6d0e, 0xffffffffffffffff, 0x4}, 0x38) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b0000000000000000000000010000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="030000000100000004e4fffffff4e7d28a69bd33300cb98e00000000"], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000080)={r0, &(0x7f0000000380)="2d44ff42fc77d10dc228e0cef415e31f4a7b4a0f3f2b3113520ac53b0321432952c7400be67f05e339f80c8f7697841f55492af65488529fd036d49799308ce15f84d583c4dd2601a6142685ebdaa3c32d2c8abd98041f0aa94bb95b298040d6c2d80f4b41c92b2f", 0x0, 0x4}, 0x20) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x4}, 0x10c333, 0x0, 0x0, 0x7, 0x0, 0x0, 0x8ab5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x115046, 0x0, 0x0, 0x9, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_service_bytes\x00', 0x26e1, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0x24, &(0x7f0000000200), 0x4) r2 = socket$kcm(0x2, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) r4 = socket$kcm(0x2, 0x922000000001, 0x106) r5 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r4, 0x6, 0x4, &(0x7f0000000b80)=r5, 0x4) sendmsg$inet(r2, &(0x7f0000000280)={&(0x7f0000000300)={0x2, 0x4e1f, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="100000000000000000b84468a6b2250db82cee867b1a9e00000007002c00"], 0x10, 0x5}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@struct={0x1}]}, {0x0, [0x61, 0x30, 0x30, 0x2e]}}, 0x0, 0x2a, 0x0, 0x1}, 0x28) r6 = socket$kcm(0xa, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x6e}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3c) sendmsg$kcm(r6, &(0x7f0000000340)={&(0x7f00000002c0)=@in6={0xa, 0x4e22, 0x0, @mcast1, 0x6}, 0x80, 0x0}, 0x8e8c5) r7 = socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x21, &(0x7f0000000080)=[{&(0x7f0000000140)="5800000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac008000300f6ff0200050005c05e776189eab556a705251e618294ff0051f60a84c9f4d4938037e786c6c953000000000000000000", 0x58}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 410.030627ms ago: executing program 1 (id=2296): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xc, 0xe, &(0x7f0000001e40)=ANY=[@ANYRES8], &(0x7f0000000340)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1d, 0x1, 0x0, &(0x7f0000000240)={0x0, 0x0}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c48", 0x15}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00002a00"], 0xfe33) r3 = socket$kcm(0xa, 0x2, 0x73) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(r3, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x10102) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x18000000000002a0, 0x11, 0x0, &(0x7f00000000c0)="76380300000000f99c553726d88259f61d", 0x0, 0x102, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xf, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000040420f00b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000280)=r1}, 0x20) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd4, 0xd4, 0x9, [@const={0x8, 0x0, 0x0, 0xa, 0x5}, @struct={0x6, 0x1, 0x0, 0x4, 0x0, 0x7, [{0xd, 0x4, 0x81}]}, @fwd={0x7}, @int={0xd, 0x0, 0x0, 0x1, 0x0, 0x6f, 0x0, 0x37, 0x3}, @enum={0xd, 0x5, 0x0, 0x6, 0x4, [{0xe, 0x1}, {0xd, 0x3f80}, {0x2, 0x2}, {0xe, 0x6}, {0xe, 0xdb}]}, @volatile={0x3, 0x0, 0x0, 0x9, 0x2}, @enum={0x7, 0x2, 0x0, 0x6, 0x4, [{0xc, 0x6}, {0xb, 0x1}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x8, 0x4, 0x4}}, @type_tag={0x4, 0x0, 0x0, 0x12, 0x2}, @enum={0x9, 0x1, 0x0, 0x6, 0x4, [{0x5, 0x6d70}]}]}, {0x0, [0x30, 0x61, 0x0, 0x0, 0x30, 0x5f, 0x61]}}, &(0x7f0000000700)=""/88, 0xf5, 0x58, 0x0, 0x0, 0x10000, @value=r0}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x6, 0x17, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ldst={0x1, 0x3, 0x4, 0x1, 0xb, 0x8, 0x8}, @generic={0xa4, 0x8, 0xe, 0x9, 0xb7}, @alu={0x7, 0x1, 0x5, 0x7, 0x8, 0xffffffffffffffc0, 0xfffffffffffffff0}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000005c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x22, '\x00', 0x0, 0x25, r6, 0x8, &(0x7f00000007c0)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000800)={0x2, 0x8, 0x8, 0xffff}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000840)=[{0x3, 0x1, 0x9, 0x9}, {0x1, 0x2, 0x10, 0xa}, {0x5, 0x3, 0xd}, {0x3, 0x5, 0x8, 0x3}, {0x3, 0x2, 0xe, 0x3}]}, 0x94) r7 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='cpuset.cpu_exclusive\x00', 0x2, 0x0) write$cgroup_int(r7, &(0x7f00000001c0)=0xa45, 0x12) 326.207349ms ago: executing program 5 (id=2297): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@o_path={&(0x7f0000000240)='./file0\x00', 0x0, 0x4018, r0}, 0x18) perf_event_open(&(0x7f00000002c0)={0x1, 0xfffffffffffffe6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x5437, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x5, 0x106, 0x40, 0x40, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r1}, 0x38) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfdef) recvmsg$unix(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000080)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x10042) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x4c}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x19) 278.009762ms ago: executing program 0 (id=2298): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="dc0100004000000018000000000000000000000000000000950000000000000038720a013653e84c584fdd38a199f6b2df9e19f1574da4512902e83640d72226cbc0c89b926a"], &(0x7f00000000c0)='GPL\x00', 0x5, 0xdd, &(0x7f0000000000)=""/156}, 0x80) (async, rerun: 32) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="06000000040000000900000008"], 0x50) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0xd, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000ffffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000d000000850000000500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r2}, &(0x7f0000000640), &(0x7f0000000680)=r1}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000080000000000000006000000"], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f00000004c0)=r3) (async, rerun: 32) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc2, 0xc2, 0x3, [@datasec={0x8, 0x1, 0x0, 0xf, 0x1, [{0x5, 0x6, 0x9}], "04"}, @struct={0x0, 0x3, 0x0, 0x4, 0x0, 0x1e, [{0xf, 0x4, 0x9}, {0xd, 0x5, 0x7}, {0xe, 0x3, 0x7}]}, @typedef={0x0, 0x0, 0x0, 0x8, 0x5}, @type_tag={0x8, 0x0, 0x0, 0x12, 0x5}, @struct={0x9, 0x1, 0x0, 0x4, 0x1, 0x2, [{0x1, 0x3, 0x4}]}, @ptr={0x9}, @datasec={0x9, 0x2, 0x0, 0xf, 0x1, [{0x3, 0x6, 0x7}, {0x2, 0x6, 0x2}], "c9"}, @struct={0x9, 0x1, 0x0, 0x4, 0x1, 0x6, [{0x1, 0x1, 0x3ff}]}]}, {0x0, [0x3e]}}, &(0x7f00000003c0)=""/197, 0xdf, 0xc5, 0x0, 0x3}, 0x28) (async, rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x82, 0x0, &(0x7f0000000240)="abcebe9ebb517b2baf1a1497ee32ffd8d79a3baedc1cbe154676fa32f3aeaab29bba371f981336f21f4a2c8aa1500bcf91b95b706689c94b6c924101a140ddeb9cd5710ce826441ee69af67543e1515accb44c5a49b42f3473234343ceff455775d9158247600581468e441dbfb1358fc2432a80a12bf5515f4614095ed29d4f3470", 0x0, 0x3, 0x0, 0x81}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000080)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f00000002c0)=ANY=[], 0x8) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1, 0x2, 0x8, 0x1, 0x11000, r0, 0x6, '\x00', r3, r4, 0x0, 0x5}, 0x50) (async, rerun: 32) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) (async, rerun: 32) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) socket$kcm(0x2b, 0x1, 0x0) (async) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1400000, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000000), 0x4) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)="1c0000005e007f029e3b470d649bc33b0285bb9f72ab25394cd956c0", 0x1c}], 0x1}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'dvmrp0\x00', 0x2}) (async, rerun: 64) recvmsg$kcm(r8, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x10122) (async, rerun: 64) setsockopt$sock_attach_bpf(r7, 0x0, 0x29, 0x0, 0x5000) (async, rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) (rerun: 64) 276.858802ms ago: executing program 2 (id=2299): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x400, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x8a, 0x0, 0x0, 0x0, 0x0, 0x68020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x204, 0x2000000000, 0x0, 0x6, 0x9, 0x2, 0x0, 0x0, 0x20000, 0x0, 0x4}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x23, &(0x7f0000000040), 0xcf) sendmsg$inet(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x80) 177.876315ms ago: executing program 2 (id=2300): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) recvmsg$kcm(r0, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b0f, &(0x7f0000000240)={'wlan1\x00', @multicast}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x6e}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x20801, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x24, 0x4a, &(0x7f0000000680)="b9ff03076804268c989e14f088a847e089061416e0885a0400000000000081009fa788a8", 0x0, 0x400, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x3d) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x12, 0xee7, 0xfffffff9, 0x2, 0x400, 0x1, 0x4, '\x00', 0x0, r4, 0x4, 0x5, 0x2}, 0x50) recvmsg$kcm(r0, &(0x7f0000002e80)={0x0, 0x0, 0x0}, 0x20) 144.559655ms ago: executing program 4 (id=2301): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff0000000000040000851000000200000085000000230000009500000000000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) r5 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4002, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x7, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x100000000}, 0x0, 0xe, 0xffffffffffffffff, 0x2) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000b"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r7}, 0xc) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000500)}, 0x4) sendmsg$inet(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f0000000240)=[{&(0x7f00000001c0)="513ed19d40bc40a7f2e8ef09f14e24029ac0c7f4597fee87ec8db1ccf7bfc6f22f01d2fc1191f0e11a38e5fef00f9dabd9b26b5c139eefe1e3bac465ea36a2373a81a6ccac25023a1ae5cf", 0x4b}], 0x1, &(0x7f0000000280)}, 0x4040044) write$cgroup_int(r1, &(0x7f00000000c0), 0x12) r8 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4821a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_bp={0x0, 0x8}, 0x8000, 0x0, 0x0, 0xf17b17cb08554aef, 0x7, 0xfffffffd, 0xfffe}, 0x0, 0x2000000000000001, 0xffffffffffffffff, 0x9) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000002dc0)={0x5, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af85a9c1477a0d2ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) syz_clone(0x5f103800, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000100)=0x1, 0x12) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={0xffffffffffffffff, 0x5}, 0xc) socket$kcm(0xa, 0x5, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r10, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 86.325087ms ago: executing program 0 (id=2302): r0 = perf_event_open$cgroup(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x1, 0x5, 0x9, 0x0, 0x3, 0x80, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x18000000, 0x2, @perf_config_ext={0x9e, 0x8}, 0x10010, 0x4, 0x1, 0x2, 0xf80, 0x9, 0x1, 0x0, 0x401, 0x0, 0x2b}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0x12, 0x2f, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 1 (id=2303): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) r1 = perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0xec, 0x7, 0x3d, 0x7, 0x0, 0x0, 0xd299, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x100882, 0x7ff, 0x6, 0x8, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0, 0xd, 0x0, 0x92, 0x0, &(0x7f00000001c0)="3ec117b8ef6da88acb4ea80e3770d7c8443d6d3063efd397c98284c3610274c64082ff9637575ec6ba2b9ded1a618d6b555ec7e26c112f9554bbbda9f5f604020b63ab7d4640be92a6529e6812f8b79a4eaaa4276697ba778dee659677091015313c764b6cd7a378c6e9ed28ba9658fc9ea18d65c2346177892bc32bc2171cc37ab52c4d58cca3482a583b736e40eab5a8db", 0x0, 0x2, 0x0, 0x7}, 0x50) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x5, 0x0, 0x0, 0x0, 0x97f1, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x100000001, 0x6971a3ed}, 0x100020, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, r1, 0x0) close(r1) perf_event_open$cgroup(&(0x7f0000000040)={0x5, 0x80, 0x3, 0xfe, 0x0, 0x5, 0x0, 0x7, 0x12800, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x2, 0x2}, 0x82, 0x2, 0x80, 0x6, 0x2000000, 0xb, 0x2, 0x0, 0xea5, 0x0, 0x7f}, r0, 0x1, r1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3, 0x5, 0x5, 0xd, 0x0, 0xfffffffffffffffd, 0x2, 0xd, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xe0000003, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0xffffffff80000001, 0x1000007, 0x9, 0x8, 0x5, 0xff, 0x0, 0x7fffffff, 0x0, 0xe}, 0x0, 0x10, 0xffffffffffffffff, 0x3) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000001d000b05005a80647327981a80477a84", 0x14}], 0x1, 0x0, 0x0, 0x4000}, 0x20040080) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x191, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x11, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000880), 0x12) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000700)="5c00000011006bec9e3be35c6e17aa210725876c0d000000ba090000160af3653c001ac004000202080002000300e4002c000000ea2933afd81715daae69b556a705251e618294ff0051f60a84c9f4d4938037e786a6d00003000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4a046) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x18, 0x16, &(0x7f00000013c0)=ANY=[@ANYBLOB="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", @ANYRESOCT=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) kernel console output (not intermixed with test programs): syz.1.608'. [ 145.776989][ T6681] netlink: 197324 bytes leftover after parsing attributes in process `syz.4.607'. [ 146.137650][ T6694] netlink: 'syz.1.611': attribute type 10 has an invalid length. [ 146.178894][ T6694] netlink: 40 bytes leftover after parsing attributes in process `syz.1.611'. [ 146.221169][ T6694] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 146.343326][ T6694] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 147.069155][ T6715] bridge0: port 4(syz_tun) entered blocking state [ 147.119860][ T6715] bridge0: port 4(syz_tun) entered disabled state [ 147.183756][ T6715] device syz_tun entered promiscuous mode [ 147.221021][ T6715] bridge0: port 4(syz_tun) entered blocking state [ 147.227895][ T6715] bridge0: port 4(syz_tun) entered forwarding state [ 148.552349][ T6756] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.630'. [ 149.983537][ T4493] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 150.689247][ T4493] wlan1: Trigger new scan to find an IBSS to join [ 151.150222][ T6825] netlink: 60687 bytes leftover after parsing attributes in process `syz.2.650'. [ 151.492559][ T6835] device sit0 entered promiscuous mode [ 151.605575][ T6837] netlink: 'syz.5.654': attribute type 21 has an invalid length. [ 151.669880][ T555] wlan1: Creating new IBSS network, BSSID f2:57:e8:13:ef:c2 [ 152.333947][ T6877] netlink: 'syz.5.660': attribute type 11 has an invalid length. [ 152.382363][ T6877] netlink: 184116 bytes leftover after parsing attributes in process `syz.5.660'. [ 153.041200][ T6845] device syzkaller0 entered promiscuous mode [ 153.113690][ T6876] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 153.146542][ T6867] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 153.163087][ T6877] debugfs: Directory '!!' with parent 'ieee80211' already present! [ 153.642992][ T6934] netlink: 'syz.4.664': attribute type 10 has an invalid length. [ 153.675192][ T6934] device geneve0 entered promiscuous mode [ 153.737458][ T6934] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 154.057208][ T6946] netlink: 'syz.5.666': attribute type 10 has an invalid length. [ 154.132273][ T6946] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.139715][ T6946] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.147362][ T6946] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.154528][ T6946] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.383384][ T6946] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 154.611377][ T6995] netlink: 60 bytes leftover after parsing attributes in process `syz.1.668'. [ 154.758241][ T6995] netlink: 'syz.1.668': attribute type 4 has an invalid length. [ 155.560235][ T7032] netlink: 'syz.4.679': attribute type 29 has an invalid length. [ 155.637495][ T7032] netlink: 'syz.4.679': attribute type 29 has an invalid length. [ 155.655995][ T7034] netlink: 'syz.4.679': attribute type 29 has an invalid length. [ 155.675708][ T7035] netlink: 'syz.4.679': attribute type 4 has an invalid length. [ 155.729927][ T555] wlan1: Trigger new scan to find an IBSS to join [ 155.767213][ T7035] netlink: 205320 bytes leftover after parsing attributes in process `syz.4.679'. [ 155.832213][ T7032] netlink: 'syz.4.679': attribute type 10 has an invalid length. [ 155.863887][ T7032] netlink: 'syz.4.679': attribute type 19 has an invalid length. [ 155.909153][ T7032] netlink: 14536 bytes leftover after parsing attributes in process `syz.4.679'. [ 156.196664][ T7047] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.684'. [ 156.244441][ T7047] netlink: 152 bytes leftover after parsing attributes in process `syz.4.684'. [ 156.476699][ T7056] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 156.483481][ T7056] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 157.238725][ T7081] validate_nla: 6 callbacks suppressed [ 157.238746][ T7081] netlink: 'syz.2.693': attribute type 3 has an invalid length. [ 157.387815][ T7081] netlink: 'syz.2.693': attribute type 1 has an invalid length. [ 157.530034][ T7081] netlink: 132 bytes leftover after parsing attributes in process `syz.2.693'. [ 157.929138][ T7088] netlink: 209820 bytes leftover after parsing attributes in process `syz.0.692'. [ 157.939753][ T7091] netlink: 'syz.0.692': attribute type 11 has an invalid length. [ 157.964144][ T7091] netlink: 184116 bytes leftover after parsing attributes in process `syz.0.692'. [ 158.134818][ T7107] netlink: 128 bytes leftover after parsing attributes in process `syz.0.700'. [ 158.157152][ T7106] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.699'. [ 158.264786][ T7113] __sock_release: fasync list not empty! [ 158.342595][ T7107] device pim6reg1 entered promiscuous mode [ 158.642431][ T7110] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 158.758901][ T7110] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 158.778511][ T6984] wlan1: Trigger new scan to find an IBSS to join [ 158.867393][ T7110] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 159.147440][ T7134] netlink: 132 bytes leftover after parsing attributes in process `syz.5.706'. [ 159.219139][ T7137] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.706'. [ 159.252522][ T7137] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 159.492929][ T6984] tipc: Subscription rejected, illegal request [ 159.676365][ T7157] IPv6: Can't replace route, no match found [ 160.008193][ T7169] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.718'. [ 160.487144][ T7164] device syzkaller0 entered promiscuous mode [ 160.876957][ T7188] device syzkaller0 entered promiscuous mode [ 161.550240][ T7215] netlink: 'syz.4.730': attribute type 10 has an invalid length. [ 161.585031][ T7215] netlink: 2 bytes leftover after parsing attributes in process `syz.4.730'. [ 161.646377][ T7215] device bond0 entered promiscuous mode [ 161.678101][ T7215] device bond_slave_0 entered promiscuous mode [ 161.690694][ T7215] device bond_slave_1 entered promiscuous mode [ 161.700139][ T7215] bridge0: port 4(bond0) entered blocking state [ 161.706887][ T7215] bridge0: port 4(bond0) entered disabled state [ 161.729648][ T6984] wlan1: Creating new IBSS network, BSSID be:d8:1a:7a:e8:43 [ 161.737284][ T6984] wlan1: Trigger new scan to find an IBSS to join [ 161.760674][ T7215] bridge0: port 4(bond0) entered blocking state [ 161.767263][ T7215] bridge0: port 4(bond0) entered forwarding state [ 161.932469][ T7229] netlink: 'syz.4.735': attribute type 10 has an invalid length. [ 161.946638][ T7227] netlink: 'syz.1.733': attribute type 8 has an invalid length. [ 161.986666][ T7227] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.733'. [ 162.049742][ T7229] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.071360][ T7229] device bridge_slave_1 left promiscuous mode [ 162.077639][ T7229] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.180819][ T7229] device bridge_slave_1 entered promiscuous mode [ 162.226984][ T7229] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 162.467741][ T7243] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.738'. [ 162.494756][ T7251] netlink: 168 bytes leftover after parsing attributes in process `syz.5.739'. [ 162.544865][ T7243] netlink: 'syz.1.738': attribute type 1 has an invalid length. [ 162.605293][ T7243] netlink: 21820 bytes leftover after parsing attributes in process `syz.1.738'. [ 162.793234][ T7264] netlink: 'syz.4.745': attribute type 1 has an invalid length. [ 162.859281][ T7264] netlink: 'syz.4.745': attribute type 3 has an invalid length. [ 162.906415][ T7264] netlink: 132 bytes leftover after parsing attributes in process `syz.4.745'. [ 163.889272][ T7281] netlink: 'syz.2.751': attribute type 39 has an invalid length. [ 163.908228][ T7281] device veth0_macvtap left promiscuous mode [ 164.095029][ T7297] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.754'. [ 164.234757][ T7300] netlink: 'syz.0.756': attribute type 10 has an invalid length. [ 164.365433][ T7300] team0: Device wg1 is of different type [ 164.510989][ T7299] delete_channel: no stack [ 164.999347][ T7331] delete_channel: no stack [ 165.302937][ T7339] netlink: 'syz.4.764': attribute type 9 has an invalid length. [ 165.341370][ T7339] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.764'. [ 165.413274][ T7335] device wlan0 entered promiscuous mode [ 165.478247][ T7345] netlink: 830 bytes leftover after parsing attributes in process `syz.1.768'. [ 165.754852][ T7344] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 165.895940][ T7360] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.772'. [ 166.261340][ T7377] netlink: 'syz.1.776': attribute type 11 has an invalid length. [ 166.517427][ T7377] debugfs: Directory '!!' with parent 'ieee80211' already present! [ 166.770178][ T6984] wlan1: Trigger new scan to find an IBSS to join [ 167.042196][ T7397] __nla_validate_parse: 1 callbacks suppressed [ 167.042284][ T7397] netlink: 64 bytes leftover after parsing attributes in process `syz.0.784'. [ 168.005789][ T6982] wlan1: Creating new IBSS network, BSSID 86:0c:67:63:df:bf [ 168.412058][ T7450] netlink: 'syz.0.797': attribute type 2 has an invalid length. [ 168.454745][ T7450] netlink: 'syz.0.797': attribute type 1 has an invalid length. [ 168.486125][ T7450] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.797'. [ 168.531971][ T7460] netlink: 14 bytes leftover after parsing attributes in process `syz.4.798'. [ 168.649768][ T7464] netlink: 1057 bytes leftover after parsing attributes in process `syz.5.801'. [ 168.690584][ T7460] device hsr_slave_0 left promiscuous mode [ 168.805295][ T7460] device hsr_slave_1 left promiscuous mode [ 168.869256][ T7467] delete_channel: no stack [ 169.114125][ T7473] netlink: 'syz.0.804': attribute type 39 has an invalid length. [ 169.541933][ T7488] netlink: 'syz.5.809': attribute type 3 has an invalid length. [ 169.579181][ T7488] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.809'. [ 171.088550][ T7553] netlink: 'syz.0.830': attribute type 17 has an invalid length. [ 171.155753][ T7553] netlink: 148 bytes leftover after parsing attributes in process `syz.0.830'. [ 171.802205][ T7591] raw_sendmsg: syz.5.844 forgot to set AF_INET. Fix it! [ 172.320754][ T7603] netlink: 'syz.5.847': attribute type 4 has an invalid length. [ 172.409157][ T7603] netlink: 116 bytes leftover after parsing attributes in process `syz.5.847'. [ 173.085472][ T7655] netlink: 209844 bytes leftover after parsing attributes in process `syz.5.863'. [ 173.102366][ T7647] device syzkaller0 entered promiscuous mode [ 173.207434][ T7659] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.864'. [ 173.227560][ T7659] openvswitch: netlink: IP tunnel attribute has 3064 unknown bytes. [ 173.271418][ T7659] netlink: 48 bytes leftover after parsing attributes in process `syz.4.864'. [ 173.321047][ T7662] netlink: 'syz.2.865': attribute type 3 has an invalid length. [ 173.341796][ T7659] netlink: 4 bytes leftover after parsing attributes in process `syz.4.864'. [ 173.363497][ T7662] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.865'. [ 173.618635][ T7678] netlink: 'syz.2.870': attribute type 3 has an invalid length. [ 173.659787][ T7678] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.870'. [ 173.833269][ T7694] FAULT_INJECTION: forcing a failure. [ 173.833269][ T7694] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 173.846727][ T7694] CPU: 0 PID: 7694 Comm: syz.5.876 Not tainted syzkaller #0 [ 173.854050][ T7694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 173.864163][ T7694] Call Trace: [ 173.867470][ T7694] [ 173.870422][ T7694] dump_stack_lvl+0x188/0x250 [ 173.875143][ T7694] ? show_regs_print_info+0x20/0x20 [ 173.880375][ T7694] ? load_image+0x400/0x400 [ 173.884921][ T7694] ? __lock_acquire+0x7d10/0x7d10 [ 173.889987][ T7694] ? release_firmware_map_entry+0x190/0x190 [ 173.895921][ T7694] should_fail+0x38c/0x4c0 [ 173.900394][ T7694] _copy_from_user+0x2e/0x170 [ 173.905111][ T7694] __sys_bpf+0x26d/0x6f0 [ 173.909393][ T7694] ? bpf_link_show_fdinfo+0x380/0x380 [ 173.914820][ T7694] __x64_sys_bpf+0x78/0x90 [ 173.919273][ T7694] do_syscall_64+0x4c/0xa0 [ 173.923746][ T7694] ? clear_bhb_loop+0x30/0x80 [ 173.928455][ T7694] ? clear_bhb_loop+0x30/0x80 [ 173.933178][ T7694] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 173.939126][ T7694] RIP: 0033:0x7f302ec48e59 [ 173.943572][ T7694] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.963204][ T7694] RSP: 002b:00007f302cea2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 173.971692][ T7694] RAX: ffffffffffffffda RBX: 00007f302eec1fa0 RCX: 00007f302ec48e59 [ 173.979703][ T7694] RDX: 0000000000000050 RSI: 0000200000000500 RDI: 000000000000000a [ 173.987722][ T7694] RBP: 00007f302cea2090 R08: 0000000000000000 R09: 0000000000000000 [ 173.995732][ T7694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.003742][ T7694] R13: 00007f302eec2038 R14: 00007f302eec1fa0 R15: 00007ffe858a0168 [ 174.011769][ T7694] [ 174.257855][ T7697] delete_channel: no stack [ 174.325059][ T7707] netlink: 'syz.4.881': attribute type 3 has an invalid length. [ 174.392916][ T7707] netlink: 132 bytes leftover after parsing attributes in process `syz.4.881'. [ 174.436982][ T7707] netlink: 'syz.4.881': attribute type 3 has an invalid length. [ 174.455228][ T7707] netlink: 132 bytes leftover after parsing attributes in process `syz.4.881'. [ 174.470608][ T7707] netlink: 'syz.4.881': attribute type 3 has an invalid length. [ 174.483087][ T7707] netlink: 132 bytes leftover after parsing attributes in process `syz.4.881'. [ 174.498065][ T7707] netlink: 'syz.4.881': attribute type 3 has an invalid length. [ 174.510317][ T7707] netlink: 'syz.4.881': attribute type 3 has an invalid length. [ 174.570314][ T7707] netlink: 'syz.4.881': attribute type 3 has an invalid length. [ 174.589473][ T7707] netlink: 'syz.4.881': attribute type 3 has an invalid length. [ 174.598005][ T7707] netlink: 'syz.4.881': attribute type 3 has an invalid length. [ 174.611068][ T7707] netlink: 'syz.4.881': attribute type 3 has an invalid length. [ 174.690878][ T7727] FAULT_INJECTION: forcing a failure. [ 174.690878][ T7727] name failslab, interval 1, probability 0, space 0, times 1 [ 174.757849][ T7727] CPU: 1 PID: 7727 Comm: syz.5.887 Not tainted syzkaller #0 [ 174.765196][ T7727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 174.775274][ T7727] Call Trace: [ 174.778570][ T7727] [ 174.781512][ T7727] dump_stack_lvl+0x188/0x250 [ 174.786209][ T7727] ? show_regs_print_info+0x20/0x20 [ 174.791430][ T7727] ? load_image+0x400/0x400 [ 174.795953][ T7727] ? __might_sleep+0xf0/0xf0 [ 174.800566][ T7727] ? __lock_acquire+0x7d10/0x7d10 [ 174.805623][ T7727] ? verify_lock_unused+0x140/0x140 [ 174.810845][ T7727] should_fail+0x38c/0x4c0 [ 174.815296][ T7727] should_failslab+0x5/0x20 [ 174.819811][ T7727] slab_pre_alloc_hook+0x51/0xc0 [ 174.824780][ T7727] __kmalloc+0x6b/0x330 [ 174.828974][ T7727] ? bpf_test_init+0xf8/0x1b0 [ 174.833677][ T7727] bpf_test_init+0xf8/0x1b0 [ 174.838199][ T7727] bpf_prog_test_run_xdp+0x1cb/0x920 [ 174.843531][ T7727] ? dev_put+0x70/0x70 [ 174.847628][ T7727] ? dev_put+0x70/0x70 [ 174.851727][ T7727] bpf_prog_test_run+0x31e/0x390 [ 174.856731][ T7727] __sys_bpf+0x5a5/0x6f0 [ 174.861427][ T7727] ? bpf_link_show_fdinfo+0x380/0x380 [ 174.866828][ T7727] ? vtime_user_exit+0x2c8/0x3e0 [ 174.871791][ T7727] __x64_sys_bpf+0x78/0x90 [ 174.876247][ T7727] do_syscall_64+0x4c/0xa0 [ 174.880685][ T7727] ? clear_bhb_loop+0x30/0x80 [ 174.885380][ T7727] ? clear_bhb_loop+0x30/0x80 [ 174.890074][ T7727] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 174.895986][ T7727] RIP: 0033:0x7f302ec48e59 [ 174.900432][ T7727] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.920063][ T7727] RSP: 002b:00007f302cea2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 174.928502][ T7727] RAX: ffffffffffffffda RBX: 00007f302eec1fa0 RCX: 00007f302ec48e59 [ 174.936528][ T7727] RDX: 0000000000000050 RSI: 0000200000000500 RDI: 000000000000000a [ 174.944563][ T7727] RBP: 00007f302cea2090 R08: 0000000000000000 R09: 0000000000000000 [ 174.952598][ T7727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.960594][ T7727] R13: 00007f302eec2038 R14: 00007f302eec1fa0 R15: 00007ffe858a0168 [ 174.968616][ T7727] [ 175.769333][ T7773] pim6reg: tun_chr_ioctl cmd 1074025677 [ 175.775164][ T7773] pim6reg: linktype set to 0 [ 175.791138][ T7778] FAULT_INJECTION: forcing a failure. [ 175.791138][ T7778] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 175.843045][ T7778] CPU: 0 PID: 7778 Comm: syz.5.902 Not tainted syzkaller #0 [ 175.850522][ T7778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 175.860650][ T7778] Call Trace: [ 175.863961][ T7778] [ 175.866923][ T7778] dump_stack_lvl+0x188/0x250 [ 175.871641][ T7778] ? show_regs_print_info+0x20/0x20 [ 175.876879][ T7778] ? load_image+0x400/0x400 [ 175.881450][ T7778] ? __lock_acquire+0x7d10/0x7d10 [ 175.886528][ T7778] should_fail+0x38c/0x4c0 [ 175.891005][ T7778] _copy_from_user+0x2e/0x170 [ 175.895753][ T7778] bpf_test_init+0x136/0x1b0 [ 175.900394][ T7778] bpf_prog_test_run_xdp+0x1cb/0x920 [ 175.905731][ T7778] ? dev_put+0x70/0x70 [ 175.909850][ T7778] ? dev_put+0x70/0x70 [ 175.913954][ T7778] bpf_prog_test_run+0x31e/0x390 [ 175.918957][ T7778] __sys_bpf+0x5a5/0x6f0 [ 175.923240][ T7778] ? bpf_link_show_fdinfo+0x380/0x380 [ 175.928655][ T7778] ? vtime_user_exit+0x2c8/0x3e0 [ 175.933629][ T7778] __x64_sys_bpf+0x78/0x90 [ 175.938094][ T7778] do_syscall_64+0x4c/0xa0 [ 175.942544][ T7778] ? clear_bhb_loop+0x30/0x80 [ 175.947340][ T7778] ? clear_bhb_loop+0x30/0x80 [ 175.952055][ T7778] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 175.957992][ T7778] RIP: 0033:0x7f302ec48e59 [ 175.962449][ T7778] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.982089][ T7778] RSP: 002b:00007f302cea2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 175.990560][ T7778] RAX: ffffffffffffffda RBX: 00007f302eec1fa0 RCX: 00007f302ec48e59 [ 175.998568][ T7778] RDX: 0000000000000050 RSI: 0000200000000500 RDI: 000000000000000a [ 176.006572][ T7778] RBP: 00007f302cea2090 R08: 0000000000000000 R09: 0000000000000000 [ 176.014666][ T7778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.022676][ T7778] R13: 00007f302eec2038 R14: 00007f302eec1fa0 R15: 00007ffe858a0168 [ 176.030768][ T7778] [ 176.739134][ T7807] device veth0_macvtap left promiscuous mode [ 177.759307][ T7833] FAULT_INJECTION: forcing a failure. [ 177.759307][ T7833] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 177.804852][ T7833] CPU: 1 PID: 7833 Comm: syz.0.922 Not tainted syzkaller #0 [ 177.812233][ T7833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 177.822321][ T7833] Call Trace: [ 177.825646][ T7833] [ 177.828606][ T7833] dump_stack_lvl+0x188/0x250 [ 177.833348][ T7833] ? show_regs_print_info+0x20/0x20 [ 177.838582][ T7833] ? load_image+0x400/0x400 [ 177.843124][ T7833] ? __lock_acquire+0x7d10/0x7d10 [ 177.848177][ T7833] ? bpf_test_run+0x78e/0x800 [ 177.852885][ T7833] should_fail+0x38c/0x4c0 [ 177.857353][ T7833] _copy_to_user+0x2e/0x130 [ 177.861934][ T7833] bpf_test_finish+0x1b7/0x2f0 [ 177.866751][ T7833] ? convert_skb_to___skb+0x360/0x360 [ 177.872160][ T7833] ? _copy_from_user+0x111/0x170 [ 177.877138][ T7833] ? bpf_test_init+0x171/0x1b0 [ 177.881944][ T7833] ? xdp_convert_buff_to_md+0x154/0x1e0 [ 177.887631][ T7833] bpf_prog_test_run_xdp+0x62b/0x920 [ 177.892957][ T7833] ? dev_put+0x70/0x70 [ 177.897082][ T7833] ? dev_put+0x70/0x70 [ 177.901249][ T7833] bpf_prog_test_run+0x31e/0x390 [ 177.906241][ T7833] __sys_bpf+0x5a5/0x6f0 [ 177.910554][ T7833] ? bpf_link_show_fdinfo+0x380/0x380 [ 177.916001][ T7833] ? vtime_user_exit+0x2c8/0x3e0 [ 177.920982][ T7833] __x64_sys_bpf+0x78/0x90 [ 177.925433][ T7833] do_syscall_64+0x4c/0xa0 [ 177.929875][ T7833] ? clear_bhb_loop+0x30/0x80 [ 177.934601][ T7833] ? clear_bhb_loop+0x30/0x80 [ 177.939415][ T7833] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 177.945348][ T7833] RIP: 0033:0x7f4ef17d3e59 [ 177.949777][ T7833] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.969415][ T7833] RSP: 002b:00007f4eefa2d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 177.977861][ T7833] RAX: ffffffffffffffda RBX: 00007f4ef1a4cfa0 RCX: 00007f4ef17d3e59 [ 177.985857][ T7833] RDX: 0000000000000050 RSI: 0000200000000500 RDI: 000000000000000a [ 177.993852][ T7833] RBP: 00007f4eefa2d090 R08: 0000000000000000 R09: 0000000000000000 [ 178.001854][ T7833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.009858][ T7833] R13: 00007f4ef1a4d038 R14: 00007f4ef1a4cfa0 R15: 00007ffc1015f488 [ 178.017889][ T7833] [ 178.865349][ T7870] __nla_validate_parse: 33 callbacks suppressed [ 178.865380][ T7870] netlink: 128 bytes leftover after parsing attributes in process `syz.4.934'. [ 178.918521][ T7870] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 179.394226][ T7877] FAULT_INJECTION: forcing a failure. [ 179.394226][ T7877] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 179.508894][ T7877] CPU: 0 PID: 7877 Comm: syz.5.936 Not tainted syzkaller #0 [ 179.516335][ T7877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 179.526733][ T7877] Call Trace: [ 179.530037][ T7877] [ 179.532993][ T7877] dump_stack_lvl+0x188/0x250 [ 179.537709][ T7877] ? show_regs_print_info+0x20/0x20 [ 179.543039][ T7877] ? load_image+0x400/0x400 [ 179.547576][ T7877] ? __lock_acquire+0x7d10/0x7d10 [ 179.552644][ T7877] ? bpf_test_run+0x78e/0x800 [ 179.557358][ T7877] should_fail+0x38c/0x4c0 [ 179.561813][ T7877] _copy_to_user+0x2e/0x130 [ 179.566354][ T7877] bpf_test_finish+0x1e6/0x2f0 [ 179.571165][ T7877] ? convert_skb_to___skb+0x360/0x360 [ 179.576573][ T7877] ? _copy_from_user+0x111/0x170 [ 179.581541][ T7877] ? bpf_test_init+0x171/0x1b0 [ 179.586342][ T7877] ? xdp_convert_buff_to_md+0x154/0x1e0 [ 179.591929][ T7877] bpf_prog_test_run_xdp+0x62b/0x920 [ 179.597279][ T7877] ? dev_put+0x70/0x70 [ 179.601434][ T7877] ? dev_put+0x70/0x70 [ 179.605540][ T7877] bpf_prog_test_run+0x31e/0x390 [ 179.610526][ T7877] __sys_bpf+0x5a5/0x6f0 [ 179.614838][ T7877] ? bpf_link_show_fdinfo+0x380/0x380 [ 179.620255][ T7877] ? vtime_user_exit+0x2c8/0x3e0 [ 179.625226][ T7877] __x64_sys_bpf+0x78/0x90 [ 179.629727][ T7877] do_syscall_64+0x4c/0xa0 [ 179.634184][ T7877] ? clear_bhb_loop+0x30/0x80 [ 179.638897][ T7877] ? clear_bhb_loop+0x30/0x80 [ 179.643601][ T7877] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 179.649520][ T7877] RIP: 0033:0x7f302ec48e59 [ 179.653973][ T7877] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.673616][ T7877] RSP: 002b:00007f302cea2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 179.682219][ T7877] RAX: ffffffffffffffda RBX: 00007f302eec1fa0 RCX: 00007f302ec48e59 [ 179.690236][ T7877] RDX: 0000000000000050 RSI: 0000200000000500 RDI: 000000000000000a [ 179.698248][ T7877] RBP: 00007f302cea2090 R08: 0000000000000000 R09: 0000000000000000 [ 179.706252][ T7877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.714253][ T7877] R13: 00007f302eec2038 R14: 00007f302eec1fa0 R15: 00007ffe858a0168 [ 179.722278][ T7877] [ 179.749304][ T7882] validate_nla: 29 callbacks suppressed [ 179.749320][ T7882] netlink: 'syz.0.939': attribute type 29 has an invalid length. [ 179.810278][ T7882] netlink: 'syz.0.939': attribute type 29 has an invalid length. [ 179.837995][ T7884] netlink: 'syz.0.939': attribute type 29 has an invalid length. [ 179.882605][ T7882] netlink: 'syz.0.939': attribute type 29 has an invalid length. [ 179.940810][ T7882] netlink: 'syz.0.939': attribute type 29 has an invalid length. [ 180.196276][ T7899] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.943'. [ 180.339454][ T7912] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.948'. [ 180.447776][ T7912] netlink: 'syz.0.948': attribute type 17 has an invalid length. [ 180.475440][ T7912] netlink: 'syz.0.948': attribute type 16 has an invalid length. [ 180.500057][ T7912] netlink: 152 bytes leftover after parsing attributes in process `syz.0.948'. [ 180.666302][ T7925] netlink: 'syz.2.952': attribute type 10 has an invalid length. [ 180.707590][ T7928] FAULT_INJECTION: forcing a failure. [ 180.707590][ T7928] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 180.723527][ T7925] netlink: 'syz.2.952': attribute type 19 has an invalid length. [ 180.739121][ T7925] netlink: 14536 bytes leftover after parsing attributes in process `syz.2.952'. [ 180.748726][ T7928] CPU: 1 PID: 7928 Comm: syz.0.954 Not tainted syzkaller #0 [ 180.756041][ T7928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 180.766114][ T7928] Call Trace: [ 180.769408][ T7928] [ 180.772349][ T7928] dump_stack_lvl+0x188/0x250 [ 180.777066][ T7928] ? show_regs_print_info+0x20/0x20 [ 180.782293][ T7928] ? load_image+0x400/0x400 [ 180.786800][ T7928] ? __lock_acquire+0x7d10/0x7d10 [ 180.791832][ T7928] ? bpf_test_run+0x78e/0x800 [ 180.796521][ T7928] should_fail+0x38c/0x4c0 [ 180.800948][ T7928] _copy_to_user+0x2e/0x130 [ 180.805462][ T7928] bpf_test_finish+0x215/0x2f0 [ 180.810250][ T7928] ? convert_skb_to___skb+0x360/0x360 [ 180.815663][ T7928] ? _copy_from_user+0x111/0x170 [ 180.820620][ T7928] ? bpf_test_init+0x171/0x1b0 [ 180.825432][ T7928] ? xdp_convert_buff_to_md+0x154/0x1e0 [ 180.830991][ T7928] bpf_prog_test_run_xdp+0x62b/0x920 [ 180.836298][ T7928] ? dev_put+0x70/0x70 [ 180.840384][ T7928] ? dev_put+0x70/0x70 [ 180.844465][ T7928] bpf_prog_test_run+0x31e/0x390 [ 180.849424][ T7928] __sys_bpf+0x5a5/0x6f0 [ 180.853687][ T7928] ? bpf_link_show_fdinfo+0x380/0x380 [ 180.859082][ T7928] ? rcu_nmi_exit+0x6f/0xf0 [ 180.863622][ T7928] ? vtime_user_exit+0x2c8/0x3e0 [ 180.868582][ T7928] __x64_sys_bpf+0x78/0x90 [ 180.873004][ T7928] do_syscall_64+0x4c/0xa0 [ 180.877434][ T7928] ? clear_bhb_loop+0x30/0x80 [ 180.882119][ T7928] ? clear_bhb_loop+0x30/0x80 [ 180.886830][ T7928] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 180.892770][ T7928] RIP: 0033:0x7f4ef17d3e59 [ 180.897217][ T7928] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.916838][ T7928] RSP: 002b:00007f4eefa2d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 180.925290][ T7928] RAX: ffffffffffffffda RBX: 00007f4ef1a4cfa0 RCX: 00007f4ef17d3e59 [ 180.933278][ T7928] RDX: 0000000000000050 RSI: 0000200000000500 RDI: 000000000000000a [ 180.941255][ T7928] RBP: 00007f4eefa2d090 R08: 0000000000000000 R09: 0000000000000000 [ 180.949241][ T7928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.957244][ T7928] R13: 00007f4ef1a4d038 R14: 00007f4ef1a4cfa0 R15: 00007ffc1015f488 [ 180.965255][ T7928] [ 181.194113][ T7939] netlink: 'syz.5.956': attribute type 41 has an invalid length. [ 181.969480][ T6986] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 182.200066][ T7973] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.966'. [ 182.299801][ T7975] FAULT_INJECTION: forcing a failure. [ 182.299801][ T7975] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 182.348341][ T7975] CPU: 0 PID: 7975 Comm: syz.1.967 Not tainted syzkaller #0 [ 182.355797][ T7975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 182.365878][ T7975] Call Trace: [ 182.369180][ T7975] [ 182.372153][ T7975] dump_stack_lvl+0x188/0x250 [ 182.376854][ T7975] ? show_regs_print_info+0x20/0x20 [ 182.382082][ T7975] ? load_image+0x400/0x400 [ 182.386621][ T7975] ? __lock_acquire+0x7d10/0x7d10 [ 182.391662][ T7975] ? bpf_test_run+0x78e/0x800 [ 182.396358][ T7975] should_fail+0x38c/0x4c0 [ 182.400797][ T7975] _copy_to_user+0x2e/0x130 [ 182.405323][ T7975] bpf_test_finish+0x215/0x2f0 [ 182.410130][ T7975] ? convert_skb_to___skb+0x360/0x360 [ 182.415531][ T7975] ? _copy_from_user+0x111/0x170 [ 182.420501][ T7975] ? bpf_test_init+0x171/0x1b0 [ 182.425282][ T7975] ? xdp_convert_buff_to_md+0x154/0x1e0 [ 182.430848][ T7975] bpf_prog_test_run_xdp+0x62b/0x920 [ 182.436181][ T7975] ? dev_put+0x70/0x70 [ 182.440284][ T7975] ? dev_put+0x70/0x70 [ 182.444374][ T7975] bpf_prog_test_run+0x31e/0x390 [ 182.449344][ T7975] __sys_bpf+0x5a5/0x6f0 [ 182.453639][ T7975] ? bpf_link_show_fdinfo+0x380/0x380 [ 182.459057][ T7975] ? vtime_user_exit+0x2c8/0x3e0 [ 182.464032][ T7975] __x64_sys_bpf+0x78/0x90 [ 182.468477][ T7975] do_syscall_64+0x4c/0xa0 [ 182.472920][ T7975] ? clear_bhb_loop+0x30/0x80 [ 182.477623][ T7975] ? clear_bhb_loop+0x30/0x80 [ 182.482331][ T7975] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 182.488250][ T7975] RIP: 0033:0x7fd9124f0e59 [ 182.492699][ T7975] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.512327][ T7975] RSP: 002b:00007fd91074a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 182.520768][ T7975] RAX: ffffffffffffffda RBX: 00007fd912769fa0 RCX: 00007fd9124f0e59 [ 182.528764][ T7975] RDX: 0000000000000050 RSI: 0000200000000500 RDI: 000000000000000a [ 182.536755][ T7975] RBP: 00007fd91074a090 R08: 0000000000000000 R09: 0000000000000000 [ 182.544953][ T7975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.552947][ T7975] R13: 00007fd91276a038 R14: 00007fd912769fa0 R15: 00007ffe7bdde218 [ 182.560970][ T7975] [ 183.583959][ T8018] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 183.639708][ T8020] netlink: 152 bytes leftover after parsing attributes in process `syz.2.982'. [ 183.802561][ T8020] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 183.936533][ T8022] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.035159][ T8065] netlink: 203516 bytes leftover after parsing attributes in process `syz.5.996'. [ 185.086590][ T8069] netlink: 203516 bytes leftover after parsing attributes in process `syz.5.996'. [ 185.139044][ T8065] netlink: zone id is out of range [ 185.144306][ T8065] netlink: zone id is out of range [ 185.159569][ T8069] netlink: zone id is out of range [ 185.164736][ T8069] netlink: zone id is out of range [ 185.227610][ T8065] netlink: zone id is out of range [ 185.236199][ T8069] netlink: zone id is out of range [ 185.272542][ T8065] netlink: zone id is out of range [ 185.279272][ T8069] netlink: zone id is out of range [ 185.284424][ T8069] netlink: zone id is out of range [ 185.313559][ T8065] netlink: zone id is out of range [ 185.576655][ T8075] device syzkaller0 entered promiscuous mode [ 185.968882][ T8090] validate_nla: 3 callbacks suppressed [ 185.968897][ T8090] netlink: 'syz.5.1003': attribute type 13 has an invalid length. [ 186.007379][ T8090] netlink: 160 bytes leftover after parsing attributes in process `syz.5.1003'. [ 186.052634][ T8090] erspan0: refused to change device tx_queue_len [ 186.275210][ T8102] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 188.172670][ T8155] netlink: 9275 bytes leftover after parsing attributes in process `syz.4.1024'. [ 188.347025][ T8163] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.1027'. [ 188.401237][ T8170] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.1027'. [ 189.202746][ T8189] netlink: 38831 bytes leftover after parsing attributes in process `syz.5.1033'. [ 189.236558][ T8195] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1035'. [ 189.563949][ T8209] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1040'. [ 191.099181][ T4765] Bluetooth: hci3: command 0x0406 tx timeout [ 191.118413][ T4765] Bluetooth: hci1: command 0x0406 tx timeout [ 191.145031][ T4765] Bluetooth: hci4: command 0x0406 tx timeout [ 191.155192][ T4765] Bluetooth: hci0: command 0x0406 tx timeout [ 191.338637][ T8268] syz.4.1059[8268] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 191.339304][ T8268] syz.4.1059[8268] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 191.534167][ T8279] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 191.581433][ T8279] syzkaller1: linktype set to 777 [ 191.722190][ T8279] sctp: [Deprecated]: syz.2.1062 (pid 8279) Use of int in max_burst socket option deprecated. [ 191.722190][ T8279] Use struct sctp_assoc_value instead [ 192.580036][ T8310] netlink: 'syz.5.1072': attribute type 8 has an invalid length. [ 192.588013][ T8310] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.1072'. [ 192.782791][ T8320] netlink: 'syz.4.1073': attribute type 10 has an invalid length. [ 192.801296][ T8319] netlink: 'syz.1.1074': attribute type 29 has an invalid length. [ 192.865537][ T8320] team0: Device nlmon0 is of different type [ 194.133574][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.140131][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.044253][ T8319] netlink: 'syz.1.1074': attribute type 29 has an invalid length. [ 195.440668][ T8335] netlink: 'syz.2.1081': attribute type 1 has an invalid length. [ 195.458838][ T8335] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.1081'. [ 196.052694][ T8370] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.1092'. [ 196.077085][ T6968] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 196.204296][ T8376] netlink: 'syz.0.1094': attribute type 29 has an invalid length. [ 196.214624][ T8376] netlink: 'syz.0.1094': attribute type 29 has an invalid length. [ 196.571827][ T8383] netlink: 209820 bytes leftover after parsing attributes in process `syz.4.1096'. [ 197.179320][ T8402] netlink: 'syz.1.1103': attribute type 39 has an invalid length. [ 197.228103][ T8402] device veth0_macvtap entered promiscuous mode [ 197.645158][ T8428] netlink: 'syz.4.1113': attribute type 3 has an invalid length. [ 197.680396][ T8425] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1110'. [ 197.733829][ T8433] netlink: 'syz.2.1114': attribute type 10 has an invalid length. [ 197.779477][ T8433] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1114'. [ 197.896311][ T8435] netlink: 'syz.4.1113': attribute type 17 has an invalid length. [ 197.910309][ T8435] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1113'. [ 197.955337][ T8435] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 197.975580][ T8435] net_ratelimit: 773 callbacks suppressed [ 197.975595][ T8435] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 198.028634][ T6982] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 198.142692][ T8455] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.1118'. [ 198.429473][ T8461] netlink: 'syz.5.1120': attribute type 9 has an invalid length. [ 198.448918][ T8461] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.1120'. [ 198.513990][ T8473] netlink: 'syz.1.1124': attribute type 13 has an invalid length. [ 198.557586][ T8473] netlink: 24859 bytes leftover after parsing attributes in process `syz.1.1124'. [ 198.610417][ T8478] netlink: 'syz.2.1126': attribute type 21 has an invalid length. [ 198.673925][ T8478] netlink: 'syz.2.1126': attribute type 6 has an invalid length. [ 198.684798][ T8478] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1126'. [ 198.727542][ T8484] netlink: 'syz.0.1128': attribute type 21 has an invalid length. [ 199.107245][ T8502] netlink: 'syz.5.1132': attribute type 10 has an invalid length. [ 199.233792][ T8502] team0: Port device geneve1 added [ 199.433152][ T8514] netlink: 'syz.0.1135': attribute type 10 has an invalid length. [ 199.473583][ T8514] team0: Device wg1 is of different type [ 199.711633][ T8522] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1140'. [ 199.885186][ T8529] netlink: 169472 bytes leftover after parsing attributes in process `syz.4.1143'. [ 199.962194][ T8536] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1145'. [ 202.022931][ T8621] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 202.075136][ T8621] CPU: 1 PID: 8621 Comm: syz.1.1171 Not tainted syzkaller #0 [ 202.082569][ T8621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 202.092653][ T8621] Call Trace: [ 202.095961][ T8621] [ 202.098923][ T8621] dump_stack_lvl+0x188/0x250 [ 202.103635][ T8621] ? show_regs_print_info+0x20/0x20 [ 202.108871][ T8621] ? load_image+0x400/0x400 [ 202.113417][ T8621] sysfs_warn_dup+0x8a/0xa0 [ 202.117959][ T8621] sysfs_do_create_link_sd+0xc0/0x110 [ 202.123363][ T8621] device_add+0x7f6/0x1000 [ 202.127839][ T8621] wiphy_register+0x1e81/0x2c30 [ 202.132744][ T8621] ? cfg80211_event_work+0x40/0x40 [ 202.137985][ T8621] ? minstrel_ht_alloc+0x808/0x980 [ 202.143143][ T8621] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 202.149395][ T8621] ieee80211_register_hw+0x2aa1/0x3af0 [ 202.154936][ T8621] ? ieee80211_tasklet_handler+0x20/0x20 [ 202.160621][ T8621] ? rcu_is_watching+0x11/0xa0 [ 202.165436][ T8621] ? memset+0x1e/0x40 [ 202.169458][ T8621] ? hrtimer_init+0x10c/0x220 [ 202.174435][ T8621] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 202.180330][ T8621] hwsim_new_radio_nl+0xa6f/0xc40 [ 202.185430][ T8621] genl_rcv_msg+0xcea/0xf90 [ 202.189983][ T8621] ? genl_bind+0x380/0x380 [ 202.194453][ T8621] ? __dev_queue_xmit+0x1cbf/0x2f80 [ 202.199690][ T8621] ? verify_lock_unused+0x140/0x140 [ 202.204946][ T8621] ? kmalloc_large_node+0xf2/0x190 [ 202.210101][ T8621] ? dev_queue_xmit+0x20/0x20 [ 202.214816][ T8621] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 202.221392][ T8621] netlink_rcv_skb+0x1f5/0x440 [ 202.226194][ T8621] ? genl_bind+0x380/0x380 [ 202.230664][ T8621] ? netlink_ack+0xb50/0xb50 [ 202.235303][ T8621] ? __lock_acquire+0x7d10/0x7d10 [ 202.240375][ T8621] ? down_read+0x1aa/0x2e0 [ 202.244835][ T8621] genl_rcv+0x24/0x40 [ 202.248858][ T8621] netlink_unicast+0x774/0x920 [ 202.253668][ T8621] netlink_sendmsg+0x8ba/0xbe0 [ 202.258481][ T8621] ? netlink_getsockopt+0x570/0x570 [ 202.263723][ T8621] ? aa_sock_msg_perm+0x94/0x150 [ 202.268703][ T8621] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 202.274026][ T8621] ? security_socket_sendmsg+0x7c/0xa0 [ 202.279524][ T8621] ? netlink_getsockopt+0x570/0x570 [ 202.284748][ T8621] ____sys_sendmsg+0x5b7/0x8f0 [ 202.289543][ T8621] ? __sys_sendmsg_sock+0x30/0x30 [ 202.294603][ T8621] ? import_iovec+0x6f/0xa0 [ 202.299130][ T8621] ___sys_sendmsg+0x236/0x2e0 [ 202.303846][ T8621] ? __sys_sendmsg+0x2a0/0x2a0 [ 202.308663][ T8621] __se_sys_sendmsg+0x1af/0x290 [ 202.313539][ T8621] ? __x64_sys_sendmsg+0x80/0x80 [ 202.318492][ T8621] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 202.324513][ T8621] ? lockdep_hardirqs_on+0x94/0x140 [ 202.329737][ T8621] do_syscall_64+0x4c/0xa0 [ 202.334170][ T8621] ? clear_bhb_loop+0x30/0x80 [ 202.338865][ T8621] ? clear_bhb_loop+0x30/0x80 [ 202.343551][ T8621] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 202.349478][ T8621] RIP: 0033:0x7fd9124f0e59 [ 202.353916][ T8621] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 202.373544][ T8621] RSP: 002b:00007fd91074a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 202.381993][ T8621] RAX: ffffffffffffffda RBX: 00007fd912769fa0 RCX: 00007fd9124f0e59 [ 202.390018][ T8621] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 202.398004][ T8621] RBP: 00007fd912586d6f R08: 0000000000000000 R09: 0000000000000000 [ 202.405985][ T8621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 202.413970][ T8621] R13: 00007fd91276a038 R14: 00007fd912769fa0 R15: 00007ffe7bdde218 [ 202.421965][ T8621] [ 202.704845][ T8650] __nla_validate_parse: 4 callbacks suppressed [ 202.704883][ T8650] netlink: 14548 bytes leftover after parsing attributes in process `syz.5.1180'. [ 202.963310][ T8659] device sit0 entered promiscuous mode [ 203.356614][ T8675] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.1190'. [ 203.586843][ T8693] device wlan1 entered promiscuous mode [ 203.662968][ T8695] netlink: 208644 bytes leftover after parsing attributes in process `syz.5.1196'. [ 203.699847][ T8695] validate_nla: 5 callbacks suppressed [ 203.699891][ T8695] netlink: 'syz.5.1196': attribute type 1 has an invalid length. [ 203.816709][ T8705] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1197'. [ 204.319850][ T8736] netlink: 'syz.1.1210': attribute type 10 has an invalid length. [ 204.606854][ T8752] netlink: 'syz.5.1215': attribute type 2 has an invalid length. [ 204.638935][ T8752] netlink: 'syz.5.1215': attribute type 11 has an invalid length. [ 204.657381][ T8752] netlink: 198172 bytes leftover after parsing attributes in process `syz.5.1215'. [ 205.445447][ T8770] netlink: 'syz.5.1220': attribute type 21 has an invalid length. [ 205.495349][ T8770] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1220'. [ 206.231746][ T8798] netlink: 192436 bytes leftover after parsing attributes in process `syz.4.1228'. [ 206.301673][ T8798] openvswitch: netlink: IP tunnel attribute has 20476 unknown bytes. [ 206.758179][ T8826] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1234'. [ 206.766406][ T8821] netlink: 'syz.5.1234': attribute type 3 has an invalid length. [ 206.829318][ T8821] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.1234'. [ 207.472191][ T8826] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 207.530498][ T8826] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 207.611067][ T8826] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 207.695856][ T8826] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.703189][ T8826] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.753547][ T8826] bond0 (unregistering): Released all slaves [ 207.813630][ T8841] netlink: 'syz.2.1242': attribute type 12 has an invalid length. [ 207.844607][ T8841] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1242'. [ 207.871269][ T8839] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1241'. [ 207.899845][ T8843] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1240'. [ 208.180288][ T8857] netlink: 'syz.5.1245': attribute type 1 has an invalid length. [ 208.188160][ T8857] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1245'. [ 210.206872][ T8915] bridge0: port 3(batadv0) entered blocking state [ 210.251157][ T8915] bridge0: port 3(batadv0) entered disabled state [ 210.282173][ T8915] device batadv0 entered promiscuous mode [ 210.288485][ T8915] bridge0: port 3(batadv0) entered blocking state [ 210.295066][ T8915] bridge0: port 3(batadv0) entered forwarding state [ 210.343000][ T8912] netlink: 'syz.1.1261': attribute type 6 has an invalid length. [ 210.652194][ T6984] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 210.661525][ T6984] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 210.841173][ T8932] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1268'. [ 210.923762][ T8930] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.1266'. [ 211.046720][ T8930] netlink: 22856 bytes leftover after parsing attributes in process `syz.1.1266'. [ 211.109621][ T8936] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1270'. [ 212.420138][ T8979] sock: sock_timestamping_bind_phc: sock not bind to device [ 213.104655][ T9015] netlink: 212168 bytes leftover after parsing attributes in process `syz.2.1294'. [ 213.301428][ T9017] device syzkaller0 entered promiscuous mode [ 213.357682][ T9022] netlink: 'syz.1.1297': attribute type 4 has an invalid length. [ 213.596044][ T9028] IPv6: Can't replace route, no match found [ 214.208650][ T9057] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 214.284473][ T9057] netlink: 'syz.2.1310': attribute type 1 has an invalid length. [ 214.305750][ T9057] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1310'. [ 214.342137][ T9062] netlink: 'syz.2.1310': attribute type 10 has an invalid length. [ 214.436438][ T9062] team0: Port device geneve1 added [ 215.204290][ T9103] netlink: 'syz.1.1324': attribute type 29 has an invalid length. [ 215.256312][ T9103] netlink: 'syz.1.1324': attribute type 29 has an invalid length. [ 215.343488][ T9103] netlink: 'syz.1.1324': attribute type 10 has an invalid length. [ 215.467654][ T9103] netlink: 209796 bytes leftover after parsing attributes in process `syz.1.1324'. [ 215.511600][ T9103] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 215.600096][ T9125] netlink: 'syz.5.1327': attribute type 3 has an invalid length. [ 215.640488][ T9125] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.1327'. [ 215.983231][ T9138] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1335'. [ 216.235754][ T9153] netlink: 1 bytes leftover after parsing attributes in process `syz.5.1340'. [ 216.698030][ T9174] netlink: 15830 bytes leftover after parsing attributes in process `syz.4.1345'. [ 216.761849][ T9181] FAULT_INJECTION: forcing a failure. [ 216.761849][ T9181] name failslab, interval 1, probability 0, space 0, times 0 [ 216.824509][ T9183] netlink: 'syz.1.1349': attribute type 27 has an invalid length. [ 216.849526][ T9181] CPU: 1 PID: 9181 Comm: syz.5.1348 Not tainted syzkaller #0 [ 216.857067][ T9181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 216.867139][ T9181] Call Trace: [ 216.870434][ T9181] [ 216.873395][ T9181] dump_stack_lvl+0x188/0x250 [ 216.878098][ T9181] ? show_regs_print_info+0x20/0x20 [ 216.883324][ T9181] ? load_image+0x400/0x400 [ 216.887883][ T9181] ? __might_sleep+0xf0/0xf0 [ 216.892499][ T9181] ? __lock_acquire+0x7d10/0x7d10 [ 216.897551][ T9181] ? mark_lock+0x94/0x320 [ 216.901905][ T9181] should_fail+0x38c/0x4c0 [ 216.906362][ T9181] should_failslab+0x5/0x20 [ 216.910909][ T9181] slab_pre_alloc_hook+0x51/0xc0 [ 216.915871][ T9181] __kmalloc+0x6b/0x330 [ 216.920070][ T9181] ? tomoyo_realpath_from_path+0x118/0x610 [ 216.925916][ T9181] tomoyo_realpath_from_path+0x118/0x610 [ 216.931594][ T9181] tomoyo_path_number_perm+0x242/0x660 [ 216.937085][ T9181] ? verify_lock_unused+0x140/0x140 [ 216.942312][ T9181] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 216.947802][ T9181] ? ksys_write+0x1c6/0x260 [ 216.952392][ T9181] security_file_ioctl+0x6c/0xa0 [ 216.957363][ T9181] __se_sys_ioctl+0x48/0x170 [ 216.961974][ T9181] do_syscall_64+0x4c/0xa0 [ 216.966416][ T9181] ? clear_bhb_loop+0x30/0x80 [ 216.971135][ T9181] ? clear_bhb_loop+0x30/0x80 [ 216.975833][ T9181] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 216.981743][ T9181] RIP: 0033:0x7f302ec48e59 [ 216.986200][ T9181] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 217.005825][ T9181] RSP: 002b:00007f302cea2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 217.014263][ T9181] RAX: ffffffffffffffda RBX: 00007f302eec1fa0 RCX: 00007f302ec48e59 [ 217.022312][ T9181] RDX: 0000200000000080 RSI: 00000000000089fb RDI: 0000000000000004 [ 217.030313][ T9181] RBP: 00007f302cea2090 R08: 0000000000000000 R09: 0000000000000000 [ 217.038312][ T9181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.046305][ T9181] R13: 00007f302eec2038 R14: 00007f302eec1fa0 R15: 00007ffe858a0168 [ 217.054337][ T9181] [ 217.335050][ T9181] ERROR: Out of memory at tomoyo_realpath_from_path. [ 217.384283][ T9195] netlink: 'syz.0.1354': attribute type 21 has an invalid length. [ 217.746412][ T9197] netlink: 'syz.1.1355': attribute type 27 has an invalid length. [ 217.901745][ T9213] netlink: 'syz.1.1359': attribute type 21 has an invalid length. [ 217.932357][ T9213] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1359'. [ 217.948975][ T9213] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1359'. [ 218.275773][ T9233] FAULT_INJECTION: forcing a failure. [ 218.275773][ T9233] name failslab, interval 1, probability 0, space 0, times 0 [ 218.301990][ T9234] netlink: 'syz.2.1365': attribute type 6 has an invalid length. [ 218.317499][ T9233] CPU: 0 PID: 9233 Comm: syz.0.1367 Not tainted syzkaller #0 [ 218.325055][ T9233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 218.335159][ T9233] Call Trace: [ 218.338471][ T9233] [ 218.341414][ T9233] dump_stack_lvl+0x188/0x250 [ 218.346122][ T9233] ? show_regs_print_info+0x20/0x20 [ 218.351341][ T9233] ? load_image+0x400/0x400 [ 218.355869][ T9233] ? __might_sleep+0xf0/0xf0 [ 218.360482][ T9233] ? __lock_acquire+0x7d10/0x7d10 [ 218.365532][ T9233] should_fail+0x38c/0x4c0 [ 218.369971][ T9233] should_failslab+0x5/0x20 [ 218.374493][ T9233] slab_pre_alloc_hook+0x51/0xc0 [ 218.379459][ T9233] __kmalloc+0x6b/0x330 [ 218.383633][ T9233] ? tomoyo_encode+0x27e/0x540 [ 218.388412][ T9233] tomoyo_encode+0x27e/0x540 [ 218.393018][ T9233] tomoyo_realpath_from_path+0x5cd/0x610 [ 218.398686][ T9233] tomoyo_path_number_perm+0x242/0x660 [ 218.404176][ T9233] ? verify_lock_unused+0x140/0x140 [ 218.409413][ T9233] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 218.414892][ T9233] ? ksys_write+0x1c6/0x260 [ 218.419482][ T9233] security_file_ioctl+0x6c/0xa0 [ 218.424450][ T9233] __se_sys_ioctl+0x48/0x170 [ 218.429062][ T9233] do_syscall_64+0x4c/0xa0 [ 218.433488][ T9233] ? clear_bhb_loop+0x30/0x80 [ 218.438183][ T9233] ? clear_bhb_loop+0x30/0x80 [ 218.442864][ T9233] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 218.448763][ T9233] RIP: 0033:0x7f4ef17d3e59 [ 218.453188][ T9233] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.472805][ T9233] RSP: 002b:00007f4eefa2d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 218.481227][ T9233] RAX: ffffffffffffffda RBX: 00007f4ef1a4cfa0 RCX: 00007f4ef17d3e59 [ 218.489206][ T9233] RDX: 0000200000000080 RSI: 00000000000089fb RDI: 0000000000000004 [ 218.497192][ T9233] RBP: 00007f4eefa2d090 R08: 0000000000000000 R09: 0000000000000000 [ 218.505170][ T9233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 218.513149][ T9233] R13: 00007f4ef1a4d038 R14: 00007f4ef1a4cfa0 R15: 00007ffc1015f488 [ 218.521148][ T9233] [ 218.557017][ T9233] ERROR: Out of memory at tomoyo_realpath_from_path. [ 218.836217][ T9257] IPv6: Can't replace route, no match found [ 218.878702][ T9256] netlink: 'syz.5.1373': attribute type 25 has an invalid length. [ 218.897499][ T9256] netlink: 'syz.5.1373': attribute type 9 has an invalid length. [ 218.979980][ T9256] -1: renamed from syzkaller0 [ 219.202812][ T9271] FAULT_INJECTION: forcing a failure. [ 219.202812][ T9271] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 219.217157][ T9271] CPU: 1 PID: 9271 Comm: syz.2.1380 Not tainted syzkaller #0 [ 219.224564][ T9271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 219.234666][ T9271] Call Trace: [ 219.237968][ T9271] [ 219.240917][ T9271] dump_stack_lvl+0x188/0x250 [ 219.245633][ T9271] ? show_regs_print_info+0x20/0x20 [ 219.250857][ T9271] ? load_image+0x400/0x400 [ 219.255393][ T9271] ? __lock_acquire+0x7d10/0x7d10 [ 219.260440][ T9271] should_fail+0x38c/0x4c0 [ 219.264877][ T9271] _copy_from_user+0x2e/0x170 [ 219.269577][ T9271] get_user_ifreq+0x67/0x170 [ 219.274192][ T9271] sock_ioctl+0x637/0x710 [ 219.278546][ T9271] ? sock_poll+0x410/0x410 [ 219.282981][ T9271] ? bpf_lsm_file_ioctl+0x5/0x10 [ 219.287938][ T9271] ? security_file_ioctl+0x7c/0xa0 [ 219.293069][ T9271] ? sock_poll+0x410/0x410 [ 219.297501][ T9271] __se_sys_ioctl+0xfa/0x170 [ 219.302104][ T9271] do_syscall_64+0x4c/0xa0 [ 219.306557][ T9271] ? clear_bhb_loop+0x30/0x80 [ 219.311253][ T9271] ? clear_bhb_loop+0x30/0x80 [ 219.315946][ T9271] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 219.321852][ T9271] RIP: 0033:0x7ff8f9050e59 [ 219.326283][ T9271] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.345905][ T9271] RSP: 002b:00007ff8f72aa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 219.354375][ T9271] RAX: ffffffffffffffda RBX: 00007ff8f92c9fa0 RCX: 00007ff8f9050e59 [ 219.362376][ T9271] RDX: 0000200000000080 RSI: 00000000000089fb RDI: 0000000000000004 [ 219.370359][ T9271] RBP: 00007ff8f72aa090 R08: 0000000000000000 R09: 0000000000000000 [ 219.378339][ T9271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 219.386330][ T9271] R13: 00007ff8f92ca038 R14: 00007ff8f92c9fa0 R15: 00007ffee9b4dd88 [ 219.394338][ T9271] [ 219.486768][ T9274] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1381'. [ 219.537699][ T9285] netlink: 'syz.1.1382': attribute type 4 has an invalid length. [ 219.556062][ T9285] netlink: 'syz.1.1382': attribute type 16 has an invalid length. [ 219.669086][ T9285] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1382'. [ 219.993350][ T9322] FAULT_INJECTION: forcing a failure. [ 219.993350][ T9322] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 220.043004][ T9322] CPU: 0 PID: 9322 Comm: syz.4.1395 Not tainted syzkaller #0 [ 220.050469][ T9322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 220.060559][ T9322] Call Trace: [ 220.063869][ T9322] [ 220.066834][ T9322] dump_stack_lvl+0x188/0x250 [ 220.071546][ T9322] ? show_regs_print_info+0x20/0x20 [ 220.076789][ T9322] ? load_image+0x400/0x400 [ 220.081325][ T9322] ? __lock_acquire+0x7d10/0x7d10 [ 220.086387][ T9322] ? __lock_acquire+0x12e8/0x7d10 [ 220.091444][ T9322] should_fail+0x38c/0x4c0 [ 220.095894][ T9322] _copy_from_user+0x2e/0x170 [ 220.100599][ T9322] ipip6_tunnel_siocdevprivate+0x3c5/0x1600 [ 220.106533][ T9322] ? sit_tunnel_xmit+0x2350/0x2350 [ 220.111675][ T9322] ? __mutex_trylock_common+0x155/0x260 [ 220.117262][ T9322] ? rcu_lock_release+0x20/0x20 [ 220.122149][ T9322] ? dev_ioctl+0x5ce/0xe30 [ 220.126593][ T9322] ? __mutex_lock_common+0x465/0x2400 [ 220.132003][ T9322] ? full_name_hash+0x8e/0xe0 [ 220.136721][ T9322] dev_ifsioc+0xa30/0xd50 [ 220.141108][ T9322] ? dev_ioctl+0xe30/0xe30 [ 220.145557][ T9322] ? full_name_hash+0x8e/0xe0 [ 220.150283][ T9322] dev_ioctl+0x5df/0xe30 [ 220.154545][ T9322] ? get_user_ifreq+0xc7/0x170 [ 220.159342][ T9322] sock_ioctl+0x691/0x710 [ 220.163692][ T9322] ? sock_poll+0x410/0x410 [ 220.168149][ T9322] ? bpf_lsm_file_ioctl+0x5/0x10 [ 220.173116][ T9322] ? security_file_ioctl+0x7c/0xa0 [ 220.178261][ T9322] ? sock_poll+0x410/0x410 [ 220.182702][ T9322] __se_sys_ioctl+0xfa/0x170 [ 220.187321][ T9322] do_syscall_64+0x4c/0xa0 [ 220.191773][ T9322] ? clear_bhb_loop+0x30/0x80 [ 220.196491][ T9322] ? clear_bhb_loop+0x30/0x80 [ 220.201195][ T9322] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 220.207117][ T9322] RIP: 0033:0x7f983d0f5e59 [ 220.211552][ T9322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 220.231183][ T9322] RSP: 002b:00007f983b34f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 220.239617][ T9322] RAX: ffffffffffffffda RBX: 00007f983d36efa0 RCX: 00007f983d0f5e59 [ 220.247652][ T9322] RDX: 0000200000000080 RSI: 00000000000089fb RDI: 0000000000000004 [ 220.255652][ T9322] RBP: 00007f983b34f090 R08: 0000000000000000 R09: 0000000000000000 [ 220.263654][ T9322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.271667][ T9322] R13: 00007f983d36f038 R14: 00007f983d36efa0 R15: 00007ffe090e2518 [ 220.279692][ T9322] [ 220.371424][ T9325] netlink: 'syz.2.1393': attribute type 11 has an invalid length. [ 220.463559][ T9325] netlink: 184256 bytes leftover after parsing attributes in process `syz.2.1393'. [ 220.742436][ T9342] netlink: 'syz.5.1401': attribute type 9 has an invalid length. [ 220.789856][ T9342] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.1401'. [ 220.809897][ T9347] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1403'. [ 221.068570][ T9361] FAULT_INJECTION: forcing a failure. [ 221.068570][ T9361] name failslab, interval 1, probability 0, space 0, times 0 [ 221.138942][ T9361] CPU: 0 PID: 9361 Comm: syz.0.1409 Not tainted syzkaller #0 [ 221.146385][ T9361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 221.156626][ T9361] Call Trace: [ 221.159925][ T9361] [ 221.162876][ T9361] dump_stack_lvl+0x188/0x250 [ 221.167579][ T9361] ? show_regs_print_info+0x20/0x20 [ 221.172798][ T9361] ? load_image+0x400/0x400 [ 221.177320][ T9361] ? __lock_acquire+0x7d10/0x7d10 [ 221.182378][ T9361] should_fail+0x38c/0x4c0 [ 221.186820][ T9361] should_failslab+0x5/0x20 [ 221.191317][ T9361] slab_pre_alloc_hook+0x51/0xc0 [ 221.196272][ T9361] kmem_cache_alloc_node+0x47/0x2d0 [ 221.201495][ T9361] ? __alloc_skb+0xf4/0x750 [ 221.206040][ T9361] __alloc_skb+0xf4/0x750 [ 221.210412][ T9361] rtmsg_ifinfo_build_skb+0x80/0x180 [ 221.215723][ T9361] rtmsg_ifinfo+0x71/0x120 [ 221.220166][ T9361] netdev_state_change+0xf4/0x160 [ 221.225225][ T9361] ? netdev_features_change+0xd0/0xd0 [ 221.230630][ T9361] ? ipip6_tunnel_update_6rd+0x37c/0x610 [ 221.236296][ T9361] ipip6_tunnel_update_6rd+0x471/0x610 [ 221.241787][ T9361] ? ipip6_tunnel_link+0x1d0/0x1d0 [ 221.246930][ T9361] ? _copy_from_user+0x111/0x170 [ 221.251888][ T9361] ipip6_tunnel_siocdevprivate+0x7f6/0x1600 [ 221.257807][ T9361] ? sit_tunnel_xmit+0x2350/0x2350 [ 221.262937][ T9361] ? __mutex_trylock_common+0x155/0x260 [ 221.268522][ T9361] ? rcu_lock_release+0x20/0x20 [ 221.273436][ T9361] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 221.280065][ T9361] ? dev_ioctl+0x5ce/0xe30 [ 221.284539][ T9361] ? __mutex_lock_common+0x465/0x2400 [ 221.289948][ T9361] ? full_name_hash+0x8e/0xe0 [ 221.294656][ T9361] dev_ifsioc+0xa30/0xd50 [ 221.299013][ T9361] ? dev_ioctl+0xe30/0xe30 [ 221.303448][ T9361] ? full_name_hash+0x8e/0xe0 [ 221.308157][ T9361] dev_ioctl+0x5df/0xe30 [ 221.312428][ T9361] ? get_user_ifreq+0xc7/0x170 [ 221.317212][ T9361] sock_ioctl+0x691/0x710 [ 221.321563][ T9361] ? sock_poll+0x410/0x410 [ 221.326008][ T9361] ? bpf_lsm_file_ioctl+0x5/0x10 [ 221.330964][ T9361] ? security_file_ioctl+0x7c/0xa0 [ 221.336095][ T9361] ? sock_poll+0x410/0x410 [ 221.340530][ T9361] __se_sys_ioctl+0xfa/0x170 [ 221.345179][ T9361] do_syscall_64+0x4c/0xa0 [ 221.349723][ T9361] ? clear_bhb_loop+0x30/0x80 [ 221.354432][ T9361] ? clear_bhb_loop+0x30/0x80 [ 221.359146][ T9361] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 221.365063][ T9361] RIP: 0033:0x7f4ef17d3e59 [ 221.369515][ T9361] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.389148][ T9361] RSP: 002b:00007f4eefa2d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 221.397590][ T9361] RAX: ffffffffffffffda RBX: 00007f4ef1a4cfa0 RCX: 00007f4ef17d3e59 [ 221.405590][ T9361] RDX: 0000200000000080 RSI: 00000000000089fb RDI: 0000000000000004 [ 221.413578][ T9361] RBP: 00007f4eefa2d090 R08: 0000000000000000 R09: 0000000000000000 [ 221.421568][ T9361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.429557][ T9361] R13: 00007f4ef1a4d038 R14: 00007f4ef1a4cfa0 R15: 00007ffc1015f488 [ 221.437571][ T9361] [ 221.599342][ T9370] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1411'. [ 221.817417][ T4789] Bluetooth: hci5: command 0x0406 tx timeout [ 221.959135][ T9396] netlink: 'syz.2.1419': attribute type 7 has an invalid length. [ 222.085967][ T9396] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1419'. [ 222.108303][ T9396] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 222.174299][ T9401] netlink: 'syz.4.1421': attribute type 10 has an invalid length. [ 222.329627][ T9401] team0: Port device wlan1 added [ 222.348074][ T9412] netlink: 'syz.4.1421': attribute type 21 has an invalid length. [ 222.384944][ T9412] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1421'. [ 222.402738][ T9412] netlink: 'syz.4.1421': attribute type 4 has an invalid length. [ 222.414570][ T9412] netlink: 'syz.4.1421': attribute type 5 has an invalid length. [ 222.423961][ T9412] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1421'. [ 222.443067][ T9400] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 222.445240][ T9420] FAULT_INJECTION: forcing a failure. [ 222.445240][ T9420] name failslab, interval 1, probability 0, space 0, times 0 [ 222.511646][ T9420] CPU: 1 PID: 9420 Comm: syz.2.1425 Not tainted syzkaller #0 [ 222.519162][ T9420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 222.529238][ T9420] Call Trace: [ 222.532535][ T9420] [ 222.535520][ T9420] dump_stack_lvl+0x188/0x250 [ 222.540230][ T9420] ? show_regs_print_info+0x20/0x20 [ 222.545461][ T9420] ? load_image+0x400/0x400 [ 222.549991][ T9420] ? __might_sleep+0xf0/0xf0 [ 222.554608][ T9420] ? __lock_acquire+0x7d10/0x7d10 [ 222.559669][ T9420] should_fail+0x38c/0x4c0 [ 222.564117][ T9420] should_failslab+0x5/0x20 [ 222.568647][ T9420] slab_pre_alloc_hook+0x51/0xc0 [ 222.573623][ T9420] __kmalloc_node_track_caller+0x68/0x3a0 [ 222.579367][ T9420] ? rtmsg_ifinfo_build_skb+0x80/0x180 [ 222.584854][ T9420] ? kmem_cache_alloc_node+0x162/0x2d0 [ 222.590340][ T9420] ? __alloc_skb+0xf4/0x750 [ 222.594874][ T9420] ? rtmsg_ifinfo_build_skb+0x80/0x180 [ 222.600367][ T9420] __alloc_skb+0x22c/0x750 [ 222.604826][ T9420] rtmsg_ifinfo_build_skb+0x80/0x180 [ 222.610145][ T9420] rtmsg_ifinfo+0x71/0x120 [ 222.614605][ T9420] netdev_state_change+0xf4/0x160 [ 222.619662][ T9420] ? netdev_features_change+0xd0/0xd0 [ 222.625071][ T9420] ? verify_lock_unused+0x140/0x140 [ 222.630321][ T9420] ? ipip6_tunnel_update_6rd+0x37c/0x610 [ 222.636004][ T9420] ipip6_tunnel_update_6rd+0x471/0x610 [ 222.641512][ T9420] ? ipip6_tunnel_link+0x1d0/0x1d0 [ 222.646673][ T9420] ? _copy_from_user+0x111/0x170 [ 222.651646][ T9420] ipip6_tunnel_siocdevprivate+0x7f6/0x1600 [ 222.657563][ T9420] ? rcu_lock_acquire+0x30/0x30 [ 222.662455][ T9420] ? __mutex_lock_common+0x1552/0x2400 [ 222.667941][ T9420] ? sit_tunnel_xmit+0x2350/0x2350 [ 222.673101][ T9420] ? do_raw_spin_lock+0x128/0x2f0 [ 222.678166][ T9420] ? __rwlock_init+0x140/0x140 [ 222.682968][ T9420] ? do_raw_spin_unlock+0x11d/0x230 [ 222.688209][ T9420] ? __mutex_lock_common+0x155c/0x2400 [ 222.693704][ T9420] ? full_name_hash+0x8e/0xe0 [ 222.698421][ T9420] dev_ifsioc+0xa30/0xd50 [ 222.702778][ T9420] ? dev_ioctl+0xe30/0xe30 [ 222.707216][ T9420] ? full_name_hash+0x8e/0xe0 [ 222.711930][ T9420] dev_ioctl+0x5df/0xe30 [ 222.716221][ T9420] ? get_user_ifreq+0xc7/0x170 [ 222.721017][ T9420] sock_ioctl+0x691/0x710 [ 222.725376][ T9420] ? sock_poll+0x410/0x410 [ 222.729827][ T9420] ? bpf_lsm_file_ioctl+0x5/0x10 [ 222.734789][ T9420] ? security_file_ioctl+0x7c/0xa0 [ 222.739935][ T9420] ? sock_poll+0x410/0x410 [ 222.744391][ T9420] __se_sys_ioctl+0xfa/0x170 [ 222.749013][ T9420] do_syscall_64+0x4c/0xa0 [ 222.753494][ T9420] ? clear_bhb_loop+0x30/0x80 [ 222.758196][ T9420] ? clear_bhb_loop+0x30/0x80 [ 222.762911][ T9420] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 222.768827][ T9420] RIP: 0033:0x7ff8f9050e59 [ 222.773259][ T9420] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 222.792885][ T9420] RSP: 002b:00007ff8f72aa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 222.801332][ T9420] RAX: ffffffffffffffda RBX: 00007ff8f92c9fa0 RCX: 00007ff8f9050e59 [ 222.809341][ T9420] RDX: 0000200000000080 RSI: 00000000000089fb RDI: 0000000000000004 [ 222.817335][ T9420] RBP: 00007ff8f72aa090 R08: 0000000000000000 R09: 0000000000000000 [ 222.825327][ T9420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.833325][ T9420] R13: 00007ff8f92ca038 R14: 00007ff8f92c9fa0 R15: 00007ffee9b4dd88 [ 222.841341][ T9420] [ 223.132473][ T9443] netlink: 'syz.2.1433': attribute type 10 has an invalid length. [ 223.159595][ T9443] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.1433'. [ 223.391283][ T9461] FAULT_INJECTION: forcing a failure. [ 223.391283][ T9461] name failslab, interval 1, probability 0, space 0, times 0 [ 223.428615][ T9461] CPU: 0 PID: 9461 Comm: syz.0.1438 Not tainted syzkaller #0 [ 223.436049][ T9461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 223.446124][ T9461] Call Trace: [ 223.449421][ T9461] [ 223.452428][ T9461] dump_stack_lvl+0x188/0x250 [ 223.457147][ T9461] ? show_regs_print_info+0x20/0x20 [ 223.462370][ T9461] ? load_image+0x400/0x400 [ 223.466894][ T9461] ? skb_trim+0x7f/0x190 [ 223.471145][ T9461] ? rtnl_fill_prop_list+0x225/0x300 [ 223.476463][ T9461] should_fail+0x38c/0x4c0 [ 223.480895][ T9461] ? netlink_trim+0x180/0x220 [ 223.485584][ T9461] should_failslab+0x5/0x20 [ 223.490090][ T9461] slab_pre_alloc_hook+0x51/0xc0 [ 223.495052][ T9461] ? netlink_trim+0x180/0x220 [ 223.499756][ T9461] __kmalloc_node_track_caller+0x68/0x3a0 [ 223.505480][ T9461] ? netlink_trim+0x180/0x220 [ 223.510164][ T9461] ? netlink_trim+0x180/0x220 [ 223.514846][ T9461] pskb_expand_head+0x127/0x10f0 [ 223.519811][ T9461] netlink_trim+0x180/0x220 [ 223.524343][ T9461] netlink_broadcast_filtered+0x7c/0x1170 [ 223.530126][ T9461] ? rtmsg_ifinfo_build_skb+0xdf/0x180 [ 223.535610][ T9461] nlmsg_notify+0xec/0x1a0 [ 223.540044][ T9461] netdev_state_change+0xf4/0x160 [ 223.545076][ T9461] ? netdev_features_change+0xd0/0xd0 [ 223.550471][ T9461] ? verify_lock_unused+0x140/0x140 [ 223.555716][ T9461] ? ipip6_tunnel_update_6rd+0x37c/0x610 [ 223.561361][ T9461] ipip6_tunnel_update_6rd+0x471/0x610 [ 223.566840][ T9461] ? ipip6_tunnel_link+0x1d0/0x1d0 [ 223.571978][ T9461] ? _copy_from_user+0x111/0x170 [ 223.576928][ T9461] ipip6_tunnel_siocdevprivate+0x7f6/0x1600 [ 223.582890][ T9461] ? __mutex_lock_common+0x1552/0x2400 [ 223.588364][ T9461] ? sit_tunnel_xmit+0x2350/0x2350 [ 223.593486][ T9461] ? do_raw_spin_lock+0x128/0x2f0 [ 223.598518][ T9461] ? __rwlock_init+0x140/0x140 [ 223.603289][ T9461] ? do_raw_spin_unlock+0x11d/0x230 [ 223.608532][ T9461] ? __mutex_lock_common+0x155c/0x2400 [ 223.614043][ T9461] ? full_name_hash+0x8e/0xe0 [ 223.618756][ T9461] dev_ifsioc+0xa30/0xd50 [ 223.623096][ T9461] ? dev_ioctl+0xe30/0xe30 [ 223.627534][ T9461] ? full_name_hash+0x8e/0xe0 [ 223.632262][ T9461] dev_ioctl+0x5df/0xe30 [ 223.636521][ T9461] ? get_user_ifreq+0xc7/0x170 [ 223.641288][ T9461] sock_ioctl+0x691/0x710 [ 223.645641][ T9461] ? sock_poll+0x410/0x410 [ 223.650090][ T9461] ? bpf_lsm_file_ioctl+0x5/0x10 [ 223.655057][ T9461] ? security_file_ioctl+0x7c/0xa0 [ 223.660183][ T9461] ? sock_poll+0x410/0x410 [ 223.664608][ T9461] __se_sys_ioctl+0xfa/0x170 [ 223.669212][ T9461] do_syscall_64+0x4c/0xa0 [ 223.673630][ T9461] ? clear_bhb_loop+0x30/0x80 [ 223.678307][ T9461] ? clear_bhb_loop+0x30/0x80 [ 223.683004][ T9461] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 223.688904][ T9461] RIP: 0033:0x7f4ef17d3e59 [ 223.693328][ T9461] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 223.712945][ T9461] RSP: 002b:00007f4eefa2d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 223.721367][ T9461] RAX: ffffffffffffffda RBX: 00007f4ef1a4cfa0 RCX: 00007f4ef17d3e59 [ 223.729385][ T9461] RDX: 0000200000000080 RSI: 00000000000089fb RDI: 0000000000000004 [ 223.737364][ T9461] RBP: 00007f4eefa2d090 R08: 0000000000000000 R09: 0000000000000000 [ 223.745356][ T9461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 223.753331][ T9461] R13: 00007f4ef1a4d038 R14: 00007f4ef1a4cfa0 R15: 00007ffc1015f488 [ 223.761316][ T9461] [ 223.930687][ T9467] netlink: 'syz.1.1439': attribute type 3 has an invalid length. [ 224.069228][ T9478] netlink: 'syz.2.1442': attribute type 23 has an invalid length. [ 224.534511][ T9500] netlink: 'syz.2.1449': attribute type 1 has an invalid length. [ 224.557568][ T9500] __nla_validate_parse: 1 callbacks suppressed [ 224.557583][ T9500] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1449'. [ 224.626817][ T9501] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1449'. [ 224.672220][ T9507] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1451'. [ 224.690256][ T6984] wlan1: Trigger new scan to find an IBSS to join [ 225.049262][ T9528] sctp: [Deprecated]: syz.0.1458 (pid 9528) Use of struct sctp_assoc_value in delayed_ack socket option. [ 225.049262][ T9528] Use struct sctp_sack_info instead [ 225.183104][ T9528] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1458'. [ 225.581917][ T9561] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1467'. [ 225.752706][ T9568] validate_nla: 6 callbacks suppressed [ 225.752727][ T9568] netlink: 'syz.4.1469': attribute type 46 has an invalid length. [ 225.796549][ T9568] netlink: 55 bytes leftover after parsing attributes in process `syz.4.1469'. [ 225.832080][ T9568] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.1469'. [ 226.301292][ T9599] Q6`Ҙ: renamed from lo [ 226.333071][ T9599] netlink: 'syz.4.1477': attribute type 21 has an invalid length. [ 226.390117][ T9599] netlink: 'syz.4.1477': attribute type 10 has an invalid length. [ 226.440653][ T9614] netlink: 'syz.2.1483': attribute type 3 has an invalid length. [ 226.492524][ T9614] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1483'. [ 226.605388][ T9599] device veth0_vlan left promiscuous mode [ 226.658057][ T9599] device veth0_vlan entered promiscuous mode [ 226.733818][ T9599] team0: Device veth0_vlan failed to register rx_handler [ 226.854919][ T9617] netlink: 'syz.4.1477': attribute type 10 has an invalid length. [ 226.890933][ T9617] team0: Port device wlan1 removed [ 226.897074][ T9617] batman_adv: batadv0: Adding interface: wlan1 [ 226.903412][ T9617] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.929305][ T9617] batman_adv: batadv0: Not using interface wlan1 (retrying later): interface not active [ 227.043119][ T9634] netlink: 38831 bytes leftover after parsing attributes in process `syz.2.1487'. [ 227.248989][ T9642] netlink: 'syz.0.1489': attribute type 10 has an invalid length. [ 227.288242][ T9642] netlink: 'syz.0.1489': attribute type 19 has an invalid length. [ 227.298482][ T9642] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1489'. [ 227.354724][ T9644] netlink: 'syz.0.1489': attribute type 10 has an invalid length. [ 227.426977][ T9644] netlink: 'syz.0.1489': attribute type 19 has an invalid length. [ 227.478874][ T9646] netlink: 'syz.0.1489': attribute type 10 has an invalid length. [ 227.657954][ T9661] team0: Port device hsr_slave_0 added [ 228.156514][ T9681] device syzkaller0 entered promiscuous mode [ 228.719853][ T9701] device bridge_slave_1 left promiscuous mode [ 228.733966][ T9701] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.791508][ T9701] device bridge_slave_0 left promiscuous mode [ 228.820129][ T9701] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.054768][ T6984] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 230.266483][ T9766] __nla_validate_parse: 4 callbacks suppressed [ 230.266499][ T9766] netlink: 54695 bytes leftover after parsing attributes in process `syz.4.1524'. [ 230.378644][ T9771] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1526'. [ 230.986834][ T9797] validate_nla: 5 callbacks suppressed [ 230.986852][ T9797] netlink: 'syz.5.1533': attribute type 10 has an invalid length. [ 231.448111][ T9809] netlink: 'syz.4.1536': attribute type 27 has an invalid length. [ 231.536882][ T9809] bond0: (slave bond_slave_0): Releasing backup interface [ 231.549570][ T9809] device bond_slave_0 left promiscuous mode [ 231.797450][ T9818] bridge0: port 3(batadv0) entered disabled state [ 231.804216][ T9818] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.979066][ T9826] netlink: 763 bytes leftover after parsing attributes in process `syz.4.1542'. [ 232.548409][ T9846] netlink: 'syz.4.1549': attribute type 21 has an invalid length. [ 232.749975][ T9849] netlink: 'syz.4.1550': attribute type 46 has an invalid length. [ 232.830203][ T9849] netlink: 55 bytes leftover after parsing attributes in process `syz.4.1550'. [ 233.496187][ T9843] delete_channel: no stack [ 233.607890][ T9877] netlink: 'syz.4.1559': attribute type 21 has an invalid length. [ 233.642532][ T9877] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1559'. [ 233.684601][ T9877] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1559'. [ 233.753717][ T9881] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1558'. [ 233.864588][ T9878] netlink: 'syz.0.1558': attribute type 10 has an invalid length. [ 234.826568][ T9918] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1571'. [ 235.015204][ T9931] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.1576'. [ 235.072424][ T9931] openvswitch: netlink: Key 29 has unexpected len 3064 expected 0 [ 235.555783][ T9957] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1581'. [ 235.828098][ T9972] delete_channel: no stack [ 235.840755][ T9972] delete_channel: no stack [ 236.078284][ T9988] netlink: 'syz.1.1588': attribute type 4 has an invalid length. [ 236.098191][ T9988] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1588'. [ 237.254665][T10034] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1603'. [ 237.654155][T10054] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1610'. [ 237.806997][T10061] netlink: 65039 bytes leftover after parsing attributes in process `syz.5.1612'. [ 237.914945][T10068] netlink: 'syz.0.1614': attribute type 3 has an invalid length. [ 237.938860][T10068] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1614'. [ 237.969900][T10063] device pim6reg1 entered promiscuous mode [ 238.022361][T10071] netlink: 'syz.1.1615': attribute type 5 has an invalid length. [ 238.683803][T10092] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1621'. [ 239.130083][T10108] netlink: 16410 bytes leftover after parsing attributes in process `syz.5.1626'. [ 239.242904][T10112] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1626'. [ 239.524444][T10090] delete_channel: no stack [ 240.007027][T10122] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.1629'. [ 240.081749][T10115] Q6`Ҙ: renamed from lo [ 240.136818][T10122] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 240.176449][T10122] CPU: 1 PID: 10122 Comm: syz.5.1629 Not tainted syzkaller #0 [ 240.184010][T10122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 240.194115][T10122] Call Trace: [ 240.197435][T10122] [ 240.200396][T10122] dump_stack_lvl+0x188/0x250 [ 240.205128][T10122] ? show_regs_print_info+0x20/0x20 [ 240.210381][T10122] ? load_image+0x400/0x400 [ 240.214985][T10122] sysfs_warn_dup+0x8a/0xa0 [ 240.219545][T10122] sysfs_do_create_link_sd+0xc0/0x110 [ 240.224971][T10122] device_add+0x7f6/0x1000 [ 240.229485][T10122] wiphy_register+0x1e81/0x2c30 [ 240.234456][T10122] ? cfg80211_event_work+0x40/0x40 [ 240.239622][T10122] ? minstrel_ht_alloc+0x808/0x980 [ 240.244809][T10122] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 240.250950][T10122] ieee80211_register_hw+0x2aa1/0x3af0 [ 240.256519][T10122] ? ieee80211_tasklet_handler+0x20/0x20 [ 240.262215][T10122] ? rcu_is_watching+0x11/0xa0 [ 240.267031][T10122] ? memset+0x1e/0x40 [ 240.271141][T10122] ? hrtimer_init+0x10c/0x220 [ 240.275885][T10122] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 240.281746][T10122] hwsim_new_radio_nl+0xa6f/0xc40 [ 240.286894][T10122] genl_rcv_msg+0xcea/0xf90 [ 240.291491][T10122] ? genl_bind+0x380/0x380 [ 240.295985][T10122] ? perf_trace_run_bpf_submit+0x124/0x1c0 [ 240.301845][T10122] ? verify_lock_unused+0x140/0x140 [ 240.307133][T10122] ? perf_trace_lock_acquire+0x340/0x3e0 [ 240.312868][T10122] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 240.319504][T10122] ? perf_trace_lock+0xe4/0x390 [ 240.324401][T10122] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 240.331018][T10122] netlink_rcv_skb+0x1f5/0x440 [ 240.335819][T10122] ? genl_bind+0x380/0x380 [ 240.340288][T10122] ? netlink_ack+0xb50/0xb50 [ 240.344938][T10122] ? __lock_acquire+0x7d10/0x7d10 [ 240.350034][T10122] ? down_read+0x1aa/0x2e0 [ 240.354514][T10122] genl_rcv+0x24/0x40 [ 240.358538][T10122] netlink_unicast+0x774/0x920 [ 240.363377][T10122] netlink_sendmsg+0x8ba/0xbe0 [ 240.368204][T10122] ? netlink_getsockopt+0x570/0x570 [ 240.373475][T10122] ? aa_sock_msg_perm+0x94/0x150 [ 240.378469][T10122] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 240.383790][T10122] ? security_socket_sendmsg+0x7c/0xa0 [ 240.389303][T10122] ? netlink_getsockopt+0x570/0x570 [ 240.394558][T10122] ____sys_sendmsg+0x5b7/0x8f0 [ 240.399452][T10122] ? __sys_sendmsg_sock+0x30/0x30 [ 240.404570][T10122] ? import_iovec+0x6f/0xa0 [ 240.409143][T10122] ___sys_sendmsg+0x236/0x2e0 [ 240.413910][T10122] ? __sys_sendmsg+0x2a0/0x2a0 [ 240.418882][T10122] __se_sys_sendmsg+0x1af/0x290 [ 240.423788][T10122] ? __x64_sys_sendmsg+0x80/0x80 [ 240.428781][T10122] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 240.434879][T10122] ? lockdep_hardirqs_on+0x94/0x140 [ 240.440144][T10122] do_syscall_64+0x4c/0xa0 [ 240.444601][T10122] ? clear_bhb_loop+0x30/0x80 [ 240.449350][T10122] ? clear_bhb_loop+0x30/0x80 [ 240.454090][T10122] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 240.460039][T10122] RIP: 0033:0x7f302ec48e59 [ 240.464499][T10122] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 240.484154][T10122] RSP: 002b:00007f302ce60028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 240.492676][T10122] RAX: ffffffffffffffda RBX: 00007f302eec2180 RCX: 00007f302ec48e59 [ 240.500679][T10122] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 240.508680][T10122] RBP: 00007f302ecded6f R08: 0000000000000000 R09: 0000000000000000 [ 240.516685][T10122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 240.524705][T10122] R13: 00007f302eec2218 R14: 00007f302eec2180 R15: 00007ffe858a0168 [ 240.532786][T10122] [ 240.935818][T10127] netlink: 'syz.5.1631': attribute type 10 has an invalid length. [ 240.944528][T10127] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.976027][T10127] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 242.136455][T10146] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 244.203940][T10206] netlink: 'syz.1.1658': attribute type 29 has an invalid length. [ 244.239462][T10206] netlink: 'syz.1.1658': attribute type 3 has an invalid length. [ 244.247390][T10206] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1658'. [ 245.159268][T10233] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1665'. [ 245.168445][T10233] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 245.533595][T10240] netlink: 'syz.1.1667': attribute type 15 has an invalid length. [ 245.580712][T10240] netlink: 'syz.1.1667': attribute type 7 has an invalid length. [ 245.639225][T10240] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1667'. [ 246.626358][T10268] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.1678'. [ 246.724476][T10268] netlink: 'syz.4.1678': attribute type 1 has an invalid length. [ 246.772915][T10268] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.1678'. [ 246.787929][T10274] netlink: 'syz.4.1678': attribute type 29 has an invalid length. [ 246.827202][T10274] netlink: 'syz.4.1678': attribute type 29 has an invalid length. [ 248.203956][T10302] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1687'. [ 248.282714][T10302] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 248.729448][T10319] netlink: 'syz.2.1692': attribute type 29 has an invalid length. [ 248.781800][T10319] netlink: 'syz.2.1692': attribute type 29 has an invalid length. [ 248.807112][T10324] netlink: 'syz.2.1692': attribute type 29 has an invalid length. [ 248.894328][T10319] netlink: 205320 bytes leftover after parsing attributes in process `syz.2.1692'. [ 248.945654][T10324] netlink: 14536 bytes leftover after parsing attributes in process `syz.2.1692'. [ 249.087830][T10333] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1698'. [ 249.597204][T10353] validate_nla: 3 callbacks suppressed [ 249.597234][T10353] netlink: 'syz.4.1704': attribute type 3 has an invalid length. [ 249.643388][T10353] netlink: 13435 bytes leftover after parsing attributes in process `syz.4.1704'. [ 250.317920][T10374] netlink: 'syz.5.1710': attribute type 29 has an invalid length. [ 250.364065][T10381] netlink: 'syz.1.1709': attribute type 3 has an invalid length. [ 250.402435][T10374] netlink: 'syz.5.1710': attribute type 29 has an invalid length. [ 250.498163][T10383] netlink: 'syz.5.1710': attribute type 4 has an invalid length. [ 250.535546][T10381] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1709'. [ 250.699795][T10383] netlink: 206236 bytes leftover after parsing attributes in process `syz.5.1710'. [ 250.710181][T10382] netlink: 'syz.5.1710': attribute type 29 has an invalid length. [ 251.953751][T10438] netlink: 'syz.1.1714': attribute type 10 has an invalid length. [ 252.084524][T10455] netlink: 'syz.1.1714': attribute type 9 has an invalid length. [ 252.190601][T10455] netlink: 184904 bytes leftover after parsing attributes in process `syz.1.1714'. [ 252.317023][T10438] team0: Device hsr_slave_0 failed to register rx_handler [ 253.019376][T10482] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1726'. [ 253.121385][T10489] netlink: 'syz.4.1726': attribute type 9 has an invalid length. [ 253.152099][T10489] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1726'. [ 253.168920][T10487] netlink: 'syz.1.1724': attribute type 29 has an invalid length. [ 253.307221][T10492] netlink: 206236 bytes leftover after parsing attributes in process `syz.1.1724'. [ 253.321242][T10493] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1726'. [ 253.411834][T10487] netlink: 14536 bytes leftover after parsing attributes in process `syz.1.1724'. [ 253.964359][T10502] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1733'. [ 255.571715][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.578258][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.337919][T10574] validate_nla: 6 callbacks suppressed [ 256.337945][T10574] netlink: 'syz.5.1751': attribute type 15 has an invalid length. [ 256.402416][T10576] netlink: 'syz.1.1752': attribute type 21 has an invalid length. [ 256.450335][T10576] __nla_validate_parse: 4 callbacks suppressed [ 256.450351][T10576] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1752'. [ 256.607228][T10570] netlink: 'syz.5.1751': attribute type 10 has an invalid length. [ 257.280140][T10579] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1754'. [ 257.842163][T10610] netlink: 'syz.5.1762': attribute type 4 has an invalid length. [ 257.869151][T10610] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1762'. [ 258.603940][T10628] netlink: 'syz.2.1769': attribute type 10 has an invalid length. [ 258.995205][T10628] team0 (unregistering): Port device team_slave_0 removed [ 259.063665][T10628] team0 (unregistering): Port device team_slave_1 removed [ 259.144274][T10628] team0 (unregistering): Port device geneve1 removed [ 259.175400][T10631] netlink: 'syz.4.1770': attribute type 5 has an invalid length. [ 259.506487][T10649] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.525893][T10649] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.580148][T10649] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 259.609424][T10649] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.651506][T10649] batman_adv: batadv0: Removing interface: wlan1 [ 259.814235][T10656] netlink: 'syz.5.1777': attribute type 9 has an invalid length. [ 259.909228][T10656] netlink: 126588 bytes leftover after parsing attributes in process `syz.5.1777'. [ 260.619526][T10672] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1781'. [ 260.668786][T10672] tc_dump_action: action bad kind [ 260.688400][T10673] delete_channel: no stack [ 260.722024][T10676] netlink: 'syz.5.1784': attribute type 10 has an invalid length. [ 260.744943][T10676] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1784'. [ 260.765235][T10676] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 260.797317][T10676] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 260.875414][T10679] netlink: 'syz.2.1785': attribute type 10 has an invalid length. [ 260.889111][T10679] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.1785'. [ 260.968246][T10680] netlink: 'syz.2.1785': attribute type 2 has an invalid length. [ 260.994660][T10679] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1785'. [ 261.126849][T10682] netlink: 55 bytes leftover after parsing attributes in process `syz.5.1786'. [ 261.475251][T10686] validate_nla: 1 callbacks suppressed [ 261.475265][T10686] netlink: 'syz.4.1787': attribute type 6 has an invalid length. [ 261.514512][T10686] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1787'. [ 262.004742][T10712] netlink: 'syz.2.1794': attribute type 21 has an invalid length. [ 262.035159][T10712] netlink: 'syz.2.1794': attribute type 1 has an invalid length. [ 262.288274][T10720] netlink: 63763 bytes leftover after parsing attributes in process `syz.2.1797'. [ 262.633823][T10725] device syzkaller0 entered promiscuous mode [ 262.664429][T10729] netlink: 'syz.4.1800': attribute type 29 has an invalid length. [ 262.705573][T10729] netlink: 'syz.4.1800': attribute type 29 has an invalid length. [ 262.715221][T10730] netlink: 'syz.4.1800': attribute type 29 has an invalid length. [ 262.725297][T10729] netlink: 'syz.4.1800': attribute type 29 has an invalid length. [ 262.736461][T10729] netlink: 'syz.4.1800': attribute type 29 has an invalid length. [ 263.462785][T10741] netlink: 'syz.4.1805': attribute type 3 has an invalid length. [ 263.478909][T10741] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1805'. [ 263.749542][T10753] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 263.760586][T10753] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 263.824300][T10753] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 263.929281][T10753] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 264.028518][T10753] bridge0: port 3(batadv0) entered disabled state [ 264.099876][T10753] device batadv0 left promiscuous mode [ 264.112620][T10753] bridge0: port 3(batadv0) entered disabled state [ 264.249155][T10768] netlink: 207508 bytes leftover after parsing attributes in process `syz.5.1813'. [ 265.416429][T10799] netlink: 'syz.2.1821': attribute type 2 has an invalid length. [ 265.450391][T10799] netlink: 119 bytes leftover after parsing attributes in process `syz.2.1821'. [ 266.945602][T10884] device syzkaller0 entered promiscuous mode [ 266.997186][T10887] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1841'. [ 267.061858][T10887] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 267.118423][T10887] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 267.522997][T10916] validate_nla: 1 callbacks suppressed [ 267.523014][T10916] netlink: 'syz.5.1849': attribute type 10 has an invalid length. [ 267.824265][T10932] netlink: 'syz.1.1851': attribute type 10 has an invalid length. [ 267.863837][T10932] team0: Port device virt_wifi0 added [ 268.771800][T10980] netlink: 'syz.4.1865': attribute type 15 has an invalid length. [ 268.783212][T10980] netlink: 'syz.4.1865': attribute type 7 has an invalid length. [ 269.631670][T11008] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1874'. [ 270.657763][T11040] netlink: 'syz.1.1887': attribute type 29 has an invalid length. [ 270.678678][T11040] netlink: 'syz.1.1887': attribute type 3 has an invalid length. [ 270.703246][T11040] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1887'. [ 271.807828][T11070] netlink: 'syz.1.1895': attribute type 10 has an invalid length. [ 272.721856][T11102] netlink: 15830 bytes leftover after parsing attributes in process `syz.0.1904'. [ 273.176046][T11115] device syzkaller0 entered promiscuous mode [ 273.942044][T11146] bridge0: port 4(syz_tun) entered disabled state [ 273.948936][T11146] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.956294][T11146] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.072406][T11146] device syz_tun left promiscuous mode [ 274.092396][T11146] bridge0: port 4(syz_tun) entered disabled state [ 274.212489][T11146] device bridge_slave_1 left promiscuous mode [ 274.241319][T11146] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.280610][T11146] device bridge_slave_0 left promiscuous mode [ 274.286887][T11146] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.471775][T11148] netlink: 'syz.4.1918': attribute type 7 has an invalid length. [ 274.617278][T11156] netlink: 'syz.0.1921': attribute type 1 has an invalid length. [ 274.672999][T11153] netlink: 15830 bytes leftover after parsing attributes in process `syz.1.1920'. [ 274.835389][T11169] netlink: 'syz.4.1924': attribute type 29 has an invalid length. [ 274.863016][T11169] netlink: 'syz.4.1924': attribute type 29 has an invalid length. [ 274.974933][T11177] netlink: 'syz.2.1936': attribute type 2 has an invalid length. [ 274.988864][T11177] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1936'. [ 275.008852][T11177] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.1936'. [ 275.183150][T11187] netlink: 'syz.2.1929': attribute type 2 has an invalid length. [ 275.213442][T11187] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.1929'. [ 275.804307][T11185] netlink: 'syz.4.1927': attribute type 21 has an invalid length. [ 275.819554][T11185] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1927'. [ 275.839043][T11188] netlink: 'syz.4.1927': attribute type 21 has an invalid length. [ 275.849324][T11188] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1927'. [ 275.866393][T11188] netlink: 'syz.4.1927': attribute type 4 has an invalid length. [ 275.894013][T11188] netlink: 'syz.4.1927': attribute type 3 has an invalid length. [ 275.933332][T11188] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1927'. [ 276.434989][T11208] delete_channel: no stack [ 277.127875][T11218] syzkaller1: tun_chr_ioctl cmd 2147767511 [ 277.885671][T11237] device syzkaller0 entered promiscuous mode [ 278.200095][T11244] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 278.239927][T11244] device syzkaller0 entered promiscuous mode [ 278.803229][T11260] netlink: 119 bytes leftover after parsing attributes in process `syz.0.1952'. [ 279.127131][T11267] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1954'. [ 279.170046][T11267] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1954'. [ 279.242518][T11267] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1954'. [ 279.304530][T11267] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1954'. [ 279.359028][T11267] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1954'. [ 279.368216][T11267] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1954'. [ 279.431369][T11267] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1954'. [ 279.471935][T11267] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1954'. [ 279.502389][T11267] validate_nla: 9 callbacks suppressed [ 279.502404][T11267] netlink: 'syz.0.1954': attribute type 10 has an invalid length. [ 279.571408][T11267] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1954'. [ 279.602074][T11267] netlink: 'syz.0.1954': attribute type 10 has an invalid length. [ 279.632588][T11267] netlink: 'syz.0.1954': attribute type 10 has an invalid length. [ 279.674339][T11267] netlink: 'syz.0.1954': attribute type 10 has an invalid length. [ 279.705070][T11267] netlink: 'syz.0.1954': attribute type 10 has an invalid length. [ 279.733995][T11267] netlink: 'syz.0.1954': attribute type 10 has an invalid length. [ 279.774640][T11267] netlink: 'syz.0.1954': attribute type 10 has an invalid length. [ 279.805963][T11267] netlink: 'syz.0.1954': attribute type 10 has an invalid length. [ 279.859415][T11267] netlink: 'syz.0.1954': attribute type 10 has an invalid length. [ 279.867453][T11267] netlink: 'syz.0.1954': attribute type 10 has an invalid length. [ 279.929645][T11280] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 280.057693][T11284] IPv6: NLM_F_CREATE should be specified when creating new route [ 282.803169][T11346] bridge0: port 3(batadv0) entered blocking state [ 282.809947][T11346] bridge0: port 3(batadv0) entered forwarding state [ 282.818509][T11346] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.825857][T11346] bridge0: port 2(bridge_slave_1) entered forwarding state [ 282.911784][T11346] device bridge0 entered promiscuous mode [ 282.945577][ T6897] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 283.875804][T11382] device syzkaller0 entered promiscuous mode [ 284.126781][T11399] __nla_validate_parse: 17 callbacks suppressed [ 284.126810][T11399] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1991'. [ 285.494302][T11452] netlink: 192436 bytes leftover after parsing attributes in process `syz.4.2005'. [ 285.541370][T11452] openvswitch: netlink: Duplicate key (type 0). [ 285.669184][T11461] validate_nla: 7 callbacks suppressed [ 285.669200][T11461] netlink: 'syz.4.2010': attribute type 29 has an invalid length. [ 285.703504][T11461] netlink: 'syz.4.2010': attribute type 29 has an invalid length. [ 285.734359][T11464] netlink: 'syz.4.2010': attribute type 29 has an invalid length. [ 285.885296][T11467] device wlan0 left promiscuous mode [ 285.916539][T11467] netlink: 'syz.4.2012': attribute type 9 has an invalid length. [ 285.933411][T11467] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.2012'. [ 285.987902][T11469] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.2013'. [ 286.233697][T11470] netlink: 'syz.2.2013': attribute type 21 has an invalid length. [ 286.476143][T11473] netlink: 'syz.4.2014': attribute type 3 has an invalid length. [ 286.516388][T11475] netlink: 'syz.4.2014': attribute type 3 has an invalid length. [ 286.544358][T11478] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2014'. [ 286.573519][T11473] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2014'. [ 286.608866][T11475] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2014'. [ 287.516040][T11505] netlink: 'syz.4.2023': attribute type 20 has an invalid length. [ 287.736556][T11519] netlink: 'syz.0.2028': attribute type 21 has an invalid length. [ 287.771435][T11522] netlink: 170988 bytes leftover after parsing attributes in process `syz.2.2027'. [ 287.782546][T11522] netlink: zone id is out of range [ 287.787920][T11522] netlink: zone id is out of range [ 287.801043][T11522] netlink: zone id is out of range [ 287.812846][T11522] netlink: zone id is out of range [ 287.832557][T11522] netlink: zone id is out of range [ 287.854392][T11524] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2027'. [ 287.884576][T11522] netlink: zone id is out of range [ 287.906148][T11522] netlink: zone id is out of range [ 287.926707][T11522] netlink: zone id is out of range [ 287.971527][T11522] netlink: zone id is out of range [ 288.100624][T11526] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2029'. [ 288.460886][T11543] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 288.574074][T11548] netlink: 'syz.1.2036': attribute type 1 has an invalid length. [ 288.964796][T11567] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 289.002082][T11567] CPU: 1 PID: 11567 Comm: syz.2.2041 Not tainted syzkaller #0 [ 289.009612][T11567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 289.019725][T11567] Call Trace: [ 289.023025][T11567] [ 289.025973][T11567] dump_stack_lvl+0x188/0x250 [ 289.030686][T11567] ? show_regs_print_info+0x20/0x20 [ 289.035916][T11567] ? load_image+0x400/0x400 [ 289.040468][T11567] sysfs_warn_dup+0x8a/0xa0 [ 289.045002][T11567] sysfs_do_create_link_sd+0xc0/0x110 [ 289.050411][T11567] device_add+0x7f6/0x1000 [ 289.054877][T11567] wiphy_register+0x1e81/0x2c30 [ 289.059784][T11567] ? cfg80211_event_work+0x40/0x40 [ 289.064940][T11567] ? minstrel_ht_alloc+0x808/0x980 [ 289.070091][T11567] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 289.076196][T11567] ieee80211_register_hw+0x2aa1/0x3af0 [ 289.081703][T11567] ? ieee80211_tasklet_handler+0x20/0x20 [ 289.087372][T11567] ? rcu_is_watching+0x11/0xa0 [ 289.092169][T11567] ? memset+0x1e/0x40 [ 289.096184][T11567] ? hrtimer_init+0x10c/0x220 [ 289.100894][T11567] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 289.106662][T11567] hwsim_new_radio_nl+0xa6f/0xc40 [ 289.111732][T11567] genl_rcv_msg+0xcea/0xf90 [ 289.116284][T11567] ? genl_bind+0x380/0x380 [ 289.120739][T11567] ? __dev_queue_xmit+0x1cbf/0x2f80 [ 289.125965][T11567] ? verify_lock_unused+0x140/0x140 [ 289.131294][T11567] ? kmalloc_large_node+0xf2/0x190 [ 289.136493][T11567] ? dev_queue_xmit+0x20/0x20 [ 289.141200][T11567] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 289.147759][T11567] netlink_rcv_skb+0x1f5/0x440 [ 289.152565][T11567] ? genl_bind+0x380/0x380 [ 289.157013][T11567] ? netlink_ack+0xb50/0xb50 [ 289.161632][T11567] ? __lock_acquire+0x7d10/0x7d10 [ 289.166697][T11567] ? down_read+0x1aa/0x2e0 [ 289.171145][T11567] genl_rcv+0x24/0x40 [ 289.175165][T11567] netlink_unicast+0x774/0x920 [ 289.179974][T11567] netlink_sendmsg+0x8ba/0xbe0 [ 289.184772][T11567] ? netlink_getsockopt+0x570/0x570 [ 289.189998][T11567] ? aa_sock_msg_perm+0x94/0x150 [ 289.194971][T11567] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 289.200288][T11567] ? security_socket_sendmsg+0x7c/0xa0 [ 289.205774][T11567] ? netlink_getsockopt+0x570/0x570 [ 289.210995][T11567] ____sys_sendmsg+0x5b7/0x8f0 [ 289.215807][T11567] ? __sys_sendmsg_sock+0x30/0x30 [ 289.220868][T11567] ? import_iovec+0x6f/0xa0 [ 289.225409][T11567] ___sys_sendmsg+0x236/0x2e0 [ 289.230133][T11567] ? __sys_sendmsg+0x2a0/0x2a0 [ 289.234948][T11567] ? percpu_counter_add_batch+0x13b/0x160 [ 289.240725][T11567] __se_sys_sendmsg+0x1af/0x290 [ 289.245614][T11567] ? __x64_sys_sendmsg+0x80/0x80 [ 289.250589][T11567] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 289.256614][T11567] ? lockdep_hardirqs_on+0x94/0x140 [ 289.261858][T11567] do_syscall_64+0x4c/0xa0 [ 289.266298][T11567] ? clear_bhb_loop+0x30/0x80 [ 289.270993][T11567] ? clear_bhb_loop+0x30/0x80 [ 289.275699][T11567] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 289.281628][T11567] RIP: 0033:0x7ff8f9050e59 [ 289.286079][T11567] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 289.305717][T11567] RSP: 002b:00007ff8f7289028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 289.314189][T11567] RAX: ffffffffffffffda RBX: 00007ff8f92ca090 RCX: 00007ff8f9050e59 [ 289.322188][T11567] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 289.330208][T11567] RBP: 00007ff8f90e6d6f R08: 0000000000000000 R09: 0000000000000000 [ 289.338207][T11567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 289.346196][T11567] R13: 00007ff8f92ca128 R14: 00007ff8f92ca090 R15: 00007ffee9b4dd88 [ 289.354211][T11567] [ 289.637350][T11580] __nla_validate_parse: 3 callbacks suppressed [ 289.637388][T11580] netlink: 203516 bytes leftover after parsing attributes in process `syz.5.2044'. [ 289.680733][T11580] netlink: 6332 bytes leftover after parsing attributes in process `syz.5.2044'. [ 290.606323][T11595] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2050'. [ 290.647773][T11596] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2050'. [ 290.864034][T11608] device sit0 left promiscuous mode [ 290.893706][T11616] netlink: 'syz.1.2054': attribute type 11 has an invalid length. [ 290.916671][T11616] netlink: 184116 bytes leftover after parsing attributes in process `syz.1.2054'. [ 291.119003][T11614] device sit0 entered promiscuous mode [ 291.287563][T11617] device bridge_slave_1 left promiscuous mode [ 291.305369][T11617] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.366397][T11617] device bridge_slave_0 left promiscuous mode [ 291.396399][T11617] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.765125][T11626] validate_nla: 1 callbacks suppressed [ 291.765168][T11626] netlink: 'syz.0.2057': attribute type 10 has an invalid length. [ 291.801218][T11626] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2057'. [ 291.843597][T11626] device team0 entered promiscuous mode [ 291.871350][T11626] device team_slave_0 entered promiscuous mode [ 291.899170][T11626] device team_slave_1 entered promiscuous mode [ 291.973212][T11626] bridge0: port 4(team0) entered blocking state [ 292.001536][T11626] bridge0: port 4(team0) entered disabled state [ 292.058431][T11626] bridge0: port 4(team0) entered blocking state [ 292.065167][T11626] bridge0: port 4(team0) entered forwarding state [ 292.321219][T11640] netlink: 'syz.2.2064': attribute type 9 has an invalid length. [ 292.333229][T11640] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2064'. [ 292.697815][T11652] device pim6reg1 entered promiscuous mode [ 293.276528][T11679] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2077'. [ 293.337142][T11679] debugfs: Directory '!!' with parent 'ieee80211' already present! [ 294.108168][T11695] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.2082'. [ 294.245906][T11704] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2081'. [ 294.753206][T11740] netlink: 'syz.1.2095': attribute type 10 has an invalid length. [ 294.914103][T11752] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2096'. [ 295.023510][T11752] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 295.051936][T11752] CPU: 0 PID: 11752 Comm: syz.0.2096 Not tainted syzkaller #0 [ 295.059466][T11752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 295.069552][T11752] Call Trace: [ 295.072855][T11752] [ 295.075804][T11752] dump_stack_lvl+0x188/0x250 [ 295.080511][T11752] ? show_regs_print_info+0x20/0x20 [ 295.085732][T11752] ? load_image+0x400/0x400 [ 295.090268][T11752] sysfs_warn_dup+0x8a/0xa0 [ 295.094795][T11752] sysfs_do_create_link_sd+0xc0/0x110 [ 295.100241][T11752] device_add+0x7f6/0x1000 [ 295.104709][T11752] wiphy_register+0x1e81/0x2c30 [ 295.109614][T11752] ? cfg80211_event_work+0x40/0x40 [ 295.114759][T11752] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 295.120948][T11752] ? ieee80211_register_hw+0x28d4/0x3af0 [ 295.126618][T11752] ieee80211_register_hw+0x2aa1/0x3af0 [ 295.132123][T11752] ? ieee80211_tasklet_handler+0x20/0x20 [ 295.137785][T11752] ? rcu_is_watching+0x11/0xa0 [ 295.142579][T11752] ? memset+0x1e/0x40 [ 295.146582][T11752] ? hrtimer_init+0x10c/0x220 [ 295.151296][T11752] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 295.157076][T11752] hwsim_new_radio_nl+0xa6f/0xc40 [ 295.162165][T11752] genl_rcv_msg+0xcea/0xf90 [ 295.166697][T11752] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 295.172897][T11752] ? genl_bind+0x380/0x380 [ 295.177349][T11752] ? verify_lock_unused+0x140/0x140 [ 295.182584][T11752] ? perf_trace_lock_acquire+0xed/0x3e0 [ 295.188309][T11752] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 295.194946][T11752] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 295.201516][T11752] netlink_rcv_skb+0x1f5/0x440 [ 295.206314][T11752] ? genl_bind+0x380/0x380 [ 295.210767][T11752] ? netlink_ack+0xb50/0xb50 [ 295.215391][T11752] ? __lock_acquire+0x7d10/0x7d10 [ 295.220463][T11752] ? down_read+0x1aa/0x2e0 [ 295.224925][T11752] genl_rcv+0x24/0x40 [ 295.228948][T11752] netlink_unicast+0x774/0x920 [ 295.233770][T11752] netlink_sendmsg+0x8ba/0xbe0 [ 295.238644][T11752] ? netlink_getsockopt+0x570/0x570 [ 295.243874][T11752] ? aa_sock_msg_perm+0x94/0x150 [ 295.248859][T11752] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 295.254173][T11752] ? security_socket_sendmsg+0x7c/0xa0 [ 295.259660][T11752] ? netlink_getsockopt+0x570/0x570 [ 295.264892][T11752] ____sys_sendmsg+0x5b7/0x8f0 [ 295.269702][T11752] ? __sys_sendmsg_sock+0x30/0x30 [ 295.274779][T11752] ? import_iovec+0x6f/0xa0 [ 295.279328][T11752] ___sys_sendmsg+0x236/0x2e0 [ 295.284060][T11752] ? __sys_sendmsg+0x2a0/0x2a0 [ 295.288877][T11752] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 295.295534][T11752] __se_sys_sendmsg+0x1af/0x290 [ 295.300437][T11752] ? __x64_sys_sendmsg+0x80/0x80 [ 295.305406][T11752] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 295.311432][T11752] ? lockdep_hardirqs_on+0x94/0x140 [ 295.316670][T11752] do_syscall_64+0x4c/0xa0 [ 295.321112][T11752] ? clear_bhb_loop+0x30/0x80 [ 295.325820][T11752] ? clear_bhb_loop+0x30/0x80 [ 295.330525][T11752] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 295.336441][T11752] RIP: 0033:0x7f4ef17d3e59 [ 295.340877][T11752] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 295.360520][T11752] RSP: 002b:00007f4eefa0c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 295.368974][T11752] RAX: ffffffffffffffda RBX: 00007f4ef1a4d090 RCX: 00007f4ef17d3e59 [ 295.376975][T11752] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 295.384973][T11752] RBP: 00007f4ef1869d6f R08: 0000000000000000 R09: 0000000000000000 [ 295.392991][T11752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 295.400986][T11752] R13: 00007f4ef1a4d128 R14: 00007f4ef1a4d090 R15: 00007ffc1015f488 [ 295.409005][T11752] [ 295.711057][T11762] netlink: 'syz.4.2100': attribute type 10 has an invalid length. [ 295.877088][T11768] netlink: 'syz.4.2104': attribute type 17 has an invalid length. [ 295.913233][T11764] tun0: tun_chr_ioctl cmd 1074812117 [ 295.932310][T11775] netlink: 192444 bytes leftover after parsing attributes in process `syz.5.2103'. [ 295.985289][T11768] netlink: 'syz.4.2104': attribute type 3 has an invalid length. [ 295.995232][T11778] netlink: 1057 bytes leftover after parsing attributes in process `syz.5.2103'. [ 296.004746][T11768] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2104'. [ 296.249305][T11791] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2110'. [ 297.028248][T11798] delete_channel: no stack [ 297.492754][T11833] netlink: 'syz.5.2123': attribute type 21 has an invalid length. [ 297.531499][T11829] netlink: 'syz.1.2122': attribute type 10 has an invalid length. [ 297.550814][T11829] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2122'. [ 297.576246][T11837] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 297.639937][T11843] netlink: 'syz.2.2126': attribute type 22 has an invalid length. [ 297.671992][T11843] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2126'. [ 297.795084][T11846] netlink: 'syz.5.2127': attribute type 2 has an invalid length. [ 297.814879][T11847] netlink: 'syz.2.2128': attribute type 1 has an invalid length. [ 297.837370][T11846] netlink: 11834 bytes leftover after parsing attributes in process `syz.5.2127'. [ 297.847610][T11847] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.2128'. [ 297.991665][T11850] FAULT_INJECTION: forcing a failure. [ 297.991665][T11850] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 298.028847][T11850] CPU: 0 PID: 11850 Comm: syz.1.2131 Not tainted syzkaller #0 [ 298.036383][T11850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 298.046469][T11850] Call Trace: [ 298.049785][T11850] [ 298.052754][T11850] dump_stack_lvl+0x188/0x250 [ 298.057472][T11850] ? show_regs_print_info+0x20/0x20 [ 298.062703][T11850] ? load_image+0x400/0x400 [ 298.067234][T11850] ? __lock_acquire+0x7d10/0x7d10 [ 298.072294][T11850] should_fail+0x38c/0x4c0 [ 298.076751][T11850] _copy_from_user+0x2e/0x170 [ 298.081489][T11850] ___sys_recvmsg+0x173/0x5c0 [ 298.086206][T11850] ? __sys_recvmsg+0x280/0x280 [ 298.090999][T11850] ? __lock_acquire+0x7d10/0x7d10 [ 298.096068][T11850] __x64_sys_recvmsg+0x1f9/0x2c0 [ 298.101030][T11850] ? ___sys_recvmsg+0x5c0/0x5c0 [ 298.105893][T11850] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 298.111906][T11850] ? lockdep_hardirqs_on+0x94/0x140 [ 298.117145][T11850] do_syscall_64+0x4c/0xa0 [ 298.121588][T11850] ? clear_bhb_loop+0x30/0x80 [ 298.126287][T11850] ? clear_bhb_loop+0x30/0x80 [ 298.130991][T11850] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 298.136992][T11850] RIP: 0033:0x7fd9124f0e59 [ 298.141432][T11850] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 298.161064][T11850] RSP: 002b:00007fd91074a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 298.169536][T11850] RAX: ffffffffffffffda RBX: 00007fd912769fa0 RCX: 00007fd9124f0e59 [ 298.177531][T11850] RDX: 0000000000000020 RSI: 0000200000002e80 RDI: 0000000000000003 [ 298.185527][T11850] RBP: 00007fd91074a090 R08: 0000000000000000 R09: 0000000000000000 [ 298.193518][T11850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 298.201505][T11850] R13: 00007fd91276a038 R14: 00007fd912769fa0 R15: 00007ffe7bdde218 [ 298.209517][T11850] [ 298.444627][T11867] netlink: 'syz.5.2134': attribute type 10 has an invalid length. [ 298.521682][T11868] netlink: 'syz.0.2133': attribute type 21 has an invalid length. [ 298.551168][T11868] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2133'. [ 298.572653][T11878] net_ratelimit: 92 callbacks suppressed [ 298.572867][T11878] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 298.595734][T11868] netlink: 'syz.0.2133': attribute type 1 has an invalid length. [ 298.663295][T11875] netlink: 'syz.0.2133': attribute type 27 has an invalid length. [ 299.318359][T11929] netlink: 'syz.0.2151': attribute type 10 has an invalid length. [ 299.944876][T11927] FAULT_INJECTION: forcing a failure. [ 299.944876][T11927] name failslab, interval 1, probability 0, space 0, times 0 [ 300.005492][T11927] CPU: 1 PID: 11927 Comm: syz.4.2147 Not tainted syzkaller #0 [ 300.013015][T11927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 300.023094][T11927] Call Trace: [ 300.026392][T11927] [ 300.029342][T11927] dump_stack_lvl+0x188/0x250 [ 300.034055][T11927] ? show_regs_print_info+0x20/0x20 [ 300.039278][T11927] ? load_image+0x400/0x400 [ 300.043807][T11927] ? __might_sleep+0xf0/0xf0 [ 300.048424][T11927] ? __lock_acquire+0x7d10/0x7d10 [ 300.053565][T11927] should_fail+0x38c/0x4c0 [ 300.058021][T11927] should_failslab+0x5/0x20 [ 300.062553][T11927] slab_pre_alloc_hook+0x51/0xc0 [ 300.067520][T11927] ? taskstats_exit+0x14e/0xac0 [ 300.072399][T11927] kmem_cache_alloc+0x3d/0x290 [ 300.077205][T11927] taskstats_exit+0x14e/0xac0 [ 300.081902][T11927] ? mm_trace_rss_stat+0x81/0x1c0 [ 300.086953][T11927] ? sync_mm_rss+0x211/0x350 [ 300.091568][T11927] do_exit+0x59c/0x20c0 [ 300.095757][T11927] ? put_task_struct+0x80/0x80 [ 300.100568][T11927] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 300.106583][T11927] ? lock_chain_count+0x20/0x20 [ 300.111460][T11927] ? cgroup_freezing+0x264/0x310 [ 300.116412][T11927] do_group_exit+0x12e/0x300 [ 300.121013][T11927] ? lockdep_hardirqs_on+0x94/0x140 [ 300.126247][T11927] get_signal+0x6d6/0x12d0 [ 300.130689][T11927] arch_do_signal_or_restart+0xe7/0x12c0 [ 300.136356][T11927] ? get_sigframe_size+0x10/0x10 [ 300.141326][T11927] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 300.147332][T11927] ? exit_to_user_mode_loop+0x3b/0x130 [ 300.152816][T11927] exit_to_user_mode_loop+0x9e/0x130 [ 300.158141][T11927] exit_to_user_mode_prepare+0xee/0x180 [ 300.163702][T11927] syscall_exit_to_user_mode+0x16/0x40 [ 300.169203][T11927] do_syscall_64+0x58/0xa0 [ 300.173637][T11927] ? clear_bhb_loop+0x30/0x80 [ 300.178329][T11927] ? clear_bhb_loop+0x30/0x80 [ 300.183018][T11927] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 300.188929][T11927] RIP: 0033:0x7f983d0f5e59 [ 300.193398][T11927] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 300.213014][T11927] RSP: 002b:00007f983b30d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 300.221442][T11927] RAX: fffffffffffffe00 RBX: 00007f983d36f180 RCX: 00007f983d0f5e59 [ 300.229431][T11927] RDX: 0000000000000020 RSI: 0000200000002e80 RDI: 0000000000000003 [ 300.237419][T11927] RBP: 00007f983b30d090 R08: 0000000000000000 R09: 0000000000000000 [ 300.245395][T11927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 300.253374][T11927] R13: 00007f983d36f218 R14: 00007f983d36f180 R15: 00007ffe090e2518 [ 300.261366][T11927] [ 301.026762][T11992] __nla_validate_parse: 3 callbacks suppressed [ 301.026805][T11992] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2171'. [ 301.048004][T11996] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2172'. [ 301.062876][T11996] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 301.089048][T11996] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 301.184694][T11997] netlink: 160 bytes leftover after parsing attributes in process `syz.4.2170'. [ 301.230811][T11998] sctp: [Deprecated]: syz.2.2172 (pid 11998) Use of struct sctp_assoc_value in delayed_ack socket option. [ 301.230811][T11998] Use struct sctp_sack_info instead [ 301.334033][T11997] erspan0: refused to change device tx_queue_len [ 301.349031][T11997] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 301.884292][T12016] device veth0_macvtap left promiscuous mode [ 302.265969][T12049] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.2186'. [ 302.440045][T12050] pim6reg: tun_chr_ioctl cmd 1074025677 [ 302.538083][T12054] validate_nla: 10 callbacks suppressed [ 302.538101][T12054] netlink: 'syz.4.2187': attribute type 1 has an invalid length. [ 302.575515][T12054] netlink: 180900 bytes leftover after parsing attributes in process `syz.4.2187'. [ 302.598046][T12053] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.2188'. [ 302.683904][T12050] pim6reg: linktype set to 823 [ 303.413740][T12089] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.2197'. [ 303.614806][T12106] netlink: 'syz.2.2201': attribute type 27 has an invalid length. [ 303.653441][T12106] netlink: 2418 bytes leftover after parsing attributes in process `syz.2.2201'. [ 303.678284][T12109] netlink: 'syz.5.2202': attribute type 3 has an invalid length. [ 303.700355][T12109] netlink: 13435 bytes leftover after parsing attributes in process `syz.5.2202'. [ 304.608398][T12161] netlink: 'syz.4.2216': attribute type 10 has an invalid length. [ 304.634277][T12161] team0: Device nlmon0 is of different type [ 304.872834][T12163] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.2217'. [ 304.918529][T12168] netlink: 'syz.2.2217': attribute type 15 has an invalid length. [ 304.968786][T12168] netlink: 'syz.2.2217': attribute type 7 has an invalid length. [ 305.416178][T12182] device syzkaller0 entered promiscuous mode [ 306.316276][T12230] netlink: 'syz.5.2234': attribute type 17 has an invalid length. [ 306.348788][T12230] __nla_validate_parse: 3 callbacks suppressed [ 306.348803][T12230] netlink: 148 bytes leftover after parsing attributes in process `syz.5.2234'. [ 306.587407][T12241] netlink: 'syz.0.2237': attribute type 4 has an invalid length. [ 306.615813][T12241] netlink: 208644 bytes leftover after parsing attributes in process `syz.0.2237'. [ 306.783048][T12245] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2239'. [ 306.876650][T12258] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2242'. [ 307.083095][T12266] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.2245'. [ 307.220404][T12262] netlink: 'syz.0.2243': attribute type 2 has an invalid length. [ 307.228318][T12262] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2243'. [ 307.266298][T12275] netlink: 'syz.2.2244': attribute type 21 has an invalid length. [ 307.312730][T12275] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2244'. [ 308.354269][T12305] validate_nla: 3 callbacks suppressed [ 308.354285][T12305] netlink: 'syz.1.2255': attribute type 1 has an invalid length. [ 308.385337][T12305] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.2255'. [ 308.452365][T12306] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2255'. [ 308.587168][T12306] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 308.638593][T12306] CPU: 0 PID: 12306 Comm: syz.1.2255 Not tainted syzkaller #0 [ 308.646146][T12306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 308.656225][T12306] Call Trace: [ 308.659531][T12306] [ 308.662486][T12306] dump_stack_lvl+0x188/0x250 [ 308.667196][T12306] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 308.673397][T12306] ? show_regs_print_info+0x20/0x20 [ 308.678636][T12306] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 308.684892][T12306] sysfs_warn_dup+0x8a/0xa0 [ 308.689431][T12306] sysfs_do_create_link_sd+0xc0/0x110 [ 308.694841][T12306] device_add+0x7f6/0x1000 [ 308.699354][T12306] wiphy_register+0x1e81/0x2c30 [ 308.704279][T12306] ? cfg80211_event_work+0x40/0x40 [ 308.709436][T12306] ? minstrel_ht_alloc+0x808/0x980 [ 308.714571][T12306] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 308.720674][T12306] ieee80211_register_hw+0x2aa1/0x3af0 [ 308.726163][T12306] ? ieee80211_tasklet_handler+0x20/0x20 [ 308.731812][T12306] ? rcu_is_watching+0x11/0xa0 [ 308.736600][T12306] ? memset+0x1e/0x40 [ 308.740624][T12306] ? hrtimer_init+0x10c/0x220 [ 308.745329][T12306] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 308.751078][T12306] hwsim_new_radio_nl+0xa6f/0xc40 [ 308.756129][T12306] genl_rcv_msg+0xcea/0xf90 [ 308.760650][T12306] ? genl_bind+0x380/0x380 [ 308.765093][T12306] ? __dev_queue_xmit+0x1cbf/0x2f80 [ 308.770323][T12306] ? verify_lock_unused+0x140/0x140 [ 308.775548][T12306] ? dev_queue_xmit+0x20/0x20 [ 308.780238][T12306] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 308.786769][T12306] netlink_rcv_skb+0x1f5/0x440 [ 308.791553][T12306] ? genl_bind+0x380/0x380 [ 308.795977][T12306] ? netlink_ack+0xb50/0xb50 [ 308.800613][T12306] ? __lock_acquire+0x7d10/0x7d10 [ 308.805660][T12306] ? down_read+0x1aa/0x2e0 [ 308.810088][T12306] genl_rcv+0x24/0x40 [ 308.814080][T12306] netlink_unicast+0x774/0x920 [ 308.818863][T12306] netlink_sendmsg+0x8ba/0xbe0 [ 308.823631][T12306] ? lockdep_hardirqs_on+0x94/0x140 [ 308.828862][T12306] ? netlink_getsockopt+0x570/0x570 [ 308.834089][T12306] ? security_socket_sendmsg+0x70/0xa0 [ 308.839556][T12306] ? security_socket_sendmsg+0x7c/0xa0 [ 308.845035][T12306] ? netlink_getsockopt+0x570/0x570 [ 308.850333][T12306] ____sys_sendmsg+0x5b7/0x8f0 [ 308.855128][T12306] ? __sys_sendmsg_sock+0x30/0x30 [ 308.860200][T12306] ? import_iovec+0x6f/0xa0 [ 308.864725][T12306] ___sys_sendmsg+0x236/0x2e0 [ 308.869450][T12306] ? __sys_sendmsg+0x2a0/0x2a0 [ 308.874243][T12306] ? percpu_counter_add_batch+0x13b/0x160 [ 308.880002][T12306] __se_sys_sendmsg+0x1af/0x290 [ 308.884882][T12306] ? __x64_sys_sendmsg+0x80/0x80 [ 308.889838][T12306] ? lockdep_hardirqs_on+0x94/0x140 [ 308.895094][T12306] do_syscall_64+0x4c/0xa0 [ 308.899532][T12306] ? clear_bhb_loop+0x30/0x80 [ 308.904217][T12306] ? clear_bhb_loop+0x30/0x80 [ 308.908908][T12306] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 308.914818][T12306] RIP: 0033:0x7fd9124f0e59 [ 308.919251][T12306] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 308.938861][T12306] RSP: 002b:00007fd910729028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 308.947292][T12306] RAX: ffffffffffffffda RBX: 00007fd91276a090 RCX: 00007fd9124f0e59 [ 308.955280][T12306] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000010 [ 308.963260][T12306] RBP: 00007fd912586d6f R08: 0000000000000000 R09: 0000000000000000 [ 308.971355][T12306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 308.979346][T12306] R13: 00007fd91276a128 R14: 00007fd91276a090 R15: 00007ffe7bdde218 [ 308.987376][T12306] [ 309.152515][T12331] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2261'. [ 309.916106][T12371] device sit0 entered promiscuous mode [ 310.192122][T12368] device syzkaller0 entered promiscuous mode [ 310.959348][T12403] netlink: 'syz.0.2285': attribute type 21 has an invalid length. [ 311.002888][T12402] delete_channel: no stack [ 311.027656][T12407] netlink: 'syz.1.2288': attribute type 11 has an invalid length. [ 311.165667][T12413] netlink: 'syz.2.2287': attribute type 1 has an invalid length. [ 311.201822][T12412] netlink: 'syz.2.2287': attribute type 1 has an invalid length. [ 311.687435][T12431] __nla_validate_parse: 6 callbacks suppressed [ 311.687455][T12431] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2293'. [ 311.907461][T12434] netlink: 'syz.4.2295': attribute type 39 has an invalid length. [ 311.995343][T12442] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.2296'. [ 312.071457][T12440] can: request_module (can-proto-0) failed. [ 312.352773][ C1] ------------[ cut here ]------------ [ 312.352788][ C1] WARNING: CPU: 1 PID: 12460 at mm/maccess.c:226 copy_from_user_nofault+0x160/0x1c0 [ 312.352830][ C1] Modules linked in: [ 312.352841][ C1] CPU: 1 PID: 12460 Comm: syz.4.2301 Not tainted syzkaller #0 [ 312.352859][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 312.352881][ C1] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 312.352902][ C1] Code: 24 45 31 f6 31 ff 89 de e8 5d 95 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 e0 91 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 312.352917][ C1] RSP: 0018:fffffe000005d8e8 EFLAGS: 00010006 [ 312.352930][ C1] RAX: ffffffff81a0b710 RBX: 0000000000000008 RCX: ffff88801dc53b80 [ 312.352943][ C1] RDX: 0000000000110000 RSI: 0000000000000000 RDI: 0000000000000000 [ 312.352953][ C1] RBP: 0000000000000000 R08: ffff88801dc53b87 R09: 1ffff11003b8a770 [ 312.352965][ C1] R10: dffffc0000000000 R11: ffffed1003b8a771 R12: ffff88801dc55308 [ 312.352977][ C1] R13: 00007ffffffff000 R14: fffffe000005d958 R15: 0000000020000000 [ 312.352989][ C1] FS: 00007f983b34f6c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 312.353004][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 312.353015][ C1] CR2: 000000110c2e8402 CR3: 0000000062161000 CR4: 00000000003506e0 [ 312.353029][ C1] DR0: 0000200000000300 DR1: 0000200000000300 DR2: 0000200000000300 [ 312.353041][ C1] DR3: 0000200000000300 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 312.353053][ C1] Call Trace: [ 312.353058][ C1] <#DB> [ 312.353067][ C1] bpf_probe_read_compat+0xdd/0x170 [ 312.353091][ C1] bpf_prog_b5ddff191342b1d2_F+0x2c/0x77c [ 312.353107][ C1] bpf_prog_b89d7ca37128ef40+0x1a/0x8c8 [ 312.353124][ C1] bpf_overflow_handler+0x1c2/0x4a0 [ 312.353148][ C1] ? perf_event_switch_output+0x730/0x730 [ 312.353178][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 312.353198][ C1] __perf_event_overflow+0x364/0x530 [ 312.353219][ C1] perf_swevent_event+0x4ad/0x530 [ 312.353239][ C1] perf_bp_event+0x276/0x320 [ 312.353259][ C1] ? perf_event_free_bpf_prog+0x110/0x110 [ 312.353293][ C1] ? rcu_lock_acquire+0x9/0x30 [ 312.353312][ C1] ? read_lock_is_recursive+0x10/0x10 [ 312.353337][ C1] hw_breakpoint_exceptions_notify+0x152/0x470 [ 312.353358][ C1] atomic_notifier_call_chain+0x15d/0x280 [ 312.353379][ C1] notify_die+0x141/0x1a0 [ 312.353398][ C1] ? srcu_init_notifier_head+0x90/0x90 [ 312.353419][ C1] ? exc_debug+0x6e/0x130 [ 312.353438][ C1] ? trace_hardirqs_off_finish+0x57/0x1f0 [ 312.353459][ C1] notify_debug+0x20/0x30 [ 312.353477][ C1] exc_debug+0xcf/0x130 [ 312.353495][ C1] asm_exc_debug+0x1a/0x40 [ 312.353511][ C1] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x40 [ 312.353532][ C1] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 0f 01 cb 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 90 90 90 89 d1 83 f8 [ 312.353547][ C1] RSP: 0018:ffffc9000395fd80 EFLAGS: 00050202 [ 312.353560][ C1] RAX: ffffffff83e43101 RBX: 0000000000000050 RCX: 000000000000000c [ 312.353572][ C1] RDX: 0000000000000050 RSI: 0000200000000304 RDI: ffffc9000395fe44 [ 312.353583][ C1] RBP: 0000000000000000 R08: ffffc9000395fe4f R09: 1ffff9200072bfc9 [ 312.353595][ C1] R10: dffffc0000000000 R11: fffff5200072bfca R12: 00007ffffffff000 [ 312.353608][ C1] R13: 0000200000000310 R14: ffffc9000395fe00 R15: 00002000000002c0 [ 312.353625][ C1] ? _copy_from_user+0x21/0x170 [ 312.353647][ C1] [ 312.353651][ C1] [ 312.353656][ C1] _copy_from_user+0xfa/0x170 [ 312.353675][ C1] __sys_bpf+0x26d/0x6f0 [ 312.353695][ C1] ? bpf_link_show_fdinfo+0x380/0x380 [ 312.353720][ C1] ? vtime_user_exit+0x2c8/0x3e0 [ 312.353744][ C1] __x64_sys_bpf+0x78/0x90 [ 312.353762][ C1] do_syscall_64+0x4c/0xa0 [ 312.353778][ C1] ? clear_bhb_loop+0x30/0x80 [ 312.353794][ C1] ? clear_bhb_loop+0x30/0x80 [ 312.353812][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 312.353829][ C1] RIP: 0033:0x7f983d0f5e59 [ 312.353842][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 312.353857][ C1] RSP: 002b:00007f983b34f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 312.353874][ C1] RAX: ffffffffffffffda RBX: 00007f983d36efa0 RCX: 00007f983d0f5e59 [ 312.353887][ C1] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000001c [ 312.353897][ C1] RBP: 00007f983d18bd6f R08: 0000000000000000 R09: 0000000000000000 [ 312.353908][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 312.353918][ C1] R13: 00007f983d36f038 R14: 00007f983d36efa0 R15: 00007ffe090e2518 [ 312.353957][ C1] [ 312.353972][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 312.353981][ C1] CPU: 1 PID: 12460 Comm: syz.4.2301 Not tainted syzkaller #0 [ 312.353999][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 312.354009][ C1] Call Trace: [ 312.354015][ C1] <#DB> [ 312.354021][ C1] dump_stack_lvl+0x188/0x250 [ 312.354043][ C1] ? show_regs_print_info+0x20/0x20 [ 312.354062][ C1] ? load_image+0x400/0x400 [ 312.354089][ C1] panic+0x2e5/0x810 [ 312.354114][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 312.354144][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 312.354174][ C1] __warn+0x248/0x2b0 [ 312.354191][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 312.354214][ C1] report_bug+0x1b7/0x2e0 [ 312.354236][ C1] handle_bug+0x3a/0x70 [ 312.354254][ C1] exc_invalid_op+0x16/0x40 [ 312.354274][ C1] asm_exc_invalid_op+0x16/0x20 [ 312.354293][ C1] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 312.354316][ C1] Code: 24 45 31 f6 31 ff 89 de e8 5d 95 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 e0 91 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 312.354332][ C1] RSP: 0018:fffffe000005d8e8 EFLAGS: 00010006 [ 312.354347][ C1] RAX: ffffffff81a0b710 RBX: 0000000000000008 RCX: ffff88801dc53b80 [ 312.354361][ C1] RDX: 0000000000110000 RSI: 0000000000000000 RDI: 0000000000000000 [ 312.354374][ C1] RBP: 0000000000000000 R08: ffff88801dc53b87 R09: 1ffff11003b8a770 [ 312.354388][ C1] R10: dffffc0000000000 R11: ffffed1003b8a771 R12: ffff88801dc55308 [ 312.354402][ C1] R13: 00007ffffffff000 R14: fffffe000005d958 R15: 0000000020000000 [ 312.354421][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 312.354446][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 312.354470][ C1] bpf_probe_read_compat+0xdd/0x170 [ 312.354494][ C1] bpf_prog_b5ddff191342b1d2_F+0x2c/0x77c [ 312.354511][ C1] bpf_prog_b89d7ca37128ef40+0x1a/0x8c8 [ 312.354527][ C1] bpf_overflow_handler+0x1c2/0x4a0 [ 312.354553][ C1] ? perf_event_switch_output+0x730/0x730 [ 312.354581][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 312.354604][ C1] __perf_event_overflow+0x364/0x530 [ 312.354627][ C1] perf_swevent_event+0x4ad/0x530 [ 312.354651][ C1] perf_bp_event+0x276/0x320 [ 312.354674][ C1] ? perf_event_free_bpf_prog+0x110/0x110 [ 312.354711][ C1] ? rcu_lock_acquire+0x9/0x30 [ 312.354733][ C1] ? read_lock_is_recursive+0x10/0x10 [ 312.354760][ C1] hw_breakpoint_exceptions_notify+0x152/0x470 [ 312.354783][ C1] atomic_notifier_call_chain+0x15d/0x280 [ 312.354808][ C1] notify_die+0x141/0x1a0 [ 312.354829][ C1] ? srcu_init_notifier_head+0x90/0x90 [ 312.354854][ C1] ? exc_debug+0x6e/0x130 [ 312.354874][ C1] ? trace_hardirqs_off_finish+0x57/0x1f0 [ 312.354898][ C1] notify_debug+0x20/0x30 [ 312.354917][ C1] exc_debug+0xcf/0x130 [ 312.354939][ C1] asm_exc_debug+0x1a/0x40 [ 312.354956][ C1] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x40 [ 312.354978][ C1] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 0f 01 cb 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 90 90 90 89 d1 83 f8 [ 312.354994][ C1] RSP: 0018:ffffc9000395fd80 EFLAGS: 00050202 [ 312.355009][ C1] RAX: ffffffff83e43101 RBX: 0000000000000050 RCX: 000000000000000c [ 312.355022][ C1] RDX: 0000000000000050 RSI: 0000200000000304 RDI: ffffc9000395fe44 [ 312.355035][ C1] RBP: 0000000000000000 R08: ffffc9000395fe4f R09: 1ffff9200072bfc9 [ 312.355049][ C1] R10: dffffc0000000000 R11: fffff5200072bfca R12: 00007ffffffff000 [ 312.355063][ C1] R13: 0000200000000310 R14: ffffc9000395fe00 R15: 00002000000002c0 [ 312.355082][ C1] ? _copy_from_user+0x21/0x170 [ 312.355103][ C1] [ 312.355113][ C1] [ 312.355118][ C1] _copy_from_user+0xfa/0x170 [ 312.355149][ C1] __sys_bpf+0x26d/0x6f0 [ 312.355174][ C1] ? bpf_link_show_fdinfo+0x380/0x380 [ 312.355199][ C1] ? vtime_user_exit+0x2c8/0x3e0 [ 312.355221][ C1] __x64_sys_bpf+0x78/0x90 [ 312.355239][ C1] do_syscall_64+0x4c/0xa0 [ 312.355255][ C1] ? clear_bhb_loop+0x30/0x80 [ 312.355272][ C1] ? clear_bhb_loop+0x30/0x80 [ 312.355290][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 312.355307][ C1] RIP: 0033:0x7f983d0f5e59 [ 312.355320][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 312.355334][ C1] RSP: 002b:00007f983b34f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 312.355350][ C1] RAX: ffffffffffffffda RBX: 00007f983d36efa0 RCX: 00007f983d0f5e59 [ 312.355363][ C1] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000001c [ 312.355373][ C1] RBP: 00007f983d18bd6f R08: 0000000000000000 R09: 0000000000000000 [ 312.355384][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 312.355394][ C1] R13: 00007f983d36f038 R14: 00007f983d36efa0 R15: 00007ffe090e2518 [ 312.355415][ C1] [ 312.355779][ C1] Kernel Offset: disabled [ 312.355801][ C1] [ 312.355805][ C1] ================================ [ 312.355808][ C1] WARNING: inconsistent lock state [ 312.355815][ C1] syzkaller #0 Not tainted [ 312.355821][ C1] -------------------------------- [ 312.355824][ C1] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 312.355830][ C1] syz.4.2301/12460 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 312.355844][ C1] ffffffff8c313e38 ((console_sem).lock){-...}-{2:2}, at: down_trylock+0x1c/0xa0 [ 312.355875][ C1] {INITIAL USE} state was registered at: [ 312.355883][ C1] irq event stamp: 2014 [ 312.355887][ C1] hardirqs last enabled at (2013): [] exc_debug+0xe6/0x130 [ 312.355904][ C1] hardirqs last disabled at (2014): [] exc_debug+0x6e/0x130 [ 312.355920][ C1] softirqs last enabled at (1956): [] bpf_map_get_fd_by_id+0x21c/0x310 [ 312.355939][ C1] softirqs last disabled at (1954): [] bpf_map_get_fd_by_id+0x11d/0x310 [ 312.355957][ C1] [ 312.355957][ C1] other info that might help us debug this: [ 312.355961][ C1] Possible unsafe locking scenario: [ 312.355961][ C1] [ 312.355964][ C1] CPU0 [ 312.355966][ C1] ---- [ 312.355968][ C1] lock((console_sem).lock); [ 312.355976][ C1] [ 312.355978][ C1] lock((console_sem).lock); [ 312.355986][ C1] [ 312.355986][ C1] *** DEADLOCK *** [ 312.355986][ C1] [ 312.355988][ C1] no locks held by syz.4.2301/12460. [ 312.355994][ C1] [ 312.355994][ C1] stack backtrace: [ 312.355997][ C1] CPU: 1 PID: 12460 Comm: syz.4.2301 Not tainted syzkaller #0 [ 312.356009][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 312.356016][ C1] Call Trace: [ 312.356021][ C1] <#DB> [ 312.356025][ C1] dump_stack_lvl+0x188/0x250 [ 312.356039][ C1] ? show_regs_print_info+0x20/0x20 [ 312.356055][ C1] ? print_usage_bug+0x42a/0x690 [ 312.356067][ C1] ? verify_lock_unused+0x18/0x140 [ 312.356085][ C1] lock_acquire+0x2c3/0x400 [ 312.356101][ C1] ? down_trylock+0x1c/0xa0 [ 312.356116][ C1] ? read_lock_is_recursive+0x10/0x10 [ 312.356136][ C1] _raw_spin_lock_irqsave+0xb0/0x100 [ 312.356156][ C1] ? down_trylock+0x1c/0xa0 [ 312.356170][ C1] ? _raw_spin_lock+0x40/0x40 [ 312.356182][ C1] ? verify_lock_unused+0x18/0x140 [ 312.356201][ C1] down_trylock+0x1c/0xa0 [ 312.356216][ C1] __down_trylock_console_sem+0xd4/0x1f0 [ 312.356230][ C1] ? is_console_locked+0x5/0x10 [ 312.356242][ C1] ? panic+0x37b/0x810 [ 312.356256][ C1] ? console_trylock+0x70/0x70 [ 312.356268][ C1] ? __lock_acquire+0x7d10/0x7d10 [ 312.356284][ C1] ? give_up_console+0x20/0x20 [ 312.356304][ C1] console_unblank+0x28/0x180 [ 312.356317][ C1] panic+0x37b/0x810 [ 312.356334][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 312.356353][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 312.356369][ C1] __warn+0x248/0x2b0 [ 312.356380][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 312.356396][ C1] report_bug+0x1b7/0x2e0 [ 312.356411][ C1] handle_bug+0x3a/0x70 [ 312.356424][ C1] exc_invalid_op+0x16/0x40 [ 312.356437][ C1] asm_exc_invalid_op+0x16/0x20 [ 312.356450][ C1] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 312.356466][ C1] Code: 24 45 31 f6 31 ff 89 de e8 5d 95 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 e0 91 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 312.356478][ C1] RSP: 0018:fffffe000005d8e8 EFLAGS: 00010006 [ 312.356489][ C1] RAX: ffffffff81a0b710 RBX: 0000000000000008 RCX: ffff88801dc53b80 [ 312.356498][ C1] RDX: 0000000000110000 RSI: 0000000000000000 RDI: 0000000000000000 [ 312.356506][ C1] RBP: 0000000000000000 R08: ffff88801dc53b87 R09: 1ffff11003b8a770 [ 312.356516][ C1] R10: dffffc0000000000 R11: ffffed1003b8a771 R12: ffff88801dc55308 [ 312.356526][ C1] R13: 00007ffffffff000 R14: fffffe000005d958 R15: 0000000020000000 [ 312.356539][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 312.356557][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 312.356573][ C1] bpf_probe_read_compat+0xdd/0x170 [ 312.356590][ C1] bpf_prog_b5ddff191342b1d2_F+0x2c/0x77c [ 312.356602][ C1] bpf_prog_b89d7ca37128ef40+0x1a/0x8c8 [ 312.356613][ C1] bpf_overflow_handler+0x1c2/0x4a0 [ 312.356631][ C1] ? perf_event_switch_output+0x730/0x730 [ 312.356649][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 312.356667][ C1] __perf_event_overflow+0x364/0x530 [ 312.356683][ C1] perf_swevent_event+0x4ad/0x530 [ 312.356699][ C1] perf_bp_event+0x276/0x320 [ 312.356714][ C1] ? perf_event_free_bpf_prog+0x110/0x110 [ 312.356739][ C1] ? rcu_lock_acquire+0x9/0x30 [ 312.356754][ C1] ? read_lock_is_recursive+0x10/0x10 [ 312.356773][ C1] hw_breakpoint_exceptions_notify+0x152/0x470 [ 312.356789][ C1] atomic_notifier_call_chain+0x15d/0x280 [ 312.356806][ C1] notify_die+0x141/0x1a0 [ 312.356820][ C1] ? srcu_init_notifier_head+0x90/0x90 [ 312.356837][ C1] ? exc_debug+0x6e/0x130 [ 312.356850][ C1] ? trace_hardirqs_off_finish+0x57/0x1f0 [ 312.356866][ C1] notify_debug+0x20/0x30 [ 312.356892][ C1] exc_debug+0xcf/0x130 [ 312.356906][ C1] asm_exc_debug+0x1a/0x40 [ 312.356930][ C1] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x40 [ 312.356944][ C1] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 0f 01 cb 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 90 90 90 89 d1 83 f8 [ 312.356954][ C1] RSP: 0018:ffffc9000395fd80 EFLAGS: 00050202 [ 312.356964][ C1] RAX: ffffffff83e43101 RBX: 0000000000000050 RCX: 000000000000000c [ 312.356972][ C1] RDX: 0000000000000050 RSI: 0000200000000304 RDI: ffffc9000395fe44 [ 312.356980][ C1] RBP: 0000000000000000 R08: ffffc9000395fe4f R09: 1ffff9200072bfc9 [ 312.356988][ C1] R10: dffffc0000000000 R11: fffff5200072bfca R12: 00007ffffffff000 [ 312.356998][ C1] R13: 0000200000000310 R14: ffffc9000395fe00 R15: 00002000000002c0 [ 312.357009][ C1] ? _copy_from_user+0x21/0x170 [ 312.357023][ C1] [ 312.357027][ C1] [ 312.357030][ C1] _copy_from_user+0xfa/0x170 [ 312.357043][ C1] __sys_bpf+0x26d/0x6f0 [ 312.357056][ C1] ? bpf_link_show_fdinfo+0x380/0x380 [ 312.357074][ C1] ? vtime_user_exit+0x2c8/0x3e0 [ 312.357089][ C1] __x64_sys_bpf+0x78/0x90 [ 312.357102][ C1] do_syscall_64+0x4c/0xa0 [ 312.357113][ C1] ? clear_bhb_loop+0x30/0x80 [ 312.357125][ C1] ? clear_bhb_loop+0x30/0x80 [ 312.357138][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 312.357155][ C1] RIP: 0033:0x7f983d0f5e59 [ 312.357164][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 312.357174][ C1] RSP: 002b:00007f983b34f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 312.357186][ C1] RAX: ffffffffffffffda RBX: 00007f983d36efa0 RCX: 00007f983d0f5e59 [ 312.357195][ C1] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000001c [ 312.357202][ C1] RBP: 00007f983d18bd6f R08: 0000000000000000 R09: 0000000000000000 [ 312.357210][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 312.357217][ C1] R13: 00007f983d36f038 R14: 00007f983d36efa0 R15: 00007ffe090e2518 [ 312.357231][ C1]