last executing test programs: 14m53.867085076s ago: executing program 0 (id=1): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000000000000000}, 0x104101, 0x4, 0x0, 0x3, 0x2000000, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2c, 0x3, 0x0) close(r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020200008500000072000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$kcm(0x11, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x4, 0x4, 0xff, 0x200}, 0x50) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8918, &(0x7f0000000000)={'ipvlan0\x00', @random="0200ff7fffff"}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) r2 = socket$kcm(0x2, 0x3, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000200"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001801"], 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x890b, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x9, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10002, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000022d526a0c12787cb24639c6483d8a8de04d8009500000000000000"], &(0x7f0000000400)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r5, r4}, 0xc) r6 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x581c, 0x20, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r3) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x17) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) 14m53.793698647s ago: executing program 2 (id=3): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f00000001c0), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454da, &(0x7f0000000140)={'batadv0\x00'}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0xc0900, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x404, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000240), 0x4) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b87, 0x2, @perf_bp={0x0, 0x8}, 0x8000, 0x5, 0x43a1bd76, 0x1, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r5 = socket$kcm(0x10, 0x3, 0x10) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={0x0, 0x0, 0x10}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@fallback, 0x20, 0x0, 0x6, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES32=r6, @ANYBLOB="230000000000000000000000e4c2c0a230e6f25c478798f4d6c08a649e3238f5900320e0afc0ed56b75292505fe3c82fff9f1e0d338429229e904c0bf104ead0543b5abc5ec24640971a075a5541e5905f533c4dbad12c0e49abe318e3a037aad63160c2c004cf9834de36868daa2ef49369c885f2e0454202", @ANYRES32, @ANYBLOB, @ANYRES64=r7], 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000280)={@fallback=r3, 0xffffffffffffffff, 0x6, 0x0, 0xffffffffffffffff, @void, @value, @void, @void, r7}, 0x20) sendmsg$kcm(r5, 0x0, 0x0) write$cgroup_devices(r2, 0x0, 0xffdd) ioctl$TUNSETQUEUE(r4, 0x400454d9, 0x0) close(r3) 14m53.323849932s ago: executing program 0 (id=5): r0 = socket$kcm(0x1e, 0x4, 0x0) r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080), 0x4) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000200)={r1}, 0x8) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[], 0x48) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={0xffffffffffffffff, 0x0, 0x0, 0x4c, 0x0, &(0x7f0000001c40)=""/76, 0x4000, 0x0, 0x0, 0x11, &(0x7f0000001ac0), &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26f", 0x1, 0x0, 0x13}, 0x50) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000580)=[{0x0}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada302c9e37eed5653ecb716cdb8981cd819af0b33254465cc904be0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55", 0x76}, {&(0x7f0000000280)="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", 0x135}], 0x3}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="2e00000011008188040f80ec59acbc0413a1f848100000005e0c0000000000000e001c001400000002800000121f", 0x2e}], 0x1}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0x101d0) sendmsg$kcm(r3, &(0x7f0000000640)={&(0x7f00000000c0)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41}, 0x5}}, 0x80, 0x0, 0x0, &(0x7f0000000900)=ANY=[], 0x1458}, 0x48800) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1}, @ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0xffffffffffffffe0}]}, &(0x7f0000000100)='GPL\x00', 0x1, 0xd8, &(0x7f0000000300)=""/216}, 0x94) close(0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@func_proto]}, {0x0, [0x0, 0x2e, 0x5f, 0x30]}}, &(0x7f0000000400)=""/188, 0x2a, 0xbc, 0x1}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={r2, 0x58, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b0000f0ffffff00e8a8b898407866000062fb789100659f325245bd0527360ab7d43f031a2c93967c587f976a06ef254b481278216538de47a6d60ac1bd5f25cc95f175d23199806872997b77173c144cd310217c2852f03e7089026fe7713b84962f5058f4909f27ba1b6e6d557e369ff7d1baa961933a2a4e7b4b5de64b0103", @ANYRES32=r2, @ANYBLOB="1000"/20, @ANYRES32=r6, @ANYRES32, @ANYBLOB="05000000010000000800"/28], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x7, 0x0, 0x3, 0x2005e, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0x118183, 0x6, 0x7, 0x4, 0x81, 0x2, 0x1, 0x0, 0x9, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36510001ac004000202080002000300010004000600eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r8 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xfeff, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848350000005e140614000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x20008800) 14m52.931860514s ago: executing program 1 (id=2): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000012000000000000"], 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0xfe, 0x1, 0xff, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={0x0}, 0x36cc4aa9fbacfea1, 0xc8, 0x800000, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x12}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8100033200fb80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) 14m51.998719982s ago: executing program 1 (id=6): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0xfe, 0x1, 0xff, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={0x0}, 0x36cc4aa9fbacfea1, 0xc8, 0x800000, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x12}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8100033200fb80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) 14m51.802421898s ago: executing program 1 (id=7): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0xfe, 0x1, 0xff, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={0x0}, 0x36cc4aa9fbacfea1, 0xc8, 0x800000, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x12}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8100033200fb80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) 14m51.601446793s ago: executing program 1 (id=8): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x2, 0x7, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x48804) bpf$MAP_CREATE(0x0, 0x0, 0x6) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000001980)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402", 0x11}], 0x1}, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x10001, 0x0, 0xfffffffc, 0x5}, {0x2}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x6e, &(0x7f0000000000)=r4, 0x20) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r5, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000380)=r0}, 0x20) close(r1) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) 14m50.567438465s ago: executing program 1 (id=9): r0 = socket$kcm(0x1e, 0x4, 0x0) r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080), 0x4) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000200)={r1}, 0x8) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[], 0x48) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={0xffffffffffffffff, 0x0, 0x0, 0x4c, 0x0, &(0x7f0000001c40)=""/76, 0x4000, 0x0, 0x0, 0x11, &(0x7f0000001ac0), &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26f", 0x1, 0x0, 0x13}, 0x50) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada302c9e37eed5653ecb716cdb8981cd819af0b33254465cc904be0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55", 0x76}, {&(0x7f0000000280)="fe112162c63e6da8bc8432294ef18af53cc330a62a2c7035246635093ba4d30fcf19a90804f04a10939db8f4e13069cda6d167bf1b68c94d8d694d6ad1a4d51a715975560ad48770706eb1b88d021e1119f2eb75275cfe77f862368649be0f7aff5e7826729816e3d3e7986d9434f891c71ca6e4210c6757083cfd8e732048c504f28b6d309fc129ed8eb5a82e224eb648f90134d1d315977c6ea360a7fece4baa3dd7dcc970759f29df0e86469e954e2b050e87b203ca27a2a519b7555c3b73f2681d49442d9647ff5ea64110cc5020fdeafe53a7d8be70f3260816bc376bcdc5352771fa55d9733e27730ec7103520e8359c78edd21ee6c68feb3685a55722f5da09ffe8ba9f05081a8d214156376f99906245f2f390ad717979d98f0574f8c5b52dcc2fa494f461be6c2560ddbaafb80c5b4583", 0x135}], 0x2}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="2e00000011008188040f80ec59acbc0413a1f848100000005e0c0000000000000e001c001400000002800000121f", 0x2e}], 0x1}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0x101d0) sendmsg$kcm(r3, &(0x7f0000000640)={&(0x7f00000000c0)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41}, 0x5}}, 0x80, 0x0, 0x0, &(0x7f0000000900)=ANY=[], 0x1458}, 0x48800) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1}, @ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0xffffffffffffffe0}]}, &(0x7f0000000100)='GPL\x00', 0x1, 0xd8, &(0x7f0000000300)=""/216}, 0x94) close(0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@func_proto]}, {0x0, [0x0, 0x2e, 0x5f, 0x30]}}, &(0x7f0000000400)=""/188, 0x2a, 0xbc, 0x1}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={r2, 0x58, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b0000f0ffffff00e8a8b898407866000062fb789100659f325245bd0527360ab7d43f031a2c93967c587f976a06ef254b481278216538de47a6d60ac1bd5f25cc95f175d23199806872997b77173c144cd310217c2852f03e7089026fe7713b84962f5058f4909f27ba1b6e6d557e369ff7d1baa961933a2a4e7b4b5de64b0103", @ANYRES32=r2, @ANYBLOB="1000"/20, @ANYRES32=r6, @ANYRES32, @ANYBLOB="05000000010000000800"/28], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x7, 0x0, 0x3, 0x2005e, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0x118183, 0x6, 0x7, 0x4, 0x81, 0x2, 0x1, 0x0, 0x9, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36510001ac004000202080002000300010004000600eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r8 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xfeff, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848350000005e140614000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x20008800) 14m50.372336121s ago: executing program 2 (id=10): r0 = socket$kcm(0x1e, 0x4, 0x0) r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080), 0x4) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000200)={r1}, 0x8) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[], 0x48) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={0xffffffffffffffff, 0x0, 0x0, 0x4c, 0x0, &(0x7f0000001c40)=""/76, 0x4000, 0x0, 0x0, 0x11, &(0x7f0000001ac0), &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26f", 0x1, 0x0, 0x13}, 0x50) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000900)="27030200590200000100002f1eafaef706e1050000008847000f110186cee844000000080000000019", 0x29}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada302c9e37eed5653ecb716cdb8981cd819af0b33254465cc904be0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55", 0x76}, {&(0x7f0000000280)="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", 0x135}], 0x3}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="2e00000011008188040f80ec59acbc0413a1f848100000005e0c0000000000000e001c001400000002800000121f", 0x2e}], 0x1}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0x101d0) sendmsg$kcm(r3, &(0x7f0000000640)={&(0x7f00000000c0)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41}, 0x5}}, 0x80, 0x0, 0x0, &(0x7f0000000900)=ANY=[], 0x1458}, 0x48800) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1}, @ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0xffffffffffffffe0}]}, &(0x7f0000000100)='GPL\x00', 0x1, 0xd8, &(0x7f0000000300)=""/216}, 0x94) close(0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@func_proto]}, {0x0, [0x0, 0x2e, 0x5f, 0x30]}}, &(0x7f0000000400)=""/188, 0x2a, 0xbc, 0x1}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={r2, 0x58, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b0000f0ffffff00e8a8b898407866000062fb789100659f325245bd0527360ab7d43f031a2c93967c587f976a06ef254b481278216538de47a6d60ac1bd5f25cc95f175d23199806872997b77173c144cd310217c2852f03e7089026fe7713b84962f5058f4909f27ba1b6e6d557e369ff7d1baa961933a2a4e7b4b5de64b0103", @ANYRES32=r2, @ANYBLOB="1000"/20, @ANYRES32=r6, @ANYRES32, @ANYBLOB="05000000010000000800"/28], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x7, 0x0, 0x3, 0x2005e, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0x118183, 0x6, 0x7, 0x4, 0x81, 0x2, 0x1, 0x0, 0x9, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36510001ac004000202080002000300010004000600eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r8 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xfeff, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848350000005e140614000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x20008800) 14m50.291455853s ago: executing program 0 (id=11): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000012000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x12}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8100033200fb80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) 14m50.156293957s ago: executing program 3 (id=4): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000012000000000000"], 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0xfe, 0x1, 0xff, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={0x0}, 0x36cc4aa9fbacfea1, 0xc8, 0x800000, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x12}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8100033200fb80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) 14m30.665399094s ago: executing program 32 (id=11): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000012000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x12}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8100033200fb80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) 14m30.519391448s ago: executing program 33 (id=9): r0 = socket$kcm(0x1e, 0x4, 0x0) r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080), 0x4) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000200)={r1}, 0x8) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[], 0x48) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={0xffffffffffffffff, 0x0, 0x0, 0x4c, 0x0, &(0x7f0000001c40)=""/76, 0x4000, 0x0, 0x0, 0x11, &(0x7f0000001ac0), &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26f", 0x1, 0x0, 0x13}, 0x50) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada302c9e37eed5653ecb716cdb8981cd819af0b33254465cc904be0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55", 0x76}, {&(0x7f0000000280)="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", 0x135}], 0x2}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="2e00000011008188040f80ec59acbc0413a1f848100000005e0c0000000000000e001c001400000002800000121f", 0x2e}], 0x1}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0x101d0) sendmsg$kcm(r3, &(0x7f0000000640)={&(0x7f00000000c0)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41}, 0x5}}, 0x80, 0x0, 0x0, &(0x7f0000000900)=ANY=[], 0x1458}, 0x48800) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1}, @ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0xffffffffffffffe0}]}, &(0x7f0000000100)='GPL\x00', 0x1, 0xd8, &(0x7f0000000300)=""/216}, 0x94) close(0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@func_proto]}, {0x0, [0x0, 0x2e, 0x5f, 0x30]}}, &(0x7f0000000400)=""/188, 0x2a, 0xbc, 0x1}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={r2, 0x58, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b0000f0ffffff00e8a8b898407866000062fb789100659f325245bd0527360ab7d43f031a2c93967c587f976a06ef254b481278216538de47a6d60ac1bd5f25cc95f175d23199806872997b77173c144cd310217c2852f03e7089026fe7713b84962f5058f4909f27ba1b6e6d557e369ff7d1baa961933a2a4e7b4b5de64b0103", @ANYRES32=r2, @ANYBLOB="1000"/20, @ANYRES32=r6, @ANYRES32, @ANYBLOB="05000000010000000800"/28], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x7, 0x0, 0x3, 0x2005e, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0x118183, 0x6, 0x7, 0x4, 0x81, 0x2, 0x1, 0x0, 0x9, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36510001ac004000202080002000300010004000600eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r8 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xfeff, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848350000005e140614000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x20008800) 14m30.353959023s ago: executing program 34 (id=10): r0 = socket$kcm(0x1e, 0x4, 0x0) r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080), 0x4) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000200)={r1}, 0x8) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[], 0x48) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={0xffffffffffffffff, 0x0, 0x0, 0x4c, 0x0, &(0x7f0000001c40)=""/76, 0x4000, 0x0, 0x0, 0x11, &(0x7f0000001ac0), &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26f", 0x1, 0x0, 0x13}, 0x50) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000900)="27030200590200000100002f1eafaef706e1050000008847000f110186cee844000000080000000019", 0x29}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada302c9e37eed5653ecb716cdb8981cd819af0b33254465cc904be0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55", 0x76}, {&(0x7f0000000280)="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", 0x135}], 0x3}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="2e00000011008188040f80ec59acbc0413a1f848100000005e0c0000000000000e001c001400000002800000121f", 0x2e}], 0x1}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0x101d0) sendmsg$kcm(r3, &(0x7f0000000640)={&(0x7f00000000c0)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41}, 0x5}}, 0x80, 0x0, 0x0, &(0x7f0000000900)=ANY=[], 0x1458}, 0x48800) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1}, @ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0xffffffffffffffe0}]}, &(0x7f0000000100)='GPL\x00', 0x1, 0xd8, &(0x7f0000000300)=""/216}, 0x94) close(0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@func_proto]}, {0x0, [0x0, 0x2e, 0x5f, 0x30]}}, &(0x7f0000000400)=""/188, 0x2a, 0xbc, 0x1}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={r2, 0x58, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b0000f0ffffff00e8a8b898407866000062fb789100659f325245bd0527360ab7d43f031a2c93967c587f976a06ef254b481278216538de47a6d60ac1bd5f25cc95f175d23199806872997b77173c144cd310217c2852f03e7089026fe7713b84962f5058f4909f27ba1b6e6d557e369ff7d1baa961933a2a4e7b4b5de64b0103", @ANYRES32=r2, @ANYBLOB="1000"/20, @ANYRES32=r6, @ANYRES32, @ANYBLOB="05000000010000000800"/28], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x7, 0x0, 0x3, 0x2005e, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0x118183, 0x6, 0x7, 0x4, 0x81, 0x2, 0x1, 0x0, 0x9, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36510001ac004000202080002000300010004000600eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r8 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xfeff, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848350000005e140614000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x20008800) 14m30.207859177s ago: executing program 35 (id=4): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000012000000000000"], 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0xfe, 0x1, 0xff, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={0x0}, 0x36cc4aa9fbacfea1, 0xc8, 0x800000, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x12}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8100033200fb80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) 6.168563849s ago: executing program 6 (id=3326): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000002e40)=ANY=[@ANYBLOB="180000000000000000000000fbffffff850000007d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008080000b704000000000000850000003300000095"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8d82}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000001c0)="2b1c52be5f144dd0c2db5cd68c42", 0x0, 0xb20c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.063223692s ago: executing program 6 (id=3327): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'netdevsim0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$kcm(0x2, 0x5, 0x0) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x1}, 0x0, 0x1000, 0x43a1bd79, 0x4, 0xd, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYRES8=r2], &(0x7f0000000280)='GPL\x00', 0x0, 0xfffffffffffffe7f, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r3) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) openat$tun(0xffffffffffffff9c, 0x0, 0x4241, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, 0x0, 0x0) sendmsg$kcm(r6, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e21, @rand_addr=0x64010102}}, 0x80, 0x0}, 0x20000080) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f00000003c0)={&(0x7f00000001c0)=@nl=@kern={0x10, 0x0, 0x0, 0x10}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000240)="1f", 0x1}], 0x1, &(0x7f0000002500)}, 0x2002c404) close(r6) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x210, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35f022eb"], 0xcfa4) 4.557153254s ago: executing program 6 (id=3330): socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0600000002000000080000000f00000000000000", @ANYRES32=0x1, @ANYBLOB="0087d1ac86c8da00000027c100"/26, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1b"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) socket$kcm(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8946, &(0x7f0000000300)={'erspan0\x00', @random='\x00\x00\x00\x00\x00 '}) socket$kcm(0xa, 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {}, 0xf}}, 0x80, 0x0}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd028ef8020ab0700040005234538ba55"], 0xfe33) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001bc0)={r1, 0xffffffffffffffff}, 0x4) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001c00)=@generic={&(0x7f00000013c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r5}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x20000000009, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, r3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000040)=@generic={&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r6}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001380)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000, 0x0, 0x2, 0x0, 0x2800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r7, 0x29, 0x4b, 0x0, 0x4000) r8 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r8, 0x84, 0x7, 0x0, 0x0) 4.461573167s ago: executing program 4 (id=3332): bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x5, 0xf, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000ea00000000000000070000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b703000000e6ff008500000083000000bf09000000000000"], &(0x7f00000005c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100ff}, 0x94) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_bp={0x0, 0xf}, 0x1000, 0x4, 0x0, 0x9, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0xc, 0x0, 0x400, 0x4156, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x10563b, 0x0, 0xfffffffe, 0x6, 0x10000, 0xfff, 0x0, 0x0, 0xffffffff, 0x0, 0x7}, 0xffffffffffffffff, 0xffdfffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400008"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x890b, &(0x7f0000000000)) sendmsg$inet(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)}, 0x8000) r5 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x890b, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) 4.412682748s ago: executing program 7 (id=3333): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0600000002000000080000000f0000000000", @ANYRES32=0x1, @ANYBLOB="0087d1ac86c8da00000027c100"/26, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001bc0)={r0}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000040)=@generic={&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r2}, 0x18) 4.411812408s ago: executing program 5 (id=3334): r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)={[{0x2d, 'devices'}, {0x2b, 'net_prio'}, {0x2b, 'net_cls'}, {0x2b, 'pids'}, {0x2d, 'net_prio'}, {0x2b, 'memory'}, {0x2b, 'memory'}, {0x2b, 'devices'}, {0x2b, 'cpu'}, {0x2d, 'cpuset'}]}, 0x52) (async) r1 = gettid() r2 = perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0xef, 0x80, 0x7, 0x8, 0x0, 0x1, 0x0, 0x6, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp={&(0x7f00000000c0), 0x9}, 0x1000, 0x6, 0x3, 0x8, 0x6, 0x2, 0x1, 0x0, 0x7, 0x0, 0x5}, r1, 0x6, 0xffffffffffffffff, 0xb) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x1b, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffff9}, {}, {}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x2e, &(0x7f0000000300)=""/46, 0x41100, 0x5, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0xa, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000380)=[0x1, 0x1, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0x3}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000480)=r4, 0x4) (async) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='blkio.bfq.io_merged\x00', 0x0, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)=r4}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)=r4}, 0x20) (async) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000880)=0xffffffffffffffff, 0x4) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x4}, 0x50) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000980)={0x1, 0xffffffffffffffff}, 0x4) (async) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0xdb26, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x5}, 0x50) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r4, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x18, 0x21, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@jmp={0x5, 0x1, 0x9, 0x0, 0x8, 0xffffffffffffffff, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @call={0x85, 0x0, 0x0, 0x4a}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000007c0)='syzkaller\x00', 0x9, 0x6d, &(0x7f0000000800)=""/109, 0x40f00, 0x20, '\x00', 0x0, 0x0, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x3, 0xf, 0x7}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000a80)=[r9, r10, r11, r12], &(0x7f0000000ac0)=[{0x5, 0x4, 0x2, 0x1}, {0x1, 0x1, 0x0, 0x7}, {0x5, 0x3, 0xf, 0x7}], 0x10, 0xb}, 0x94) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e80)={r4, 0xe0, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000bc0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000000c00)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000c40)=[0x0, 0x0, 0x0], 0x0, 0xa, &(0x7f0000000c80)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000cc0), &(0x7f0000000d00), 0x8, 0xf4, 0x8, 0x8, &(0x7f0000000d40)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000ec0)=@base={0x21, 0x1, 0x4, 0x5, 0x40000, r11, 0x10, '\x00', r13, r8, 0x3, 0x0, 0x1}, 0x50) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000f40)={0x3, 0x4, 0x4, 0xa, 0x0, r9, 0xada, '\x00', r13, r8, 0x1, 0x1, 0x1}, 0x50) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001080)={r12, &(0x7f0000000fc0)="67b412640e6aac9c9f2ae899c08a1adf946af72c532082ed87ccdac3d3b6942531b8a37a08e8e8b8633f1e74cd96715c3034a8510edf0b884698189866030f866efc39045cdaad876cb4556b70c00552a667f02dfc17a1b34556e91d68401640cd74821db4508d694c58f242ba614d8b434fb8400d1f382b99c73e3dfac7b0e7160d886faafb"}, 0x20) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r14, &(0x7f0000001500)={&(0x7f0000001100)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001180)=""/117, 0x75}, {&(0x7f0000001200)=""/95, 0x5f}, {&(0x7f0000001280)=""/184, 0xb8}, {&(0x7f0000001340)=""/203, 0xcb}], 0x4, &(0x7f0000001480)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}, 0x3) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000001540)={r5, r10}, 0xc) (async) r18 = socket$kcm(0x29, 0x5, 0x0) (async) r19 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000015c0)=@o_path={&(0x7f0000001580)='./file0\x00', 0x0, 0x0, r8}, 0x18) ioctl$sock_kcm_SIOCKCMATTACH(r18, 0x89e0, &(0x7f0000001600)={r15, r19}) (async) sendmsg$kcm(r16, &(0x7f0000001dc0)={&(0x7f0000001640)=@pptp={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x26}}}, 0x80, &(0x7f0000001c80)=[{&(0x7f00000016c0)="fb0b2d47cf2198c01cf0100e8658bab778e4ba6f7ddea6ae1c458b29add469b19144e189d9c42022fa7bc08f11036d5f10d250812b768eb99fab627c25309ac8eca85e52203c9cb5210750eb1e3af913cd4b585b2e238e8ef39345d0180f9343f22c3f55cf85d1b680672d62bcdc4e159fe7a935a37cba91d79bea764b332dddae204590adfad0a307ef453a34b70614a11e6b390076a19712ec5f705992515259475bebd4956fc0aa333f8ec9d060dfa2510aa13dca9421c9fb65b882071e2c30d35b661730083dd2c083dda4baf33e8a1e0ee9a70f1449c002bf1a4c8614e7", 0xe0}, {&(0x7f00000017c0)="7b6aed83b53dbc869361ea35c4c8775787e5ec02db596d536da8d6", 0x1b}, {&(0x7f0000001800)="b6071021f53fb674f6694e1a594ada989e853630b7d9fb003a64dda5f8b5ebec2135c84e8966ed4734ddf12cbc5ad7adcb483d63874b8cd64fe63150175514c601ff4d98cd29d41088c8cabc3c71683c6ec613a3aea5e80d13490a4d6cc63d62858b667a664e285631d14098c8f6aa517a9cea500b998d44b55b4a73388e6e1790374afb4e07c71a457960919492c95567b3a55c0efdf814fb7a3d3ebe6fc75710e608d4e9fcd697a75683ae83cc733a0bd99fe8efc9d8cc8eec323b0c41800c795b1f8da356ec49c8e7bbd98fd2f13b5cebc8138aaa46c67d", 0xd9}, {&(0x7f0000001900)="a2356c4bbf", 0x5}, {&(0x7f0000001940)="06ad832abf87b5ff4f6c397e32f9f74ac210f01c2d3d21116b449658d9c0050c867e331349313265b7aa73001ec62f5e7574", 0x32}, {&(0x7f0000001980)}, {&(0x7f00000019c0)="43b1a467", 0x4}, {&(0x7f0000001a00)="5fba02c91c7df306eb94b2fbbdc75934dc00a5a9cb574418a089d1bfca264688a39fb6d046836da2d54d8715ee8303729fc875457b8bed8def661c6c736ab595343c6fc1d81d22cf6308233f211df4094421156b6de15a7e14017a88ee330476ae702e930905456d4de0979e41681163c08a08a7737cc19f912c5c7e71b4bad4e1f9c31e0065e6997838d13d12b06b152c6277ef69dd776e9342c6bfa07a60a824b9a6493ff9f1a90e8a22e068b6aeff9b48352d87343e33ee066d801181ed99c3e42db1360cb78e680bb7d78bb7f935b7d49dc06f8a30e04751a2c581d91ecd8db983", 0xe3}, {&(0x7f0000001b00)="bc06f2724ae6e8637afed0a0a7482e7802b33984e3da465c85dd5f67b34732ced624fbf7823bc276e54cf37304c2ccdb983f8c007ce071d942c4225fb6e36552eba603d64e993622ad2c74a57b0f3e99f1157859df61cbf6932468", 0x5b}, {&(0x7f0000001b80)="3ce5d908e63940b50bf8a0e54d0e386ffc3cfbc7c718f30f6157e64393aa0f5c9f4ad3873a6ed92854367168fdfafd04e2ef369684a3f55ea040b6aa30e95e182f3b477ddb029499ed37c85d8387e1d132497034053f7534c29e16e67c7b8acd213b1e0f378aec183a3c64b0b4bd46eaff9a4464e19cf939719f00a94da30f4f720194d0c781d0c3e8c5264aa7c1dd42adb049f64cd8d30fe771c0cd1eb3aa3567c60edf6414c5dcd05a7906bd56915049108ef81334f35760448208a1278df1111634db430b761f373125996709ad79c48b7edcc73064cefaf8b61852a0f62e825391978ff83afb126a", 0xea}], 0xa, &(0x7f0000001d40)=[{0x80, 0x104, 0x2, "a673f628b9b2f3d88e5970cb57cc22cce07f9125f19adc51c9e4bc26dd4b97dda8b2afdcffa04fd754ecef42e75c7a14b1d7ba8cc2443853dab4e36374100b2ea44f9abf1408b3cb438850920ce30bb8e4e1a3b25572a62fdaa31dc836e4f86f0704a2cdfc9af248b9ef5518"}], 0x80}, 0x90) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001f00)={@map=r16, 0xb, 0x0, 0x80, &(0x7f0000001e00)=[0x0], 0x1, 0x0, &(0x7f0000001e40)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001e80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001ec0)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001f40)={@map=r17, r5, 0x24, 0x0, r4, @void, @value=r4, @void, @void, r20}, 0x20) 4.298602401s ago: executing program 5 (id=3335): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000002e40)=ANY=[@ANYBLOB="180000000000000000000000fbffffff850000007d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008080000b704000000000000850000003300000095"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8d82}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000001c0)="2b1c52be5f144dd0c2db5cd68c42", 0x0, 0xb20c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.248206203s ago: executing program 6 (id=3336): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x40) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000003c21c00b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0xfca6}, {&(0x7f0000001400)="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", 0xa91}], 0x3}, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x20122, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x18944, 0x401, 0x25, 0x0, 0x10000000001, 0x200, 0x4, 0x0, 0x19, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0300000004000000040000000a0000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@'], 0x50) openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz0\x00', 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x16) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107a83, 0x2, @perf_config_ext={0x8000, 0x8}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x7, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r3, &(0x7f0000000300)='cpuacct.usage_sys\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36}, 0x94) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x4, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x10}, [@call={0x85, 0x0, 0x0, 0xaf}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x50}, 0x94) 4.247756263s ago: executing program 7 (id=3337): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x152610}], 0x1, 0x0, 0xe00}, 0x1f00) openat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) socket$kcm(0x10, 0x2, 0x0) (async, rerun: 32) r2 = socket$kcm(0x10, 0x2, 0x0) (rerun: 32) write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80", @ANYRESHEX], 0xfe33) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x3efd7ab4c41335d9, @perf_config_ext={0x8, 0x54e}, 0x0, 0xf452, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0xa, 0x2, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000640)}, 0x101) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x3, [@func={0x1, 0x0, 0x0, 0xc, 0x2}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {}]}]}, {0x0, [0x61]}}, 0x0, 0x43}, 0x28) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r5, 0x58, &(0x7f00000002c0)}, 0x10) (async, rerun: 64) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) (async, rerun: 64) r6 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f0000000100)=r7, 0x4) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000400000000000000008500000030000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)='%-010d \x00'}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000600)={&(0x7f00000001c0)="6d3049323e568f7a193f0dd17816fa93fab11eee5a5fb8b4a623ed11d4d0e3aadb8af96a6e8c3c4a12a25ffd20f320fb5fdd6670415751a7ad013625a16bb8d0990ce78e36a4a8ee76dfab85f11d9c6c52674b665188f4acb68e5b17f0f346723f0729cd5ed2e7d6f5aa72a9eda75946f879243abf8c7a7dd3e0671e091db28b1ab51403acdeb7ce943dee6cb914cb4babe7831eaed29e5e4bf4711faa16ff3896c3c52a659c3f4c9377bd8e1c76dcc6ad1474233a96e7d5c64e39ece5a9e7c5ee8261fa6326b6", &(0x7f0000000340)=""/85, &(0x7f00000003c0)="9f596efa05f5736d2b4fb9fd3c79e397614f56ea089dce1d75e92e3147a70be5c025689a6febae56472f7bb1007011f4261fed51139fdfde6f26cfbbdfc12353952ef3a4c9b61b283046907854253d6a398fede65bd19c293146e6832cdefbd690e50ba2d720de806dd03e5951ab663f419af944ad2b498bef365f5618b44196befde44cd8207f", &(0x7f0000000480)="b75e4a78393c7bb82a8466cb7ae1926e8cda63480e66481ee813043708027cf93d09412bc624e420b0070af5ea632f7e3a9412405be325a33d8e9c8c2dae610a8e9e6926b3b02588cbe2e33c6274c6a63567eeb8ea8b72a45551e95fee9a378f05c946f2f514d965e47a189d80c2b1ea4d14e07a03564c190f719692f1c9ee83de9b63979e62a729912e1e0191a2a1e66c765416987bb39fd79b7797c6f974c01dc350abc5b2f65d25eb61ffebc7d75fc404b4c0282917438d392535d833", 0x10000, r9}, 0x38) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r9, 0x58, &(0x7f0000000000)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={r10, 0x8001, 0x14}, 0xc) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.202390144s ago: executing program 4 (id=3338): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e817782db4cb904021d080006", 0x15}], 0x1}, 0x2002c040) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000001880)={&(0x7f0000000340)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @loopback}, 0x2, 0x2, 0x0, 0x3}}, 0x80, &(0x7f0000001800)=[{&(0x7f0000000500)="363f9e9ff6167b3396f26b68e749985a56c7278d3c66be25b649b17154b393f42d13a6fcbba35bd05ec0c43ff4bddbeb1520aaaf855c4ad9c26afdbacbadbdc219ca289570d864c565d41d18cc4f5e88045aa4902afb11fec548f3252d576df325c54e0233989170b57e00b6930e69705d51a6d4466a550d094caeaca113088e17459a4800bdab8fcb4d63fb436395a21609ddbd506d99adb89385c3053fa88e9e236d0c5603b435d4c715539ba44f7cbe", 0xb1}, {&(0x7f00000005c0)="69202efdc58fb33b5b962805f228b0aff83d2c0762260542d45d52167ae7aeb92e601a7e", 0x24}, {&(0x7f0000000600)="4caa1030ba0521dadc3333fca595b390b3d9d18fce261f7c6c7e2aba2eb97448e7ddcee662c31fa30777fdedd8819fd7da13a5f4acdb72daa2ea49aabddd350e221ee6ed898de45dbd28f39c8721e2e3050e532b830bfb2d25e7f1a7643460de58e08d6605be992c8d", 0x69}, {&(0x7f0000000680)="ef2291eefc8f40267318525ba94ff50267a1417b451ffde2b154be39a6106026ecbccc8544046ac7863995c86a5368ce605d21943dc2b84b966b70414d5482ec3ac834f3a6c813ae4d4ab3aab44a", 0x4e}, {&(0x7f0000000700)="2d3bf0e4d66383845cc10f99d7eea427100356e82c9d5fd4910ba7e4a6404455211b187ac436b27bb230f671e69ed59e315663031115c06df10f90e7773da305df1bb2bd73e6c24827ea8a072aa137de419d12d28a0337a8c208adb2d51346b34fe80de0c54703ceb6b92259faab7e2dab2bb8527a1af4c0bb18fd5ed4c0b3d5231559dff4fecb38feee71603a3bc41ec64ef742ea38b44d8a93d7ecd81b22fe2c182c5d7784810f1d86f0f23ad055ca0c9b28c2bfb53a9a092256f383a536c332e7fe2a03def25db2b7f151bfcb2998590caa628eb85838787b4c760dcf85dc356d3ed9f7", 0xe5}, {&(0x7f0000000800)="99df91830eaf382c20226188fb9ea361b6161fc7a99e5baea5c6eebe5385d6c71873481a8dae9297b94b54bc3334ec87de01513a95e8ec6a700328843f9991859adf0dda7c38b1fad321d2ac882da710cc59043cdb3cacdfeadf02041619a3d7b38b5790a523cc6e534316f6210988d85205a7db75c34ff072c76018123292d5cc301503b589481b7b653ba98414c4c1012ade8b7a28a943bd5f6613e9a320e6e96cc8f69c01c716fc29582d3d4615461faca8a0c155baeeee309aa1521bf3ba6f646f0a20d5c0b7b2bdcb052f0753a72e99f26e1df4ff0f3e55830590a518feb9ac2acdf1707db86209c211cff78acdcf8d59dc9b6a8906ce672ec9497c42e61dd639756aa956a6bf18724c2d231b6aefc6047875b5136c8dff7a411661a362fae2a37e85f78e7e4093c27eff7af9ef19731c98108f1533d9349074ba16e5414618a7629abcd5a936f5472dee061fca1a624a61424b980e1c685f9464d3c312800da658bec8767513de86ca18c567ed8a5d40a25dd708faaa4327ed59a48de49a629f7ec919eb5ff3c9af8db6710623e07314bc43fade693793df00e0379077f1f79cc42a4fc7da9920627728a91012f579543f333f06a731aee7cc13008f3d30aab4d241f934fb8c010325a589c3b5c21d17451d6788109fbf9d904d32d5096051f2ed1a9b22aa3af7a8fd208466d416b70bfe8ea446a1cdbbe9b6109a3089bc41ed94185f884f54c5a91901fdcacc79f4c212908ca783beeb76ead0ae3238f1e0b93f49cb802008b5c139f751fbac8451d62723bcbac1653ebdc55cf1d7aba70bc5dc6339286e4084971f2d124f5ebd938eb43120990a1674cf3fc54dfbb9a9abe658107a77b9317df15a3308357a29a0d44ff71a761c3b019dd950ef8d7f60d378cd50f06fc246ff005b21462c6ce5ec9d3467b6845b631c4def2747f6a002ee4e91f4f5f4b28b093f672e87475cd0f6347800d62eb2ba9b257991cc80c49e4d09f96300ae5aea48a408d59cd8e142d786299690e9a6c2ec1a1558375f90e5d820cdce65820475db6921a511f4d6343edd6c16c3dedf09a00a91a0416b4f40deada8ff56bb43cb26e927fd25e04f3664e1afe9d24e7780ef67fc34f4b73a31e9ffe3e751445a408af1a5f1245661d2e44fd63348dabf758cbb52de104fb559ae1fc898a1741dcb274f8dbde7bfa63800e86146ec40f6d66e4de09c6ff86c34f608f85e88c6582289c0fd62e1b8eb80ad245c0e23e704b9abbf07bcd66a2f5dcc1e5a478599b7b0fe7f9d5349dfa7f37d6b885d662448f7d674bb71078873848d4e38f13c5fba50aa493bf5471111034c4f90dc8d04101bea9ea43bf19ac86a764ef240774b419040663e3ff8b90b21deef67d06cfb599e1236fead63807344e1564f4381f0dc6f727ad0875e5a4004fa9464c7adcfba9854db49593588e6ced00207bcdd9e78ff6c18323ab15361c8941ee1e806feecf2b2f2fd278c6311faea3623a81dceda7984140c86f8aa7a57492e1c4a7061e41add1a3ed8c72db6b2c5d1697155f214b61d89dcd744e4666c64adad6cde4242d8b5de5f28ed717be7269401c0ce3c94bb80874ede663c7261f7089885060b8544997391ab9519a9cb39ed6e278f43f0ba7be4b759b883ef8134f342160147fef56ec3dc8e2af586b3b959cec285d464cc8ff6a1cdc065450613417f588a46762e20ea0f88f100babdeaa55f0b5447358e0c45d1ac706cc3683fc6450db79387432d19b62dcc781ade9aac40583f2e41599e6d5745d9cf665fe116bd06c7dd53f9bc61a1177eff5d2f528b8859bc605ac3d7bc0ad0a09259dc024803deea8f581325e5a9febb75f1afd28d81e29760e83596bbc899006ea6e88013ccb391c491c7939a6c44e68890527816fd82cd74d6c083ffc050cc9d62f59032e72d4f35fbb4c0ae2a1d429424451a0cad0428220d68c1dcdb85093da7dfc9d57ed30f45bd84227dbc4396a16d5c60daf0eac9604b0f363e64b501f6ec8d1b0f20b6024eb97d75cdc3c7a96ddc9ea0fc8ce38b1e132644fc81c44ed12d869b1a9fba027babd3196f9211c62d9a3c0e0ba0071fe369ffef1d4cf041dc8068e146b483f35800e04d1401a817a0c99087990dcba76e4485c3cb6dff0c736b97492309a67c882618cd5adf5fcd4c54f3ad1907f966812efe43f857e8288f03aa7ee368165dcd7b45627cf7fc6a68fdd02bf5897a2a2c20987a6324a2b8c797d09f3a5eeedef0fffb6b95682b1a73b2873ed0574ea46e3303426321cb9e278d8be6dcdeab51870c2b9ccc58f6d8b36c32f898eec4cbc83568cdf3e9dc71a45cb963fcf5b3021414bf5bbe0468e81a389116ec7d9ba2eabe41992f03b4ee10f8b78a7d25604bad7a292a74162ce3b8a8b15e858076a91605d60651a408ac0fda404c4d696b25cdf7c805a4246e35cab9541b9cdb6df797372c5b684ef94d398f9145a791a613a528027381c9e10aeaa8ba554f6e43c7e4137cc5056db92b0721fe84c9b00f13a563b2499f5998f4932725f118e58f7be054b50e6f28a0c5135368352d729140dcb04ee8528148e8e34ced50deeebc5d935b878a342968682ed13c967103400eb16f4eb23091f11bd3a5317ddf929d1c1f4a9d68c3da42fb81d2949efcd61e2bf768f064e37b9fcbfc56e0176f369b0cac4be4e7a69cf988328f6e7bfb76d95424db5a4d77f2a55162532f46e5df8c14ea4aab7a235804d78f03b8a5e3a00f6033b251db0673e93d7f6371cd88fff3d5226efd29ebc4e3c945ad38e446b2d0aca5cbc585316fe79cd155f54df951918d3336b9a5e1292eacdca983299970eab3b41c5aa917abe49abb95f06c35915a065eb55e41d836cad7f677c3c9760670928061884989cc162707a5c1fa10ac3b2e26cca8aeca64a86a221ac23f90d3e80a27b46e25a080eece5f4f6174d6349175a9dca06b3542c224694b2e340461e1155e73a99c8cdc400832be58d6a43daaaf523632191f309e65876bef5486860e25433717f84822a88f4f7480aea5f53ca059f5abe8bbcca32fcea6d5c37f85946887f1ae60dfa207628602bb640475a00574bd56be721aab6ce833f369a4d3bd7c13e5b640e34f72788a174289fc31447e9436f4b5fdd11211cb0a4a4eac34507be14d0ac982e19d963678a5d1d20a7e98e10d98b96e0de08cf98ab8f142ad54a6a1f39278aa491248e46ebf6fa73513d571f6b589accc9af59372206d9295dd088188e0d358041a8380a8d6484aedaf87975768daee9179260148f10f647bd20926efd14cd33999722376355f1bfeca8042530fd67399ce285df19408057c48369dac4f2134164caccd23a17ea24828c528da39ae094607482a30422286b45050120580d273b825318cac5c073a1602ef7af9468620e8e7bce2b7aaad2037351950a8defd6904b5867cbcf6b3b13be327c40f7ce289470a3634c2992c6744845274c26f874f63357e111ab0d3fb42f0dcc7b14e791b254af34a1fb53e5f1a5d3ce6849bd8309d9d0e67ab21b9844740fcc6c635b0667b6acf26a4f3a047ab5ea3743c5a10ac135f43df29d19ed1cec13ef14c6db5d0af21a14c9c13a310b7954687c3d1bbfd960919580440a96d856aff777eb1cb983bce6030b98c1cfb1a9954535ddc994ad62e4a7bf696eb61f5090540df95b27601e5761ca7a0cfd005b17f9c9cfc268258348abe4e5dca9a6083a7ecfced2858ffee432490ed188413dba926b124c27b206d0feeec2b53cfc2e3771dbbb44a361b22474b4eeceddb22202aa3e81ee7070fb6470b432b80e1b1acdff5f014133f2c291ed2aaf0fb159351419b6dab08beca4f3cf48d993e6912f3d789a7db8fb7edc8bcea016e37590a673414dea9969cc4b59a68cacd5a339cbab732916d56a4d4cc6cb53c6fa13f19afc7ee742614526edef0d2e109f716e8b1d260cafacd2a577f4877d29276728e4bd524a78d51044327acb88e260fd45435297d7c78cf8d10a7d423a252ecddbd004c4d814833ad36d204d9d68a5f277ab37b61ec164ba72a6228d434e8d898b59caaf8d2573ffc894ac9e4dc164804e3db22755126a9f31c4dc7fddfbcef607769042fcccf452c72836febfbd93705349a72008e8c1354f4476e58e0fc8fcea1cc0966ee088883d08e46be81ae07eba5a2627db2be9180d6371338a04c31fd2ae8498c4512482a8cd8f642742993433d59791bd41cb54ec6127a6d37af20f2ba6206dd09794e47dd1f54684709a84d5cf9e22d5b65c97f838097521377ed9169b60b5f108ed75a595b4929abf021dc224073d76a57b05c5da412b36b0e713c9b3a2595cf514a315fd6916227a58eb8626b13867320a9774f3672cb6ecc862932911cae1854a96c2a1e0f80455cd7331dbac7128231afaf1706f9a9cc77d20b861d28b7bcfcc35e076e4251a5d2b9a759f48df7668828ee1e2b9766f77f26ff9a2a62e6460c2340fc36a6cc3e882975ca77e083e1976881fad3b3297818d4529f89eed0dc28d6e9823ec265eecb5d85d8a70de9fba17f8a6947aaed5f507f0d9c243eff7ad941eab560f662966ae79180d1d545796d6a4818cffd872f8caea71ee7802a409797d6bbd60166988b7ee2d5327fc29154b06a69256ba35534e4cb6e879cca4b426dd835cb8bdb7e93599f3e49acfc7324ce0383782df319a605b42d63dce18273167bac9a999f4ca978833072c3cd705f0938f91cc093d15fff98209680f1300abc6d2ce99f3c98c80023e4e9c3ae1c6ff97d3996d44befe69bf0e3e5a93c3997841d8d08d8dbb2c48ebabc597df3b28a261ade4fe514e31b4448f32e193485b88d6b15cae4258c07547b35c4a7df5e169933e8d15a481e2a66e77517c461cc15449e53feac8ab3d73f4f061aebdae727d0004bab13f74dc7631321839fdf413b9e08d5322b8604a75563e8bf9a8f2524cc5e377c5ed51e86ca5ffa8500a115bf9addcb88bbf8606791e24291e70fb653eb8c1d2a2ee162285a20afdf986eca1ad781f8b0e3ec525c1f896dd1054f89ddc3431049032c28af90838888d5f10ebc4e5bdc7abba11dadea430ea77fb0fd38c2dd8e2607d14f6c9c32e6374fcc47bfa6e6574e85079c7aac5c9102c4db57f98940edc43bb2b4855a6ad9ef49d43df3c953d982bf7f3b10c3bd3056bc1393e9f3e1c2a0bb44e9230129f5e1ee4d44fcbb86f070b20cba71d4a7b306b58d552e2fdca2879552f21231860d5272bf340883c352f7519fa5f55e84a23d2947937bc45ca54ca8790186e2c56c2ed2a8d6aa86d76e8dfcb9ca076ebd08ae7b06686929bc346c9823052ba7ef8d4ba5e19c4864c994dd489c5e47fc95d6da08e2397e4095b17fb1331035b9316b3062c4378d3c6ecbe08f1cacc0ad32c7bcc8940f49a441c8a29d433cd269bcaeacd07f29cac778a406ab9a960f4011545dce4f5f7905672ad901ea2ecb54092a8ed2bf48950e7eb38f8ca05cce4f726466f9e120f729100bc3f2da3c80451be32ecc0f1dc5d2bf0b79a0b9460e2598b385ecbcf80bf64dcc0676d92641c5f1210c383f87a9659f7b5b3f08ee61a6329bb8ae5fac4e35b5a2b103836cba0af43e33f8e597119b5cc542c42d1bf2351570d1008f2e2d86bc5a2643408541e541694b7963df179952657d275a3d8f409e1ee9218432fcc4652753a2dfd50f4f62ec22e300bef5d53f861891252a59a7dcb3342a04f7357c4c9aee2667c6c52f71ac9b3bd4f77d1c94945d0a650b5084c04c570a49ec078d8819dfd7dde310d4ceb5679c09d0ae527973f428a1ea", 0x1000}], 0x6}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd"], 0xfdef) r1 = socket$kcm(0xa, 0x2, 0x88) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x50) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000007f030010000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad00009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4044) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000300000000000000c29c18120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x400000001ff, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x4, 0xb, &(0x7f00000018c0)=ANY=[@ANYBLOB="18000000ffffff7f00000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000fffdffffb702000008000000b703009655fee30efa56d1efe6d26152bfae00"/103], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000001940)={r1}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1f, 0x14, &(0x7f00000010c0)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000800000085000000b000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000163b00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fffff}, 0x94) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@o_path={0x0}, 0x18) r7 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r7, 0x29, 0x30, &(0x7f0000000100)=r6, 0x33eb) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd634936f2}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x82, 0x0) close(r9) socket$kcm(0xa, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000300)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1a, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x8d}, [@ldst={0x4}]}, &(0x7f0000000100)='syzkaller\x00', 0x2, 0xcd, &(0x7f00000001c0)=""/205}, 0x94) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0x66) 4.103314907s ago: executing program 5 (id=3339): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfd, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef43cfe0000e3bd6efb440009000e000a0010000000ba8000001201", 0x2e}], 0x1}, 0x0) 3.892721032s ago: executing program 7 (id=3340): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'netdevsim0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$kcm(0x2, 0x5, 0x0) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x1}, 0x0, 0x1000, 0x43a1bd79, 0x4, 0xd, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYRES8=r2], &(0x7f0000000280)='GPL\x00', 0x0, 0xfffffffffffffe7f, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r3) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) openat$tun(0xffffffffffffff9c, 0x0, 0x4241, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, 0x0, 0x0) sendmsg$kcm(r6, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e21, @rand_addr=0x64010102}}, 0x80, 0x0}, 0x20000080) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f00000003c0)={&(0x7f00000001c0)=@nl=@kern={0x10, 0x0, 0x0, 0x10}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000240)="1f", 0x1}], 0x1, &(0x7f0000002500)}, 0x2002c404) close(r6) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x210, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35f022eb"], 0xcfa4) 3.840295374s ago: executing program 5 (id=3341): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x657a, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{0x0}], 0x1, &(0x7f0000001500)=[@ip_tos_int={{0x14, 0x29, 0x32}}, @ip_tos_u8={{0x11, 0x29, 0x3b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @broadcast}}}], 0x50}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x6, 0x8, &(0x7f00000016c0)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r1, @ANYBLOB="6455723569ff68e1c051952ec933272d8fe0753305e580805988c7c84c64246ca802937bc48dd1707e309b63b0910002cee93f045f208adb622e6843209f955b85a77cbfb37b2d73e402abea5fb7fe00896e7f09445bc6b1736ee6b7ebc87e99469a914ea86583e146995825da9aa026ef05aad2c1152d062a0f03ddae548d3643f49b974c4248a1ea001a10", @ANYRESHEX, @ANYRESOCT, @ANYRES8], &(0x7f0000001280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x480, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x4ac269b8, 0xaea}, 0x4010, 0x30, 0x10000, 0x8, 0x3, 0x90000000, 0x6, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x2, 0x200000000000003, 0x106) syz_open_procfs$namespace(0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'sit0\x00', @local}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'sit0\x00', @random="4f33e363a4b1"}) perf_event_open(0x0, 0x0, 0xd, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180100"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="1b00"/20, @ANYRES32, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="02000000040000000200000000000000dae3b4e500000000000000007a15ebae9c9670d24ce2b963cbe9c9abe380d351e4edbb7c9111281c9bc072fd6220b27999d45f73817b4f05ce160ae0759c6092f022762eb9a3b3d58a7b2168aeb94e1e0814e5ba11a9d25202c6354dc60eb2994d65b56073e85ec262e42e64d99f2ed962f090593ff049ff774db3cca116ec3d54f6892fd64b0e337e7457e0b385fdec9d4ce99cd72af20778c963f5aea159a78adcc60e55e91d14d5ed20f0bd2e8e6216f471e85acce388334e9205144a2ec884bf6ca801b9"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x1d, &(0x7f00000018c0)=ANY=[@ANYBLOB="1800000000000000000000090000000000000000abaef80d84282f5bc9528f5f28dc7102ac4d284174709bcdb5fb69d5b2fdb7203fb17f487f2f80dfd74dfd2335ead580ea8d8ef091c347edc0b9c2d163e2d38906b45211b77652a7378aac52270e94dfeee8f99ae4dbae56bb6dc169416dcf8633", @ANYRES8=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018160000", @ANYRES32, @ANYBLOB="00d50008000000008659d45c", @ANYRES64=r0, @ANYBLOB="0000000000000000b708000063a1b6107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400006c215bc88500000082000000893a3000fcffffff18100000", @ANYRES32, @ANYBLOB="0000000000000000bf91000000000000b70200532ceafeff2b8aa0307bb500000000008500000085000000b7000000001240636fa307b26cbd77856bd9e755f09e6bb3518892b3895aa7bcadfc4399eb4fcfb12e0369421794ed7dfe6bceb380345c6a958ba6af0dac786dbfc31782edd5ec8feae9595148d62fba2ea2b46ff05e6250ea7fd026a2046085abe0768658a3e7851b7a2423affb0c34de7f5ab81f73c60f5cb1314880d34e0968b661fd55f08dae7eb592af03973eb9bb06f0aac9911079a4360da6478937c7477f98089fa2de8ff8cff22e99be97"], &(0x7f0000000940)='GPL\x00', 0xbdb2, 0xd0, &(0x7f0000000980)=""/208, 0x41100, 0x68, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000a80)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000001140)={0x1, 0xa, 0x60, 0x28}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000b00)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000b40), 0x10, 0x400}, 0x94) ioctl$PERF_EVENT_IOC_QUERY_BPF(r4, 0xc008240a, &(0x7f00000011c0)=ANY=[@ANYBLOB="04000000000000000000000000000000000000000000000045cdcee3f94638a7bcc839612cc4134d609cbcadf584be2345f02492d0e2591b033764ff0196421346802f271b1e1885248697ad55fbd37092b4371a9d7f684e1b8814401bc717a8436863096e9849a57e6d33f66426ffd016bbdecb3a6c23d3f205ddb6452dc18a8cbee6fd6914dba515aa574fe676eeaa7e07a03d096f90e3256dba7b0e1a41fef2f81e7bea9679316214825bf940edf267007028"]) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0x58, &(0x7f0000000540)}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x4, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xbc, &(0x7f0000000740)=[{}, {}], 0x10, 0x10, &(0x7f0000000780), &(0x7f00000007c0), 0x8, 0xf9, 0x8, 0x8, &(0x7f0000000800)}}, 0x10) 3.456486165s ago: executing program 4 (id=3342): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) socket$kcm(0x11, 0x2, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200002, 0x0) socket$kcm(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x8, 0x2}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xd, 0x4, 0x4, 0xc, 0x0, r2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0xa0}, 0x40002002) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x81000600, 0xe80, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x9, 0x20006}, 0x28) 514.036796ms ago: executing program 4 (id=3343): bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000000000000000000000000085000000080000001801000020696c2500000000002020207b1af8ff00000000bfa1000000000000070100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x94) (async) r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x1}, 0x40, 0x0, 0x0, 0x5, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) (async) syz_clone(0x20102400, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r2 = socket$kcm(0x10, 0x3, 0x10) (async, rerun: 64) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) (rerun: 64) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc81e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4846, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) (async, rerun: 64) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)=ANY=[], 0x20) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="911029000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) (async, rerun: 64) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d20400648c2594f90b24fc60", 0x14}], 0x1}, 0x0) (rerun: 64) 510.148326ms ago: executing program 7 (id=3344): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x8000, 0x10000, 0x9e4, 0x4, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4040850) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x11, 0x200000000000003, 0x300) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x3, 0x0, 0x0, 0x2436, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000001007d60b7030000000000006a0a00fe00000100850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465cbf188ef10871b81ac7553358380b3a1f59916ffc9bf0bdf81524f07fb2819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6cd87cef9000000a39c15a7ef365cc27dfeac7b9b0e9048517354b0ca4f9cf8b59ee6fa003fe1f2c4c15f20a07db4583a462d8be6602186fd68ee14a19ea2eb42122b8635a66ce6b5b92356081bc0f18a0ca83dbc089a9813c1efa26001b3f486ebfaae85c4d0b96778478ae5355e6f923b11056969f486f80a35f7f2339704fa93fa915ab8e1e0d7f31ebd19455e6827cd493907bf9d0000000000000000000000004e1fa60acabcf0553910ca2e5ea499fd5889dde9261f0848a5b8af657bfc96049308e8953431b269053627a1523551c160c813969925a892d266792352ec0204596a37ce8d6d260b32239bddbce2e79f93cb5a0ad897adb53b397d07c50f84b74f2605a565ee149016aa75ea31c0087dcd821b47c8b36efc6da4fb2ea7f1f36c85856b73ac9872babc62149699b6b8c796a79d833eb4b5ca668d430db565"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x18, 0x0, &(0x7f00000002c0)="b90103616908068c3c270040e700009e0dc5cf1d66fff2fc", 0x0, 0x8104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 462.958618ms ago: executing program 5 (id=3345): socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0600000002000000080000000f00000000000000", @ANYRES32=0x1, @ANYBLOB="0087d1ac86c8da00000027c100"/26, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1b"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) socket$kcm(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8946, &(0x7f0000000300)={'erspan0\x00', @random='\x00\x00\x00\x00\x00 '}) socket$kcm(0xa, 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {}, 0xf}}, 0x80, 0x0}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd028ef8020ab0700040005234538ba55"], 0xfe33) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001bc0)={r1, 0xffffffffffffffff}, 0x4) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001c00)=@generic={&(0x7f00000013c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r5}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x20000000009, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, r3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000040)=@generic={&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r6}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001380)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000, 0x0, 0x2, 0x0, 0x2800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r7, 0x29, 0x4b, 0x0, 0x4000) r8 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r8, 0x84, 0x7, 0x0, 0x0) 401.023189ms ago: executing program 6 (id=3346): bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x5, 0xf, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000ea00000000000000070000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b703000000e6ff008500000083000000bf09000000000000"], &(0x7f00000005c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100ff}, 0x94) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_bp={0x0, 0xf}, 0x1000, 0x4, 0x0, 0x9, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0xc, 0x0, 0x400, 0x4156, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x10563b, 0x0, 0xfffffffe, 0x6, 0x10000, 0xfff, 0x0, 0x0, 0xffffffff, 0x0, 0x7}, 0xffffffffffffffff, 0xffdfffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400008"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x890b, &(0x7f0000000000)) sendmsg$inet(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)}, 0x8000) r5 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x890b, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) 256.906403ms ago: executing program 4 (id=3347): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000002e40)=ANY=[@ANYBLOB="180000000000000000000000fbffffff850000007d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008080000b704000000000000850000003300000095"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8d82}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000001c0)="2b1c52be5f144dd0c2db5cd68c42", 0x0, 0xb20c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 247.669744ms ago: executing program 7 (id=3348): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0600000002000000080000000f000000000000", @ANYRES32=0x1, @ANYBLOB="0087d1ac86c8da00000027c100"/26, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001bc0)={r0}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000040)=@generic={&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r2}, 0x18) 151.901706ms ago: executing program 4 (id=3349): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3f, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x200f9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd79, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22f, 0x5, @perf_config_ext={0x0, 0x6}, 0x1000, 0x4, 0x0, 0x8, 0x1b17, 0x4, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r8) r9 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="1400000037000b0fd25a806c8c6f94f90524fc60", 0x14}], 0x1, 0x0, 0x0, 0x20000000}, 0x200000c0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0x7, 0xffffffffffffffff, 0xa) r10 = socket$kcm(0x2, 0x200000000000001, 0x106) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_lsm={0x1d, 0x0, &(0x7f0000000080), &(0x7f00000002c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x1a, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff24}, 0x94) sendmsg$inet(r10, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x30004001) r11 = bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$TUNSETQUEUE(r11, 0x400454d9, 0x0) setsockopt$sock_attach_bpf(r10, 0x6, 0x5, &(0x7f0000000040), 0x4) r12 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r12, 0x84, 0x21, 0x0, 0x0) r13 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r13, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f848310000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c2688110000000000", 0x4b}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r5, 0x0, 0x2100) sendmsg$inet(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xfffffe45, &(0x7f0000000180)=ANY=[@ANYRES16=r7, @ANYRESOCT, @ANYRES64=r11, @ANYRESDEC=r9, @ANYRES8=r6, @ANYRESDEC=r6], 0x128}, 0x4044) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) 117.083617ms ago: executing program 6 (id=3350): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x657a, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{0x0}, {0x0}], 0x2, &(0x7f0000001500)=[@ip_tos_int={{0x14, 0x29, 0x32}}, @ip_tos_u8={{0x11, 0x29, 0x3b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @broadcast}}}], 0x50}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x6, 0x8, &(0x7f00000016c0)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r1, @ANYBLOB="6455723569ff68e1c051952ec933272d8fe0753305e580805988c7c84c64246ca802937bc48dd1707e309b63b0910002cee93f045f208adb622e6843209f955b85a77cbfb37b2d73e402abea5fb7fe00896e7f09445bc6b1736ee6b7ebc87e99469a914ea86583e146995825da9aa026ef05aad2c1152d062a0f03ddae548d3643f49b974c4248a1ea001a10", @ANYRESHEX, @ANYRESOCT, @ANYRES8], &(0x7f0000001280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x480, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x4ac269b8, 0xaea}, 0x4010, 0x30, 0x10000, 0x8, 0x3, 0x90000000, 0x6, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x2, 0x200000000000003, 0x106) syz_open_procfs$namespace(0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'sit0\x00', @local}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'sit0\x00', @random="4f33e363a4b1"}) perf_event_open(0x0, 0x0, 0xd, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180100"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="1b00"/20, @ANYRES32, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="02000000040000000200000000000000dae3b4e500000000000000007a15ebae9c9670d24ce2b963cbe9c9abe380d351e4edbb7c9111281c9bc072fd6220b27999d45f73817b4f05ce160ae0759c6092f022762eb9a3b3d58a7b2168aeb94e1e0814e5ba11a9d25202c6354dc60eb2994d65b56073e85ec262e42e64d99f2ed962f090593ff049ff774db3cca116ec3d54f6892fd64b0e337e7457e0b385fdec9d4ce99cd72af20778c963f5aea159a78adcc60e55e91d14d5ed20f0bd2e8e6216f471e85acce388334e9205144a2ec884bf6ca801b9"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x1d, &(0x7f00000018c0)=ANY=[@ANYBLOB="1800000000000000000000090000000000000000abaef80d84282f5bc9528f5f28dc7102ac4d284174709bcdb5fb69d5b2fdb7203fb17f487f2f80dfd74dfd2335ead580ea8d8ef091c347edc0b9c2d163e2d38906b45211b77652a7378aac52270e94dfeee8f99ae4dbae56bb6dc169416dcf8633", @ANYRES8=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018160000", @ANYRES32, @ANYBLOB="00d50008000000008659d45c", @ANYRES64=r0, @ANYBLOB="0000000000000000b708000063a1b6107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400006c215bc88500000082000000893a3000fcffffff18100000", @ANYRES32, @ANYBLOB="0000000000000000bf91000000000000b70200532ceafeff2b8aa0307bb500000000008500000085000000b7000000001240636fa307b26cbd77856bd9e755f09e6bb3518892b3895aa7bcadfc4399eb4fcfb12e0369421794ed7dfe6bceb380345c6a958ba6af0dac786dbfc31782edd5ec8feae9595148d62fba2ea2b46ff05e6250ea7fd026a2046085abe0768658a3e7851b7a2423affb0c34de7f5ab81f73c60f5cb1314880d34e0968b661fd55f08dae7eb592af03973eb9bb06f0aac9911079a4360da6478937c7477f98089fa2de8ff8cff22e99be97"], &(0x7f0000000940)='GPL\x00', 0xbdb2, 0xd0, &(0x7f0000000980)=""/208, 0x41100, 0x68, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000a80)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000001140)={0x1, 0xa, 0x60, 0x28}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000b00)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000b40), 0x10, 0x400}, 0x94) ioctl$PERF_EVENT_IOC_QUERY_BPF(r4, 0xc008240a, &(0x7f00000011c0)=ANY=[@ANYBLOB="04000000000000000000000000000000000000000000000045cdcee3f94638a7bcc839612cc4134d609cbcadf584be2345f02492d0e2591b033764ff0196421346802f271b1e1885248697ad55fbd37092b4371a9d7f684e1b8814401bc717a8436863096e9849a57e6d33f66426ffd016bbdecb3a6c23d3f205ddb6452dc18a8cbee6fd6914dba515aa574fe676eeaa7e07a03d096f90e3256dba7b0e1a41fef2f81e7bea9679316214825bf940edf267007028"]) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0x58, &(0x7f0000000540)}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x4, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xbc, &(0x7f0000000740)=[{}, {}], 0x10, 0x10, &(0x7f0000000780), &(0x7f00000007c0), 0x8, 0xf9, 0x8, 0x8, &(0x7f0000000800)}}, 0x10) 613.51µs ago: executing program 5 (id=3351): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7, 0x2}, 0x1b002, 0xac5d, 0x3, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8001, 0x1946}, 0x0, 0x0, 0xe, 0xd, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200002, 0x0) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x81000600, 0x12, 0x2f00, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x4cf6dd15, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xae9, 0x30, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe1b) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r3, 0x4) close(r0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg(r4, &(0x7f0000002880)={&(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x2, 0x0, 0x1, 0x4, {0xa, 0x4e23, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0xff}}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000000180)="20bd241355cf42d377079b9c683e435b0ef6dead96217e2c9bc3188d44ca7c90992bd6337c0100698cc971eac4e01029b25f764a042448fe1573b1c1728ee16c3b96f1e30e9c7e925134e08cb5249ca111e67266c46eb4eefdbc427f8e985135d58e186d997890763e7ca097753aec4df73718ba971756224983565279c3014cea81987c113cb697f8c84a2ba55464cc44c64bae10b01eeb37d39f7ce63420a49c9005f3dc0745925b43c4003365f7c9c4f49c06cfc8f14765ba768cd106b5a5ba365f7def892c47252d1c59e586357d7a6194c42c277c50b3ef55e415aff74710e4875d9817d120e60253e1eb3a9c", 0xef}, {&(0x7f0000000280)="8e0bcbe690d5649dcac856e89eb3646a727f4faa12afb4380b94a643d5252335e20ba7549a0c4005ef7f57892c6c419d1a5097c587ca7a2e887d201ddff9655103a12ef76006f18be81f25ae43358f4e1322f826bde80012114c964d0c64", 0x5e}, {&(0x7f00000003c0)="db2eb0c32c6417225e230fa2a559913eae63d54e29422f152f38e81187e0a26a73708fda5d346c81b97a7ea34591437adf9bdb09b7a83681e8738993fe36fc953dacf3e1d09b33e48fdd56c19c871ca4794240cea4cff84dcbb7284a4b94481e70ceb84807747d66e321d4c444955e090bff5098bb4c07f6e3d23bedd93ed2b0afadb68de8cd5bced33140c0b2e8a94ca3a4bac37f51b87c8fae5e00dcb50844f64b9fc2b056370ee1195693d3af57e77066ae18afb0b0579e54c592b55afccd9dc67ba7b8474e5549acd8942913410a4f8b", 0xd2}, {&(0x7f00000004c0)="417080053fb8a25806c9dbce9671d2cde842666b3a69f8e18e4398190452f84dce726d3cc3977486eb6ddb7fbab3799364e3dbda7f2a3c2d22f82128ab70843a33ffb48b9c666bb09b383fd5cfe202e9ed5bbc59fab478aab3b6d5e67470f86626a55746998aa756a4088e7f04e4d91f2b5af7f37654f6ce9528e0a4da2a8632057cc09ab479f8d282fa8368e8f72ecb601178dc63095e1fdaadb6b8e85f2e87841515dc1e0d21bc7cae19a1235573e23ea2596fa7d388d75bd74fc2eb634d85b117867427960d047933575d54c2a6fb53f03563c4ce039c6cbbfc20fd91321df41b384146102057c74b5db63957f67d6a263d29a5096b4cebb97abc26f2c3cce563a83ad0e2560e8ba705377607f9517e965495b53600b23d8e2674e66891b8cf3b2352a6d64e633f1d4e64ff95275deb993bc424614ad9f05eec2b2acd632dcb6f78821e554f60620503c87c467cc440227f0b14c8d2ad4db588d69a57ac7c1875d8dd77daaedefcb75804ded577eaf20ec57cf5ddc037a5b82b87a6c2cdda313ca68d4083b9cadc68040e549d56ea4a28dae3aa561e5164c1a8e63d362071fa7641b0c475913ec244202647c2bd62f306ce8f5ac252b300f78eb57c2d0d1b18c08bcdf93ad2bed4f115fcb5cc34e9b996a663cae93294211ead9a9e226775f4a0bced8c0e1997e58b2ccbd84698a79b5bff59150b55b5b6d1575d06d1124385600a0f6492e3aa1f9c692773b3db9028b437d97b90953eb8d74ba9f239864a0afb2602f4b512b6bb81847214a818e8f0dd1c3ca83aa9fdba268db5121744d80e42378f8ab717a4d6bdfbb3a6d186aa7c21b9245bb27f63a16d548e7019d5be34c128bec4b620d97629841f486d2494be7fe113466fbb3c2194d05c57d723465c604a89146a63aba58038e63a205532bd0d1726b87db1dcc2fd90b07ed9d88aeafeb376491606b98aa39777c840200eccb7d03c643d1f44f5982b95974029e3084a4d681a0218f7bb8e77929a564c387610b30221ef0968e7b595ef273cfe3a6579315addc2bbb58ea5879691cceec8876c7d20f6ea2df3449b43152b07cd1dbcb1371e6737c8d163d0737bb27ab451e6ded0b2e3ec6a3e816e5e548bc0398da7ae285f7088950f7210359f6c9835da3a3f5eead1f7527e71b8a1820346c60c04281f634cc892714918ddc70d0995afff4b6cdc98f503035e507a22a66a9e6b0e255b8906b1c10a0ba7a4ca96696b54548956def4c5695e679d9e6b87d926f3d0e2d188e994d3fb5970f8cff17f340edf98246feb5e44540a92ab62b49d4e21a23590357b07dd13e1c6c60cf6fb9d18ac6909c83f1cc3546f137a31cf75bc3983a5944716131b1bfc4d9c096a0e2a1bf1cec74346da3abdb0e7151d5467307e751d9ef485dbbae5d0ecc3ea8d7e264962405cdbb0fb142076378bc5ccb23ee83ec91c41958729f03865c18ad8e86ac1248b4091e0b9eac8c9f285efa9c096cc1171acc9edb6ab3f2f976b1421bfaaf2234e12f248a21db62d1faad3c2d30e297af72ceaf9ea8f37099e837ac89bed62670482346fa17e4842a075e399204c1a0f095bd06f7c9f239fc777edd681fac61f46ffd61a9bef79e1565196041db4754f7b8c4b94067b25dfec0fb2149fc216d1ec1e7ac292928e21e7260be7365742511627ae2702031a11064552333a48ca425b5aebe7fa6b7f8135543726ccb9d2dad527ce7f5ff53a7df432c29ff30a7bb865b8dbb7d14f3db0cca9f4e18e54877b3c57dbada986df3de8cd503eaa9aee8c8c43567237b77ce2609c41c36508104716b6a5f2b7b59ec30dae5405edc00ba00f06817fb4cc1e8863fa58ca01cb720b71f45b94f8b1a65640842045f5f90cddc573ceb9f61e93f4c587925020fa106b54a9efb50457ac5cb4b63ca0b19b9695f81723d427ded3d34db3af8196b9aa139e22e96c3773e218b51c285e4d7132f9dfbc3fbddabb2192fe1c03ae100fa27447a56f5fafaa628a16f6bd2f39f7eeb4ae665d43e685eddd816f12f9daacc73ef0506b425403dba7feae33157de5568ebdf3c0a42b06626b8c28ebbdd1a557f09ee5609ca90476262500eaa191200e5b31b31b93e8be5dd71b5fb99cc5e7da5d8aeea1708bcca9aea99c9a73159c341fa0ac423af2fd9071e94a81ee8ccc3c241cc2bf5e4f4a9842a96c933c617eb57a51def5c2b50b25b23d3f7ecac12644b034571c949ad0c86b256d6567f41dbd40d3b43a35cfb5618d6c5dd98876746f2a7bbaf9a973dbee80b8af141076695d50c8305aeac924cee3e77982efde99da5fb23aacaafe17173894d78b97eb57dd36533002a356ff3cd49ea5c5e8f41a83a4a5a9a9f5691aebb8fd123dc2590232f1873aee117c66d88134e9b9903d6272e6e1985f48d21e8f8b61fb37aee63c13cbc025bf0cc19d467c1ce247546198f560e98e633c434ea62ae37afe6db898c59def74fffc8c22e6cd77bc040855077089e77c48220f0e9d49e7ce73595edbb8c77b04b034021aee91d4b484d1cb58ed4b464fd3453d0d0f96b73c7ebb36570e977e08aabac9cfcbce97e0935ff633588aa11f5e55b7f08819e400df72d43ddfaa690f0feee4d8819515194ff3bb7c98fa98af62e3bcaef34a5bbc9b83226501fc6dd12c3061f0be4f1cf9737a1887b073076e2211a068e8dc923c7e70afe93aea6634b961771c9f7b33eda28d635e634e2aafc5fb54fd567c59beebbbe200f7491773629f14fd0eb03f8f635dbd696e879a76eff36929c28c38718a6a2cd3f86afd046d8627a6f1dc3f107dce67914fb2eea991f780a3b5fc98444095c69491d41d294c3ef765e0a446e6290e7c5a0d0d425ed4aea7eeacfdc335eb3dff44bb1ef045bf2fa8fcec1eb8f9c74e05261aa917e7470537ddc1ed4008c901b622e6ab3e06f3fe4c9f789bbfa2f950618d47ac7ddfa453bf40f5f1ce8281257f048f893ebdb3461415c8a4799e9ca459af9b69980a7f9abb8e862a31af8d658fef9b39a6dae955e14c20dc95ddab27505e891dbe2d307c7bfa3367bcb036d4f8cd010252fd30d81cc51a261c10074096f49a6e4182c853324088c5e9985497aa209f360364e494b0b58ac3da3246622f512a7204111dd67b037dc660549fdac71ab937b7f561b817380daa06ba6068040733aba4a9af6b9d3edf86b4caa8682544c7a3e3f04ce8f6bc7854a15e2d34af4939377ec61eb558e21dddb784a98211af4c9447317051157f70e1e77dc629a0712a9cb74f8d924d38884e1af0a8ae8b19f1daced7f308a27e59ddd0885c2b99ab83d039a243364df2ca5c16be10b1e8262b36217cdb3176a50d6daed38ad62cf08e770687e0c255b15faf73edf7fa801276176d493f82b4a9205bdeb68159bd7d3be1887a202762f0e3d7191398e17f5ef6082568e7f94b47c8ca474f0f2c085158a321b052e8c8a5deff26fb82db7e759e037e5070ad2bb3d69ddf388b1013431b37e56648a143a300e67f76b669c7304d984431427ec63a529ac0d3ceb861778ec1a5da06012100159fe7852a10523ef299df5d0a26883dba127357570bc78893f253a8eba1e54d39d1138d190f35a69351abe06633b367935d6d1ae266eb8036e60a3624d97ad70ca85271e7f3fd99dc27a124d6b4393f15c75e97be1040dbcbe0845fce74ac587af222111d22c02b80a0f985e03a9b2d9711423fcd8c0cf5336e94f62b821f23a2d1a29910891ae70e7ebcc6b688bf41d018a93a3cfc219abb8efeb54e765f75976063a8b8377ba42879e87b796cc7db8ca27a1264fa6fc60b73e7cabba6394138974dc9748f3197db9760d5f767fd914a589dc3a0dc8b19de370dfeeb2b3bb2dd084d6d9d1b00ae7cc112cfbb2aed648095c32a9e06c7514e0bc574adbd78faa10e4af7a8c7856379e0bed5b323c63b2731b0eec6c104ecad331ca7b13c671003a3abc8ee022c66be9756373c9c57701013035aef496160189862c9b7e236302df3b20cf4a981a5b7eddb6cef3c1287821263b3d9ebfa314480d0509074f318c5c9920700e455077faed1d147c53124ac1c505046cc6cf963fe67183b381db90b4f95ecc1de3b588a7b9f0547400190048a4e68c3b1fb4484c5ce4a5903c1478feb0951e9c71612758965f2bdf0f5b95368e8c0d352e3fe75621c2bb2c65f9138a2608ac34c209afc2defc2fc314c47afe66ad79fa07fbf0fe11e40984c185c40bd4594be21ee01304c804c809fd55c0dbcbecec65b993b90043c32f61e1ad13c99a95c0c1d65be597474ad6ef90441c5e95e5a23b018de069b9111be7cc9a53a4d2d33ca4437a3ef2b848c55ddf03dade2dc37d80245479da4fe9fd980405756908abac3b77aaef85dc9a4477e1c88caeec780c556200f665dc8e26e103c272769988ec32c2aedca23dedb7719b2ad2b3921ea12c76ce8f9d257bd722d126af5c0a96a607c72004a0fdfce4bee9fb017786a7753ad5f713f95b2c4dec1180d3857fb355bc04ad76b25eaa4fe9243d60fee82c86229a2e1f3f9e9346669496fac757905e3937d639f6ee8fc654df3f7a27ae22d17cf42540891231a451c54ef1851807a61b9888e3ecca8d4c9588ee974eaf88191dfbba9902e01cfc3e0156dbc716476064100c1b57880b59fbdfaa774b6ac0d567ce37031413f3054a83a3cd812b3d2e95548f47567718878bb0d13fed710ce0f555e15dbfd2a6fb8918fcd45fb4f7a52d8b0c109af73b9c9c6e4c1ec19bb28c08a08c8babed27762c078be9715e570474bba9aef25327b05354c6459d7585e4fc718d720e6cb9018de29b550d7020fec3e2e2b80500a9459ca9d237ef91a99b4c1dc8b98add896b0811fcda4c9855e21d453175f1b01a100f1499a209c0ad52156f18e583c757b19f2ab09a0a1f582acb7312290c4cb31f9978ef58cfcc6bfd24f8de162078723358307ff463867a30c5328cdcfa8966a5b47ac597967ba432c5cfd0d530c1601d88ba01ed57d3ce249a7f23032f620bfc0b89968d5a53137c8e9407524d1a3327bfe4f324ad54170597717e09d21043b61a0f0e92342e95273691457d693a80ad591184dd1436cceeffe578e625c4aab0f8eed9d8904c915d5eb1440c645e26ad8e498205b9575c7452549623d2e6c407066023da8f56f09206029c0368136f0f7ceda87b1860b22a3866b0803a573206d081cd7982d0eda123186cbcf7ef0e3149921f4b308b3dd502e70d5e961512015cd0ae9bc6c494ab542e3ba7427fd6fb23d187004b92ace014b43bcb23717ed94cb9fd742c18c084a18a02af4e8813e5e0c0283b63667263b4450d7f041d5d212d5341e78b0b0ba516cc56762816c752c7355e5b1749d1604763469333eb115931b61af0d57459e0cec89e52a1c2a8729092845de4eaa14cb464de0e40cce097f6ff6f2ad2c0358409ccb2072c03c4957b68f083ba4bd4a0cfcf752247e687262637b8d37cac5fdadaba7e7bd642b0e8b24fbaa0eed7acf57d5adc9b946fa8128d28c0cd707a3cc4428967aa37d5ec0e9aba3da4f5bc8595e69559f28a709aeac04e2d95fc2551a78019c46052d142cb2fdd662d2e7a760b3c2f38f7b4338b9aaf95b0e0d6f31746859f72a94bbd8b3e08d8ba1fea1dd91966fdcd3dfa7a303a5ffa171485c177a961a2364a37dc730ccbd80f0ae44d179477843207bfe7cda08fb30817dd0cf1be818d0e884c8d8865431a2d9e7fd0fd18ea483248264236d66750e7581bc49be6df6058da5a9b9ca073e24015103daf2553d0e19a9f54d241eb7ffb442a50e7d645827afe7", 0x1000}, {&(0x7f00000014c0)="8c866e", 0x3}], 0x5, &(0x7f0000001580)=ANY=[@ANYBLOB="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"], 0x12c8}, 0x8851) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f00000028c0)=ANY=[@ANYBLOB="760afdff00000000611118000000000018000000020000000000000000b5b6e87f68a059ba0000002ad44b38bedd39454ab30eef45184e66b51f2a2e73c6cb503b2937021d374f395b34c2338a6db125f22ab0f2a15b824f08cc9b957bc2ca22a1bea152960b1d4443392f7dd74dd8fb655dc743c4c71358522da49737bf7c639db24ac09dd062e920e2d72a5ef5669cdfbc"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 0s ago: executing program 7 (id=3352): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe327, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110c230000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0600000004000000040000000f0000000000000070a040589d1a9424582ba02a72e5b6de3263be863d9e1989362d5bf2f1e181490b341793cb8f82e3bc0598250b845d8bba8ec2deafa5dc69062f354106edb681e73fe22b1cac153cb3717053bb0bb906b458c9a4550e370ba9d48f5bcef7d182b9f01663075e8b3ca05e7d56cd9b67e4b1edd64b159ea3b7b115a137683d6d145ef40ca6daee597aadc658f7de5642e2fec1fe32c7ca4f445151b456920987eaf17807e10692", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r5}, 0xc) ioctl$TUNSETOFFLOAD(r3, 0x8010743f, 0xf0ff1f00000000) kernel console output (not intermixed with test programs): 14214] should_fail_ex+0x39d/0x4d0 [ 677.517211][T14214] _copy_to_user+0x2f/0xa0 [ 677.521642][T14214] simple_read_from_buffer+0xe7/0x150 [ 677.527046][T14214] proc_fail_nth_read+0x1e8/0x260 [ 677.532100][T14214] ? proc_fault_inject_write+0x360/0x360 [ 677.537770][T14214] ? fsnotify_perm+0x271/0x5e0 [ 677.542634][T14214] ? proc_fault_inject_write+0x360/0x360 [ 677.548285][T14214] vfs_read+0x28b/0x970 [ 677.552459][T14214] ? kernel_read+0x1e0/0x1e0 [ 677.557069][T14214] ? __fget_files+0x28/0x4b0 [ 677.561674][T14214] ? __fget_files+0x28/0x4b0 [ 677.566276][T14214] ? __fget_files+0x43d/0x4b0 [ 677.571000][T14214] ? __fdget_pos+0x2a3/0x330 [ 677.575624][T14214] ? ksys_read+0x75/0x260 [ 677.579999][T14214] ksys_read+0x150/0x260 [ 677.584289][T14214] ? vfs_write+0x990/0x990 [ 677.588739][T14214] ? lockdep_hardirqs_on+0x98/0x150 [ 677.593959][T14214] do_syscall_64+0x55/0xb0 [ 677.598394][T14214] ? clear_bhb_loop+0x40/0x90 [ 677.603088][T14214] ? clear_bhb_loop+0x40/0x90 [ 677.607790][T14214] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 677.613812][T14214] RIP: 0033:0x7efd51d5d68e [ 677.618242][T14214] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 677.637867][T14214] RSP: 002b:00007efd52b82fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 677.646298][T14214] RAX: ffffffffffffffda RBX: 00007efd52b836c0 RCX: 00007efd51d5d68e [ 677.654308][T14214] RDX: 000000000000000f RSI: 00007efd52b830a0 RDI: 0000000000000005 [ 677.662318][T14214] RBP: 00007efd52b83090 R08: 0000000000000000 R09: 0000000000000000 [ 677.670301][T14214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 677.678279][T14214] R13: 00007efd52016128 R14: 00007efd52016090 R15: 00007ffeb99228b8 [ 677.686277][T14214] [ 678.189956][T14225] netlink: 'syz.5.2323': attribute type 12 has an invalid length. [ 678.215209][T14225] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2323'. [ 678.269677][T14226] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2320'. [ 679.799918][T14235] netlink: 'syz.4.2326': attribute type 28 has an invalid length. [ 680.359932][T14254] netlink: 209852 bytes leftover after parsing attributes in process `syz.7.2329'. [ 680.475488][T14254] openvswitch: netlink: Geneve option length err (len 1788, max 255). [ 680.550769][T14239] netlink: 'syz.4.2326': attribute type 10 has an invalid length. [ 680.595855][T14239] team0: Device veth1_vlan failed to register rx_handler [ 680.646274][T14253] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 681.947455][T14268] netlink: 1057 bytes leftover after parsing attributes in process `syz.5.2332'. [ 682.264051][T14266] netlink: 'syz.4.2331': attribute type 28 has an invalid length. [ 683.077555][T14271] netlink: 'syz.4.2331': attribute type 10 has an invalid length. [ 683.171097][T14271] team0: Device veth1_vlan failed to register rx_handler [ 683.520078][T14289] netlink: 'syz.4.2336': attribute type 9 has an invalid length. [ 683.539993][T14284] netlink: 'syz.6.2337': attribute type 10 has an invalid length. [ 683.558238][T14286] netlink: 188 bytes leftover after parsing attributes in process `syz.7.2338'. [ 683.594837][T14289] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.2336'. [ 683.965511][T14290] netlink: 'syz.4.2336': attribute type 9 has an invalid length. [ 683.977767][T14290] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.2336'. [ 684.075466][T14299] netlink: 'syz.5.2339': attribute type 28 has an invalid length. [ 684.247045][T14299] netlink: 'syz.5.2339': attribute type 10 has an invalid length. [ 684.267759][T14299] team0: Device veth1_vlan failed to register rx_handler [ 686.610096][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.617039][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 690.690513][T14331] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2351'. [ 690.699988][T14331] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2351'. [ 691.045296][T14344] netlink: 'syz.5.2354': attribute type 28 has an invalid length. [ 691.123106][T14348] sit0: left promiscuous mode [ 691.548846][T14356] netlink: 'syz.7.2358': attribute type 29 has an invalid length. [ 691.686447][T14356] netlink: 'syz.7.2358': attribute type 3 has an invalid length. [ 691.696303][T14350] netlink: 'syz.5.2354': attribute type 10 has an invalid length. [ 691.731977][T14356] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2358'. [ 691.756303][T14350] team0: Device veth1_vlan failed to register rx_handler [ 692.233785][T14366] syzkaller0: entered promiscuous mode [ 692.244901][T14366] syzkaller0: entered allmulticast mode [ 692.269709][T14367] netlink: 'syz.5.2362': attribute type 21 has an invalid length. [ 692.295496][T14367] netlink: 'syz.5.2362': attribute type 1 has an invalid length. [ 692.320090][ T5084] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 692.334934][ T5084] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 692.343366][ T5084] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 692.352490][ T5084] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 692.360711][ T5084] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 692.368531][ T5084] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 692.928058][T14378] netlink: 'syz.7.2363': attribute type 5 has an invalid length. [ 693.243800][ T6226] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.279566][T14389] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2367'. [ 693.355552][T14390] netlink: 'syz.7.2368': attribute type 12 has an invalid length. [ 693.363496][T14390] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2368'. [ 693.491038][ T6226] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.730142][ T6226] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.821813][T14396] netlink: 'syz.5.2369': attribute type 28 has an invalid length. [ 693.899650][ T6226] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.062783][T14368] chnl_net:caif_netlink_parms(): no params data found [ 694.198861][T14368] bridge0: port 1(bridge_slave_0) entered blocking state [ 694.206212][T14368] bridge0: port 1(bridge_slave_0) entered disabled state [ 694.213584][T14368] bridge_slave_0: entered allmulticast mode [ 694.229748][T14368] bridge_slave_0: entered promiscuous mode [ 694.258323][T14368] bridge0: port 2(bridge_slave_1) entered blocking state [ 694.274798][T14368] bridge0: port 2(bridge_slave_1) entered disabled state [ 694.282255][T14368] bridge_slave_1: entered allmulticast mode [ 694.302522][T14368] bridge_slave_1: entered promiscuous mode [ 694.411725][T14368] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 694.432049][T14407] sit0: left promiscuous mode [ 694.456271][ T5779] Bluetooth: hci0: command tx timeout [ 694.504279][T14414] netlink: 'syz.7.2373': attribute type 1 has an invalid length. [ 694.513550][T14414] netlink: 168864 bytes leftover after parsing attributes in process `syz.7.2373'. [ 694.563609][T14415] netlink: 168864 bytes leftover after parsing attributes in process `syz.7.2373'. [ 694.867083][T14368] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 694.888255][T14415] netlink: 168 bytes leftover after parsing attributes in process `syz.7.2373'. [ 694.907331][T14414] netlink: 168 bytes leftover after parsing attributes in process `syz.7.2373'. [ 695.072515][T14368] team0: Port device team_slave_0 added [ 695.091893][T14368] team0: Port device team_slave_1 added [ 695.245392][T14428] sctp: [Deprecated]: syz.7.2376 (pid 14428) Use of struct sctp_assoc_value in delayed_ack socket option. [ 695.245392][T14428] Use struct sctp_sack_info instead [ 695.263780][T14368] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 695.280482][T14368] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 695.324221][T14368] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 696.537298][ T5779] Bluetooth: hci0: command tx timeout [ 698.340448][T14368] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 698.348162][T14368] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 698.381033][T14368] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 698.393101][T14428] netlink: 55631 bytes leftover after parsing attributes in process `syz.7.2376'. [ 698.404952][T14444] validate_nla: 3 callbacks suppressed [ 698.404967][T14444] netlink: 'syz.6.2378': attribute type 10 has an invalid length. [ 698.615129][ T5779] Bluetooth: hci0: command tx timeout [ 698.737765][T14452] netlink: 'syz.7.2379': attribute type 15 has an invalid length. [ 698.749645][T14452] netlink: 16098 bytes leftover after parsing attributes in process `syz.7.2379'. [ 698.784189][T14368] hsr_slave_0: entered promiscuous mode [ 698.796809][T14368] hsr_slave_1: entered promiscuous mode [ 700.696676][ T5779] Bluetooth: hci0: command tx timeout [ 702.690642][T14485] netlink: 'syz.6.2388': attribute type 28 has an invalid length. [ 702.703344][T14487] netlink: 'syz.6.2388': attribute type 10 has an invalid length. [ 703.476201][T14513] netlink: 'syz.5.2392': attribute type 15 has an invalid length. [ 703.484111][T14513] netlink: 16098 bytes leftover after parsing attributes in process `syz.5.2392'. [ 703.720344][T14519] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.2393'. [ 703.802035][T14519] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 703.868898][T14517] netlink: 'syz.7.2394': attribute type 10 has an invalid length. [ 703.894717][T14517] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2394'. [ 703.925936][T14517] ipvlan1: entered promiscuous mode [ 703.950822][T14517] ipvlan1: entered allmulticast mode [ 703.972559][T14517] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 704.371373][T14368] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 704.450345][T14368] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 704.540912][T14535] sit0: entered promiscuous mode [ 704.664819][T14368] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 705.370707][T14545] netlink: 'syz.5.2397': attribute type 10 has an invalid length. [ 705.396036][T14545] team0: Device veth1_vlan failed to register rx_handler [ 705.434141][T14368] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 705.533391][T14556] netlink: 64859 bytes leftover after parsing attributes in process `syz.7.2400'. [ 705.960327][ T6226] hsr_slave_0: left promiscuous mode [ 705.995783][ T6226] hsr_slave_1: left promiscuous mode [ 706.018526][ T6226] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 706.046686][ T6226] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 706.085656][ T6226] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 706.093993][ T6226] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 706.111720][ T6226] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 706.121635][ T6226] batman_adv: batadv0: Removing interface: virt_wifi0 [ 706.136925][ T6226] bridge_slave_1: left allmulticast mode [ 706.142675][ T6226] bridge_slave_1: left promiscuous mode [ 706.165009][ T6226] bridge0: port 2(bridge_slave_1) entered disabled state [ 706.178691][ T6226] bridge_slave_0: left allmulticast mode [ 706.184533][ T6226] bridge_slave_0: left promiscuous mode [ 706.211318][ T6226] bridge0: port 1(bridge_slave_0) entered disabled state [ 706.284320][ T6226] veth0_vlan: left promiscuous mode [ 707.578063][ T6226] team0 (unregistering): Port device team_slave_1 removed [ 708.153392][T14568] netlink: 'syz.7.2402': attribute type 15 has an invalid length. [ 708.162363][T14568] netlink: 16098 bytes leftover after parsing attributes in process `syz.7.2402'. [ 708.355680][T14368] 8021q: adding VLAN 0 to HW filter on device bond0 [ 708.393925][T14598] netlink: 'syz.7.2405': attribute type 12 has an invalid length. [ 708.425243][T14598] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2405'. [ 708.490842][T14368] 8021q: adding VLAN 0 to HW filter on device team0 [ 708.553403][ T6220] bridge0: port 1(bridge_slave_0) entered blocking state [ 708.560653][ T6220] bridge0: port 1(bridge_slave_0) entered forwarding state [ 708.631125][ T6220] bridge0: port 2(bridge_slave_1) entered blocking state [ 708.638439][ T6220] bridge0: port 2(bridge_slave_1) entered forwarding state [ 708.723708][T14600] sit0: left promiscuous mode [ 709.117192][T14605] sit0: entered promiscuous mode [ 709.234475][T14611] netlink: 'syz.7.2408': attribute type 10 has an invalid length. [ 709.287399][T14611] team0: Device veth1_vlan failed to register rx_handler [ 709.317524][T14606] sit0: entered promiscuous mode [ 709.703747][T14621] netlink: 'syz.5.2412': attribute type 15 has an invalid length. [ 709.714868][T14621] netlink: 16098 bytes leftover after parsing attributes in process `syz.5.2412'. [ 710.544467][T14368] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 710.620414][T14631] tun0: tun_chr_ioctl cmd 2147767507 [ 710.904840][T14635] netlink: 160 bytes leftover after parsing attributes in process `syz.5.2414'. [ 711.275275][T14641] netlink: 'syz.5.2415': attribute type 12 has an invalid length. [ 711.283177][T14641] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2415'. [ 711.594025][T14368] veth0_vlan: entered promiscuous mode [ 711.635944][T14647] netlink: 'syz.7.2417': attribute type 28 has an invalid length. [ 711.666924][T14368] veth1_vlan: entered promiscuous mode [ 711.725875][T14368] veth0_macvtap: entered promiscuous mode [ 711.799465][T14368] veth1_macvtap: entered promiscuous mode [ 711.832248][T14649] netlink: 'syz.6.2416': attribute type 10 has an invalid length. [ 711.842096][T14649] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2416'. [ 711.892471][T14368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 711.919331][T14368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 711.949555][T14368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 711.962740][T14368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 711.974875][T14368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 711.985703][T14368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 711.997815][T14368] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 712.009859][T14368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 712.021434][T14368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.031622][T14368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 712.042680][T14368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.057468][T14368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 712.068684][T14368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.081408][T14368] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 712.090667][T14650] netlink: 'syz.7.2417': attribute type 10 has an invalid length. [ 712.099486][T14650] team0: Device veth1_vlan failed to register rx_handler [ 712.127481][T14368] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.137034][T14368] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.146279][T14368] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.155403][T14368] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.385906][ T6193] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 712.393815][ T6193] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 712.471954][ T6180] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 712.472903][T14655] netlink: 'syz.5.2425': attribute type 28 has an invalid length. [ 712.506924][ T6180] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 712.527419][T14657] sit0: entered promiscuous mode [ 713.076744][T14659] netlink: 'syz.5.2425': attribute type 10 has an invalid length. [ 713.103823][T14659] team0: Device veth1_vlan failed to register rx_handler [ 713.429536][T14668] netlink: 'syz.6.2422': attribute type 15 has an invalid length. [ 713.455428][T14668] netlink: 16098 bytes leftover after parsing attributes in process `syz.6.2422'. [ 713.927575][T14678] netlink: 'syz.6.2426': attribute type 12 has an invalid length. [ 713.946445][T14678] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2426'. [ 714.617869][ T5084] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 714.627543][ T5084] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 714.642774][ T5084] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 714.657686][ T5084] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 714.670274][ T5084] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 714.681641][ T5084] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 714.782264][ T6180] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.959188][ T6180] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.153668][ T6180] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.420361][ T6180] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.439851][T14696] netlink: 'syz.4.2431': attribute type 28 has an invalid length. [ 715.676324][T14695] netlink: 'syz.4.2431': attribute type 10 has an invalid length. [ 715.820262][T14695] team0: Device veth1_vlan failed to register rx_handler [ 716.236336][T14684] chnl_net:caif_netlink_parms(): no params data found [ 716.334694][T14711] netlink: 'syz.4.2434': attribute type 15 has an invalid length. [ 716.356723][T14711] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.2434'. [ 716.577820][T14713] sit0: left promiscuous mode [ 716.776273][ T5084] Bluetooth: hci1: command tx timeout [ 717.123916][T14717] sit0: entered promiscuous mode [ 717.620346][T14729] netlink: 'syz.4.2436': attribute type 12 has an invalid length. [ 717.644696][T14729] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2436'. [ 717.883691][T14745] FAULT_INJECTION: forcing a failure. [ 717.883691][T14745] name failslab, interval 1, probability 0, space 0, times 0 [ 717.948234][T14745] CPU: 1 PID: 14745 Comm: syz.5.2438 Not tainted syzkaller #0 [ 717.955784][T14745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 717.965890][T14745] Call Trace: [ 717.969213][T14745] [ 717.972173][T14745] dump_stack_lvl+0x18c/0x250 [ 717.976948][T14745] ? show_regs_print_info+0x20/0x20 [ 717.982199][T14745] ? load_image+0x420/0x420 [ 717.986750][T14745] ? __might_sleep+0xe0/0xe0 [ 717.991480][T14745] ? __lock_acquire+0x7d40/0x7d40 [ 717.996551][T14745] should_fail_ex+0x39d/0x4d0 [ 718.001285][T14745] should_failslab+0x9/0x20 [ 718.005841][T14745] slab_pre_alloc_hook+0x59/0x310 [ 718.010924][T14745] ? sctp_association_new+0x89/0x25c0 [ 718.016380][T14745] __kmem_cache_alloc_node+0x53/0x250 [ 718.021903][T14745] ? sctp_association_new+0x89/0x25c0 [ 718.027352][T14745] kmalloc_trace+0x2a/0xe0 [ 718.031854][T14745] sctp_association_new+0x89/0x25c0 [ 718.037106][T14745] ? sctp_do_bind+0x6bd/0x990 [ 718.041871][T14745] ? __ipv6_addr_type+0x10c/0x2f0 [ 718.047025][T14745] sctp_connect_new_asoc+0x2de/0x6a0 [ 718.052336][T14745] ? __sctp_connect+0xd80/0xd80 [ 718.057212][T14745] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 718.062772][T14745] ? security_sctp_bind_connect+0x89/0xb0 [ 718.068512][T14745] sctp_sendmsg+0x15d2/0x2910 [ 718.073230][T14745] ? sctp_getsockopt+0xb60/0xb60 [ 718.078185][T14745] ? aa_sk_perm+0x83c/0x970 [ 718.082803][T14745] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 718.088985][T14745] ? lockdep_hardirqs_on+0x98/0x150 [ 718.094306][T14745] ? aa_af_perm+0x330/0x330 [ 718.098834][T14745] ? sock_rps_record_flow+0x19/0x3f0 [ 718.104142][T14745] ? inet_sendmsg+0xe9/0x2f0 [ 718.108748][T14745] ? inet_send_prepare+0x260/0x260 [ 718.113883][T14745] ____sys_sendmsg+0x5ba/0x960 [ 718.118766][T14745] ? __lock_acquire+0x7d40/0x7d40 [ 718.123812][T14745] ? __asan_memset+0x22/0x40 [ 718.128469][T14745] ? __sys_sendmsg_sock+0x30/0x30 [ 718.133508][T14745] ? __import_iovec+0x5f2/0x850 [ 718.138554][T14745] ? import_iovec+0x73/0xa0 [ 718.143072][T14745] ___sys_sendmsg+0x2a6/0x360 [ 718.148255][T14745] ? __sys_sendmsg+0x2a0/0x2a0 [ 718.153077][T14745] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 718.159368][T14745] __se_sys_sendmsg+0x1c2/0x2b0 [ 718.164274][T14745] ? __x64_sys_sendmsg+0x80/0x80 [ 718.169274][T14745] ? lockdep_hardirqs_on+0x98/0x150 [ 718.174507][T14745] do_syscall_64+0x55/0xb0 [ 718.178941][T14745] ? clear_bhb_loop+0x40/0x90 [ 718.183628][T14745] ? clear_bhb_loop+0x40/0x90 [ 718.188335][T14745] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 718.194244][T14745] RIP: 0033:0x7efd51d9ce59 [ 718.198699][T14745] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 718.218337][T14745] RSP: 002b:00007efd52ba4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 718.226770][T14745] RAX: ffffffffffffffda RBX: 00007efd52015fa0 RCX: 00007efd51d9ce59 [ 718.234759][T14745] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000005 [ 718.242739][T14745] RBP: 00007efd52ba4090 R08: 0000000000000000 R09: 0000000000000000 [ 718.250736][T14745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 718.258741][T14745] R13: 00007efd52016038 R14: 00007efd52015fa0 R15: 00007ffeb99228b8 [ 718.266833][T14745] [ 718.303176][T14750] netlink: 'syz.4.2440': attribute type 29 has an invalid length. [ 718.405492][T14684] bridge0: port 1(bridge_slave_0) entered blocking state [ 718.412769][T14684] bridge0: port 1(bridge_slave_0) entered disabled state [ 718.424692][T14684] bridge_slave_0: entered allmulticast mode [ 718.436037][T14684] bridge_slave_0: entered promiscuous mode [ 718.451851][T14750] netlink: 'syz.4.2440': attribute type 29 has an invalid length. [ 718.466523][T14752] netlink: 'syz.5.2441': attribute type 28 has an invalid length. [ 718.630174][T14684] bridge0: port 2(bridge_slave_1) entered blocking state [ 718.652472][T14684] bridge0: port 2(bridge_slave_1) entered disabled state [ 718.668567][T14684] bridge_slave_1: entered allmulticast mode [ 718.690867][T14684] bridge_slave_1: entered promiscuous mode [ 718.762644][T14753] netlink: 'syz.4.2440': attribute type 29 has an invalid length. [ 718.785752][T14755] netlink: 'syz.4.2440': attribute type 29 has an invalid length. [ 718.798523][T14754] netlink: 'syz.5.2441': attribute type 10 has an invalid length. [ 718.817146][T14754] team0: Device veth1_vlan failed to register rx_handler [ 718.864336][ T5084] Bluetooth: hci1: command tx timeout [ 718.992010][T14684] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 719.138871][T14684] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 719.335588][T14772] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2446'. [ 719.413626][T14771] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.2445'. [ 719.431645][T14768] sit0: left promiscuous mode [ 719.832313][T14684] team0: Port device team_slave_0 added [ 719.858783][T14773] sit0: entered promiscuous mode [ 720.258357][T14684] team0: Port device team_slave_1 added [ 720.935129][ T5084] Bluetooth: hci1: command tx timeout [ 721.254108][T14684] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 721.275160][T14684] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 721.352142][T14684] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 721.385265][T14684] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 721.413715][T14684] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 721.451865][T14684] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 721.470099][T14785] sit0: left promiscuous mode [ 721.556169][T14789] sit0: entered promiscuous mode [ 721.878554][T14684] hsr_slave_0: entered promiscuous mode [ 721.896862][T14684] hsr_slave_1: entered promiscuous mode [ 721.999599][T14684] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 722.014757][T14684] Cannot create hsr debugfs directory [ 722.223943][T14809] validate_nla: 2 callbacks suppressed [ 722.223959][T14809] netlink: 'syz.5.2450': attribute type 10 has an invalid length. [ 722.286549][T14809] team0: Device veth1_vlan failed to register rx_handler [ 722.306397][T14806] netlink: 'syz.5.2450': attribute type 28 has an invalid length. [ 722.731168][T14827] netlink: 'syz.5.2454': attribute type 15 has an invalid length. [ 722.750690][T14827] netlink: 16098 bytes leftover after parsing attributes in process `syz.5.2454'. [ 723.019325][ T5084] Bluetooth: hci1: command tx timeout [ 723.100224][T14832] sit0: entered allmulticast mode [ 723.238083][T14836] sit0: entered promiscuous mode [ 723.430001][T14841] sit0: left promiscuous mode [ 724.156985][T14842] sit0: entered promiscuous mode [ 724.370815][ T6180] hsr_slave_0: left promiscuous mode [ 724.383003][ T6180] hsr_slave_1: left promiscuous mode [ 724.392287][ T6180] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 724.401124][ T6180] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 724.418395][ T6180] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 724.431131][ T6180] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 724.443121][ T6180] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 724.452550][ T6180] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 724.482842][ T6180] veth0_macvtap: left promiscuous mode [ 725.441767][ T6180] team0 (unregistering): Port device team_slave_1 removed [ 725.997961][T14866] netlink: 'syz.5.2461': attribute type 28 has an invalid length. [ 726.025017][T14869] netlink: 'syz.5.2461': attribute type 10 has an invalid length. [ 726.052319][T14869] team0: Device veth1_vlan failed to register rx_handler [ 726.676120][T14883] netlink: 140 bytes leftover after parsing attributes in process `syz.5.2464'. [ 726.798239][T14874] netlink: 65047 bytes leftover after parsing attributes in process `syz.6.2462'. [ 727.889224][T14684] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 728.027737][T14684] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 728.063517][T14684] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 728.102453][T14684] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 728.274391][T14684] 8021q: adding VLAN 0 to HW filter on device bond0 [ 728.316176][T14684] 8021q: adding VLAN 0 to HW filter on device team0 [ 728.338903][ T6193] bridge0: port 1(bridge_slave_0) entered blocking state [ 728.346233][ T6193] bridge0: port 1(bridge_slave_0) entered forwarding state [ 728.369398][ T6193] bridge0: port 2(bridge_slave_1) entered blocking state [ 728.376675][ T6193] bridge0: port 2(bridge_slave_1) entered forwarding state [ 728.856526][T14684] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 728.959729][T14920] netlink: 'syz.5.2470': attribute type 15 has an invalid length. [ 728.993567][T14920] netlink: 16098 bytes leftover after parsing attributes in process `syz.5.2470'. [ 729.086652][T14922] netlink: 'syz.6.2471': attribute type 28 has an invalid length. [ 729.216540][T14930] sit0: left promiscuous mode [ 729.730155][T14929] netlink: 'syz.6.2471': attribute type 10 has an invalid length. [ 729.775497][T14934] sit0: entered promiscuous mode [ 730.819293][T14684] veth0_vlan: entered promiscuous mode [ 730.867922][T14684] veth1_vlan: entered promiscuous mode [ 730.977348][T14684] veth0_macvtap: entered promiscuous mode [ 730.988742][T14684] veth1_macvtap: entered promiscuous mode [ 731.012043][T14684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 731.029436][T14684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 731.064832][T14684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 731.077707][T14684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 731.088136][T14684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 731.100774][T14684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 731.113396][T14684] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 731.130139][T14684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 731.164670][T14684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 731.187546][T14684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 731.208019][T14684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 731.256531][T14684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 731.281330][T14684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 731.295192][T14684] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 731.404545][T14967] sit0: left promiscuous mode [ 732.102812][T14684] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.151042][T14684] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.204102][T14684] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.228980][T14684] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.240463][T14973] sit0: entered promiscuous mode [ 733.051853][T14994] netlink: 'syz.4.2479': attribute type 15 has an invalid length. [ 733.075629][T14994] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.2479'. [ 733.296929][ T6180] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 733.311814][ T6180] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 733.419136][ T6208] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 733.457024][ T6208] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 733.679443][T15012] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2482'. [ 733.733794][T15011] netlink: 'syz.6.2480': attribute type 28 has an invalid length. [ 733.971667][T15011] netlink: 'syz.6.2480': attribute type 10 has an invalid length. [ 736.741584][T15031] sit0: entered allmulticast mode [ 736.902532][T15036] sit0: entered promiscuous mode [ 737.201111][T15039] sit0: left promiscuous mode [ 737.687506][T15044] sit0: entered promiscuous mode [ 737.831930][T15050] netlink: 65047 bytes leftover after parsing attributes in process `syz.7.2489'. [ 738.125603][ T5779] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 738.135098][ T5779] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 738.143124][ T5779] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 738.152022][ T5779] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 738.160129][ T5779] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 738.217997][ T5779] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 739.950609][ T6222] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.071721][T15068] netlink: 'syz.6.2492': attribute type 12 has an invalid length. [ 740.085790][T15068] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2492'. [ 740.295753][ T5779] Bluetooth: hci2: command tx timeout [ 740.583617][ T6222] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.798894][T15055] chnl_net:caif_netlink_parms(): no params data found [ 740.821967][T15073] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2493'. [ 740.845552][T15076] netlink: 'syz.7.2494': attribute type 28 has an invalid length. [ 740.967294][ T6222] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.066845][T15079] netlink: 'syz.7.2494': attribute type 10 has an invalid length. [ 741.129737][T15079] team0: Device veth1_vlan failed to register rx_handler [ 741.271251][ T6222] netdevsim netdevsim5 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.315580][T15085] sit0: left promiscuous mode [ 741.864354][T15088] sit0: entered promiscuous mode [ 742.027173][T15055] bridge0: port 1(bridge_slave_0) entered blocking state [ 742.034815][T15055] bridge0: port 1(bridge_slave_0) entered disabled state [ 742.042072][T15055] bridge_slave_0: entered allmulticast mode [ 742.058666][T15055] bridge_slave_0: entered promiscuous mode [ 742.091647][T15055] bridge0: port 2(bridge_slave_1) entered blocking state [ 742.114742][T15055] bridge0: port 2(bridge_slave_1) entered disabled state [ 742.155022][T15055] bridge_slave_1: entered allmulticast mode [ 742.161987][T15055] bridge_slave_1: entered promiscuous mode [ 742.338070][T15106] netlink: 'syz.4.2503': attribute type 12 has an invalid length. [ 742.388215][ T5779] Bluetooth: hci2: command tx timeout [ 742.397152][T15106] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2503'. [ 742.412377][T15055] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 742.473834][T15055] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 742.732774][T15055] team0: Port device team_slave_0 added [ 742.790170][T15055] team0: Port device team_slave_1 added [ 742.852235][T15055] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 742.895750][T15055] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 742.984872][T15055] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 743.422649][T15124] netlink: 4083 bytes leftover after parsing attributes in process `syz.7.2505'. [ 743.435940][T15055] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 743.443167][T15055] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 743.500644][T15055] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 743.603857][T15123] netlink: 'syz.4.2507': attribute type 28 has an invalid length. [ 743.661999][T15124] netlink: 4083 bytes leftover after parsing attributes in process `syz.7.2505'. [ 743.681992][T15123] netlink: 'syz.4.2507': attribute type 10 has an invalid length. [ 743.724960][T15123] team0: Device veth1_vlan failed to register rx_handler [ 744.078059][T15134] netlink: 'syz.7.2505': attribute type 10 has an invalid length. [ 744.112974][T15134] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2505'. [ 744.175875][T15134] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 744.183110][T15134] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 744.214844][T15134] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 744.268890][T15119] netlink: 4083 bytes leftover after parsing attributes in process `syz.7.2505'. [ 744.403705][T15130] netlink: 4083 bytes leftover after parsing attributes in process `syz.7.2505'. [ 744.450891][T15055] hsr_slave_0: entered promiscuous mode [ 744.465444][ T5779] Bluetooth: hci2: command tx timeout [ 744.508336][T15055] hsr_slave_1: entered promiscuous mode [ 744.565069][T15055] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 744.590926][T15055] Cannot create hsr debugfs directory [ 744.809386][T15160] sit0: left promiscuous mode [ 745.426600][T15167] sit0: entered promiscuous mode [ 746.515765][T15186] FAULT_INJECTION: forcing a failure. [ 746.515765][T15186] name failslab, interval 1, probability 0, space 0, times 0 [ 746.535028][T15186] CPU: 0 PID: 15186 Comm: syz.7.2521 Not tainted syzkaller #0 [ 746.542592][T15186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 746.552680][T15186] Call Trace: [ 746.555988][T15186] [ 746.558928][T15186] dump_stack_lvl+0x18c/0x250 [ 746.563659][T15186] ? show_regs_print_info+0x20/0x20 [ 746.568902][T15186] ? load_image+0x420/0x420 [ 746.573439][T15186] ? __might_sleep+0xe0/0xe0 [ 746.578071][T15186] ? __lock_acquire+0x7d40/0x7d40 [ 746.583113][T15186] should_fail_ex+0x39d/0x4d0 [ 746.587815][T15186] should_failslab+0x9/0x20 [ 746.592338][T15186] slab_pre_alloc_hook+0x59/0x310 [ 746.597387][T15186] ? d_instantiate+0x6f/0x90 [ 746.602001][T15186] kmem_cache_alloc+0x5a/0x2d0 [ 746.606777][T15186] ? alloc_empty_file+0x9e/0x1d0 [ 746.611737][T15186] alloc_empty_file+0x9e/0x1d0 [ 746.616520][T15186] alloc_file+0x5c/0x600 [ 746.620812][T15186] alloc_file_pseudo+0x184/0x210 [ 746.625779][T15186] ? alloc_empty_backing_file+0xe0/0xe0 [ 746.631340][T15186] ? __local_bh_enable_ip+0x13a/0x1c0 [ 746.636749][T15186] ? lockdep_hardirqs_on+0x98/0x150 [ 746.641983][T15186] ? __local_bh_enable_ip+0x13a/0x1c0 [ 746.647382][T15186] anon_inode_getfile+0xc5/0x1a0 [ 746.652344][T15186] bpf_link_prime+0xa6/0x1d0 [ 746.656952][T15186] bpf_perf_link_attach+0x1ca/0x3c0 [ 746.662203][T15186] link_create+0x512/0x720 [ 746.666635][T15186] __sys_bpf+0x4d7/0x890 [ 746.670899][T15186] ? bpf_link_show_fdinfo+0x390/0x390 [ 746.676294][T15186] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 746.682476][T15186] __x64_sys_bpf+0x7c/0x90 [ 746.686915][T15186] do_syscall_64+0x55/0xb0 [ 746.691429][T15186] ? clear_bhb_loop+0x40/0x90 [ 746.696116][T15186] ? clear_bhb_loop+0x40/0x90 [ 746.701001][T15186] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 746.706912][T15186] RIP: 0033:0x7ff897f9ce59 [ 746.711419][T15186] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 746.731053][T15186] RSP: 002b:00007ff898e30028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 746.739508][T15186] RAX: ffffffffffffffda RBX: 00007ff898215fa0 RCX: 00007ff897f9ce59 [ 746.747581][T15186] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000001c [ 746.755591][T15186] RBP: 00007ff898e30090 R08: 0000000000000000 R09: 0000000000000000 [ 746.763654][T15186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 746.771633][T15186] R13: 00007ff898216038 R14: 00007ff898215fa0 R15: 00007fff341f52c8 [ 746.779630][T15186] [ 746.782957][ T5779] Bluetooth: hci2: command tx timeout [ 747.445845][T15195] netlink: 'syz.7.2524': attribute type 29 has an invalid length. [ 748.265380][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.274211][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.646984][T15195] netlink: 'syz.7.2524': attribute type 29 has an invalid length. [ 748.972395][T15195] netlink: 'syz.7.2524': attribute type 29 has an invalid length. [ 748.992824][T15217] sit0: left promiscuous mode [ 749.418661][T15218] sit0: entered promiscuous mode [ 749.751386][T15193] netlink: 'syz.7.2524': attribute type 29 has an invalid length. [ 750.014897][T15231] netlink: 'syz.6.2528': attribute type 10 has an invalid length. [ 750.260960][ T6222] hsr_slave_0: left promiscuous mode [ 750.289253][ T6222] hsr_slave_1: left promiscuous mode [ 750.334385][ T6222] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 750.374847][ T6222] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 753.013670][ T6222] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 753.044828][ T6222] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 753.061669][ T6222] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 753.069845][ T6222] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 753.081332][ T6222] bridge_slave_1: left allmulticast mode [ 753.087440][ T6222] bridge_slave_1: left promiscuous mode [ 753.093602][ T6222] bridge0: port 2(bridge_slave_1) entered disabled state [ 753.108501][ T6222] bridge_slave_0: left allmulticast mode [ 753.139787][ T6222] bridge_slave_0: left promiscuous mode [ 753.155002][ T6222] bridge0: port 1(bridge_slave_0) entered disabled state [ 753.205898][ T6222] veth1_macvtap: left promiscuous mode [ 753.211582][ T6222] veth0_macvtap: left promiscuous mode [ 753.225095][ T6222] veth0_vlan: left promiscuous mode [ 754.418513][ T6222] team0 (unregistering): Port device team_slave_1 removed [ 755.013963][T15055] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 755.048662][T15055] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 755.124174][T15055] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 755.173180][T15055] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 755.532715][T15055] 8021q: adding VLAN 0 to HW filter on device bond0 [ 755.772547][T15055] 8021q: adding VLAN 0 to HW filter on device team0 [ 755.850444][ T6193] bridge0: port 1(bridge_slave_0) entered blocking state [ 755.857776][ T6193] bridge0: port 1(bridge_slave_0) entered forwarding state [ 755.974324][T14728] bridge0: port 2(bridge_slave_1) entered blocking state [ 755.981629][T14728] bridge0: port 2(bridge_slave_1) entered forwarding state [ 757.386036][T15305] FAULT_INJECTION: forcing a failure. [ 757.386036][T15305] name failslab, interval 1, probability 0, space 0, times 0 [ 757.424528][T15305] CPU: 1 PID: 15305 Comm: syz.4.2544 Not tainted syzkaller #0 [ 757.432096][T15305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 757.442239][T15305] Call Trace: [ 757.445576][T15305] [ 757.448214][T15055] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 757.448552][T15305] dump_stack_lvl+0x18c/0x250 [ 757.460089][T15305] ? show_regs_print_info+0x20/0x20 [ 757.465366][T15305] ? load_image+0x420/0x420 [ 757.470128][T15305] ? __might_sleep+0xe0/0xe0 [ 757.474796][T15305] ? __lock_acquire+0x7d40/0x7d40 [ 757.479923][T15305] ? prepend_path+0x4b/0x960 [ 757.484682][T15305] should_fail_ex+0x39d/0x4d0 [ 757.489468][T15305] should_failslab+0x9/0x20 [ 757.494149][T15305] slab_pre_alloc_hook+0x59/0x310 [ 757.499256][T15305] ? __asan_memcpy+0x40/0x70 [ 757.504011][T15305] ? tomoyo_encode+0x28b/0x540 [ 757.508857][T15305] ? tomoyo_encode+0x28b/0x540 [ 757.513690][T15305] __kmem_cache_alloc_node+0x53/0x250 [ 757.519130][T15305] ? prepend_path+0x4b/0x960 [ 757.523801][T15305] ? tomoyo_encode+0x28b/0x540 [ 757.528624][T15305] __kmalloc+0xa4/0x230 [ 757.532873][T15305] tomoyo_encode+0x28b/0x540 [ 757.537521][T15305] tomoyo_realpath_from_path+0x592/0x5d0 [ 757.543209][T15305] tomoyo_path_number_perm+0x248/0x620 [ 757.548697][T15305] ? tomoyo_path_number_perm+0x217/0x620 [ 757.554358][T15305] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 757.559843][T15305] ? ksys_write+0x1c4/0x260 [ 757.564457][T15305] ? __fget_files+0x28/0x4b0 [ 757.569094][T15305] ? __fget_files+0x28/0x4b0 [ 757.573756][T15305] security_file_ioctl+0x70/0xa0 [ 757.578743][T15305] __se_sys_ioctl+0x48/0x170 [ 757.583380][T15305] do_syscall_64+0x55/0xb0 [ 757.587835][T15305] ? clear_bhb_loop+0x40/0x90 [ 757.592535][T15305] ? clear_bhb_loop+0x40/0x90 [ 757.597257][T15305] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 757.603186][T15305] RIP: 0033:0x7f09e6d9ce59 [ 757.607624][T15305] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 757.627348][T15305] RSP: 002b:00007f09e7c59028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 757.635807][T15305] RAX: ffffffffffffffda RBX: 00007f09e7016090 RCX: 00007f09e6d9ce59 [ 757.643825][T15305] RDX: 42579dda60683578 RSI: 00000000c004743e RDI: 0000000000000009 [ 757.651817][T15305] RBP: 00007f09e7c59090 R08: 0000000000000000 R09: 0000000000000000 [ 757.659807][T15305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 757.667800][T15305] R13: 00007f09e7016128 R14: 00007f09e7016090 R15: 00007ffcae7e0ef8 [ 757.675847][T15305] [ 757.797651][T15305] ERROR: Out of memory at tomoyo_realpath_from_path. [ 758.613160][T15055] veth0_vlan: entered promiscuous mode [ 758.652492][T15055] veth1_vlan: entered promiscuous mode [ 758.777184][T15055] veth0_macvtap: entered promiscuous mode [ 758.803533][T15055] veth1_macvtap: entered promiscuous mode [ 758.857580][T15055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 758.880793][T15055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 758.891370][T15055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 758.907088][T15055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 758.922243][T15055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 758.942031][T15055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 758.955239][T15055] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 758.966678][T15055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 758.978814][T15055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 758.989564][T15055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 759.000412][T15055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 759.010756][T15055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 759.023421][T15055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 759.036649][T15055] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 759.067763][T15055] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.077230][T15055] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.086443][T15055] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.095753][T15055] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.221786][ T6208] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 759.241545][ T6208] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 759.320087][ T6193] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 759.328763][ T6193] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 759.539636][T15346] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.2486'. [ 759.595193][T15344] sit0: left promiscuous mode [ 760.012899][T15346] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.2486'. [ 760.034262][T15347] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.2486'. [ 760.064299][T15351] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2548'. [ 760.090213][T15352] sit0: entered promiscuous mode [ 760.137190][T15354] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2549'. [ 760.463833][T15370] FAULT_INJECTION: forcing a failure. [ 760.463833][T15370] name failslab, interval 1, probability 0, space 0, times 0 [ 760.505364][T15370] CPU: 1 PID: 15370 Comm: syz.4.2552 Not tainted syzkaller #0 [ 760.512916][T15370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 760.523028][T15370] Call Trace: [ 760.526353][T15370] [ 760.529332][T15370] dump_stack_lvl+0x18c/0x250 [ 760.534076][T15370] ? sctp_sendmsg+0x15d2/0x2910 [ 760.539016][T15370] ? ___sys_sendmsg+0x2a6/0x360 [ 760.543937][T15370] ? show_regs_print_info+0x20/0x20 [ 760.549198][T15370] ? load_image+0x420/0x420 [ 760.553773][T15370] should_fail_ex+0x39d/0x4d0 [ 760.558520][T15370] should_failslab+0x9/0x20 [ 760.563076][T15370] slab_pre_alloc_hook+0x59/0x310 [ 760.568162][T15370] ? sctp_add_bind_addr+0x8c/0x360 [ 760.573336][T15370] __kmem_cache_alloc_node+0x53/0x250 [ 760.578766][T15370] ? sctp_add_bind_addr+0x8c/0x360 [ 760.583931][T15370] kmalloc_trace+0x2a/0xe0 [ 760.588399][T15370] sctp_add_bind_addr+0x8c/0x360 [ 760.593392][T15370] sctp_copy_local_addr_list+0x315/0x4f0 [ 760.599074][T15370] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 760.604840][T15370] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 760.610980][T15370] ? sctp_v4_is_any+0x35/0x60 [ 760.615793][T15370] ? sctp_copy_one_addr+0x8c/0x350 [ 760.621139][T15370] sctp_bind_addr_copy+0xb3/0x3c0 [ 760.626222][T15370] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 760.632617][T15370] sctp_connect_new_asoc+0x2f9/0x6a0 [ 760.637991][T15370] ? __sctp_connect+0xd80/0xd80 [ 760.642891][T15370] ? __local_bh_enable_ip+0x13a/0x1c0 [ 760.648317][T15370] ? _local_bh_enable+0xa0/0xa0 [ 760.653214][T15370] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 760.659064][T15370] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 760.664927][T15370] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 760.670500][T15370] ? security_sctp_bind_connect+0x89/0xb0 [ 760.676252][T15370] sctp_sendmsg+0x15d2/0x2910 [ 760.680965][T15370] ? sctp_getsockopt+0xb60/0xb60 [ 760.685926][T15370] ? aa_sk_perm+0x83c/0x970 [ 760.690630][T15370] ? aa_af_perm+0x330/0x330 [ 760.695235][T15370] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 760.701674][T15370] ? sock_rps_record_flow+0x19/0x3f0 [ 760.706987][T15370] ? inet_sendmsg+0x7c/0x2f0 [ 760.711606][T15370] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 760.716911][T15370] ? security_socket_sendmsg+0x80/0xa0 [ 760.722466][T15370] ? inet_send_prepare+0x260/0x260 [ 760.727597][T15370] ____sys_sendmsg+0x5ba/0x960 [ 760.732465][T15370] ? __lock_acquire+0x7d40/0x7d40 [ 760.737512][T15370] ? __asan_memset+0x22/0x40 [ 760.742207][T15370] ? __sys_sendmsg_sock+0x30/0x30 [ 760.747363][T15370] ? __import_iovec+0x5f2/0x850 [ 760.752280][T15370] ? import_iovec+0x73/0xa0 [ 760.756799][T15370] ___sys_sendmsg+0x2a6/0x360 [ 760.761502][T15370] ? get_pid_task+0x20/0x1e0 [ 760.766119][T15370] ? __sys_sendmsg+0x2a0/0x2a0 [ 760.770943][T15370] ? __lock_acquire+0x7d40/0x7d40 [ 760.776008][T15370] __se_sys_sendmsg+0x1c2/0x2b0 [ 760.780874][T15370] ? __x64_sys_sendmsg+0x80/0x80 [ 760.785847][T15370] ? lockdep_hardirqs_on+0x98/0x150 [ 760.791070][T15370] do_syscall_64+0x55/0xb0 [ 760.795499][T15370] ? clear_bhb_loop+0x40/0x90 [ 760.800191][T15370] ? clear_bhb_loop+0x40/0x90 [ 760.804879][T15370] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 760.810793][T15370] RIP: 0033:0x7f09e6d9ce59 [ 760.815225][T15370] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 760.835044][T15370] RSP: 002b:00007f09e7c7a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 760.843739][T15370] RAX: ffffffffffffffda RBX: 00007f09e7015fa0 RCX: 00007f09e6d9ce59 [ 760.851724][T15370] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000003 [ 760.859707][T15370] RBP: 00007f09e7c7a090 R08: 0000000000000000 R09: 0000000000000000 [ 760.867694][T15370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 760.875684][T15370] R13: 00007f09e7016038 R14: 00007f09e7015fa0 R15: 00007ffcae7e0ef8 [ 760.883683][T15370] [ 761.246675][T15385] FAULT_INJECTION: forcing a failure. [ 761.246675][T15385] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 761.405887][T15385] CPU: 1 PID: 15385 Comm: syz.4.2557 Not tainted syzkaller #0 [ 761.413448][T15385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 761.423638][T15385] Call Trace: [ 761.426999][T15385] [ 761.430019][T15385] dump_stack_lvl+0x18c/0x250 [ 761.434738][T15385] ? show_regs_print_info+0x20/0x20 [ 761.439970][T15385] ? load_image+0x420/0x420 [ 761.444672][T15385] ? __might_fault+0xaa/0x120 [ 761.449452][T15385] ? __lock_acquire+0x7d40/0x7d40 [ 761.454499][T15385] should_fail_ex+0x39d/0x4d0 [ 761.459293][T15385] _copy_from_user+0x2f/0xe0 [ 761.463923][T15385] generic_map_update_batch+0x54b/0x810 [ 761.469498][T15385] ? rcu_read_unlock+0xa0/0xa0 [ 761.474293][T15385] ? __fdget+0x180/0x210 [ 761.478559][T15385] ? rcu_read_unlock+0xa0/0xa0 [ 761.483332][T15385] bpf_map_do_batch+0x3d7/0x610 [ 761.488319][T15385] __sys_bpf+0x381/0x890 [ 761.492577][T15385] ? bpf_link_show_fdinfo+0x390/0x390 [ 761.497981][T15385] ? lock_chain_count+0x20/0x20 [ 761.502866][T15385] __x64_sys_bpf+0x7c/0x90 [ 761.507301][T15385] do_syscall_64+0x55/0xb0 [ 761.511731][T15385] ? clear_bhb_loop+0x40/0x90 [ 761.516423][T15385] ? clear_bhb_loop+0x40/0x90 [ 761.521112][T15385] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 761.527064][T15385] RIP: 0033:0x7f09e6d9ce59 [ 761.531498][T15385] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 761.551929][T15385] RSP: 002b:00007f09e7c59028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 761.560639][T15385] RAX: ffffffffffffffda RBX: 00007f09e7016090 RCX: 00007f09e6d9ce59 [ 761.568625][T15385] RDX: 0000000000000038 RSI: 0000200000000500 RDI: 000000000000001a [ 761.576607][T15385] RBP: 00007f09e7c59090 R08: 0000000000000000 R09: 0000000000000000 [ 761.584597][T15385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 761.592579][T15385] R13: 00007f09e7016128 R14: 00007f09e7016090 R15: 00007ffcae7e0ef8 [ 761.600701][T15385] [ 761.785248][T15393] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2560'. [ 762.013210][ T5084] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 762.023349][ T5084] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 762.039719][ T5084] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 762.052431][ T5084] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 762.065576][ T5084] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 762.073345][ T5084] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 762.423863][T15406] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2563'. [ 762.623042][ T6180] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.269581][ T6180] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.520835][ T6180] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.575913][T15423] netlink: 'syz.5.2568': attribute type 1 has an invalid length. [ 763.590177][T15423] netlink: 112860 bytes leftover after parsing attributes in process `syz.5.2568'. [ 763.601093][T15423] netlink: 9 bytes leftover after parsing attributes in process `syz.5.2568'. [ 763.652384][T15423] netlink: 'syz.5.2568': attribute type 29 has an invalid length. [ 763.687533][ T6180] batman_adv: batadv0: Removing interface: netdevsim0 [ 763.723445][ T6180] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.801153][T15426] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2570'. [ 763.829254][T15423] netlink: 'syz.5.2568': attribute type 29 has an invalid length. [ 763.845857][T15428] netlink: 'syz.5.2568': attribute type 29 has an invalid length. [ 763.883541][T15431] netlink: 'syz.5.2568': attribute type 29 has an invalid length. [ 764.216211][ T5779] Bluetooth: hci3: command tx timeout [ 764.320044][T15398] chnl_net:caif_netlink_parms(): no params data found [ 764.541208][ T6180] tipc: Left network mode [ 764.840932][T15398] bridge0: port 1(bridge_slave_0) entered blocking state [ 764.862687][T15398] bridge0: port 1(bridge_slave_0) entered disabled state [ 764.885067][T15398] bridge_slave_0: entered allmulticast mode [ 764.912515][T15398] bridge_slave_0: entered promiscuous mode [ 764.946245][T15398] bridge0: port 2(bridge_slave_1) entered blocking state [ 764.968497][T15398] bridge0: port 2(bridge_slave_1) entered disabled state [ 764.990632][T15398] bridge_slave_1: entered allmulticast mode [ 765.007922][T15398] bridge_slave_1: entered promiscuous mode [ 766.295097][ T5779] Bluetooth: hci3: command tx timeout [ 766.885927][T15398] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 766.919537][T15398] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 767.291197][T15398] team0: Port device team_slave_0 added [ 768.375105][ T5779] Bluetooth: hci3: command tx timeout [ 770.248074][T15398] team0: Port device team_slave_1 added [ 770.416423][T15398] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 770.423447][T15398] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 770.456452][T15398] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 770.464429][ T5779] Bluetooth: hci3: command tx timeout [ 770.501757][T15398] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 770.531877][T15398] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 770.579611][T15398] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 770.603847][T15488] __nla_validate_parse: 1 callbacks suppressed [ 770.603879][T15488] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2581'. [ 771.673100][T15398] hsr_slave_0: entered promiscuous mode [ 771.722487][T15398] hsr_slave_1: entered promiscuous mode [ 771.755444][T15398] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 771.775288][T15398] Cannot create hsr debugfs directory [ 771.962826][T15509] sit0: entered allmulticast mode [ 772.159476][T15512] netlink: 'syz.7.2585': attribute type 39 has an invalid length. [ 772.288513][T15514] sit0: entered promiscuous mode [ 774.431384][T15398] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 774.448184][T15398] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 774.474955][ T6180] hsr_slave_0: left promiscuous mode [ 774.482451][ T6180] hsr_slave_1: left promiscuous mode [ 774.489585][ T6180] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 774.500298][ T6180] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 774.516764][ T6180] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 774.524482][ T6180] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 774.533190][ T6180] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 774.541772][ T6180] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 774.550253][ T6180] bridge_slave_0: left allmulticast mode [ 774.556061][ T6180] bridge_slave_0: left promiscuous mode [ 774.561771][ T6180] bridge0: port 1(bridge_slave_0) entered disabled state [ 774.617195][ T6180] veth1_macvtap: left promiscuous mode [ 777.150207][ T6180] team0 (unregistering): Port device team_slave_1 removed [ 777.211268][ T6180] team0 (unregistering): Port device team_slave_0 removed [ 777.692765][T15398] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 777.702429][T15398] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 778.009106][T15398] 8021q: adding VLAN 0 to HW filter on device bond0 [ 778.074200][T15398] 8021q: adding VLAN 0 to HW filter on device team0 [ 778.100042][ T6222] bridge0: port 1(bridge_slave_0) entered blocking state [ 778.107264][ T6222] bridge0: port 1(bridge_slave_0) entered forwarding state [ 778.148025][ T6222] bridge0: port 2(bridge_slave_1) entered blocking state [ 778.155266][ T6222] bridge0: port 2(bridge_slave_1) entered forwarding state [ 778.291355][T15398] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 778.312292][T15398] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 778.357839][T15558] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2590'. [ 779.042118][T15398] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 779.910314][T15398] veth0_vlan: entered promiscuous mode [ 779.957753][T15398] veth1_vlan: entered promiscuous mode [ 780.056314][T15398] veth0_macvtap: entered promiscuous mode [ 780.080552][T15398] veth1_macvtap: entered promiscuous mode [ 780.126530][T15398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 780.168263][T15398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 780.180872][T15398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 780.211633][T15398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 780.234888][T15398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 780.254695][T15398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 780.276712][T15398] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 780.308278][T15398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 780.334660][T15398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 780.354685][T15398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 780.374945][T15398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 780.393476][T15398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 780.414691][T15398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 780.436652][T15398] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 780.474503][T15398] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 780.504764][T15398] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 780.513527][T15398] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 780.552425][T15398] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.657706][ T6208] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 781.673871][ T6208] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 781.770225][ T6222] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 781.788809][ T6222] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 782.691852][T15644] netlink: 4595 bytes leftover after parsing attributes in process `syz.6.2554'. [ 782.717344][T15644] netlink: 4595 bytes leftover after parsing attributes in process `syz.6.2554'. [ 782.754454][T15644] netlink: 4595 bytes leftover after parsing attributes in process `syz.6.2554'. [ 783.258570][T15653] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2600'. [ 784.035593][T15667] netlink: 'syz.5.2598': attribute type 2 has an invalid length. [ 784.044672][T15667] netlink: 'syz.5.2598': attribute type 1 has an invalid length. [ 784.087268][T15667] netlink: 9 bytes leftover after parsing attributes in process `syz.5.2598'. [ 785.179858][T15680] netlink: 'syz.6.2601': attribute type 39 has an invalid length. [ 788.657382][ T5779] Bluetooth: hci0: ISO packet for unknown connection handle 2366 [ 792.040486][T15699] netlink: 'syz.7.2606': attribute type 10 has an invalid length. [ 792.362808][T15711] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2609'. [ 792.604302][T15716] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2611'. [ 793.519168][T15736] netlink: 'syz.4.2616': attribute type 39 has an invalid length. [ 793.896467][T15748] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2622'. [ 794.037656][T15746] netlink: 'syz.7.2621': attribute type 10 has an invalid length. [ 794.049780][T15746] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2621'. [ 794.401787][T15759] netlink: 'syz.4.2626': attribute type 29 has an invalid length. [ 796.797310][T15759] netlink: 'syz.4.2626': attribute type 29 has an invalid length. [ 797.051750][T15769] netlink: 'syz.7.2628': attribute type 29 has an invalid length. [ 797.097611][T15769] netlink: 'syz.7.2628': attribute type 29 has an invalid length. [ 797.136312][T15769] netlink: 'syz.7.2628': attribute type 29 has an invalid length. [ 797.170177][T15769] netlink: 'syz.7.2628': attribute type 29 has an invalid length. [ 797.191905][T15769] netlink: 'syz.7.2628': attribute type 29 has an invalid length. [ 797.273612][T15776] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2632'. [ 800.687596][T15787] FAULT_INJECTION: forcing a failure. [ 800.687596][T15787] name failslab, interval 1, probability 0, space 0, times 0 [ 800.731841][T15787] CPU: 1 PID: 15787 Comm: syz.6.2635 Not tainted syzkaller #0 [ 800.739388][T15787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 800.749492][T15787] Call Trace: [ 800.752817][T15787] [ 800.755794][T15787] dump_stack_lvl+0x18c/0x250 [ 800.760533][T15787] ? show_regs_print_info+0x20/0x20 [ 800.765783][T15787] ? load_image+0x420/0x420 [ 800.770342][T15787] ? __might_sleep+0xe0/0xe0 [ 800.775019][T15787] ? __lock_acquire+0x7d40/0x7d40 [ 800.780097][T15787] should_fail_ex+0x39d/0x4d0 [ 800.784828][T15787] should_failslab+0x9/0x20 [ 800.789381][T15787] slab_pre_alloc_hook+0x59/0x310 [ 800.794579][T15787] ? __lock_acquire+0x7d40/0x7d40 [ 800.799660][T15787] ? dev_ethtool+0x129/0x18d0 [ 800.804416][T15787] __kmem_cache_alloc_node+0x53/0x250 [ 800.809834][T15787] ? __might_fault+0xaa/0x120 [ 800.814576][T15787] ? dev_ethtool+0x129/0x18d0 [ 800.819296][T15787] kmalloc_trace+0x2a/0xe0 [ 800.823830][T15787] dev_ethtool+0x129/0x18d0 [ 800.828377][T15787] ? ethtool_get_module_eeprom_call+0x170/0x170 [ 800.834828][T15787] ? __lock_acquire+0x7d40/0x7d40 [ 800.839887][T15787] ? lockdep_hardirqs_on+0x98/0x150 [ 800.845136][T15787] ? full_name_hash+0x92/0xe0 [ 800.849856][T15787] ? dev_load+0x21/0x1f0 [ 800.854144][T15787] dev_ioctl+0x392/0x1140 [ 800.858516][T15787] sock_do_ioctl+0x239/0x310 [ 800.863146][T15787] ? sock_show_fdinfo+0xb0/0xb0 [ 800.868047][T15787] sock_ioctl+0x5ba/0x7e0 [ 800.872424][T15787] ? sock_poll+0x3e0/0x3e0 [ 800.876876][T15787] ? bpf_lsm_file_ioctl+0x9/0x10 [ 800.881943][T15787] ? security_file_ioctl+0x80/0xa0 [ 800.887082][T15787] ? sock_poll+0x3e0/0x3e0 [ 800.891528][T15787] __se_sys_ioctl+0xfd/0x170 [ 800.896158][T15787] do_syscall_64+0x55/0xb0 [ 800.900689][T15787] ? clear_bhb_loop+0x40/0x90 [ 800.905388][T15787] ? clear_bhb_loop+0x40/0x90 [ 800.910091][T15787] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 800.916015][T15787] RIP: 0033:0x7ffb4859ce59 [ 800.920459][T15787] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 800.940096][T15787] RSP: 002b:00007ffb49547028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 800.948551][T15787] RAX: ffffffffffffffda RBX: 00007ffb48815fa0 RCX: 00007ffb4859ce59 [ 800.956549][T15787] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 000000000000000c [ 800.964546][T15787] RBP: 00007ffb49547090 R08: 0000000000000000 R09: 0000000000000000 [ 800.972543][T15787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 800.980548][T15787] R13: 00007ffb48816038 R14: 00007ffb48815fa0 R15: 00007ffca0415ba8 [ 800.988565][T15787] [ 801.070963][T15798] sit0: left promiscuous mode [ 801.154313][T15796] netlink: 'syz.4.2638': attribute type 3 has an invalid length. [ 801.202366][T15796] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.2638'. [ 801.361353][T15793] sit0: entered promiscuous mode [ 804.692390][T15813] sit0: left promiscuous mode [ 805.624625][T15817] netlink: 'syz.7.2644': attribute type 10 has an invalid length. [ 805.654242][T15817] team0: Device veth1_vlan failed to register rx_handler [ 805.668940][T15823] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2646'. [ 806.217213][T15841] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.2652'. [ 806.682637][T15835] sit0: left promiscuous mode [ 806.950644][T15838] sit0: entered promiscuous mode [ 807.015115][T15840] mac80211_hwsim hwsim44 wlan1: entered promiscuous mode [ 807.024678][T15840] mac80211_hwsim hwsim44 wlan1: entered allmulticast mode [ 807.708494][T15855] sit0: entered allmulticast mode [ 807.774923][T15856] sit0: entered promiscuous mode [ 811.261108][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 811.267525][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 813.776704][T15866] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2661'. [ 814.085558][T15875] mac80211_hwsim hwsim38 wlan1: entered promiscuous mode [ 814.093035][T15875] mac80211_hwsim hwsim38 wlan1: entered allmulticast mode [ 814.161379][T15879] netlink: 'syz.6.2665': attribute type 10 has an invalid length. [ 814.188623][T15879] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2665'. [ 814.281141][T15868] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2662'. [ 815.063360][T15887] sit0: entered promiscuous mode [ 815.670212][T15896] netlink: 'syz.6.2671': attribute type 15 has an invalid length. [ 815.694842][T15896] netlink: 16098 bytes leftover after parsing attributes in process `syz.6.2671'. [ 815.726867][T15895] sit0: left promiscuous mode [ 816.138332][ T5779] Bluetooth: hci0: command 0x0406 tx timeout [ 816.284846][T15898] sit0: entered promiscuous mode [ 816.618869][T15908] netlink: 'syz.6.2673': attribute type 28 has an invalid length. [ 816.850692][T15908] netlink: 'syz.6.2673': attribute type 10 has an invalid length. [ 817.015144][T15908] team0: Device veth1_vlan failed to register rx_handler [ 817.229358][T15918] sit0: left promiscuous mode [ 817.643608][T15921] sit0: entered promiscuous mode [ 817.791893][T15916] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2677'. [ 817.821406][T15933] netlink: 'syz.6.2681': attribute type 15 has an invalid length. [ 817.836206][T15933] netlink: 16098 bytes leftover after parsing attributes in process `syz.6.2681'. [ 817.846402][T15936] netlink: 'syz.5.2683': attribute type 10 has an invalid length. [ 818.175872][T15945] netlink: 'syz.7.2686': attribute type 10 has an invalid length. [ 819.605746][T15945] netlink: 144 bytes leftover after parsing attributes in process `syz.7.2686'. [ 821.700810][T15970] sit0: left promiscuous mode [ 822.070169][T15976] sit0: entered promiscuous mode [ 822.173211][T15980] netlink: 'syz.5.2695': attribute type 15 has an invalid length. [ 822.183436][T15980] netlink: 16098 bytes leftover after parsing attributes in process `syz.5.2695'. [ 822.454687][T15984] netlink: 'syz.6.2697': attribute type 10 has an invalid length. [ 822.914469][T15998] netlink: 'syz.4.2703': attribute type 15 has an invalid length. [ 822.947787][T15998] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.2703'. [ 823.101333][T16008] netlink: 'syz.6.2707': attribute type 15 has an invalid length. [ 823.121881][T16008] netlink: 16098 bytes leftover after parsing attributes in process `syz.6.2707'. [ 826.296614][T16015] netlink: 'syz.5.2708': attribute type 10 has an invalid length. [ 826.329507][T16018] FAULT_INJECTION: forcing a failure. [ 826.329507][T16018] name failslab, interval 1, probability 0, space 0, times 0 [ 826.351553][T16018] CPU: 1 PID: 16018 Comm: syz.6.2709 Not tainted syzkaller #0 [ 826.359099][T16018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 826.369202][T16018] Call Trace: [ 826.372525][T16018] [ 826.375499][T16018] dump_stack_lvl+0x18c/0x250 [ 826.380228][T16018] ? show_regs_print_info+0x20/0x20 [ 826.385468][T16018] ? load_image+0x420/0x420 [ 826.390007][T16018] ? __might_sleep+0xe0/0xe0 [ 826.394638][T16018] ? __lock_acquire+0x7d40/0x7d40 [ 826.399728][T16018] should_fail_ex+0x39d/0x4d0 [ 826.404476][T16018] should_failslab+0x9/0x20 [ 826.409027][T16018] slab_pre_alloc_hook+0x59/0x310 [ 826.414110][T16018] ? apparmor_sk_alloc_security+0x77/0x100 [ 826.420071][T16018] __kmem_cache_alloc_node+0x53/0x250 [ 826.425515][T16018] ? apparmor_sk_alloc_security+0x77/0x100 [ 826.431374][T16018] kmalloc_trace+0x2a/0xe0 [ 826.436226][T16018] apparmor_sk_alloc_security+0x77/0x100 [ 826.441914][T16018] security_sk_alloc+0x6e/0xa0 [ 826.446731][T16018] sk_prot_alloc+0x101/0x210 [ 826.451380][T16018] ? sk_alloc+0x24/0x360 [ 826.455677][T16018] sk_alloc+0x3a/0x360 [ 826.459791][T16018] ? bpf_ctx_init+0x163/0x1a0 [ 826.464503][T16018] ? bpf_prog_test_run_skb+0x279/0x18c0 [ 826.470093][T16018] bpf_prog_test_run_skb+0x3d1/0x18c0 [ 826.475537][T16018] ? lockdep_hardirqs_on+0x98/0x150 [ 826.480806][T16018] ? cpu_online+0x60/0x60 [ 826.485203][T16018] bpf_prog_test_run+0x321/0x390 [ 826.490201][T16018] __sys_bpf+0x49d/0x890 [ 826.494513][T16018] ? bpf_link_show_fdinfo+0x390/0x390 [ 826.500085][T16018] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 826.506318][T16018] __x64_sys_bpf+0x7c/0x90 [ 826.510778][T16018] do_syscall_64+0x55/0xb0 [ 826.515240][T16018] ? clear_bhb_loop+0x40/0x90 [ 826.519959][T16018] ? clear_bhb_loop+0x40/0x90 [ 826.524673][T16018] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 826.530577][T16018] RIP: 0033:0x7ffb4859ce59 [ 826.534999][T16018] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 826.554635][T16018] RSP: 002b:00007ffb49547028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 826.563117][T16018] RAX: ffffffffffffffda RBX: 00007ffb48815fa0 RCX: 00007ffb4859ce59 [ 826.571145][T16018] RDX: 000000000000004c RSI: 0000200000000080 RDI: 000000000000000a [ 826.579183][T16018] RBP: 00007ffb49547090 R08: 0000000000000000 R09: 0000000000000000 [ 826.587300][T16018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 826.595314][T16018] R13: 00007ffb48816038 R14: 00007ffb48815fa0 R15: 00007ffca0415ba8 [ 826.603302][T16018] [ 827.001729][T16033] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.2715'. [ 827.054904][T16033] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2715'. [ 827.207252][T16040] netlink: 'syz.7.2717': attribute type 15 has an invalid length. [ 827.220189][T16040] netlink: 16098 bytes leftover after parsing attributes in process `syz.7.2717'. [ 830.557492][T16054] netlink: 830 bytes leftover after parsing attributes in process `syz.5.2721'. [ 832.964755][T16071] sit0: left promiscuous mode [ 833.113622][T16075] sit0: entered promiscuous mode [ 833.379773][T16084] netlink: 'syz.6.2731': attribute type 15 has an invalid length. [ 833.404710][T16084] netlink: 16098 bytes leftover after parsing attributes in process `syz.6.2731'. [ 833.627258][T16091] netlink: 668 bytes leftover after parsing attributes in process `syz.5.2732'. [ 833.655625][T16091] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 833.674674][T16091] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 834.034237][T16095] netlink: 'syz.6.2735': attribute type 21 has an invalid length. [ 834.058684][T16095] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2735'. [ 834.091486][T16096] netlink: 'syz.6.2735': attribute type 21 has an invalid length. [ 834.111786][T16096] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2735'. [ 834.756740][T16108] netlink: 'syz.4.2744': attribute type 10 has an invalid length. [ 834.998503][T16108] bridge0: port 2(bridge_slave_1) entered disabled state [ 835.085542][T16108] bridge_slave_1: left allmulticast mode [ 835.091276][T16108] bridge_slave_1: left promiscuous mode [ 835.822450][T16108] bridge0: port 2(bridge_slave_1) entered disabled state [ 837.401961][T16108] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 837.466419][T16122] netlink: 'syz.5.2743': attribute type 15 has an invalid length. [ 837.482356][T16122] netlink: 16098 bytes leftover after parsing attributes in process `syz.5.2743'. [ 837.891799][T16137] netlink: 209844 bytes leftover after parsing attributes in process `syz.6.2747'. [ 838.057042][T16144] FAULT_INJECTION: forcing a failure. [ 838.057042][T16144] name failslab, interval 1, probability 0, space 0, times 0 [ 838.084982][T16144] CPU: 0 PID: 16144 Comm: syz.7.2750 Not tainted syzkaller #0 [ 838.092527][T16144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 838.102626][T16144] Call Trace: [ 838.105955][T16144] [ 838.108918][T16144] dump_stack_lvl+0x18c/0x250 [ 838.113659][T16144] ? show_regs_print_info+0x20/0x20 [ 838.118904][T16144] ? load_image+0x420/0x420 [ 838.123537][T16144] ? __might_sleep+0xe0/0xe0 [ 838.128259][T16144] ? __lock_acquire+0x7d40/0x7d40 [ 838.133336][T16144] should_fail_ex+0x39d/0x4d0 [ 838.138087][T16144] should_failslab+0x9/0x20 [ 838.142655][T16144] slab_pre_alloc_hook+0x59/0x310 [ 838.147821][T16144] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 838.153581][T16144] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 838.159333][T16144] __kmem_cache_alloc_node+0x53/0x250 [ 838.164758][T16144] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 838.170553][T16144] __kmalloc+0xa4/0x230 [ 838.174764][T16144] tomoyo_realpath_from_path+0xe3/0x5d0 [ 838.180372][T16144] tomoyo_path_number_perm+0x248/0x620 [ 838.185879][T16144] ? tomoyo_path_number_perm+0x217/0x620 [ 838.191654][T16144] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 838.197157][T16144] ? ksys_write+0x1c4/0x260 [ 838.201744][T16144] ? __fget_files+0x28/0x4b0 [ 838.206475][T16144] ? __fget_files+0x28/0x4b0 [ 838.211123][T16144] security_file_ioctl+0x70/0xa0 [ 838.216107][T16144] __se_sys_ioctl+0x48/0x170 [ 838.220749][T16144] do_syscall_64+0x55/0xb0 [ 838.225217][T16144] ? clear_bhb_loop+0x40/0x90 [ 838.229948][T16144] ? clear_bhb_loop+0x40/0x90 [ 838.234679][T16144] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 838.240633][T16144] RIP: 0033:0x7ff897f9ce59 [ 838.245126][T16144] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 838.265040][T16144] RSP: 002b:00007ff898e30028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 838.273507][T16144] RAX: ffffffffffffffda RBX: 00007ff898215fa0 RCX: 00007ff897f9ce59 [ 838.281595][T16144] RDX: 0000200000000000 RSI: 000000000000890b RDI: 0000000000000003 [ 838.289619][T16144] RBP: 00007ff898e30090 R08: 0000000000000000 R09: 0000000000000000 [ 838.297638][T16144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 838.305704][T16144] R13: 00007ff898216038 R14: 00007ff898215fa0 R15: 00007fff341f52c8 [ 838.313717][T16144] [ 838.334019][T16144] ERROR: Out of memory at tomoyo_realpath_from_path. [ 839.434218][T16172] netlink: 'syz.6.2757': attribute type 33 has an invalid length. [ 839.447526][T16172] netlink: 152 bytes leftover after parsing attributes in process `syz.6.2757'. [ 840.290602][T16194] netlink: 'syz.5.2767': attribute type 15 has an invalid length. [ 840.412536][T16194] netlink: 'syz.5.2767': attribute type 7 has an invalid length. [ 840.546103][T16194] netlink: 'syz.5.2767': attribute type 15 has an invalid length. [ 840.553996][T16194] netlink: 'syz.5.2767': attribute type 7 has an invalid length. [ 840.710283][T16201] FAULT_INJECTION: forcing a failure. [ 840.710283][T16201] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 840.745651][T16194] netlink: 'syz.5.2767': attribute type 15 has an invalid length. [ 840.756532][T16201] CPU: 1 PID: 16201 Comm: syz.4.2769 Not tainted syzkaller #0 [ 840.764069][T16201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 840.774165][T16201] Call Trace: [ 840.777480][T16201] [ 840.780530][T16201] dump_stack_lvl+0x18c/0x250 [ 840.784376][T16194] netlink: 'syz.5.2767': attribute type 7 has an invalid length. [ 840.785236][T16201] ? show_regs_print_info+0x20/0x20 [ 840.798411][T16201] ? load_image+0x420/0x420 [ 840.802955][T16201] ? __might_fault+0xaa/0x120 [ 840.807667][T16201] ? __lock_acquire+0x7d40/0x7d40 [ 840.812737][T16201] should_fail_ex+0x39d/0x4d0 [ 840.817577][T16201] _copy_from_user+0x2f/0xe0 [ 840.822215][T16201] csum_and_copy_from_iter+0x1f3/0x14a0 [ 840.827790][T16201] ? iov_iter_get_pages_alloc2+0xc0/0xc0 [ 840.833613][T16201] ? __kmem_cache_alloc_node+0x13a/0x250 [ 840.839267][T16201] ? __alloc_skb+0x138/0x2c0 [ 840.843869][T16201] ? rcu_is_watching+0x15/0xb0 [ 840.848659][T16201] ip_generic_getfrag+0x163/0x2f0 [ 840.853709][T16201] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 840.858577][T16201] ? skb_put+0x11b/0x210 [ 840.862836][T16201] __ip_append_data+0x2e80/0x3b80 [ 840.867900][T16201] ? raw_send_hdrinc+0x1140/0x1140 [ 840.873043][T16201] ? ip_setup_cork+0x860/0x860 [ 840.877826][T16201] ? ip_setup_cork+0x530/0x860 [ 840.882960][T16201] ip_append_data+0x10d/0x180 [ 840.887657][T16201] ? raw_send_hdrinc+0x1140/0x1140 [ 840.892788][T16201] raw_sendmsg+0x15c1/0x1c00 [ 840.897412][T16201] ? compat_raw_ioctl+0x70/0x70 [ 840.902311][T16201] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 840.908749][T16201] ? sock_rps_record_flow+0x19/0x3f0 [ 840.914054][T16201] ? inet_sendmsg+0x7c/0x2f0 [ 840.918666][T16201] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 840.923966][T16201] ? security_socket_sendmsg+0x80/0xa0 [ 840.929451][T16201] ? inet_send_prepare+0x260/0x260 [ 840.934583][T16201] ____sys_sendmsg+0x5ba/0x960 [ 840.939365][T16201] ? __lock_acquire+0x7d40/0x7d40 [ 840.944412][T16201] ? __sys_sendmsg_sock+0x30/0x30 [ 840.949449][T16201] ? __import_iovec+0x5f2/0x850 [ 840.954325][T16201] ? import_iovec+0x73/0xa0 [ 840.958842][T16201] ___sys_sendmsg+0x2a6/0x360 [ 840.963544][T16201] ? __sys_sendmsg+0x2a0/0x2a0 [ 840.968347][T16201] ? __lock_acquire+0x7d40/0x7d40 [ 840.973411][T16201] __se_sys_sendmsg+0x1c2/0x2b0 [ 840.978280][T16201] ? __x64_sys_sendmsg+0x80/0x80 [ 840.983249][T16201] ? lockdep_hardirqs_on+0x98/0x150 [ 840.988469][T16201] do_syscall_64+0x55/0xb0 [ 840.992902][T16201] ? clear_bhb_loop+0x40/0x90 [ 840.997589][T16201] ? clear_bhb_loop+0x40/0x90 [ 841.002281][T16201] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 841.008190][T16201] RIP: 0033:0x7f09e6d9ce59 [ 841.012620][T16201] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 841.032241][T16201] RSP: 002b:00007f09e7c59028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 841.040685][T16201] RAX: ffffffffffffffda RBX: 00007f09e7016090 RCX: 00007f09e6d9ce59 [ 841.048681][T16201] RDX: 0000000000000004 RSI: 0000200000001000 RDI: 0000000000000004 [ 841.056676][T16201] RBP: 00007f09e7c59090 R08: 0000000000000000 R09: 0000000000000000 [ 841.064744][T16201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 841.072815][T16201] R13: 00007f09e7016128 R14: 00007f09e7016090 R15: 00007ffcae7e0ef8 [ 841.080817][T16201] [ 841.734864][ T5779] Bluetooth: hci1: command 0x0406 tx timeout [ 845.273417][T16239] netlink: 'syz.6.2781': attribute type 29 has an invalid length. [ 845.302307][T16239] netlink: 'syz.6.2781': attribute type 29 has an invalid length. [ 845.357698][T16240] netlink: 'syz.6.2781': attribute type 29 has an invalid length. [ 845.448318][T16241] netlink: 'syz.6.2781': attribute type 29 has an invalid length. [ 849.880065][T16273] tap0: tun_chr_ioctl cmd 1074025675 [ 849.890134][T16273] tap0: persist enabled [ 849.919922][T16273] tap0: tun_chr_ioctl cmd 21731 [ 849.936571][T16273] tap0: tun_chr_ioctl cmd 1074025675 [ 849.953413][T16273] tap0: persist enabled [ 853.820248][T16307] @ÿ: renamed from bond_slave_0 (while UP) [ 854.027149][T16312] tc_dump_action: action bad kind [ 854.077494][T16314] netlink: 'syz.5.2807': attribute type 49 has an invalid length. [ 854.102536][T16314] netlink: set zone limit has 8 unknown bytes [ 854.144074][T16314] netlink: 'syz.5.2807': attribute type 49 has an invalid length. [ 854.686968][T16316] FAULT_INJECTION: forcing a failure. [ 854.686968][T16316] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 854.729882][T16316] CPU: 1 PID: 16316 Comm: syz.7.2808 Not tainted syzkaller #0 [ 854.737436][T16316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 854.747538][T16316] Call Trace: [ 854.750848][T16316] [ 854.753808][T16316] dump_stack_lvl+0x18c/0x250 [ 854.758526][T16316] ? show_regs_print_info+0x20/0x20 [ 854.763756][T16316] ? load_image+0x420/0x420 [ 854.768288][T16316] ? __might_fault+0xaa/0x120 [ 854.772994][T16316] ? __lock_acquire+0x7d40/0x7d40 [ 854.778059][T16316] should_fail_ex+0x39d/0x4d0 [ 854.782777][T16316] _copy_from_user+0x2f/0xe0 [ 854.787403][T16316] __sys_bpf+0x23e/0x890 [ 854.791676][T16316] ? bpf_link_show_fdinfo+0x390/0x390 [ 854.797090][T16316] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 854.803298][T16316] __x64_sys_bpf+0x7c/0x90 [ 854.807743][T16316] do_syscall_64+0x55/0xb0 [ 854.812192][T16316] ? clear_bhb_loop+0x40/0x90 [ 854.816898][T16316] ? clear_bhb_loop+0x40/0x90 [ 854.821782][T16316] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 854.827718][T16316] RIP: 0033:0x7ff897f9ce59 [ 854.832160][T16316] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 854.851809][T16316] RSP: 002b:00007ff898e30028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 854.860274][T16316] RAX: ffffffffffffffda RBX: 00007ff898215fa0 RCX: 00007ff897f9ce59 [ 854.868283][T16316] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 854.876281][T16316] RBP: 00007ff898e30090 R08: 0000000000000000 R09: 0000000000000000 [ 854.884276][T16316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 854.892269][T16316] R13: 00007ff898216038 R14: 00007ff898215fa0 R15: 00007fff341f52c8 [ 854.900282][T16316] [ 855.281171][T16336] FAULT_INJECTION: forcing a failure. [ 855.281171][T16336] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 855.305061][T16336] CPU: 0 PID: 16336 Comm: syz.7.2815 Not tainted syzkaller #0 [ 855.312591][T16336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 855.322684][T16336] Call Trace: [ 855.326005][T16336] [ 855.328973][T16336] dump_stack_lvl+0x18c/0x250 [ 855.333698][T16336] ? show_regs_print_info+0x20/0x20 [ 855.338936][T16336] ? load_image+0x420/0x420 [ 855.343475][T16336] ? __might_fault+0xaa/0x120 [ 855.348190][T16336] ? __lock_acquire+0x7d40/0x7d40 [ 855.353251][T16336] should_fail_ex+0x39d/0x4d0 [ 855.357976][T16336] _copy_from_user+0x2f/0xe0 [ 855.362600][T16336] ethtool_set_link_ksettings+0x163/0x450 [ 855.368424][T16336] ? ethtool_get_link_ksettings+0x400/0x400 [ 855.374351][T16336] ? aa_get_newest_label+0xfd/0x5c0 [ 855.379591][T16336] ? end_current_label_crit_section+0x170/0x170 [ 855.385899][T16336] ? bpf_lsm_capable+0x9/0x10 [ 855.390612][T16336] ? security_capable+0x89/0xb0 [ 855.395507][T16336] dev_ethtool+0x1129/0x18d0 [ 855.400149][T16336] ? ethtool_get_module_eeprom_call+0x170/0x170 [ 855.406426][T16336] ? __lock_acquire+0x7d40/0x7d40 [ 855.411484][T16336] ? __might_fault+0xaa/0x120 [ 855.416196][T16336] ? full_name_hash+0x92/0xe0 [ 855.420924][T16336] ? dev_load+0x21/0x1f0 [ 855.425217][T16336] dev_ioctl+0x392/0x1140 [ 855.429593][T16336] sock_do_ioctl+0x239/0x310 [ 855.434224][T16336] ? sock_show_fdinfo+0xb0/0xb0 [ 855.439135][T16336] sock_ioctl+0x5ba/0x7e0 [ 855.443509][T16336] ? sock_poll+0x3e0/0x3e0 [ 855.447972][T16336] ? bpf_lsm_file_ioctl+0x9/0x10 [ 855.452942][T16336] ? security_file_ioctl+0x80/0xa0 [ 855.458118][T16336] ? sock_poll+0x3e0/0x3e0 [ 855.462574][T16336] __se_sys_ioctl+0xfd/0x170 [ 855.467205][T16336] do_syscall_64+0x55/0xb0 [ 855.471653][T16336] ? clear_bhb_loop+0x40/0x90 [ 855.476355][T16336] ? clear_bhb_loop+0x40/0x90 [ 855.481061][T16336] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 855.487008][T16336] RIP: 0033:0x7ff897f9ce59 [ 855.491453][T16336] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 855.511097][T16336] RSP: 002b:00007ff898e30028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 855.519549][T16336] RAX: ffffffffffffffda RBX: 00007ff898215fa0 RCX: 00007ff897f9ce59 [ 855.527556][T16336] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000004 [ 855.535561][T16336] RBP: 00007ff898e30090 R08: 0000000000000000 R09: 0000000000000000 [ 855.543562][T16336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 855.551661][T16336] R13: 00007ff898216038 R14: 00007ff898215fa0 R15: 00007fff341f52c8 [ 855.559692][T16336] [ 858.537448][T16366] netlink: 'syz.4.2824': attribute type 1 has an invalid length. [ 858.868564][T16374] netlink: 'syz.6.2827': attribute type 1 has an invalid length. [ 858.895151][T16374] netlink: 176 bytes leftover after parsing attributes in process `syz.6.2827'. [ 859.158530][T16383] netlink: 16098 bytes leftover after parsing attributes in process `syz.6.2830'. [ 860.864171][T16401] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2836'. [ 860.946861][T16401] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 862.216425][ T5779] Bluetooth: hci2: command 0x0406 tx timeout [ 862.697867][T16414] netlink: 16098 bytes leftover after parsing attributes in process `syz.6.2841'. [ 862.897196][T16419] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 862.903824][T16419] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 863.149078][T16429] FAULT_INJECTION: forcing a failure. [ 863.149078][T16429] name failslab, interval 1, probability 0, space 0, times 0 [ 863.195806][T16429] CPU: 1 PID: 16429 Comm: syz.6.2846 Not tainted syzkaller #0 [ 863.203361][T16429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 863.213462][T16429] Call Trace: [ 863.216780][T16429] [ 863.219746][T16429] dump_stack_lvl+0x18c/0x250 [ 863.224482][T16429] ? show_regs_print_info+0x20/0x20 [ 863.229738][T16429] ? load_image+0x420/0x420 [ 863.234434][T16429] ? __might_sleep+0xe0/0xe0 [ 863.239081][T16429] ? __lock_acquire+0x7d40/0x7d40 [ 863.244165][T16429] ? __ip_options_compile+0x17db/0x19e0 [ 863.249872][T16429] should_fail_ex+0x39d/0x4d0 [ 863.254615][T16429] should_failslab+0x9/0x20 [ 863.259173][T16429] slab_pre_alloc_hook+0x59/0x310 [ 863.264243][T16429] ? ip_options_fragment+0x290/0x290 [ 863.269548][T16429] ? ip_options_get+0x52/0x4a0 [ 863.274323][T16429] ? ip_options_get+0x52/0x4a0 [ 863.279099][T16429] __kmem_cache_alloc_node+0x53/0x250 [ 863.284496][T16429] ? ip_options_get+0x52/0x4a0 [ 863.289301][T16429] __kmalloc+0xa4/0x230 [ 863.293496][T16429] ? rcu_is_watching+0x15/0xb0 [ 863.298274][T16429] ip_options_get+0x52/0x4a0 [ 863.302884][T16429] ip_cmsg_send+0x591/0xa70 [ 863.307417][T16429] udp_sendmsg+0xc1f/0x23b0 [ 863.311944][T16429] ? __lock_acquire+0x1347/0x7d40 [ 863.316985][T16429] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 863.321855][T16429] ? udp_cmsg_send+0x350/0x350 [ 863.326639][T16429] ? __lock_acquire+0x1273/0x7d40 [ 863.331678][T16429] ? verify_lock_unused+0x140/0x140 [ 863.336902][T16429] ? lock_chain_count+0x20/0x20 [ 863.341763][T16429] ? verify_lock_unused+0x140/0x140 [ 863.346980][T16429] udpv6_sendmsg+0x790/0x2390 [ 863.351765][T16429] ? print_unlock_imbalance_bug+0x160/0x160 [ 863.357698][T16429] ? udp_v6_early_demux+0xf80/0xf80 [ 863.362946][T16429] ? lock_chain_count+0x20/0x20 [ 863.367844][T16429] ? _local_bh_enable+0xa0/0xa0 [ 863.372724][T16429] ? inet_send_prepare+0x1b3/0x260 [ 863.377866][T16429] ? inet_send_prepare+0x1b3/0x260 [ 863.383001][T16429] ? inet6_sendmsg+0x5f/0xd0 [ 863.387623][T16429] ? inet6_compat_ioctl+0x3c0/0x3c0 [ 863.392837][T16429] ____sys_sendmsg+0x5ba/0x960 [ 863.397618][T16429] ? __lock_acquire+0x7d40/0x7d40 [ 863.402665][T16429] ? __sys_sendmsg_sock+0x30/0x30 [ 863.407702][T16429] ? __import_iovec+0x3fa/0x850 [ 863.412592][T16429] ? import_iovec+0x73/0xa0 [ 863.417110][T16429] ___sys_sendmsg+0x2a6/0x360 [ 863.421834][T16429] ? get_pid_task+0x20/0x1e0 [ 863.426454][T16429] ? __sys_sendmsg+0x2a0/0x2a0 [ 863.431248][T16429] ? __lock_acquire+0x7d40/0x7d40 [ 863.436313][T16429] __se_sys_sendmsg+0x1c2/0x2b0 [ 863.441355][T16429] ? __x64_sys_sendmsg+0x80/0x80 [ 863.446432][T16429] ? lockdep_hardirqs_on+0x98/0x150 [ 863.451656][T16429] do_syscall_64+0x55/0xb0 [ 863.456091][T16429] ? clear_bhb_loop+0x40/0x90 [ 863.460777][T16429] ? clear_bhb_loop+0x40/0x90 [ 863.465482][T16429] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 863.471393][T16429] RIP: 0033:0x7ffb4859ce59 [ 863.475832][T16429] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 863.495476][T16429] RSP: 002b:00007ffb49547028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 863.503905][T16429] RAX: ffffffffffffffda RBX: 00007ffb48815fa0 RCX: 00007ffb4859ce59 [ 863.511893][T16429] RDX: 0000000000000840 RSI: 0000200000000380 RDI: 0000000000000003 [ 863.519880][T16429] RBP: 00007ffb49547090 R08: 0000000000000000 R09: 0000000000000000 [ 863.527873][T16429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 863.535854][T16429] R13: 00007ffb48816038 R14: 00007ffb48815fa0 R15: 00007ffca0415ba8 [ 863.543940][T16429] [ 866.107084][T16446] netlink: 16098 bytes leftover after parsing attributes in process `syz.7.2854'. [ 866.274391][T16454] netlink: 'syz.4.2856': attribute type 9 has an invalid length. [ 866.285831][T16454] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.2856'. [ 867.938372][T16478] netlink: 209820 bytes leftover after parsing attributes in process `syz.5.2864'. [ 870.382002][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.388631][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.517284][T16483] netlink: 'syz.4.2866': attribute type 15 has an invalid length. [ 870.552476][T16483] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.2866'. [ 874.485061][T16520] netlink: 'syz.6.2877': attribute type 21 has an invalid length. [ 874.492968][T16520] netlink: 'syz.6.2877': attribute type 1 has an invalid length. [ 874.505596][T16520] netlink: 100 bytes leftover after parsing attributes in process `syz.6.2877'. [ 874.644249][T16523] netlink: 'syz.5.2880': attribute type 15 has an invalid length. [ 874.665483][T16523] netlink: 16098 bytes leftover after parsing attributes in process `syz.5.2880'. [ 875.146565][T16533] sit0: left promiscuous mode [ 875.372778][T16532] sit0: entered promiscuous mode [ 877.105990][T16559] netlink: 'syz.6.2893': attribute type 15 has an invalid length. [ 877.136819][T16559] netlink: 16098 bytes leftover after parsing attributes in process `syz.6.2893'. [ 879.497048][T16573] sit0: left promiscuous mode [ 879.819492][T16580] sit0: entered promiscuous mode [ 880.143434][T16598] netlink: 'syz.4.2905': attribute type 15 has an invalid length. [ 880.165100][T16598] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.2905'. [ 884.255153][T16638] sit0: left promiscuous mode [ 884.640835][T16644] sit0: entered promiscuous mode [ 884.732398][T16645] netlink: 'syz.7.2917': attribute type 15 has an invalid length. [ 884.754722][T16645] netlink: 16098 bytes leftover after parsing attributes in process `syz.7.2917'. [ 887.017550][T16657] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2920'. [ 887.027092][T16657] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2920'. [ 887.037784][T16657] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2920'. [ 887.155893][T16663] netlink: 'syz.7.2923': attribute type 15 has an invalid length. [ 887.168976][T16663] netlink: 168 bytes leftover after parsing attributes in process `syz.7.2923'. [ 887.605263][T16669] netlink: 63503 bytes leftover after parsing attributes in process `syz.7.2926'. [ 887.857811][ T5779] Bluetooth: hci3: command 0x0406 tx timeout [ 891.197030][T16689] sit0: left promiscuous mode [ 891.500154][T16694] sit0: entered promiscuous mode [ 891.653459][T16696] netlink: 'syz.4.2932': attribute type 15 has an invalid length. [ 891.684308][T16696] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.2932'. [ 892.946239][T16712] netlink: 196 bytes leftover after parsing attributes in process `syz.5.2935'. [ 893.322369][T16724] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.2940'. [ 893.362368][T16725] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2940'. [ 893.387170][T16724] netlink: 16126 bytes leftover after parsing attributes in process `syz.4.2940'. [ 893.701791][T16735] netlink: 'syz.6.2944': attribute type 15 has an invalid length. [ 893.713110][T16735] netlink: 16098 bytes leftover after parsing attributes in process `syz.6.2944'. [ 893.766077][T16733] sit0: left promiscuous mode [ 894.113295][T16741] sit0: entered promiscuous mode [ 896.903002][T16755] FAULT_INJECTION: forcing a failure. [ 896.903002][T16755] name failslab, interval 1, probability 0, space 0, times 0 [ 896.948656][T16755] CPU: 0 PID: 16755 Comm: syz.4.2951 Not tainted syzkaller #0 [ 896.956205][T16755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 896.966572][T16755] Call Trace: [ 896.969886][T16755] [ 896.972841][T16755] dump_stack_lvl+0x18c/0x250 [ 896.977572][T16755] ? show_regs_print_info+0x20/0x20 [ 896.982805][T16755] ? load_image+0x420/0x420 [ 896.987336][T16755] ? __might_sleep+0xe0/0xe0 [ 896.991974][T16755] ? __lock_acquire+0x7d40/0x7d40 [ 896.997031][T16755] ? stack_trace_save+0xaa/0x100 [ 897.002007][T16755] ? stack_trace_snprint+0xf0/0xf0 [ 897.007163][T16755] should_fail_ex+0x39d/0x4d0 [ 897.011896][T16755] should_failslab+0x9/0x20 [ 897.016453][T16755] slab_pre_alloc_hook+0x59/0x310 [ 897.021523][T16755] ? kasan_set_track+0x5f/0x70 [ 897.026315][T16755] ? kasan_set_track+0x4e/0x70 [ 897.031109][T16755] ? __kasan_kmalloc+0x8f/0xa0 [ 897.035963][T16755] kmem_cache_alloc_node+0x60/0x320 [ 897.041234][T16755] ? netlink_sendmsg+0x8d0/0xbf0 [ 897.046326][T16755] ? __alloc_skb+0x103/0x2c0 [ 897.050988][T16755] __alloc_skb+0x103/0x2c0 [ 897.055458][T16755] netlink_dump+0x1ec/0xe50 [ 897.060015][T16755] ? netlink_lookup+0x200/0x200 [ 897.064938][T16755] ? __kasan_kmalloc+0x8f/0xa0 [ 897.069761][T16755] ? __inet_diag_dump_start+0x886/0x9f0 [ 897.075357][T16755] ? netlink_lookup+0x30/0x200 [ 897.080169][T16755] __netlink_dump_start+0x5f1/0x810 [ 897.085405][T16755] inet_diag_rcv_msg_compat+0x215/0x440 [ 897.091001][T16755] ? __inet_diag_dump+0x380/0x380 [ 897.096077][T16755] ? sock_diag_rcv_msg+0xd1/0x600 [ 897.101144][T16755] ? inet_diag_rcv_msg_compat+0x440/0x440 [ 897.106903][T16755] ? inet_diag_dump_start_compat+0x20/0x20 [ 897.112750][T16755] ? inet_diag_dump+0x50/0x50 [ 897.117475][T16755] ? __inet_diag_dump+0x380/0x380 [ 897.122539][T16755] sock_diag_rcv_msg+0x3d8/0x600 [ 897.127528][T16755] netlink_rcv_skb+0x241/0x4d0 [ 897.132326][T16755] ? sock_diag_bind+0xb0/0xb0 [ 897.137114][T16755] ? netlink_ack+0x1180/0x1180 [ 897.141998][T16755] ? __lock_acquire+0x7d40/0x7d40 [ 897.147074][T16755] ? netlink_deliver_tap+0x2e/0x1b0 [ 897.152307][T16755] sock_diag_rcv+0x2a/0x40 [ 897.156777][T16755] netlink_unicast+0x751/0x8d0 [ 897.161589][T16755] netlink_sendmsg+0x8d0/0xbf0 [ 897.166418][T16755] ? netlink_getsockopt+0x590/0x590 [ 897.171652][T16755] ? aa_sock_msg_perm+0x94/0x150 [ 897.176628][T16755] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 897.181945][T16755] ? security_socket_sendmsg+0x80/0xa0 [ 897.187445][T16755] ? netlink_getsockopt+0x590/0x590 [ 897.192675][T16755] ____sys_sendmsg+0x5ba/0x960 [ 897.197580][T16755] ? __asan_memset+0x22/0x40 [ 897.202289][T16755] ? __sys_sendmsg_sock+0x30/0x30 [ 897.207340][T16755] ? __import_iovec+0x5f2/0x850 [ 897.212233][T16755] ? import_iovec+0x73/0xa0 [ 897.216774][T16755] ___sys_sendmsg+0x2a6/0x360 [ 897.221483][T16755] ? get_pid_task+0x20/0x1e0 [ 897.226116][T16755] ? __sys_sendmsg+0x2a0/0x2a0 [ 897.230929][T16755] ? __lock_acquire+0x7d40/0x7d40 [ 897.236023][T16755] __se_sys_sendmsg+0x1c2/0x2b0 [ 897.240913][T16755] ? __x64_sys_sendmsg+0x80/0x80 [ 897.245908][T16755] ? lockdep_hardirqs_on+0x98/0x150 [ 897.251154][T16755] do_syscall_64+0x55/0xb0 [ 897.255593][T16755] ? clear_bhb_loop+0x40/0x90 [ 897.260289][T16755] ? clear_bhb_loop+0x40/0x90 [ 897.264994][T16755] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 897.270928][T16755] RIP: 0033:0x7f09e6d9ce59 [ 897.275379][T16755] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 897.295027][T16755] RSP: 002b:00007f09e7c7a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 897.303474][T16755] RAX: ffffffffffffffda RBX: 00007f09e7015fa0 RCX: 00007f09e6d9ce59 [ 897.311487][T16755] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 897.319487][T16755] RBP: 00007f09e7c7a090 R08: 0000000000000000 R09: 0000000000000000 [ 897.327486][T16755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 897.335487][T16755] R13: 00007f09e7016038 R14: 00007f09e7015fa0 R15: 00007ffcae7e0ef8 [ 897.343528][T16755] [ 897.452759][T16758] netlink: 'syz.7.2952': attribute type 10 has an invalid length. [ 897.568800][T16758] netlink: 'syz.7.2952': attribute type 9 has an invalid length. [ 897.604999][T16758] netlink: 184904 bytes leftover after parsing attributes in process `syz.7.2952'. [ 898.049314][T16774] netlink: 'syz.4.2957': attribute type 15 has an invalid length. [ 898.084708][T16774] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.2957'. [ 898.300576][T16776] sit0: left promiscuous mode [ 898.727285][T16780] sit0: entered promiscuous mode [ 898.913799][T16783] sit0: left promiscuous mode [ 899.200129][T16786] sit0: entered promiscuous mode [ 899.727086][T16809] netlink: 'syz.4.2970': attribute type 15 has an invalid length. [ 899.750684][T16809] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.2970'. [ 899.765216][T16804] sit0: left promiscuous mode [ 900.147262][T16812] sit0: entered promiscuous mode [ 900.591210][T16829] sctp: [Deprecated]: syz.4.2981 (pid 16829) Use of int in max_burst socket option deprecated. [ 900.591210][T16829] Use struct sctp_assoc_value instead [ 900.760520][T16828] sit0: left promiscuous mode [ 901.093086][T16834] sit0: entered promiscuous mode [ 901.227000][T16837] sit0: left promiscuous mode [ 901.661003][T16841] sit0: entered promiscuous mode [ 902.288912][T16855] sit0: left promiscuous mode [ 903.502100][T16874] netlink: 'syz.5.2987': attribute type 15 has an invalid length. [ 903.513217][T16874] netlink: 16098 bytes leftover after parsing attributes in process `syz.5.2987'. [ 903.963189][T16878] sit0: left promiscuous mode [ 904.323229][T16886] sit0: entered promiscuous mode [ 904.379156][T16887] sit0: left promiscuous mode [ 904.476452][T16884] sit0: entered promiscuous mode [ 905.790539][T16902] sit0: left promiscuous mode [ 905.844723][T16904] sit0: entered promiscuous mode [ 905.903083][T16911] netlink: 'syz.5.2999': attribute type 21 has an invalid length. [ 907.689937][T16946] sit0: left promiscuous mode [ 907.709131][T16948] netlink: 'syz.6.3010': attribute type 12 has an invalid length. [ 907.717340][T16948] netlink: 209836 bytes leftover after parsing attributes in process `syz.6.3010'. [ 907.846096][T16942] sit0: entered promiscuous mode [ 907.884749][T16951] FAULT_INJECTION: forcing a failure. [ 907.884749][T16951] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 908.016135][T16951] CPU: 0 PID: 16951 Comm: syz.4.3012 Not tainted syzkaller #0 [ 908.023686][T16951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 908.033885][T16951] Call Trace: [ 908.037205][T16951] [ 908.040179][T16951] dump_stack_lvl+0x18c/0x250 [ 908.044918][T16951] ? show_regs_print_info+0x20/0x20 [ 908.050172][T16951] ? load_image+0x420/0x420 [ 908.054788][T16951] ? __lock_acquire+0x7d40/0x7d40 [ 908.059864][T16951] ? snprintf+0xe9/0x140 [ 908.064175][T16951] should_fail_ex+0x39d/0x4d0 [ 908.068908][T16951] _copy_to_user+0x2f/0xa0 [ 908.073395][T16951] simple_read_from_buffer+0xe7/0x150 [ 908.078808][T16951] proc_fail_nth_read+0x1e8/0x260 [ 908.083894][T16951] ? proc_fault_inject_write+0x360/0x360 [ 908.089588][T16951] ? fsnotify_perm+0x271/0x5e0 [ 908.094417][T16951] ? proc_fault_inject_write+0x360/0x360 [ 908.100575][T16951] vfs_read+0x28b/0x970 [ 908.104796][T16951] ? kernel_read+0x1e0/0x1e0 [ 908.109440][T16951] ? __fget_files+0x28/0x4b0 [ 908.114089][T16951] ? __fget_files+0x28/0x4b0 [ 908.118737][T16951] ? __fget_files+0x43d/0x4b0 [ 908.123469][T16951] ? __fdget_pos+0x2a3/0x330 [ 908.128104][T16951] ? ksys_read+0x75/0x260 [ 908.132482][T16951] ksys_read+0x150/0x260 [ 908.136776][T16951] ? vfs_write+0x990/0x990 [ 908.141244][T16951] ? lockdep_hardirqs_on+0x98/0x150 [ 908.146493][T16951] do_syscall_64+0x55/0xb0 [ 908.150950][T16951] ? clear_bhb_loop+0x40/0x90 [ 908.155660][T16951] ? clear_bhb_loop+0x40/0x90 [ 908.160378][T16951] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 908.166407][T16951] RIP: 0033:0x7f09e6d5d68e [ 908.170863][T16951] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 908.190693][T16951] RSP: 002b:00007f09e7c79fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 908.199165][T16951] RAX: ffffffffffffffda RBX: 00007f09e7c7a6c0 RCX: 00007f09e6d5d68e [ 908.207191][T16951] RDX: 000000000000000f RSI: 00007f09e7c7a0a0 RDI: 0000000000000006 [ 908.215391][T16951] RBP: 00007f09e7c7a090 R08: 0000000000000000 R09: 0000000000000000 [ 908.223583][T16951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 908.231612][T16951] R13: 00007f09e7016038 R14: 00007f09e7015fa0 R15: 00007ffcae7e0ef8 [ 908.240053][T16951] [ 911.622102][T16996] netlink: 'syz.4.3025': attribute type 29 has an invalid length. [ 911.744962][T16999] sit0: left promiscuous mode [ 912.306435][T16996] netlink: 'syz.4.3025': attribute type 29 has an invalid length. [ 912.361216][T17003] netlink: 'syz.4.3025': attribute type 29 has an invalid length. [ 912.398478][T17004] sit0: entered promiscuous mode [ 912.555151][T17006] netlink: 'syz.4.3025': attribute type 29 has an invalid length. [ 912.591733][T17008] netlink: 'syz.4.3025': attribute type 29 has an invalid length. [ 912.737239][T17012] syzkaller0: entered promiscuous mode [ 912.742949][T17012] syzkaller0: entered allmulticast mode [ 913.133968][T17027] netlink: 209844 bytes leftover after parsing attributes in process `syz.6.3033'. [ 915.279181][T17020] sit0: left promiscuous mode [ 915.322585][T17025] sit0: entered promiscuous mode [ 917.195935][T17056] netlink: 'syz.7.3044': attribute type 15 has an invalid length. [ 917.245075][T17056] netlink: 16098 bytes leftover after parsing attributes in process `syz.7.3044'. [ 917.307855][T17054] sit0: entered promiscuous mode [ 917.868719][T17062] FAULT_INJECTION: forcing a failure. [ 917.868719][T17062] name failslab, interval 1, probability 0, space 0, times 0 [ 917.893987][T17062] CPU: 1 PID: 17062 Comm: syz.4.3054 Not tainted syzkaller #0 [ 917.901564][T17062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 917.911687][T17062] Call Trace: [ 917.915441][T17062] [ 917.918398][T17062] dump_stack_lvl+0x18c/0x250 [ 917.923284][T17062] ? sctp_sendmsg+0x15d2/0x2910 [ 917.928204][T17062] ? ___sys_sendmsg+0x2a6/0x360 [ 917.933087][T17062] ? show_regs_print_info+0x20/0x20 [ 917.938321][T17062] ? load_image+0x420/0x420 [ 917.942870][T17062] should_fail_ex+0x39d/0x4d0 [ 917.947594][T17062] should_failslab+0x9/0x20 [ 917.952120][T17062] slab_pre_alloc_hook+0x59/0x310 [ 917.957175][T17062] ? sctp_add_bind_addr+0x8c/0x360 [ 917.962322][T17062] __kmem_cache_alloc_node+0x53/0x250 [ 917.967727][T17062] ? sctp_add_bind_addr+0x8c/0x360 [ 917.972890][T17062] kmalloc_trace+0x2a/0xe0 [ 917.977343][T17062] sctp_add_bind_addr+0x8c/0x360 [ 917.982403][T17062] sctp_copy_local_addr_list+0x315/0x4f0 [ 917.988073][T17062] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 917.993817][T17062] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 917.999917][T17062] ? sctp_v4_is_any+0x35/0x60 [ 918.004636][T17062] ? sctp_copy_one_addr+0x8c/0x350 [ 918.009796][T17062] sctp_bind_addr_copy+0xb3/0x3c0 [ 918.014852][T17062] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 918.021213][T17062] sctp_connect_new_asoc+0x2f9/0x6a0 [ 918.026536][T17062] ? __sctp_connect+0xd80/0xd80 [ 918.031408][T17062] ? __local_bh_enable_ip+0x13a/0x1c0 [ 918.036818][T17062] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 918.042392][T17062] ? security_sctp_bind_connect+0x89/0xb0 [ 918.048146][T17062] sctp_sendmsg+0x15d2/0x2910 [ 918.052962][T17062] ? sctp_getsockopt+0xb60/0xb60 [ 918.057930][T17062] ? aa_sk_perm+0x83c/0x970 [ 918.062472][T17062] ? aa_af_perm+0x330/0x330 [ 918.066992][T17062] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 918.073438][T17062] ? sock_rps_record_flow+0x19/0x3f0 [ 918.078759][T17062] ? inet_sendmsg+0xe9/0x2f0 [ 918.083385][T17062] ? inet_send_prepare+0x260/0x260 [ 918.088527][T17062] ____sys_sendmsg+0x5ba/0x960 [ 918.093401][T17062] ? __lock_acquire+0x7d40/0x7d40 [ 918.098458][T17062] ? __asan_memset+0x22/0x40 [ 918.103079][T17062] ? __sys_sendmsg_sock+0x30/0x30 [ 918.108127][T17062] ? __import_iovec+0x5f2/0x850 [ 918.113017][T17062] ? import_iovec+0x73/0xa0 [ 918.117550][T17062] ___sys_sendmsg+0x2a6/0x360 [ 918.122280][T17062] ? __sys_sendmsg+0x2a0/0x2a0 [ 918.127109][T17062] ? __lock_acquire+0x7d40/0x7d40 [ 918.132209][T17062] __se_sys_sendmsg+0x1c2/0x2b0 [ 918.137088][T17062] ? __x64_sys_sendmsg+0x80/0x80 [ 918.142100][T17062] ? lockdep_hardirqs_on+0x98/0x150 [ 918.147343][T17062] do_syscall_64+0x55/0xb0 [ 918.151791][T17062] ? clear_bhb_loop+0x40/0x90 [ 918.156485][T17062] ? clear_bhb_loop+0x40/0x90 [ 918.161182][T17062] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 918.167098][T17062] RIP: 0033:0x7f09e6d9ce59 [ 918.171540][T17062] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 918.191168][T17062] RSP: 002b:00007f09e7c7a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 918.199621][T17062] RAX: ffffffffffffffda RBX: 00007f09e7015fa0 RCX: 00007f09e6d9ce59 [ 918.207885][T17062] RDX: 000000000004c0e0 RSI: 00002000000006c0 RDI: 0000000000000004 [ 918.215880][T17062] RBP: 00007f09e7c7a090 R08: 0000000000000000 R09: 0000000000000000 [ 918.223870][T17062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 918.231857][T17062] R13: 00007f09e7016038 R14: 00007f09e7015fa0 R15: 00007ffcae7e0ef8 [ 918.239876][T17062] [ 918.387304][T17066] sit0: left promiscuous mode [ 919.012261][T17069] sit0: entered promiscuous mode [ 919.294685][T17080] netlink: 209844 bytes leftover after parsing attributes in process `syz.5.3050'. [ 919.877052][T17090] netlink: 'syz.6.3057': attribute type 15 has an invalid length. [ 919.904853][T17090] netlink: 16098 bytes leftover after parsing attributes in process `syz.6.3057'. [ 919.974045][T17089] sit0: left promiscuous mode [ 920.878740][T17095] sit0: entered promiscuous mode [ 921.534353][T17108] sit0: left promiscuous mode [ 922.212408][T17110] sit0: entered promiscuous mode [ 922.577603][T17118] sit0: left promiscuous mode [ 922.931989][T17123] sit0: entered promiscuous mode [ 923.183424][T17121] netlink: 76 bytes leftover after parsing attributes in process `syz.7.3064'. [ 923.531401][T17134] netlink: 'syz.4.3067': attribute type 15 has an invalid length. [ 923.546643][T17134] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.3067'. [ 923.776764][T17138] netlink: 196 bytes leftover after parsing attributes in process `syz.5.3068'. [ 923.885098][T17138] netlink: 'syz.5.3068': attribute type 2 has an invalid length. [ 924.026615][T17138] Dead loop on virtual device ip6_vti0, fix it urgently! [ 924.392007][T17148] sit0: left promiscuous mode [ 924.514233][T17144] sit0: entered promiscuous mode [ 925.074310][T17154] netlink: 180 bytes leftover after parsing attributes in process `syz.7.3074'. [ 925.265786][T17167] netlink: 'syz.5.3080': attribute type 15 has an invalid length. [ 925.304779][T17167] netlink: 16098 bytes leftover after parsing attributes in process `syz.5.3080'. [ 925.321480][T17165] netlink: 209844 bytes leftover after parsing attributes in process `syz.6.3079'. [ 925.627824][T17170] netlink: 'syz.4.3081': attribute type 10 has an invalid length. [ 925.637503][T17170] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3081'. [ 926.575659][T17171] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3081'. [ 927.112640][T17190] netlink: 'syz.6.3091': attribute type 15 has an invalid length. [ 927.129219][T17190] netlink: 16098 bytes leftover after parsing attributes in process `syz.6.3091'. [ 927.159457][T17193] netlink: 'syz.5.3090': attribute type 7 has an invalid length. [ 927.195155][T17192] sit0: left promiscuous mode [ 927.542379][T17196] sit0: entered promiscuous mode [ 927.894124][T17204] netlink: 'syz.6.3093': attribute type 39 has an invalid length. [ 928.042320][T17211] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.3095'. [ 929.649843][T17206] netlink: 'syz.5.3095': attribute type 10 has an invalid length. [ 929.659471][T17206] netlink: 156 bytes leftover after parsing attributes in process `syz.5.3095'. [ 929.716710][T17213] netlink: 209844 bytes leftover after parsing attributes in process `syz.7.3094'. [ 929.788742][T17218] netlink: 'syz.4.3098': attribute type 21 has an invalid length. [ 929.811147][T17218] netlink: 'syz.4.3098': attribute type 20 has an invalid length. [ 930.542907][T17235] sit0: left promiscuous mode [ 930.730440][T17234] sit0: entered promiscuous mode [ 931.142318][T17239] netlink: 76 bytes leftover after parsing attributes in process `syz.7.3107'. [ 931.455762][T17247] netlink: 'syz.6.3109': attribute type 10 has an invalid length. [ 931.478496][T17247] netlink: 156 bytes leftover after parsing attributes in process `syz.6.3109'. [ 931.543787][T17250] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.3109'. [ 931.823592][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.833161][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.111175][T17249] sit0: left promiscuous mode [ 932.438804][T17252] sit0: entered promiscuous mode [ 932.671788][T17261] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 932.799426][T17272] netlink: 'syz.6.3116': attribute type 10 has an invalid length. [ 932.925455][T17272] veth0_vlan: left promiscuous mode [ 932.939901][T17272] veth0_vlan: entered promiscuous mode [ 932.953059][T17272] team0: Device veth0_vlan failed to register rx_handler [ 933.023647][T17275] netlink: 'syz.7.3118': attribute type 21 has an invalid length. [ 933.103844][T17277] netlink: 'syz.4.3119': attribute type 15 has an invalid length. [ 933.141278][T17277] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.3119'. [ 933.238510][T17283] netlink: 209820 bytes leftover after parsing attributes in process `syz.5.3121'. [ 933.654425][T17290] sit0: left promiscuous mode [ 934.088991][T17306] netlink: 15487 bytes leftover after parsing attributes in process `syz.6.3128'. [ 934.176675][T17298] sit0: entered promiscuous mode [ 934.873728][T17311] netlink: 'syz.5.3131': attribute type 10 has an invalid length. [ 934.946778][T17311] geneve0: entered allmulticast mode [ 935.064872][T17315] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3132'. [ 935.269526][T17311] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 935.294054][T17324] netlink: 'syz.4.3133': attribute type 15 has an invalid length. [ 935.314659][T17324] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.3133'. [ 936.227282][T17349] netlink: 'syz.5.3143': attribute type 39 has an invalid length. [ 939.446949][T17347] sit0: left promiscuous mode [ 939.494957][T17351] netlink: 'syz.6.3144': attribute type 25 has an invalid length. [ 939.504871][T17351] netlink: 'syz.6.3144': attribute type 9 has an invalid length. [ 939.531317][T17353] sit0: entered promiscuous mode [ 939.701257][T17357] netlink: 'syz.7.3145': attribute type 15 has an invalid length. [ 939.740657][T17357] netlink: 16098 bytes leftover after parsing attributes in process `syz.7.3145'. [ 939.875987][T17365] netlink: 4079 bytes leftover after parsing attributes in process `syz.5.3148'. [ 939.906643][T17364] netlink: 'syz.4.3147': attribute type 21 has an invalid length. [ 939.925308][T17364] netlink: 'syz.4.3147': attribute type 1 has an invalid length. [ 943.027200][T17376] netlink: 'syz.7.3150': attribute type 5 has an invalid length. [ 943.043125][T17375] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3153'. [ 943.631303][T17392] sit0: left promiscuous mode [ 944.037237][T17398] sit0: entered promiscuous mode [ 944.080649][T17403] netlink: 'syz.7.3158': attribute type 15 has an invalid length. [ 944.090262][T17403] netlink: 16098 bytes leftover after parsing attributes in process `syz.7.3158'. [ 944.352528][T17407] netlink: 'syz.4.3159': attribute type 39 has an invalid length. [ 945.465924][T17443] hsr0: entered promiscuous mode [ 945.471093][T17443] hsr0: entered allmulticast mode [ 945.479544][T17443] hsr_slave_0: entered allmulticast mode [ 945.495837][T17443] hsr_slave_1: entered allmulticast mode [ 945.584059][T17448] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 945.593896][T17448] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 945.603328][T17448] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 945.612552][T17448] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 945.621787][T17448] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 945.631135][T17448] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 945.640357][T17448] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 945.649572][T17448] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 945.656770][T17452] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3177'. [ 945.658741][T17448] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 945.676914][T17448] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 947.475922][T17509] netlink: 'syz.6.3204': attribute type 10 has an invalid length. [ 947.486326][T17509] veth1_macvtap: left promiscuous mode [ 947.896319][T17525] hsr0: entered promiscuous mode [ 947.903231][T17525] hsr0: entered allmulticast mode [ 947.909123][T17525] hsr_slave_0: entered allmulticast mode [ 947.915257][T17525] hsr_slave_1: entered allmulticast mode [ 948.438607][T17547] netlink: 'syz.4.3220': attribute type 10 has an invalid length. [ 948.691317][T17557] netlink: 'syz.6.3227': attribute type 1 has an invalid length. [ 948.728490][T17557] netlink: 168864 bytes leftover after parsing attributes in process `syz.6.3227'. [ 949.827245][T17590] netlink: 'syz.4.3241': attribute type 15 has an invalid length. [ 949.887017][T17590] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.3241'. [ 949.908036][T17586] sit0: left promiscuous mode [ 950.240184][T17591] sit0: entered promiscuous mode [ 950.465585][T17600] sit0: left promiscuous mode [ 950.812743][T17603] sit0: entered promiscuous mode [ 951.275190][T17625] netlink: 'syz.6.3254': attribute type 15 has an invalid length. [ 951.310187][T17625] netlink: 16098 bytes leftover after parsing attributes in process `syz.6.3254'. [ 952.152577][T17648] erspan0: entered allmulticast mode [ 952.377380][T17663] netlink: 'syz.7.3269': attribute type 15 has an invalid length. [ 952.541892][T17663] netlink: 16098 bytes leftover after parsing attributes in process `syz.7.3269'. [ 952.630723][T17667] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3270'. [ 953.235253][T17681] netlink: 'syz.5.3274': attribute type 19 has an invalid length. [ 953.497160][T17682] netlink: 'syz.5.3274': attribute type 10 has an invalid length. [ 953.567205][T17682] team0: Device wg1 is of different type [ 953.771073][T17692] netlink: 'syz.7.3279': attribute type 39 has an invalid length. [ 953.990545][T17692] hsr_slave_1 (unregistering): left promiscuous mode [ 954.344548][T17695] netlink: 'syz.5.3280': attribute type 15 has an invalid length. [ 954.353765][T17695] netlink: 16098 bytes leftover after parsing attributes in process `syz.5.3280'. [ 954.491245][T17698] syzkaller0: entered promiscuous mode [ 954.534618][T17698] syzkaller0: entered allmulticast mode [ 958.261046][T17723] team0: Port device team_slave_0 removed [ 958.376649][T17728] bridge0: port 1(bridge_slave_0) entered disabled state [ 961.272818][T17760] sit0: left promiscuous mode [ 961.667111][T17764] sit0: entered promiscuous mode [ 961.917467][T17763] netlink: 'syz.4.3299': attribute type 10 has an invalid length. [ 961.943968][T17763] veth0_macvtap: left promiscuous mode [ 963.222404][T17780] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3305'. [ 963.628491][T17794] netlink: 'syz.6.3309': attribute type 10 has an invalid length. [ 963.640186][T17794] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port [ 963.760592][T17794] netlink: 'syz.6.3309': attribute type 9 has an invalid length. [ 963.815378][T17794] netlink: 184904 bytes leftover after parsing attributes in process `syz.6.3309'. [ 964.107748][T17797] sit0: left promiscuous mode [ 964.593195][T17801] sit0: entered promiscuous mode [ 964.812965][T17806] sit0: left promiscuous mode [ 965.436931][T17808] sit0: entered promiscuous mode [ 968.162931][T17821] bond_slave_1: entered allmulticast mode [ 968.646430][T17845] netpci0: tun_chr_ioctl cmd 2147767519 [ 968.885907][T17847] netlink: 4083 bytes leftover after parsing attributes in process `syz.5.3322'. [ 968.912762][T17847] netlink: 4083 bytes leftover after parsing attributes in process `syz.5.3322'. [ 968.946999][T17854] netlink: 4083 bytes leftover after parsing attributes in process `syz.5.3322'. [ 968.982601][T17840] netlink: 4083 bytes leftover after parsing attributes in process `syz.5.3322'. [ 969.120981][T17840] netlink: 'syz.5.3322': attribute type 10 has an invalid length. [ 969.132870][T17840] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3322'. [ 969.209217][T17840] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 969.218754][T17840] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 969.250693][T17840] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 969.282455][T17856] sit0: left promiscuous mode [ 969.871307][T17860] sit0: entered promiscuous mode [ 970.444875][T17869] netlink: 'syz.6.3330': attribute type 15 has an invalid length. [ 970.452794][T17869] netlink: 16098 bytes leftover after parsing attributes in process `syz.6.3330'. [ 970.893670][T17889] netlink: 38831 bytes leftover after parsing attributes in process `syz.7.3337'. [ 971.017421][T17893] netlink: 'syz.5.3339': attribute type 10 has an invalid length. [ 971.419265][T17900] sit0: left promiscuous mode [ 974.334033][T17904] sit0: entered promiscuous mode [ 974.631590][T17918] netlink: 'syz.5.3345': attribute type 15 has an invalid length. [ 974.674830][T17918] netlink: 16098 bytes leftover after parsing attributes in process `syz.5.3345'. [ 974.910131][T17930] netlink: 'syz.4.3349': attribute type 10 has an invalid length. [ 974.980507][T17930] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 975.020877][T17932] sit0: left promiscuous mode [ 975.239961][T17936] ================================================================== [ 975.248163][T17936] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6bf/0x900 [ 975.256056][T17936] Write of size 32 at addr ffff88805f70ea90 by task syz.7.3352/17936 [ 975.264156][T17936] [ 975.266561][T17936] CPU: 1 PID: 17936 Comm: syz.7.3352 Not tainted syzkaller #0 [ 975.274090][T17936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 975.284175][T17936] Call Trace: [ 975.287482][T17936] [ 975.290446][T17936] dump_stack_lvl+0x18c/0x250 [ 975.295161][T17936] ? __lock_acquire+0x7d40/0x7d40 [ 975.300218][T17936] ? show_regs_print_info+0x20/0x20 [ 975.305447][T17936] ? load_image+0x420/0x420 [ 975.309977][T17936] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 975.315491][T17936] ? __virt_addr_valid+0x18c/0x540 [ 975.320657][T17936] ? __virt_addr_valid+0x469/0x540 [ 975.325811][T17936] print_report+0xa8/0x210 [ 975.330262][T17936] ? __bpf_get_stackid+0x6bf/0x900 [ 975.335408][T17936] kasan_report+0x117/0x150 [ 975.339956][T17936] ? __bpf_get_stackid+0x6bf/0x900 [ 975.345116][T17936] kasan_check_range+0x241/0x290 [ 975.350095][T17936] ? __bpf_get_stackid+0x6bf/0x900 [ 975.355251][T17936] __asan_memcpy+0x40/0x70 [ 975.359704][T17936] __bpf_get_stackid+0x6bf/0x900 [ 975.364690][T17936] bpf_get_stackid_pe+0x2f0/0x410 [ 975.369739][T17936] bpf_prog_63958b2bb0b64835+0x33/0x48 [ 975.375228][T17936] bpf_overflow_handler+0x1fc/0x510 [ 975.380715][T17936] ? bpf_overflow_handler+0xde/0x510 [ 975.386037][T17936] ? tp_perf_event_destroy+0x20/0x20 [ 975.391365][T17936] ? perf_trace_preemptirq_template+0xac/0x330 [ 975.397556][T17936] ? __perf_event_account_interrupt+0x187/0x280 [ 975.403817][T17936] __perf_event_overflow+0x447/0x630 [ 975.409123][T17936] perf_swevent_event+0x319/0x570 [ 975.414163][T17936] ? perf_tp_event+0x1520/0x1520 [ 975.419113][T17936] ? trace_event_raw_event_lock+0x250/0x250 [ 975.425028][T17936] ___perf_sw_event+0x4a7/0x730 [ 975.429891][T17936] ? ___perf_sw_event+0x199/0x730 [ 975.434931][T17936] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 975.441362][T17936] ? task_mm_cid_work+0x31d/0x770 [ 975.446422][T17936] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 975.452413][T17936] ? _raw_spin_unlock_irq+0x23/0x50 [ 975.457627][T17936] ? lock_chain_count+0x20/0x20 [ 975.462482][T17936] ? perf_trace_preemptirq_template+0xac/0x330 [ 975.468653][T17936] __perf_sw_event+0x139/0x270 [ 975.473433][T17936] do_user_addr_fault+0x123e/0x12c0 [ 975.478668][T17936] ? rcu_is_watching+0x15/0xb0 [ 975.483463][T17936] exc_page_fault+0x64/0x100 [ 975.488087][T17936] ? clear_bhb_loop+0x40/0x90 [ 975.492773][T17936] asm_exc_page_fault+0x26/0x30 [ 975.497637][T17936] RIP: 0033:0x7fff341fea21 [ 975.502061][T17936] Code: 48 89 c2 eb a7 4c 29 d2 48 0f ba e2 3e 0f 82 ad 00 00 00 48 bf ff ff ff ff ff ff ff 7f 48 21 fa 49 0f af d1 48 01 c2 48 d3 ea <48> 89 55 c0 31 c0 48 81 fa 00 ca 9a 3b 72 1c 31 c9 48 81 c2 00 36 [ 975.521766][T17936] RSP: 002b:00007ff898e2fff0 EFLAGS: 00010207 [ 975.527856][T17936] RAX: 000b859252854fe0 RBX: 00007fff341fa0b0 RCX: 0000000000000018 [ 975.535845][T17936] RDX: 000000000c3f6590 RSI: 00007ff898e300b0 RDI: 7fffffffffffffff [ 975.543826][T17936] RBP: 00007ff898e30030 R08: 00000000000003cf R09: 0000000000745d1e [ 975.551839][T17936] R10: 000001f5c76956c3 R11: 000000000002e5b0 R12: 0000000000000010 [ 975.559862][T17936] R13: 00007ff898216038 R14: 00007fff341fa080 R15: 000000000002e5b0 [ 975.567862][T17936] [ 975.570889][T17936] [ 975.573218][T17936] Allocated by task 17936: [ 975.577792][T17936] kasan_set_track+0x4e/0x70 [ 975.582397][T17936] __kasan_kmalloc+0x8f/0xa0 [ 975.586997][T17936] __kmalloc_node+0xb4/0x230 [ 975.591602][T17936] bpf_map_area_alloc+0x5e/0x110 [ 975.596553][T17936] prealloc_elems_and_freelist+0x86/0x1c0 [ 975.602462][T17936] stack_map_alloc+0x33a/0x4c0 [ 975.607240][T17936] map_create+0x877/0x12f0 [ 975.611666][T17936] __sys_bpf+0x651/0x890 [ 975.615919][T17936] __x64_sys_bpf+0x7c/0x90 [ 975.620348][T17936] do_syscall_64+0x55/0xb0 [ 975.624774][T17936] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 975.630695][T17936] [ 975.633115][T17936] Last potentially related work creation: [ 975.638836][T17936] kasan_save_stack+0x3e/0x60 [ 975.643525][T17936] __kasan_record_aux_stack+0xaf/0xc0 [ 975.648909][T17936] call_rcu+0x153/0x950 [ 975.653078][T17936] nf_nat_unregister_fn+0x1f4/0x380 [ 975.658347][T17936] ip6table_nat_net_pre_exit+0x78/0x90 [ 975.663855][T17936] cleanup_net+0x595/0xbb0 [ 975.668290][T17936] process_scheduled_works+0xa5d/0x15d0 [ 975.673845][T17936] worker_thread+0xa55/0xfc0 [ 975.678454][T17936] kthread+0x2fa/0x390 [ 975.682547][T17936] ret_from_fork+0x48/0x80 [ 975.687080][T17936] ret_from_fork_asm+0x11/0x20 [ 975.691885][T17936] [ 975.694217][T17936] The buggy address belongs to the object at ffff88805f70ea80 [ 975.694217][T17936] which belongs to the cache kmalloc-cg-64 of size 64 [ 975.708417][T17936] The buggy address is located 16 bytes inside of [ 975.708417][T17936] allocated 40-byte region [ffff88805f70ea80, ffff88805f70eaa8) [ 975.722439][T17936] [ 975.724861][T17936] The buggy address belongs to the physical page: [ 975.731312][T17936] page:ffffea00017dc380 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5f70e [ 975.741474][T17936] memcg:ffff88801d7d4801 [ 975.745717][T17936] flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff) [ 975.753270][T17936] page_type: 0xffffffff() [ 975.757610][T17936] raw: 00fff00000000800 ffff888017c4da00 ffffea0000c55340 dead000000000006 [ 975.766206][T17936] raw: 0000000000000000 0000000080200020 00000001ffffffff ffff88801d7d4801 [ 975.774791][T17936] page dumped because: kasan: bad access detected [ 975.781214][T17936] page_owner tracks the page as allocated [ 975.786932][T17936] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 5781, tgid 5781 (syz-executor), ts 75930845628, free_ts 22523747561 [ 975.805345][T17936] post_alloc_hook+0x1c1/0x200 [ 975.810127][T17936] get_page_from_freelist+0x1951/0x19e0 [ 975.815680][T17936] __alloc_pages+0x1f0/0x460 [ 975.820280][T17936] alloc_slab_page+0x5d/0x160 [ 975.824964][T17936] new_slab+0x87/0x2d0 [ 975.829049][T17936] ___slab_alloc+0xc5d/0x12f0 [ 975.833748][T17936] __kmem_cache_alloc_node+0x19e/0x250 [ 975.839222][T17936] __kmalloc_node+0xa4/0x230 [ 975.843825][T17936] kvmalloc_node+0x70/0x180 [ 975.848451][T17936] nf_hook_entries_grow+0x27d/0x6d0 [ 975.853690][T17936] __nf_register_net_hook+0x2c9/0x910 [ 975.859090][T17936] nf_register_net_hook+0xb2/0x190 [ 975.864218][T17936] nf_register_net_hooks+0x44/0x1b0 [ 975.869430][T17936] brnf_device_event+0x132/0x1d0 [ 975.874459][T17936] notifier_call_chain+0x197/0x380 [ 975.879589][T17936] register_netdevice+0x16a5/0x1bb0 [ 975.884833][T17936] page last free stack trace: [ 975.889511][T17936] free_unref_page_prepare+0x7b2/0x8c0 [ 975.894987][T17936] free_unref_page+0x32/0x2e0 [ 975.899677][T17936] free_contig_range+0xa1/0x150 [ 975.904536][T17936] destroy_args+0x80/0x850 [ 975.909029][T17936] debug_vm_pgtable+0x411/0x440 [ 975.914153][T17936] do_one_initcall+0x242/0x790 [ 975.918933][T17936] do_initcall_level+0x137/0x1f0 [ 975.923903][T17936] do_initcalls+0x69/0xd0 [ 975.928331][T17936] kernel_init_freeable+0x3ed/0x580 [ 975.933540][T17936] kernel_init+0x1d/0x1c0 [ 975.937876][T17936] ret_from_fork+0x48/0x80 [ 975.942306][T17936] ret_from_fork_asm+0x11/0x20 [ 975.947087][T17936] [ 975.949416][T17936] Memory state around the buggy address: [ 975.955066][T17936] ffff88805f70e980: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 975.963149][T17936] ffff88805f70ea00: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 975.971239][T17936] >ffff88805f70ea80: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 975.979304][T17936] ^ [ 975.984683][T17936] ffff88805f70eb00: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 975.992749][T17936] ffff88805f70eb80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 976.000814][T17936] ================================================================== [ 976.008879][T17936] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 976.016164][T17936] CPU: 1 PID: 17936 Comm: syz.7.3352 Not tainted syzkaller #0 [ 976.023634][T17936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 976.033783][T17936] Call Trace: [ 976.037072][T17936] [ 976.040013][T17936] dump_stack_lvl+0x18c/0x250 [ 976.044708][T17936] ? show_regs_print_info+0x20/0x20 [ 976.049914][T17936] ? load_image+0x420/0x420 [ 976.054431][T17936] panic+0x2dc/0x730 [ 976.058350][T17936] ? __lock_acquire+0x7d40/0x7d40 [ 976.063387][T17936] ? bpf_jit_dump+0xd0/0xd0 [ 976.067914][T17936] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 976.073827][T17936] ? _raw_spin_unlock+0x40/0x40 [ 976.078696][T17936] ? __bpf_get_stackid+0x6bf/0x900 [ 976.083847][T17936] check_panic_on_warn+0x84/0xa0 [ 976.088911][T17936] ? __bpf_get_stackid+0x6bf/0x900 [ 976.094073][T17936] end_report+0x6f/0x130 [ 976.098344][T17936] kasan_report+0x128/0x150 [ 976.102866][T17936] ? __bpf_get_stackid+0x6bf/0x900 [ 976.107998][T17936] kasan_check_range+0x241/0x290 [ 976.112947][T17936] ? __bpf_get_stackid+0x6bf/0x900 [ 976.118073][T17936] __asan_memcpy+0x40/0x70 [ 976.122502][T17936] __bpf_get_stackid+0x6bf/0x900 [ 976.127544][T17936] bpf_get_stackid_pe+0x2f0/0x410 [ 976.132588][T17936] bpf_prog_63958b2bb0b64835+0x33/0x48 [ 976.138058][T17936] bpf_overflow_handler+0x1fc/0x510 [ 976.143276][T17936] ? bpf_overflow_handler+0xde/0x510 [ 976.148600][T17936] ? tp_perf_event_destroy+0x20/0x20 [ 976.153899][T17936] ? perf_trace_preemptirq_template+0xac/0x330 [ 976.160082][T17936] ? __perf_event_account_interrupt+0x187/0x280 [ 976.166351][T17936] __perf_event_overflow+0x447/0x630 [ 976.171657][T17936] perf_swevent_event+0x319/0x570 [ 976.176705][T17936] ? perf_tp_event+0x1520/0x1520 [ 976.181652][T17936] ? trace_event_raw_event_lock+0x250/0x250 [ 976.187587][T17936] ___perf_sw_event+0x4a7/0x730 [ 976.192473][T17936] ? ___perf_sw_event+0x199/0x730 [ 976.197507][T17936] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 976.203935][T17936] ? task_mm_cid_work+0x31d/0x770 [ 976.208997][T17936] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 976.214989][T17936] ? _raw_spin_unlock_irq+0x23/0x50 [ 976.220203][T17936] ? lock_chain_count+0x20/0x20 [ 976.225061][T17936] ? perf_trace_preemptirq_template+0xac/0x330 [ 976.231232][T17936] __perf_sw_event+0x139/0x270 [ 976.236008][T17936] do_user_addr_fault+0x123e/0x12c0 [ 976.241225][T17936] ? rcu_is_watching+0x15/0xb0 [ 976.246003][T17936] exc_page_fault+0x64/0x100 [ 976.250603][T17936] ? clear_bhb_loop+0x40/0x90 [ 976.255303][T17936] asm_exc_page_fault+0x26/0x30 [ 976.260167][T17936] RIP: 0033:0x7fff341fea21 [ 976.264595][T17936] Code: 48 89 c2 eb a7 4c 29 d2 48 0f ba e2 3e 0f 82 ad 00 00 00 48 bf ff ff ff ff ff ff ff 7f 48 21 fa 49 0f af d1 48 01 c2 48 d3 ea <48> 89 55 c0 31 c0 48 81 fa 00 ca 9a 3b 72 1c 31 c9 48 81 c2 00 36 [ 976.284215][T17936] RSP: 002b:00007ff898e2fff0 EFLAGS: 00010207 [ 976.290298][T17936] RAX: 000b859252854fe0 RBX: 00007fff341fa0b0 RCX: 0000000000000018 [ 976.298279][T17936] RDX: 000000000c3f6590 RSI: 00007ff898e300b0 RDI: 7fffffffffffffff [ 976.306259][T17936] RBP: 00007ff898e30030 R08: 00000000000003cf R09: 0000000000745d1e [ 976.314245][T17936] R10: 000001f5c76956c3 R11: 000000000002e5b0 R12: 0000000000000010 [ 976.322251][T17936] R13: 00007ff898216038 R14: 00007fff341fa080 R15: 000000000002e5b0 [ 976.330264][T17936] [ 976.333576][T17936] Kernel Offset: disabled [ 976.337900][T17936] Rebooting in 86400 seconds..