last executing test programs: 9m34.258298311s ago: executing program 2 (id=308): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x24080, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc006, 0xac5d, 0xffffffff, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000003f000b12d25a80648c2594f90124fc60", 0x14}], 0x1}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={r0, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xb, 0xff, 0x24932, 0x7f, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2000, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r4) r5 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r5, &(0x7f0000000340)={&(0x7f00000000c0)=@in6={0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x7}, 0x80, 0x0}, 0x2008e000) write$cgroup_subtree(r4, 0x0, 0xfe33) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x7f, 0x0, 0x0, 0xffffffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x0, 0x2, 0x0, 0x0, 0x2, 0x1000000, 0x4}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c012, 0xac5d}, 0x0, 0xfffffffffffff7ff, 0xffffffffffffffff, 0x1) socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="ceaa00000000000071101b000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r7, 0x0, 0x36, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888847", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 9m31.138305527s ago: executing program 2 (id=312): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000001c0)={r0}) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x80, @remote, 0x80080000, 0x4}, 0x80, 0x0}, 0x240640d5) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000300)={'tunl0\x00'}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x80, 0x0}, 0x0) r2 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x25, &(0x7f0000000000), 0x20000010) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1b42, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000080)) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9}, 0x48) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000380)=r5) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x1c1842, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1341, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0x8202) ioctl$TUNSETSTEERINGEBPF(r8, 0x800454e0, &(0x7f0000000200)=r7) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0xad, 0x20, 0x0, 0x0, 0x0, 0x4, 0x20081, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000440)}, 0x1270, 0x0, 0xffffffff, 0x6, 0x5, 0x0, 0x2, 0x0, 0x4, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x101, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8901, 0x2) 9m29.344608052s ago: executing program 2 (id=322): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x108ea5, 0xc78, 0x0, 0x0, 0x0, 0x0, 0xae7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff3}, 0x13802, 0x0, 0xc2ba, 0x4, 0x3fffffb}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000040)={r0}) (async) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000240)) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x304, 0x10, &(0x7f0000000000), 0xfffffea2}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, @fallback=0x27}, 0x94) (rerun: 64) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071002300000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001580)={&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000014c0)=[{&(0x7f0000000400)="c38a9108522f067638bc76aa0521a68389897963ae3c886da58afb63ceef43cc89ebd0b802873d0b790b73adb0d88a92461122f4bec3c5020f95aa1d831ef32afb1b8dc7cb3689707fe4e0d3694eccecf830c28bd73fd2a167fdbebbbe6f67d8c2cf15fef8152ffd0164c9a09f41515dfd4e42afd4b865", 0x77}, {&(0x7f0000000500)="fcdf806dbe769c7dcdb15e974e7275b9c1fe853e7641092557d0fc8c795c8fa015852c15617edea71fb7a45ee3ab6f9aa1dfd0ff945a0e90dafce5d0e6730f264dc5b1b7251224edb53da0d9825efb538d9fad7e4eaed491ed", 0x59}, {&(0x7f0000000580)="1c9f27ab07ff88d25e90471cedeb14bf7f34faf7ecd9ffcebe73c230073bafeb93de39f2ad9dee29821cfc990e24c785b80d730fa784ee80a4e549a0c7b2d1b70f47f3708701605682a9768fb5229e041d9938d8556463408fb5f73468564133a51f470987db642eb782252eb0256cc7dee4bf36b2c7e67fc2da0f12dfc56da2ed6519fdd231278044a6d191bc79373e6238ea7d2c556fd43b6d4e", 0x9b}, {&(0x7f0000001140)="6da9e4c6bee20e05841fc3eeb960bef7a3ce1a50f58163794925583454202d4108b7e6a2ffffd55faf5c77288f954af384dcfad94ad27baa1a08d2aa01e757ecf587e84d25a34c1b8a7861764235d09391926292f52949260b5e888e70ab27404db02290b15ecc644743407bc2bc364d22d96346c48836cd0e2a075803108c8a1dbafd9175bfef5d483a9de093a8f38e60b62e4f1f8af656c1b7c2222300695f0f24fd1742e07464", 0xa8}, {&(0x7f0000001200)="5383eedfc24308cad1fcd05c084bc776d6129247c2beead803e45c1bd5aa1749a631c9644326ffd3d8684b7eb783f395dc199b8cb4b19a870197fdf4d7b9cef78664a01a32f47419262190a8d852cd04ce2f4bf46bb6c0ab08c3e6e0fa44b2a1c4591e4b3c2faab45dd2318fbede0fb209ffdb557cbb68d029e6a09ee6973c4f544fe1e7f87792276587e0d23eae7b496f5852212132577e62d708", 0x9b}, {&(0x7f00000012c0)="82e1947916e650022584e9b1ef44ec5ddbd65ec484e4a44bf7", 0x19}, {&(0x7f0000001300)="f208ca94c9d5240c3e5d86d79b229849735d51a3bd8549a01a8c32d99c36f3e6d90d63e370a8e5ff22c831e800666c2c169fc05cdc95ab706ea5d95f472a3d756d4fa70ee6c9e70fd83e0a399282f86bd07f22e2789c70e47125045e5fa8f17d03d0e5dba957bef3ff7d5b823d1fd3fad1361aa3698a0cd73905132fb9dd0ccb16e96de0050f917527c0543969a7fa103e82e2575eb340262b53ece903bb0c97a991092ed5777a5de56e9370d459e4e0184a443ad46898f9c1758d70d4cafc66590cf4ec9591d838af01c2449a4d8f60986785665a165e662fa6559b65f741635911fabff2211a0015cc5960", 0xec}, {&(0x7f0000001400)="df035efd0e54f02f26b3be53fae6eb42ccbff5c90c20c98fbf837c887365476bec4f6b52efedfe2945397f653dbe3e22971ed20cae1ae514dfeb0d110fd37680c66284286cb51baacd570fbeb8d04d8c0f78322938bd53d7e04101366bc1da2067bf935b0597753a", 0x68}, {&(0x7f0000001480)="8bba5c2234573734c66523f45e2c1bbe47dec2a66c79b4d1de", 0x19}], 0x9}, 0x20000801) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b"], 0x50) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 9m25.978261704s ago: executing program 2 (id=326): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x12, 0x7, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{0x1}, &(0x7f0000000140), &(0x7f0000000180)='%pI4 \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000018c0)=@bpf_lsm={0x1d, 0x23, &(0x7f0000001600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @generic={0x5, 0x6, 0x0, 0xfffc, 0xeb}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xded8}}, @tail_call], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x10a}}}, &(0x7f0000001740)='GPL\x00', 0x3a, 0x0, 0x0, 0x1f00, 0x8, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001780)={0x0, 0x3}, 0x8, 0x10, &(0x7f00000017c0)={0x1, 0xb, 0x9, 0x5}, 0x10, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000001800)=[0xffffffffffffffff], &(0x7f0000001840)=[{0x0, 0x4, 0x3, 0x5}, {0x1, 0x3, 0x3, 0xa}, {0x1, 0x3, 0x4, 0x5}, {0x1, 0x2, 0x4, 0x5}, {0x1, 0x1, 0x0, 0x8}], 0x10, 0x1}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001a00)={{}, &(0x7f0000001980), &(0x7f00000019c0)='%+9llu \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001ac0)={{}, &(0x7f0000001a40), &(0x7f0000001a80)}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)}, 0x0) socket$kcm(0x10, 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10c002, 0xac5d, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) recvmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100) socket$kcm(0x21, 0x2, 0xa) socket$kcm(0x10, 0x2, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@enum64={0x3, 0x1, 0x0, 0x13, 0x1, 0x1, [{0x5, 0x2, 0x3}]}]}, {0x0, [0x2e, 0x61, 0x61, 0x5f, 0x5f]}}, &(0x7f00000006c0)=""/237, 0x37, 0xed, 0x1}, 0x28) close(r2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x4, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5}, &(0x7f0000000040), &(0x7f0000000140)=r4}, 0x20) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r5}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r4}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r5, &(0x7f0000000040)}, 0x20) socket$kcm(0x10, 0x2, 0x0) 9m25.676359134s ago: executing program 2 (id=330): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xfe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x6}, 0x10c002, 0xac5d}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r0, &(0x7f0000000700)=ANY=[@ANYBLOB="1e040600bfff"], 0xffdd) perf_event_open(&(0x7f0000000480)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x23, 0x8}, 0x400, 0x0, 0xe000000, 0x7, 0x200000000000000, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe69, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r4, &(0x7f0000000000), 0x2a979d) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f90724fc6004000b000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x74000000}, 0x0) 9m24.948625697s ago: executing program 2 (id=339): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) r3 = socket$kcm(0xa, 0x6, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r3, 0x10d, 0x2, &(0x7f0000000040)=r4, 0x17) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x100010, 0x0, 0x8, 0x0, 0x4000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100003400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x40000) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x11, &(0x7f0000000400)=ANY=[@ANYBLOB="bf16000000000000620afcff3f000000bfa200000000000007020000fcffffff1851000000000000000000000000000085000000010000001500070000000000bf07000000000000bf61000000000000bf72000000000000b703000000000000850000007c000000bf710000000000008500000056000000b70000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r5], 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x0, 0xa9, 0x0, &(0x7f0000000540)="000000000000001002c6b35a713fcc2f02feb3144dd1ad04ced113f0e2809cff630bbd48b1edc7410fcb4d5300f889bfdd3c53169393fdeac85a8e09beb779c4b11662f0270d0f30e56ff2fd70d71caaf44ef7414c8c7f9d2c90d33604c080f39004cd0b0f55954e4eeb7aee6c1e46af7cf5e9123f626362db5e7e20b35de405f1941b96a46821ddb0ab52b39630eebaf1edf87a8f576cbdadfdf11c914fb61be3e7d2b61cc8e049a4", 0x0}, 0x50) write$cgroup_pid(r2, &(0x7f0000000300), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0xa, 0x1a, &(0x7f0000000780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffff8}, @map_val={0x18, 0xb, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x6}, @jmp={0x5, 0x0, 0x3, 0x9, 0xb, 0x40, 0xfffffffffffffffc}, @generic={0x6, 0xf, 0x7, 0x5, 0x7}, @exit, @jmp={0x5, 0x1, 0x2, 0xb, 0x4, 0x30, 0x4}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x69}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000880)='syzkaller\x00', 0x2, 0x7c, &(0x7f00000008c0)=""/124, 0xc2d00, 0x6, '\x00', 0x0, @fallback=0x3, r4, 0x8, &(0x7f0000000940)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000980)={0x2, 0x4, 0x3, 0x8}, 0x10, 0xffffffffffffffff, r4, 0x5, &(0x7f00000009c0)=[r4, r5], &(0x7f0000000a00)=[{0x0, 0x1, 0x2, 0x9}, {0x4, 0x2, 0x8, 0x4}, {0x1, 0x4, 0xd, 0x3}, {0x4, 0x3, 0x5, 0x4}, {0x3, 0x2, 0x3, 0xa}]}, 0x94) 9m9.500902528s ago: executing program 32 (id=339): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) r3 = socket$kcm(0xa, 0x6, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r3, 0x10d, 0x2, &(0x7f0000000040)=r4, 0x17) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x100010, 0x0, 0x8, 0x0, 0x4000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100003400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x40000) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x11, &(0x7f0000000400)=ANY=[@ANYBLOB="bf16000000000000620afcff3f000000bfa200000000000007020000fcffffff1851000000000000000000000000000085000000010000001500070000000000bf07000000000000bf61000000000000bf72000000000000b703000000000000850000007c000000bf710000000000008500000056000000b70000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r5], 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x0, 0xa9, 0x0, &(0x7f0000000540)="000000000000001002c6b35a713fcc2f02feb3144dd1ad04ced113f0e2809cff630bbd48b1edc7410fcb4d5300f889bfdd3c53169393fdeac85a8e09beb779c4b11662f0270d0f30e56ff2fd70d71caaf44ef7414c8c7f9d2c90d33604c080f39004cd0b0f55954e4eeb7aee6c1e46af7cf5e9123f626362db5e7e20b35de405f1941b96a46821ddb0ab52b39630eebaf1edf87a8f576cbdadfdf11c914fb61be3e7d2b61cc8e049a4", 0x0}, 0x50) write$cgroup_pid(r2, &(0x7f0000000300), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0xa, 0x1a, &(0x7f0000000780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffff8}, @map_val={0x18, 0xb, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x6}, @jmp={0x5, 0x0, 0x3, 0x9, 0xb, 0x40, 0xfffffffffffffffc}, @generic={0x6, 0xf, 0x7, 0x5, 0x7}, @exit, @jmp={0x5, 0x1, 0x2, 0xb, 0x4, 0x30, 0x4}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x69}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000880)='syzkaller\x00', 0x2, 0x7c, &(0x7f00000008c0)=""/124, 0xc2d00, 0x6, '\x00', 0x0, @fallback=0x3, r4, 0x8, &(0x7f0000000940)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000980)={0x2, 0x4, 0x3, 0x8}, 0x10, 0xffffffffffffffff, r4, 0x5, &(0x7f00000009c0)=[r4, r5], &(0x7f0000000a00)=[{0x0, 0x1, 0x2, 0x9}, {0x4, 0x2, 0x8, 0x4}, {0x1, 0x4, 0xd, 0x3}, {0x4, 0x3, 0x5, 0x4}, {0x3, 0x2, 0x3, 0xa}]}, 0x94) 6.066112733s ago: executing program 4 (id=2769): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200, 0x0, 0x0, 0x0, 0x0, 0x3af8}, 0x0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffff8000}, {}, {0x7, 0x0, 0xb, 0x9}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$kcm(0x2, 0x5, 0x84) socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000040)=""/155, 0x1000000, 0x9b, 0x1}, 0x20) r2 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x24, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x5, 0x0, 0x0, 0x7}, {0x2, 0x0, 0x0, 0x8}]}, 0x94) sendmsg$inet(r1, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x4000040) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xd, 0x0, 0x0, 0x0, 0x80002, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x7}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000000}, 0x94) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x7b, &(0x7f0000000000)=r5, 0x8) socket$kcm(0x10, 0x400000002, 0x0) 5.838438613s ago: executing program 3 (id=2770): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000008f000000000000000100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000054000001b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000c3090000a0000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x1003, &(0x7f0000003e80)=""/4099, 0x41100, 0xd}, 0x94) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000340)=r1) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$kcm(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000200)="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", 0xfc}, {&(0x7f0000000300)="e30e9f1922f1de1812da95a94ef6b98b003cec018afc5ed8867c4688028075701b9281cbfa2b618939c1b598b64114e6cc", 0x31}, {&(0x7f0000000380)="f51a90123e894cfebb43b5", 0xb}, {&(0x7f00000003c0)="a1faedd86a306a8244e4fd122f70525ac7fc19a6baa49bee36d8af", 0x1b}, {&(0x7f0000000400)="f59e856c9794825a2924e799d1866f27e8d323ba7a155b37432c3122d720e3bfd573d7b5fd466adc3f8af343f96a031a6882f1d1508cbfbac00bc36b941e63c809d09781ea4eb4f952cee2ecfcffcfab6b60c83d9beaa9c1d1740aa3521bcf46c74592b9eb7d10bb672970039b5a3485c8ebf9f929feee670d6ca01448c8be53d2658435100ae9f2fc0346ccc57acc058da44e34ae8601533ae3384a4cb093b8007a10", 0xa3}, {&(0x7f00000004c0)="3351507bcb871e06379ab1c8a68e4b7d1af549791afc01353a566dd01a97f7539ad94830aa2bcec1d4c05f25355cf9a39bf35ddd1af7458f45df70efd079807bd96db6a986c94472d96e675e0b780e", 0x4f}, {&(0x7f0000000540)="6634abaa1b29e12b79be63af6323df6099f32d37c516284dc9dc76f96c5499ad365b181e55990d96b8c6996de60905d0155c12b6b66042999cabbd48d2534c4ad8dfce5f57639842eb53c1ea0a5802864a6f6a321565b33039fe500f4bae866fcdcfbed04eceb0a5b9838eb3d36ca1c7fcac2795e9daf0ca13fcb4397eb7f8047354934e465bb962a8016222d2e7cd16f20a1bce9db97565c72675255f32d11eb0696261e756bdba10d6e20b2992fe8c59bf4d4d89c7ad937276424fd525a372a496f0e310ca99022ebb993cc53a721c8fe1311752", 0xd5}], 0x7}, 0x44044) close(0x3) 5.464613372s ago: executing program 1 (id=2771): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xd}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x8108, 0x2, 0xfffffffe, 0x3, 0x0, 0x4, 0x6980, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x8108, 0x2, 0xfffffffe, 0x3, 0x0, 0x4, 0x6980, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x5, 0x84) r1 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000200)={[{0x2b, 'io'}, {0x2d, 'freezer'}, {0x2b, 'rlimit'}, {0x2d, 'net_cls'}]}, 0x1e) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x4}, {0x10000002, 0x0, 0xa, 0xc}]}, 0x94) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000840)=""/4088, 0x1001}, {&(0x7f0000004700)=""/4058, 0xfffffff6}, {&(0x7f0000005700)=""/4135, 0x1027}, {0x0}], 0x4}, 0x10100) (async) recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000840)=""/4088, 0x1001}, {&(0x7f0000004700)=""/4058, 0xfffffff6}, {&(0x7f0000005700)=""/4135, 0x1027}, {0x0}], 0x4}, 0x10100) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0xfffffffffffffe72, &(0x7f0000000000)=[{&(0x7f0000000300)="d800000018008105e00212ba0d8105040a020200020f100b067c55a1bc000900b80006990200000015000500fc038178a80015000338004002000c0901ac040000d67f6f947a7100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e970300000000000000000000000000000000000000008dc5fb510162", 0xd8}], 0x1}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={0xffffffffffffffff}, 0x4) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x101602, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110c230000) (async) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(r4, 0x8010743f, 0xf0ff1f0000000a) (async) ioctl$TUNSETOFFLOAD(r4, 0x8010743f, 0xf0ff1f0000000a) openat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x40000) (async) sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x40000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) (async) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40182, 0x0) ioctl$TUNDETACHFILTER(r7, 0x401054d6, 0x0) socket$kcm(0x29, 0x2, 0x0) (async) r8 = socket$kcm(0x29, 0x2, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0xd, &(0x7f0000000800), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b509000000000000639af0ff00000000b509000000000000db9af0ff41000000bf8200000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000e80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.462197803s ago: executing program 5 (id=2772): r0 = socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x200000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r2 = socket$kcm(0x2, 0x1, 0x84) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000280)={r2}) setsockopt$sock_attach_bpf(r2, 0x0, 0x7, 0x0, 0x0) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/time_for_children\x00') (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0}, 0x10) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001f80)={0xffffffffffffffff}) sendmsg$inet(r4, 0x0, 0x4004004) openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000f40)=@bpf_tracing={0x1a, 0x2c, &(0x7f0000000bc0)=@raw=[@alu={0x4, 0x0, 0x2, 0x3, 0xb, 0xfffffffffffffff4, 0xffffffffffffffff}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffff0e2b, 0x0, 0x0, 0x0, 0xc}, @generic={0x23, 0xa, 0x9, 0x120, 0x3}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x200}, @ringbuf_query, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}], &(0x7f0000000d40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000e80)={0x2, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x16a65, r1, 0x5, 0x0, &(0x7f0000000ec0)=[{0x2, 0x3, 0x4}, {0x4, 0x3, 0x10, 0x5}, {0x0, 0x5, 0x4, 0x9}, {0x3, 0x4, 0x5}, {0x1, 0x2, 0x8, 0x5}], 0x10, 0xa89}, 0x94) (async, rerun: 64) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='T\x00'], 0x88}, 0x0) (async, rerun: 64) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[], 0xfffffffffffffe13) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a80)=ANY=[@ANYRESDEC=0x0], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="050000003a070000080000000c00000000000000", @ANYRES32=r5, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="002c830000000000000800"/30], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x13, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000004000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000fffffff60000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000500000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r8 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r8, 0x89e1, &(0x7f00000001c0)={r3}) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x8914, &(0x7f0000000080)) (async) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000100)={'wlan0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) (async) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r10 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r11) 4.810367055s ago: executing program 3 (id=2774): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffff0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x800, 0x0, 0x80000000}, {0x1000000a, 0x4}], 0x10, 0x40004}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x20008080) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x40}, [@call={0x85, 0x0, 0x0, 0x27}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x25}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000001140)='\x00'/14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(r2) close(0x3) socket$kcm(0xa, 0x5, 0x0) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r4, 0x1c) 4.11202639s ago: executing program 3 (id=2775): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xd, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffefffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x29, 0x5, 0x0) recvmsg$kcm(r2, &(0x7f0000000900)={&(0x7f0000000500)=@can, 0x80, &(0x7f0000000580), 0x0, &(0x7f0000000800)=""/240, 0xf0}, 0x40000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000180)=ANY=[@ANYRESHEX=r1], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) setsockopt$sock_attach_bpf(r3, 0x88, 0x67, &(0x7f00000002c0)=r4, 0x4) (async) setsockopt$sock_attach_bpf(r3, 0x88, 0x67, &(0x7f00000002c0)=r4, 0x4) sendmsg$inet(r3, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @dev={0xac, 0x14, 0x14, 0x3a}}}}], 0x20}, 0x20008840) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="06000000040000000800000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000d000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000d000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f95524fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x10) (async) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f95524fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) (async) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f95524fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080), 0x1}, 0x0) (async) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080), 0x1}, 0x0) close(0x3) unlink(0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) (async) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xe8001, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) (async) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) 4.061340734s ago: executing program 4 (id=2776): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff}, [@call={0x85, 0x0, 0x0, 0xae}, @printk={@i, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x20000, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007b"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff07000000000000000000008500000023"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000dbee000000000000d300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000900008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) r5 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r5, &(0x7f0000001000)={&(0x7f0000000ac0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000100)="41fb74e1feaaf0c5fe17eda707b6077e", 0x10}], 0x1, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x26}, @loopback}}}], 0x20}, 0x800) write$cgroup_devices(r4, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\tmw'], 0xa) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func={0x3, 0x2}]}, {0x0, [0x0, 0x0, 0x61]}}, 0x0, 0x29}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000240)={r0, r7}, 0xc) write$cgroup_pid(r7, &(0x7f0000000400), 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.762997823s ago: executing program 0 (id=2777): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x24080, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc006, 0xac5d, 0xffffffff, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000003f000b12d25a80648c2594f90124fc60", 0x14}], 0x1}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={r0, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xb, 0xff, 0x24932, 0x7f, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2000, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r4) r5 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r5, &(0x7f0000000340)={&(0x7f00000000c0)=@in6={0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x7}, 0x80, 0x0}, 0x2008e000) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[], 0xfe33) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x7f, 0x0, 0x0, 0xffffffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x0, 0x2, 0x0, 0x0, 0x2, 0x1000000, 0x4}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c012, 0xac5d}, 0x0, 0xfffffffffffff7ff, 0xffffffffffffffff, 0x1) socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="ceaa00000000000071101b000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r7, 0x0, 0x36, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.35892442s ago: executing program 5 (id=2778): socket$kcm(0x21, 0x2, 0x2) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1e00"/20, @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00@'], 0x48) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x14, &(0x7f0000000600), 0x10}, 0x94) 3.285592129s ago: executing program 1 (id=2779): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff}, [@call={0x85, 0x0, 0x0, 0xae}, @printk={@i, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x20000, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007b"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff07000000000000000000008500000023"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000dbee000000000000d300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000900008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) r5 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r5, &(0x7f0000001000)={&(0x7f0000000ac0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000100)="41fb74e1feaaf0c5fe17eda707b6077e", 0x10}], 0x1, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x26}, @loopback}}}], 0x20}, 0x800) write$cgroup_devices(r4, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\tmw'], 0xa) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func={0x3, 0x2}]}, {0x0, [0x0, 0x0, 0x61]}}, 0x0, 0x29}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000240)={r0, r7}, 0xc) write$cgroup_pid(r7, &(0x7f0000000400), 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.002290494s ago: executing program 5 (id=2780): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x3a, 0x0, 0x0, &(0x7f00000003c0)}, 0x40002041) setsockopt$sock_attach_bpf(r0, 0x84, 0x11, &(0x7f0000000000), 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x3, 0x1ffffffffffffd77, &(0x7f0000000040)=ANY=[@ANYBLOB="8500000032007f6b85100000f9ffffff181a0010", @ANYRES32, @ANYBLOB="000000000000000085100000feffffff8542f0ff04000000"], &(0x7f0000000180)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x1, 0x9, 0xfffffffa, 0x940d}, 0x16, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=[0x1, 0xffffffffffffffff], 0x0, 0x10, 0x1}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000700)=r2, 0x4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f00000002c0)={'macvlan1\x00', @random="0100061f8145"}) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad94ed406f21caf5adcf920569c00cc1199684fa75814709fea019af247c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c7160ec83070000020000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafedcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd89346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12282ce24463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f09000000000000004fc4bda3453602004535a976eacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a191852c9ae031db044b2353199546609f9f69a6cfefdf879d447df53f3b9b70d10355b00300000000000000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f58fab987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45b418a18217747ae442e31560e5b741445ea2a1acee2a81425ff000000d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51423b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f88735fce5115dc83ed73d8ee4a91322608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf5000000000000fa08ad0631c4b839688b22c4da2a6bc4cf45854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296bb2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692ba74b531b65c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652decbe579b03ed84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf5392882df78b0983e662dc0cb64b77f3f006b6b25443197ae93f0be6de5a703d003f00720943c0e4b33af00000000000000000021a688b2d7007fcc4b59f719afb0b3b7e0aee306ca70fe42bf4984a68f40e1fc043a03a17e4744359b87dc27c82d51cbeb64e52a28daeb6a78d6fe06181ecc840000"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x21, 0x2, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r6 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d33, 0x8015, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x500, 0x1000000, 0x0, 0x0, 0x10, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="0600"}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$PERF_EVENT_IOC_RESET(r6, 0x2403, 0x5ae) r8 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x7, r8, 0x0) socketpair(0x15, 0x5, 0x0, &(0x7f0000000500)) r9 = socket$kcm(0x23, 0x5, 0x0) sendmsg$kcm(r9, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x10004000) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89ed, 0x0) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r10, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) 2.920678386s ago: executing program 4 (id=2781): openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x8, 0x7f, 0xfffffffa, 0xa262, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x0, 0xb}, 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x10, &(0x7f0000000040)=@raw=[@map_idx={0x18, 0x8, 0x5, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0xb2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @ldst={0x2, 0x0, 0x6, 0xa, 0x8, 0x40, 0x8}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x10001}, @ldst={0x3, 0x0, 0x1, 0xa, 0x9, 0x20, 0x4}], &(0x7f00000000c0)='syzkaller\x00', 0x2, 0x6, &(0x7f0000000100)=""/6, 0x40f00, 0x10, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f0000000180)={0x7, 0x3}, 0x8, 0x10, &(0x7f00000001c0)={0x3, 0x5, 0x9, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000280)=[r1], 0x0, 0x10, 0x8001}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x100, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0x8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r1, 0xffffffffffffffff}, 0x4) ioctl$TUNDETACHFILTER(r3, 0x401054d6, 0x0) write$cgroup_type(r1, &(0x7f0000000400), 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b80)={r2, 0xe0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000940)=[0x0, 0x0, 0x0], 0x0, 0x42, &(0x7f0000000980)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000009c0), &(0x7f0000000a00), 0x8, 0xd9, 0x8, 0x8, &(0x7f0000000a40)}}, 0x10) sendmsg$inet(r6, &(0x7f0000000d00)={&(0x7f0000000480)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)="ce43bc919ae11cdd905ed85dd7955ddb2a8b3bf8b35acf3bafe96f0a3e3ef9ec4d8dd2e50c9957214f979e5e9271c9aa456c665b6c8634b578a5f86f0eddc98a28a979754bc91bf4ca8c1925ecbdb08d43413f081690677704780e975a30f99a2de674b254d8cdf1228ee2ef23de5928cc8b3a711f27112f18410edb8c41", 0x7e}, {&(0x7f0000000540)="84aa195044ce28a029b25f0c7d1cab77f3c5af9ac15894d98f32b8dc81cd83df0379edefd48f6a3881f6ced96b37b8cd5b", 0x31}, {&(0x7f0000000580)="1bcdf49723251db798", 0x9}, {&(0x7f00000005c0)="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", 0xfc}, {&(0x7f00000006c0)="98a5a2e8130b25e43b240a389604add225d18dba20402caaacc774fc42ffb8a320e9d0395a00403c9c36b2ca7835d381aec5be56864ac362b573df19087a3de02b485e5ce38dcd3666572d1de32eb34ebb76fc9702f0c4e929fbec1da48ec9a846f72549b601aabd7658", 0x6a}, {&(0x7f0000000740)="964eba5674d13c7208533db70f165e43df334a466f886907be0293fce61af322ce9ccdd6160a48a2c6caf334f3f40fe410b88db5", 0x34}, {&(0x7f0000000780)="cec1a7d531e7eb8349cff5496c9e6657faf6cdf98f01b8d4f95ce4d361581a70a7a011e90487b207371967cb68e5ecc1ef6733786638a19e038cbacf2fd8843ce0ac5e71fe5595e6e1662b0a55a6ac3e9c2fd6a7563dd5f972a02ff7dd05c4b66aa364491ba73eaadeda8712f5d317c10f253a3e254a009679ff3ddf57d0eaddfeee69ccd45e2781795eaa2f96e5996bfbb3951accceee8f4b", 0x99}], 0x7, &(0x7f0000000bc0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0xff}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_retopts={{0x20, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @noop, @ssrr={0x89, 0xb, 0x19, [@local, @rand_addr=0x64010101]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @multicast2, @dev={0xac, 0x14, 0x14, 0x15}}}}, @ip_retopts={{0xb0, 0x0, 0x7, {[@timestamp_addr={0x44, 0x44, 0xc5, 0x1, 0x1, [{@empty, 0xfffff001}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xa}, {@multicast2, 0x8}, {@dev={0xac, 0x14, 0x14, 0x2c}, 0x80000000}, {@remote, 0x3}, {@remote, 0x9}, {@empty}, {@loopback, 0xff}]}, @end, @generic={0x89, 0x8, "070001478e78"}, @timestamp_addr={0x44, 0x14, 0xda, 0x1, 0x8, [{@multicast1}, {@multicast2, 0x5}]}, @timestamp_prespec={0x44, 0x3c, 0x17, 0x3, 0x9, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@loopback, 0xed}, {@multicast1, 0x7}, {@local, 0x7}, {@broadcast, 0x5f28}, {@empty, 0x1000}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4fae1d82}]}, @noop]}}}], 0x138}, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x1a, 0xe, &(0x7f0000000d40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x95}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x20000000}, @map_val={0x18, 0x6, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x80000001}, @cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffff9}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x1}, @map_val={0x18, 0x4, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0xcd97}]}, &(0x7f0000000dc0)='syzkaller\x00', 0x1, 0xb4, &(0x7f0000000e00)=""/180, 0x41100, 0x0, '\x00', r7, @fallback=0x8, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r8, r2, 0x2, 0x0, &(0x7f0000000ec0)=[{0x3, 0x2, 0x3, 0x8}, {0x3, 0x3, 0x4, 0x3}], 0x10, 0x3}, 0x94) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000fc0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r9, &(0x7f0000001000), 0x2, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001300)={r1, 0xffffffffffffffff}, 0x4) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x17, 0x19, &(0x7f0000001040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x7fffffff}, [@map_idx={0x18, 0x3, 0x5, 0x0, 0xd}, @ldst={0x1, 0x1, 0x3, 0x4, 0x9, 0xc, 0xfffffffffffffffc}, @jmp={0x5, 0x1, 0x8, 0x0, 0x6, 0xfffffffffffffffe, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xa}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc14}}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x4}, @ldst={0x3, 0x0, 0x1, 0x4, 0x4, 0x18, 0x4}, @jmp={0x5, 0x1, 0xa, 0x2, 0x2, 0x100, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}]}, &(0x7f0000001140)='syzkaller\x00', 0x1, 0xe9, &(0x7f0000001180)=""/233, 0x41000, 0x8, '\x00', r7, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x8, &(0x7f0000001280)={0xa, 0x3}, 0x8, 0x10, &(0x7f00000012c0)={0x4, 0xd, 0x8158, 0x6}, 0x10, r8, r2, 0x8, &(0x7f0000001340)=[r10, r4], &(0x7f0000001380)=[{0x0, 0x4, 0x3, 0x3}, {0x0, 0x4, 0x7, 0x7}, {0x2, 0x2, 0xb, 0xb}, {0x1, 0x1, 0x4}, {0x3, 0x2, 0x6, 0x7}, {0x3, 0x5, 0xb, 0xc}, {0x4, 0x5, 0xe, 0x4}, {0x1, 0x1, 0xf, 0xa}], 0x10, 0x6}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001540)={{r10}, &(0x7f00000014c0), &(0x7f0000001500)='%pI4 \x00'}, 0x20) r12 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r12, 0x89e2, &(0x7f0000001580)={r5}) r14 = perf_event_open$cgroup(&(0x7f00000016c0)={0x4, 0x80, 0x2, 0x6, 0x1, 0x40, 0x0, 0x2, 0x40, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x10000000, 0x4, @perf_bp={&(0x7f0000001680), 0x4}, 0x10000, 0x2, 0x7f, 0x0, 0x4, 0x24, 0x5, 0x0, 0x8, 0x0, 0xffffffffffffffff}, r9, 0x1, 0xffffffffffffffff, 0x6) perf_event_open$cgroup(&(0x7f0000001600)={0x4, 0x80, 0x80, 0xd, 0x4, 0x1, 0x0, 0x6, 0x1000, 0x7, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x8, 0x1, @perf_bp={&(0x7f00000015c0)}, 0x200, 0x6, 0xa, 0x2, 0xfffffffffffffff9, 0x493a, 0x0, 0x0, 0x6, 0x0, 0x3}, r4, 0x10, r14, 0x7) ioctl$sock_kcm_SIOCKCMCLONE(r13, 0x89e2, &(0x7f0000001740)={r11}) r15 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001780)={0x1b, 0x0, 0x0, 0x800, 0x0, 0x1, 0x4, '\x00', r7, 0xffffffffffffffff, 0x3, 0x1, 0x2}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001800)={0x1b, 0x0, 0x0, 0x2, 0x0, r15, 0xf, '\x00', r7, 0xffffffffffffffff, 0x4, 0x4}, 0x50) r16 = openat$tun(0xffffffffffffff9c, &(0x7f0000001880), 0x400b00, 0x0) ioctl$TUNSETLINK(r16, 0x400454cd, 0x102) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000018c0)={r10}, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x2400, 0x10000) 2.644376079s ago: executing program 0 (id=2782): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x900}, 0x60) r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005, 0x0, 0xffffffffffffffff, 0x7fffffff}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r1, 0x58, &(0x7f0000000340)={0x0, 0x0}}, 0x10) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r2}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000001440)=@base={0x1a, 0x204, 0x8, 0x4, 0x20ac4, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x96c0, 0x18}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r3}, &(0x7f0000000400), &(0x7f0000000100)=r0}, 0x4b) close(r3) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005", 0x15}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0}, 0x94) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0xc2ba, 0x1, 0x4000000, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33) r7 = perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0xf, 0x88, 0x0, 0x0, 0x0, 0x40000000002, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x2000000, 0x7}, 0x10a4f, 0x2000b, 0x4, 0x4, 0xfffffffffdf7bbfe, 0x0, 0x5, 0x0, 0x472e, 0x0, 0x200000000}, 0x0, 0x4000000000e, 0xffffffffffffffff, 0x8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x109000, 0x0) ioctl$TUNGETFEATURES(r9, 0x800454cf, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x88b) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000240)={'wg1\x00', 0x20}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000080)) 2.426101547s ago: executing program 3 (id=2783): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x7, 0x22004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003505d25a806f8c6394f97e24fc60", 0x14}], 0x1, 0x0, 0x0, 0x74000000}, 0x10) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)=ANY=[@ANYRES32=0x1, @ANYRES32=0x0], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) recvmsg$unix(r3, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000880)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xc378554, '\x00', 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x5}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) socket$kcm(0x21, 0x2, 0x2) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000021000b12d25a805bb98222f90224fc60", 0x14}], 0x8}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/15], 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) openat$tun(0xffffffffffffff9c, 0x0, 0x4000, 0x0) 2.422586138s ago: executing program 4 (id=2784): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b400000000b2526a880a0000000000008001410000000038e5000000000000000cf5f6e13cc869527f9699822d7f18a94964a1cace"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xbe, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1883b68b0eb33f360000000000000000850000002a0000009500000000000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa10000000000000701"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0a4256d8159d88675b00f83f0a00000000000000", @ANYRES32, @ANYBLOB="fdffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0xa}, 0x10c002, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a00018025643a00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.net/syz0\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f00000006c0)={0x3, 0x80, 0x3, 0x0, 0xa0, 0x6, 0x0, 0x4e, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000680), 0x1}, 0x410, 0x3, 0x9953, 0x2, 0x80000001, 0x8, 0x6, 0x0, 0x5, 0x0, 0x200}, r4, 0x8, r1, 0x8) r5 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r5, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) bpf$LINK_DETACH(0x22, &(0x7f0000000100), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a8001600a400014020000a00feffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8947, &(0x7f00000002c0)={'bond0\x00', @broadcast}) sendmsg$inet(r5, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="cd", 0x1}], 0x1}, 0x240448c4) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x13, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b0a00fe00000000bda106930000000026010000f8ffffffb702000008000000b703000000000000850000000500000018010000202070250000000000202020c31af8ffa1000000bfa10000000000000701001300feffffb702000008000000b703000000005a8b000085000000ca0000009500000000000000d36656e6ff2cb33a17d6d33c0ac6d48227c4ce"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) socket$kcm(0xa, 0x2, 0x3a) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 2.11489884s ago: executing program 1 (id=2785): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r2, &(0x7f00000010c0)={&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)}, 0x4000040) sendmsg$inet(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000180)="84", 0x1}], 0x1}, 0x8040) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1b, 0x13, &(0x7f0000000880)=ANY=[@ANYRES16], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x6e1a3500, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x8001, 0x0, 0x4, 0x9, 0x0, 0x0, 0xfffc, 0x0, 0xad}, 0x0, 0xf, r3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="01f849c1dbf2000000050000152540bdb1de00fd09000084b05f23808d27"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000e40), 0x800, r4}, 0x38) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="2e00000011008188040f80ec59acbc0413a181003f00000001010000000200000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="d8000000150081044e81f782db44b9040a1d080206000000040000a118000200ff05000000000e1208000f0100810401a80016eaa400010000005f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e00600000000d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed0bfffdccf85df947e5e0", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r7 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r8 = socket$kcm(0x1e, 0x4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000500000000000000000000000071105000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x98, &(0x7f00000002c0)=""/152}, 0x94) recvmsg(r8, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x101a0) close(r2) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r9, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x5}, 0x50) 1.964979079s ago: executing program 0 (id=2786): mkdir(&(0x7f0000000080)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xb5}, 0x48) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='freezer.self_freezing\x00', 0x0, 0x0) mkdirat$cgroup(r0, &(0x7f0000000100)='syz1\x00', 0x1ff) openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) 1.900027206s ago: executing program 5 (id=2787): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000240)}, 0x20) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x25, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x2}, 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000540)={r0, r3}, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)={0x1b, 0x0, 0x0, 0x3, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x4}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f00000014c0)=ANY=[@ANYBLOB="18000000000000000000000001000100b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="7ff97bde4271b90c020000000000000000b70500000800000085000000a50000"], &(0x7f0000000300)='GPL\x00', 0x5, 0xffd, &(0x7f0000002a00)=""/4093}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0}, 0x94) close(r4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x40) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], &(0x7f00000005c0)=""/217, 0x35, 0xd9, 0x1}, 0x28) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x104a, 0x10000000c8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x80}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x2, 0x3ff, 0x2, 0xfffffffb, 0x6800, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) 1.605289524s ago: executing program 0 (id=2788): ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x20}, {0x28, 0x0, 0x81, 0x1}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&'], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0xa, 0x200, 0x7, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r0, &(0x7f0000000a40)='&', &(0x7f0000000040)=""/98}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/76}, 0x20) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100080, 0x0, 0x0, 0x1}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000003140)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000080), &(0x7f0000000240)=r4}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x18000000000002a0, 0x5ee, 0xfd60, &(0x7f0000000580)="b9ff03076804d773000000000100", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50) setsockopt$sock_attach_bpf(r1, 0x6, 0xd, &(0x7f0000000000), 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x31, &(0x7f0000000000), 0x4) 1.412725635s ago: executing program 3 (id=2789): bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000040)}, 0x10) r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r1, &(0x7f00000004c0)={&(0x7f0000000140)={0x2, 0x0, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)="ba", 0x1}], 0x1}, 0x4008804) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) r2 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f0000000340)={&(0x7f0000000200)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x40, 0x0, 0x1}}, 0x80, 0x0}, 0x88010) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x2, &(0x7f0000000480)=ANY=[@ANYBLOB="850000008c000000061200", @ANYRES32], &(0x7f0000000200)='syzkaller\x00'}, 0x94) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000007044f16c01b1fbfd000000000000008af65f0df9928941994cc8c173fac5688671085a86d143c59fed0e57feb97f422c51d8e63b4ed9e295df3ccd1a55752dfc2f32f14b6c8f0e7413c3e9caaad30dcb412d0f54623f388bb2c63d2b1f7d83cd0cc021867bb4aee9967a6ee83e1b18fd8beca7d7eddcd96634"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r4, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001200)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x84, 0xfffffffffffffffc}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x3}, 0x0, 0xf, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x100001, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff4, 0x0, @perf_config_ext={0x85, 0xffffffffffffffff}, 0x3212, 0x7, 0x2, 0x2, 0xc, 0x7, 0x2, 0x0, 0x2, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0500000004000000080000000500000000000000", @ANYBLOB="00000000000000000000000000000000000000005ed58ffa4355cc93039ebc57746ca71eb6a220c079af2d39264b8429a3443caade13ff656ebfa4793c85a7216a57455b6b31dd090cc79b673446b22289d6880d01ee1147a7376473fa4c387fee9474fa4b6d558e7fa9150b7ee7ee0247f7afe0f510b55374765f69ca3f49648904cd756f9a72ebe9798486b52af6bc4646dd2c55", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r6}, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) r7 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000500)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af3653c001ac00800020007000200060001c00364683b9dad7aa21240d69a6a818cf6c551ae60fc91b169edb1b175732b9f597fe3b6c5a3d77cc766307de2", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000000) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000740)="5c00000013006bcc9e3be35c6e17aa33074b876c1d0000007ea60864160af36514000cc0080019000300000006001dc00200bc24eab5008000001e618294ff4051f60a84c9f4d4938037e786a6d00010000400000000000000c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4004004) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000000850000003600000085000000070000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r8, 0x0, 0xe, 0xfffffffffffffd85, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x739d, 0x0, 0x7, 0xfffffffffffffe73}, 0x28) 1.331314697s ago: executing program 1 (id=2790): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x4, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000001d71187d000000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.224509615s ago: executing program 4 (id=2791): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2a}]}, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa10000000000000701"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0a00000004000000080000000a00000000000000", @ANYRES32, @ANYBLOB="fdffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 1.181258096s ago: executing program 0 (id=2792): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0a00000006000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000080000000000000004a0008000000000010cc4302000000000e266e"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d0100000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x10, 0x400000002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r2 = socket$kcm(0x15, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x114, 0x1d, 0x0, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x17, &(0x7f0000000880)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000940), 0x0, 0xa7c}, 0x38) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r5) socket$kcm(0xa, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xd80c2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xd, 0xf, &(0x7f0000000740)=ANY=[@ANYBLOB="183378e269d22d4a2f8db5fdc84c114000832176a35f8ad6795ec50855849a39a5b0e0d1c1ba068bfb3f3222aa93530449edf9046633bbe203eda09cae3b321e64847891cde06f19df0557ab5d331fb4284bbc210f52996ce2e5e4cfd99037967b1effe5b5c22f94f048aa7f4633a3bad66144fc98729da72fb215718f676f0a9c21f06f3b003f47be473b31cd69ed06d62721b017e18c7a355f602df57fc77c824b", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200000000000085000000860000003816f8ff1000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010000808500000006000000185700000a00"/112], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x3b7a3e3b2c1633b1, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xe}, 0x10}, 0x94) ioctl$SIOCSIFHWADDR(r4, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="020000000300"}) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xffdd) recvmsg(r1, 0x0, 0x10100) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.09395631s ago: executing program 5 (id=2793): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x1ff}, 0x8) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x5, 0x0}, 0x8) (async, rerun: 32) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0x10}, 0x18) (rerun: 32) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@generic={&(0x7f0000000240)='./file0\x00', 0x0, 0x8}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0x1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000380)='./file0\x00', 0x0, 0x8}, 0x18) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x2d6, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x3}, 0x50) (async) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000480)={0x0, 0x9, 0x1c}, 0xc) (async, rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{0x1, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000500)}, 0x20) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0x2, &(0x7f0000000100)=@raw=[@map_fd={0x18, 0xa, 0x1, 0x0, r1}], &(0x7f0000000140)='syzkaller\x00', 0x40, 0x2d, &(0x7f0000000180)=""/45, 0x1f00, 0x19, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0xffffffff, 0x3}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0xf, 0xfffff9dc, 0x9}, 0x10, r0, r2, 0x2, &(0x7f0000000580)=[r3, r4, r5, r6, r7], &(0x7f00000005c0)=[{0x3, 0x2, 0x8, 0xa}, {0x0, 0x4, 0xa, 0x1}], 0x10, 0xb}, 0x94) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) r9 = openat$cgroup_procs(r8, &(0x7f0000000700)='cgroup.threads\x00', 0x2, 0x0) (async) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x2c0200, 0x0) ioctl$TUNSETOFFLOAD(r10, 0x400454d0, 0x2) (async) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}, [@btf_id={0x18, 0x6, 0x3, 0x0, 0x5}]}, &(0x7f0000000800)='GPL\x00', 0x81, 0x89, &(0x7f0000000840)=""/137, 0x41000, 0x48, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000940)={0x2, 0x4, 0x0, 0x6}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000980)=[r7, r3, r3, r6, r6, r1, r5], &(0x7f00000009c0)=[{0x2, 0x5, 0x6, 0xc}, {0x2, 0x4, 0xf, 0x1}], 0x10, 0x298f}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b00)={{r3, 0xffffffffffffffff}, &(0x7f0000000780), &(0x7f0000000ac0)=r11}, 0x20) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000bc0)={r3, 0x58, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@bloom_filter={0x1e, 0x3, 0x80000001, 0x5, 0x60880, r12, 0x2, '\x00', r13, 0xffffffffffffffff, 0x3, 0x1, 0x4, 0x1}, 0x50) (async) r14 = openat$cgroup_ro(r8, &(0x7f0000000c80)='rdma.current\x00', 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000cc0)={r9, 0xffffffffffffffff}, 0x4) r16 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001000)={0x6, 0x1e, &(0x7f0000000d00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r14}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r15}}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xe}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000e00)='syzkaller\x00', 0x5, 0xbe, &(0x7f0000000e40)=""/190, 0x41000, 0x20, '\x00', r13, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000f00)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000f40)={0x4, 0x5, 0x2, 0x8}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000f80)=[{0x4, 0x4, 0xc, 0x7}, {0x5, 0x5, 0x9, 0xc}, {0x2, 0x4, 0xc, 0x1}, {0x3, 0x5, 0xd, 0xc}, {0x4, 0x2, 0x10, 0x5}], 0x10, 0x5da7d9fa}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000011c0)={@fallback=r4, 0x2, 0x0, 0xbf, &(0x7f00000010c0)=[0x0], 0x1, 0x0, &(0x7f0000001100)=[0x0], &(0x7f0000001140)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001180)=[0x0], 0x0}, 0x40) r19 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000001240)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001200)={@fallback=r11, r11, 0x20, 0x2000, 0x0, @value=r19, @void, @void, @void, r18}, 0x20) (async) r20 = bpf$MAP_CREATE(0x0, &(0x7f0000001580)=@base={0xc, 0x200, 0x17b, 0x3, 0x400, r1, 0x6, '\x00', r13, r3, 0x1, 0x0, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001680)={0x11, 0x38, &(0x7f0000001280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xca}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1000}}, @alu={0x7, 0x1, 0xa, 0x4, 0x7, 0xc, 0x1}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @alu={0x7, 0x1, 0x0, 0x8, 0x2, 0x175, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001440)='syzkaller\x00', 0x0, 0x60, &(0x7f0000001480)=""/96, 0x41100, 0x66, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001500)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000001540)={0x5, 0xe, 0xbd, 0xfffffff8}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000001600)=[0x1, r5, r12, r20], &(0x7f0000001640)=[{0x4, 0x4, 0xf, 0x9}, {0x3, 0x2, 0x10, 0xd}, {0x3, 0x3, 0xc, 0x9}, {0x1, 0x3, 0x6, 0x9}], 0x10, 0x24}, 0x94) (async, rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000017c0)={{r12, 0xffffffffffffffff}, &(0x7f0000001740), &(0x7f0000001780)=r11}, 0x20) (rerun: 32) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001980)={r21, &(0x7f0000001800)="4f566490911a932b806dad65bda873a6351fe2c279a88b49ff32c1f1df914a8d581fa34166255261bc2b465d8223068e7f348df018392db712071a3799db78f17e0d4e53e7825ab9396636ee4b509dde37614ad9390636abd823d31ee4b19e2277eb0149790375aae5f214fba05039c67e9f6a259ac4c80dc402f5fe89912f3e0c815e45a5818454f138f9945b38eff5ce36eb3d6321c34b81a20bfb2440027aff37f57294e45ef52797bfa3e35b3cc95943b230e5864eff2191f50713dc7922182d3c484c360f6007d8479347e5d0d30c55d6", &(0x7f0000001900)=""/98, 0x4}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001ac0)={@ifindex=r13, 0x9, 0x0, 0xc1e, &(0x7f00000019c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f0000001a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001a40)=[0x0, 0x0], &(0x7f0000001a80)=[0x0, 0x0]}, 0x40) (async, rerun: 32) sendmsg$unix(r17, &(0x7f0000003fc0)={0x0, 0x0, &(0x7f0000003e40)=[{&(0x7f0000001b00)="6931e736cdb04aae5d39fcf6d5ae1581ce1537e03030c92616f2d87896df314b5c838b2b95498d7ff6bdc3632724f4f850481e806d1edabbdf0b786970f3c8f06f7c6dcf2fd1c3e0d5f27daaf2050a8b5fe632942df768e28416d2cb0160a4a0e4037983a75f425f586592d9a30eeac302c426bfd5ef954add899ed3f2eebade8444c8773acb8c99a424fd0790f825fe2899be73b92f52a713d2", 0x9a}, {&(0x7f0000001bc0)="1a47043c0b3cfa0afb131731c6cf5eaa320a76fb2284bed038a73159a84aa3cb64f93f7f7d22ac70fddf1969804e72f2645a210e48654071887aebefa8b72182f53b98445c3a5ba90d29783f2a4127aaccf55e6469ab2b310fc9af716e2f44b65319410f6df21acdfea7733bf09b4fb0e945ba", 0x73}, {&(0x7f0000001c40)="58e4bea82e34fd6ef0b9cc01231ed2bc2a8430e0a9edbc808dfc249b2291e43276c0cc4fc92ded442b6da4f8434eb4d8b09a004a5a288c703512e39afd10513fe677ba1bc31297e45d3b3c9263aa022798b97f59250ecb7354ee07ee23d572f391bcd4165567729d2bb51b0069d051180d4230a8cfb01478ea248fcdf140cf1d027e707764bc7842e2b92e1a9de929e338772eda379928cd9988ace0c5a3a731d6bed209", 0xa4}, {&(0x7f0000001d00)="c458f0d97116f85a682a40548c996a533da5dbbb5ac8756aba85ce344961bb757b73b3f5df59", 0x26}, {&(0x7f0000001d40)="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", 0x1000}, {&(0x7f0000002d40)="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", 0x1000}, {&(0x7f0000003d40)="e6ff246ba39cf8f8007494cc5021b71b1a9019f76cd111a931de1a343480cfe4be61384eb2c8b0785a38f9bc820292b0de0d198b843994ceb5cecc27ac49477000163ebf4e71e221107476af7a7d3a00cee704c863edbbda51ad1bb47be16dce161aae834f6874c58945775c4d105de20df9b98fbeb5590587a5a8ded5a489a286297f491b4f772eea7dc44df1b8b7ae6fd3bfe87fda4601b28ae1ebda7f45dfb79e6b7b09d952e74c986264bb97", 0xae}, {&(0x7f0000003e00)="ab3388e354e776efd50051f3ac9d1613de10", 0x12}], 0x8, &(0x7f0000003f40)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01}}}, @rights={{0x1c, 0x1, 0x1, [r16, r15, r4]}}, @rights={{0x24, 0x1, 0x1, [r19, 0xffffffffffffffff, 0xffffffffffffffff, r1, r6]}}], 0x68, 0x20000001}, 0x8040004) (rerun: 32) 1.059351979s ago: executing program 1 (id=2794): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x24080, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc006, 0xac5d, 0xffffffff, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000003f000b12d25a80648c2594f90124fc60", 0x14}], 0x1}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={r0, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xb, 0xff, 0x24932, 0x7f, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2000, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r4) r5 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r5, &(0x7f0000000340)={&(0x7f00000000c0)=@in6={0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x7}, 0x80, 0x0}, 0x2008e000) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[], 0xfe33) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x7f, 0x0, 0x0, 0xffffffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x0, 0x2, 0x0, 0x0, 0x2, 0x1000000, 0x4}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c012, 0xac5d}, 0x0, 0xfffffffffffff7ff, 0xffffffffffffffff, 0x1) socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="ceaa00000000000071101b000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r7, 0x0, 0x36, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 955.829186ms ago: executing program 4 (id=2795): r0 = socket$kcm(0x10, 0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1b, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f0, &(0x7f0000000080)) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e281ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014001040400060404009bbc7a46e3988285dcdf12f213e6f768fec601955fd80009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff, 0x1], 0x0, 0x10, 0x8000}, 0x94) r3 = socket$kcm(0x11, 0x2, 0x0) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r4, 0x107, 0x12, &(0x7f00000000c0)=r3, 0x8) close(r3) r5 = socket$kcm(0x11, 0x2, 0x0) r6 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r6, 0x107, 0x12, &(0x7f00000000c0)=r5, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffe4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, &(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd9, &(0x7f0000000140)=[{}, {}], 0x10, 0x10, &(0x7f0000000180), &(0x7f0000000240), 0x8, 0x4a, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d574256ef7f75552ff087a819e", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f0000001300)=ANY=[@ANYBLOB="6b0000000000000029000000390000000002020000000000000000007f000001080000000700000000000034366567f221978756640000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="04ff87200049f7e7d70473a4ea31d15831cebbaf3f4f0699547bf7da7905989ef927e86139709f3be69a678a54fdbc84fca6644b0e89f1d2812e4acbdd4c2ea19252ca611fb4b97bb5e63e04bf69c84c75f0b80b4ac84b4db1efa6604e8533ecb1dd47c3dba3e32336e0f9e4f097704d4ea7451775c41f88aa30e2bcbe144c317e0ab4b6244946c07bba1ca3973ed5d1c5698a9829210f4a2cb1dcb6189070bdee3c17126becf3c9b6e7e2716ef129397a52fd256bfa7fbc9cc7f473deea5ff907aa9bbf583afc43f4bd4eb9f113334d544d590ad530dd55b622e49a802746ee3aec334b1310acc66b427cd4771cfc04a5430d527008ffc00522fbb4648948845b8d274c35fd59e1ac0c04b2dfd91194a8e2810bcb0788a000dbceaf0b1cfd686c3417cd2b8255915bd00b78a7fcfff09870cfc8e602a4106a0b3e111c856c8af2522d3647b2f1db"], 0x6b}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081054e81f783db4cb9040a1d080006007c03e8fc55a10a0015000600142603600e120800060000000401a80009002000000001000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x800) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000fab0a01b5040dd530e003e7c8500000005000000640000002a00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r9, 0x27, 0xe, 0x0, &(0x7f00000001c0)="f9ad48cc42cb29fc99d41a08320a", 0x0, 0x13fd, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 823.158982ms ago: executing program 0 (id=2796): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x106080, 0x0, 0x4000000, 0x1}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, r0, 0x0) socket$kcm(0x10, 0x2, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000009d0a000000000000030142"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x19}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0xffffffffffffffff, 0x9010, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0xf50a43945a8ef38c}, 0xce6b9b20411c70f4, 0x800000000000ca, 0x0, 0x9, 0xffffffbffffffffc, 0x0, 0x0, 0x0, 0xf, 0x0, 0x3}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0xb) recvmsg$unix(r2, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[@ANYRES16=r2], 0x9a) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)=0x5) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r5) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r5}, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x40) r6 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x3, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5f, 0x5, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x85}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r8, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x6, 0x5, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000effd001000000000400070007010000080700007500fcff0000000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0xfa, &(0x7f0000000a00)=""/250, 0x0, 0x0, '\x00', r9}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc80d, 0x0, 0xfffffffc, 0x9, 0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) 750.39057ms ago: executing program 5 (id=2797): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x105880, 0x0, 0x0, 0x7, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x8841) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1}, 0x38) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x3ff, &(0x7f0000000000)) socket$kcm(0x11, 0x3, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x51, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703360000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 46.782987ms ago: executing program 1 (id=2798): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x4, 0xfe, 0x0, 0x5d31, 0x24080, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x464d, 0x0, 0xfffffffc, 0x2, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x7, 0xa009, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, @perf_config_ext={0x4, 0x6}, 0xc006, 0xac5d, 0xffffffff, 0x0, 0x100000000, 0x2, 0x0, 0x0, 0xfffff800, 0x0, 0x40000000000000}, 0x0, 0xffffffffffffffff, r1, 0x5) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000003f000b12d25a80648c2594f90124fc60", 0x14}], 0x1}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={r0, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b000000ff0000fc314902007f0000000100000097a51232d42c792d74dac8df304d443b50b3685f062a94d2a91fe22e62da5e900f4184e3fda6e17ea2d6c040e2635f577832187900b931e3cb812cc668a52710891d07cd25e880bd3ffce889926b6700584f8853461e6f9122120f83b00bfc6a5eab80823913d7d6861abf400b19af693921843d7fb9f1f224509eaba2a31591c7d2850a7211b7e39749ba80192721b394b9a3756572c479c8029e194f75997b0d5dfc7a894d0acc3dccea6300"/205, @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES16, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2000, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r4) r5 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r5, &(0x7f0000000340)={&(0x7f00000000c0)=@in6={0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x7}, 0x80, 0x0}, 0x2008e000) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[], 0xfe33) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x7f, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x0, 0x2, 0x0, 0x0, 0x2, 0x1000000, 0x4}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c012, 0xac5d}, 0x0, 0xfffffffffffff7ff, 0xffffffffffffffff, 0x1) r6 = socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f00000001c0)=ANY=[@ANYRES8=r6], &(0x7f0000000480)='GPL\x00'}, 0x94) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r8, 0x0, 0x36, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888847", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 3 (id=2799): socket$kcm(0x10, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r1, &(0x7f0000000200)="ba"}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f00000007c0)=@generic={0x6, "b35ff1d1ce65663e388918e4a29322a5b619cad3f57cadebe464693b6daeae48a2ba2c677482541d649321abad78e6df02e52d8155a7f1b67820df51634cd30f573461dedc364ce0584db8fcc5317c7309d5188ad0d3fc396d16a527cdb5a275b67680da7d782e48abf9c41bc8f307ee0ab2703b0a7eeca7d1e3240345e8"}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b8825fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) socketpair(0x1a, 0x4, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0xa, 0x2, 0x3a) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x611, &(0x7f0000000000)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fc3000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x40) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x3, 0x73) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r5, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf20000000000000070000000f0000003d030100000000009500ffb1000000006926000000000000bf6700000000000036000b000fff52004507faff15300000d60600000ee60000bf050000000000003d63000000000000650700000200000007070000fbffffff1f75000000000000bf54000000000000070000000410f900bd430100000000009500000000000000050000000000000095000000000000001c15a3ce747c693a74b62fd0758b15f09429c09074bc4b2bd2dc480dd7a064b8673e2060162cc43bcba1060999eef9d60bb39d0af449deaa27ea949e8f9000d885deea2783835e29eba8546fc020c1966f8b5f32b095f566edf66b7751828da9dbd5b996b9e8d897e461c01c697671d100000000400036c17fb01dde179c1f26cac1c7b21bde7d1a55d6ebe700b3be005e47ef55e0dd81244b18590e000000000000356d82e43407a6d7fa94b21002f06cd247b126b6349ab62d7b07ba0a71a72145edade9941f49f300a8c8913e0e4ea9e4c77740ab3312edee62a4dc2fc85755d387d8a1bc8eb71fbe11b2216cc8d1f0160c237d929b49d828724b95555b459f4763c6222175c974be2f76fb5f330b015a68587a75c013000000000000000000000003000000000000d6ddc46e58eff8f4fbadfc6a3af8123b7f4240713a4c0cdc9d7820c4eb67cc0f8b5fe9258eeacb5776aebbab3d5c55020000006082778366dadfc36029633e0514cbcee1f3928970bde148c940434f33acd377cbad17673b2d30b6339255c98eba97efb4e9ac1f11be815dd6045592edcbee7f253ec74c7c1313505bd7ff8fd58b3a6569c91dbdef1df585aeaea7346a2a65caee5c85f9eddeeeee3c8a2e523c864ac430eb47cb4d0c8767b9d4125661b5a1a170c04b64da3a99ddb93bf14fae3ca2d1e882375b8dbac83978e136c34f90b33cc0eeb57debcfe26589efc08125d5d62a7e593c9738a50171adf051ea4f07e7e7e770c2016eeacbe8511afffffbea75759a1ea5404f5453c0b5c46c9700808c096cf8cf5223f341cbea3841b5cd224c1b381d56afebe9f99a00e3cd94dc0bb7af9e8709db487cc4d9b3b96723d69d512ddd57b0dee9b9f6ae80a502cce352098603e77f9ecced07fa25e99e9e415414c91f8bfd1c150570512f26c4ee34a64c131dce3800000000000000006c86287945bd8d258442870e000000000000000000000000f7e6a10de4bf7369b0d5b5373829b09bf5b7b34099b27ac7770fca449d4c4ca15f88b588b2429af2e1d1a4e1fa44cb80fcfae6e50d7e5b4675d7e0be706224f34e6eed553b40e2b897e73752fc7d1e4b0f4c5967eefd7448d5fde5841fa464a67267c631052bd7333769a4b8d19d4794357edce762e8136ab9d7ed34a72baffd849b90579b96b3"], &(0x7f0000000100)='GPL\x00'}, 0x48) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) 0s ago: executing program 5 (id=2800): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x7, 0x22004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003505d25a806f8c6394f97e24fc60", 0x14}], 0x1, 0x0, 0x0, 0x74000000}, 0x10) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYRES32=0x0], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) recvmsg$unix(r3, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000880)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xc378554, '\x00', 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x5}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) socket$kcm(0x21, 0x2, 0x2) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000021000b12d25a805bb98222f90224fc60", 0x14}], 0x8}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/15], 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) openat$tun(0xffffffffffffff9c, 0x0, 0x4000, 0x0) kernel console output (not intermixed with test programs): t_files+0x28/0x460 [ 507.733859][T10367] security_file_ioctl+0x6c/0xa0 [ 507.738878][T10367] __se_sys_ioctl+0x48/0x170 [ 507.743504][T10367] do_syscall_64+0x4c/0xa0 [ 507.747944][T10367] ? clear_bhb_loop+0x60/0xb0 [ 507.752698][T10367] ? clear_bhb_loop+0x60/0xb0 [ 507.757399][T10367] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 507.763365][T10367] RIP: 0033:0x7f94d4b9e159 [ 507.767807][T10367] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 507.787442][T10367] RSP: 002b:00007f94d2df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 507.795887][T10367] RAX: ffffffffffffffda RBX: 00007f94d4e25fa0 RCX: 00007f94d4b9e159 [ 507.803896][T10367] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 000000000000003a [ 507.811898][T10367] RBP: 00007f94d2df6090 R08: 0000000000000000 R09: 0000000000000000 [ 507.819897][T10367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 507.827908][T10367] R13: 00007f94d4e26038 R14: 00007f94d4e25fa0 R15: 00007ffdb728e8e8 [ 507.835941][T10367] [ 508.003263][T10367] ERROR: Out of memory at tomoyo_realpath_from_path. [ 509.881096][T10411] FAULT_INJECTION: forcing a failure. [ 509.881096][T10411] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 509.913036][T10411] CPU: 0 PID: 10411 Comm: syz.4.1695 Not tainted syzkaller #0 [ 509.920668][T10411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 509.930763][T10411] Call Trace: [ 509.934087][T10411] [ 509.937190][T10411] dump_stack_lvl+0x188/0x24e [ 509.941926][T10411] ? show_regs_print_info+0x12/0x12 [ 509.947172][T10411] ? load_image+0x410/0x410 [ 509.951734][T10411] ? __lock_acquire+0x7c40/0x7c40 [ 509.956816][T10411] should_fail_ex+0x390/0x4c0 [ 509.961564][T10411] _copy_from_user+0x2c/0x170 [ 509.966368][T10411] __sys_bpf+0x2ea/0x780 [ 509.970732][T10411] ? bpf_link_show_fdinfo+0x380/0x380 [ 509.976173][T10411] ? lock_chain_count+0x20/0x20 [ 509.981070][T10411] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 509.987115][T10411] __x64_sys_bpf+0x78/0x90 [ 509.991587][T10411] do_syscall_64+0x4c/0xa0 [ 509.996051][T10411] ? clear_bhb_loop+0x60/0xb0 [ 510.000798][T10411] ? clear_bhb_loop+0x60/0xb0 [ 510.005519][T10411] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 510.011498][T10411] RIP: 0033:0x7fad5c99e159 [ 510.016217][T10411] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 510.035874][T10411] RSP: 002b:00007fad5abf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 510.044340][T10411] RAX: ffffffffffffffda RBX: 00007fad5cc25fa0 RCX: 00007fad5c99e159 [ 510.052355][T10411] RDX: 0000000000000050 RSI: 0000200000000b80 RDI: 000000000000000a [ 510.060376][T10411] RBP: 00007fad5abf6090 R08: 0000000000000000 R09: 0000000000000000 [ 510.068400][T10411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 510.076517][T10411] R13: 00007fad5cc26038 R14: 00007fad5cc25fa0 R15: 00007fff09046688 [ 510.084565][T10411] [ 510.515499][T10417] netlink: 'syz.4.1697': attribute type 29 has an invalid length. [ 510.613193][T10417] netlink: 'syz.4.1697': attribute type 29 has an invalid length. [ 510.792969][T10417] netlink: 'syz.4.1697': attribute type 3 has an invalid length. [ 510.809124][T10433] FAULT_INJECTION: forcing a failure. [ 510.809124][T10433] name failslab, interval 1, probability 0, space 0, times 0 [ 510.830528][T10417] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.1697'. [ 510.846226][T10433] CPU: 0 PID: 10433 Comm: syz.5.1700 Not tainted syzkaller #0 [ 510.853764][T10433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 510.863868][T10433] Call Trace: [ 510.867193][T10433] [ 510.870197][T10433] dump_stack_lvl+0x188/0x24e [ 510.874935][T10433] ? show_regs_print_info+0x12/0x12 [ 510.880185][T10433] ? load_image+0x410/0x410 [ 510.884750][T10433] ? __might_sleep+0xd0/0xd0 [ 510.889389][T10433] ? __lock_acquire+0x7c40/0x7c40 [ 510.894478][T10433] should_fail_ex+0x390/0x4c0 [ 510.899223][T10433] should_failslab+0x5/0x20 [ 510.903775][T10433] slab_pre_alloc_hook+0x59/0x300 [ 510.908858][T10433] ? tomoyo_encode+0x28a/0x550 [ 510.913780][T10433] __kmem_cache_alloc_node+0x4f/0x270 [ 510.919229][T10433] ? tomoyo_encode+0x28a/0x550 [ 510.924051][T10433] __kmalloc+0xa3/0x240 [ 510.928276][T10433] tomoyo_encode+0x28a/0x550 [ 510.932940][T10433] tomoyo_realpath_from_path+0x578/0x5c0 [ 510.938640][T10433] ? tomoyo_domain+0xd2/0x120 [ 510.943383][T10433] ? tomoyo_path_number_perm+0x205/0x650 [ 510.949072][T10433] tomoyo_path_number_perm+0x22f/0x650 [ 510.954588][T10433] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 510.960107][T10433] ? ksys_write+0x1ce/0x260 [ 510.964675][T10433] ? common_file_perm+0x171/0x1c0 [ 510.969970][T10433] ? __fget_files+0x28/0x460 [ 510.974650][T10433] security_file_ioctl+0x6c/0xa0 [ 510.979646][T10433] __se_sys_ioctl+0x48/0x170 [ 510.984293][T10433] do_syscall_64+0x4c/0xa0 [ 510.988798][T10433] ? clear_bhb_loop+0x60/0xb0 [ 510.993555][T10433] ? clear_bhb_loop+0x60/0xb0 [ 510.998293][T10433] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 511.004384][T10433] RIP: 0033:0x7f6060f9e159 [ 511.008850][T10433] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 511.028521][T10433] RSP: 002b:00007f605f1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 511.037088][T10433] RAX: ffffffffffffffda RBX: 00007f6061226270 RCX: 00007f6060f9e159 [ 511.045142][T10433] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 000000000000003a [ 511.053175][T10433] RBP: 00007f605f1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 511.061204][T10433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 511.069232][T10433] R13: 00007f6061226308 R14: 00007f6061226270 R15: 00007fffbd3147e8 [ 511.077277][T10433] [ 511.160108][T10433] ERROR: Out of memory at tomoyo_realpath_from_path. [ 511.184363][T10435] netlink: 'syz.0.1702': attribute type 2 has an invalid length. [ 511.231879][T10435] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1702'. [ 511.735941][T10450] FAULT_INJECTION: forcing a failure. [ 511.735941][T10450] name failslab, interval 1, probability 0, space 0, times 0 [ 511.752014][T10451] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1709'. [ 511.831936][T10450] CPU: 0 PID: 10450 Comm: syz.3.1708 Not tainted syzkaller #0 [ 511.839485][T10450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 511.849589][T10450] Call Trace: [ 511.852912][T10450] [ 511.855918][T10450] dump_stack_lvl+0x188/0x24e [ 511.860659][T10450] ? show_regs_print_info+0x12/0x12 [ 511.865917][T10450] ? load_image+0x410/0x410 [ 511.870530][T10450] ? __lock_acquire+0x7c40/0x7c40 [ 511.875612][T10450] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 511.881654][T10450] should_fail_ex+0x390/0x4c0 [ 511.886391][T10450] should_failslab+0x5/0x20 [ 511.891033][T10450] slab_pre_alloc_hook+0x59/0x300 [ 511.896194][T10450] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 511.902404][T10450] ? bpf_test_init+0x9f/0x140 [ 511.907216][T10450] __kmem_cache_alloc_node+0x4f/0x270 [ 511.912775][T10450] ? bpf_test_init+0x9f/0x140 [ 511.917513][T10450] __kmalloc+0xa3/0x240 [ 511.921732][T10450] bpf_test_init+0x9f/0x140 [ 511.926300][T10450] bpf_prog_test_run_xdp+0x488/0xf80 [ 511.931652][T10450] ? __lock_acquire+0x7c40/0x7c40 [ 511.936752][T10450] ? dev_put+0x80/0x80 [ 511.940893][T10450] ? dev_put+0x80/0x80 [ 511.945046][T10450] bpf_prog_test_run+0x31c/0x390 [ 511.950044][T10450] __sys_bpf+0x62b/0x780 [ 511.954349][T10450] ? bpf_link_show_fdinfo+0x380/0x380 [ 511.959812][T10450] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 511.966051][T10450] __x64_sys_bpf+0x78/0x90 [ 511.970612][T10450] do_syscall_64+0x4c/0xa0 [ 511.975075][T10450] ? clear_bhb_loop+0x60/0xb0 [ 511.979980][T10450] ? clear_bhb_loop+0x60/0xb0 [ 511.984717][T10450] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 511.990675][T10450] RIP: 0033:0x7fc94479e159 [ 511.995144][T10450] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 512.014984][T10450] RSP: 002b:00007fc945601028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 512.023454][T10450] RAX: ffffffffffffffda RBX: 00007fc944a25fa0 RCX: 00007fc94479e159 [ 512.031503][T10450] RDX: 0000000000000050 RSI: 0000200000000b80 RDI: 000000000000000a [ 512.039614][T10450] RBP: 00007fc945601090 R08: 0000000000000000 R09: 0000000000000000 [ 512.047640][T10450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 512.055749][T10450] R13: 00007fc944a26038 R14: 00007fc944a25fa0 R15: 00007fff7976fae8 [ 512.063892][T10450] [ 513.634276][T10474] FAULT_INJECTION: forcing a failure. [ 513.634276][T10474] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 513.792227][T10474] CPU: 1 PID: 10474 Comm: syz.0.1718 Not tainted syzkaller #0 [ 513.799801][T10474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 513.809919][T10474] Call Trace: [ 513.813253][T10474] [ 513.816500][T10474] dump_stack_lvl+0x188/0x24e [ 513.821273][T10474] ? show_regs_print_info+0x12/0x12 [ 513.826543][T10474] ? load_image+0x410/0x410 [ 513.831132][T10474] ? __lock_acquire+0x7c40/0x7c40 [ 513.836232][T10474] ? unix_ioctl+0x255/0x6a0 [ 513.840889][T10474] should_fail_ex+0x390/0x4c0 [ 513.845757][T10474] _copy_from_user+0x2c/0x170 [ 513.850496][T10474] sock_do_ioctl+0x18c/0x320 [ 513.855227][T10474] ? sock_show_fdinfo+0xb0/0xb0 [ 513.860159][T10474] sock_ioctl+0x48a/0x700 [ 513.864558][T10474] ? sock_poll+0x420/0x420 [ 513.869090][T10474] ? bpf_lsm_file_ioctl+0x5/0x10 [ 513.874265][T10474] ? security_file_ioctl+0x7c/0xa0 [ 513.879448][T10474] ? sock_poll+0x420/0x420 [ 513.883937][T10474] __se_sys_ioctl+0xfa/0x170 [ 513.888606][T10474] do_syscall_64+0x4c/0xa0 [ 513.893094][T10474] ? clear_bhb_loop+0x60/0xb0 [ 513.897827][T10474] ? clear_bhb_loop+0x60/0xb0 [ 513.902585][T10474] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 513.908527][T10474] RIP: 0033:0x7f94d4b9e159 [ 513.912980][T10474] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 513.932713][T10474] RSP: 002b:00007f94d2df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 513.941187][T10474] RAX: ffffffffffffffda RBX: 00007f94d4e25fa0 RCX: 00007f94d4b9e159 [ 513.949284][T10474] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 000000000000003a [ 513.957292][T10474] RBP: 00007f94d2df6090 R08: 0000000000000000 R09: 0000000000000000 [ 513.965389][T10474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 513.973424][T10474] R13: 00007f94d4e26038 R14: 00007f94d4e25fa0 R15: 00007ffdb728e8e8 [ 513.981434][T10474] [ 514.022595][T10477] netlink: 'syz.5.1717': attribute type 21 has an invalid length. [ 514.533590][ T5695] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 516.409940][T10512] FAULT_INJECTION: forcing a failure. [ 516.409940][T10512] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 516.468960][T10512] CPU: 1 PID: 10512 Comm: syz.5.1729 Not tainted syzkaller #0 [ 516.476599][T10512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 516.486793][T10512] Call Trace: [ 516.490138][T10512] [ 516.493107][T10512] dump_stack_lvl+0x188/0x24e [ 516.497882][T10512] ? show_regs_print_info+0x12/0x12 [ 516.503139][T10512] ? load_image+0x410/0x410 [ 516.507712][T10512] ? __lock_acquire+0x7c40/0x7c40 [ 516.512831][T10512] ? perf_trace_lock+0xf8/0x390 [ 516.517740][T10512] should_fail_ex+0x390/0x4c0 [ 516.522509][T10512] _copy_from_user+0x2c/0x170 [ 516.527244][T10512] dev_ethtool+0xc2/0x12f0 [ 516.531713][T10512] ? ethtool_get_module_eeprom_call+0x170/0x170 [ 516.538001][T10512] ? __lock_acquire+0x7c40/0x7c40 [ 516.543072][T10512] ? __kmem_cache_free+0xb6/0x200 [ 516.548133][T10512] ? full_name_hash+0x8e/0xe0 [ 516.552839][T10512] ? dev_load+0x1d/0x1e0 [ 516.557245][T10512] ? dev_load+0x1d/0x1e0 [ 516.561519][T10512] dev_ioctl+0x474/0xe80 [ 516.565888][T10512] sock_do_ioctl+0x245/0x320 [ 516.570509][T10512] ? sock_show_fdinfo+0xb0/0xb0 [ 516.575397][T10512] sock_ioctl+0x48a/0x700 [ 516.579759][T10512] ? sock_poll+0x420/0x420 [ 516.584226][T10512] ? bpf_lsm_file_ioctl+0x5/0x10 [ 516.589195][T10512] ? security_file_ioctl+0x7c/0xa0 [ 516.594379][T10512] ? sock_poll+0x420/0x420 [ 516.598832][T10512] __se_sys_ioctl+0xfa/0x170 [ 516.603464][T10512] do_syscall_64+0x4c/0xa0 [ 516.607912][T10512] ? clear_bhb_loop+0x60/0xb0 [ 516.612643][T10512] ? clear_bhb_loop+0x60/0xb0 [ 516.617360][T10512] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 516.623299][T10512] RIP: 0033:0x7f6060f9e159 [ 516.627740][T10512] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 516.647554][T10512] RSP: 002b:00007f6061dd1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 516.656009][T10512] RAX: ffffffffffffffda RBX: 00007f6061225fa0 RCX: 00007f6060f9e159 [ 516.664024][T10512] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 000000000000003a [ 516.672041][T10512] RBP: 00007f6061dd1090 R08: 0000000000000000 R09: 0000000000000000 [ 516.680044][T10512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 516.688049][T10512] R13: 00007f6061226038 R14: 00007f6061225fa0 R15: 00007fffbd3147e8 [ 516.696090][T10512] [ 516.755499][T10516] @ÿÿÿ: renamed from bond_slave_0 [ 516.984115][T10522] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1731'. [ 517.976497][T10538] syzkaller1: tun_chr_ioctl cmd 2147767521 [ 518.037804][T10538] syzkaller1: tun_chr_ioctl cmd 1074025688 [ 518.168675][T10538] netlink: 'syz.4.1737': attribute type 22 has an invalid length. [ 518.266272][T10538] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1737'. [ 519.100110][T10561] netlink: 122896 bytes leftover after parsing attributes in process `syz.5.1744'. [ 519.152048][T10565] FAULT_INJECTION: forcing a failure. [ 519.152048][T10565] name failslab, interval 1, probability 0, space 0, times 0 [ 519.190823][T10561] sysfs: cannot create duplicate filename '/class/ieee80211/.! 5‚Á7>7H€' [ 519.208332][T10565] CPU: 0 PID: 10565 Comm: syz.0.1745 Not tainted syzkaller #0 [ 519.215876][T10565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 519.226065][T10565] Call Trace: [ 519.229385][T10565] [ 519.232352][T10565] dump_stack_lvl+0x188/0x24e [ 519.237090][T10565] ? show_regs_print_info+0x12/0x12 [ 519.242351][T10565] ? load_image+0x410/0x410 [ 519.247102][T10565] ? __might_sleep+0xd0/0xd0 [ 519.252003][T10565] ? __lock_acquire+0x7c40/0x7c40 [ 519.257093][T10565] should_fail_ex+0x390/0x4c0 [ 519.261831][T10565] should_failslab+0x5/0x20 [ 519.266378][T10565] slab_pre_alloc_hook+0x59/0x300 [ 519.271447][T10565] ? perf_trace_lock+0xf8/0x390 [ 519.276448][T10565] ? dev_ethtool+0x125/0x12f0 [ 519.281211][T10565] __kmem_cache_alloc_node+0x4f/0x270 [ 519.286668][T10565] ? dev_ethtool+0x125/0x12f0 [ 519.291404][T10565] kmalloc_trace+0x26/0xe0 [ 519.295877][T10565] dev_ethtool+0x125/0x12f0 [ 519.300445][T10565] ? ethtool_get_module_eeprom_call+0x170/0x170 [ 519.306762][T10565] ? __lock_acquire+0x7c40/0x7c40 [ 519.311876][T10565] ? __kmem_cache_free+0xb6/0x200 [ 519.316951][T10565] ? full_name_hash+0x8e/0xe0 [ 519.321671][T10565] ? dev_load+0x1d/0x1e0 [ 519.325959][T10565] ? dev_load+0x1d/0x1e0 [ 519.330251][T10565] dev_ioctl+0x474/0xe80 [ 519.334562][T10565] sock_do_ioctl+0x245/0x320 [ 519.339250][T10565] ? sock_show_fdinfo+0xb0/0xb0 [ 519.344204][T10565] sock_ioctl+0x48a/0x700 [ 519.348595][T10565] ? sock_poll+0x420/0x420 [ 519.353595][T10565] ? bpf_lsm_file_ioctl+0x5/0x10 [ 519.358593][T10565] ? security_file_ioctl+0x7c/0xa0 [ 519.363769][T10565] ? sock_poll+0x420/0x420 [ 519.368320][T10565] __se_sys_ioctl+0xfa/0x170 [ 519.372963][T10565] do_syscall_64+0x4c/0xa0 [ 519.377414][T10565] ? clear_bhb_loop+0x60/0xb0 [ 519.382132][T10565] ? clear_bhb_loop+0x60/0xb0 [ 519.386849][T10565] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 519.392891][T10565] RIP: 0033:0x7f94d4b9e159 [ 519.397361][T10565] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 519.417098][T10565] RSP: 002b:00007f94d2df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 519.425574][T10565] RAX: ffffffffffffffda RBX: 00007f94d4e25fa0 RCX: 00007f94d4b9e159 [ 519.433596][T10565] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 000000000000003a [ 519.441709][T10565] RBP: 00007f94d2df6090 R08: 0000000000000000 R09: 0000000000000000 [ 519.449738][T10565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 519.457753][T10565] R13: 00007f94d4e26038 R14: 00007f94d4e25fa0 R15: 00007ffdb728e8e8 [ 519.465789][T10565] [ 519.497371][T10561] CPU: 1 PID: 10561 Comm: syz.5.1744 Not tainted syzkaller #0 [ 519.505191][T10561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 519.515301][T10561] Call Trace: [ 519.518637][T10561] [ 519.521608][T10561] dump_stack_lvl+0x188/0x24e [ 519.526443][T10561] ? show_regs_print_info+0x12/0x12 [ 519.531781][T10561] ? load_image+0x410/0x410 [ 519.536330][T10561] sysfs_warn_dup+0x8a/0xa0 [ 519.540942][T10561] sysfs_do_create_link_sd+0xc0/0x110 [ 519.546369][T10561] device_add+0x83b/0x1050 [ 519.550929][T10561] wiphy_register+0x1d8b/0x2aa0 [ 519.555869][T10561] ? cfg80211_event_work+0x40/0x40 [ 519.561011][T10561] ? minstrel_ht_alloc+0x894/0xa20 [ 519.566213][T10561] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 519.572382][T10561] ieee80211_register_hw+0x2d48/0x39f0 [ 519.577944][T10561] ? ieee80211_register_hw+0xf41/0x39f0 [ 519.583521][T10561] ? ieee80211_register_hw+0xf41/0x39f0 [ 519.589218][T10561] ? ieee80211_tasklet_handler+0x20/0x20 [ 519.594875][T10561] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 519.600895][T10561] ? __debug_object_init+0xed/0x440 [ 519.606185][T10561] ? memset+0x1e/0x40 [ 519.610197][T10561] ? __hrtimer_init+0x189/0x270 [ 519.615144][T10561] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 519.621005][T10561] ? memcpy+0x3c/0x60 [ 519.625038][T10561] hwsim_new_radio_nl+0xab7/0xc90 [ 519.630124][T10561] genl_family_rcv_msg_doit+0x22f/0x350 [ 519.635706][T10561] ? end_current_label_crit_section+0x170/0x170 [ 519.641987][T10561] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 519.647921][T10561] ? bpf_lsm_capable+0x5/0x10 [ 519.652641][T10561] ? security_capable+0x85/0xb0 [ 519.657552][T10561] genl_rcv_msg+0x601/0x790 [ 519.662105][T10561] ? genl_bind+0x360/0x360 [ 519.666548][T10561] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 519.672930][T10561] netlink_rcv_skb+0x1ef/0x440 [ 519.677728][T10561] ? genl_bind+0x360/0x360 [ 519.682185][T10561] ? netlink_ack+0x1160/0x1160 [ 519.686984][T10561] ? down_read+0x1a8/0x2d0 [ 519.691432][T10561] genl_rcv+0x24/0x40 [ 519.695469][T10561] netlink_unicast+0x7ad/0x920 [ 519.700278][T10561] netlink_sendmsg+0x8ad/0xbd0 [ 519.705175][T10561] ? netlink_getsockopt+0x550/0x550 [ 519.710424][T10561] ? apparmor_socket_sendmsg+0x8a/0x330 [ 519.716009][T10561] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 519.721350][T10561] ? security_socket_sendmsg+0x7c/0xa0 [ 519.726840][T10561] ? netlink_getsockopt+0x550/0x550 [ 519.732074][T10561] ____sys_sendmsg+0x5ed/0x9a0 [ 519.736907][T10561] ? __sys_sendmsg_sock+0x30/0x30 [ 519.741977][T10561] ? __import_iovec+0x306/0x510 [ 519.746898][T10561] ? import_iovec+0x6f/0xa0 [ 519.751441][T10561] ___sys_sendmsg+0x2a2/0x360 [ 519.756173][T10561] ? __sys_sendmsg+0x2a0/0x2a0 [ 519.761008][T10561] __se_sys_sendmsg+0x1c3/0x2b0 [ 519.765891][T10561] ? __x64_sys_sendmsg+0x80/0x80 [ 519.770903][T10561] ? lockdep_hardirqs_on+0x94/0x140 [ 519.776144][T10561] do_syscall_64+0x4c/0xa0 [ 519.780599][T10561] ? clear_bhb_loop+0x60/0xb0 [ 519.785303][T10561] ? clear_bhb_loop+0x60/0xb0 [ 519.790018][T10561] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 519.795946][T10561] RIP: 0033:0x7f6060f9e159 [ 519.800391][T10561] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 519.820206][T10561] RSP: 002b:00007f6061dd1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 519.828651][T10561] RAX: ffffffffffffffda RBX: 00007f6061225fa0 RCX: 00007f6060f9e159 [ 519.836648][T10561] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 519.844644][T10561] RBP: 00007f606103506b R08: 0000000000000000 R09: 0000000000000000 [ 519.852644][T10561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 519.860646][T10561] R13: 00007f6061226038 R14: 00007f6061225fa0 R15: 00007fffbd3147e8 [ 519.868662][T10561] [ 519.921141][T10567] netlink: 'syz.1.1748': attribute type 21 has an invalid length. [ 519.940179][T10566] delete_channel: no stack [ 522.086052][T10612] netlink: 'syz.5.1759': attribute type 21 has an invalid length. [ 522.095990][T10612] netlink: 'syz.5.1759': attribute type 1 has an invalid length. [ 522.109515][T10612] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1759'. [ 522.394413][T10620] netlink: 126612 bytes leftover after parsing attributes in process `syz.0.1761'. [ 522.407909][T10620] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1761'. [ 522.449169][T10622] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1762'. [ 522.895827][T10631] FAULT_INJECTION: forcing a failure. [ 522.895827][T10631] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 522.921487][T10631] CPU: 1 PID: 10631 Comm: syz.4.1765 Not tainted syzkaller #0 [ 522.929035][T10631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 522.939147][T10631] Call Trace: [ 522.942458][T10631] [ 522.945434][T10631] dump_stack_lvl+0x188/0x24e [ 522.950169][T10631] ? show_regs_print_info+0x12/0x12 [ 522.955413][T10631] ? load_image+0x410/0x410 [ 522.960002][T10631] ? __lock_acquire+0x7c40/0x7c40 [ 522.965092][T10631] ? mutex_lock_nested+0x10/0x10 [ 522.970089][T10631] should_fail_ex+0x390/0x4c0 [ 522.974827][T10631] _copy_from_user+0x2c/0x170 [ 522.979560][T10631] dev_ethtool+0x246/0x12f0 [ 522.984139][T10631] ? ethtool_get_module_eeprom_call+0x170/0x170 [ 522.990447][T10631] ? __lock_acquire+0x7c40/0x7c40 [ 522.995523][T10631] ? __kmem_cache_free+0xb6/0x200 [ 523.000681][T10631] ? full_name_hash+0x8e/0xe0 [ 523.005417][T10631] ? dev_load+0x1d/0x1e0 [ 523.009710][T10631] ? dev_load+0x1d/0x1e0 [ 523.014010][T10631] dev_ioctl+0x474/0xe80 [ 523.018319][T10631] sock_do_ioctl+0x245/0x320 [ 523.022963][T10631] ? sock_show_fdinfo+0xb0/0xb0 [ 523.027909][T10631] sock_ioctl+0x48a/0x700 [ 523.032291][T10631] ? sock_poll+0x420/0x420 [ 523.036769][T10631] ? bpf_lsm_file_ioctl+0x5/0x10 [ 523.041764][T10631] ? security_file_ioctl+0x7c/0xa0 [ 523.046934][T10631] ? sock_poll+0x420/0x420 [ 523.051400][T10631] __se_sys_ioctl+0xfa/0x170 [ 523.056136][T10631] do_syscall_64+0x4c/0xa0 [ 523.060600][T10631] ? clear_bhb_loop+0x60/0xb0 [ 523.065324][T10631] ? clear_bhb_loop+0x60/0xb0 [ 523.070442][T10631] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 523.076396][T10631] RIP: 0033:0x7fad5c99e159 [ 523.080859][T10631] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 523.100519][T10631] RSP: 002b:00007fad5abf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 523.108993][T10631] RAX: ffffffffffffffda RBX: 00007fad5cc25fa0 RCX: 00007fad5c99e159 [ 523.117099][T10631] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 000000000000003a [ 523.125119][T10631] RBP: 00007fad5abf6090 R08: 0000000000000000 R09: 0000000000000000 [ 523.133224][T10631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 523.141237][T10631] R13: 00007fad5cc26038 R14: 00007fad5cc25fa0 R15: 00007fff09046688 [ 523.149284][T10631] [ 526.124170][T10688] FAULT_INJECTION: forcing a failure. [ 526.124170][T10688] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 526.157839][T10688] CPU: 0 PID: 10688 Comm: syz.1.1784 Not tainted syzkaller #0 [ 526.165386][T10688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 526.175501][T10688] Call Trace: [ 526.178831][T10688] [ 526.181826][T10688] dump_stack_lvl+0x188/0x24e [ 526.186581][T10688] ? show_regs_print_info+0x12/0x12 [ 526.191839][T10688] ? load_image+0x410/0x410 [ 526.196408][T10688] ? __lock_acquire+0x7c40/0x7c40 [ 526.201534][T10688] ? __lock_acquire+0x1465/0x7c40 [ 526.206631][T10688] should_fail_ex+0x390/0x4c0 [ 526.211387][T10688] _copy_from_user+0x2c/0x170 [ 526.216137][T10688] ethtool_set_per_queue+0xec/0x1e0 [ 526.221472][T10688] ? ethtool_get_phy_stats+0x650/0x650 [ 526.227073][T10688] ? __lock_acquire+0x7c40/0x7c40 [ 526.232168][T10688] ? mutex_lock_nested+0x10/0x10 [ 526.237180][T10688] ? __might_fault+0xa6/0x120 [ 526.241990][T10688] ? __might_fault+0xc2/0x120 [ 526.246726][T10688] ? __might_fault+0xa6/0x120 [ 526.251477][T10688] dev_ethtool+0x967/0x12f0 [ 526.256060][T10688] ? ethtool_get_module_eeprom_call+0x170/0x170 [ 526.262369][T10688] ? __lock_acquire+0x7c40/0x7c40 [ 526.267454][T10688] ? __kmem_cache_free+0xb6/0x200 [ 526.272523][T10688] ? full_name_hash+0x8e/0xe0 [ 526.277256][T10688] ? dev_load+0x1d/0x1e0 [ 526.281557][T10688] ? dev_load+0x1d/0x1e0 [ 526.285863][T10688] dev_ioctl+0x474/0xe80 [ 526.290167][T10688] sock_do_ioctl+0x245/0x320 [ 526.294855][T10688] ? sock_show_fdinfo+0xb0/0xb0 [ 526.299763][T10688] sock_ioctl+0x48a/0x700 [ 526.304143][T10688] ? sock_poll+0x420/0x420 [ 526.308612][T10688] ? bpf_lsm_file_ioctl+0x5/0x10 [ 526.313593][T10688] ? security_file_ioctl+0x7c/0xa0 [ 526.318755][T10688] ? sock_poll+0x420/0x420 [ 526.323212][T10688] __se_sys_ioctl+0xfa/0x170 [ 526.327845][T10688] do_syscall_64+0x4c/0xa0 [ 526.332410][T10688] ? clear_bhb_loop+0x60/0xb0 [ 526.337123][T10688] ? clear_bhb_loop+0x60/0xb0 [ 526.341838][T10688] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 526.347812][T10688] RIP: 0033:0x7f1c8db9e159 [ 526.352281][T10688] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 526.372010][T10688] RSP: 002b:00007f1c8ea44028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 526.380457][T10688] RAX: ffffffffffffffda RBX: 00007f1c8de25fa0 RCX: 00007f1c8db9e159 [ 526.388545][T10688] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 000000000000003a [ 526.396546][T10688] RBP: 00007f1c8ea44090 R08: 0000000000000000 R09: 0000000000000000 [ 526.404551][T10688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 526.412606][T10688] R13: 00007f1c8de26038 R14: 00007f1c8de25fa0 R15: 00007fffb95ef238 [ 526.420662][T10688] [ 527.172648][T10718] netlink: 'syz.5.1794': attribute type 21 has an invalid length. [ 527.249110][T10718] netlink: 'syz.5.1794': attribute type 1 has an invalid length. [ 527.433078][T10725] netlink: 124861 bytes leftover after parsing attributes in process `syz.1.1796'. [ 527.448889][T10725] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 527.458241][T10725] CPU: 1 PID: 10725 Comm: syz.1.1796 Not tainted syzkaller #0 [ 527.465779][T10725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 527.475896][T10725] Call Trace: [ 527.479221][T10725] [ 527.482196][T10725] dump_stack_lvl+0x188/0x24e [ 527.486942][T10725] ? show_regs_print_info+0x12/0x12 [ 527.492205][T10725] ? load_image+0x410/0x410 [ 527.496951][T10725] sysfs_warn_dup+0x8a/0xa0 [ 527.501516][T10725] sysfs_do_create_link_sd+0xc0/0x110 [ 527.506957][T10725] device_add+0x83b/0x1050 [ 527.511439][T10725] wiphy_register+0x1d8b/0x2aa0 [ 527.516535][T10725] ? cfg80211_event_work+0x40/0x40 [ 527.521700][T10725] ? minstrel_ht_alloc+0x894/0xa20 [ 527.526876][T10725] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 527.533114][T10725] ieee80211_register_hw+0x2d48/0x39f0 [ 527.538630][T10725] ? ieee80211_register_hw+0xf41/0x39f0 [ 527.544206][T10725] ? ieee80211_register_hw+0xf41/0x39f0 [ 527.549788][T10725] ? ieee80211_tasklet_handler+0x20/0x20 [ 527.555469][T10725] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 527.561408][T10725] ? __debug_object_init+0xed/0x440 [ 527.566678][T10725] ? memset+0x1e/0x40 [ 527.570696][T10725] ? __hrtimer_init+0x189/0x270 [ 527.575671][T10725] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 527.581533][T10725] ? memcpy+0x3c/0x60 [ 527.585551][T10725] hwsim_new_radio_nl+0xab7/0xc90 [ 527.590626][T10725] genl_family_rcv_msg_doit+0x22f/0x350 [ 527.596209][T10725] ? end_current_label_crit_section+0x170/0x170 [ 527.602488][T10725] ? lockdep_hardirqs_on+0x94/0x140 [ 527.607716][T10725] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 527.613655][T10725] ? bpf_lsm_capable+0x5/0x10 [ 527.618366][T10725] ? security_capable+0x85/0xb0 [ 527.623253][T10725] genl_rcv_msg+0x601/0x790 [ 527.627800][T10725] ? genl_bind+0x360/0x360 [ 527.632242][T10725] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 527.638622][T10725] netlink_rcv_skb+0x1ef/0x440 [ 527.643422][T10725] ? genl_bind+0x360/0x360 [ 527.647894][T10725] ? netlink_ack+0x1160/0x1160 [ 527.652693][T10725] ? down_read+0x1a8/0x2d0 [ 527.657149][T10725] genl_rcv+0x24/0x40 [ 527.661169][T10725] netlink_unicast+0x7ad/0x920 [ 527.665981][T10725] netlink_sendmsg+0x8ad/0xbd0 [ 527.670781][T10725] ? netlink_getsockopt+0x550/0x550 [ 527.676016][T10725] ? apparmor_socket_sendmsg+0x8a/0x330 [ 527.681601][T10725] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 527.687002][T10725] ? security_socket_sendmsg+0x7c/0xa0 [ 527.692497][T10725] ? netlink_getsockopt+0x550/0x550 [ 527.697742][T10725] ____sys_sendmsg+0x5ed/0x9a0 [ 527.702548][T10725] ? __sys_sendmsg_sock+0x30/0x30 [ 527.707609][T10725] ? __import_iovec+0x306/0x510 [ 527.712512][T10725] ? import_iovec+0x6f/0xa0 [ 527.717155][T10725] ___sys_sendmsg+0x2a2/0x360 [ 527.721867][T10725] ? __sys_sendmsg+0x2a0/0x2a0 [ 527.726902][T10725] __se_sys_sendmsg+0x1c3/0x2b0 [ 527.731809][T10725] ? __x64_sys_sendmsg+0x80/0x80 [ 527.736812][T10725] ? lockdep_hardirqs_on+0x94/0x140 [ 527.742047][T10725] do_syscall_64+0x4c/0xa0 [ 527.746494][T10725] ? clear_bhb_loop+0x60/0xb0 [ 527.751197][T10725] ? clear_bhb_loop+0x60/0xb0 [ 527.756013][T10725] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 527.761951][T10725] RIP: 0033:0x7f1c8db9e159 [ 527.766394][T10725] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 527.786034][T10725] RSP: 002b:00007f1c8ea23028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 527.794479][T10725] RAX: ffffffffffffffda RBX: 00007f1c8de26090 RCX: 00007f1c8db9e159 [ 527.802481][T10725] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 527.810477][T10725] RBP: 00007f1c8dc3506b R08: 0000000000000000 R09: 0000000000000000 [ 527.818477][T10725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 527.826576][T10725] R13: 00007f1c8de26128 R14: 00007f1c8de26090 R15: 00007fffb95ef238 [ 527.834592][T10725] [ 527.971537][T10724] ¥: port 1(bond0) entered blocking state [ 527.986083][T10724] ¥: port 1(bond0) entered disabled state [ 528.007618][T10724] device bond0 entered promiscuous mode [ 528.013592][T10724] device bond_slave_1 entered promiscuous mode [ 528.035710][T10724] device bridge0 entered promiscuous mode [ 528.066959][T10722] netlink: 'syz.1.1796': attribute type 21 has an invalid length. [ 528.091421][T10722] netlink: 'syz.1.1796': attribute type 1 has an invalid length. [ 528.122854][T10722] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.1796'. [ 528.408045][T10733] FAULT_INJECTION: forcing a failure. [ 528.408045][T10733] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 528.500193][T10733] CPU: 0 PID: 10733 Comm: syz.4.1800 Not tainted syzkaller #0 [ 528.507754][T10733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 528.517860][T10733] Call Trace: [ 528.521188][T10733] [ 528.524166][T10733] dump_stack_lvl+0x188/0x24e [ 528.528892][T10733] ? show_regs_print_info+0x12/0x12 [ 528.534236][T10733] ? load_image+0x410/0x410 [ 528.538813][T10733] ? __lock_acquire+0x7c40/0x7c40 [ 528.543895][T10733] ? snprintf+0xe5/0x140 [ 528.548221][T10733] should_fail_ex+0x390/0x4c0 [ 528.552966][T10733] _copy_to_user+0x2c/0x130 [ 528.557521][T10733] simple_read_from_buffer+0xe3/0x150 [ 528.563001][T10733] proc_fail_nth_read+0x1a6/0x220 [ 528.568090][T10733] ? proc_fault_inject_write+0x310/0x310 [ 528.573754][T10733] ? fsnotify_perm+0x248/0x550 [ 528.578550][T10733] ? proc_fault_inject_write+0x310/0x310 [ 528.584210][T10733] vfs_read+0x2db/0x960 [ 528.588409][T10733] ? kernel_read+0x1e0/0x1e0 [ 528.593030][T10733] ? __fget_files+0x28/0x460 [ 528.597654][T10733] ? __fget_files+0x3fc/0x460 [ 528.602368][T10733] ? __fdget_pos+0x2ae/0x360 [ 528.606989][T10733] ? ksys_read+0x70/0x260 [ 528.611351][T10733] ksys_read+0x14d/0x260 [ 528.615631][T10733] ? vfs_write+0x9a0/0x9a0 [ 528.620092][T10733] ? lockdep_hardirqs_on+0x94/0x140 [ 528.625412][T10733] do_syscall_64+0x4c/0xa0 [ 528.629858][T10733] ? clear_bhb_loop+0x60/0xb0 [ 528.634556][T10733] ? clear_bhb_loop+0x60/0xb0 [ 528.639264][T10733] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 528.645194][T10733] RIP: 0033:0x7fad5c95e98e [ 528.649672][T10733] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 528.669322][T10733] RSP: 002b:00007fad5abf5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 528.677783][T10733] RAX: ffffffffffffffda RBX: 00007fad5abf66c0 RCX: 00007fad5c95e98e [ 528.685825][T10733] RDX: 000000000000000f RSI: 00007fad5abf60a0 RDI: 000000000000003b [ 528.693826][T10733] RBP: 00007fad5abf6090 R08: 0000000000000000 R09: 0000000000000000 [ 528.701824][T10733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 528.709826][T10733] R13: 00007fad5cc26038 R14: 00007fad5cc25fa0 R15: 00007fff09046688 [ 528.717875][T10733] [ 533.104104][T10786] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.1815'. [ 534.120329][ T4280] Bluetooth: hci0: ISO packet for unknown connection handle 2366 [ 534.469809][T10815] netlink: 'syz.4.1827': attribute type 10 has an invalid length. [ 535.523152][T10825] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 535.534182][T10825] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 535.544531][T10825] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 535.893536][T10834] delete_channel: no stack [ 536.449273][T10854] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1838'. [ 541.251102][T10942] syz.5.1866 (10942) used obsolete PPPIOCDETACH ioctl [ 542.139165][T10953] delete_channel: no stack [ 543.185309][T10985] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1879'. [ 544.096187][T11002] netlink: 'syz.0.1883': attribute type 10 has an invalid length. [ 544.132062][T11002] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1883'. [ 544.244838][T11000] netlink: 'syz.0.1883': attribute type 10 has an invalid length. [ 544.278263][T11000] device wlan1 left promiscuous mode [ 545.054951][T11032] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1892'. [ 546.473406][T11061] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.1900'. [ 547.366034][T11075] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1903'. [ 547.523123][T11075] team0: Port device team_slave_0 removed [ 547.534673][T11075] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 549.824213][T11111] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 551.256177][T11141] cgroup: fork rejected by pids controller in /syz5 [ 551.756772][T11250] netlink: 'syz.1.1932': attribute type 10 has an invalid length. [ 551.825873][T11259] netlink: 126612 bytes leftover after parsing attributes in process `syz.1.1932'. [ 551.842655][T11258] netlink: 'syz.3.1935': attribute type 10 has an invalid length. [ 551.856736][T11259] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1932'. [ 551.867598][T11258] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1935'. [ 551.891885][T11258] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 551.900642][T11258] syzkaller1: linktype set to 786 [ 551.923984][T11260] FAULT_INJECTION: forcing a failure. [ 551.923984][T11260] name failslab, interval 1, probability 0, space 0, times 0 [ 551.963355][T11260] CPU: 1 PID: 11260 Comm: syz.4.1934 Not tainted syzkaller #0 [ 551.970907][T11260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 551.981016][T11260] Call Trace: [ 551.984337][T11260] [ 551.987315][T11260] dump_stack_lvl+0x188/0x24e [ 551.992074][T11260] ? show_regs_print_info+0x12/0x12 [ 551.997334][T11260] ? load_image+0x410/0x410 [ 552.001911][T11260] ? __might_sleep+0xd0/0xd0 [ 552.006559][T11260] ? __lock_acquire+0x7c40/0x7c40 [ 552.011683][T11260] should_fail_ex+0x390/0x4c0 [ 552.016442][T11260] should_failslab+0x5/0x20 [ 552.021006][T11260] slab_pre_alloc_hook+0x59/0x300 [ 552.026102][T11260] ? __lock_acquire+0x138a/0x7c40 [ 552.031227][T11260] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 552.037028][T11260] __kmem_cache_alloc_node+0x4f/0x270 [ 552.042475][T11260] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 552.048269][T11260] __kmalloc+0xa3/0x240 [ 552.052502][T11260] tomoyo_realpath_from_path+0xe2/0x5c0 [ 552.058129][T11260] ? tomoyo_domain+0xd2/0x120 [ 552.062883][T11260] ? tomoyo_path_number_perm+0x205/0x650 [ 552.068586][T11260] tomoyo_path_number_perm+0x22f/0x650 [ 552.074142][T11260] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 552.079663][T11260] ? ksys_write+0x1ce/0x260 [ 552.084241][T11260] ? common_file_perm+0x171/0x1c0 [ 552.089402][T11260] ? __fget_files+0x28/0x460 [ 552.094102][T11260] security_file_ioctl+0x6c/0xa0 [ 552.099107][T11260] __se_sys_ioctl+0x48/0x170 [ 552.103773][T11260] do_syscall_64+0x4c/0xa0 [ 552.108240][T11260] ? clear_bhb_loop+0x60/0xb0 [ 552.112968][T11260] ? clear_bhb_loop+0x60/0xb0 [ 552.117711][T11260] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 552.123670][T11260] RIP: 0033:0x7fad5c99e159 [ 552.128158][T11260] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 552.147861][T11260] RSP: 002b:00007fad5abf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 552.156360][T11260] RAX: ffffffffffffffda RBX: 00007fad5cc25fa0 RCX: 00007fad5c99e159 [ 552.164402][T11260] RDX: 0000200000000180 RSI: 000000004010744d RDI: 0000000000000004 [ 552.172441][T11260] RBP: 00007fad5abf6090 R08: 0000000000000000 R09: 0000000000000000 [ 552.180496][T11260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 552.188655][T11260] R13: 00007fad5cc26038 R14: 00007fad5cc25fa0 R15: 00007fff09046688 [ 552.196728][T11260] [ 552.396941][T11260] ERROR: Out of memory at tomoyo_realpath_from_path. [ 552.792229][ T5695] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.146480][ T5695] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.270640][ T5695] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.312356][ T5695] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.851587][T11327] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 554.863530][T11327] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 554.873921][T11327] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 554.885624][T11327] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 554.893693][T11327] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 554.902621][T11327] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 555.086100][ T5695] device ip6gretap0 left promiscuous mode [ 555.123250][ T5695] Ÿë: port 1(ip6gretap0) entered disabled state [ 555.337431][T11338] netlink: 'syz.4.1951': attribute type 1 has an invalid length. [ 556.348887][T11326] chnl_net:caif_netlink_parms(): no params data found [ 557.017891][T11327] Bluetooth: hci5: command 0x0409 tx timeout [ 557.783347][T11326] bridge0: port 1(bridge_slave_0) entered blocking state [ 557.791385][T11326] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.800339][T11326] device bridge_slave_0 entered promiscuous mode [ 557.905802][T11326] bridge0: port 2(bridge_slave_1) entered blocking state [ 557.937229][T11326] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.945696][T11326] device bridge_slave_1 entered promiscuous mode [ 558.048927][T11326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 558.075512][T11326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 558.263459][T11326] team0: Port device team_slave_0 added [ 558.304812][T11326] team0: Port device team_slave_1 added [ 558.346210][T11405] FAULT_INJECTION: forcing a failure. [ 558.346210][T11405] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 558.378221][T11405] CPU: 1 PID: 11405 Comm: syz.0.1966 Not tainted syzkaller #0 [ 558.385779][T11405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 558.395889][T11405] Call Trace: [ 558.399232][T11405] [ 558.402213][T11405] dump_stack_lvl+0x188/0x24e [ 558.406994][T11405] ? show_regs_print_info+0x12/0x12 [ 558.412266][T11405] ? load_image+0x410/0x410 [ 558.416850][T11405] ? __lock_acquire+0x7c40/0x7c40 [ 558.421962][T11405] ? mutex_lock_nested+0x10/0x10 [ 558.426997][T11405] should_fail_ex+0x390/0x4c0 [ 558.431753][T11405] _copy_from_user+0x2c/0x170 [ 558.436502][T11405] ppp_ioctl+0x76d/0x1b20 [ 558.440982][T11405] ? ppp_poll+0x250/0x250 [ 558.445428][T11405] ? __fget_files+0x28/0x460 [ 558.450142][T11405] ? bpf_lsm_file_ioctl+0x5/0x10 [ 558.455176][T11405] ? security_file_ioctl+0x7c/0xa0 [ 558.460375][T11405] ? ppp_poll+0x250/0x250 [ 558.464795][T11405] __se_sys_ioctl+0xfa/0x170 [ 558.469470][T11405] do_syscall_64+0x4c/0xa0 [ 558.473980][T11405] ? clear_bhb_loop+0x60/0xb0 [ 558.478708][T11405] ? clear_bhb_loop+0x60/0xb0 [ 558.483451][T11405] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 558.489422][T11405] RIP: 0033:0x7f94d4b9e159 [ 558.493893][T11405] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 558.513557][T11405] RSP: 002b:00007f94d2df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 558.522046][T11405] RAX: ffffffffffffffda RBX: 00007f94d4e25fa0 RCX: 00007f94d4b9e159 [ 558.530060][T11405] RDX: 0000200000000180 RSI: 000000004010744d RDI: 0000000000000004 [ 558.538073][T11405] RBP: 00007f94d2df6090 R08: 0000000000000000 R09: 0000000000000000 [ 558.546081][T11405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 558.554088][T11405] R13: 00007f94d4e26038 R14: 00007f94d4e25fa0 R15: 00007ffdb728e8e8 [ 558.562307][T11405] [ 558.629700][T11326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 558.668951][T11326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 558.710504][T11326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 558.767796][T11326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 558.774835][T11326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 558.820525][T11326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 559.087897][T11327] Bluetooth: hci5: command 0x041b tx timeout [ 559.302215][T11428] netlink: 'syz.4.1971': attribute type 1 has an invalid length. [ 559.310198][T11428] netlink: 'syz.4.1971': attribute type 1 has an invalid length. [ 559.318533][T11428] netlink: 116376 bytes leftover after parsing attributes in process `syz.4.1971'. [ 559.967754][T11423] ¥: port 1(team0) entered blocking state [ 559.973652][T11423] ¥: port 1(team0) entered disabled state [ 559.993884][T11423] device team0 entered promiscuous mode [ 560.002107][T11423] device team_slave_0 entered promiscuous mode [ 560.011287][T11423] device team_slave_1 entered promiscuous mode [ 560.019793][T11423] device bridge0 entered promiscuous mode [ 560.025698][T11423] device macvlan0 entered promiscuous mode [ 560.055390][T11428] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1971'. [ 560.116100][T11326] device hsr_slave_0 entered promiscuous mode [ 560.125074][T11326] device hsr_slave_1 entered promiscuous mode [ 560.138962][T11326] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 560.146847][T11326] Cannot create hsr debugfs directory [ 560.157869][T11432] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1971'. [ 560.433379][ T5695] device hsr_slave_0 left promiscuous mode [ 560.533432][ T5695] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 560.541481][ T5695] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 560.580051][ T5695] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 560.599135][ T5695] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 560.658325][ T5695] device veth1_vlan left promiscuous mode [ 560.664834][ T5695] device veth0_vlan left promiscuous mode [ 561.175712][T11327] Bluetooth: hci5: command 0x040f tx timeout [ 561.941998][T11467] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 561.976701][T11467] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 562.013173][T11467] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 562.291394][T11481] netlink: 'syz.0.1977': attribute type 1 has an invalid length. [ 562.366207][T11484] netlink: 'syz.3.1979': attribute type 21 has an invalid length. [ 562.435438][T11484] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1979'. [ 562.452061][T11484] netlink: 'syz.3.1979': attribute type 5 has an invalid length. [ 562.460738][T11484] netlink: 'syz.3.1979': attribute type 6 has an invalid length. [ 562.513834][T11484] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1979'. [ 562.553882][T11481] netlink: 'syz.0.1977': attribute type 28 has an invalid length. [ 562.678899][T11497] FAULT_INJECTION: forcing a failure. [ 562.678899][T11497] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 562.712322][T11497] CPU: 0 PID: 11497 Comm: syz.4.1981 Not tainted syzkaller #0 [ 562.719869][T11497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 562.729970][T11497] Call Trace: [ 562.733293][T11497] [ 562.736264][T11497] dump_stack_lvl+0x188/0x24e [ 562.740996][T11497] ? show_regs_print_info+0x12/0x12 [ 562.746413][T11497] ? load_image+0x410/0x410 [ 562.750980][T11497] ? __lock_acquire+0x7c40/0x7c40 [ 562.756076][T11497] should_fail_ex+0x390/0x4c0 [ 562.760821][T11497] _copy_from_user+0x2c/0x170 [ 562.765562][T11497] ppp_set_compress+0x114/0x720 [ 562.770474][T11497] ? ppp_bridge_channels+0x4d0/0x4d0 [ 562.775818][T11497] ? __might_fault+0xc2/0x120 [ 562.780525][T11497] ? __might_fault+0xa6/0x120 [ 562.785243][T11497] ppp_ioctl+0x164b/0x1b20 [ 562.789698][T11497] ? ppp_poll+0x250/0x250 [ 562.794059][T11497] ? __fget_files+0x28/0x460 [ 562.798720][T11497] ? bpf_lsm_file_ioctl+0x5/0x10 [ 562.803698][T11497] ? security_file_ioctl+0x7c/0xa0 [ 562.808842][T11497] ? ppp_poll+0x250/0x250 [ 562.813218][T11497] __se_sys_ioctl+0xfa/0x170 [ 562.817846][T11497] do_syscall_64+0x4c/0xa0 [ 562.822289][T11497] ? clear_bhb_loop+0x60/0xb0 [ 562.826997][T11497] ? clear_bhb_loop+0x60/0xb0 [ 562.831701][T11497] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 562.837631][T11497] RIP: 0033:0x7fad5c99e159 [ 562.842075][T11497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 562.861729][T11497] RSP: 002b:00007fad5abd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 562.870180][T11497] RAX: ffffffffffffffda RBX: 00007fad5cc26090 RCX: 00007fad5c99e159 [ 562.878193][T11497] RDX: 0000200000000180 RSI: 000000004010744d RDI: 0000000000000004 [ 562.886207][T11497] RBP: 00007fad5abd5090 R08: 0000000000000000 R09: 0000000000000000 [ 562.894221][T11497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 562.902218][T11497] R13: 00007fad5cc26128 R14: 00007fad5cc26090 R15: 00007fff09046688 [ 562.910235][T11497] [ 562.916919][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.923326][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.247340][T11327] Bluetooth: hci5: command 0x0419 tx timeout [ 563.531599][T11513] netlink: 'syz.1.1983': attribute type 17 has an invalid length. [ 563.602197][T11517] netlink: 16222 bytes leftover after parsing attributes in process `syz.1.1983'. [ 563.628715][T11513] netlink: 'syz.1.1983': attribute type 16 has an invalid length. [ 563.698289][T11513] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1983'. [ 563.999251][T11521] delete_channel: no stack [ 564.655416][T11530] netlink: 'syz.0.1987': attribute type 27 has an invalid length. [ 564.674063][T11530] netlink: 'syz.0.1987': attribute type 4 has an invalid length. [ 564.694956][T11530] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1987'. [ 564.723939][T11530] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 564.979530][T11535] netlink: 'syz.3.1988': attribute type 10 has an invalid length. [ 565.549659][T11326] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 565.608121][T11559] netlink: 'syz.0.1994': attribute type 11 has an invalid length. [ 565.631596][T11559] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1994'. [ 565.663177][T11326] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 565.680517][T11558] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1992'. [ 565.699157][T11326] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 565.724503][T11326] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 565.863111][T11570] FAULT_INJECTION: forcing a failure. [ 565.863111][T11570] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 565.940996][T11570] CPU: 1 PID: 11570 Comm: syz.4.1997 Not tainted syzkaller #0 [ 565.948563][T11570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 565.958678][T11570] Call Trace: [ 565.962004][T11570] [ 565.964979][T11570] dump_stack_lvl+0x188/0x24e [ 565.969730][T11570] ? show_regs_print_info+0x12/0x12 [ 565.974997][T11570] ? load_image+0x410/0x410 [ 565.979576][T11570] ? __lock_acquire+0x7c40/0x7c40 [ 565.984676][T11570] ? snprintf+0xe5/0x140 [ 565.989003][T11570] should_fail_ex+0x390/0x4c0 [ 565.993843][T11570] _copy_to_user+0x2c/0x130 [ 565.998419][T11570] simple_read_from_buffer+0xe3/0x150 [ 566.003860][T11570] proc_fail_nth_read+0x1a6/0x220 [ 566.008940][T11570] ? proc_fault_inject_write+0x310/0x310 [ 566.014624][T11570] ? fsnotify_perm+0x248/0x550 [ 566.019432][T11570] ? proc_fault_inject_write+0x310/0x310 [ 566.025188][T11570] vfs_read+0x2db/0x960 [ 566.029414][T11570] ? kernel_read+0x1e0/0x1e0 [ 566.034046][T11570] ? __fget_files+0x28/0x460 [ 566.038782][T11570] ? __fget_files+0x3fc/0x460 [ 566.043523][T11570] ? __fdget_pos+0x2ae/0x360 [ 566.048176][T11570] ? ksys_read+0x70/0x260 [ 566.052552][T11570] ksys_read+0x14d/0x260 [ 566.056841][T11570] ? vfs_write+0x9a0/0x9a0 [ 566.061305][T11570] ? lockdep_hardirqs_on+0x94/0x140 [ 566.066547][T11570] do_syscall_64+0x4c/0xa0 [ 566.070994][T11570] ? clear_bhb_loop+0x60/0xb0 [ 566.075708][T11570] ? clear_bhb_loop+0x60/0xb0 [ 566.080422][T11570] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 566.086469][T11570] RIP: 0033:0x7fad5c95e98e [ 566.090920][T11570] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 566.110559][T11570] RSP: 002b:00007fad5abf5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 566.119010][T11570] RAX: ffffffffffffffda RBX: 00007fad5abf66c0 RCX: 00007fad5c95e98e [ 566.127117][T11570] RDX: 000000000000000f RSI: 00007fad5abf60a0 RDI: 0000000000000005 [ 566.135123][T11570] RBP: 00007fad5abf6090 R08: 0000000000000000 R09: 0000000000000000 [ 566.143124][T11570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 566.151130][T11570] R13: 00007fad5cc26038 R14: 00007fad5cc25fa0 R15: 00007fff09046688 [ 566.159158][T11570] [ 566.214542][T11326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 566.254098][ T5695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 566.272204][ T5695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 566.309453][T11326] 8021q: adding VLAN 0 to HW filter on device team0 [ 566.360167][ T5695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 566.383241][T11327] Bluetooth: hci3: unexpected subevent 0x0c length: 150 > 5 [ 566.394405][ T5695] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 566.426514][ T5695] bridge0: port 1(bridge_slave_0) entered blocking state [ 566.433844][ T5695] bridge0: port 1(bridge_slave_0) entered forwarding state [ 566.442722][ T5695] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 566.476912][ T5695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 566.486799][ T5695] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 566.496848][ T5695] bridge0: port 2(bridge_slave_1) entered blocking state [ 566.504072][ T5695] bridge0: port 2(bridge_slave_1) entered forwarding state [ 566.514994][ T5695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 566.580502][ T5695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 566.603691][ T5695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 566.643824][ T5695] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 566.693468][ T5695] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 566.732459][ T5695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 566.767794][ T5695] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 566.817360][ T5695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 566.837871][ T5695] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 566.901275][T11326] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 566.977745][T11326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 567.026804][ T5695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 567.048572][ T5695] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 567.653474][T11327] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 568.326647][T11292] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 568.345037][T11292] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 568.405410][T11623] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.2010'. [ 568.495922][T11326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 569.277886][T11648] bridge0: port 3(batadv0) entered blocking state [ 569.367350][T11648] bridge0: port 3(batadv0) entered disabled state [ 569.440641][T11648] device batadv0 entered promiscuous mode [ 569.520548][T11648] bridge0: port 3(batadv0) entered blocking state [ 569.528430][T11648] bridge0: port 3(batadv0) entered forwarding state [ 569.772209][ T8117] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 569.782053][ T8117] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 570.602316][T11292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 570.622608][T11292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 570.765261][T11292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 570.788357][T11292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 570.817994][T11292] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 570.826219][T11292] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 570.900017][T11326] device veth0_vlan entered promiscuous mode [ 570.976575][T11326] device veth1_vlan entered promiscuous mode [ 571.075581][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 571.104445][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 571.129309][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 571.158234][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 571.190432][T11326] device veth0_macvtap entered promiscuous mode [ 571.228065][T11326] device veth1_macvtap entered promiscuous mode [ 571.288465][T11326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 571.327323][T11326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.347113][T11326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 571.367075][T11326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.428418][T11326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 571.682888][ T5695] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 571.709176][ T5695] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 571.744356][ T5695] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 571.795467][ T5695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 571.880742][T11326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 571.906033][T11326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.938716][T11326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 571.972316][T11326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.992183][T11326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 572.058657][T11292] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 572.077210][T11292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 572.119819][T11326] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.154479][T11326] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.198514][T11326] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.237140][T11326] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.861492][ T8117] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 574.920885][ T8117] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 576.891548][T11700] netlink: 'syz.1.2022': attribute type 16 has an invalid length. [ 576.904077][T11700] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2022'. [ 576.926273][T11700] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 577.279665][T11737] netlink: 'syz.0.2025': attribute type 27 has an invalid length. [ 577.289028][T11290] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 577.297983][T11737] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2025'. [ 577.362600][ T5695] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 577.373640][ T5695] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 577.422544][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 578.609937][T11762] netlink: 'syz.3.2029': attribute type 10 has an invalid length. [ 579.008240][T11774] delete_channel: no stack [ 579.092529][T11774] delete_channel: no stack [ 579.697295][T11784] netlink: 'syz.0.2035': attribute type 11 has an invalid length. [ 579.736328][T11784] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2035'. [ 580.180507][T11792] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2034'. [ 582.867999][T11798] delete_channel: no stack [ 583.385970][T11835] netlink: 'syz.1.2044': attribute type 10 has an invalid length. [ 583.669576][T11835] device hsr_slave_0 entered promiscuous mode [ 583.678366][T11835] team0: Port device hsr_slave_0 added [ 586.060977][T11885] ¥: port 1(team0) entered blocking state [ 586.077775][T11885] ¥: port 1(team0) entered disabled state [ 586.091871][T11885] device team0 entered promiscuous mode [ 586.097651][T11885] device team_slave_0 entered promiscuous mode [ 586.104002][T11885] device team_slave_1 entered promiscuous mode [ 586.146250][T11887] device team0 left promiscuous mode [ 586.167357][T11887] device team_slave_0 left promiscuous mode [ 586.187689][T11887] device team_slave_1 left promiscuous mode [ 586.219165][T11887] ¥: port 1(team0) entered disabled state [ 589.042334][T11932] netlink: 64859 bytes leftover after parsing attributes in process `syz.5.2070'. [ 589.073390][T11939] netlink: 'syz.4.2073': attribute type 8 has an invalid length. [ 589.097336][T11939] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2073'. [ 589.295993][T11939] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.2073'. [ 589.574489][T11939] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 590.049136][T11953] netlink: 'syz.0.2076': attribute type 29 has an invalid length. [ 590.085803][T11953] netlink: 'syz.0.2076': attribute type 29 has an invalid length. [ 590.173202][T11953] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2076'. [ 590.255374][T11959] netlink: 'syz.5.2079': attribute type 39 has an invalid length. [ 590.500643][T11961] netlink: 'syz.5.2079': attribute type 39 has an invalid length. [ 591.821794][T12006] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2091'. [ 591.843986][T12006] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 591.897848][T12006] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 594.473029][T12071] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2109'. [ 595.285188][T12085] netlink: 'syz.5.2116': attribute type 22 has an invalid length. [ 595.319923][T12085] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2116'. [ 595.746139][T12096] netlink: 'syz.4.2119': attribute type 1 has an invalid length. [ 595.768266][T12096] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2119'. [ 595.818567][T12096] netlink: 'syz.4.2119': attribute type 1 has an invalid length. [ 595.855401][T12096] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2119'. [ 596.561438][T12123] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2127'. [ 597.283341][T12138] netlink: 'syz.1.2133': attribute type 29 has an invalid length. [ 597.368345][T12138] netlink: 'syz.1.2133': attribute type 29 has an invalid length. [ 597.380480][T12139] netlink: 'syz.1.2133': attribute type 29 has an invalid length. [ 598.372793][T12172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 598.860981][T12189] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2148'. [ 599.224926][T12189] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2148'. [ 601.994307][T12188] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2148'. [ 602.007785][T12200] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2150'. [ 602.376662][T12219] netlink: 'syz.5.2154': attribute type 10 has an invalid length. [ 602.524560][T12219] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2154'. [ 602.585572][T12219] batman_adv: batadv0: Adding interface: vlan1 [ 602.611849][T12219] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 602.713332][T12219] batman_adv: batadv0: Interface activated: vlan1 [ 602.768234][T12231] netlink: 'syz.3.2157': attribute type 10 has an invalid length. [ 603.500603][T12247] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.2162'. [ 604.578527][T12285] netlink: 16255 bytes leftover after parsing attributes in process `syz.5.2171'. [ 604.948999][T12297] netlink: 'syz.5.2174': attribute type 27 has an invalid length. [ 605.017949][T12295] delete_channel: no stack [ 605.601014][T12312] FAULT_INJECTION: forcing a failure. [ 605.601014][T12312] name failslab, interval 1, probability 0, space 0, times 0 [ 605.657348][T12312] CPU: 1 PID: 12312 Comm: syz.3.2181 Not tainted syzkaller #0 [ 605.664989][T12312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 605.675094][T12312] Call Trace: [ 605.678435][T12312] [ 605.681425][T12312] dump_stack_lvl+0x188/0x24e [ 605.686166][T12312] ? show_regs_print_info+0x12/0x12 [ 605.691415][T12312] ? load_image+0x410/0x410 [ 605.696001][T12312] ? __might_sleep+0xd0/0xd0 [ 605.700653][T12312] ? __lock_acquire+0x7c40/0x7c40 [ 605.705740][T12312] ? mark_lock+0x94/0x320 [ 605.710180][T12312] should_fail_ex+0x390/0x4c0 [ 605.714929][T12312] should_failslab+0x5/0x20 [ 605.719485][T12312] slab_pre_alloc_hook+0x59/0x300 [ 605.724571][T12312] ? __lock_acquire+0x138a/0x7c40 [ 605.729656][T12312] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 605.735464][T12312] __kmem_cache_alloc_node+0x4f/0x270 [ 605.740904][T12312] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 605.746677][T12312] __kmalloc+0xa3/0x240 [ 605.750905][T12312] tomoyo_realpath_from_path+0xe2/0x5c0 [ 605.756514][T12312] ? tomoyo_domain+0xd2/0x120 [ 605.761247][T12312] ? tomoyo_path_number_perm+0x205/0x650 [ 605.767019][T12312] tomoyo_path_number_perm+0x22f/0x650 [ 605.772535][T12312] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 605.778055][T12312] ? ksys_write+0x1ce/0x260 [ 605.782625][T12312] ? common_file_perm+0x171/0x1c0 [ 605.787740][T12312] ? __fget_files+0x28/0x460 [ 605.792413][T12312] security_file_ioctl+0x6c/0xa0 [ 605.797504][T12312] __se_sys_ioctl+0x48/0x170 [ 605.802156][T12312] do_syscall_64+0x4c/0xa0 [ 605.806627][T12312] ? clear_bhb_loop+0x60/0xb0 [ 605.811368][T12312] ? clear_bhb_loop+0x60/0xb0 [ 605.816101][T12312] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 605.822157][T12312] RIP: 0033:0x7fc94479e159 [ 605.826623][T12312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 605.846378][T12312] RSP: 002b:00007fc945601028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 605.854855][T12312] RAX: ffffffffffffffda RBX: 00007fc944a25fa0 RCX: 00007fc94479e159 [ 605.862904][T12312] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 000000000000003c [ 605.871104][T12312] RBP: 00007fc945601090 R08: 0000000000000000 R09: 0000000000000000 [ 605.879195][T12312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 605.887312][T12312] R13: 00007fc944a26038 R14: 00007fc944a25fa0 R15: 00007fff7976fae8 [ 605.895356][T12312] [ 605.939087][T12316] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2183'. [ 605.962272][T12312] ERROR: Out of memory at tomoyo_realpath_from_path. [ 606.328404][T12334] netlink: 'syz.4.2188': attribute type 10 has an invalid length. [ 606.338411][T12334] device vlan0 entered promiscuous mode [ 606.414031][T12333] netlink: 'syz.3.2187': attribute type 10 has an invalid length. [ 606.849376][T12341] netlink: 'syz.0.2190': attribute type 1 has an invalid length. [ 606.879295][T12341] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.2190'. [ 606.938837][T12345] netlink: 'syz.0.2190': attribute type 29 has an invalid length. [ 606.975039][T12345] netlink: 'syz.0.2190': attribute type 29 has an invalid length. [ 607.058732][T12341] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2190'. [ 607.828936][T12361] netlink: 'syz.0.2196': attribute type 13 has an invalid length. [ 607.866174][T12361] netlink: 24859 bytes leftover after parsing attributes in process `syz.0.2196'. [ 607.903523][T12367] FAULT_INJECTION: forcing a failure. [ 607.903523][T12367] name failslab, interval 1, probability 0, space 0, times 0 [ 607.933318][T12367] CPU: 1 PID: 12367 Comm: syz.4.2198 Not tainted syzkaller #0 [ 607.940867][T12367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 607.951077][T12367] Call Trace: [ 607.954404][T12367] [ 607.957379][T12367] dump_stack_lvl+0x188/0x24e [ 607.962123][T12367] ? show_regs_print_info+0x12/0x12 [ 607.967373][T12367] ? load_image+0x410/0x410 [ 607.971941][T12367] ? __might_sleep+0xd0/0xd0 [ 607.976583][T12367] ? __lock_acquire+0x7c40/0x7c40 [ 607.981847][T12367] should_fail_ex+0x390/0x4c0 [ 607.986582][T12367] should_failslab+0x5/0x20 [ 607.991104][T12367] slab_pre_alloc_hook+0x59/0x300 [ 607.996246][T12367] ? tomoyo_encode+0x28a/0x550 [ 608.001120][T12367] __kmem_cache_alloc_node+0x4f/0x270 [ 608.006510][T12367] ? tomoyo_encode+0x28a/0x550 [ 608.011296][T12367] __kmalloc+0xa3/0x240 [ 608.015488][T12367] tomoyo_encode+0x28a/0x550 [ 608.020111][T12367] tomoyo_realpath_from_path+0x578/0x5c0 [ 608.025779][T12367] ? tomoyo_domain+0xd2/0x120 [ 608.030665][T12367] ? tomoyo_path_number_perm+0x205/0x650 [ 608.036362][T12367] tomoyo_path_number_perm+0x22f/0x650 [ 608.041863][T12367] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 608.047379][T12367] ? ksys_write+0x1ce/0x260 [ 608.052022][T12367] ? common_file_perm+0x171/0x1c0 [ 608.057139][T12367] ? __fget_files+0x28/0x460 [ 608.061802][T12367] security_file_ioctl+0x6c/0xa0 [ 608.066763][T12367] __se_sys_ioctl+0x48/0x170 [ 608.071399][T12367] do_syscall_64+0x4c/0xa0 [ 608.075833][T12367] ? clear_bhb_loop+0x60/0xb0 [ 608.080526][T12367] ? clear_bhb_loop+0x60/0xb0 [ 608.085232][T12367] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 608.091156][T12367] RIP: 0033:0x7fad5c99e159 [ 608.095583][T12367] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 608.115215][T12367] RSP: 002b:00007fad5abd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 608.123649][T12367] RAX: ffffffffffffffda RBX: 00007fad5cc26090 RCX: 00007fad5c99e159 [ 608.131637][T12367] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 000000000000003c [ 608.139625][T12367] RBP: 00007fad5abd5090 R08: 0000000000000000 R09: 0000000000000000 [ 608.147624][T12367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 608.155643][T12367] R13: 00007fad5cc26128 R14: 00007fad5cc26090 R15: 00007fff09046688 [ 608.163830][T12367] [ 608.174818][T12367] ERROR: Out of memory at tomoyo_realpath_from_path. [ 608.710590][T12381] netlink: 'syz.1.2203': attribute type 21 has an invalid length. [ 609.851838][T12397] delete_channel: no stack [ 610.291892][T12409] netlink: 128 bytes leftover after parsing attributes in process `syz.5.2212'. [ 610.321937][T12409] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 610.354037][T12409] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 610.749926][T12421] netlink: 'syz.0.2217': attribute type 5 has an invalid length. [ 610.802711][T12421] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2217'. [ 610.821761][T12423] FAULT_INJECTION: forcing a failure. [ 610.821761][T12423] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 610.821902][T12423] CPU: 1 PID: 12423 Comm: syz.1.2216 Not tainted syzkaller #0 [ 610.821925][T12423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 610.821939][T12423] Call Trace: [ 610.821947][T12423] [ 610.821956][T12423] dump_stack_lvl+0x188/0x24e [ 610.821993][T12423] ? show_regs_print_info+0x12/0x12 [ 610.822018][T12423] ? load_image+0x410/0x410 [ 610.822054][T12423] ? __lock_acquire+0x7c40/0x7c40 [ 610.822088][T12423] ? unix_ioctl+0x255/0x6a0 [ 610.822123][T12423] should_fail_ex+0x390/0x4c0 [ 610.822162][T12423] _copy_from_user+0x2c/0x170 [ 610.822190][T12423] sock_do_ioctl+0x18c/0x320 [ 610.822221][T12423] ? sock_show_fdinfo+0xb0/0xb0 [ 610.822265][T12423] sock_ioctl+0x48a/0x700 [ 610.822293][T12423] ? sock_poll+0x420/0x420 [ 610.822339][T12423] ? bpf_lsm_file_ioctl+0x5/0x10 [ 610.822370][T12423] ? security_file_ioctl+0x7c/0xa0 [ 610.822397][T12423] ? sock_poll+0x420/0x420 [ 610.822423][T12423] __se_sys_ioctl+0xfa/0x170 [ 610.822457][T12423] do_syscall_64+0x4c/0xa0 [ 610.822479][T12423] ? clear_bhb_loop+0x60/0xb0 [ 610.822501][T12423] ? clear_bhb_loop+0x60/0xb0 [ 610.822526][T12423] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 610.822561][T12423] RIP: 0033:0x7f1c8db9e159 [ 610.822580][T12423] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 610.822600][T12423] RSP: 002b:00007f1c8ea44028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 610.822625][T12423] RAX: ffffffffffffffda RBX: 00007f1c8de25fa0 RCX: 00007f1c8db9e159 [ 610.822642][T12423] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 000000000000003c [ 610.822657][T12423] RBP: 00007f1c8ea44090 R08: 0000000000000000 R09: 0000000000000000 [ 610.822671][T12423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 610.822685][T12423] R13: 00007f1c8de26038 R14: 00007f1c8de25fa0 R15: 00007fffb95ef238 [ 610.822720][T12423] [ 611.328808][T12429] netlink: 12090 bytes leftover after parsing attributes in process `syz.5.2219'. [ 611.416461][T12431] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2220'. [ 612.749889][T12462] netlink: 'syz.3.2230': attribute type 3 has an invalid length. [ 612.767388][T12462] netlink: 13435 bytes leftover after parsing attributes in process `syz.3.2230'. [ 612.790607][T12462] netlink: 'syz.3.2230': attribute type 5 has an invalid length. [ 612.954346][T12464] FAULT_INJECTION: forcing a failure. [ 612.954346][T12464] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 612.995432][T12464] CPU: 0 PID: 12464 Comm: syz.4.2231 Not tainted syzkaller #0 [ 613.003069][T12464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 613.013265][T12464] Call Trace: [ 613.016638][T12464] [ 613.019656][T12464] dump_stack_lvl+0x188/0x24e [ 613.024398][T12464] ? show_regs_print_info+0x12/0x12 [ 613.029681][T12464] ? load_image+0x410/0x410 [ 613.034236][T12464] ? __lock_acquire+0x7c40/0x7c40 [ 613.039317][T12464] ? perf_trace_lock+0xf8/0x390 [ 613.044232][T12464] should_fail_ex+0x390/0x4c0 [ 613.048982][T12464] _copy_from_user+0x2c/0x170 [ 613.053716][T12464] dev_ethtool+0xc2/0x12f0 [ 613.058189][T12464] ? ethtool_get_module_eeprom_call+0x170/0x170 [ 613.064559][T12464] ? __lock_acquire+0x7c40/0x7c40 [ 613.069628][T12464] ? __kmem_cache_free+0xb6/0x200 [ 613.074687][T12464] ? full_name_hash+0x8e/0xe0 [ 613.079395][T12464] ? dev_load+0x1d/0x1e0 [ 613.083664][T12464] ? dev_load+0x1d/0x1e0 [ 613.087935][T12464] dev_ioctl+0x474/0xe80 [ 613.092217][T12464] sock_do_ioctl+0x245/0x320 [ 613.096841][T12464] ? sock_show_fdinfo+0xb0/0xb0 [ 613.101733][T12464] sock_ioctl+0x48a/0x700 [ 613.106093][T12464] ? sock_poll+0x420/0x420 [ 613.110547][T12464] ? bpf_lsm_file_ioctl+0x5/0x10 [ 613.115518][T12464] ? security_file_ioctl+0x7c/0xa0 [ 613.120662][T12464] ? sock_poll+0x420/0x420 [ 613.125118][T12464] __se_sys_ioctl+0xfa/0x170 [ 613.129753][T12464] do_syscall_64+0x4c/0xa0 [ 613.134199][T12464] ? clear_bhb_loop+0x60/0xb0 [ 613.138910][T12464] ? clear_bhb_loop+0x60/0xb0 [ 613.143618][T12464] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 613.149550][T12464] RIP: 0033:0x7fad5c99e159 [ 613.153992][T12464] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 613.173627][T12464] RSP: 002b:00007fad5abf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 613.182070][T12464] RAX: ffffffffffffffda RBX: 00007fad5cc25fa0 RCX: 00007fad5c99e159 [ 613.190070][T12464] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 000000000000003c [ 613.198179][T12464] RBP: 00007fad5abf6090 R08: 0000000000000000 R09: 0000000000000000 [ 613.206176][T12464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 613.214271][T12464] R13: 00007fad5cc26038 R14: 00007fad5cc25fa0 R15: 00007fff09046688 [ 613.222295][T12464] [ 617.511242][T12515] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2246'. [ 617.861530][T12534] FAULT_INJECTION: forcing a failure. [ 617.861530][T12534] name failslab, interval 1, probability 0, space 0, times 0 [ 617.902016][T12527] netlink: 'syz.1.2247': attribute type 3 has an invalid length. [ 617.905948][T12534] CPU: 1 PID: 12534 Comm: syz.0.2248 Not tainted syzkaller #0 [ 617.917338][T12534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 617.927442][T12534] Call Trace: [ 617.930758][T12534] [ 617.933728][T12534] dump_stack_lvl+0x188/0x24e [ 617.938477][T12534] ? show_regs_print_info+0x12/0x12 [ 617.943733][T12534] ? load_image+0x410/0x410 [ 617.948288][T12534] ? __might_sleep+0xd0/0xd0 [ 617.952928][T12534] ? __lock_acquire+0x7c40/0x7c40 [ 617.958010][T12534] should_fail_ex+0x390/0x4c0 [ 617.962760][T12534] should_failslab+0x5/0x20 [ 617.967309][T12534] slab_pre_alloc_hook+0x59/0x300 [ 617.972382][T12534] ? perf_trace_lock+0xf8/0x390 [ 617.977284][T12534] ? dev_ethtool+0x125/0x12f0 [ 617.982014][T12534] __kmem_cache_alloc_node+0x4f/0x270 [ 617.987436][T12534] ? dev_ethtool+0x125/0x12f0 [ 617.992167][T12534] kmalloc_trace+0x26/0xe0 [ 617.996636][T12534] dev_ethtool+0x125/0x12f0 [ 618.000648][T12527] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2247'. [ 618.001186][T12534] ? ethtool_get_module_eeprom_call+0x170/0x170 [ 618.016520][T12534] ? __lock_acquire+0x7c40/0x7c40 [ 618.021609][T12534] ? __kmem_cache_free+0xb6/0x200 [ 618.026692][T12534] ? full_name_hash+0x8e/0xe0 [ 618.031418][T12534] ? dev_load+0x1d/0x1e0 [ 618.035710][T12534] ? dev_load+0x1d/0x1e0 [ 618.040007][T12534] dev_ioctl+0x474/0xe80 [ 618.044335][T12534] sock_do_ioctl+0x245/0x320 [ 618.049065][T12534] ? sock_show_fdinfo+0xb0/0xb0 [ 618.053982][T12534] sock_ioctl+0x48a/0x700 [ 618.058368][T12534] ? sock_poll+0x420/0x420 [ 618.062847][T12534] ? bpf_lsm_file_ioctl+0x5/0x10 [ 618.067931][T12534] ? security_file_ioctl+0x7c/0xa0 [ 618.073100][T12534] ? sock_poll+0x420/0x420 [ 618.077564][T12534] __se_sys_ioctl+0xfa/0x170 [ 618.082223][T12534] do_syscall_64+0x4c/0xa0 [ 618.086780][T12534] ? clear_bhb_loop+0x60/0xb0 [ 618.091502][T12534] ? clear_bhb_loop+0x60/0xb0 [ 618.096226][T12534] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 618.102175][T12534] RIP: 0033:0x7f94d4b9e159 [ 618.106629][T12534] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 618.126280][T12534] RSP: 002b:00007f94d2df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 618.134754][T12534] RAX: ffffffffffffffda RBX: 00007f94d4e25fa0 RCX: 00007f94d4b9e159 [ 618.142772][T12534] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 000000000000003c [ 618.150886][T12534] RBP: 00007f94d2df6090 R08: 0000000000000000 R09: 0000000000000000 [ 618.158901][T12534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 618.166918][T12534] R13: 00007f94d4e26038 R14: 00007f94d4e25fa0 R15: 00007ffdb728e8e8 [ 618.174957][T12534] [ 618.220975][T12536] netlink: 'syz.4.2250': attribute type 29 has an invalid length. [ 618.241581][T12536] netlink: 'syz.4.2250': attribute type 29 has an invalid length. [ 619.730151][T12582] FAULT_INJECTION: forcing a failure. [ 619.730151][T12582] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 619.791851][T12582] CPU: 0 PID: 12582 Comm: syz.0.2262 Not tainted syzkaller #0 [ 619.799394][T12582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 619.809498][T12582] Call Trace: [ 619.812823][T12582] [ 619.815796][T12582] dump_stack_lvl+0x188/0x24e [ 619.820528][T12582] ? show_regs_print_info+0x12/0x12 [ 619.825787][T12582] ? load_image+0x410/0x410 [ 619.830375][T12582] ? __lock_acquire+0x7c40/0x7c40 [ 619.835437][T12582] ? mutex_lock_nested+0x10/0x10 [ 619.840413][T12582] should_fail_ex+0x390/0x4c0 [ 619.845134][T12582] _copy_from_user+0x2c/0x170 [ 619.849847][T12582] dev_ethtool+0x246/0x12f0 [ 619.854397][T12582] ? ethtool_get_module_eeprom_call+0x170/0x170 [ 619.860675][T12582] ? __lock_acquire+0x7c40/0x7c40 [ 619.865729][T12582] ? __kmem_cache_free+0xb6/0x200 [ 619.870779][T12582] ? full_name_hash+0x8e/0xe0 [ 619.875579][T12582] ? dev_load+0x1d/0x1e0 [ 619.879846][T12582] ? dev_load+0x1d/0x1e0 [ 619.884121][T12582] dev_ioctl+0x474/0xe80 [ 619.888405][T12582] sock_do_ioctl+0x245/0x320 [ 619.893027][T12582] ? sock_show_fdinfo+0xb0/0xb0 [ 619.898003][T12582] sock_ioctl+0x48a/0x700 [ 619.902403][T12582] ? sock_poll+0x420/0x420 [ 619.906949][T12582] ? bpf_lsm_file_ioctl+0x5/0x10 [ 619.911927][T12582] ? security_file_ioctl+0x7c/0xa0 [ 619.917077][T12582] ? sock_poll+0x420/0x420 [ 619.921525][T12582] __se_sys_ioctl+0xfa/0x170 [ 619.926155][T12582] do_syscall_64+0x4c/0xa0 [ 619.930623][T12582] ? clear_bhb_loop+0x60/0xb0 [ 619.935325][T12582] ? clear_bhb_loop+0x60/0xb0 [ 619.940027][T12582] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 619.945951][T12582] RIP: 0033:0x7f94d4b9e159 [ 619.950425][T12582] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 619.970058][T12582] RSP: 002b:00007f94d2df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 619.978583][T12582] RAX: ffffffffffffffda RBX: 00007f94d4e25fa0 RCX: 00007f94d4b9e159 [ 619.986586][T12582] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 000000000000003c [ 619.994581][T12582] RBP: 00007f94d2df6090 R08: 0000000000000000 R09: 0000000000000000 [ 620.002601][T12582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 620.010595][T12582] R13: 00007f94d4e26038 R14: 00007f94d4e25fa0 R15: 00007ffdb728e8e8 [ 620.018614][T12582] [ 620.128519][T12583] netlink: 'syz.4.2264': attribute type 10 has an invalid length. [ 620.197878][T12583] device syz_tun entered promiscuous mode [ 621.281790][T12608] netlink: 'syz.4.2270': attribute type 3 has an invalid length. [ 621.336592][T12608] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2270'. [ 623.177065][T12640] netlink: 'syz.5.2279': attribute type 39 has an invalid length. [ 623.284978][T12642] netlink: 'syz.5.2279': attribute type 39 has an invalid length. [ 623.293361][T12647] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2283'. [ 623.320279][T12643] FAULT_INJECTION: forcing a failure. [ 623.320279][T12643] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 623.351651][T12643] CPU: 1 PID: 12643 Comm: syz.3.2281 Not tainted syzkaller #0 [ 623.359198][T12643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 623.369303][T12643] Call Trace: [ 623.372613][T12643] [ 623.375572][T12643] dump_stack_lvl+0x188/0x24e [ 623.380297][T12643] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 623.386476][T12643] ? show_regs_print_info+0x12/0x12 [ 623.391700][T12643] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 623.397892][T12643] should_fail_ex+0x390/0x4c0 [ 623.402609][T12643] _copy_from_user+0x2c/0x170 [ 623.407329][T12643] ethtool_set_per_queue+0xec/0x1e0 [ 623.412580][T12643] ? ethtool_get_phy_stats+0x650/0x650 [ 623.418110][T12643] ? __lock_acquire+0x7c40/0x7c40 [ 623.423173][T12643] ? mutex_lock_nested+0x10/0x10 [ 623.428249][T12643] ? __might_fault+0xa6/0x120 [ 623.432975][T12643] ? __might_fault+0xc2/0x120 [ 623.437691][T12643] ? __might_fault+0xa6/0x120 [ 623.442510][T12643] dev_ethtool+0x967/0x12f0 [ 623.447072][T12643] ? ethtool_get_module_eeprom_call+0x170/0x170 [ 623.453360][T12643] ? __lock_acquire+0x7c40/0x7c40 [ 623.458423][T12643] ? __kmem_cache_free+0xb6/0x200 [ 623.463515][T12643] ? full_name_hash+0x8e/0xe0 [ 623.468226][T12643] ? dev_load+0x1d/0x1e0 [ 623.472506][T12643] ? dev_load+0x1d/0x1e0 [ 623.476957][T12643] dev_ioctl+0x474/0xe80 [ 623.481232][T12643] sock_do_ioctl+0x245/0x320 [ 623.485886][T12643] ? sock_show_fdinfo+0xb0/0xb0 [ 623.490782][T12643] sock_ioctl+0x48a/0x700 [ 623.495146][T12643] ? sock_poll+0x420/0x420 [ 623.499607][T12643] ? bpf_lsm_file_ioctl+0x5/0x10 [ 623.504579][T12643] ? security_file_ioctl+0x7c/0xa0 [ 623.509721][T12643] ? sock_poll+0x420/0x420 [ 623.514170][T12643] __se_sys_ioctl+0xfa/0x170 [ 623.518804][T12643] do_syscall_64+0x4c/0xa0 [ 623.523256][T12643] ? clear_bhb_loop+0x60/0xb0 [ 623.527967][T12643] ? clear_bhb_loop+0x60/0xb0 [ 623.532694][T12643] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 623.538626][T12643] RIP: 0033:0x7fc94479e159 [ 623.543076][T12643] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 623.562799][T12643] RSP: 002b:00007fc945601028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 623.571244][T12643] RAX: ffffffffffffffda RBX: 00007fc944a25fa0 RCX: 00007fc94479e159 [ 623.579247][T12643] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 000000000000003c [ 623.587330][T12643] RBP: 00007fc945601090 R08: 0000000000000000 R09: 0000000000000000 [ 623.595334][T12643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 623.603330][T12643] R13: 00007fc944a26038 R14: 00007fc944a25fa0 R15: 00007fff7976fae8 [ 623.611356][T12643] [ 623.672965][T12647] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2283'. [ 624.318122][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.324506][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.831728][T12699] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2295'. [ 625.888059][T12699] openvswitch: netlink: Message has 6 unknown bytes. [ 626.416384][T12708] FAULT_INJECTION: forcing a failure. [ 626.416384][T12708] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 626.459209][T12708] CPU: 0 PID: 12708 Comm: syz.3.2297 Not tainted syzkaller #0 [ 626.466796][T12708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 626.476933][T12708] Call Trace: [ 626.480305][T12708] [ 626.483310][T12708] dump_stack_lvl+0x188/0x24e [ 626.488078][T12708] ? show_regs_print_info+0x12/0x12 [ 626.493363][T12708] ? load_image+0x410/0x410 [ 626.498019][T12708] ? __lock_acquire+0x7c40/0x7c40 [ 626.503132][T12708] ? snprintf+0xe5/0x140 [ 626.507475][T12708] should_fail_ex+0x390/0x4c0 [ 626.512251][T12708] _copy_to_user+0x2c/0x130 [ 626.516840][T12708] simple_read_from_buffer+0xe3/0x150 [ 626.522357][T12708] proc_fail_nth_read+0x1a6/0x220 [ 626.527471][T12708] ? proc_fault_inject_write+0x310/0x310 [ 626.533211][T12708] ? fsnotify_perm+0x248/0x550 [ 626.538149][T12708] ? proc_fault_inject_write+0x310/0x310 [ 626.544064][T12708] vfs_read+0x2db/0x960 [ 626.548340][T12708] ? kernel_read+0x1e0/0x1e0 [ 626.553020][T12708] ? __fget_files+0x28/0x460 [ 626.557691][T12708] ? __fget_files+0x3fc/0x460 [ 626.562569][T12708] ? __fdget_pos+0x2ae/0x360 [ 626.567237][T12708] ? ksys_read+0x70/0x260 [ 626.571667][T12708] ksys_read+0x14d/0x260 [ 626.575999][T12708] ? vfs_write+0x9a0/0x9a0 [ 626.580537][T12708] ? lockdep_hardirqs_on+0x94/0x140 [ 626.585829][T12708] do_syscall_64+0x4c/0xa0 [ 626.590325][T12708] ? clear_bhb_loop+0x60/0xb0 [ 626.595068][T12708] ? clear_bhb_loop+0x60/0xb0 [ 626.599833][T12708] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 626.605809][T12708] RIP: 0033:0x7fc94475e98e [ 626.610302][T12708] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 626.629985][T12708] RSP: 002b:00007fc945600fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 626.638482][T12708] RAX: ffffffffffffffda RBX: 00007fc9456016c0 RCX: 00007fc94475e98e [ 626.646521][T12708] RDX: 000000000000000f RSI: 00007fc9456010a0 RDI: 000000000000003d [ 626.654555][T12708] RBP: 00007fc945601090 R08: 0000000000000000 R09: 0000000000000000 [ 626.662599][T12708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 626.670733][T12708] R13: 00007fc944a26038 R14: 00007fc944a25fa0 R15: 00007fff7976fae8 [ 626.678871][T12708] [ 630.022898][T12745] netlink: 'syz.4.2307': attribute type 13 has an invalid length. [ 630.157560][T12745] netlink: 24859 bytes leftover after parsing attributes in process `syz.4.2307'. [ 630.739120][T12765] netlink: 'syz.1.2308': attribute type 10 has an invalid length. [ 631.076882][T12765] device nlmon0 entered promiscuous mode [ 631.184602][T12765] team0: Device nlmon0 is of different type [ 631.906603][T12790] netlink: 'syz.5.2313': attribute type 41 has an invalid length. [ 631.960514][T12790] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2313'. [ 632.042473][T12790] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 632.122381][T12783] netlink: 'syz.4.2314': attribute type 16 has an invalid length. [ 632.148061][T12783] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2314'. [ 634.698562][T12796] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.2317'. [ 635.245135][T12806] FAULT_INJECTION: forcing a failure. [ 635.245135][T12806] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 635.456336][T12806] CPU: 1 PID: 12806 Comm: syz.0.2319 Not tainted syzkaller #0 [ 635.463894][T12806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 635.474105][T12806] Call Trace: [ 635.477519][T12806] [ 635.480499][T12806] dump_stack_lvl+0x188/0x24e [ 635.485255][T12806] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 635.491469][T12806] ? show_regs_print_info+0x12/0x12 [ 635.496719][T12806] ? load_image+0x410/0x410 [ 635.501327][T12806] should_fail_ex+0x390/0x4c0 [ 635.506072][T12806] _copy_from_user+0x2c/0x170 [ 635.510803][T12806] __sys_bpf+0x2ea/0x780 [ 635.515102][T12806] ? bpf_link_show_fdinfo+0x380/0x380 [ 635.520568][T12806] ? lock_chain_count+0x20/0x20 [ 635.525570][T12806] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 635.531635][T12806] __x64_sys_bpf+0x78/0x90 [ 635.536090][T12806] do_syscall_64+0x4c/0xa0 [ 635.540531][T12806] ? clear_bhb_loop+0x60/0xb0 [ 635.545231][T12806] ? clear_bhb_loop+0x60/0xb0 [ 635.549944][T12806] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 635.555871][T12806] RIP: 0033:0x7f94d4b9e159 [ 635.560310][T12806] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 635.579949][T12806] RSP: 002b:00007f94d2dd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 635.588413][T12806] RAX: ffffffffffffffda RBX: 00007f94d4e26090 RCX: 00007f94d4b9e159 [ 635.596439][T12806] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 635.604435][T12806] RBP: 00007f94d2dd5090 R08: 0000000000000000 R09: 0000000000000000 [ 635.612435][T12806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 635.620433][T12806] R13: 00007f94d4e26128 R14: 00007f94d4e26090 R15: 00007ffdb728e8e8 [ 635.628531][T12806] [ 636.163210][T12817] sctp: [Deprecated]: syz.4.2323 (pid 12817) Use of struct sctp_assoc_value in delayed_ack socket option. [ 636.163210][T12817] Use struct sctp_sack_info instead [ 636.565255][T12818] netlink: 'syz.0.2324': attribute type 21 has an invalid length. [ 636.642154][T12818] netlink: 'syz.0.2324': attribute type 11 has an invalid length. [ 638.342015][T12829] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2328'. [ 638.393021][T12831] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.2327'. [ 639.126354][T12849] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2332'. [ 639.601833][T12859] FAULT_INJECTION: forcing a failure. [ 639.601833][T12859] name failslab, interval 1, probability 0, space 0, times 0 [ 639.707623][T12859] CPU: 0 PID: 12859 Comm: syz.1.2336 Not tainted syzkaller #0 [ 639.715285][T12859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 639.725392][T12859] Call Trace: [ 639.728728][T12859] [ 639.731690][T12859] dump_stack_lvl+0x188/0x24e [ 639.736420][T12859] ? show_regs_print_info+0x12/0x12 [ 639.741664][T12859] ? load_image+0x410/0x410 [ 639.746242][T12859] should_fail_ex+0x390/0x4c0 [ 639.750995][T12859] should_failslab+0x5/0x20 [ 639.755549][T12859] slab_pre_alloc_hook+0x59/0x300 [ 639.760625][T12859] ? lockdep_hardirqs_on+0x94/0x140 [ 639.765874][T12859] ? bpf_prog_test_run_skb+0x23e/0x18e0 [ 639.771486][T12859] __kmem_cache_alloc_node+0x4f/0x270 [ 639.776923][T12859] ? bpf_prog_test_run_skb+0x23e/0x18e0 [ 639.782522][T12859] __kmalloc+0xa3/0x240 [ 639.786745][T12859] bpf_prog_test_run_skb+0x23e/0x18e0 [ 639.792184][T12859] ? __fget_files+0x28/0x460 [ 639.796854][T12859] ? __fget_files+0x3fc/0x460 [ 639.801625][T12859] ? cpu_online+0xa0/0xa0 [ 639.806038][T12859] bpf_prog_test_run+0x31c/0x390 [ 639.811034][T12859] __sys_bpf+0x62b/0x780 [ 639.815336][T12859] ? bpf_link_show_fdinfo+0x380/0x380 [ 639.820793][T12859] __x64_sys_bpf+0x78/0x90 [ 639.825283][T12859] do_syscall_64+0x4c/0xa0 [ 639.829752][T12859] ? clear_bhb_loop+0x60/0xb0 [ 639.834483][T12859] ? clear_bhb_loop+0x60/0xb0 [ 639.839214][T12859] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 639.845166][T12859] RIP: 0033:0x7f1c8db9e159 [ 639.849629][T12859] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 639.869632][T12859] RSP: 002b:00007f1c8ea23028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 639.878112][T12859] RAX: ffffffffffffffda RBX: 00007f1c8de26090 RCX: 00007f1c8db9e159 [ 639.886224][T12859] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 639.894267][T12859] RBP: 00007f1c8ea23090 R08: 0000000000000000 R09: 0000000000000000 [ 639.902415][T12859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 639.910436][T12859] R13: 00007f1c8de26128 R14: 00007f1c8de26090 R15: 00007fffb95ef238 [ 639.918482][T12859] [ 643.228624][T12882] TCP: TCP_TX_DELAY enabled [ 647.513189][T12943] netlink: 'syz.3.2357': attribute type 10 has an invalid length. [ 647.547505][T12943] netlink: 'syz.3.2357': attribute type 19 has an invalid length. [ 647.568680][T12943] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2357'. [ 647.739315][T12949] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2357'. [ 655.614659][T13020] netlink: 'syz.4.2382': attribute type 1 has an invalid length. [ 655.845155][T13020] netlink: 'syz.4.2382': attribute type 28 has an invalid length. [ 656.199134][T13031] netlink: 'syz.3.2387': attribute type 8 has an invalid length. [ 656.304126][T13031] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2387'. [ 656.484131][T13031] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.2387'. [ 657.055303][T13031] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 657.077562][T13031] CPU: 0 PID: 13031 Comm: syz.3.2387 Not tainted syzkaller #0 [ 657.085212][T13031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 657.095330][T13031] Call Trace: [ 657.098655][T13031] [ 657.101636][T13031] dump_stack_lvl+0x188/0x24e [ 657.106417][T13031] ? show_regs_print_info+0x12/0x12 [ 657.111670][T13031] ? load_image+0x410/0x410 [ 657.116334][T13031] sysfs_warn_dup+0x8a/0xa0 [ 657.120911][T13031] sysfs_do_create_link_sd+0xc0/0x110 [ 657.126367][T13031] device_add+0x83b/0x1050 [ 657.130854][T13031] wiphy_register+0x1d8b/0x2aa0 [ 657.135809][T13031] ? cfg80211_event_work+0x40/0x40 [ 657.140983][T13031] ? minstrel_ht_alloc+0x894/0xa20 [ 657.146190][T13031] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 657.152319][T13031] ieee80211_register_hw+0x2d48/0x39f0 [ 657.158304][T13031] ? ieee80211_register_hw+0xf41/0x39f0 [ 657.163898][T13031] ? ieee80211_register_hw+0xf41/0x39f0 [ 657.169495][T13031] ? ieee80211_tasklet_handler+0x20/0x20 [ 657.175162][T13031] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 657.181096][T13031] ? __debug_object_init+0xed/0x440 [ 657.186350][T13031] ? memset+0x1e/0x40 [ 657.190399][T13031] ? __hrtimer_init+0x189/0x270 [ 657.195295][T13031] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 657.201065][T13031] ? memcpy+0x3c/0x60 [ 657.205082][T13031] hwsim_new_radio_nl+0xab7/0xc90 [ 657.210177][T13031] genl_family_rcv_msg_doit+0x22f/0x350 [ 657.215774][T13031] ? end_current_label_crit_section+0x170/0x170 [ 657.222113][T13031] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 657.228150][T13031] ? lockdep_hardirqs_on+0x94/0x140 [ 657.233403][T13031] ? bpf_lsm_capable+0x5/0x10 [ 657.238118][T13031] ? security_capable+0x85/0xb0 [ 657.243009][T13031] genl_rcv_msg+0x601/0x790 [ 657.247557][T13031] ? genl_bind+0x360/0x360 [ 657.252000][T13031] ? check_preemption_disabled+0x2e/0x110 [ 657.257755][T13031] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 657.264139][T13031] netlink_rcv_skb+0x1ef/0x440 [ 657.268931][T13031] ? genl_bind+0x360/0x360 [ 657.273414][T13031] ? netlink_ack+0x1160/0x1160 [ 657.278274][T13031] ? rcu_read_unlock_special+0x1/0x510 [ 657.283948][T13031] ? down_read+0x1a8/0x2d0 [ 657.288409][T13031] genl_rcv+0x24/0x40 [ 657.292460][T13031] netlink_unicast+0x7ad/0x920 [ 657.297406][T13031] netlink_sendmsg+0x8ad/0xbd0 [ 657.302221][T13031] ? netlink_getsockopt+0x550/0x550 [ 657.307456][T13031] ? apparmor_socket_sendmsg+0x8a/0x330 [ 657.313046][T13031] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 657.318369][T13031] ? security_socket_sendmsg+0x7c/0xa0 [ 657.323864][T13031] ? netlink_getsockopt+0x550/0x550 [ 657.329134][T13031] ____sys_sendmsg+0x5ed/0x9a0 [ 657.333937][T13031] ? __import_iovec+0x35d/0x510 [ 657.338829][T13031] ? __sys_sendmsg_sock+0x30/0x30 [ 657.343893][T13031] ? import_iovec+0x6f/0xa0 [ 657.348438][T13031] ___sys_sendmsg+0x2a2/0x360 [ 657.353147][T13031] ? __sys_sendmsg+0x2a0/0x2a0 [ 657.358007][T13031] __se_sys_sendmsg+0x1c3/0x2b0 [ 657.362895][T13031] ? __x64_sys_sendmsg+0x80/0x80 [ 657.367972][T13031] do_syscall_64+0x4c/0xa0 [ 657.372419][T13031] ? clear_bhb_loop+0x60/0xb0 [ 657.377118][T13031] ? clear_bhb_loop+0x60/0xb0 [ 657.381829][T13031] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 657.387768][T13031] RIP: 0033:0x7fc94479e159 [ 657.392209][T13031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 657.411873][T13031] RSP: 002b:00007fc945601028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 657.420331][T13031] RAX: ffffffffffffffda RBX: 00007fc944a25fa0 RCX: 00007fc94479e159 [ 657.428338][T13031] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 657.436425][T13031] RBP: 00007fc94483506b R08: 0000000000000000 R09: 0000000000000000 [ 657.444429][T13031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 657.452422][T13031] R13: 00007fc944a26038 R14: 00007fc944a25fa0 R15: 00007fff7976fae8 [ 657.460439][T13031] [ 659.296177][T13080] netlink: 'syz.5.2401': attribute type 1 has an invalid length. [ 659.611197][T13080] netlink: 'syz.5.2401': attribute type 28 has an invalid length. [ 660.331003][T13094] netlink: 'syz.5.2404': attribute type 8 has an invalid length. [ 660.347471][T13094] netlink: 156 bytes leftover after parsing attributes in process `syz.5.2404'. [ 660.472887][T13094] netlink: 122896 bytes leftover after parsing attributes in process `syz.5.2404'. [ 660.775965][T13094] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 663.393522][T13143] netlink: 'syz.1.2419': attribute type 1 has an invalid length. [ 663.783824][T13143] netlink: 'syz.1.2419': attribute type 28 has an invalid length. [ 665.163970][T13166] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.2424'. [ 665.931855][T13163] netlink: 'syz.1.2424': attribute type 8 has an invalid length. [ 665.963385][T13163] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2424'. [ 665.996813][T13166] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 666.448622][T13179] FAULT_INJECTION: forcing a failure. [ 666.448622][T13179] name failslab, interval 1, probability 0, space 0, times 0 [ 666.503756][T13179] CPU: 0 PID: 13179 Comm: syz.0.2429 Not tainted syzkaller #0 [ 666.511316][T13179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 666.521465][T13179] Call Trace: [ 666.524804][T13179] [ 666.527788][T13179] dump_stack_lvl+0x188/0x24e [ 666.532513][T13179] ? show_regs_print_info+0x12/0x12 [ 666.537757][T13179] ? load_image+0x410/0x410 [ 666.542321][T13179] ? __might_sleep+0xd0/0xd0 [ 666.546969][T13179] ? __lock_acquire+0x7c40/0x7c40 [ 666.552052][T13179] should_fail_ex+0x390/0x4c0 [ 666.556788][T13179] should_failslab+0x5/0x20 [ 666.561328][T13179] slab_pre_alloc_hook+0x59/0x300 [ 666.566398][T13179] ? __lock_acquire+0x138a/0x7c40 [ 666.571485][T13179] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 666.577252][T13179] __kmem_cache_alloc_node+0x4f/0x270 [ 666.582668][T13179] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 666.588433][T13179] __kmalloc+0xa3/0x240 [ 666.592659][T13179] tomoyo_realpath_from_path+0xe2/0x5c0 [ 666.598261][T13179] ? tomoyo_domain+0xd2/0x120 [ 666.602996][T13179] ? tomoyo_path_number_perm+0x205/0x650 [ 666.608684][T13179] tomoyo_path_number_perm+0x22f/0x650 [ 666.614195][T13179] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 666.619705][T13179] ? ksys_write+0x1ce/0x260 [ 666.624266][T13179] ? common_file_perm+0x171/0x1c0 [ 666.629383][T13179] ? __fget_files+0x28/0x460 [ 666.634111][T13179] security_file_ioctl+0x6c/0xa0 [ 666.639135][T13179] __se_sys_ioctl+0x48/0x170 [ 666.643785][T13179] do_syscall_64+0x4c/0xa0 [ 666.648251][T13179] ? clear_bhb_loop+0x60/0xb0 [ 666.652971][T13179] ? clear_bhb_loop+0x60/0xb0 [ 666.657692][T13179] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 666.663645][T13179] RIP: 0033:0x7f94d4b9e159 [ 666.668108][T13179] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 666.687757][T13179] RSP: 002b:00007f94d2dd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 666.696221][T13179] RAX: ffffffffffffffda RBX: 00007f94d4e26090 RCX: 00007f94d4b9e159 [ 666.704239][T13179] RDX: 0000200000001200 RSI: 0000000080047441 RDI: 0000000000000004 [ 666.712262][T13179] RBP: 00007f94d2dd5090 R08: 0000000000000000 R09: 0000000000000000 [ 666.720281][T13179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 666.728292][T13179] R13: 00007f94d4e26128 R14: 00007f94d4e26090 R15: 00007ffdb728e8e8 [ 666.736330][T13179] [ 666.988744][T13179] ERROR: Out of memory at tomoyo_realpath_from_path. [ 667.503029][T13189] syzkaller1: tun_chr_ioctl cmd 21731 [ 667.667547][T13194] netlink: 'syz.5.2434': attribute type 2 has an invalid length. [ 667.675857][T13194] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.2434'. [ 669.335957][T13226] netlink: 5427 bytes leftover after parsing attributes in process `syz.1.2445'. [ 669.433261][T13226] netlink: 52477 bytes leftover after parsing attributes in process `syz.1.2445'. [ 669.495887][T13226] netlink: 71676 bytes leftover after parsing attributes in process `syz.1.2445'. [ 669.841520][T13225] delete_channel: no stack [ 671.382677][T13258] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.2455'. [ 671.449903][T13258] debugfs: Directory '.! 5‚Á7>7H€' with parent 'ieee80211' already present! [ 671.892539][T13273] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2460'. [ 673.975333][T13292] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2466'. [ 674.003791][T13292] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 674.040218][T13292] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 674.878314][T13320] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.2474'. [ 675.050001][T13320] sysfs: cannot create duplicate filename '/class/ieee80211/.! 5‚Á7>7H€' [ 675.109571][T13320] CPU: 1 PID: 13320 Comm: syz.4.2474 Not tainted syzkaller #0 [ 675.117125][T13320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 675.127245][T13320] Call Trace: [ 675.130583][T13320] [ 675.133573][T13320] dump_stack_lvl+0x188/0x24e [ 675.138323][T13320] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 675.144552][T13320] ? show_regs_print_info+0x12/0x12 [ 675.149829][T13320] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 675.156072][T13320] sysfs_warn_dup+0x8a/0xa0 [ 675.160648][T13320] sysfs_do_create_link_sd+0xc0/0x110 [ 675.166115][T13320] device_add+0x83b/0x1050 [ 675.170618][T13320] wiphy_register+0x1d8b/0x2aa0 [ 675.175561][T13320] ? cfg80211_event_work+0x40/0x40 [ 675.180747][T13320] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 675.186891][T13320] ieee80211_register_hw+0x2d48/0x39f0 [ 675.192448][T13320] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 675.198676][T13320] ? ieee80211_register_hw+0xf41/0x39f0 [ 675.204270][T13320] ? ieee80211_register_hw+0xf41/0x39f0 [ 675.209870][T13320] ? ieee80211_tasklet_handler+0x20/0x20 [ 675.215553][T13320] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 675.221502][T13320] ? __debug_object_init+0xed/0x440 [ 675.226757][T13320] ? memset+0x1e/0x40 [ 675.230774][T13320] ? __hrtimer_init+0x189/0x270 [ 675.235660][T13320] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 675.241436][T13320] hwsim_new_radio_nl+0xab7/0xc90 [ 675.246515][T13320] genl_family_rcv_msg_doit+0x22f/0x350 [ 675.252097][T13320] ? end_current_label_crit_section+0x170/0x170 [ 675.258395][T13320] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 675.264394][T13320] ? bpf_lsm_capable+0x5/0x10 [ 675.269120][T13320] ? security_capable+0x85/0xb0 [ 675.274025][T13320] genl_rcv_msg+0x601/0x790 [ 675.278584][T13320] ? genl_bind+0x360/0x360 [ 675.283034][T13320] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 675.289426][T13320] netlink_rcv_skb+0x1ef/0x440 [ 675.294222][T13320] ? genl_bind+0x360/0x360 [ 675.298670][T13320] ? netlink_ack+0x1160/0x1160 [ 675.303477][T13320] ? down_read+0x1a8/0x2d0 [ 675.307928][T13320] genl_rcv+0x24/0x40 [ 675.311974][T13320] netlink_unicast+0x7ad/0x920 [ 675.316776][T13320] netlink_sendmsg+0x8ad/0xbd0 [ 675.321607][T13320] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 675.327808][T13320] ? netlink_getsockopt+0x550/0x550 [ 675.333065][T13320] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 675.338414][T13320] ? security_socket_sendmsg+0x7c/0xa0 [ 675.343929][T13320] ? netlink_getsockopt+0x550/0x550 [ 675.349164][T13320] ____sys_sendmsg+0x5ed/0x9a0 [ 675.353970][T13320] ? __sys_sendmsg_sock+0x30/0x30 [ 675.359024][T13320] ? __import_iovec+0x306/0x510 [ 675.363935][T13320] ? import_iovec+0x6f/0xa0 [ 675.368480][T13320] ___sys_sendmsg+0x2a2/0x360 [ 675.373190][T13320] ? __sys_sendmsg+0x2a0/0x2a0 [ 675.377997][T13320] ? ktime_get+0x7b/0x270 [ 675.382392][T13320] __se_sys_sendmsg+0x1c3/0x2b0 [ 675.387278][T13320] ? ct_nmi_exit+0x145/0x1c0 [ 675.391912][T13320] ? __x64_sys_sendmsg+0x80/0x80 [ 675.396900][T13320] ? lockdep_hardirqs_on+0x94/0x140 [ 675.402143][T13320] do_syscall_64+0x4c/0xa0 [ 675.406591][T13320] ? clear_bhb_loop+0x60/0xb0 [ 675.411339][T13320] ? clear_bhb_loop+0x60/0xb0 [ 675.416079][T13320] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 675.422013][T13320] RIP: 0033:0x7fad5c99e159 [ 675.426456][T13320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 675.446093][T13320] RSP: 002b:00007fad5abf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 675.454571][T13320] RAX: ffffffffffffffda RBX: 00007fad5cc25fa0 RCX: 00007fad5c99e159 [ 675.462584][T13320] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 675.470592][T13320] RBP: 00007fad5ca3506b R08: 0000000000000000 R09: 0000000000000000 [ 675.478589][T13320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 675.486587][T13320] R13: 00007fad5cc26038 R14: 00007fad5cc25fa0 R15: 00007fff09046688 [ 675.494625][T13320] [ 675.986444][T13328] netlink: 5427 bytes leftover after parsing attributes in process `syz.5.2477'. [ 676.084156][T13328] netlink: 52477 bytes leftover after parsing attributes in process `syz.5.2477'. [ 676.146660][T13328] netlink: 71676 bytes leftover after parsing attributes in process `syz.5.2477'. [ 676.267756][T13326] delete_channel: no stack [ 676.866008][T13338] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2480'. [ 677.569368][ T4280] Bluetooth: hci5: command 0x0406 tx timeout [ 678.581715][T13368] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2486'. [ 678.604907][T13368] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 678.626129][T13368] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 681.174992][T13414] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2499'. [ 681.326582][T13414] device hsr_slave_0 left promiscuous mode [ 681.438075][T13414] device hsr_slave_1 left promiscuous mode [ 684.205396][T13432] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 684.486744][T13432] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 684.510427][T13432] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 685.731490][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.737957][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.074760][T13478] netlink: 'syz.4.2518': attribute type 8 has an invalid length. [ 686.205417][T13478] netlink: 'syz.4.2518': attribute type 2 has an invalid length. [ 686.219338][T13478] netlink: 198692 bytes leftover after parsing attributes in process `syz.4.2518'. [ 690.555093][T13482] device syzkaller0 entered promiscuous mode [ 690.563543][T13494] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 690.576130][T13494] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 690.591136][T13494] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 692.827953][T13509] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 692.881201][T13509] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 692.897538][T13509] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 693.731364][T13536] netlink: 'syz.4.2533': attribute type 2 has an invalid length. [ 693.739810][T13536] netlink: 'syz.4.2533': attribute type 1 has an invalid length. [ 693.749119][T13536] netlink: 170140 bytes leftover after parsing attributes in process `syz.4.2533'. [ 693.858048][T13538] netlink: 'syz.0.2532': attribute type 19 has an invalid length. [ 693.885771][T13538] netlink: 14552 bytes leftover after parsing attributes in process `syz.0.2532'. [ 694.035371][T13542] netlink: 'syz.1.2534': attribute type 10 has an invalid length. [ 694.070597][T13542] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2534'. [ 694.112694][T13542] device bridge0 left promiscuous mode [ 694.502882][T13542] team0: Port device bridge0 removed [ 695.273303][T13556] netlink: 'syz.4.2540': attribute type 3 has an invalid length. [ 695.323378][T13556] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2540'. [ 698.226181][T13604] netlink: 'syz.3.2551': attribute type 1 has an invalid length. [ 698.234175][T13604] netlink: 112865 bytes leftover after parsing attributes in process `syz.3.2551'. [ 698.672499][T13581] netlink: 'syz.4.2547': attribute type 27 has an invalid length. [ 698.692888][T13581] netlink: 'syz.4.2547': attribute type 25 has an invalid length. [ 699.424892][T13627] netlink: 'syz.0.2558': attribute type 8 has an invalid length. [ 699.596279][T13627] netlink: 'syz.0.2558': attribute type 2 has an invalid length. [ 699.651113][T13627] netlink: 198692 bytes leftover after parsing attributes in process `syz.0.2558'. [ 700.105866][T13648] Ÿë: port 1(gretap0) entered blocking state [ 700.147285][T13648] Ÿë: port 1(gretap0) entered disabled state [ 700.154734][T13648] device gretap0 entered promiscuous mode [ 700.193884][T13655] netlink: 'syz.0.2567': attribute type 4 has an invalid length. [ 700.267465][T13655] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2567'. [ 701.683611][T13692] mac80211_hwsim hwsim12 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 701.717943][T13694] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.2578'. [ 702.315973][T13714] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.2582'. [ 703.915688][T13738] netlink: 17279 bytes leftover after parsing attributes in process `syz.5.2591'. [ 704.495426][T13743] netlink: 'syz.4.2593': attribute type 10 has an invalid length. [ 706.480538][T13796] netlink: 'syz.3.2606': attribute type 10 has an invalid length. [ 706.871886][T13809] netlink: 10 bytes leftover after parsing attributes in process `syz.5.2609'. [ 707.212464][T13826] device lo entered promiscuous mode [ 707.254357][T13826] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 707.440793][T13830] netlink: 'syz.3.2614': attribute type 16 has an invalid length. [ 707.497468][T13830] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2614'. [ 712.389305][T13878] netlink: 12523 bytes leftover after parsing attributes in process `syz.3.2626'. [ 714.112359][T13905] netlink: 'syz.1.2634': attribute type 10 has an invalid length. [ 714.783573][T13905] device wg1 entered promiscuous mode [ 714.791622][T13905] team0: Device wg1 is of different type [ 716.735904][T13947] bridge0: port 3(batadv0) entered blocking state [ 716.766697][T13947] bridge0: port 3(batadv0) entered disabled state [ 716.865943][T13947] device batadv0 entered promiscuous mode [ 716.889333][T13947] bridge0: port 3(batadv0) entered blocking state [ 716.895931][T13947] bridge0: port 3(batadv0) entered forwarding state [ 716.960826][ T8112] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 716.970268][ T8112] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 717.635481][T13968] netlink: 'syz.3.2649': attribute type 2 has an invalid length. [ 717.742483][T13968] netlink: 119 bytes leftover after parsing attributes in process `syz.3.2649'. [ 718.064435][T13976] netlink: 'syz.5.2652': attribute type 28 has an invalid length. [ 719.456695][T13996] netlink: 134056 bytes leftover after parsing attributes in process `syz.5.2655'. [ 722.414380][T14018] netlink: 'syz.5.2663': attribute type 3 has an invalid length. [ 722.584658][T14020] netlink: 'syz.5.2663': attribute type 3 has an invalid length. [ 722.696220][T14019] netlink: 'syz.5.2663': attribute type 3 has an invalid length. [ 722.887759][T14020] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.2663'. [ 722.939208][T14018] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.2663'. [ 722.990052][T14028] netlink: 'syz.4.2662': attribute type 33 has an invalid length. [ 723.030960][T14019] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.2663'. [ 723.164718][T14028] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2662'. [ 723.758258][T14014] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2660'. [ 723.793620][T14014] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 724.051636][T14014] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 725.331020][T14075] netlink: 'syz.3.2673': attribute type 29 has an invalid length. [ 725.651681][T14051] team0: Port device macvlan0 removed [ 725.688525][T14075] netlink: 'syz.3.2673': attribute type 29 has an invalid length. [ 725.706391][T14078] netlink: 'syz.3.2673': attribute type 29 has an invalid length. [ 725.753212][T14057] delete_channel: no stack [ 726.096624][T14091] netlink: 'syz.0.2677': attribute type 10 has an invalid length. [ 726.121309][T14091] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2677'. [ 726.309221][T14098] netlink: 'syz.3.2678': attribute type 28 has an invalid length. [ 726.937943][T14106] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2680'. [ 726.963002][T14106] device hsr_slave_0 left promiscuous mode [ 727.082108][T14106] device hsr_slave_1 left promiscuous mode [ 727.369339][T14129] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2684'. [ 727.642364][T14133] netlink: 'syz.3.2684': attribute type 2 has an invalid length. [ 727.685899][T14133] netlink: 'syz.3.2684': attribute type 9 has an invalid length. [ 728.145416][T14129] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2684'. [ 728.186862][T14134] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 728.203751][T14134] syzkaller1: linktype set to 773 [ 728.652397][T14140] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2686'. [ 728.693740][T14140] netlink: 'syz.3.2686': attribute type 10 has an invalid length. [ 728.717160][T14140] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2686'. [ 728.760896][T14140] device caif0 entered promiscuous mode [ 728.775814][T14140] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 728.868446][T14143] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2688'. [ 729.101681][T14151] netlink: 'syz.4.2689': attribute type 21 has an invalid length. [ 729.109868][T14151] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2689'. [ 729.170471][T14151] netlink: 'syz.4.2689': attribute type 4 has an invalid length. [ 729.243918][T14151] netlink: 'syz.4.2689': attribute type 3 has an invalid length. [ 729.312531][T14151] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2689'. [ 731.447959][T14159] device wlan1 left promiscuous mode [ 731.483025][T14163] device wlan1 entered promiscuous mode [ 731.561784][T14164] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 731.590460][T14164] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 731.627156][T14164] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 732.423225][T14183] netlink: 'syz.1.2701': attribute type 10 has an invalid length. [ 732.433416][T14183] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2701'. [ 732.467340][T14186] netlink: 'syz.3.2702': attribute type 21 has an invalid length. [ 732.481700][T14186] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2702'. [ 732.492115][T14191] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.2703'. [ 733.719430][T14224] netlink: 'syz.0.2709': attribute type 21 has an invalid length. [ 734.071236][T14241] netlink: 'syz.1.2712': attribute type 2 has an invalid length. [ 734.532628][T14247] device vcan0 entered promiscuous mode [ 734.594713][T14247] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 734.683180][T14250] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2716'. [ 734.722746][T14247] netlink: 15039 bytes leftover after parsing attributes in process `syz.4.2715'. [ 735.733909][T14274] À: port 1(vlan0) entered blocking state [ 735.914787][T14274] À: port 1(vlan0) entered disabled state [ 736.074479][T14274] device vlan0 entered promiscuous mode [ 736.569123][T14295] netlink: 'syz.5.2723': attribute type 21 has an invalid length. [ 736.617415][T14295] netlink: 'syz.5.2723': attribute type 20 has an invalid length. [ 736.857883][T14300] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.2726'. [ 738.110380][T14308] delete_channel: no stack [ 740.087403][T14329] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2734'. [ 742.328573][T14371] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2749'. [ 742.355941][T14371] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2749'. [ 742.369167][T14375] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2750'. [ 742.381200][T14376] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2749'. [ 742.416595][T14371] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2749'. [ 742.498977][T14378] netlink: 14556 bytes leftover after parsing attributes in process `syz.0.2752'. [ 742.568957][T14378] netlink: 14556 bytes leftover after parsing attributes in process `syz.0.2752'. [ 742.605492][T14380] batman_adv: batadv0: Interface deactivated: vlan1 [ 742.868283][T14380] batman_adv: batadv0: Removing interface: vlan1 [ 744.315375][T14436] netlink: 'syz.4.2766': attribute type 6 has an invalid length. [ 744.397543][T14436] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.2766'. [ 744.534997][T14443] netlink: 'syz.0.2767': attribute type 2 has an invalid length. [ 745.813059][T14467] netlink: 'syz.1.2771': attribute type 39 has an invalid length. [ 746.916075][T14484] netlink: 'syz.3.2775': attribute type 3 has an invalid length. [ 746.927312][T14484] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2775'. [ 746.966833][T14487] netlink: 'syz.3.2775': attribute type 3 has an invalid length. [ 746.976380][T14487] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2775'. [ 746.987771][T14490] netlink: 'syz.3.2775': attribute type 3 has an invalid length. [ 746.995560][T14490] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2775'. [ 747.032005][T14465] netlink: 'syz.1.2771': attribute type 39 has an invalid length. [ 747.040797][T14492] netlink: 'syz.3.2775': attribute type 3 has an invalid length. [ 747.051913][T14491] netlink: 'syz.3.2775': attribute type 3 has an invalid length. [ 747.068203][T14492] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2775'. [ 747.083810][T14491] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2775'. [ 747.112438][T14495] Dead loop on virtual device ip6_vti0, fix it urgently! [ 747.124050][T14495] Dead loop on virtual device ip6_vti0, fix it urgently! [ 747.133004][T14495] Dead loop on virtual device ip6_vti0, fix it urgently! [ 747.141121][T14495] Dead loop on virtual device ip6_vti0, fix it urgently! [ 747.148776][T14495] Dead loop on virtual device ip6_vti0, fix it urgently! [ 747.156251][T14495] Dead loop on virtual device ip6_vti0, fix it urgently! [ 747.189821][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.196385][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.387891][T14511] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.2782'. [ 748.564058][T14516] netlink: 'syz.4.2784': attribute type 2 has an invalid length. [ 748.920383][T14520] device veth0_macvtap left promiscuous mode [ 749.505138][T14536] validate_nla: 1 callbacks suppressed [ 749.505207][T14536] netlink: 'syz.3.2789': attribute type 25 has an invalid length. [ 749.589048][T14536] netlink: 'syz.3.2789': attribute type 29 has an invalid length. [ 749.964447][T14557] netlink: 'syz.4.2795': attribute type 21 has an invalid length. [ 750.047455][T14558] netlink: 'syz.5.2797': attribute type 10 has an invalid length. [ 750.086305][T14558] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2797'. [ 751.663137][ T28] INFO: task rcu_tasks_kthre:12 blocked for more than 143 seconds. [ 751.677750][ T28] Not tainted syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 751.725465][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 751.764234][ T28] task:rcu_tasks_kthre state:D stack:28256 pid:12 ppid:2 flags:0x00004000 [ 751.794609][ T28] Call Trace: [ 751.804281][ T28] [ 751.817768][ T28] __schedule+0x107f/0x4030 [ 751.822411][ T28] ? perf_trace_lock+0xf8/0x390 [ 751.857011][ T28] ? trace_event_raw_event_lock+0x230/0x230 [ 751.871624][ T28] ? release_firmware_map_entry+0x187/0x187 [ 751.901803][ T28] schedule+0xb9/0x180 [ 751.905978][ T28] schedule_timeout+0xbd/0x2d0 [ 751.933384][ T28] ? console_conditional_schedule+0x40/0x40 [ 751.961293][ T28] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 751.991338][ T28] ? __lock_acquire+0x7c40/0x7c40 [ 751.996477][ T28] ? lock_chain_count+0x20/0x20 [ 752.019661][ T28] ? _raw_spin_lock_irq+0xb7/0xf0 [ 752.024792][ T28] ? _raw_spin_lock_irqsave+0x100/0x100 [ 752.057252][ T28] ? _raw_spin_unlock_irq+0x1f/0x40 [ 752.063549][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 752.087019][ T28] ? wait_for_completion+0x26f/0x590 [ 752.092417][ T28] wait_for_completion+0x2c2/0x590 [ 752.117134][ T28] ? io_schedule+0xd0/0xd0 [ 752.121742][ T28] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 752.147014][ T28] ? debug_object_active_state+0x6b/0x380 [ 752.152835][ T28] __synchronize_srcu+0x2b3/0x350 [ 752.187079][ T28] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 752.195853][ T28] ? synchronize_srcu_expedited+0x20/0x20 [ 752.227003][ T28] ? rcu_read_lock_any_held+0x130/0x130 [ 752.232730][ T28] ? ktime_get_mono_fast_ns+0x199/0x1b0 [ 752.257024][ T28] ? synchronize_srcu+0x18f/0x1b0 [ 752.262170][ T28] rcu_tasks_wait_gp+0x49f/0xac0 [ 752.337014][ T28] ? rcu_tasks_wait_gp+0x21a/0xac0 [ 752.342232][ T28] ? lock_chain_count+0x20/0x20 [ 752.407024][ T28] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 752.413028][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 752.497013][ T28] ? rcu_tasks_invoke_cbs+0x670/0x670 [ 752.502520][ T28] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 752.554577][ T28] ? _raw_spin_unlock+0x40/0x40 [ 752.570815][ T28] rcu_tasks_one_gp+0xd27/0xef0 [ 752.575800][ T28] ? rcu_tasks_one_gp+0xe5/0xef0 [ 752.607035][ T28] rcu_tasks_kthread+0x6e/0x90 [ 752.611921][ T28] kthread+0x29d/0x330 [ 752.616114][ T28] ? rcu_tasks_postgp+0x10/0x10 [ 752.642387][ T28] ? kthread_blkcg+0xd0/0xd0 [ 752.649142][ T28] ret_from_fork+0x1f/0x30 [ 752.653775][ T28] [ 752.677160][ T28] [ 752.677160][ T28] Showing all locks held in the system: [ 752.684968][ T28] 4 locks held by kworker/0:0/7: [ 752.704120][ T28] 1 lock held by rcu_tasks_kthre/12: [ 752.715974][ T28] #0: ffffffff8cb2e170 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0 [ 752.731163][T14565] netlink: 'syz.3.2799': attribute type 10 has an invalid length. [ 752.771090][ T28] 2 locks held by rcu_tasks_trace/13: [ 752.776543][ T28] #0: ffffffff8cb2e990 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0 [ 752.799064][T14565] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2799'. [ 752.815207][ T28] #1: ffffffff8cb334b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3c0/0x890 [ 752.843067][T14565] device dummy0 entered promiscuous mode [ 752.853438][ T28] 1 lock held by khungtaskd/28: [ 752.862957][ T28] #0: ffffffff8cb2d7e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 752.911959][ T28] 2 locks held by getty/4028: [ 752.916713][ T28] #0: ffff88802ff71098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 752.930832][ T28] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x41e/0x1360 [ 752.945258][ T28] 1 lock held by syz-executor/4268: [ 752.950869][ T28] 2 locks held by kworker/0:5/4318: [ 752.956117][ T28] #0: ffff888017472138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 752.967417][ T28] #1: ffffc90004367d00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 752.982222][ T28] 4 locks held by kworker/u4:23/8112: [ 752.987704][T14565] bridge0: port 2(dummy0) entered blocking state [ 752.992222][T14565] bridge0: port 2(dummy0) entered disabled state [ 752.994797][ T28] #0: ffff88801761e938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 753.020607][ T28] #1: ffffc900053efd00 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 753.033768][ T28] #2: ffffffff8dd48210 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x148/0xba0 [ 753.075315][T14567] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 753.077382][T14571] netlink: 14463 bytes leftover after parsing attributes in process `syz.4.2801'. [ 753.094814][ T28] #3: ffffffff8cb33380 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x48/0x5e0 [ 753.107083][T14567] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 753.113101][ T28] 1 lock held by syz.0.2796/14553: [ 753.126870][ T28] #0: ffffffff8cb8c708 (bpf_event_mutex){+.+.}-{3:3} [ 753.129118][T14567] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 753.149043][ T28] , at: perf_event_detach_bpf_prog+0x87/0x310 [ 753.155323][ T28] 1 lock held by syz.3.2799/14562: [ 753.162377][ T28] #0: ffffffff8cb8c708 (bpf_event_mutex){+.+.}-{3:3}, at: perf_event_detach_bpf_prog+0x87/0x310 [ 753.177361][ T28] 1 lock held by syz.5.2800/14567: [ 753.182539][ T28] 1 lock held by syz.4.2801/14566: [ 753.198611][ T28] #0: ffff888055ecca10 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x82/0x210 [ 753.231503][ T28] [ 753.235299][ T28] ============================================= [ 753.235299][ T28] [ 753.303769][ T28] NMI backtrace for cpu 0 [ 753.308209][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 753.315418][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 753.326033][ T28] Call Trace: [ 753.329529][ T28] [ 753.332513][ T28] dump_stack_lvl+0x188/0x24e [ 753.337248][ T28] ? ct_irq_enter_irqson+0x170/0x170 [ 753.342692][ T28] ? show_regs_print_info+0x12/0x12 [ 753.347936][ T28] ? load_image+0x410/0x410 [ 753.352490][ T28] ? vprintk_emit+0x59f/0x6a0 [ 753.357258][ T28] ? nmi_cpu_backtrace+0x1cb/0x460 [ 753.362435][ T28] nmi_cpu_backtrace+0x3e6/0x460 [ 753.367432][ T28] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 753.373626][ T28] ? _printk+0xda/0x130 [ 753.377821][ T28] ? load_image+0x410/0x410 [ 753.382354][ T28] ? load_image+0x410/0x410 [ 753.386883][ T28] ? nmi_trigger_cpumask_backtrace+0xf3/0x450 [ 753.392976][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 753.399154][ T28] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 753.405175][ T28] watchdog+0xf0e/0xf50 [ 753.409435][ T28] ? watchdog+0x1ed/0xf50 [ 753.413804][ T28] kthread+0x29d/0x330 [ 753.417903][ T28] ? hungtask_pm_notify+0x40/0x40 [ 753.422987][ T28] ? kthread_blkcg+0xd0/0xd0 [ 753.427625][ T28] ret_from_fork+0x1f/0x30 [ 753.432090][ T28] [ 753.436770][ T28] Sending NMI from CPU 0 to CPUs 1: [ 753.442282][ C1] NMI backtrace for cpu 1 [ 753.442294][ C1] CPU: 1 PID: 14567 Comm: syz.5.2800 Not tainted syzkaller #0 [ 753.442310][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 753.442320][ C1] RIP: 0010:kasan_check_range+0x8a/0x290 [ 753.442352][ C1] Code: 1c 21 49 89 df 4d 29 df 49 83 ff 10 7f 29 4d 85 ff 0f 84 38 01 00 00 4c 89 cb 48 f7 d3 4c 01 f3 41 80 3b 00 0f 85 86 01 00 00 <49> ff c3 48 ff c3 75 ee e9 18 01 00 00 44 89 dd 83 e5 07 0f 84 b5 [ 753.442367][ C1] RSP: 0018:ffffc9000c80f390 EFLAGS: 00000246 [ 753.442382][ C1] RAX: 0000000000000001 RBX: ffffffffffffffff RCX: ffffffff8139037a [ 753.442394][ C1] RDX: 0000000000000001 RSI: 0000000000000010 RDI: ffffc9000c80f4d8 [ 753.442405][ C1] RBP: 0000000000000000 R08: ffffc9000c80f4e7 R09: 1ffff92001901e9c [ 753.442416][ C1] R10: dffffc0000000000 R11: fffff52001901e9c R12: dffffc0000000001 [ 753.442428][ C1] R13: ffffc9000c810000 R14: 1ffff92001901e9b R15: 0000000000000002 [ 753.442440][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 753.442454][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 753.442465][ C1] CR2: 00007f1c8e957e20 CR3: 000000000c88e000 CR4: 00000000003506e0 [ 753.442479][ C1] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 753.442490][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 753.442501][ C1] Call Trace: [ 753.442505][ C1] [ 753.442513][ C1] memset+0x1e/0x40 [ 753.442530][ C1] unwind_next_frame+0x8da/0x1fd0 [ 753.442627][ C1] ? syscall_exit_to_user_mode+0x16/0x40 [ 753.442653][ C1] ? stack_trace_save+0xf0/0xf0 [ 753.442674][ C1] arch_stack_walk+0x10c/0x140 [ 753.442703][ C1] ? do_syscall_64+0x58/0xa0 [ 753.442723][ C1] stack_trace_save+0xa6/0xf0 [ 753.442744][ C1] ? stack_trace_snprint+0xe0/0xe0 [ 753.442771][ C1] save_stack+0x121/0x230 [ 753.442820][ C1] ? __reset_page_owner+0x190/0x190 [ 753.442838][ C1] ? free_unref_page_prepare+0x8e5/0x9e0 [ 753.442889][ C1] ? free_unref_page+0x2e/0x3f0 [ 753.442911][ C1] ? __vunmap+0x874/0xa40 [ 753.442928][ C1] ? kcov_close+0x27/0x50 [ 753.442947][ C1] ? __fput+0x20a/0x8b0 [ 753.442963][ C1] ? task_work_run+0x1d0/0x260 [ 753.442983][ C1] ? do_exit+0x9d5/0x2570 [ 753.443011][ C1] ? do_group_exit+0x229/0x2e0 [ 753.443034][ C1] ? get_signal+0x1259/0x1340 [ 753.443079][ C1] ? arch_do_signal_or_restart+0xc4/0x1310 [ 753.443105][ C1] ? exit_to_user_mode_loop+0x70/0x110 [ 753.443129][ C1] ? exit_to_user_mode_prepare+0xee/0x180 [ 753.443153][ C1] ? syscall_exit_to_user_mode+0x16/0x40 [ 753.443177][ C1] ? page_ext_get+0x1e/0x2a0 [ 753.443202][ C1] ? page_ext_get+0x1de/0x2a0 [ 753.443225][ C1] __reset_page_owner+0x51/0x190 [ 753.443247][ C1] free_unref_page_prepare+0x8e5/0x9e0 [ 753.443270][ C1] ? do_raw_spin_unlock+0x11d/0x230 [ 753.443290][ C1] free_unref_page+0x2e/0x3f0 [ 753.443317][ C1] __vunmap+0x874/0xa40 [ 753.443338][ C1] ? integrity_iint_find+0x51/0x120 [ 753.443366][ C1] ? kcov_open+0x80/0x80 [ 753.443384][ C1] kcov_close+0x27/0x50 [ 753.443402][ C1] __fput+0x20a/0x8b0 [ 753.443423][ C1] task_work_run+0x1d0/0x260 [ 753.443447][ C1] ? task_work_cancel+0x220/0x220 [ 753.443469][ C1] ? do_exit+0x9d0/0x2570 [ 753.443492][ C1] ? kmem_cache_free+0xf7/0x2a0 [ 753.443513][ C1] do_exit+0x9d5/0x2570 [ 753.443544][ C1] ? put_task_struct+0x80/0x80 [ 753.443567][ C1] ? ct_nmi_exit+0x145/0x1c0 [ 753.443591][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 753.443614][ C1] ? _raw_spin_lock_irq+0x86/0xf0 [ 753.443639][ C1] ? lock_chain_count+0x20/0x20 [ 753.443663][ C1] ? _raw_spin_lock_irq+0xb7/0xf0 [ 753.443690][ C1] do_group_exit+0x229/0x2e0 [ 753.443714][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 753.443736][ C1] get_signal+0x1259/0x1340 [ 753.443775][ C1] arch_do_signal_or_restart+0xc4/0x1310 [ 753.443807][ C1] ? task_work_add+0x263/0x330 [ 753.443830][ C1] ? __ia32_sys_pidfd_getfd+0x80/0x80 [ 753.443870][ C1] ? get_sigframe_size+0x10/0x10 [ 753.443909][ C1] ? exit_to_user_mode_loop+0x3b/0x110 [ 753.443937][ C1] exit_to_user_mode_loop+0x70/0x110 [ 753.443971][ C1] exit_to_user_mode_prepare+0xee/0x180 [ 753.443997][ C1] syscall_exit_to_user_mode+0x16/0x40 [ 753.444018][ C1] do_syscall_64+0x58/0xa0 [ 753.444034][ C1] ? clear_bhb_loop+0x60/0xb0 [ 753.444050][ C1] ? clear_bhb_loop+0x60/0xb0 [ 753.444068][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 753.444094][ C1] RIP: 0033:0x7f4966b9e159 [ 753.444107][ C1] Code: Unable to access opcode bytes at 0x7f4966b9e12f. [ 753.444115][ C1] RSP: 002b:00007f4967a62028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 753.444131][ C1] RAX: 0000000000000014 RBX: 00007f4966e25fa0 RCX: 00007f4966b9e159 [ 753.444142][ C1] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000008 [ 753.444152][ C1] RBP: 00007f4966c3506b R08: 0000000000000000 R09: 0000000000000000 [ 753.444162][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 753.444171][ C1] R13: 00007f4966e26038 R14: 00007f4966e25fa0 R15: 00007ffcd4e2ec08 [ 753.444192][ C1] [ 753.534437][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 753.534479][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 753.534538][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 753.534576][ T28] Call Trace: [ 753.534596][ T28] [ 753.534624][ T28] dump_stack_lvl+0x188/0x24e [ 753.534720][ T28] ? memcpy+0x3c/0x60 [ 753.534804][ T28] ? show_regs_print_info+0x12/0x12 [ 753.534869][ T28] ? load_image+0x410/0x410 [ 753.534977][ T28] panic+0x2d3/0x710 [ 753.535049][ T28] ? schedule_preempt_disabled+0x20/0x20 [ 753.535124][ T28] ? bpf_jit_dump+0xd0/0xd0 [ 753.535189][ T28] ? __irq_work_queue_local+0x12c/0x190 [ 753.535293][ T28] ? nmi_trigger_cpumask_backtrace+0x35b/0x450 [ 753.535365][ T28] ? nmi_trigger_cpumask_backtrace+0x360/0x450 [ 753.535437][ T28] watchdog+0xf4d/0xf50 [ 753.535512][ T28] ? watchdog+0x1ed/0xf50 [ 753.535596][ T28] kthread+0x29d/0x330 [ 753.535633][ T28] ? hungtask_pm_notify+0x40/0x40 [ 753.535697][ T28] ? kthread_blkcg+0xd0/0xd0 [ 753.535751][ T28] ret_from_fork+0x1f/0x30 [ 753.535874][ T28] [ 753.541718][ T28] Kernel Offset: disabled [ 754.057930][ T28] Rebooting in 86400 seconds..