last executing test programs: 7m27.233873883s ago: executing program 1 (id=2): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000380), 0x8) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x0, '\x00', 0x0, r0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000003c0)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000580)) write$cgroup_subtree(r2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xe, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r5}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x32}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$kcm(0x10, 0x2, 0x4) close(r6) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)="1800000068006b004100"/24, 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x48010) r7 = socket$kcm(0x2, 0x1, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000380000003800000004000000000000000000000200000000010000000000000e0300000000000000020000000000000f020000000200000000000011030000000000"], 0x0, 0x54}, 0x28) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0xcec}, 0x8) sendmsg$inet(r7, &(0x7f00000010c0)={&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000480)='\\', 0x1}], 0x1}, 0x4000040) r8 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x5, &(0x7f0000000180), 0x43) sendmsg$inet(r8, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000200000008000000", @ANYRES32, @ANYBLOB="ac1414bb008000000000000038000000000000000000000007000000070e43aa5889c23ef593ae6bcd1844187c8073b5c9e00000000600000003000000080000000900001400000000000000000000000100000005000000000000001400000000000000000000000700000001000000000000001400000000000000000000000100000003000000000000001c000000000000000000000008"], 0xc0}, 0x0) sendmsg$inet(r7, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000180)="84", 0x1}], 0x1}, 0x8040) close(r7) gettid() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={r1, &(0x7f00000001c0)="711f41fbc101082f53c876f9821e173e27fa243d93c7c011575bfc89997098c9a7bab873d77db4decbe94cdbdccb7558390eee4c2958f7b6cd455625738f7815ce"}, 0x20) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) 7m26.616255948s ago: executing program 0 (id=1): r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001580), 0x200, 0x0) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001600)={{}, 0x0, 0x0}, 0x20) ioctl$TUNGETVNETLE(r2, 0x40047451, &(0x7f0000001780)) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$kcm(0xa, 0x922000000003, 0x11) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000000340)=@abs={0x0, 0x0, 0x4e24}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x4004005) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080)) r4 = socket$kcm(0x22, 0x2, 0x21) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x80044943, &(0x7f0000000a00)={r4}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000140)='),\'\x00') socket$kcm(0x29, 0x5, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x15, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) r6 = socket$kcm(0x10, 0x3, 0x10) r7 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="1400000016000b63d25a80648c2594f90b24fc60", 0x14}], 0x1}, 0x0) recvmsg(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000100)=""/98, 0x62}, {&(0x7f0000000180)=""/151, 0x97}, {&(0x7f0000000240)=""/139, 0x8b}, {&(0x7f0000000580)=""/4096, 0x1000}], 0x4}, 0x100) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000505d25a806c8c6f94f90524fc600a080a0002000000051d82c137153e374c0c0980fc6310000300", 0x33fe0}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="b40000000000000079109000000000007b0ae8ff0000000095000000feff0000"], &(0x7f00000004c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000001680)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x3f}, 0x48) 7m26.275166716s ago: executing program 3 (id=4): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x4, 0x310c, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002c00)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x140) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x20, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069000c00000000009500740000000000", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x98, &(0x7f000000cf3d)=""/152, 0x0, 0x25, '\x00', 0x0, @fallback=0x5}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x3, 0x0, 0x0, 0x1, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000440)={0x5, 0x80, 0x7, 0x7, 0xa, 0x2, 0x0, 0x1, 0x90, 0x664b021aca3612f, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x6, @perf_bp={&(0x7f0000000400), 0x8}, 0x8004, 0x1, 0x1, 0x0, 0xffff, 0x7, 0x367a, 0x0, 0x806, 0x0, 0x7fffffff}) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00'}, 0x94) r3 = bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x9, 0x80, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x14, 0x0, 0x0, 0x9}, 0x0, 0x80000400000000, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0_vlan\x00'}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r3, 0xffffffffffffffff}, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r4}, 0x0, 0x0}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f0000000080)) 7m26.10573052s ago: executing program 1 (id=5): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0x13, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000009c0)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f0000000a40)="b800000500000000", &(0x7f0000000a80)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x18510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10003, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r2, &(0x7f0000000300)={&(0x7f0000000340)={0x2, 0xfffd, @remote}, 0x10, &(0x7f0000000380)=[{&(0x7f00000003c0)="f5d2b9ed", 0x4}, {&(0x7f0000000400)="4fff54c1020045768718b4da1ceb33c9381f3291be99a909af93cab03a", 0x1d}], 0x2}, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e00000011008108090f9becdb4cb9200a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x20c080, 0x0) ioctl$TUNGETSNDBUF(r5, 0x800454d3, &(0x7f0000000040)) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x8f6, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000078157f0a2ccca6a271a1a314000000b7030000000000008500000083000000bc89000000000073c520b70035090100000000009500000006000000b5080000000000007b9a00fe00000000b50000bf862000b141e5911930e36f86ceb6ca0000000007080000f8ffffffbfa402000000000007040000f0ffffff", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x4000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) 7m25.986919333s ago: executing program 2 (id=3): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000380), 0x8) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x0, '\x00', 0x0, r0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000003c0)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000580)) write$cgroup_subtree(r2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xe, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r5}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x32}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$kcm(0x10, 0x2, 0x4) close(r6) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)="1800000068006b004100"/24, 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x48010) r7 = socket$kcm(0x2, 0x1, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000380000003800000004000000000000000000000200000000010000000000000e0300000000000000020000000000000f020000000200000000000011030000000000"], 0x0, 0x54}, 0x28) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0xcec}, 0x8) sendmsg$inet(r7, &(0x7f00000010c0)={&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000480)='\\', 0x1}], 0x1}, 0x4000040) r8 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x5, &(0x7f0000000180), 0x43) sendmsg$inet(r8, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000200000008000000", @ANYRES32, @ANYBLOB="ac1414bb008000000000000038000000000000000000000007000000070e43aa5889c23ef593ae6bcd1844187c8073b5c9e00000000600000003000000080000000900001400000000000000000000000100000005000000000000001400000000000000000000000700000001000000000000001400000000000000000000000100000003000000000000001c000000000000000000000008"], 0xc0}, 0x0) sendmsg$inet(r7, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000180)="84", 0x1}], 0x1}, 0x8040) close(r7) gettid() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={r1, &(0x7f00000001c0)="711f41fbc101082f53c876f9821e173e27fa243d93c7c011575bfc89997098c9a7bab873d77db4decbe94cdbdccb7558390eee4c2958f7b6cd455625738f7815ce"}, 0x20) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) 7m25.70564504s ago: executing program 3 (id=6): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000380), 0x8) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x0, '\x00', 0x0, r0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000003c0)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000580)) write$cgroup_subtree(r2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xe, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r5}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x32}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$kcm(0x10, 0x2, 0x4) close(r6) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)="1800000068006b004100"/24, 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x48010) r7 = socket$kcm(0x2, 0x1, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000380000003800000004000000000000000000000200000000010000000000000e0300000000000000020000000000000f020000000200000000000011030000000000"], 0x0, 0x54}, 0x28) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0xcec}, 0x8) sendmsg$inet(r7, &(0x7f00000010c0)={&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000480)='\\', 0x1}], 0x1}, 0x4000040) r8 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x5, &(0x7f0000000180), 0x43) sendmsg$inet(r8, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000200000008000000", @ANYRES32, @ANYBLOB="ac1414bb008000000000000038000000000000000000000007000000070e43aa5889c23ef593ae6bcd1844187c8073b5c9e00000000600000003000000080000000900001400000000000000000000000100000005000000000000001400000000000000000000000700000001000000000000001400000000000000000000000100000003000000000000001c000000000000000000000008"], 0xc0}, 0x0) sendmsg$inet(r7, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000180)="84", 0x1}], 0x1}, 0x8040) close(r7) gettid() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={r1, &(0x7f00000001c0)="711f41fbc101082f53c876f9821e173e27fa243d93c7c011575bfc89997098c9a7bab873d77db4decbe94cdbdccb7558390eee4c2958f7b6cd455625738f7815ce"}, 0x20) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) 7m25.402293018s ago: executing program 0 (id=7): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000380), 0x8) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x0, '\x00', 0x0, r0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000003c0)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') r2 = syz_open_procfs$namespace(0xffffffffffffffff, 0x0) write$cgroup_subtree(r2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xe, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r5}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x32}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$kcm(0x10, 0x2, 0x4) close(r6) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)="1800000068006b004100"/24, 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x48010) r7 = socket$kcm(0x2, 0x1, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000380000003800000004000000000000000000000200000000010000000000000e0300000000000000020000000000000f020000000200000000000011030000000000"], 0x0, 0x54}, 0x28) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0xcec}, 0x8) sendmsg$inet(r7, &(0x7f00000010c0)={&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000480)='\\', 0x1}], 0x1}, 0x4000040) r8 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x5, &(0x7f0000000180), 0x43) sendmsg$inet(r8, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000200000008000000", @ANYRES32, @ANYBLOB="ac1414bb008000000000000038000000000000000000000007000000070e43aa5889c23ef593ae6bcd1844187c8073b5c9e00000000600000003000000080000000900001400000000000000000000000100000005000000000000001400000000000000000000000700000001000000000000001400000000000000000000000100000003000000000000001c000000000000000000000008"], 0xc0}, 0x0) sendmsg$inet(r7, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000180)="84", 0x1}], 0x1}, 0x8040) close(r7) gettid() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={r1, &(0x7f00000001c0)="711f41fbc101082f53c876f9821e173e27fa243d93c7c011575bfc89997098c9a7bab873d77db4decbe94cdbdccb7558390eee4c2958f7b6cd455625738f7815ce"}, 0x20) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) 7m25.311606899s ago: executing program 2 (id=8): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000380), 0x8) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x0, '\x00', 0x0, r0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000003c0)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') r2 = syz_open_procfs$namespace(0xffffffffffffffff, 0x0) write$cgroup_subtree(r2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xe, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r5}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x32}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$kcm(0x10, 0x2, 0x4) close(r6) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)="1800000068006b004100"/24, 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x48010) r7 = socket$kcm(0x2, 0x1, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000380000003800000004000000000000000000000200000000010000000000000e0300000000000000020000000000000f020000000200000000000011030000000000"], 0x0, 0x54}, 0x28) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0xcec}, 0x8) sendmsg$inet(r7, &(0x7f00000010c0)={&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000480)='\\', 0x1}], 0x1}, 0x4000040) r8 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x5, &(0x7f0000000180), 0x43) sendmsg$inet(r8, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000200000008000000", @ANYRES32, @ANYBLOB="ac1414bb008000000000000038000000000000000000000007000000070e43aa5889c23ef593ae6bcd1844187c8073b5c9e00000000600000003000000080000000900001400000000000000000000000100000005000000000000001400000000000000000000000700000001000000000000001400000000000000000000000100000003000000000000001c000000000000000000000008"], 0xc0}, 0x0) sendmsg$inet(r7, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000180)="84", 0x1}], 0x1}, 0x8040) close(r7) gettid() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={r1, &(0x7f00000001c0)="711f41fbc101082f53c876f9821e173e27fa243d93c7c011575bfc89997098c9a7bab873d77db4decbe94cdbdccb7558390eee4c2958f7b6cd455625738f7815ce"}, 0x20) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) 7m24.995210958s ago: executing program 3 (id=9): r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x5, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d33, 0x8011, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8002}, 0xc812, 0x32, 0x43a1bd76, 0x2, 0x9, 0x7, 0x2, 0x0, 0x0, 0x0, 0x4002009}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x1f, 0xc, 0x0, &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x5, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) bpf$ITER_CREATE(0xb, &(0x7f0000000740), 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000780)={0x0, r4}, 0x8) perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0xc, 0x0, 0x400, 0x4156, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10563b, 0x0, 0xfffffffe, 0x6, 0x10000, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e000000000000000700400008"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x890b, &(0x7f0000000880)) sendmsg$inet(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)}, 0x4008001) socketpair(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8983, &(0x7f0000000980)='\x02\x00\x00\x00\xbc$j\xfef;q1\xff\xd3r\xa3\xc81U\x8ez.F\xce\xfb\x9c\x19\xf3v\x88\x91\xbct\xb0\x1bLq\x15\x00\xad\t\x13\xf5U\x02\xc9d6q\xc3\xa5\xcd\x01t\r=\xad-\x13\xb0 U\xaaC\xc388\x13\xc6H\x0f \x03\x9e\xa98\xa1\xc3\xe9\x06C\xd4\xb5\x18}4\xa9yA8\x1fQ\xdfN\x8e\xd7m\xee\xb8N\x98\xef\xff\xddR\xec~c\xcb\x93\x84\x7f\\x6\xedZ\x82\xa0\x1by\x17\x1a\xc8\x98\x99\x0f') r7 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x890b, &(0x7f0000000a00)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000a80)=@un=@abs={0x0, 0x0, 0x4e23}, 0x80, 0x0}, 0x20008810) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000b80)={0x5, 0x80, 0xec, 0x7, 0x40, 0x8, 0x0, 0x0, 0xd000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0xfc, 0x4, 0x6, 0x81, 0x100, 0x81, 0x0, 0x4, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x9) r9 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x890c, &(0x7f0000000c00)) r10 = getpid() perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x2, 0x3cd, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, r10, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x80, 0x5, 0x5, 0xfd, 0x0, 0xab, 0x0, 0x6, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x9b, 0x4, @perf_config_ext={0x3ff, 0x8a}, 0x8100, 0x265, 0xcc9, 0x5, 0x7, 0x5512, 0x3, 0x0, 0x4, 0x0, 0x2}, r10, 0xe, r0, 0x0) 7m24.8845197s ago: executing program 0 (id=10): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x1ffffffffffffef3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000"], 0x0, 0x80000, 0x0, 0x0, 0x41000, 0x8}, 0x94) r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={&(0x7f0000000340), 0x2}, 0x0, 0x8, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x8, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r3, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x9, @loopback={0x0, 0x7ffffffe}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x7f) socket$kcm(0x10, 0x400000002, 0x0) r4 = socket$kcm(0x29, 0x5, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$tipc(r5, &(0x7f0000000bc0)={&(0x7f00000000c0)=@name={0x1e, 0x2, 0x2, {{0x0, 0x4}}}, 0x10, &(0x7f0000000b40)=[{&(0x7f0000000100)="011317be0335921648a7e47e784a1f37d00fecb8d94fbee5af0c4dde22b07f4935f267f1e6c8fdfcf2cf036e59ab5cb9199e6f2104b0e3f01b39d9cb3821aaa45413059fea363792", 0x48}, {&(0x7f00000007c0)="bbbe954a5513da5eb434019c50ae9012a24d2fc10ac38abf7fb8235820db54ef7c76e06bfaf5948b82b241c8c5101e510cee7c84fd21f6ffa26a5df1f63b28e28782e82e2a5a24682297453b8fcaa59c98b21cd2f709fd75c345689e9e937109c8eacb1aff124343757c52b8b16356f19c5b8acc713e93aae68d8877e91e9476f60a9963e9eefcf31f2df8d5c05f726301fed99643ece57f2f3e9785547a363650cc60e90c57fdd9fb8852ca9fb53ef0335a652efe8e54fac7ea42df18e5748d665b2577ed520882a23489d3b5267d77106f9478d2c0e7578b0b8bfbf5c6d86cbcdc4d41ffba3279993abb2533", 0xed}, {&(0x7f00000008c0)="8dfd45f42a0f8679e6684e025fe604dde200e30fe8323df3ec3220dd58cba777e07561225eaedd92f6fbbbc5a309f05bb5bc98514fc6a879266dfdd06ee0455cfe84e3d0811bcfa954a9aebb3dd9e4d1607656df87ba04f82fd83f1f43898502de05f1a18f56b4fa208d37b46c6f73eb1fd725dfbadf117a5f1c39c397d6f27b94168508e63a8ef7daa7c7c3cfcd", 0x8e}, {&(0x7f0000000980)="09f2b62785617c1659e0f3c70869dd6ff99b7c9bb72fdcc26aa08131e7507a8603e740315065462e0449dd5b80fe6cf15b86733ebfcfa2ce56f9f332a036eb47a4233870a523ce07c1efbcbaf202a2e27cac0a740977a19130bf4272e2f6c7546b0541957f3f002169e4af6a66c03c78c5644920d0db61a8b1c0c3573ab058a628b85547cb64857037a9cc5e8a33462ce5652c10fc49fbf621c4362500b026ef2a9598f26e9b966c46b9a174af56ce7e653ce286422e9a60ee6bfac23de3b3b6aae19ce9208bf0ad048d9fd776b3af0981", 0xd1}, {&(0x7f0000000a80)="9bc0a3e36510d21f8c7641c1744f46b569b4692e212a8763fc8115394f9930a2449e903282755a9fecc56ef1758280fe7ac510", 0x33}, {&(0x7f0000000ac0)="8dd3ed1e90724d8defd81d8403e6744ad72ef0ebf0605827c5d6bf20517308a52f4cd684e92da2d5df492fc6298c97a3e771cc8ac657bc7585858103441e210eab578892d246d27195760450095b9038d9db4f69f9ad7cdf95f870fc96ce89057fa1e545f7c52d01492d7aff6f3eb9", 0x6f}], 0x6, 0x0, 0x0, 0x80}, 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x8902, &(0x7f00000005c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r6) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r7, &(0x7f0000000600)='memory.current\x00', 0xf0, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x4}, 0x0, 0x0, 0x80000001, 0x5, 0xd, 0xfffffffc, 0x0, 0x0, 0x3, 0x0, 0x1000000000007}, 0x0, 0x9, 0xffffffffffffffff, 0x0) recvmsg(r5, &(0x7f0000000e80)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000000e00)=[{&(0x7f00000006c0)=""/161, 0xa1}, {&(0x7f0000000c00)=""/82, 0x52}, {&(0x7f0000000c80)=""/126, 0x7e}, {&(0x7f0000000d00)=""/127, 0x7f}, {&(0x7f0000000d80)=""/92, 0x5c}], 0x5}, 0x10122) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a00000080000000064242"], 0xfdef) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) 7m24.784307392s ago: executing program 1 (id=11): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000380), 0x8) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x0, '\x00', 0x0, r0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000003c0)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000580)) write$cgroup_subtree(r2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xe, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r5}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x32}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$kcm(0x10, 0x2, 0x4) close(r6) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)="1800000068006b004100"/24, 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x48010) r7 = socket$kcm(0x2, 0x1, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000380000003800000004000000000000000000000200000000010000000000000e0300000000000000020000000000000f020000000200000000000011030000000000"], 0x0, 0x54}, 0x28) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0xcec}, 0x8) sendmsg$inet(r7, &(0x7f00000010c0)={&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000480)='\\', 0x1}], 0x1}, 0x4000040) r8 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x5, &(0x7f0000000180), 0x43) sendmsg$inet(r8, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000200000008000000", @ANYRES32, @ANYBLOB="ac1414bb008000000000000038000000000000000000000007000000070e43aa5889c23ef593ae6bcd1844187c8073b5c9e00000000600000003000000080000000900001400000000000000000000000100000005000000000000001400000000000000000000000700000001000000000000001400000000000000000000000100000003000000000000001c000000000000000000000008"], 0xc0}, 0x0) sendmsg$inet(r7, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000180)="84", 0x1}], 0x1}, 0x8040) close(r7) gettid() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={r1, &(0x7f00000001c0)="711f41fbc101082f53c876f9821e173e27fa243d93c7c011575bfc89997098c9a7bab873d77db4decbe94cdbdccb7558390eee4c2958f7b6cd455625738f7815ce"}, 0x20) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) 7m24.658788306s ago: executing program 2 (id=12): ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080207000000040000a118000200e01d000000000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x2, 0x1000000000000002, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000001c40)={&(0x7f00000002c0)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000001c00)=[{&(0x7f0000000340)="a2d26cc5", 0x4}, {&(0x7f0000000380)="2def93befa8dc92a0ff98b1d802952767c95aaf0af45bebdef6ce7fc065ca257a9730d6c7aa4f674a8d10bc8509ecc82d8ab0a9f04074dc42aff3dc36404453781cfa36437e6282b8d", 0x49}, {&(0x7f0000000c00)="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", 0x1000}], 0x3}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e1a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080e71113610e10d858e8327edb1fb6c86adac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18c65ae1bd4f4390af9a9ceafd07ed00b0000002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a469398685211bbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72c7ead0509d380578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9624d37c10223fdae7ed04935c3c9068000000bc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b40000000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced84"], 0x0}, 0x94) write$cgroup_devices(r3, &(0x7f0000000740)=ANY=[@ANYBLOB="1e030a004d8c71ef2685634a8270e7123c0000"], 0xffdd) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x0, 0x27}, 0x28) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r5, 0x4010744d, &(0x7f0000000180)) socket$kcm(0x10, 0x2, 0x0) 7m24.556333058s ago: executing program 3 (id=13): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x4, 0x310c, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002c00)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x140) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x20, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069000c00000000009500740000000000", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x98, &(0x7f000000cf3d)=""/152, 0x0, 0x25, '\x00', 0x0, @fallback=0x5}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x3, 0x0, 0x0, 0x1, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000440)={0x5, 0x80, 0x7, 0x7, 0xa, 0x2, 0x0, 0x1, 0x90, 0x664b021aca3612f, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x6, @perf_bp={&(0x7f0000000400), 0x8}, 0x8004, 0x1, 0x1, 0x0, 0xffff, 0x7, 0x367a, 0x0, 0x806, 0x0, 0x7fffffff}) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00'}, 0x94) r3 = bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0xe, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000000)={0x9, 0x80, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x14, 0x0, 0x0, 0x9}, 0x0, 0x80000400000000, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0_vlan\x00'}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r3, 0xffffffffffffffff}, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r4}, 0x0, 0x0}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f0000000080)) 7m24.184224918s ago: executing program 1 (id=14): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000380), 0x8) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x0, '\x00', 0x0, r0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000003c0)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000580)) write$cgroup_subtree(r2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0x10, 0x2, 0x4) close(r5) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)="1800000068006b004100"/24, 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x48010) r6 = socket$kcm(0x2, 0x1, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000380000003800000004000000000000000000000200000000010000000000000e0300000000000000020000000000000f020000000200000000000011030000000000"], 0x0, 0x54}, 0x28) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0xcec}, 0x8) sendmsg$inet(r6, &(0x7f00000010c0)={&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000480)='\\', 0x1}], 0x1}, 0x4000040) r7 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x5, &(0x7f0000000180), 0x43) sendmsg$inet(r7, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000200000008000000", @ANYRES32, @ANYBLOB="ac1414bb008000000000000038000000000000000000000007000000070e43aa5889c23ef593ae6bcd1844187c8073b5c9e00000000600000003000000080000000900001400000000000000000000000100000005000000000000001400000000000000000000000700000001000000000000001400000000000000000000000100000003000000000000001c000000000000000000000008"], 0xc0}, 0x0) sendmsg$inet(r6, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000180)="84", 0x1}], 0x1}, 0x8040) close(r6) gettid() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={r1, &(0x7f00000001c0)="711f41fbc101082f53c876f9821e173e27fa243d93c7c011575bfc89997098c9a7bab873d77db4decbe94cdbdccb7558390eee4c2958f7b6cd455625738f7815ce"}, 0x20) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) 7m24.090865279s ago: executing program 3 (id=15): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000380), 0x8) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x0, '\x00', 0x0, r0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000580)) write$cgroup_subtree(r2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xe, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r5}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x32}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$kcm(0x10, 0x2, 0x4) close(r6) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)="1800000068006b004100"/24, 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x48010) r7 = socket$kcm(0x2, 0x1, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000380000003800000004000000000000000000000200000000010000000000000e0300000000000000020000000000000f020000000200000000000011030000000000"], 0x0, 0x54}, 0x28) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0xcec}, 0x8) sendmsg$inet(r7, &(0x7f00000010c0)={&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000480)='\\', 0x1}], 0x1}, 0x4000040) r8 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x5, &(0x7f0000000180), 0x43) sendmsg$inet(r8, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000200000008000000", @ANYRES32, @ANYBLOB="ac1414bb008000000000000038000000000000000000000007000000070e43aa5889c23ef593ae6bcd1844187c8073b5c9e00000000600000003000000080000000900001400000000000000000000000100000005000000000000001400000000000000000000000700000001000000000000001400000000000000000000000100000003000000000000001c000000000000000000000008"], 0xc0}, 0x0) sendmsg$inet(r7, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000180)="84", 0x1}], 0x1}, 0x8040) close(r7) gettid() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={r1, &(0x7f00000001c0)="711f41fbc101082f53c876f9821e173e27fa243d93c7c011575bfc89997098c9a7bab873d77db4decbe94cdbdccb7558390eee4c2958f7b6cd455625738f7815ce"}, 0x20) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) 7m23.851731096s ago: executing program 0 (id=16): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000380), 0x8) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x0, '\x00', 0x0, r0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000580)) write$cgroup_subtree(r2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xe, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r5}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x32}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$kcm(0x10, 0x2, 0x4) close(r6) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)="1800000068006b004100"/24, 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x48010) r7 = socket$kcm(0x2, 0x1, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000380000003800000004000000000000000000000200000000010000000000000e0300000000000000020000000000000f020000000200000000000011030000000000"], 0x0, 0x54}, 0x28) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0xcec}, 0x8) sendmsg$inet(r7, &(0x7f00000010c0)={&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000480)='\\', 0x1}], 0x1}, 0x4000040) r8 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x5, &(0x7f0000000180), 0x43) sendmsg$inet(r8, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000200000008000000", @ANYRES32, @ANYBLOB="ac1414bb008000000000000038000000000000000000000007000000070e43aa5889c23ef593ae6bcd1844187c8073b5c9e00000000600000003000000080000000900001400000000000000000000000100000005000000000000001400000000000000000000000700000001000000000000001400000000000000000000000100000003000000000000001c000000000000000000000008"], 0xc0}, 0x0) sendmsg$inet(r7, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000180)="84", 0x1}], 0x1}, 0x8040) close(r7) gettid() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={r1, &(0x7f00000001c0)="711f41fbc101082f53c876f9821e173e27fa243d93c7c011575bfc89997098c9a7bab873d77db4decbe94cdbdccb7558390eee4c2958f7b6cd455625738f7815ce"}, 0x20) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) 7m22.82297248s ago: executing program 3 (id=17): bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@o_path={0x0}, 0x18) r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000040) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000000)=@bpf_lsm={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00'}, 0x94) socket$kcm(0x2, 0x5, 0x84) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x5, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x5, 0x1ff}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, 0x0, 0x300060c1) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r6 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r6, &(0x7f00000003c0)={&(0x7f0000000400)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, 0x0, 0x18}, 0x4008804) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$kcm(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)}, 0x1) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_lsm={0x6, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000791077470000", @ANYRES32], &(0x7f0000000600)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x66}, 0x94) mkdir(&(0x7f0000000640)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10c) r7 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r7, &(0x7f0000001640)={&(0x7f0000001680)=@ax25={{0x3, @bcast, 0x7}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x80, &(0x7f0000001700)=[{&(0x7f0000001740)="80", 0x1}], 0x1, &(0x7f0000001780)=[{0x10, 0x84, 0x8}, {0x148, 0x84, 0x0, "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"}], 0x158}, 0x880) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000001940)={r2, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socket$kcm(0x2, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000001a00)={0x0, 0x20, &(0x7f0000001a40)=[{&(0x7f0000001a80)="2e00000011008b88040f80ec59acbc0413a1f8480f0000005e2900421803001825000a001400000002800000121f", 0x2e}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x30, &(0x7f0000000100), 0x33eb) 7m22.812785851s ago: executing program 0 (id=18): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000380), 0x8) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x0, '\x00', 0x0, r0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000580)) write$cgroup_subtree(r2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xe, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r5}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x32}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$kcm(0x10, 0x2, 0x4) close(r6) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)="1800000068006b004100"/24, 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x48010) r7 = socket$kcm(0x2, 0x1, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000380000003800000004000000000000000000000200000000010000000000000e0300000000000000020000000000000f020000000200000000000011030000000000"], 0x0, 0x54}, 0x28) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0xcec}, 0x8) sendmsg$inet(r7, &(0x7f00000010c0)={&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000480)='\\', 0x1}], 0x1}, 0x4000040) r8 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x5, &(0x7f0000000180), 0x43) sendmsg$inet(r8, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000200000008000000", @ANYRES32, @ANYBLOB="ac1414bb008000000000000038000000000000000000000007000000070e43aa5889c23ef593ae6bcd1844187c8073b5c9e00000000600000003000000080000000900001400000000000000000000000100000005000000000000001400000000000000000000000700000001000000000000001400000000000000000000000100000003000000000000001c000000000000000000000008"], 0xc0}, 0x0) sendmsg$inet(r7, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000180)="84", 0x1}], 0x1}, 0x8040) close(r7) gettid() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={r1, &(0x7f00000001c0)="711f41fbc101082f53c876f9821e173e27fa243d93c7c011575bfc89997098c9a7bab873d77db4decbe94cdbdccb7558390eee4c2958f7b6cd455625738f7815ce"}, 0x20) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) 7m22.767853172s ago: executing program 1 (id=19): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x98, 0x1, 0x0, 0x0, 0x0, 0xad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x402, 0x0, 0xfffffffe, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x80001, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x3, &(0x7f0000000bc0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21bef5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a835701bea8240399c56ce8f58df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f9ac2f7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63bb20e1e0469f7615f67a9218cbace38f5236821314f76302b98afa93044b83989339ca10e6ae30e70e17a82f03e915b8425e8e7a91614306d2ae0bc3550d856f2d7293672b5673d264fc886b0c8bdf436a0fcd21bf9da7bdca98e34cd6e59b0a7ce4ba1b466561aaa35448dff47bb1d7df23d467689a6669e4300d5acf12e4d0b35abf91569f605b2f6df0d861"], &(0x7f0000001480)='GPL\x00', 0x5, 0x252, &(0x7f00000014c0)=""/195}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r0, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x1e, &(0x7f0000000780)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000007c0), &(0x7f0000000800), 0x8, 0x6e, 0x8, 0x8, &(0x7f0000000840)}}, 0x10) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b40)={&(0x7f00000009c0)=ANY=[@ANYBLOB="9feb010018000000000000009c0000009c000000030000000b00000000000010080000000000000000000003000000000200000004000000060000000500000009000093000000000c0000000e000000010000000d00000001040000260000000100000001040000010100000100000000000100040000000c0000000a000000080000bc0200000080000000000000000a00000002000000000000000f000000ff0f00000000000007000000ffff000002000000003000"], &(0x7f0000000a80)=""/190, 0xb7, 0xbe, 0x1, 0x3ff, 0x10000}, 0x28) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001840)=@generic={&(0x7f0000001800)='./file0\x00'}, 0x18) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000018c0)=@generic={&(0x7f0000001880)='./file0\x00', 0x0, 0x10}, 0xfffffffffffffeb1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001980)=@bpf_ext={0x1c, 0xb, &(0x7f0000000500)=@raw=[@call={0x85, 0x0, 0x0, 0x41}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x10}, @initr0={0x18, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x7}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x1}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x5}], &(0x7f0000000580)='syzkaller\x00', 0x4, 0xf8, &(0x7f00000005c0)=""/248, 0x41100, 0x0, '\x00', r2, 0x0, r3, 0x8, &(0x7f0000001780)={0x9, 0x5}, 0x8, 0x10, &(0x7f00000017c0)={0x5, 0x7, 0x80000001, 0x81}, 0x10, 0x82e4, r0, 0x0, &(0x7f0000001900)=[r4, r5], &(0x7f0000001940), 0x10, 0x2}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000015c0)) bpf$PROG_LOAD(0x5, &(0x7f0000001b00)={0x1f, 0x4, &(0x7f0000001bc0)=ANY=[@ANYBLOB="180000000500204f741f8b076752000085000000b20000009500000000000000"], &(0x7f0000001d00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)}, 0x14) socket$kcm(0xa, 0x3, 0x73) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001600)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x0, 0xf, 0x0, 0x3, 0x0, 0xfae, 0x2402c, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1008, 0x1, @perf_bp={0x0, 0x1}, 0x91400, 0xc9, 0xfffffffd, 0x9, 0xdf1e, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) recvmsg$unix(r1, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001700)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) r10 = socket$kcm(0x10, 0x2, 0x0) r11 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x5}, 0x104101, 0x6, 0x0, 0x1, 0x0, 0xffffffff, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000001c00)={0x5, 0x5, &(0x7f0000001cc0)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000001d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r11, 0x40042408, r12) r13 = socket$kcm(0x22, 0x2, 0x21) ioctl$sock_kcm_SIOCKCMATTACH(r13, 0x80044943, &(0x7f0000001d80)={r13}) sendmsg$inet(r10, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000001a80)="5c00000013006bcd9e3fe3d46e48aa31086b8703130000001f000000000000000800030018000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c902d1938037e73f07d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) write$cgroup_subtree(r9, &(0x7f0000000140)=ANY=[@ANYRESDEC=r8, @ANYRES8=0x0, @ANYRESOCT=r7], 0x9a) 7m22.710807043s ago: executing program 2 (id=20): socketpair(0x1, 0x2, 0x0, &(0x7f00000000c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x50}, 0x50) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000001c0)=r0, 0x161) r2 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x1, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x17b397b4dcd54698}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x20000}, 0x102065, 0x0, 0x0, 0x3, 0x7, 0x1, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r1, &(0x7f0000000680)={&(0x7f00000006c0)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000740), 0xff7a}], 0x1, &(0x7f0000000780)=[@ip_tos_u8={{0x11, 0x34000}}, @ip_pktinfo={{0x1c, 0xfd000f00, 0x8, {0x0, @remote, @multicast1}}}, @ip_pktinfo={{0x1c, 0x28f0700, 0x8, {0x0, @empty=0xa0050000}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0x88, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}}, @ip_tos_u8={{0x11}}], 0x98}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x2, 0x640a9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4e}, [@ldst={0x7}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x23) 6m40.561011323s ago: executing program 32 (id=18): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000380), 0x8) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x0, '\x00', 0x0, r0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000580)) write$cgroup_subtree(r2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xe, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r5}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x32}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$kcm(0x10, 0x2, 0x4) close(r6) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)="1800000068006b004100"/24, 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x48010) r7 = socket$kcm(0x2, 0x1, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000380000003800000004000000000000000000000200000000010000000000000e0300000000000000020000000000000f020000000200000000000011030000000000"], 0x0, 0x54}, 0x28) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0xcec}, 0x8) sendmsg$inet(r7, &(0x7f00000010c0)={&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000480)='\\', 0x1}], 0x1}, 0x4000040) r8 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x5, &(0x7f0000000180), 0x43) sendmsg$inet(r8, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000200000008000000", @ANYRES32, @ANYBLOB="ac1414bb008000000000000038000000000000000000000007000000070e43aa5889c23ef593ae6bcd1844187c8073b5c9e00000000600000003000000080000000900001400000000000000000000000100000005000000000000001400000000000000000000000700000001000000000000001400000000000000000000000100000003000000000000001c000000000000000000000008"], 0xc0}, 0x0) sendmsg$inet(r7, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000180)="84", 0x1}], 0x1}, 0x8040) close(r7) gettid() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={r1, &(0x7f00000001c0)="711f41fbc101082f53c876f9821e173e27fa243d93c7c011575bfc89997098c9a7bab873d77db4decbe94cdbdccb7558390eee4c2958f7b6cd455625738f7815ce"}, 0x20) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) 6m40.161311013s ago: executing program 33 (id=19): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x98, 0x1, 0x0, 0x0, 0x0, 0xad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x402, 0x0, 0xfffffffe, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x80001, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x3, &(0x7f0000000bc0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21bef5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a835701bea8240399c56ce8f58df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f9ac2f7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63bb20e1e0469f7615f67a9218cbace38f5236821314f76302b98afa93044b83989339ca10e6ae30e70e17a82f03e915b8425e8e7a91614306d2ae0bc3550d856f2d7293672b5673d264fc886b0c8bdf436a0fcd21bf9da7bdca98e34cd6e59b0a7ce4ba1b466561aaa35448dff47bb1d7df23d467689a6669e4300d5acf12e4d0b35abf91569f605b2f6df0d861"], &(0x7f0000001480)='GPL\x00', 0x5, 0x252, &(0x7f00000014c0)=""/195}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r0, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x1e, &(0x7f0000000780)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000007c0), &(0x7f0000000800), 0x8, 0x6e, 0x8, 0x8, &(0x7f0000000840)}}, 0x10) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b40)={&(0x7f00000009c0)=ANY=[@ANYBLOB="9feb010018000000000000009c0000009c000000030000000b00000000000010080000000000000000000003000000000200000004000000060000000500000009000093000000000c0000000e000000010000000d00000001040000260000000100000001040000010100000100000000000100040000000c0000000a000000080000bc0200000080000000000000000a00000002000000000000000f000000ff0f00000000000007000000ffff000002000000003000"], &(0x7f0000000a80)=""/190, 0xb7, 0xbe, 0x1, 0x3ff, 0x10000}, 0x28) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001840)=@generic={&(0x7f0000001800)='./file0\x00'}, 0x18) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000018c0)=@generic={&(0x7f0000001880)='./file0\x00', 0x0, 0x10}, 0xfffffffffffffeb1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001980)=@bpf_ext={0x1c, 0xb, &(0x7f0000000500)=@raw=[@call={0x85, 0x0, 0x0, 0x41}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x10}, @initr0={0x18, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x7}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x1}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x5}], &(0x7f0000000580)='syzkaller\x00', 0x4, 0xf8, &(0x7f00000005c0)=""/248, 0x41100, 0x0, '\x00', r2, 0x0, r3, 0x8, &(0x7f0000001780)={0x9, 0x5}, 0x8, 0x10, &(0x7f00000017c0)={0x5, 0x7, 0x80000001, 0x81}, 0x10, 0x82e4, r0, 0x0, &(0x7f0000001900)=[r4, r5], &(0x7f0000001940), 0x10, 0x2}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000015c0)) bpf$PROG_LOAD(0x5, &(0x7f0000001b00)={0x1f, 0x4, &(0x7f0000001bc0)=ANY=[@ANYBLOB="180000000500204f741f8b076752000085000000b20000009500000000000000"], &(0x7f0000001d00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)}, 0x14) socket$kcm(0xa, 0x3, 0x73) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001600)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x0, 0xf, 0x0, 0x3, 0x0, 0xfae, 0x2402c, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1008, 0x1, @perf_bp={0x0, 0x1}, 0x91400, 0xc9, 0xfffffffd, 0x9, 0xdf1e, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) recvmsg$unix(r1, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001700)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) r10 = socket$kcm(0x10, 0x2, 0x0) r11 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x5}, 0x104101, 0x6, 0x0, 0x1, 0x0, 0xffffffff, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000001c00)={0x5, 0x5, &(0x7f0000001cc0)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000001d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r11, 0x40042408, r12) r13 = socket$kcm(0x22, 0x2, 0x21) ioctl$sock_kcm_SIOCKCMATTACH(r13, 0x80044943, &(0x7f0000001d80)={r13}) sendmsg$inet(r10, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000001a80)="5c00000013006bcd9e3fe3d46e48aa31086b8703130000001f000000000000000800030018000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c902d1938037e73f07d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) write$cgroup_subtree(r9, &(0x7f0000000140)=ANY=[@ANYRESDEC=r8, @ANYRES8=0x0, @ANYRESOCT=r7], 0x9a) 6m39.751517283s ago: executing program 34 (id=20): socketpair(0x1, 0x2, 0x0, &(0x7f00000000c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x50}, 0x50) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000001c0)=r0, 0x161) r2 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x1, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x17b397b4dcd54698}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x20000}, 0x102065, 0x0, 0x0, 0x3, 0x7, 0x1, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r1, &(0x7f0000000680)={&(0x7f00000006c0)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000740), 0xff7a}], 0x1, &(0x7f0000000780)=[@ip_tos_u8={{0x11, 0x34000}}, @ip_pktinfo={{0x1c, 0xfd000f00, 0x8, {0x0, @remote, @multicast1}}}, @ip_pktinfo={{0x1c, 0x28f0700, 0x8, {0x0, @empty=0xa0050000}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0x88, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}}, @ip_tos_u8={{0x11}}], 0x98}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x2, 0x640a9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4e}, [@ldst={0x7}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x23) 6m39.297913354s ago: executing program 35 (id=17): bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@o_path={0x0}, 0x18) r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000040) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000000)=@bpf_lsm={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00'}, 0x94) socket$kcm(0x2, 0x5, 0x84) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x5, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x5, 0x1ff}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, 0x0, 0x300060c1) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r6 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r6, &(0x7f00000003c0)={&(0x7f0000000400)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, 0x0, 0x18}, 0x4008804) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$kcm(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)}, 0x1) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_lsm={0x6, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000791077470000", @ANYRES32], &(0x7f0000000600)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x66}, 0x94) mkdir(&(0x7f0000000640)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10c) r7 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r7, &(0x7f0000001640)={&(0x7f0000001680)=@ax25={{0x3, @bcast, 0x7}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x80, &(0x7f0000001700)=[{&(0x7f0000001740)="80", 0x1}], 0x1, &(0x7f0000001780)=[{0x10, 0x84, 0x8}, {0x148, 0x84, 0x0, "8a6f2839b81b858dc12129c41d42799573c54a41cc432d74f3b6ebd1660c53e31542ca5f33b5ced37c3178d875070000003767bd46bbce4b8a091c4c6fd76f87cf6a3168d1aa50dd4f6252fbd523b398eeace8fd407d19938bb2c3fe03ad9ce56fb3f077772ed95c229f605de41cd232febaf4f369b082e2bff7a67c7adf16fe987b2d02cfd57ae39d50c8c88843288639bae082d21a990b581901b04f2d620456f3f7ffa0f4f7ca8df1da8d132907a5a88b1bfb119f2df6be006919148eff1181a19404eb8dfc320f571ba7c33139dece489faaa4f115f20008900ee912c7b4fe4f9fc7188d6dbcba061f26d537ee27cff6ec7538f96bf9b02d4534646273e396b7c464d9473798336cbc951713152f7df472f7d8967f519447000000000000000000098f304c6c0dd395910bd8f63336"}], 0x158}, 0x880) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000001940)={r2, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socket$kcm(0x2, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000001a00)={0x0, 0x20, &(0x7f0000001a40)=[{&(0x7f0000001a80)="2e00000011008b88040f80ec59acbc0413a1f8480f0000005e2900421803001825000a001400000002800000121f", 0x2e}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x30, &(0x7f0000000100), 0x33eb) 3.621909842s ago: executing program 4 (id=3020): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x1ffffffffffffef3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000"], 0x0, 0x80000, 0x0, 0x0, 0x41000, 0x8}, 0x94) r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={&(0x7f0000000340), 0x2}, 0x0, 0x8, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x8, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r3, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x9, @loopback={0x0, 0x7ffffffe}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x7f) socket$kcm(0x10, 0x400000002, 0x0) r4 = socket$kcm(0x29, 0x5, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$tipc(r5, &(0x7f0000000bc0)={&(0x7f00000000c0)=@name={0x1e, 0x2, 0x2, {{0x0, 0x4}}}, 0x10, &(0x7f0000000b40)=[{&(0x7f0000000100)="011317be0335921648a7e47e784a1f37d00fecb8d94fbee5af0c4dde22b07f4935f267f1e6c8fdfcf2cf036e59ab5cb9199e6f2104b0e3f01b39d9cb3821aaa45413059fea363792", 0x48}, {&(0x7f00000007c0)="bbbe954a5513da5eb434019c50ae9012a24d2fc10ac38abf7fb8235820db54ef7c76e06bfaf5948b82b241c8c5101e510cee7c84fd21f6ffa26a5df1f63b28e28782e82e2a5a24682297453b8fcaa59c98b21cd2f709fd75c345689e9e937109c8eacb1aff124343757c52b8b16356f19c5b8acc713e93aae68d8877e91e9476f60a9963e9eefcf31f2df8d5c05f726301fed99643ece57f2f3e9785547a363650cc60e90c57fdd9fb8852ca9fb53ef0335a652efe8e54fac7ea42df18e5748d665b2577ed520882a23489d3b5267d77106f9478d2c0e7578b0b8bfbf5c6d86cbcdc4d41ffba3279993abb2533", 0xed}, {&(0x7f00000008c0)="8dfd45f42a0f8679e6684e025fe604dde200e30fe8323df3ec3220dd58cba777e07561225eaedd92f6fbbbc5a309f05bb5bc98514fc6a879266dfdd06ee0455cfe84e3d0811bcfa954a9aebb3dd9e4d1607656df87ba04f82fd83f1f43898502de05f1a18f56b4fa208d37b46c6f73eb1fd725dfbadf117a5f1c39c397d6f27b94168508e63a8ef7daa7c7c3cfcd", 0x8e}, {&(0x7f0000000980)="09f2b62785617c1659e0f3c70869dd6ff99b7c9bb72fdcc26aa08131e7507a8603e740315065462e0449dd5b80fe6cf15b86733ebfcfa2ce56f9f332a036eb47a4233870a523ce07c1efbcbaf202a2e27cac0a740977a19130bf4272e2f6c7546b0541957f3f002169e4af6a66c03c78c5644920d0db61a8b1c0c3573ab058a628b85547cb64857037a9cc5e8a33462ce5652c10fc49fbf621c4362500b026ef2a9598f26e9b966c46b9a174af56ce7e653ce286422e9a60ee6bfac23de3b3b6aae19ce9208bf0ad048d9fd776b3af0981", 0xd1}, {0x0}, {&(0x7f0000000ac0)="8dd3ed1e90724d8defd81d8403e6744ad72ef0ebf0605827c5d6bf20517308a52f4cd684e92da2d5df492fc6298c97a3e771cc8ac657bc7585858103441e210eab578892d246d27195760450095b9038d9db4f69f9ad7cdf95f870fc96ce89057fa1e545f7c52d01492d7aff6f3eb9", 0x6f}], 0x6, 0x0, 0x0, 0x80}, 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x8902, &(0x7f00000005c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r6) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r7, &(0x7f0000000600)='memory.current\x00', 0xf0, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x4}, 0x0, 0x0, 0x80000001, 0x5, 0xd, 0xfffffffc, 0x0, 0x0, 0x3, 0x0, 0x1000000000007}, 0x0, 0x9, 0xffffffffffffffff, 0x0) recvmsg(r5, &(0x7f0000000e80)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000000e00)=[{&(0x7f00000006c0)=""/161, 0xa1}, {&(0x7f0000000c00)=""/82, 0x52}, {&(0x7f0000000c80)=""/126, 0x7e}, {&(0x7f0000000d00)=""/127, 0x7f}, {&(0x7f0000000d80)=""/92, 0x5c}], 0x5}, 0x10122) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a00000080000000064242"], 0xfdef) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) 3.399171537s ago: executing program 5 (id=3024): r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) r2 = perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x1, 0xb0, 0xff, 0xd, 0x0, 0x3ff, 0x60208, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x400, 0x0, @perf_bp={&(0x7f0000000180), 0x9}, 0x13003, 0x8, 0x23, 0x8, 0xfffffffffffffff8, 0x7fffffff, 0x3c, 0x0, 0x12000, 0x0, 0x100}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2) perf_event_open$cgroup(&(0x7f00000000c0)={0x1, 0x80, 0x4, 0x8, 0x7, 0x4, 0x0, 0xff07, 0x80010, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x100001, 0x1, 0x2, 0x2, 0x1000, 0x400, 0x5, 0x0, 0x9, 0x0, 0x6}, r1, 0x9, r2, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) r3 = socket$kcm(0x28, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x28, 0x8, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'veth1_macvtap', 0x32, 0x37}, 0x10) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x2, 0xb, 0xb5, 0x0, 0x4, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.27583895s ago: executing program 5 (id=3026): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000880)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000009c0)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @ldst={0x6}]}, &(0x7f0000000a00)='syzkaller\x00', 0x4, 0x4, &(0x7f0000000a40)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x22) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB], 0x0, 0x56}, 0x28) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x4c, 0x8a, 0x0, 0x0, 0x0, 0x3, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x40, 0xc}, 0x0, 0x0, 0x0, 0x1, 0x3fe, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x3) r1 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1080a2, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)="1400000017000b63d25a80648c2594f934a3c92b", 0x14}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0xb, &(0x7f0000000340)=ANY=[@ANYRES8=0x0], &(0x7f00000003c0)='GPL\x00'}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000240)) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0, 0x14}, 0x400, 0x1fe, 0x4, 0x0, 0x4, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x16, 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000041ffffff000000000800000091114d000000000095"], &(0x7f0000000840)='GPL\x00', 0xdea, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x25, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) socket$kcm(0xa, 0x0, 0x11) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000500)="89000000120081ae08060cdc016b3f087f03e3520000000000e2ffca1b1f000000000cc00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120800030004010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8946, 0x0) 2.88216799s ago: executing program 7 (id=3029): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000074000000000000000000b7080000410000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="00000000d5160000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x5, 0x9e, &(0x7f0000000600)=""/4113, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x50}, 0x2c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001640), 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000001680), 0x20702, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000016c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000001740), 0x6e, 0x0, 0x0, &(0x7f00000017c0)=[@cred={{0x1c}}], 0x20}, 0x2) sendmsg$kcm(r2, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000001880)}, 0x20049110) perf_event_open(&(0x7f00000018c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000001940)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x1e, 0x4, 0x0) r6 = socket$kcm(0x1e, 0x4, 0x0) sendmsg$kcm(r6, &(0x7f00000019c0)={&(0x7f0000001a00)=@tipc=@name={0x1e, 0x2, 0x3, {{0x43}, 0x5}}, 0x80, 0x0, 0x0, &(0x7f0000001a80)=ANY=[], 0x1458}, 0x240048c0) setsockopt$sock_attach_bpf(r5, 0x1, 0x10, &(0x7f0000001ac0), 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001b00)={@cgroup, 0xffffffffffffffff, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20) sendmsg$inet(r5, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b80)=[{0x0}], 0x1}, 0x0) recvmsg(r4, &(0x7f0000001bc0)={0x0, 0x0, 0x0}, 0x10000) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000001c00)={0x0, 0xffffff0a, &(0x7f0000001c40)=[{&(0x7f0000001c80)="c018030017000b63d25a80648c2594f92e24fc60100c0200b3000009053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) recvmsg$kcm(r7, &(0x7f0000001cc0)={&(0x7f0000001d00)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, 0x80, &(0x7f0000001d80)=[{&(0x7f0000001dc0)=""/4096, 0x1000}, {&(0x7f0000002dc0)=""/112, 0x70}, {&(0x7f0000002e40)=""/220, 0xdc}, {&(0x7f0000002f40)=""/47, 0x2f}], 0x4, &(0x7f0000002f80)=""/58, 0x3a}, 0x40010162) sendmsg$kcm(r3, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000003000)=[{0x0}], 0x1, 0x0, 0x0, 0xc3ff}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000280)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0xd8}], {0x95, 0x0, 0x700}}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x80) sendmsg$kcm(r2, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003080)=[{&(0x7f00000030c0)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a8001600a400014020000600feffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000031c0)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000003200)={0x3, &(0x7f0000003240)=[{0x4d, 0x1, 0x3, 0x82000000}, {0x61}, {0x25, 0x0, 0x0, 0x8}]}) close(r3) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000003280)={0x3, 0x8, &(0x7f0000003340)=ANY=[@ANYRES8=r0], &(0x7f0000003380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000033c0)={@fallback, r8, 0x2f, 0x2030, 0x4}, 0x20) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x1f, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef438000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) 2.88163156s ago: executing program 5 (id=3030): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x2008, 0x0, 0x0, 0x5, 0x0, 0x6, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3521, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x828, 0x0, 0x0, 0xb, 0x10000, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x16, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x16, 0xb, &(0x7f0000000840)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000009c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x16, 0x3, &(0x7f0000000b00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000bc0)={@ifindex, r1, 0x11, 0x0, 0x0, @void, @value=0x0}, 0x20) (async) socket$kcm(0x10, 0x3, 0x10) (async) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (async) r3 = socket$kcm(0x29, 0x2, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@base={0xe, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000c80)={r4, &(0x7f0000000cc0)}, 0x20) (async) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f00000002c0)) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000b40)={r2}, 0x8) (async) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r5) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') (async) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x0, 0xe, 0x0, &(0x7f0000000600)='\x00'/14, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.63783249s ago: executing program 4 (id=3033): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2800000002000000, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x3, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x0, 0xca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@o_path={0x0}, 0x18) r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xc, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x2, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$kcm(0x25, 0x1, 0x0) recvmsg$kcm(r1, 0x0, 0x160) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r2, 0x1, 0x31, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x30, &(0x7f0000000300), 0x4) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000340)='devices.deny\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@fallback=r1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, &(0x7f0000000400)=[0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r3 = socket$kcm(0x2, 0x922000000001, 0x106) sendmsg$kcm(r3, 0x0, 0x20000000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r4 = socket$kcm(0xa, 0x6, 0x0) sendmsg$kcm(r4, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x4000000) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0xa0}, 0x4004881) perf_event_open(&(0x7f00000007c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x12, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(0x0, 0xd0939199c36b4d28) mkdir(&(0x7f0000000880)='./cgroup/file0/file0\x00', 0x81) 1.520014123s ago: executing program 5 (id=3034): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f0000000980), 0x4) sendmsg$kcm(r0, &(0x7f00000009c0)={&(0x7f0000000a00)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000ac0)="f4000900062b3325fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) (fail_nth: 1) 1.329366437s ago: executing program 4 (id=3035): socket$kcm(0x2, 0x3, 0x2) (async) r0 = socket$kcm(0x10, 0x2, 0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="48000000140081fb7059ae08060c040002fff903905800000000000000006fabca3b4e7d06a6bd7c00000000030000068a562ad6e74703c48f93bc06020000004603b886a5e54f8f", 0x48}], 0x1}, 0x4000000) (async, rerun: 32) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) (rerun: 32) r2 = openat$cgroup_subtree(r1, &(0x7f00000000c0), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="59561deb6fe7d805581e43ee256a33bd9f103f36e929ec29bf35603a9fe03182ce38bfde377491e7fd24441a7538cdc03beb1f6f57900d1a1ac692b4c53c85a2858df48f23dd8a71bc3fd69899a38f09cb87ca67d4c813f481eceff41dc6fb897b69f92923b35ab3a40c7dfab71a3116ba79e9ff4e2bc0b9f37f979e780a757d1bd04090e6a15e94e1c92c28e79679afaf58c549112abed849de"], 0x6) write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00'], 0x6) (async, rerun: 32) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="2b706572665f6576656e5b187d9a94e418a643b4c97a742037626c6b696f202d6e65745f636c73202d70696473202d68756765746c6220"], 0x37) (rerun: 32) 1.276135419s ago: executing program 5 (id=3036): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001580), 0x200, 0x0) close(r1) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) ioctl$TUNGETVNETLE(r1, 0x40047451, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000000340)=@abs={0x0, 0x0, 0x4e24}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x4004005) r2 = socket$kcm(0x22, 0x2, 0x21) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x80044943, &(0x7f0000000a00)={r2}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) socket$kcm(0x29, 0x5, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x15, 0x0, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) recvmsg(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000100)=""/98, 0x62}, {&(0x7f0000000180)=""/151, 0x97}, {&(0x7f0000000240)=""/139, 0x8b}, {&(0x7f0000000580)=""/4096, 0x1000}], 0x4}, 0x100) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000505d25a806c8c6f94f90524fc600a080a0002000000051d82c137153e374c0c0980fc6310000300", 0x33fe0}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="b40000000000000079109000000000007b0ae8ff0000000095000000feff0000"], &(0x7f00000004c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000001680)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x3f}, 0x48) 1.195743731s ago: executing program 7 (id=3038): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000004c0)=@in6={0xa, 0x4e21, 0x0, @empty, 0xffffffff}, 0x80, 0x0, 0x0, 0x0, 0x90}, 0x0) r0 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000800)="0217000902000000e4a07c45c8d260c9", 0x10}], 0x1}, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(r1, &(0x7f0000000540)={&(0x7f0000000580)={0x2, 0x0, @rand_addr=0x64010102}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000600)='f', 0x1}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="20000000000000008400000008"], 0x20}, 0x0) sendmsg$inet(r1, &(0x7f0000000680)={&(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000740)='&', 0x1}], 0x1, &(0x7f0000000780)=ANY=[], 0x20}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000006"], 0x66) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x9, 0x0, 0x0, 0xf2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x19}, 0x0, 0xc8, 0x6, 0x0, 0x3, 0x0, 0x400, 0x0, 0xffffffff}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x7, 0x4, 0x900, 0x5, 0x28}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x9, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000050000850000001b000000b700000018000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000280)={r4}, 0xc) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r3, &(0x7f0000000300), &(0x7f0000000440)=""/95}, 0x20) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000), 0xfdef) 1.194599411s ago: executing program 4 (id=3039): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1f, 0x1, 0xfffffffd, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x10, 0x400000002, 0x0) (async) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="110000001e007f109e", 0x9}, {&(0x7f0000000180)="78cafb73fc020107", 0x8}], 0x2}, 0x0) (async) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="110000001e007f109e", 0x9}, {&(0x7f0000000180)="78cafb73fc020107", 0x8}], 0x2}, 0x0) socket$kcm(0x2b, 0x1, 0x0) (async) r4 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r4, 0x6, 0x8, &(0x7f0000000300)=r4, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r1}, 0x8) r5 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r1}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0xe, 0xd, &(0x7f0000000480)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x6, 0x8b, &(0x7f0000000500)=""/139}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000640)="d8000000100081044e81f782db44b904021d080b01000000e8fe55a1180015000600142603600e1208001800", 0x2c}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000700)="d8001c00180081064e81f782db44b9b545c7910006007c09e8fe55a10a0017", 0x1f}], 0x1}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000700)="d8001c00180081064e81f782db44b9b545c7910006007c09e8fe55a10a0017", 0x1f}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000007c0)="d8000000210081044e81f7d28344b904020000", 0x2}], 0x1}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000800)=ANY=[], 0x33fe0) (async) write$cgroup_subtree(r6, &(0x7f0000000800)=ANY=[], 0x33fe0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000340)=""/62, 0x1a, 0x3e, 0x0, 0x1, 0x10000, @value=r5}, 0x28) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) 1.074647344s ago: executing program 6 (id=3040): r0 = bpf$MAP_CREATE(0x1400000000000000, 0x0, 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000040000000200"], 0x0, 0x34}, 0x28) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x8000, 0x5, 0x3, 0xaaf04684de878bda, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe49, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0000000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000001007de0b7030000010000006a0a00fe00000000850000000d000000b700000001000000950000000000000075cd67b5b18065752a3ad500000000000000cb450063bc36005400000000000000ff7f00000001000000000000000000cb04fcbb0b5ba9918d37b056b9bbd11b6b9f260000000000008062d77e84cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fb4845124ef2e487204000000aaf75e5cc4051ade12f41deff6df6a936b4ec3827c739bb39aadffcc75fe369258673b5d053bdec75dca377232a790bce5a6f087ae8f5e64be2c9d2d29db3d36dd015c7bd3f15aa6aadbeab2a01685108e61aa000000000000000000000000008b798b4f7458d1863cc67d4c6a06e828e5216f601b19db9af1b5d356d0f062137d866d11be4b1260b06cca9098a3f0151fdbbd4e97d62ecc6405003a60f1c6edc76683073909826151e2b42bf0ed0c8cef3ba2a730a00c87c493db845b10e9468bdaeecc952a3fd2c46f3c1cde71a19d1a2982492abaa96765372831210e00d2bfea3b8df2eff8d56aaae7d32a2e183722537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f22542c133aadafdc96fdb49cc992dbdd5ac01ba51508951c7a7c5f5093bd6ca0916c3a12912715649c2b1c7193a4251b59d378d0616a48c7957e122665c8b7e89eddfc3783f000000000000000050572061dfb5248d3d4a1c37dcb92d9ef99e2f638f7eb12f63be72a3d817b324d6e417b1c2cbfdcada0a16e31790e26cf19524cf30f810da3204f4c93f4f5d7321acfefc4d1c9139ca4b65b9990995000000000000000000000000000000c8a3988cca41217c950554bb043cf364d709c2bf3ec46b75f1bce43e726210b53d362072bc120c076b4647afc595d97c288f5017088ac2b02ed97fc883a102ae6000044542e3aa7ada6d13ff93ec634a0fa0b5f41ed317b48b8b8c03b243d6e14b7087e2c5d41f8a51408e27283b54d04212cbb0f5af76b70b1bdcec7c0abe6407e7fa204b9919490af8bffca6fbbd2174a84328af4acc9c7ec655729125fc15da558cb6edfcdd0c3fca7130863d13369f79f1d13ac166249e4bffa4a272a0116b591a63bfca11205d216b34000000000000000045b5ade570aeb7cf89e900004dc6c89355082bdcb0b08b810cf63fd19a17f4d440f1546e8e5f8addedb88c7f7990947505d2fcd8cb14"], &(0x7f0000000c00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000c40), 0x0, 0x10, &(0x7f0000000c80), 0x237}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0, 0xffffffffffffffff}, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000600)={0xffffffffffffffff, 0x4, 0x18}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x1a, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, @map_val={0x18, 0x1, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x18580}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @call={0x85, 0x0, 0x0, 0x43}, @exit]}, &(0x7f0000000540)='GPL\x00', 0x10001, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000580)={0x0, 0x2}, 0x8, 0x10, &(0x7f00000005c0)={0x5, 0x2, 0x4, 0x5}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000640)=[r0, r3, r0, r0, r0, r0, r0], &(0x7f0000000680)=[{0x1, 0x3, 0x2, 0x6}, {0x3, 0x2, 0x10, 0xb}, {0x4, 0x10001, 0x7, 0x6}, {0x3, 0x5, 0x3, 0x7}, {0x5, 0x5, 0xb}, {0x5, 0x5, 0xf, 0x8}, {0x3, 0x1, 0x10, 0xb}], 0x10, 0x1b1}, 0x94) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x7, 0xa, 0x8, 0x0, 0x0, 0x8, 0x2, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x3, 0x5}, 0xa03, 0x4, 0x8, 0x17, 0x5, 0x1, 0xfff, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x8, 0x92}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) 1.035596385s ago: executing program 4 (id=3041): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f00000019c0)={&(0x7f0000001a00)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10, &(0x7f0000001a40)=[{&(0x7f0000001a80)='P;', 0x2}], 0x1, &(0x7f0000001ac0)=[@ip_retopts={{0x10}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x100}}], 0x28}, 0xc000840) (fail_nth: 12) 593.569455ms ago: executing program 4 (id=3042): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x1ffffffffffffef3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000"], 0x0, 0x80000, 0x0, 0x0, 0x41000, 0x8}, 0x94) r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={&(0x7f0000000340), 0x2}, 0x0, 0x8, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x8, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r3, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x9, @loopback={0x0, 0x7ffffffe}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x7f) socket$kcm(0x10, 0x400000002, 0x0) r4 = socket$kcm(0x29, 0x5, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$tipc(r5, &(0x7f0000000bc0)={&(0x7f00000000c0)=@name={0x1e, 0x2, 0x2, {{0x0, 0x4}}}, 0x10, &(0x7f0000000b40)=[{&(0x7f0000000100)="011317be0335921648a7e47e784a1f37d00fecb8d94fbee5af0c4dde22b07f4935f267f1e6c8fdfcf2cf036e59ab5cb9199e6f2104b0e3f01b39d9cb3821aaa45413059fea363792", 0x48}, {&(0x7f00000007c0)="bbbe954a5513da5eb434019c50ae9012a24d2fc10ac38abf7fb8235820db54ef7c76e06bfaf5948b82b241c8c5101e510cee7c84fd21f6ffa26a5df1f63b28e28782e82e2a5a24682297453b8fcaa59c98b21cd2f709fd75c345689e9e937109c8eacb1aff124343757c52b8b16356f19c5b8acc713e93aae68d8877e91e9476f60a9963e9eefcf31f2df8d5c05f726301fed99643ece57f2f3e9785547a363650cc60e90c57fdd9fb8852ca9fb53ef0335a652efe8e54fac7ea42df18e5748d665b2577ed520882a23489d3b5267d77106f9478d2c0e7578b0b8bfbf5c6d86cbcdc4d41ffba3279993abb2533", 0xed}, {&(0x7f00000008c0)="8dfd45f42a0f8679e6684e025fe604dde200e30fe8323df3ec3220dd58cba777e07561225eaedd92f6fbbbc5a309f05bb5bc98514fc6a879266dfdd06ee0455cfe84e3d0811bcfa954a9aebb3dd9e4d1607656df87ba04f82fd83f1f43898502de05f1a18f56b4fa208d37b46c6f73eb1fd725dfbadf117a5f1c39c397d6f27b94168508e63a8ef7daa7c7c3cfcd", 0x8e}, {&(0x7f0000000980)="09f2b62785617c1659e0f3c70869dd6ff99b7c9bb72fdcc26aa08131e7507a8603e740315065462e0449dd5b80fe6cf15b86733ebfcfa2ce56f9f332a036eb47a4233870a523ce07c1efbcbaf202a2e27cac0a740977a19130bf4272e2f6c7546b0541957f3f002169e4af6a66c03c78c5644920d0db61a8b1c0c3573ab058a628b85547cb64857037a9cc5e8a33462ce5652c10fc49fbf621c4362500b026ef2a9598f26e9b966c46b9a174af56ce7e653ce286422e9a60ee6bfac23de3b3b6aae19ce9208bf0ad048d9fd776b3af0981", 0xd1}, {&(0x7f0000000a80)}, {&(0x7f0000000ac0)="8dd3ed1e90724d8defd81d8403e6744ad72ef0ebf0605827c5d6bf20517308a52f4cd684e92da2d5df492fc6298c97a3e771cc8ac657bc7585858103441e210eab578892d246d27195760450095b9038d9db4f69f9ad7cdf95f870fc96ce89057fa1e545f7c52d01492d7aff6f3eb9", 0x6f}], 0x6, 0x0, 0x0, 0x80}, 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x8902, &(0x7f00000005c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r6) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r7, &(0x7f0000000600)='memory.current\x00', 0xf0, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x4}, 0x0, 0x0, 0x80000001, 0x5, 0xd, 0xfffffffc, 0x0, 0x0, 0x3, 0x0, 0x1000000000007}, 0x0, 0x9, 0xffffffffffffffff, 0x0) recvmsg(r5, &(0x7f0000000e80)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000000e00)=[{&(0x7f00000006c0)=""/161, 0xa1}, {&(0x7f0000000c00)=""/82, 0x52}, {&(0x7f0000000c80)=""/126, 0x7e}, {&(0x7f0000000d00)=""/127, 0x7f}, {&(0x7f0000000d80)=""/92, 0x5c}], 0x5}, 0x10122) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a00000080000000064242"], 0xfdef) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) 592.884045ms ago: executing program 6 (id=3043): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2800000002000000, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x3, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x0, 0xca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@o_path={0x0}, 0x18) r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xc, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x2, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$kcm(0x25, 0x1, 0x0) recvmsg$kcm(r1, 0x0, 0x160) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r2, 0x1, 0x31, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x30, &(0x7f0000000300), 0x4) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000340)='devices.deny\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@fallback=r1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, &(0x7f0000000400)=[0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r3 = socket$kcm(0x2, 0x922000000001, 0x106) sendmsg$kcm(r3, 0x0, 0x20000000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r4 = socket$kcm(0xa, 0x6, 0x0) sendmsg$kcm(r4, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x4000000) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0xa0}, 0x4004881) perf_event_open(&(0x7f00000007c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x12, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(0x0, 0xd0939199c36b4d28) mkdir(&(0x7f0000000880)='./cgroup/file0/file0\x00', 0x81) 505.265758ms ago: executing program 6 (id=3044): socketpair(0xa, 0x800, 0x7ffffff, &(0x7f0000000080)={0x0, 0x0}) close(r0) r1 = socket$kcm(0x10, 0x2, 0x4) setsockopt$sock_attach_bpf(r0, 0x10e, 0x2, &(0x7f0000000040)=r1, 0x4) 427.851389ms ago: executing program 6 (id=3045): ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x40047451, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) socket$kcm(0x22, 0x2, 0x21) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x15, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="1400000016000b63d25a80648c2594f90b24fc60", 0x14}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000100)=""/98, 0x62}, {&(0x7f0000000180)=""/151, 0x97}, {&(0x7f0000000240)=""/139, 0x8b}, {&(0x7f0000000580)=""/4096, 0x1000}], 0x4}, 0x100) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000505d25a806c8c6f94f90524fc600a080a0002000000051d82c137153e374c0c0980fc63100003", 0x2d}], 0x1}, 0x0) 419.0905ms ago: executing program 6 (id=3046): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x16, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18040000000000000000000000000000180000002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], &(0x7f00000005c0)='GPL\x00'}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="180000008f08000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000700000085000000a000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000008c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x1, 0x0, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x1, 0x2}, 0x2006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9febfc99bf61d712f45998917ca7a3010018000000000000006247f767f2960c0000000c00000002000000000000000000000d"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000800000000000000000850000004100000095000000000000004be98911ed523cf4451d51e400cbd30efbb0a73ceb2b050a456c3a6cfd127868ad3fe3f9a9b946c97f9fc091e4c3f4b0a0d7ed298717a480c48868162ff933958cb6a5265519fee4cb1b8b93f0b164770fd40c7a8060ce72beff7cda177e281ef0b7a1a97b2c8c5617bff8c9441a45fd951df19a9c6e933500000000000000"], &(0x7f0000000880)='GPL\x00', 0x4, 0x1000, &(0x7f00000010c0)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) perf_event_open(&(0x7f00000002c0)={0x4, 0x80, 0x7, 0xf7, 0x5, 0xf9, 0x0, 0x6, 0x8008, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x2, @perf_config_ext={0x3, 0x100000}, 0x1200, 0x0, 0x7986, 0x2, 0x3, 0x3ff, 0xff, 0x0, 0xb, 0x0, 0x10000}, 0x0, 0x7, r1, 0x9) socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f00000020c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x3, 0x40}, 0x8000, 0x5, 0x2, 0x7, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002140)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000021c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x19, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000c40)={r5}, 0xc) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002200)={0x1f, 0x15, &(0x7f00000022c0)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000002380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffed4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000023c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001040)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000840)="b9ff03316845268cb89614f00800", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 327.690842ms ago: executing program 7 (id=3047): r0 = socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x3, 0x904b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x11efa, 0x4, 0x9b, 0x4, 0x1d, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1400000033000b2f1bdc0f13b67e58c316920fd2", 0x14}], 0x1}, 0x448d0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000009b000000850000002300000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x14, 0xe40, &(0x7f0000000340)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000380)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$inet(r0, &(0x7f00000019c0)={&(0x7f0000001a00)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10, &(0x7f0000001a40)=[{&(0x7f0000001a80)='P;', 0x2}], 0x1, &(0x7f0000001ac0)=[@ip_retopts={{0x10}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x100}}], 0x28}, 0xc000840) 257.699153ms ago: executing program 5 (id=3048): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000074000000000000000000b7080000410000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="00000000d5160000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x5, 0x9e, &(0x7f0000000600)=""/4113, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x50}, 0x2c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001640), 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000001680), 0x20702, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000016c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000001740), 0x6e, 0x0, 0x0, &(0x7f00000017c0)=[@cred={{0x1c}}], 0x20}, 0x2) sendmsg$kcm(r2, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000001880)}, 0x20049110) perf_event_open(&(0x7f00000018c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000001940)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x1e, 0x4, 0x0) r6 = socket$kcm(0x1e, 0x4, 0x0) sendmsg$kcm(r6, &(0x7f00000019c0)={&(0x7f0000001a00)=@tipc=@name={0x1e, 0x2, 0x3, {{0x43}, 0x5}}, 0x80, 0x0, 0x0, &(0x7f0000001a80)=ANY=[], 0x1458}, 0x240048c0) setsockopt$sock_attach_bpf(r5, 0x1, 0x10, &(0x7f0000001ac0), 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001b00)={@cgroup, 0xffffffffffffffff, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20) sendmsg$inet(r5, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b80)=[{0x0}], 0x1}, 0x0) recvmsg(r4, &(0x7f0000001bc0)={0x0, 0x0, 0x0}, 0x10000) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000001c00)={0x0, 0xffffff0a, &(0x7f0000001c40)=[{&(0x7f0000001c80)="c018030017000b63d25a80648c2594f92e24fc60100c0200b3000009053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) recvmsg$kcm(r7, &(0x7f0000001cc0)={&(0x7f0000001d00)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, 0x80, &(0x7f0000001d80)=[{&(0x7f0000001dc0)=""/4096, 0x1000}, {&(0x7f0000002dc0)=""/112, 0x70}, {&(0x7f0000002e40)=""/220, 0xdc}, {&(0x7f0000002f40)=""/47, 0x2f}], 0x4, &(0x7f0000002f80)=""/58, 0x3a}, 0x40010162) sendmsg$kcm(r3, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000003000)=[{0x0}], 0x1, 0x0, 0x0, 0xc3ff}, 0x0) sendmsg$kcm(r2, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003080)=[{&(0x7f00000030c0)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a8001600a400014020000600feffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000031c0)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000003200)={0x3, &(0x7f0000003240)=[{0x4d, 0x1, 0x3, 0x82000000}, {0x61}, {0x25, 0x0, 0x0, 0x8}]}) close(r3) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000003280)={0x3, 0x8, &(0x7f0000003340)=ANY=[@ANYRES8=r0], &(0x7f0000003380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000033c0)={@fallback, r8, 0x2f, 0x2030, 0x4}, 0x20) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x1f, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef438000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) (fail_nth: 6) 257.157253ms ago: executing program 6 (id=3049): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={0x0}, 0x10, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x9b, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x100e4a, 0x0, 0xfffffffd, 0x0, 0x17}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x15, 0x2000000000000216, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x7, 0xc, &(0x7f0000000600)=ANY=[], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000740)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10508, 0x400000, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = socket$kcm(0x2, 0x1, 0x84) r6 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f00000007c0), 0x161) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$inet(r5, &(0x7f0000000800)={&(0x7f0000000840)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x4000040) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x400c000) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r7, &(0x7f0000000900)={&(0x7f0000000940)=@hci, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000a00)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r8, &(0x7f0000000b00)={0x0, 0x334ecc4b, &(0x7f0000000b40)=[{&(0x7f0000000b80)="a2", 0xfffffdef}], 0x1}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 191.832506ms ago: executing program 7 (id=3050): r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016", 0x33}], 0x1, 0x0, 0x0, 0x7400}, 0x4004c50) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={0x0, 0x0, 0x46, 0x0, 0x6}, 0x28) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="d8001c00180081064e81f782db44b9b545c7910006007c09e8fe55a10a0017", 0x1f}], 0x1}, 0x8000) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="d8000000210081044e81f7d28344b904020000", 0x2}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000004c0)=ANY=[], 0x33fe0) sendmsg$kcm(r0, &(0x7f0000000400)={&(0x7f00000005c0)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x4e22, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000000640)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x2004fc10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000040)={{r2, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)='%pS \x00'}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r3, 0x0, &(0x7f0000000140)=""/157}, 0x20) close(r0) 136.831356ms ago: executing program 7 (id=3051): r0 = bpf$MAP_CREATE(0x1400000000000000, 0x0, 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000040000000200"], 0x0, 0x34}, 0x28) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x8000, 0x5, 0x3, 0xaaf04684de878bda, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe49, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000c00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000c40), 0x0, 0x10, &(0x7f0000000c80), 0x237}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0, 0xffffffffffffffff}, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000600)={0xffffffffffffffff, 0x4, 0x18}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x1a, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, @map_val={0x18, 0x1, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x18580}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @call={0x85, 0x0, 0x0, 0x43}, @exit]}, &(0x7f0000000540)='GPL\x00', 0x10001, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000580)={0x0, 0x2}, 0x8, 0x10, &(0x7f00000005c0)={0x5, 0x2, 0x4, 0x5}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000640)=[r0, r3, r0, r0, r0, r0, r0], &(0x7f0000000680)=[{0x1, 0x3, 0x2, 0x6}, {0x3, 0x2, 0x10, 0xb}, {0x4, 0x10001, 0x7, 0x6}, {0x3, 0x5, 0x3, 0x7}, {0x5, 0x5, 0xb}, {0x5, 0x5, 0xf, 0x8}, {0x3, 0x1, 0x10, 0xb}], 0x10, 0x1b1}, 0x94) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x7, 0xa, 0x8, 0x0, 0x0, 0x8, 0x2, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x3, 0x5}, 0xa03, 0x4, 0x8, 0x17, 0x5, 0x1, 0xfff, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x8, 0x92}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) 0s ago: executing program 7 (id=3052): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2800000002000000, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x3, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x0, 0xca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@o_path={0x0}, 0x18) r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xc, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x2, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$kcm(0x25, 0x1, 0x0) recvmsg$kcm(r1, 0x0, 0x160) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r2, 0x1, 0x31, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x30, &(0x7f0000000300), 0x4) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000340)='devices.deny\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@fallback=r1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, &(0x7f0000000400)=[0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r3 = socket$kcm(0x2, 0x922000000001, 0x106) sendmsg$kcm(r3, 0x0, 0x20000000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r4 = socket$kcm(0xa, 0x6, 0x0) sendmsg$kcm(r4, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x4000000) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0xa0}, 0x4004881) perf_event_open(&(0x7f00000007c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x12, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(0x0, 0xd0939199c36b4d28) mkdir(&(0x7f0000000880)='./cgroup/file0/file0\x00', 0x81) kernel console output (not intermixed with test programs): 434.105960][T13417] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 434.112321][T13417] sctp_connect_new_asoc+0x2f9/0x6a0 [ 434.117641][T13417] ? __sctp_connect+0xd80/0xd80 [ 434.122519][T13417] ? __local_bh_enable_ip+0x13a/0x1c0 [ 434.127923][T13417] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 434.133491][T13417] ? security_sctp_bind_connect+0x89/0xb0 [ 434.139233][T13417] sctp_sendmsg+0x1519/0x27b0 [ 434.143950][T13417] ? sctp_getsockopt+0xb60/0xb60 [ 434.148903][T13417] ? aa_af_perm+0x330/0x330 [ 434.153403][T13417] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 434.159825][T13417] ? sock_rps_record_flow+0x19/0x3f0 [ 434.165137][T13417] ? inet_sendmsg+0xce/0x2a0 [ 434.169748][T13417] ? inet_send_prepare+0x250/0x250 [ 434.174875][T13417] ____sys_sendmsg+0x61b/0x980 [ 434.179679][T13417] ? __sys_sendmsg_sock+0x30/0x30 [ 434.184734][T13417] ? __import_iovec+0x5f2/0x850 [ 434.189620][T13417] ? import_iovec+0x73/0xa0 [ 434.194151][T13417] ___sys_sendmsg+0x2a6/0x360 [ 434.198849][T13417] ? get_pid_task+0x20/0x1e0 [ 434.203466][T13417] ? __sys_sendmsg+0x2b0/0x2b0 [ 434.208280][T13417] ? __lock_acquire+0x7eb0/0x7eb0 [ 434.213351][T13417] __se_sys_sendmsg+0x1d0/0x2c0 [ 434.218231][T13417] ? __x64_sys_sendmsg+0x80/0x80 [ 434.223219][T13417] ? lockdep_hardirqs_on+0x98/0x150 [ 434.228456][T13417] do_syscall_64+0x55/0xb0 [ 434.232905][T13417] ? clear_bhb_loop+0x40/0x90 [ 434.237601][T13417] ? clear_bhb_loop+0x40/0x90 [ 434.242302][T13417] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 434.248030][T13421] netlink: 'syz.5.2340': attribute type 10 has an invalid length. [ 434.248202][T13417] RIP: 0033:0x7f9a9539e559 [ 434.248223][T13417] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 434.248240][T13417] RSP: 002b:00007f9a96236028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 434.248270][T13417] RAX: ffffffffffffffda RBX: 00007f9a95625fa0 RCX: 00007f9a9539e559 [ 434.256503][T13421] netlink: 181084 bytes leftover after parsing attributes in process `syz.5.2340'. [ 434.260443][T13417] RDX: 0000000000000041 RSI: 0000200000000180 RDI: 0000000000000003 [ 434.260459][T13417] RBP: 00007f9a96236090 R08: 0000000000000000 R09: 0000000000000000 [ 434.260471][T13417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 434.260483][T13417] R13: 00007f9a95626038 R14: 00007f9a95625fa0 R15: 00007fff96596238 [ 434.260513][T13417] [ 434.395947][T13420] delete_channel: no stack [ 434.455881][T13426] netlink: 'syz.6.2342': attribute type 10 has an invalid length. [ 434.465040][T13426] netlink: 181084 bytes leftover after parsing attributes in process `syz.6.2342'. [ 434.505497][T13425] delete_channel: no stack [ 434.612657][T13435] netlink: 'syz.6.2345': attribute type 10 has an invalid length. [ 434.629537][T13435] netlink: 210880 bytes leftover after parsing attributes in process `syz.6.2345'. [ 434.653742][T13433] delete_channel: no stack [ 434.802059][T13446] FAULT_INJECTION: forcing a failure. [ 434.802059][T13446] name failslab, interval 1, probability 0, space 0, times 0 [ 434.820759][T13446] CPU: 1 PID: 13446 Comm: syz.4.2351 Not tainted syzkaller #0 [ 434.828271][T13446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 434.838354][T13446] Call Trace: [ 434.841663][T13446] [ 434.844622][T13446] dump_stack_lvl+0x18c/0x250 [ 434.849330][T13446] ? show_regs_print_info+0x20/0x20 [ 434.854540][T13446] ? load_image+0x420/0x420 [ 434.859054][T13446] ? __lock_acquire+0x7eb0/0x7eb0 [ 434.864094][T13446] should_fail_ex+0x394/0x4c0 [ 434.868785][T13446] should_failslab+0x9/0x20 [ 434.873296][T13446] slab_pre_alloc_hook+0x59/0x300 [ 434.878322][T13446] ? ____sys_sendmsg+0x61b/0x980 [ 434.883273][T13446] ? ___sys_sendmsg+0x2a6/0x360 [ 434.888124][T13446] ? __se_sys_sendmsg+0x1d0/0x2c0 [ 434.893159][T13446] kmem_cache_alloc_node+0x5e/0x310 [ 434.898366][T13446] ? alloc_vmap_area+0x1b4/0x1e50 [ 434.903402][T13446] alloc_vmap_area+0x1b4/0x1e50 [ 434.908286][T13446] ? vm_map_ram+0xcf0/0xcf0 [ 434.912795][T13446] ? rcu_is_watching+0x15/0xb0 [ 434.917586][T13446] __get_vm_area_node+0x162/0x370 [ 434.922636][T13446] __vmalloc_node_range+0x36f/0x1320 [ 434.927932][T13446] ? netlink_sendmsg+0x602/0xbf0 [ 434.932873][T13446] ? netlink_insert+0x1094/0x1390 [ 434.937925][T13446] ? netlink_insert+0x2ba/0x1390 [ 434.942881][T13446] ? free_vm_area+0x50/0x50 [ 434.947403][T13446] ? netlink_sendmsg+0x602/0xbf0 [ 434.952346][T13446] vmalloc+0x79/0x90 [ 434.956250][T13446] ? netlink_sendmsg+0x602/0xbf0 [ 434.961196][T13446] netlink_sendmsg+0x602/0xbf0 [ 434.965980][T13446] ? netlink_getsockopt+0x590/0x590 [ 434.971187][T13446] ? apparmor_socket_sendmsg+0x8e/0x330 [ 434.976753][T13446] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 434.982047][T13446] ? security_socket_sendmsg+0x80/0xa0 [ 434.987506][T13446] ? netlink_getsockopt+0x590/0x590 [ 434.992714][T13446] ____sys_sendmsg+0x61b/0x980 [ 434.997495][T13446] ? __asan_memset+0x22/0x40 [ 435.002090][T13446] ? __sys_sendmsg_sock+0x30/0x30 [ 435.007117][T13446] ? __import_iovec+0x5f2/0x850 [ 435.011986][T13446] ? import_iovec+0x73/0xa0 [ 435.016501][T13446] ___sys_sendmsg+0x2a6/0x360 [ 435.021192][T13446] ? __sys_sendmsg+0x2b0/0x2b0 [ 435.025997][T13446] ? __lock_acquire+0x7eb0/0x7eb0 [ 435.031059][T13446] __se_sys_sendmsg+0x1d0/0x2c0 [ 435.035921][T13446] ? __x64_sys_sendmsg+0x80/0x80 [ 435.040885][T13446] ? lockdep_hardirqs_on+0x98/0x150 [ 435.046091][T13446] do_syscall_64+0x55/0xb0 [ 435.050590][T13446] ? clear_bhb_loop+0x40/0x90 [ 435.055268][T13446] ? clear_bhb_loop+0x40/0x90 [ 435.059946][T13446] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 435.065851][T13446] RIP: 0033:0x7f28cf19e559 [ 435.070266][T13446] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 435.089869][T13446] RSP: 002b:00007f28d007b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 435.098286][T13446] RAX: ffffffffffffffda RBX: 00007f28cf425fa0 RCX: 00007f28cf19e559 [ 435.106344][T13446] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000004 [ 435.114335][T13446] RBP: 00007f28d007b090 R08: 0000000000000000 R09: 0000000000000000 [ 435.122302][T13446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 435.130274][T13446] R13: 00007f28cf426038 R14: 00007f28cf425fa0 R15: 00007ffc76e04558 [ 435.138268][T13446] [ 435.146889][T13446] syz.4.2351: vmalloc error: size 213312, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 435.161554][T13446] CPU: 0 PID: 13446 Comm: syz.4.2351 Not tainted syzkaller #0 [ 435.169037][T13446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 435.179105][T13446] Call Trace: [ 435.182385][T13446] [ 435.185318][T13446] dump_stack_lvl+0x18c/0x250 [ 435.190005][T13446] ? show_regs_print_info+0x20/0x20 [ 435.195208][T13446] ? load_image+0x420/0x420 [ 435.199728][T13446] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 435.206151][T13446] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 435.212658][T13446] warn_alloc+0x246/0x340 [ 435.216993][T13446] ? slab_free_freelist_hook+0x130/0x1a0 [ 435.222629][T13446] ? zone_watermark_ok_safe+0x230/0x230 [ 435.228175][T13446] ? __get_vm_area_node+0x17b/0x370 [ 435.233392][T13446] ? __get_vm_area_node+0x17b/0x370 [ 435.238605][T13446] __vmalloc_node_range+0x394/0x1320 [ 435.243896][T13446] ? netlink_insert+0x1094/0x1390 [ 435.248945][T13446] ? netlink_insert+0x2ba/0x1390 [ 435.253898][T13446] ? free_vm_area+0x50/0x50 [ 435.258418][T13446] ? netlink_sendmsg+0x602/0xbf0 [ 435.263363][T13446] vmalloc+0x79/0x90 [ 435.267261][T13446] ? netlink_sendmsg+0x602/0xbf0 [ 435.272201][T13446] netlink_sendmsg+0x602/0xbf0 [ 435.276983][T13446] ? netlink_getsockopt+0x590/0x590 [ 435.282188][T13446] ? apparmor_socket_sendmsg+0x8e/0x330 [ 435.287740][T13446] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 435.293028][T13446] ? security_socket_sendmsg+0x80/0xa0 [ 435.298492][T13446] ? netlink_getsockopt+0x590/0x590 [ 435.303702][T13446] ____sys_sendmsg+0x61b/0x980 [ 435.308482][T13446] ? __asan_memset+0x22/0x40 [ 435.313082][T13446] ? __sys_sendmsg_sock+0x30/0x30 [ 435.318115][T13446] ? __import_iovec+0x5f2/0x850 [ 435.323037][T13446] ? import_iovec+0x73/0xa0 [ 435.327578][T13446] ___sys_sendmsg+0x2a6/0x360 [ 435.332285][T13446] ? __sys_sendmsg+0x2b0/0x2b0 [ 435.337096][T13446] ? __lock_acquire+0x7eb0/0x7eb0 [ 435.342166][T13446] __se_sys_sendmsg+0x1d0/0x2c0 [ 435.347029][T13446] ? __x64_sys_sendmsg+0x80/0x80 [ 435.351995][T13446] ? lockdep_hardirqs_on+0x98/0x150 [ 435.357206][T13446] do_syscall_64+0x55/0xb0 [ 435.361625][T13446] ? clear_bhb_loop+0x40/0x90 [ 435.366303][T13446] ? clear_bhb_loop+0x40/0x90 [ 435.370981][T13446] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 435.376880][T13446] RIP: 0033:0x7f28cf19e559 [ 435.381296][T13446] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 435.400901][T13446] RSP: 002b:00007f28d007b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 435.409319][T13446] RAX: ffffffffffffffda RBX: 00007f28cf425fa0 RCX: 00007f28cf19e559 [ 435.417291][T13446] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000004 [ 435.425263][T13446] RBP: 00007f28d007b090 R08: 0000000000000000 R09: 0000000000000000 [ 435.433233][T13446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 435.441203][T13446] R13: 00007f28cf426038 R14: 00007f28cf425fa0 R15: 00007ffc76e04558 [ 435.449200][T13446] [ 435.470671][T13446] Mem-Info: [ 435.475221][T13446] active_anon:7647 inactive_anon:0 isolated_anon:0 [ 435.475221][T13446] active_file:18647 inactive_file:40088 isolated_file:0 [ 435.475221][T13446] unevictable:768 dirty:340 writeback:0 [ 435.475221][T13446] slab_reclaimable:11235 slab_unreclaimable:98567 [ 435.475221][T13446] mapped:24674 shmem:1412 pagetables:797 [ 435.475221][T13446] sec_pagetables:0 bounce:0 [ 435.475221][T13446] kernel_misc_reclaimable:0 [ 435.475221][T13446] free:1335309 free_pcp:8049 free_cma:0 [ 435.522262][T13446] Node 0 active_anon:30588kB inactive_anon:0kB active_file:74588kB inactive_file:160148kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98696kB dirty:1360kB writeback:0kB shmem:4112kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12240kB pagetables:3188kB sec_pagetables:0kB all_unreclaimable? no [ 435.555548][T13446] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 435.593630][T13431] delete_channel: no stack [ 435.598573][T13446] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 435.626473][T13446] lowmem_reserve[]: 0 2505 2506 2506 2506 [ 435.632473][T13446] Node 0 DMA32 free:1441308kB boost:0kB min:34508kB low:43132kB high:51756kB reserved_highatomic:0KB active_anon:30448kB inactive_anon:0kB active_file:74588kB inactive_file:159068kB unevictable:1536kB writepending:1360kB present:3129332kB managed:2569932kB mlocked:0kB bounce:0kB free_pcp:12068kB local_pcp:10152kB free_cma:0kB [ 435.664343][T13446] lowmem_reserve[]: 0 0 1 1 1 [ 435.669097][T13446] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:1080kB unevictable:0kB writepending:0kB present:1048576kB managed:1128kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 435.697042][T13446] lowmem_reserve[]: 0 0 0 0 0 [ 435.701801][T13446] Node 1 Normal free:3884568kB boost:0kB min:55380kB low:69224kB high:83068kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:20800kB local_pcp:8036kB free_cma:0kB [ 435.759482][T13446] lowmem_reserve[]: 0 0 0 0 0 [ 435.764569][T13446] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 435.779721][T13446] Node 0 DMA32: 1325*4kB (UM) 1789*8kB (UME) 1690*16kB (UME) 825*32kB (UME) 540*64kB (UME) 374*128kB (UME) 84*256kB (UM) 39*512kB (UME) 27*1024kB (UM) 14*2048kB (UME) 290*4096kB (UM) = 1441116kB [ 435.799554][T13446] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 435.811578][T13446] Node 1 Normal: 176*4kB (UE) 39*8kB (UME) 34*16kB (UME) 44*32kB (UME) 10*64kB (UE) 10*128kB (UME) 1*256kB (U) 3*512kB (UME) 1*1024kB (U) 1*2048kB (E) 946*4096kB (M) = 3884568kB [ 435.858932][T13446] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 435.869945][T13446] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 435.879728][T13446] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 435.883186][T13450] netlink: 'syz.6.2352': attribute type 10 has an invalid length. [ 435.890084][T13446] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 435.906974][T13446] 60147 total pagecache pages [ 435.911680][T13446] 0 pages in swap cache [ 435.919310][T13450] netlink: 181084 bytes leftover after parsing attributes in process `syz.6.2352'. [ 435.919627][T13446] Free swap = 124996kB [ 435.937220][T13446] Total swap = 124996kB [ 435.941536][T13446] 2097051 pages RAM [ 435.947511][T13446] 0 pages HighMem/MovableOnly [ 435.952375][T13446] 421118 pages reserved [ 435.957599][T13446] 0 pages cma reserved [ 435.958870][T13454] netlink: 'syz.5.2360': attribute type 10 has an invalid length. [ 435.977039][T13454] netlink: 210880 bytes leftover after parsing attributes in process `syz.5.2360'. [ 436.014304][T13449] delete_channel: no stack [ 436.304074][T13461] delete_channel: no stack [ 436.393791][T13464] delete_channel: no stack [ 436.580451][T13448] delete_channel: no stack [ 437.058297][ T5783] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 437.067554][ T5783] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 437.078587][ T5783] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 437.094347][ T5783] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 437.109335][ T5783] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 437.117598][ T5783] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 437.135478][T13481] netlink: 'syz.6.2361': attribute type 9 has an invalid length. [ 437.152861][T13481] netlink: 154020 bytes leftover after parsing attributes in process `syz.6.2361'. [ 437.233779][T13476] rxe_eth0 speed is unknown, defaulting to 1000 [ 437.337019][ T8996] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.522467][ T8996] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.619165][ T8996] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.701249][ T8996] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.789974][T13476] chnl_net:caif_netlink_parms(): no params data found [ 437.894541][T13496] delete_channel: no stack [ 437.936317][T13476] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.953016][T13476] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.961603][T13476] bridge_slave_0: entered allmulticast mode [ 437.969589][T13476] bridge_slave_0: entered promiscuous mode [ 437.979999][T13476] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.987738][T13476] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.995948][T13476] bridge_slave_1: entered allmulticast mode [ 438.003838][T13476] bridge_slave_1: entered promiscuous mode [ 438.071432][T13476] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 438.131282][T13476] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 438.177570][T13503] netlink: 'syz.5.2368': attribute type 10 has an invalid length. [ 438.186012][T13503] netlink: 181084 bytes leftover after parsing attributes in process `syz.5.2368'. [ 438.212077][T13476] team0: Port device team_slave_0 added [ 438.226742][T13502] delete_channel: no stack [ 438.230515][T13476] team0: Port device team_slave_1 added [ 438.268559][T13476] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 438.278483][T13476] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 438.306785][T13476] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 438.360231][T13476] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 438.373316][T13476] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 438.416703][T13476] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 438.512438][T13476] hsr_slave_0: entered promiscuous mode [ 438.529655][T13476] hsr_slave_1: entered promiscuous mode [ 438.543471][T13476] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 438.553998][T13476] Cannot create hsr debugfs directory [ 439.215325][ T5783] Bluetooth: hci1: command tx timeout [ 439.224806][T13526] netlink: 65039 bytes leftover after parsing attributes in process `syz.6.2372'. [ 439.714443][ T8996] hsr_slave_0: left promiscuous mode [ 439.786555][ T8996] veth0_macvtap: left promiscuous mode [ 439.792397][ T8996] veth1_vlan: left promiscuous mode [ 439.798301][ T8996] veth0_vlan: left promiscuous mode [ 439.986510][ T8996] geneve1 (unregistering): left promiscuous mode [ 440.007294][ T8996] geneve1 (unregistering): left allmulticast mode [ 440.018615][ T8996] team0 (unregistering): Port device geneve1 removed [ 440.110727][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.117666][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.610258][ T8996] team_slave_1 (unregistering): left promiscuous mode [ 440.617544][ T8996] team_slave_1 (unregistering): left allmulticast mode [ 440.626205][ T8996] team0 (unregistering): Port device team_slave_1 removed [ 441.092490][T13551] delete_channel: no stack [ 441.096646][T13476] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 441.137498][T13476] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 441.165532][T13476] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 441.202349][T13560] netlink: 'syz.7.2377': attribute type 10 has an invalid length. [ 441.212988][T13476] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 441.220778][T13560] netlink: 181084 bytes leftover after parsing attributes in process `syz.7.2377'. [ 441.294474][ T5783] Bluetooth: hci1: command tx timeout [ 441.301900][T13559] delete_channel: no stack [ 441.517470][T13476] 8021q: adding VLAN 0 to HW filter on device bond0 [ 441.599078][T13476] 8021q: adding VLAN 0 to HW filter on device team0 [ 441.829425][T13059] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.836617][T13059] bridge0: port 1(bridge_slave_0) entered forwarding state [ 441.907638][T13059] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.914937][T13059] bridge0: port 2(bridge_slave_1) entered forwarding state [ 441.970541][T13575] FAULT_INJECTION: forcing a failure. [ 441.970541][T13575] name failslab, interval 1, probability 0, space 0, times 0 [ 441.986044][T13575] CPU: 0 PID: 13575 Comm: syz.5.2382 Not tainted syzkaller #0 [ 441.993544][T13575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 442.003606][T13575] Call Trace: [ 442.006881][T13575] [ 442.009809][T13575] dump_stack_lvl+0x18c/0x250 [ 442.014490][T13575] ? show_regs_print_info+0x20/0x20 [ 442.019681][T13575] ? load_image+0x420/0x420 [ 442.024185][T13575] ? __might_sleep+0xe0/0xe0 [ 442.028775][T13575] ? __lock_acquire+0x7eb0/0x7eb0 [ 442.033794][T13575] ? mark_lock+0x94/0x320 [ 442.038124][T13575] should_fail_ex+0x394/0x4c0 [ 442.042801][T13575] should_failslab+0x9/0x20 [ 442.047302][T13575] slab_pre_alloc_hook+0x59/0x300 [ 442.052322][T13575] ? __get_vm_area_node+0x125/0x370 [ 442.057518][T13575] __kmem_cache_alloc_node+0x53/0x250 [ 442.062891][T13575] ? __get_vm_area_node+0x125/0x370 [ 442.068096][T13575] kmalloc_node_trace+0x26/0xe0 [ 442.072948][T13575] __get_vm_area_node+0x125/0x370 [ 442.077979][T13575] __vmalloc_node_range+0x36f/0x1320 [ 442.083261][T13575] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 442.088803][T13575] ? mark_lock+0x94/0x320 [ 442.093132][T13575] ? __lock_acquire+0x1431/0x7eb0 [ 442.098166][T13575] ? aa_get_newest_label+0xfd/0x5c0 [ 442.103361][T13575] ? free_vm_area+0x50/0x50 [ 442.107861][T13575] ? end_current_label_crit_section+0x170/0x170 [ 442.114105][T13575] ? verify_lock_unused+0x140/0x140 [ 442.119300][T13575] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 442.124840][T13575] __vmalloc+0x7a/0x90 [ 442.128913][T13575] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 442.134454][T13575] bpf_prog_alloc_no_stats+0x46/0x430 [ 442.139822][T13575] bpf_prog_alloc+0x3d/0x1a0 [ 442.144415][T13575] bpf_prog_load+0x6b2/0x1610 [ 442.149096][T13575] ? map_freeze+0x420/0x420 [ 442.153597][T13575] ? __might_fault+0xaa/0x120 [ 442.158266][T13575] ? __lock_acquire+0x7eb0/0x7eb0 [ 442.163283][T13575] ? file_end_write+0x159/0x250 [ 442.168135][T13575] ? __might_fault+0xaa/0x120 [ 442.172803][T13575] ? __might_fault+0xc6/0x120 [ 442.177472][T13575] ? __might_fault+0xaa/0x120 [ 442.182144][T13575] ? bpf_lsm_bpf+0x9/0x10 [ 442.186473][T13575] ? security_bpf+0x7e/0xa0 [ 442.190973][T13575] __sys_bpf+0x5ba/0x890 [ 442.195214][T13575] ? bpf_link_show_fdinfo+0x560/0x560 [ 442.200589][T13575] ? lock_chain_count+0x20/0x20 [ 442.205446][T13575] __x64_sys_bpf+0x7c/0x90 [ 442.209857][T13575] do_syscall_64+0x55/0xb0 [ 442.214271][T13575] ? clear_bhb_loop+0x40/0x90 [ 442.218940][T13575] ? clear_bhb_loop+0x40/0x90 [ 442.223613][T13575] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 442.229504][T13575] RIP: 0033:0x7f9186f9e559 [ 442.233915][T13575] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 442.253516][T13575] RSP: 002b:00007f9187e9e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 442.261926][T13575] RAX: ffffffffffffffda RBX: 00007f9187225fa0 RCX: 00007f9186f9e559 [ 442.269894][T13575] RDX: 0000000000000023 RSI: 0000200000000280 RDI: 0000000000000005 [ 442.277855][T13575] RBP: 00007f9187e9e090 R08: 0000000000000000 R09: 0000000000000000 [ 442.285820][T13575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 442.293780][T13575] R13: 00007f9187226038 R14: 00007f9187225fa0 R15: 00007ffd61238e28 [ 442.301775][T13575] [ 442.584453][T13586] delete_channel: no stack [ 442.641757][T13476] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 443.142481][T13476] veth0_vlan: entered promiscuous mode [ 443.157630][T13476] veth1_vlan: entered promiscuous mode [ 443.209887][T13620] FAULT_INJECTION: forcing a failure. [ 443.209887][T13620] name failslab, interval 1, probability 0, space 0, times 0 [ 443.215982][T13476] veth0_macvtap: entered promiscuous mode [ 443.230952][T13620] CPU: 1 PID: 13620 Comm: syz.7.2395 Not tainted syzkaller #0 [ 443.238453][T13620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 443.248515][T13620] Call Trace: [ 443.251790][T13620] [ 443.254719][T13620] dump_stack_lvl+0x18c/0x250 [ 443.259396][T13620] ? show_regs_print_info+0x20/0x20 [ 443.264588][T13620] ? load_image+0x420/0x420 [ 443.269089][T13620] ? __lock_acquire+0x7eb0/0x7eb0 [ 443.274114][T13620] should_fail_ex+0x394/0x4c0 [ 443.278804][T13620] should_failslab+0x9/0x20 [ 443.283308][T13620] slab_pre_alloc_hook+0x59/0x300 [ 443.288326][T13620] ? iovec_from_user+0x87/0x240 [ 443.293180][T13620] ? iovec_from_user+0x87/0x240 [ 443.298029][T13620] __kmem_cache_alloc_node+0x53/0x250 [ 443.303403][T13620] ? iovec_from_user+0x87/0x240 [ 443.308272][T13620] __kmalloc+0xa7/0x240 [ 443.312451][T13620] iovec_from_user+0x87/0x240 [ 443.317146][T13620] __import_iovec+0x13d/0x850 [ 443.321843][T13620] import_iovec+0x73/0xa0 [ 443.326185][T13620] ___sys_sendmsg+0x256/0x360 [ 443.330866][T13620] ? get_pid_task+0x20/0x1e0 [ 443.335460][T13620] ? __sys_sendmsg+0x2b0/0x2b0 [ 443.340236][T13620] ? __lock_acquire+0x7eb0/0x7eb0 [ 443.345283][T13620] __se_sys_sendmsg+0x1d0/0x2c0 [ 443.350133][T13620] ? __x64_sys_sendmsg+0x80/0x80 [ 443.355077][T13620] ? lockdep_hardirqs_on+0x98/0x150 [ 443.360274][T13620] do_syscall_64+0x55/0xb0 [ 443.364683][T13620] ? clear_bhb_loop+0x40/0x90 [ 443.369355][T13620] ? clear_bhb_loop+0x40/0x90 [ 443.374041][T13620] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 443.379944][T13620] RIP: 0033:0x7f89bd59e559 [ 443.384357][T13620] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 443.403961][T13620] RSP: 002b:00007f89be4f4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 443.412375][T13620] RAX: ffffffffffffffda RBX: 00007f89bd826090 RCX: 00007f89bd59e559 [ 443.420345][T13620] RDX: 00000000000012cd RSI: 0000200000000400 RDI: 000000000000000a [ 443.428312][T13620] RBP: 00007f89be4f4090 R08: 0000000000000000 R09: 0000000000000000 [ 443.436278][T13620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 443.444241][T13620] R13: 00007f89bd826128 R14: 00007f89bd826090 R15: 00007fff141044e8 [ 443.452218][T13620] [ 443.465075][T13476] veth1_macvtap: entered promiscuous mode [ 443.471647][ T5783] Bluetooth: hci1: command tx timeout [ 443.505452][T13476] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 443.587480][T13476] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 443.630790][T13476] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.651777][T13476] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.673307][T13476] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.698878][T13476] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.821382][ T8974] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.843516][ T8969] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.851471][ T8969] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.852638][ T8974] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.038308][T13636] netlink: 'syz.4.2367': attribute type 10 has an invalid length. [ 444.083655][T13636] netlink: 210880 bytes leftover after parsing attributes in process `syz.4.2367'. [ 444.381008][ T5784] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 444.390300][ T5784] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 444.403866][ T5784] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 444.412781][ T5784] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 444.428726][ T5784] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 444.443655][ T5784] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 444.539176][T13641] rxe_eth0 speed is unknown, defaulting to 1000 [ 444.819063][T13632] delete_channel: no stack [ 444.832175][ T8974] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.964990][ T8974] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.044311][ T8974] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.071268][T13641] chnl_net:caif_netlink_parms(): no params data found [ 445.104380][T13656] delete_channel: no stack [ 445.125178][ T8974] netdevsim netdevsim6 netdevsim0 (unregistering): left promiscuous mode [ 445.134880][ T8974] netdevsim netdevsim6 netdevsim0 (unregistering): left allmulticast mode [ 445.150249][ T8974] team0: Port device netdevsim0 removed [ 445.158489][ T8974] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.469750][T13641] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.510545][T13641] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.530795][T13641] bridge_slave_0: entered allmulticast mode [ 445.537017][ T5783] Bluetooth: hci1: command tx timeout [ 445.546939][T13641] bridge_slave_0: entered promiscuous mode [ 445.555989][T13670] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 445.565052][T13670] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 445.575944][T13670] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 445.593286][T13670] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 445.691286][T13641] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.717533][T13641] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.736580][T13641] bridge_slave_1: entered allmulticast mode [ 445.746543][T13641] bridge_slave_1: entered promiscuous mode [ 445.805760][T13641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 445.818116][T13641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 445.826478][T13680] netlink: 'syz.7.2416': attribute type 10 has an invalid length. [ 445.843569][T13680] netlink: 210880 bytes leftover after parsing attributes in process `syz.7.2416'. [ 445.917052][T13641] team0: Port device team_slave_0 added [ 445.926792][T13641] team0: Port device team_slave_1 added [ 445.984952][T13641] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 445.992075][T13641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 446.022752][T13641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 446.041744][T13641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 446.049025][T13641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 446.082875][T13641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 446.252346][T13641] hsr_slave_0: entered promiscuous mode [ 446.260269][T13641] hsr_slave_1: entered promiscuous mode [ 446.495241][ T5783] Bluetooth: hci3: command tx timeout [ 446.585708][T13678] delete_channel: no stack [ 447.390863][ T8974] hsr_slave_0: left promiscuous mode [ 447.412170][ T8974] veth1_macvtap: left promiscuous mode [ 447.418275][ T8974] veth0_macvtap: left promiscuous mode [ 447.426892][ T8974] veth1_vlan: left promiscuous mode [ 447.432154][ T8974] veth0_vlan: left promiscuous mode [ 448.115834][ T8974] team_slave_1 (unregistering): left promiscuous mode [ 448.126831][ T8974] team_slave_1 (unregistering): left allmulticast mode [ 448.139764][ T8974] team0 (unregistering): Port device team_slave_1 removed [ 448.573408][ T5783] Bluetooth: hci3: command tx timeout [ 448.692577][T13709] delete_channel: no stack [ 448.756089][T13641] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 448.799988][T13641] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 448.851819][T13641] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 448.883380][T13641] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 448.929723][T13733] netlink: 'syz.4.2426': attribute type 10 has an invalid length. [ 448.962541][T13733] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2426'. [ 448.988513][T13733] team0: entered promiscuous mode [ 449.002698][T13733] team_slave_0: entered promiscuous mode [ 449.009698][T13733] team_slave_1: entered promiscuous mode [ 449.015800][T13733] team0: entered allmulticast mode [ 449.021020][T13733] team_slave_0: entered allmulticast mode [ 449.027383][T13733] team_slave_1: entered allmulticast mode [ 449.034267][T13733] bridge0: port 3(team0) entered blocking state [ 449.040810][T13733] bridge0: port 3(team0) entered disabled state [ 449.054283][T13733] bridge0: port 3(team0) entered blocking state [ 449.060707][T13733] bridge0: port 3(team0) entered forwarding state [ 449.309672][T13641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 449.329957][T13641] 8021q: adding VLAN 0 to HW filter on device team0 [ 449.372613][ T2115] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.379826][ T2115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 449.437815][ T2115] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.445026][ T2115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 449.602158][T13745] delete_channel: no stack [ 449.887425][T13763] netlink: 152 bytes leftover after parsing attributes in process `syz.7.2432'. [ 449.907481][T13763] FAULT_INJECTION: forcing a failure. [ 449.907481][T13763] name failslab, interval 1, probability 0, space 0, times 0 [ 449.945081][T13763] CPU: 1 PID: 13763 Comm: syz.7.2432 Not tainted syzkaller #0 [ 449.952695][T13763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 449.962760][T13763] Call Trace: [ 449.966043][T13763] [ 449.968980][T13763] dump_stack_lvl+0x18c/0x250 [ 449.973669][T13763] ? show_regs_print_info+0x20/0x20 [ 449.978874][T13763] ? load_image+0x420/0x420 [ 449.983390][T13763] ? __might_sleep+0xe0/0xe0 [ 449.987986][T13763] ? __lock_acquire+0x7eb0/0x7eb0 [ 449.993021][T13763] should_fail_ex+0x394/0x4c0 [ 449.997718][T13763] should_failslab+0x9/0x20 [ 450.002228][T13763] slab_pre_alloc_hook+0x59/0x300 [ 450.007253][T13763] ? lockdep_hardirqs_on+0x98/0x150 [ 450.012459][T13763] kmem_cache_alloc_node+0x5e/0x310 [ 450.017664][T13763] ? __alloc_skb+0x103/0x2c0 [ 450.022267][T13763] __alloc_skb+0x103/0x2c0 [ 450.026696][T13763] netlink_ack+0x377/0x1160 [ 450.031204][T13763] ? __dev_queue_xmit+0x272/0x37e0 [ 450.036341][T13763] ? netlink_dump+0xec0/0xec0 [ 450.041021][T13763] ? ref_tracker_free+0x686/0x830 [ 450.046070][T13763] netlink_rcv_skb+0x2b3/0x4c0 [ 450.050845][T13763] ? rtnetlink_bind+0x80/0x80 [ 450.055532][T13763] ? netlink_ack+0x1160/0x1160 [ 450.060320][T13763] ? __lock_acquire+0x7eb0/0x7eb0 [ 450.065358][T13763] ? netlink_deliver_tap+0x2e/0x1b0 [ 450.070577][T13763] netlink_unicast+0x7b1/0x930 [ 450.075377][T13763] netlink_sendmsg+0x8d0/0xbf0 [ 450.080172][T13763] ? netlink_getsockopt+0x590/0x590 [ 450.085379][T13763] ? apparmor_socket_sendmsg+0x8e/0x330 [ 450.090934][T13763] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 450.096222][T13763] ? security_socket_sendmsg+0x80/0xa0 [ 450.101681][T13763] ? netlink_getsockopt+0x590/0x590 [ 450.106884][T13763] ____sys_sendmsg+0x61b/0x980 [ 450.111666][T13763] ? __asan_memset+0x22/0x40 [ 450.116260][T13763] ? __sys_sendmsg_sock+0x30/0x30 [ 450.121286][T13763] ? __import_iovec+0x3fa/0x850 [ 450.126159][T13763] ? import_iovec+0x73/0xa0 [ 450.130671][T13763] ___sys_sendmsg+0x2a6/0x360 [ 450.135365][T13763] ? __sys_sendmsg+0x2b0/0x2b0 [ 450.140171][T13763] ? trace_call_bpf+0xc3/0x6c0 [ 450.144995][T13763] __se_sys_sendmsg+0x1d0/0x2c0 [ 450.149852][T13763] ? perf_trace_preemptirq_template+0x269/0x330 [ 450.156115][T13763] ? __x64_sys_sendmsg+0x80/0x80 [ 450.161081][T13763] ? lockdep_hardirqs_on+0x98/0x150 [ 450.166287][T13763] do_syscall_64+0x55/0xb0 [ 450.170701][T13763] ? clear_bhb_loop+0x40/0x90 [ 450.175377][T13763] ? clear_bhb_loop+0x40/0x90 [ 450.180057][T13763] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 450.185959][T13763] RIP: 0033:0x7f89bd59e559 [ 450.190376][T13763] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 450.209983][T13763] RSP: 002b:00007f89be515028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 450.218402][T13763] RAX: ffffffffffffffda RBX: 00007f89bd825fa0 RCX: 00007f89bd59e559 [ 450.226372][T13763] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000004 [ 450.234342][T13763] RBP: 00007f89be515090 R08: 0000000000000000 R09: 0000000000000000 [ 450.242309][T13763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 450.250279][T13763] R13: 00007f89bd826038 R14: 00007f89bd825fa0 R15: 00007fff141044e8 [ 450.258277][T13763] [ 450.324216][T13760] delete_channel: no stack [ 450.488560][T13641] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 450.655420][ T5783] Bluetooth: hci3: command tx timeout [ 450.962690][T13641] veth0_vlan: entered promiscuous mode [ 450.987492][T13641] veth1_vlan: entered promiscuous mode [ 451.044035][T13641] veth0_macvtap: entered promiscuous mode [ 451.065723][T13641] veth1_macvtap: entered promiscuous mode [ 451.098985][T13641] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 451.122611][T13641] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 451.147173][T13641] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.156223][T13641] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.173127][T13641] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.182022][T13641] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.292478][T13059] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 451.311104][T13059] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 451.351933][ T8974] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 451.360523][ T8974] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 451.568155][T13800] netlink: 'syz.5.2442': attribute type 10 has an invalid length. [ 451.579253][T13800] netlink: 210880 bytes leftover after parsing attributes in process `syz.5.2442'. [ 451.594947][T13799] delete_channel: no stack [ 451.628198][T13801] netlink: 'syz.6.2401': attribute type 16 has an invalid length. [ 451.673292][T13801] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2401'. [ 451.683370][T13805] netlink: 'syz.6.2401': attribute type 10 has an invalid length. [ 451.826983][T13805] team0: Port device macvlan0 added [ 452.399115][ T5784] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 452.408530][ T5784] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 452.418179][ T5784] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 452.427723][ T5784] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 452.436778][ T5784] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 452.445173][ T5784] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 452.482468][T13820] rxe_eth0 speed is unknown, defaulting to 1000 [ 452.556914][T13822] delete_channel: no stack [ 452.747433][ T5784] Bluetooth: hci3: command tx timeout [ 452.928306][T13835] netlink: 'syz.4.2444': attribute type 10 has an invalid length. [ 452.954439][T13835] netlink: 210880 bytes leftover after parsing attributes in process `syz.4.2444'. [ 452.969059][T13820] chnl_net:caif_netlink_parms(): no params data found [ 453.013690][T13834] delete_channel: no stack [ 453.182631][T13820] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.202489][T13820] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.209922][T13820] bridge_slave_0: entered allmulticast mode [ 453.218755][T13820] bridge_slave_0: entered promiscuous mode [ 453.227709][T13820] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.234953][T13820] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.242233][T13820] bridge_slave_1: entered allmulticast mode [ 453.250304][T13820] bridge_slave_1: entered promiscuous mode [ 453.295371][T13820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 453.307944][T13820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 453.345498][T13820] team0: Port device team_slave_0 added [ 453.356233][T13820] team0: Port device team_slave_1 added [ 453.401370][T13820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 453.408829][T13820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 453.435379][T13820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 453.466877][T13820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 453.484105][T13820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 453.534085][T13820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 453.682457][T13820] hsr_slave_0: entered promiscuous mode [ 453.692629][T13820] hsr_slave_1: entered promiscuous mode [ 453.699584][T13820] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 453.709430][T13820] Cannot create hsr debugfs directory [ 453.710476][T13853] delete_channel: no stack [ 453.865995][T13059] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.990510][T13866] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.2454'. [ 454.205850][T13874] netlink: 'syz.6.2455': attribute type 10 has an invalid length. [ 454.215109][T13874] netlink: 210880 bytes leftover after parsing attributes in process `syz.6.2455'. [ 454.342482][T13059] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.447561][T13059] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.493683][ T5784] Bluetooth: hci2: command tx timeout [ 454.521900][T13870] delete_channel: no stack [ 454.590254][T13881] netlink: 'syz.4.2457': attribute type 9 has an invalid length. [ 454.610510][T13059] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.633756][T13881] netlink: 'syz.4.2457': attribute type 23 has an invalid length. [ 454.641610][T13881] netlink: 156008 bytes leftover after parsing attributes in process `syz.4.2457'. [ 455.043988][T13890] delete_channel: no stack [ 455.577534][T13910] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2462'. [ 455.791075][T13918] netlink: 'syz.4.2466': attribute type 10 has an invalid length. [ 455.833455][T13918] netlink: 210880 bytes leftover after parsing attributes in process `syz.4.2466'. [ 455.878684][T13917] delete_channel: no stack [ 455.880024][T13926] netlink: 16178 bytes leftover after parsing attributes in process `syz.6.2465'. [ 456.578460][ T5784] Bluetooth: hci2: command tx timeout [ 456.796866][T13952] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 456.812257][T13952] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 456.837846][T13952] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 456.845359][T13952] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 457.328109][T13964] netlink: 1047 bytes leftover after parsing attributes in process `syz.6.2473'. [ 457.392255][T13966] netlink: 'syz.4.2474': attribute type 10 has an invalid length. [ 457.414827][T13966] netlink: 210880 bytes leftover after parsing attributes in process `syz.4.2474'. [ 457.467379][T13965] delete_channel: no stack [ 457.591413][T13059] hsr_slave_0: left promiscuous mode [ 457.616808][T13059] veth0_macvtap: left promiscuous mode [ 457.622634][T13059] veth1_vlan: left promiscuous mode [ 457.758351][T13059] geneve1 (unregistering): left promiscuous mode [ 457.765839][T13059] geneve1 (unregistering): left allmulticast mode [ 457.775891][T13059] team0 (unregistering): Port device geneve1 removed [ 458.152650][T13059] team_slave_1 (unregistering): left promiscuous mode [ 458.160462][T13059] team_slave_1 (unregistering): left allmulticast mode [ 458.171294][T13059] team0 (unregistering): Port device team_slave_1 removed [ 458.663291][ T5784] Bluetooth: hci2: command tx timeout [ 458.766994][T13820] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 458.797637][T13820] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 458.828272][T13820] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 458.859211][T13820] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 459.129524][T13820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 459.159014][T13820] 8021q: adding VLAN 0 to HW filter on device team0 [ 459.206617][ T8962] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.213804][ T8962] bridge0: port 1(bridge_slave_0) entered forwarding state [ 459.260554][ T8962] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.267764][ T8962] bridge0: port 2(bridge_slave_1) entered forwarding state [ 459.696437][T14008] delete_channel: no stack [ 459.817965][T13820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 460.052086][T14028] netlink: 1047 bytes leftover after parsing attributes in process `syz.5.2495'. [ 460.536117][T13820] veth0_vlan: entered promiscuous mode [ 460.578107][T13820] veth1_vlan: entered promiscuous mode [ 460.674091][T13820] veth0_macvtap: entered promiscuous mode [ 460.699166][T13820] veth1_macvtap: entered promiscuous mode [ 460.738755][ T5784] Bluetooth: hci2: command tx timeout [ 460.745744][T13820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 460.771950][T13820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 460.812996][T13820] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.838507][T13820] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.864393][T13820] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.884387][T13820] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.004833][T14048] delete_channel: no stack [ 461.033980][ T3490] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.054588][ T3490] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 461.110684][ T3490] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.129010][ T3490] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 461.274548][T14052] delete_channel: no stack [ 462.075192][T14056] delete_channel: no stack [ 462.256868][T14070] FAULT_INJECTION: forcing a failure. [ 462.256868][T14070] name failslab, interval 1, probability 0, space 0, times 0 [ 462.270131][T14070] CPU: 0 PID: 14070 Comm: syz.6.2518 Not tainted syzkaller #0 [ 462.277622][T14070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 462.287699][T14070] Call Trace: [ 462.290998][T14070] [ 462.293950][T14070] dump_stack_lvl+0x18c/0x250 [ 462.298656][T14070] ? show_regs_print_info+0x20/0x20 [ 462.303875][T14070] ? load_image+0x420/0x420 [ 462.308406][T14070] ? trace_call_bpf+0xc3/0x6c0 [ 462.313206][T14070] ? skb_network_protocol+0x529/0x790 [ 462.318613][T14070] should_fail_ex+0x394/0x4c0 [ 462.323324][T14070] should_failslab+0x9/0x20 [ 462.327858][T14070] slab_pre_alloc_hook+0x59/0x300 [ 462.332922][T14070] kmem_cache_alloc+0x5a/0x2c0 [ 462.337721][T14070] ? skb_clone+0x1eb/0x370 [ 462.342177][T14070] skb_clone+0x1eb/0x370 [ 462.346453][T14070] ? dev_queue_xmit_nit+0x204/0xba0 [ 462.351678][T14070] dev_queue_xmit_nit+0x23f/0xba0 [ 462.356724][T14070] ? dev_queue_xmit_nit+0x2d/0xba0 [ 462.361898][T14070] dev_hard_start_xmit+0x150/0x790 [ 462.367051][T14070] __dev_queue_xmit+0x1be8/0x37e0 [ 462.372098][T14070] ? perf_trace_preemptirq_template+0x269/0x330 [ 462.378371][T14070] ? __dev_queue_xmit+0x272/0x37e0 [ 462.383520][T14070] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 462.389701][T14070] ? netdev_core_pick_tx+0x370/0x370 [ 462.395010][T14070] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 462.401203][T14070] ? __skb_clone+0x446/0x6c0 [ 462.405829][T14070] ? skb_clone+0x21f/0x370 [ 462.410278][T14070] __netlink_deliver_tap+0x579/0x7f0 [ 462.415609][T14070] ? netlink_deliver_tap+0x2e/0x1b0 [ 462.420853][T14070] netlink_deliver_tap+0x19c/0x1b0 [ 462.426002][T14070] netlink_unicast+0x77b/0x930 [ 462.430822][T14070] netlink_sendmsg+0x8d0/0xbf0 [ 462.435617][T14070] ? aa_sock_msg_perm+0x94/0x150 [ 462.440585][T14070] ? netlink_getsockopt+0x590/0x590 [ 462.445816][T14070] ? apparmor_socket_sendmsg+0x8e/0x330 [ 462.451391][T14070] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 462.456704][T14070] ? security_socket_sendmsg+0x80/0xa0 [ 462.462223][T14070] ? netlink_getsockopt+0x590/0x590 [ 462.467454][T14070] ____sys_sendmsg+0x61b/0x980 [ 462.472256][T14070] ? __asan_memset+0x22/0x40 [ 462.476880][T14070] ? __sys_sendmsg_sock+0x30/0x30 [ 462.481929][T14070] ? __import_iovec+0x5f2/0x850 [ 462.486820][T14070] ? import_iovec+0x73/0xa0 [ 462.491356][T14070] ___sys_sendmsg+0x2a6/0x360 [ 462.496068][T14070] ? __sys_sendmsg+0x2b0/0x2b0 [ 462.500890][T14070] ? trace_call_bpf+0xc3/0x6c0 [ 462.505705][T14070] __se_sys_sendmsg+0x1d0/0x2c0 [ 462.510590][T14070] ? __x64_sys_sendmsg+0x80/0x80 [ 462.515571][T14070] ? syscall_enter_from_user_mode+0x2e/0x80 [ 462.521500][T14070] do_syscall_64+0x55/0xb0 [ 462.525935][T14070] ? clear_bhb_loop+0x40/0x90 [ 462.530632][T14070] ? clear_bhb_loop+0x40/0x90 [ 462.535334][T14070] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 462.541254][T14070] RIP: 0033:0x7ff9eeb9e559 [ 462.545693][T14070] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 462.565410][T14070] RSP: 002b:00007ff9efa70028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 462.573854][T14070] RAX: ffffffffffffffda RBX: 00007ff9eee25fa0 RCX: 00007ff9eeb9e559 [ 462.581847][T14070] RDX: 0000000000000000 RSI: 0000200000011d00 RDI: 0000000000000009 [ 462.589840][T14070] RBP: 00007ff9efa70090 R08: 0000000000000000 R09: 0000000000000000 [ 462.597832][T14070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 462.605822][T14070] R13: 00007ff9eee26038 R14: 00007ff9eee25fa0 R15: 00007ffcfdf0c3c8 [ 462.613826][T14070] [ 462.901689][T14070] netlink: 128 bytes leftover after parsing attributes in process `syz.6.2518'. [ 463.038957][T14070] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 463.541535][T14093] delete_channel: no stack [ 464.016328][T14105] netlink: 128 bytes leftover after parsing attributes in process `syz.7.2516'. [ 464.078758][T14105] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 465.227860][T14126] delete_channel: no stack [ 465.884277][T14139] syzkaller0: entered promiscuous mode [ 465.889814][T14139] syzkaller0: entered allmulticast mode [ 466.457143][T14153] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2537'. [ 466.591703][T14155] delete_channel: no stack [ 466.853987][ T5783] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 466.863810][ T5783] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 466.873013][ T5783] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 466.902092][ T5783] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 466.910006][ T5783] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 466.928188][ T5783] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 467.231586][T14165] rxe_eth0 speed is unknown, defaulting to 1000 [ 467.538668][ T8969] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.636975][T14183] netlink: 'syz.4.2545': attribute type 7 has an invalid length. [ 467.724684][ T8969] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.859784][ T8969] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.974370][ T8969] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.041082][T14187] delete_channel: no stack [ 468.396295][T14165] chnl_net:caif_netlink_parms(): no params data found [ 468.628190][T14196] À: port 1(vlan0) entered blocking state [ 468.650801][T14196] À: port 1(vlan0) entered disabled state [ 468.667908][T14196] vlan0: entered allmulticast mode [ 468.705787][T14196] veth0_vlan: entered allmulticast mode [ 468.785513][T14196] vlan0: entered promiscuous mode [ 468.911203][T14200] netlink: 'syz.7.2550': attribute type 2 has an invalid length. [ 468.920984][T14200] netlink: 164 bytes leftover after parsing attributes in process `syz.7.2550'. [ 468.973405][ T5783] Bluetooth: hci4: command tx timeout [ 469.221695][T14165] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.250864][T14165] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.270270][T14165] bridge_slave_0: entered allmulticast mode [ 469.284625][T14165] bridge_slave_0: entered promiscuous mode [ 469.455906][T14165] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.480212][T14165] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.497135][T14165] bridge_slave_1: entered allmulticast mode [ 469.506614][T14165] bridge_slave_1: entered promiscuous mode [ 469.766563][T14165] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 469.805668][T14226] delete_channel: no stack [ 469.809359][T14165] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 469.932901][T14165] team0: Port device team_slave_0 added [ 469.945600][T14165] team0: Port device team_slave_1 added [ 469.987147][T14165] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 470.003196][T14165] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 470.062230][T14165] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 470.117636][T14165] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 470.138274][T14165] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 470.181472][T14165] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 470.325712][T14165] hsr_slave_0: entered promiscuous mode [ 470.343720][T14165] hsr_slave_1: entered promiscuous mode [ 470.350101][T14165] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 470.362682][T14165] Cannot create hsr debugfs directory [ 471.062289][ T5783] Bluetooth: hci4: command tx timeout [ 471.077309][T14263] netlink: 'syz.7.2560': attribute type 10 has an invalid length. [ 471.143265][T14263] netlink: 181084 bytes leftover after parsing attributes in process `syz.7.2560'. [ 471.193365][T14262] delete_channel: no stack [ 472.496011][ T8969] hsr_slave_0: left promiscuous mode [ 472.584452][ T8969] veth1_macvtap: left promiscuous mode [ 472.590048][ T8969] veth0_macvtap: left promiscuous mode [ 472.597527][ T8969] veth1_vlan: left promiscuous mode [ 473.133829][ T5783] Bluetooth: hci4: command tx timeout [ 473.538877][ T8969] team_slave_1 (unregistering): left promiscuous mode [ 473.548975][ T8969] team_slave_1 (unregistering): left allmulticast mode [ 473.559603][ T8969] team0 (unregistering): Port device team_slave_1 removed [ 473.904179][T14289] À: port 1(vlan0) entered blocking state [ 473.910405][T14289] À: port 1(vlan0) entered disabled state [ 473.917541][T14289] vlan0: entered allmulticast mode [ 473.922884][T14289] veth0_vlan: entered allmulticast mode [ 473.931435][T14289] vlan0: entered promiscuous mode [ 474.160853][T14308] netlink: 'syz.7.2572': attribute type 10 has an invalid length. [ 474.189826][T14308] netlink: 181084 bytes leftover after parsing attributes in process `syz.7.2572'. [ 474.226762][T14165] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 474.270287][T14307] delete_channel: no stack [ 474.274878][T14165] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 474.285966][T14165] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 474.334316][T14165] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 474.547934][T14165] 8021q: adding VLAN 0 to HW filter on device bond0 [ 474.597857][T14165] 8021q: adding VLAN 0 to HW filter on device team0 [ 474.629798][ T8969] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.637057][ T8969] bridge0: port 1(bridge_slave_0) entered forwarding state [ 474.677741][ T8969] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.684972][ T8969] bridge0: port 2(bridge_slave_1) entered forwarding state [ 474.860691][T14334] netlink: 'syz.4.2580': attribute type 33 has an invalid length. [ 474.872313][T14334] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2580'. [ 475.223248][ T5783] Bluetooth: hci4: command tx timeout [ 475.665380][T14165] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 476.037891][T14366] À: port 1(vlan0) entered blocking state [ 476.051534][T14366] À: port 1(vlan0) entered disabled state [ 476.071408][T14366] vlan0: entered allmulticast mode [ 476.090171][T14366] veth0_vlan: entered allmulticast mode [ 476.124619][T14366] vlan0: entered promiscuous mode [ 476.170699][T14367] netlink: 'syz.4.2584': attribute type 10 has an invalid length. [ 476.205038][T14367] netlink: 181084 bytes leftover after parsing attributes in process `syz.4.2584'. [ 476.245190][T14365] delete_channel: no stack [ 476.305795][T14165] veth0_vlan: entered promiscuous mode [ 476.341743][T14165] veth1_vlan: entered promiscuous mode [ 476.461980][T14165] veth0_macvtap: entered promiscuous mode [ 476.491304][T14165] veth1_macvtap: entered promiscuous mode [ 476.536976][T14165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 476.569895][T14165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.621263][T14165] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 476.740484][T14385] rxe_eth0 speed is unknown, defaulting to 1000 [ 476.860965][T14165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 476.928410][T14165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.960293][T14165] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 476.992587][T14165] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.012718][T14165] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.031798][T14165] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.040881][T14165] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.355960][ T8972] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.401564][ T8972] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 477.500645][T14406] netlink: 'syz.6.2591': attribute type 33 has an invalid length. [ 477.530438][T14406] netlink: 152 bytes leftover after parsing attributes in process `syz.6.2591'. [ 477.576644][ T3490] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.606688][ T3490] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.525001][T14421] nr0: port 1(hsr0) entered blocking state [ 478.551572][T14421] nr0: port 1(hsr0) entered disabled state [ 478.580197][T14421] hsr0: entered allmulticast mode [ 478.588113][T14421] hsr_slave_0: entered allmulticast mode [ 478.603751][T14421] hsr_slave_1: entered allmulticast mode [ 478.633009][T14421] hsr0: entered promiscuous mode [ 478.658438][T14434] netlink: 'syz.6.2596': attribute type 10 has an invalid length. [ 478.685225][T14434] netlink: 210880 bytes leftover after parsing attributes in process `syz.6.2596'. [ 478.770240][T14426] delete_channel: no stack [ 479.065928][T14441] À: port 1(vlan0) entered blocking state [ 479.074120][T14441] À: port 1(vlan0) entered disabled state [ 479.081022][T14441] vlan0: entered allmulticast mode [ 479.091046][T14441] veth0_vlan: entered allmulticast mode [ 479.115548][T14441] vlan0: entered promiscuous mode [ 479.592864][T14469] FAULT_INJECTION: forcing a failure. [ 479.592864][T14469] name failslab, interval 1, probability 0, space 0, times 0 [ 479.605926][T14469] CPU: 1 PID: 14469 Comm: syz.7.2604 Not tainted syzkaller #0 [ 479.613414][T14469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 479.623492][T14469] Call Trace: [ 479.626790][T14469] [ 479.629738][T14469] dump_stack_lvl+0x18c/0x250 [ 479.634447][T14469] ? show_regs_print_info+0x20/0x20 [ 479.639677][T14469] ? load_image+0x420/0x420 [ 479.644211][T14469] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 479.650222][T14469] ? lock_chain_count+0x20/0x20 [ 479.655129][T14469] should_fail_ex+0x394/0x4c0 [ 479.659847][T14469] should_failslab+0x9/0x20 [ 479.664380][T14469] slab_pre_alloc_hook+0x59/0x300 [ 479.669433][T14469] kmem_cache_alloc_node+0x5e/0x310 [ 479.674659][T14469] ? __alloc_skb+0x103/0x2c0 [ 479.679280][T14469] __alloc_skb+0x103/0x2c0 [ 479.683723][T14469] ? __neigh_notify+0x29/0x300 [ 479.688517][T14469] __neigh_notify+0x15c/0x300 [ 479.693221][T14469] neigh_cleanup_and_release+0xa0/0x260 [ 479.698790][T14469] neigh_remove_one+0x5f1/0x700 [ 479.703663][T14469] ___neigh_create+0x491/0x23d0 [ 479.708558][T14469] ip6_finish_output2+0x15b9/0x1690 [ 479.713790][T14469] ? ip6_finish_output2+0x71a/0x1690 [ 479.719102][T14469] ? ip6_mtu+0x7d/0x400 [ 479.723285][T14469] ? nf_hook+0x390/0x390 [ 479.727540][T14469] ? ip6_mtu+0x321/0x400 [ 479.731807][T14469] ? ip6_finish_output+0x567/0x7f0 [ 479.736947][T14469] rawv6_send_hdrinc+0xdba/0x1660 [ 479.742009][T14469] ? txopt_get+0x3f0/0x3f0 [ 479.746444][T14469] ? txopt_get+0x344/0x3f0 [ 479.750879][T14469] ? rawv6_push_pending_frames+0x930/0x930 [ 479.756702][T14469] ? fl6_sock_lookup+0xc0/0xc0 [ 479.761497][T14469] rawv6_sendmsg+0x12f6/0x17c0 [ 479.766298][T14469] ? compat_rawv6_ioctl+0x70/0x70 [ 479.771373][T14469] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 479.777816][T14469] ? aa_sock_msg_perm+0x94/0x150 [ 479.782788][T14469] ? inet_sendmsg+0x7e/0x2a0 [ 479.787405][T14469] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 479.792723][T14469] ? inet_send_prepare+0x250/0x250 [ 479.797873][T14469] ____sys_sendmsg+0x61b/0x980 [ 479.802683][T14469] ? __asan_memset+0x22/0x40 [ 479.807294][T14469] ? __sys_sendmsg_sock+0x30/0x30 [ 479.812328][T14469] ? __import_iovec+0x5f2/0x850 [ 479.817219][T14469] ? import_iovec+0x73/0xa0 [ 479.821835][T14469] ___sys_sendmsg+0x2a6/0x360 [ 479.826522][T14469] ? __sys_sendmsg+0x2b0/0x2b0 [ 479.831301][T14469] ? trace_call_bpf+0xc3/0x6c0 [ 479.836087][T14469] __se_sys_sendmsg+0x1d0/0x2c0 [ 479.840933][T14469] ? perf_trace_preemptirq_template+0x269/0x330 [ 479.847174][T14469] ? __x64_sys_sendmsg+0x80/0x80 [ 479.852121][T14469] ? lockdep_hardirqs_on+0x98/0x150 [ 479.857316][T14469] do_syscall_64+0x55/0xb0 [ 479.861723][T14469] ? clear_bhb_loop+0x40/0x90 [ 479.866394][T14469] ? clear_bhb_loop+0x40/0x90 [ 479.871070][T14469] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 479.876965][T14469] RIP: 0033:0x7f3107d9e559 [ 479.881376][T14469] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 479.900979][T14469] RSP: 002b:00007f3108c71028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 479.909394][T14469] RAX: ffffffffffffffda RBX: 00007f3108025fa0 RCX: 00007f3107d9e559 [ 479.917361][T14469] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000004 [ 479.925326][T14469] RBP: 00007f3108c71090 R08: 0000000000000000 R09: 0000000000000000 [ 479.933302][T14469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 479.941276][T14469] R13: 00007f3108026038 R14: 00007f3108025fa0 R15: 00007ffe2faf2488 [ 479.949266][T14469] [ 480.004075][T14470] netlink: 'syz.5.2605': attribute type 33 has an invalid length. [ 480.012206][T14470] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2605'. [ 480.084468][T14473] netlink: 'syz.7.2606': attribute type 10 has an invalid length. [ 480.092654][T14473] netlink: 183880 bytes leftover after parsing attributes in process `syz.7.2606'. [ 480.121098][T14472] delete_channel: no stack [ 480.225825][T14477] netlink: 'syz.6.2609': attribute type 10 has an invalid length. [ 480.474310][T14487] netlink: 'syz.6.2612': attribute type 10 has an invalid length. [ 480.541275][T14487] 8021q: adding VLAN 0 to HW filter on device team0 [ 480.560365][T14487] bond0: (slave team0): Enslaving as an active interface with an up link [ 480.846635][T14495] syzkaller0: entered promiscuous mode [ 480.852177][T14495] syzkaller0: entered allmulticast mode [ 481.071230][T14514] netlink: 'syz.7.2620': attribute type 10 has an invalid length. [ 481.082121][T14514] netlink: 210880 bytes leftover after parsing attributes in process `syz.7.2620'. [ 481.766859][T14507] delete_channel: no stack [ 482.544857][T14519] netlink: 'syz.5.2624': attribute type 3 has an invalid length. [ 482.552935][T14519] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2624'. [ 482.580800][T14522] netlink: 'syz.7.2623': attribute type 33 has an invalid length. [ 482.591170][T14522] netlink: 152 bytes leftover after parsing attributes in process `syz.7.2623'. [ 482.611391][T14519] netlink: 'syz.5.2624': attribute type 10 has an invalid length. [ 482.620814][T14519] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.628636][T14519] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.658680][T14519] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.665907][T14519] bridge0: port 2(bridge_slave_1) entered forwarding state [ 482.673496][T14519] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.680697][T14519] bridge0: port 1(bridge_slave_0) entered forwarding state [ 482.740004][T14519] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 482.747461][T14529] netlink: 'syz.6.2627': attribute type 3 has an invalid length. [ 482.767663][T14529] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2627'. [ 482.965389][T14535] netlink: 'syz.5.2629': attribute type 3 has an invalid length. [ 483.015890][T14535] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2629'. [ 483.043079][T14535] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.050345][T14535] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.083789][T14539] netlink: 183880 bytes leftover after parsing attributes in process `syz.4.2632'. [ 483.100057][T14538] delete_channel: no stack [ 484.736681][T14570] netlink: 183880 bytes leftover after parsing attributes in process `syz.5.2643'. [ 484.858602][T14568] delete_channel: no stack [ 485.245076][T14575] validate_nla: 3 callbacks suppressed [ 485.245111][T14575] netlink: 'syz.5.2644': attribute type 10 has an invalid length. [ 485.370586][T14575] bridge_slave_1: left allmulticast mode [ 485.389229][T14575] bridge_slave_1: left promiscuous mode [ 485.400230][T14575] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.471913][T14575] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 485.602267][T14582] FAULT_INJECTION: forcing a failure. [ 485.602267][T14582] name failslab, interval 1, probability 0, space 0, times 0 [ 485.630798][T14582] CPU: 1 PID: 14582 Comm: syz.7.2646 Not tainted syzkaller #0 [ 485.638309][T14582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 485.648382][T14582] Call Trace: [ 485.651679][T14582] [ 485.654626][T14582] dump_stack_lvl+0x18c/0x250 [ 485.659332][T14582] ? show_regs_print_info+0x20/0x20 [ 485.664553][T14582] ? load_image+0x420/0x420 [ 485.669079][T14582] ? __might_sleep+0xe0/0xe0 [ 485.673689][T14582] ? __lock_acquire+0x7eb0/0x7eb0 [ 485.678739][T14582] should_fail_ex+0x394/0x4c0 [ 485.683444][T14582] should_failslab+0x9/0x20 [ 485.687970][T14582] slab_pre_alloc_hook+0x59/0x300 [ 485.693019][T14582] kmem_cache_alloc+0x5a/0x2c0 [ 485.697808][T14582] ? __kernfs_new_node+0xe5/0x7f0 [ 485.702866][T14582] __kernfs_new_node+0xe5/0x7f0 [ 485.707748][T14582] ? kernfs_new_node+0x260/0x260 [ 485.712724][T14582] ? up_write+0x1be/0x410 [ 485.717076][T14582] kernfs_new_node+0x14c/0x260 [ 485.721873][T14582] __kernfs_create_file+0x4b/0x2e0 [ 485.727005][T14582] sysfs_add_file_mode_ns+0x237/0x2f0 [ 485.732408][T14582] internal_create_group+0x431/0xd10 [ 485.737715][T14582] ? kernfs_add_one+0x149/0x6b0 [ 485.742603][T14582] ? sysfs_create_group+0x20/0x20 [ 485.747649][T14582] ? up_write+0x1be/0x410 [ 485.752000][T14582] sysfs_create_groups+0x59/0x120 [ 485.757045][T14582] device_add_attrs+0xdf/0x830 [ 485.761887][T14582] ? device_add_class_symlinks+0x240/0x240 [ 485.767719][T14582] ? device_add_class_symlinks+0x21f/0x240 [ 485.773549][T14582] device_add+0x51a/0xc40 [ 485.777893][T14582] netdev_register_kobject+0x188/0x320 [ 485.783436][T14582] register_netdevice+0x12aa/0x1ba0 [ 485.788641][T14582] ? netif_stacked_transfer_operstate+0x210/0x210 [ 485.795051][T14582] ? __lock_acquire+0x7eb0/0x7eb0 [ 485.800070][T14582] ? kvmalloc_node+0x70/0x180 [ 485.804746][T14582] ? rcu_is_watching+0x15/0xb0 [ 485.809510][T14582] ? net_generic+0x1e/0x240 [ 485.814074][T14582] vti6_tnl_create2+0x80/0x140 [ 485.818840][T14582] vti6_locate+0x682/0x770 [ 485.823269][T14582] ? vti6_parm_from_user+0x250/0x250 [ 485.828559][T14582] ? __might_fault+0xaa/0x120 [ 485.833233][T14582] ? __might_fault+0xc6/0x120 [ 485.837906][T14582] ? __might_fault+0xaa/0x120 [ 485.842577][T14582] ? vti6_siocdevprivate+0x6cf/0xb80 [ 485.847864][T14582] vti6_siocdevprivate+0x82b/0xb80 [ 485.852974][T14582] ? vti6_tnl_xmit+0x19c0/0x19c0 [ 485.857904][T14582] ? __mutex_lock+0x923/0xc80 [ 485.862581][T14582] ? dev_ioctl+0x83c/0x1140 [ 485.867089][T14582] ? dev_ifsioc+0x957/0xc40 [ 485.871585][T14582] dev_ioctl+0x84c/0x1140 [ 485.875914][T14582] sock_ioctl+0x74c/0x7e0 [ 485.880252][T14582] ? sock_poll+0x3e0/0x3e0 [ 485.884679][T14582] ? bpf_lsm_file_ioctl+0x9/0x10 [ 485.889610][T14582] ? security_file_ioctl+0x80/0xa0 [ 485.894718][T14582] ? sock_poll+0x3e0/0x3e0 [ 485.899134][T14582] __se_sys_ioctl+0xfd/0x170 [ 485.903725][T14582] do_syscall_64+0x55/0xb0 [ 485.908137][T14582] ? clear_bhb_loop+0x40/0x90 [ 485.912806][T14582] ? clear_bhb_loop+0x40/0x90 [ 485.917476][T14582] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 485.923371][T14582] RIP: 0033:0x7f3107d9e559 [ 485.927781][T14582] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 485.947381][T14582] RSP: 002b:00007f3108c71028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 485.955789][T14582] RAX: ffffffffffffffda RBX: 00007f3108025fa0 RCX: 00007f3107d9e559 [ 485.963755][T14582] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000006 [ 485.971715][T14582] RBP: 00007f3108c71090 R08: 0000000000000000 R09: 0000000000000000 [ 485.979677][T14582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 485.987640][T14582] R13: 00007f3108026038 R14: 00007f3108025fa0 R15: 00007ffe2faf2488 [ 485.995616][T14582] [ 486.025952][T14560] rxe_eth0 speed is unknown, defaulting to 1000 [ 486.263867][T14590] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.2649'. [ 486.340271][T14589] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.2649'. [ 486.783343][T14600] netlink: 'syz.7.2652': attribute type 10 has an invalid length. [ 486.825714][T14600] netlink: 183880 bytes leftover after parsing attributes in process `syz.7.2652'. [ 486.852413][T14602] netlink: 'syz.4.2655': attribute type 10 has an invalid length. [ 486.883387][T14602] nla_validate_range_unsigned: 60 callbacks suppressed [ 486.883423][T14602] netlink: 'syz.4.2655': attribute type 11 has an invalid length. [ 486.901051][T14598] delete_channel: no stack [ 486.942125][T14602] netlink: 'syz.4.2655': attribute type 11 has an invalid length. [ 486.961246][T14602] netlink: 'syz.4.2655': attribute type 11 has an invalid length. [ 486.973465][T14602] netlink: 'syz.4.2655': attribute type 11 has an invalid length. [ 486.993768][T14602] netlink: 'syz.4.2655': attribute type 11 has an invalid length. [ 487.001785][T14602] netlink: 'syz.4.2655': attribute type 11 has an invalid length. [ 487.030585][T14602] netlink: 'syz.4.2655': attribute type 11 has an invalid length. [ 487.057914][T14602] netlink: 'syz.4.2655': attribute type 11 has an invalid length. [ 487.073512][T14602] netlink: 'syz.4.2655': attribute type 11 has an invalid length. [ 487.103783][T14602] netlink: 'syz.4.2655': attribute type 11 has an invalid length. [ 487.112471][T14602] netlink: 'syz.4.2655': attribute type 4 has an invalid length. [ 487.160683][T14602] netlink: 'syz.4.2655': attribute type 5 has an invalid length. [ 487.193251][T14602] netlink: 208556 bytes leftover after parsing attributes in process `syz.4.2655'. [ 487.265334][T14607] rxe_eth0 speed is unknown, defaulting to 1000 [ 487.309163][T14601] delete_channel: no stack [ 487.421623][T14610] delete_channel: no stack [ 488.630029][T14638] netlink: 'syz.6.2667': attribute type 10 has an invalid length. [ 488.653628][T14638] netlink: 181084 bytes leftover after parsing attributes in process `syz.6.2667'. [ 488.674900][T14637] delete_channel: no stack [ 488.703612][T14639] delete_channel: no stack [ 489.584568][T14662] delete_channel: no stack [ 489.623746][T14664] netlink: 'syz.7.2677': attribute type 10 has an invalid length. [ 489.673021][T14664] netlink: 181084 bytes leftover after parsing attributes in process `syz.7.2677'. [ 489.720203][T14660] delete_channel: no stack [ 489.972436][T14675] netlink: 'syz.5.2683': attribute type 21 has an invalid length. [ 489.985236][T14675] netlink: 13070 bytes leftover after parsing attributes in process `syz.5.2683'. [ 490.877274][T14692] delete_channel: no stack [ 490.977315][T14695] netlink: 'syz.7.2691': attribute type 10 has an invalid length. [ 490.993371][T14695] netlink: 181084 bytes leftover after parsing attributes in process `syz.7.2691'. [ 491.016643][T14694] delete_channel: no stack [ 491.108985][T14699] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 491.117282][T14699] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 491.128289][T14699] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 491.141010][T14699] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 491.585480][T14715] delete_channel: no stack [ 491.719547][T14723] netlink: 'syz.7.2702': attribute type 10 has an invalid length. [ 491.727943][T14723] netlink: 181084 bytes leftover after parsing attributes in process `syz.7.2702'. [ 491.747416][T14720] delete_channel: no stack [ 491.762898][T14721] sit0: entered allmulticast mode [ 491.945605][T14730] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2704'. [ 491.973243][T14730] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2704'. [ 491.983537][T14728] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2704'. [ 492.301301][T14741] delete_channel: no stack [ 492.357676][T14744] netlink: 'syz.7.2712': attribute type 10 has an invalid length. [ 492.374874][T14744] netlink: 181084 bytes leftover after parsing attributes in process `syz.7.2712'. [ 492.437093][T14743] delete_channel: no stack [ 492.444950][T14748] netlink: 'syz.4.2713': attribute type 3 has an invalid length. [ 492.485499][T14748] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2713'. [ 492.549319][T14755] netlink: 'syz.6.2715': attribute type 5 has an invalid length. [ 492.671793][T14760] netlink: 212912 bytes leftover after parsing attributes in process `syz.5.2718'. [ 492.696770][T14760] openvswitch: netlink: Key type 4112 is out of range max 32 [ 492.766187][T14765] delete_channel: no stack [ 492.842187][T14770] FAULT_INJECTION: forcing a failure. [ 492.842187][T14770] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 492.862892][T14770] CPU: 0 PID: 14770 Comm: syz.5.2723 Not tainted syzkaller #0 [ 492.870405][T14770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 492.880474][T14770] Call Trace: [ 492.883772][T14770] [ 492.886715][T14770] dump_stack_lvl+0x18c/0x250 [ 492.891414][T14770] ? show_regs_print_info+0x20/0x20 [ 492.896630][T14770] ? load_image+0x420/0x420 [ 492.901149][T14770] ? __might_fault+0xaa/0x120 [ 492.905842][T14770] ? __lock_acquire+0x7eb0/0x7eb0 [ 492.910888][T14770] should_fail_ex+0x394/0x4c0 [ 492.915587][T14770] _copy_from_iter+0x1cd/0x1290 [ 492.920456][T14770] ? rcu_is_watching+0x15/0xb0 [ 492.925248][T14770] ? copyout_mc+0x70/0x70 [ 492.929596][T14770] ? __virt_addr_valid+0x10c/0x380 [ 492.934727][T14770] ? __virt_addr_valid+0x10c/0x380 [ 492.939861][T14770] ? __virt_addr_valid+0x10c/0x380 [ 492.945002][T14770] ? __check_object_size+0x4fc/0xa40 [ 492.950314][T14770] netlink_sendmsg+0x76b/0xbf0 [ 492.955109][T14770] ? netlink_getsockopt+0x590/0x590 [ 492.960327][T14770] ? apparmor_socket_sendmsg+0x170/0x330 [ 492.965983][T14770] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 492.971285][T14770] ? security_socket_sendmsg+0x80/0xa0 [ 492.976755][T14770] ? netlink_getsockopt+0x590/0x590 [ 492.981977][T14770] ____sys_sendmsg+0x61b/0x980 [ 492.986773][T14770] ? __asan_memset+0x22/0x40 [ 492.991380][T14770] ? __sys_sendmsg_sock+0x30/0x30 [ 492.996420][T14770] ? __import_iovec+0x5f2/0x850 [ 493.001306][T14770] ? import_iovec+0x73/0xa0 [ 493.005831][T14770] ___sys_sendmsg+0x2a6/0x360 [ 493.010536][T14770] ? __sys_sendmsg+0x2b0/0x2b0 [ 493.015346][T14770] ? __lock_acquire+0x7eb0/0x7eb0 [ 493.020411][T14770] __se_sys_sendmsg+0x1d0/0x2c0 [ 493.025279][T14770] ? __x64_sys_sendmsg+0x80/0x80 [ 493.030252][T14770] ? lockdep_hardirqs_on+0x98/0x150 [ 493.035470][T14770] do_syscall_64+0x55/0xb0 [ 493.039905][T14770] ? clear_bhb_loop+0x40/0x90 [ 493.044599][T14770] ? clear_bhb_loop+0x40/0x90 [ 493.049304][T14770] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 493.055230][T14770] RIP: 0033:0x7f90d0b9e559 [ 493.059663][T14770] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 493.079286][T14770] RSP: 002b:00007f90d1ace028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 493.087716][T14770] RAX: ffffffffffffffda RBX: 00007f90d0e25fa0 RCX: 00007f90d0b9e559 [ 493.095699][T14770] RDX: 0000000020008004 RSI: 0000200000000600 RDI: 0000000000000004 [ 493.103687][T14770] RBP: 00007f90d1ace090 R08: 0000000000000000 R09: 0000000000000000 [ 493.111684][T14770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 493.119672][T14770] R13: 00007f90d0e26038 R14: 00007f90d0e25fa0 R15: 00007ffd4da5cf98 [ 493.127684][T14770] [ 493.190142][T14775] netlink: 'syz.4.2724': attribute type 10 has an invalid length. [ 493.237983][T14775] wg1: entered promiscuous mode [ 493.245537][T14775] wg1: entered allmulticast mode [ 493.250693][T14775] team0: Device wg1 is of different type [ 493.483390][T14783] netlink: 'syz.5.2726': attribute type 10 has an invalid length. [ 493.523514][T14783] netlink: 181084 bytes leftover after parsing attributes in process `syz.5.2726'. [ 493.550505][T14782] delete_channel: no stack [ 494.146406][T14792] netlink: 'syz.7.2730': attribute type 5 has an invalid length. [ 494.284165][T14794] delete_channel: no stack [ 494.291346][T14803] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 494.303261][T14803] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 494.331312][T14803] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 494.351743][T14803] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 494.516487][T14807] delete_channel: no stack [ 495.214019][T14824] delete_channel: no stack [ 495.285659][T14830] rxe_eth0 speed is unknown, defaulting to 1000 [ 495.411948][T14837] netlink: 'syz.7.2747': attribute type 9 has an invalid length. [ 495.422822][T14837] netlink: 134772 bytes leftover after parsing attributes in process `syz.7.2747'. [ 495.449889][T14838] delete_channel: no stack [ 495.834810][T14855] delete_channel: no stack [ 496.024446][T14859] delete_channel: no stack [ 496.060281][T14864] netlink: 'syz.6.2759': attribute type 10 has an invalid length. [ 496.090002][T14864] team0: Device hsr_slave_0 failed to register rx_handler [ 496.254922][T14875] delete_channel: no stack [ 496.303310][T14878] netlink: 'syz.4.2765': attribute type 10 has an invalid length. [ 496.316782][T14878] team0: Device wg1 is of different type [ 496.428057][T14884] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.2768'. [ 496.744469][T14888] delete_channel: no stack [ 497.297481][T14900] delete_channel: no stack [ 497.463768][T14905] rose0: tun_chr_ioctl cmd 1074025677 [ 497.470677][T14905] rose0: linktype set to 773 [ 497.564898][T14908] delete_channel: no stack [ 497.759056][T14917] syzkaller0: entered promiscuous mode [ 497.766439][T14917] syzkaller0: entered allmulticast mode [ 497.813485][T14920] delete_channel: no stack [ 501.542279][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.548715][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.228895][T14932] rxe_eth0 speed is unknown, defaulting to 1000 [ 502.424575][T14940] delete_channel: no stack [ 502.809006][T14961] delete_channel: no stack [ 502.956485][T14967] delete_channel: no stack [ 503.042878][T14972] netlink: 'syz.7.2802': attribute type 10 has an invalid length. [ 503.050836][T14972] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2802'. [ 503.061339][T14972] bridge0: port 3(team0) entered blocking state [ 503.067957][T14972] bridge0: port 3(team0) entered disabled state [ 503.075362][T14972] team0: entered allmulticast mode [ 503.080498][T14972] team_slave_0: entered allmulticast mode [ 503.086337][T14972] team_slave_1: entered allmulticast mode [ 503.093568][T14972] team0: entered promiscuous mode [ 503.098625][T14972] team_slave_0: entered promiscuous mode [ 503.104522][T14972] team_slave_1: entered promiscuous mode [ 503.110673][T14972] bridge0: port 3(team0) entered blocking state [ 503.117052][T14972] bridge0: port 3(team0) entered forwarding state [ 503.892405][T14987] delete_channel: no stack [ 504.011224][T14991] delete_channel: no stack [ 504.322959][T14996] rxe_eth0 speed is unknown, defaulting to 1000 [ 504.366343][T15001] netlink: 'syz.7.2812': attribute type 10 has an invalid length. [ 504.414311][T15001] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 504.434248][T15001] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 504.452566][T15001] team0: Port device netdevsim0 added [ 504.464124][T15003] netlink: 'syz.7.2812': attribute type 10 has an invalid length. [ 504.498799][T15003] netdevsim netdevsim7 netdevsim0: left promiscuous mode [ 504.511138][T15003] netdevsim netdevsim7 netdevsim0: left allmulticast mode [ 504.569710][T15003] team0: Port device netdevsim0 removed [ 504.581097][T15003] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 504.594248][T15007] netlink: 'syz.6.2814': attribute type 21 has an invalid length. [ 504.606762][T15007] netlink: 'syz.6.2814': attribute type 20 has an invalid length. [ 504.833385][T15017] delete_channel: no stack [ 504.853558][T15019] delete_channel: no stack [ 505.173972][T15030] netlink: 'syz.6.2821': attribute type 21 has an invalid length. [ 505.192791][T15030] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2821'. [ 507.234901][T15036] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2826'. [ 507.249934][T15036] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.289725][T15036] bridge_slave_0 (unregistering): left allmulticast mode [ 507.298687][T15036] bridge_slave_0 (unregistering): left promiscuous mode [ 507.308222][T15036] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.356122][T15040] netlink: 'syz.4.2826': attribute type 10 has an invalid length. [ 507.364327][T15040] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2826'. [ 507.383290][T15048] netlink: 'syz.6.2828': attribute type 10 has an invalid length. [ 507.393239][T15048] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2828'. [ 507.452496][T15048] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 507.581571][T15050] delete_channel: no stack [ 507.682801][T15054] delete_channel: no stack [ 507.818678][T15059] netlink: 'syz.6.2833': attribute type 10 has an invalid length. [ 507.901590][T15059] team0: Port device netdevsim0 added [ 508.321779][T15080] delete_channel: no stack [ 508.619993][T15090] FAULT_INJECTION: forcing a failure. [ 508.619993][T15090] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 508.647362][T15079] rxe_eth0 speed is unknown, defaulting to 1000 [ 508.665767][T15090] CPU: 0 PID: 15090 Comm: syz.4.2844 Not tainted syzkaller #0 [ 508.673284][T15090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 508.683361][T15090] Call Trace: [ 508.686654][T15090] [ 508.689598][T15090] dump_stack_lvl+0x18c/0x250 [ 508.694301][T15090] ? show_regs_print_info+0x20/0x20 [ 508.699514][T15090] ? load_image+0x420/0x420 [ 508.704054][T15090] should_fail_ex+0x394/0x4c0 [ 508.708770][T15090] copyout+0x1a/0x90 [ 508.712706][T15090] _copy_to_iter+0x42b/0x1110 [ 508.717409][T15090] ? __virt_addr_valid+0x10c/0x380 [ 508.722561][T15090] ? iov_iter_init+0x1e0/0x1e0 [ 508.727352][T15090] ? __virt_addr_valid+0x10c/0x380 [ 508.732490][T15090] ? __virt_addr_valid+0x10c/0x380 [ 508.737626][T15090] ? __virt_addr_valid+0x10c/0x380 [ 508.742758][T15090] ? __check_object_size+0x4fc/0xa40 [ 508.748070][T15090] __skb_datagram_iter+0xdb/0x780 [ 508.753127][T15090] ? skb_copy_datagram_iter+0x200/0x200 [ 508.758702][T15090] skb_copy_datagram_iter+0xb1/0x200 [ 508.764013][T15090] netlink_recvmsg+0x2d4/0xe60 [ 508.768815][T15090] ? netlink_sendmsg+0xbf0/0xbf0 [ 508.773782][T15090] ? aa_af_perm+0x330/0x330 [ 508.778321][T15090] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 508.783626][T15090] ? security_socket_recvmsg+0x89/0xb0 [ 508.789108][T15090] ? netlink_sendmsg+0xbf0/0xbf0 [ 508.794076][T15090] ____sys_recvmsg+0x2bd/0x5d0 [ 508.798881][T15090] ? __sys_recvmsg_sock+0x50/0x50 [ 508.803959][T15090] ? import_iovec+0x73/0xa0 [ 508.808497][T15090] ___sys_recvmsg+0x214/0x590 [ 508.813209][T15090] ? __sys_recvmsg+0x2a0/0x2a0 [ 508.818009][T15090] ? trace_call_bpf+0xc3/0x6c0 [ 508.822795][T15090] ? trace_call_bpf+0x5e9/0x6c0 [ 508.827682][T15090] ? __fget_files+0x3fc/0x460 [ 508.832405][T15090] __x64_sys_recvmsg+0x21e/0x2f0 [ 508.837377][T15090] ? ___sys_recvmsg+0x590/0x590 [ 508.842275][T15090] ? lockdep_hardirqs_on+0x98/0x150 [ 508.847502][T15090] do_syscall_64+0x55/0xb0 [ 508.851943][T15090] ? clear_bhb_loop+0x40/0x90 [ 508.856644][T15090] ? clear_bhb_loop+0x40/0x90 [ 508.861348][T15090] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 508.867279][T15090] RIP: 0033:0x7f805419e559 [ 508.871716][T15090] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 508.891351][T15090] RSP: 002b:00007f8055046028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 508.899806][T15090] RAX: ffffffffffffffda RBX: 00007f8054425fa0 RCX: 00007f805419e559 [ 508.907815][T15090] RDX: 0000000000002122 RSI: 00002000000030c0 RDI: 0000000000000003 [ 508.915814][T15090] RBP: 00007f8055046090 R08: 0000000000000000 R09: 0000000000000000 [ 508.923899][T15090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 508.931894][T15090] R13: 00007f8054426038 R14: 00007f8054425fa0 R15: 00007ffc4d9ac878 [ 508.939910][T15090] [ 509.166768][T15091] delete_channel: no stack [ 509.320144][T15096] FAULT_INJECTION: forcing a failure. [ 509.320144][T15096] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 509.375821][T15096] CPU: 1 PID: 15096 Comm: syz.4.2848 Not tainted syzkaller #0 [ 509.383346][T15096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 509.393425][T15096] Call Trace: [ 509.396718][T15096] [ 509.399671][T15096] dump_stack_lvl+0x18c/0x250 [ 509.404377][T15096] ? show_regs_print_info+0x20/0x20 [ 509.409594][T15096] ? load_image+0x420/0x420 [ 509.414124][T15096] ? __might_fault+0xaa/0x120 [ 509.418824][T15096] ? __lock_acquire+0x7eb0/0x7eb0 [ 509.423875][T15096] should_fail_ex+0x394/0x4c0 [ 509.428587][T15096] _copy_from_iter+0x1cd/0x1290 [ 509.433468][T15096] ? __might_fault+0xaa/0x120 [ 509.438179][T15096] ? copyout_mc+0x70/0x70 [ 509.442536][T15096] ? copyout_mc+0x70/0x70 [ 509.446895][T15096] ? __virt_addr_valid+0x10c/0x380 [ 509.452036][T15096] ? page_copy_sane+0x4e/0x270 [ 509.456824][T15096] copy_page_from_iter+0x7b/0x100 [ 509.461877][T15096] skb_copy_datagram_from_iter+0x2ea/0x6f0 [ 509.467715][T15096] tun_get_user+0xc99/0x3d30 [ 509.472399][T15096] ? aa_file_perm+0x3e3/0xee0 [ 509.477106][T15096] ? rcu_read_unlock+0xa0/0xa0 [ 509.481910][T15096] ? tun_get+0x1c/0x2e0 [ 509.486093][T15096] ? __lock_acquire+0x7eb0/0x7eb0 [ 509.491149][T15096] ? tun_get+0x1c/0x2e0 [ 509.495337][T15096] tun_chr_write_iter+0x119/0x200 [ 509.500395][T15096] vfs_write+0x474/0x9a0 [ 509.504665][T15096] ? file_end_write+0x250/0x250 [ 509.509534][T15096] ? __fget_files+0x3fc/0x460 [ 509.514230][T15096] ? __fdget_pos+0x1d8/0x330 [ 509.518832][T15096] ? ksys_write+0x74/0x260 [ 509.523252][T15096] ksys_write+0x151/0x260 [ 509.527581][T15096] ? __ia32_sys_read+0x90/0x90 [ 509.532345][T15096] ? lockdep_hardirqs_on+0x98/0x150 [ 509.537545][T15096] do_syscall_64+0x55/0xb0 [ 509.541954][T15096] ? clear_bhb_loop+0x40/0x90 [ 509.546622][T15096] ? clear_bhb_loop+0x40/0x90 [ 509.551293][T15096] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 509.557187][T15096] RIP: 0033:0x7f805419e559 [ 509.561595][T15096] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 509.581200][T15096] RSP: 002b:00007f8055046028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 509.589612][T15096] RAX: ffffffffffffffda RBX: 00007f8054425fa0 RCX: 00007f805419e559 [ 509.597576][T15096] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 509.605537][T15096] RBP: 00007f8055046090 R08: 0000000000000000 R09: 0000000000000000 [ 509.613498][T15096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 509.621475][T15096] R13: 00007f8054426038 R14: 00007f8054425fa0 R15: 00007ffc4d9ac878 [ 509.629468][T15096] [ 509.826106][T15106] delete_channel: no stack [ 510.099012][T15126] netlink: 'syz.7.2852': attribute type 3 has an invalid length. [ 510.106963][T15126] netlink: 'syz.7.2852': attribute type 5 has an invalid length. [ 510.116663][T15126] netlink: 'syz.7.2852': attribute type 6 has an invalid length. [ 510.124751][T15126] netlink: 197520 bytes leftover after parsing attributes in process `syz.7.2852'. [ 510.238743][T15129] delete_channel: no stack [ 511.213312][T15146] sit0: entered promiscuous mode [ 511.324677][T15141] delete_channel: no stack [ 511.444992][T15159] delete_channel: no stack [ 511.568888][T15162] ªªªªª»: renamed from virt_wifi0 [ 511.944156][T15177] delete_channel: no stack [ 512.004329][T15182] delete_channel: no stack [ 512.004879][T15181] FAULT_INJECTION: forcing a failure. [ 512.004879][T15181] name failslab, interval 1, probability 0, space 0, times 0 [ 512.021732][T15181] CPU: 0 PID: 15181 Comm: syz.6.2875 Not tainted syzkaller #0 [ 512.029210][T15181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 512.039281][T15181] Call Trace: [ 512.042576][T15181] [ 512.045528][T15181] dump_stack_lvl+0x18c/0x250 [ 512.050229][T15181] ? show_regs_print_info+0x20/0x20 [ 512.055447][T15181] ? load_image+0x420/0x420 [ 512.059994][T15181] should_fail_ex+0x394/0x4c0 [ 512.064703][T15181] should_failslab+0x9/0x20 [ 512.069216][T15181] slab_pre_alloc_hook+0x59/0x300 [ 512.074242][T15181] ? inet_bind2_bucket_find+0x5f4/0x630 [ 512.079793][T15181] kmem_cache_alloc+0x5a/0x2c0 [ 512.084558][T15181] ? __inet_hash_connect+0xbda/0x1870 [ 512.089930][T15181] __inet_hash_connect+0xbda/0x1870 [ 512.095138][T15181] ? inet_bhash2_reset_saddr+0x80/0x80 [ 512.100592][T15181] ? sk_setup_caps+0x704/0x940 [ 512.105359][T15181] ? inet6_hash_connect+0x7b/0xe0 [ 512.110384][T15181] tcp_v6_connect+0xf50/0x1900 [ 512.115152][T15181] ? tcp_v6_pre_connect+0xf0/0xf0 [ 512.120166][T15181] ? __local_bh_enable_ip+0x13a/0x1c0 [ 512.125534][T15181] ? lockdep_hardirqs_on+0x98/0x150 [ 512.130739][T15181] ? do_raw_spin_unlock+0x121/0x230 [ 512.135944][T15181] ? mptcp_token_new_connect+0x4b9/0x620 [ 512.141583][T15181] mptcp_connect+0x403/0x5e0 [ 512.146174][T15181] __inet_stream_connect+0x254/0xdf0 [ 512.151484][T15181] ? inet_dgram_connect+0x340/0x340 [ 512.156693][T15181] tcp_sendmsg_fastopen+0x3af/0x5f0 [ 512.161896][T15181] mptcp_sendmsg_fastopen+0x121/0x4c0 [ 512.167268][T15181] mptcp_sendmsg+0x144c/0x1670 [ 512.172030][T15181] ? aa_sk_perm+0x83c/0x970 [ 512.176538][T15181] ? aa_sk_perm+0x83c/0x970 [ 512.181053][T15181] ? aa_af_perm+0x330/0x330 [ 512.185553][T15181] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 512.191964][T15181] ? mptcp_shutdown+0x80/0x80 [ 512.196642][T15181] ? inet_send_prepare+0xb2/0x250 [ 512.201663][T15181] ? inet6_sendmsg+0x5f/0xd0 [ 512.206246][T15181] ? inet6_compat_ioctl+0x3c0/0x3c0 [ 512.211450][T15181] ____sys_sendmsg+0x61b/0x980 [ 512.216228][T15181] ? __asan_memset+0x22/0x40 [ 512.220816][T15181] ? __sys_sendmsg_sock+0x30/0x30 [ 512.225839][T15181] ? __import_iovec+0x3fa/0x850 [ 512.230697][T15181] ? import_iovec+0x73/0xa0 [ 512.235210][T15181] ___sys_sendmsg+0x2a6/0x360 [ 512.239884][T15181] ? get_pid_task+0x20/0x1e0 [ 512.244486][T15181] ? __sys_sendmsg+0x2b0/0x2b0 [ 512.249267][T15181] ? __lock_acquire+0x7eb0/0x7eb0 [ 512.254313][T15181] __se_sys_sendmsg+0x1d0/0x2c0 [ 512.259163][T15181] ? __x64_sys_sendmsg+0x80/0x80 [ 512.264116][T15181] ? lockdep_hardirqs_on+0x98/0x150 [ 512.269317][T15181] do_syscall_64+0x55/0xb0 [ 512.273727][T15181] ? clear_bhb_loop+0x40/0x90 [ 512.278399][T15181] ? clear_bhb_loop+0x40/0x90 [ 512.283073][T15181] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 512.288967][T15181] RIP: 0033:0x7ff9eeb9e559 [ 512.293378][T15181] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 512.312995][T15181] RSP: 002b:00007ff9efa70028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 512.321424][T15181] RAX: ffffffffffffffda RBX: 00007ff9eee25fa0 RCX: 00007ff9eeb9e559 [ 512.329403][T15181] RDX: 0000000020000001 RSI: 0000200000000080 RDI: 0000000000000004 [ 512.337376][T15181] RBP: 00007ff9efa70090 R08: 0000000000000000 R09: 0000000000000000 [ 512.345347][T15181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 512.353312][T15181] R13: 00007ff9eee26038 R14: 00007ff9eee25fa0 R15: 00007ffcfdf0c3c8 [ 512.361292][T15181] [ 512.435576][T15181] rxe_eth0 speed is unknown, defaulting to 1000 [ 512.588986][T15196] FAULT_INJECTION: forcing a failure. [ 512.588986][T15196] name failslab, interval 1, probability 0, space 0, times 0 [ 512.601940][T15196] CPU: 0 PID: 15196 Comm: syz.7.2879 Not tainted syzkaller #0 [ 512.609426][T15196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 512.619503][T15196] Call Trace: [ 512.622791][T15196] [ 512.625733][T15196] dump_stack_lvl+0x18c/0x250 [ 512.630431][T15196] ? show_regs_print_info+0x20/0x20 [ 512.635654][T15196] ? load_image+0x420/0x420 [ 512.640188][T15196] ? __might_sleep+0xe0/0xe0 [ 512.644802][T15196] ? __lock_acquire+0x7eb0/0x7eb0 [ 512.649857][T15196] should_fail_ex+0x394/0x4c0 [ 512.654562][T15196] should_failslab+0x9/0x20 [ 512.659079][T15196] slab_pre_alloc_hook+0x59/0x300 [ 512.664103][T15196] kmem_cache_alloc+0x5a/0x2c0 [ 512.668880][T15196] ? sk_prot_alloc+0x57/0x210 [ 512.673553][T15196] sk_prot_alloc+0x57/0x210 [ 512.678048][T15196] ? sk_alloc+0x24/0x350 [ 512.682282][T15196] sk_alloc+0x3a/0x350 [ 512.686354][T15196] inet6_create+0x7d3/0x1160 [ 512.690961][T15196] ? inet6_create+0x80/0x1160 [ 512.695663][T15196] __sock_create+0x49e/0x940 [ 512.700269][T15196] mptcp_subflow_create_socket+0x10c/0xad0 [ 512.706088][T15196] ? __mptcp_subflow_connect+0x14d0/0x14d0 [ 512.711919][T15196] ? mark_lock+0x94/0x320 [ 512.716264][T15196] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 512.722248][T15196] __mptcp_nmpc_sk+0x157/0x720 [ 512.727014][T15196] ? __bpf_trace_subflow_check_data_avail+0x160/0x160 [ 512.733769][T15196] ? __local_bh_enable_ip+0x13a/0x1c0 [ 512.739135][T15196] ? lockdep_hardirqs_on+0x98/0x150 [ 512.744336][T15196] ? __local_bh_enable_ip+0x13a/0x1c0 [ 512.749714][T15196] mptcp_sendmsg_fastopen+0x7c/0x4c0 [ 512.755001][T15196] mptcp_sendmsg+0x144c/0x1670 [ 512.759764][T15196] ? aa_sk_perm+0x83c/0x970 [ 512.764269][T15196] ? aa_sk_perm+0x83c/0x970 [ 512.768773][T15196] ? aa_af_perm+0x330/0x330 [ 512.773275][T15196] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 512.779683][T15196] ? mptcp_shutdown+0x80/0x80 [ 512.784530][T15196] ? inet_send_prepare+0xb2/0x250 [ 512.789549][T15196] ? inet6_sendmsg+0x5f/0xd0 [ 512.794130][T15196] ? inet6_compat_ioctl+0x3c0/0x3c0 [ 512.799319][T15196] ____sys_sendmsg+0x61b/0x980 [ 512.804106][T15196] ? __asan_memset+0x22/0x40 [ 512.808699][T15196] ? __sys_sendmsg_sock+0x30/0x30 [ 512.813717][T15196] ? __import_iovec+0x3fa/0x850 [ 512.818571][T15196] ? import_iovec+0x73/0xa0 [ 512.823079][T15196] ___sys_sendmsg+0x2a6/0x360 [ 512.827750][T15196] ? get_pid_task+0x20/0x1e0 [ 512.832365][T15196] ? __sys_sendmsg+0x2b0/0x2b0 [ 512.837161][T15196] ? __lock_acquire+0x7eb0/0x7eb0 [ 512.842209][T15196] __se_sys_sendmsg+0x1d0/0x2c0 [ 512.847067][T15196] ? perf_trace_preemptirq_template+0x269/0x330 [ 512.853318][T15196] ? __x64_sys_sendmsg+0x80/0x80 [ 512.858275][T15196] ? lockdep_hardirqs_on+0x98/0x150 [ 512.863478][T15196] do_syscall_64+0x55/0xb0 [ 512.867891][T15196] ? clear_bhb_loop+0x40/0x90 [ 512.872560][T15196] ? clear_bhb_loop+0x40/0x90 [ 512.877232][T15196] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 512.883124][T15196] RIP: 0033:0x7f3107d9e559 [ 512.887533][T15196] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 512.907134][T15196] RSP: 002b:00007f3108c71028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 512.915544][T15196] RAX: ffffffffffffffda RBX: 00007f3108025fa0 RCX: 00007f3107d9e559 [ 512.923512][T15196] RDX: e07e872420dfefca RSI: 0000200000002b40 RDI: 0000000000000006 [ 512.931565][T15196] RBP: 00007f3108c71090 R08: 0000000000000000 R09: 0000000000000000 [ 512.939529][T15196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 512.947491][T15196] R13: 00007f3108026038 R14: 00007f3108025fa0 R15: 00007ffe2faf2488 [ 512.955475][T15196] [ 513.040369][T15196] netlink: 'syz.7.2879': attribute type 3 has an invalid length. [ 513.103715][T15196] netlink: 'syz.7.2879': attribute type 5 has an invalid length. [ 513.120780][T15196] netlink: 'syz.7.2879': attribute type 6 has an invalid length. [ 513.129090][T15196] netlink: 197520 bytes leftover after parsing attributes in process `syz.7.2879'. [ 513.364216][T15219] delete_channel: no stack [ 513.404004][T15221] delete_channel: no stack [ 514.002410][T15245] delete_channel: no stack [ 514.090686][T15247] delete_channel: no stack [ 514.397467][T15255] netlink: 'syz.6.2900': attribute type 4 has an invalid length. [ 514.427890][T15255] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.2900'. [ 514.756431][T15272] delete_channel: no stack [ 514.856374][T15278] netlink: 209844 bytes leftover after parsing attributes in process `syz.7.2908'. [ 515.088491][T15289] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2909'. [ 515.111298][T15286] netlink: 'syz.4.2909': attribute type 3 has an invalid length. [ 515.123289][T15286] netlink: 'syz.4.2909': attribute type 5 has an invalid length. [ 515.131089][T15286] netlink: 'syz.4.2909': attribute type 6 has an invalid length. [ 515.140974][T15286] netlink: 197520 bytes leftover after parsing attributes in process `syz.4.2909'. [ 515.296206][T15291] netlink: 148156 bytes leftover after parsing attributes in process `syz.4.2911'. [ 515.523651][T15270] delete_channel: no stack [ 515.876711][T15306] delete_channel: no stack [ 516.342595][T15327] rxe_eth0 speed is unknown, defaulting to 1000 [ 516.964997][T15316] delete_channel: no stack [ 517.031863][T15341] netlink: 'syz.7.2926': attribute type 4 has an invalid length. [ 517.146498][T15344] delete_channel: no stack [ 517.525851][T15347] sit0: left promiscuous mode [ 517.731916][T15353] netlink: 'syz.7.2931': attribute type 10 has an invalid length. [ 517.773726][T15353] bridge0: port 3(team0) entered disabled state [ 517.850947][T15353] team0 (unregistering): left allmulticast mode [ 517.857487][T15353] team_slave_0: left allmulticast mode [ 517.862972][T15353] team_slave_1: left allmulticast mode [ 517.870011][T15353] team0 (unregistering): left promiscuous mode [ 517.876924][T15353] team_slave_0: left promiscuous mode [ 517.882487][T15353] team_slave_1: left promiscuous mode [ 517.888365][T15353] bridge0: port 3(team0) entered disabled state [ 517.912359][T15353] team0 (unregistering): Port device team_slave_0 removed [ 517.931706][T15353] team0 (unregistering): Port device team_slave_1 removed [ 517.950015][T15358] sit0: entered promiscuous mode [ 517.990628][T15357] netlink: 'syz.4.2933': attribute type 39 has an invalid length. [ 518.000432][T15357] macvlan0: entered promiscuous mode [ 518.007942][T15357] macvlan0: entered allmulticast mode [ 518.015148][T15357] veth1_vlan: entered allmulticast mode [ 518.150895][T15365] netlink: 209844 bytes leftover after parsing attributes in process `syz.6.2935'. [ 518.385171][T15371] delete_channel: no stack [ 518.434891][T15376] netlink: 'syz.6.2940': attribute type 39 has an invalid length. [ 518.443217][T15376] macvlan0: entered promiscuous mode [ 518.448654][T15376] macvlan0: entered allmulticast mode [ 518.453747][T15359] delete_channel: no stack [ 518.466458][T15376] veth1_vlan: entered allmulticast mode [ 518.734079][T15396] FAULT_INJECTION: forcing a failure. [ 518.734079][T15396] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 518.762632][T15396] CPU: 1 PID: 15396 Comm: syz.7.2948 Not tainted syzkaller #0 [ 518.770150][T15396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 518.780202][T15396] Call Trace: [ 518.783478][T15396] [ 518.786408][T15396] dump_stack_lvl+0x18c/0x250 [ 518.791095][T15396] ? show_regs_print_info+0x20/0x20 [ 518.796290][T15396] ? load_image+0x420/0x420 [ 518.800802][T15396] ? __might_fault+0xaa/0x120 [ 518.805481][T15396] ? __lock_acquire+0x7eb0/0x7eb0 [ 518.810511][T15396] should_fail_ex+0x394/0x4c0 [ 518.815197][T15396] _copy_from_iter+0x1cd/0x1290 [ 518.820057][T15396] ? __alloc_skb+0x138/0x2c0 [ 518.824654][T15396] ? copyout_mc+0x70/0x70 [ 518.828985][T15396] ? __virt_addr_valid+0x10c/0x380 [ 518.834092][T15396] ? __virt_addr_valid+0x10c/0x380 [ 518.839203][T15396] ? __virt_addr_valid+0x10c/0x380 [ 518.844318][T15396] ? __check_object_size+0x4fc/0xa40 [ 518.849619][T15396] udplite_getfrag+0x4d/0xa0 [ 518.854210][T15396] __ip_append_data+0x2f3b/0x3bf0 [ 518.859262][T15396] ? udp_sendmsg+0x23d0/0x23d0 [ 518.864034][T15396] ? ip_setup_cork+0x840/0x840 [ 518.868799][T15396] ? __local_bh_enable_ip+0x13a/0x1c0 [ 518.874169][T15396] ? lockdep_hardirqs_on+0x98/0x150 [ 518.879376][T15396] ip_append_data+0x10d/0x180 [ 518.884056][T15396] ? udp_sendmsg+0x23d0/0x23d0 [ 518.888841][T15396] udp_sendmsg+0x459/0x23d0 [ 518.893352][T15396] ? mark_lock+0x94/0x320 [ 518.897680][T15396] ? udp_sendmsg+0x23d0/0x23d0 [ 518.902437][T15396] ? mark_lock+0x94/0x320 [ 518.906765][T15396] ? udp_cmsg_send+0x350/0x350 [ 518.911545][T15396] ? perf_trace_lock_acquire+0x105/0x400 [ 518.917174][T15396] ? verify_lock_unused+0x140/0x140 [ 518.922365][T15396] ? aa_label_sk_perm+0x500/0x6a0 [ 518.927399][T15396] udpv6_sendmsg+0x94d/0x2390 [ 518.932082][T15396] ? udpv6_sendmsg+0x2390/0x2390 [ 518.937014][T15396] ? __might_sleep+0xe0/0xe0 [ 518.941598][T15396] ? udp_v6_early_demux+0xf90/0xf90 [ 518.946813][T15396] ? aa_af_perm+0x330/0x330 [ 518.951320][T15396] ? sock_rps_record_flow+0x19/0x3f0 [ 518.956603][T15396] ? inet_send_prepare+0x5b/0x250 [ 518.961621][T15396] ? inet6_sendmsg+0x5f/0xd0 [ 518.966206][T15396] ? inet6_compat_ioctl+0x3c0/0x3c0 [ 518.971404][T15396] ____sys_sendmsg+0x61b/0x980 [ 518.976173][T15396] ? __asan_memset+0x22/0x40 [ 518.980762][T15396] ? __sys_sendmsg_sock+0x30/0x30 [ 518.985790][T15396] ? __import_iovec+0x5f2/0x850 [ 518.990658][T15396] ? import_iovec+0x73/0xa0 [ 518.995189][T15396] ___sys_sendmsg+0x2a6/0x360 [ 518.999865][T15396] ? get_pid_task+0x20/0x1e0 [ 519.004456][T15396] ? __sys_sendmsg+0x2b0/0x2b0 [ 519.009235][T15396] ? __lock_acquire+0x7eb0/0x7eb0 [ 519.014278][T15396] __se_sys_sendmsg+0x1d0/0x2c0 [ 519.019128][T15396] ? __x64_sys_sendmsg+0x80/0x80 [ 519.024079][T15396] ? lockdep_hardirqs_on+0x98/0x150 [ 519.029280][T15396] do_syscall_64+0x55/0xb0 [ 519.033690][T15396] ? clear_bhb_loop+0x40/0x90 [ 519.038362][T15396] ? clear_bhb_loop+0x40/0x90 [ 519.043043][T15396] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 519.048953][T15396] RIP: 0033:0x7f3107d9e559 [ 519.053377][T15396] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 519.072980][T15396] RSP: 002b:00007f3108c71028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 519.081389][T15396] RAX: ffffffffffffffda RBX: 00007f3108025fa0 RCX: 00007f3107d9e559 [ 519.089354][T15396] RDX: 0000000000048800 RSI: 0000200000000880 RDI: 0000000000000003 [ 519.097323][T15396] RBP: 00007f3108c71090 R08: 0000000000000000 R09: 0000000000000000 [ 519.105375][T15396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 519.113339][T15396] R13: 00007f3108026038 R14: 00007f3108025fa0 R15: 00007ffe2faf2488 [ 519.121321][T15396] [ 519.146085][T15394] netlink: 'syz.5.2947': attribute type 27 has an invalid length. [ 519.155792][T15395] netlink: 'syz.6.2946': attribute type 10 has an invalid length. [ 519.172750][T15395] netlink: 2 bytes leftover after parsing attributes in process `syz.6.2946'. [ 519.182138][T15395] hsr0: entered promiscuous mode [ 519.188477][T15395] bridge0: port 3(hsr0) entered blocking state [ 519.196254][T15395] bridge0: port 3(hsr0) entered disabled state [ 519.202875][T15395] hsr0: entered allmulticast mode [ 519.208391][T15395] hsr_slave_0: entered allmulticast mode [ 519.214989][T15395] hsr_slave_1: entered allmulticast mode [ 519.226721][T15395] bridge0: port 3(hsr0) entered blocking state [ 519.233237][T15395] bridge0: port 3(hsr0) entered forwarding state [ 519.250236][T15397] netlink: 'syz.5.2947': attribute type 27 has an invalid length. [ 519.315794][T15401] delete_channel: no stack [ 519.783387][T15427] delete_channel: no stack [ 520.296880][T15405] delete_channel: no stack [ 520.454230][T15452] delete_channel: no stack [ 521.210209][T15476] netlink: 209844 bytes leftover after parsing attributes in process `syz.6.2975'. [ 521.716885][T15490] delete_channel: no stack [ 522.184625][T15478] delete_channel: no stack [ 522.189989][T15510] netlink: 2220 bytes leftover after parsing attributes in process `syz.7.2988'. [ 522.564752][T15523] delete_channel: no stack [ 522.699001][T15528] netlink: 'syz.6.2994': attribute type 8 has an invalid length. [ 522.706958][T15528] netlink: 'syz.6.2994': attribute type 1 has an invalid length. [ 522.715417][T15528] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.2994'. [ 523.010366][T15543] netlink: 'syz.6.2999': attribute type 10 has an invalid length. [ 523.038178][T15543] team0: Port device geneve1 added [ 523.336739][T15547] delete_channel: no stack [ 523.555262][T15556] FAULT_INJECTION: forcing a failure. [ 523.555262][T15556] name failslab, interval 1, probability 0, space 0, times 0 [ 523.576241][T15556] CPU: 1 PID: 15556 Comm: syz.6.3003 Not tainted syzkaller #0 [ 523.583754][T15556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 523.593838][T15556] Call Trace: [ 523.597144][T15556] [ 523.600090][T15556] dump_stack_lvl+0x18c/0x250 [ 523.604794][T15556] ? show_regs_print_info+0x20/0x20 [ 523.610032][T15556] ? load_image+0x420/0x420 [ 523.614566][T15556] ? __might_sleep+0xe0/0xe0 [ 523.619156][T15556] ? __lock_acquire+0x7eb0/0x7eb0 [ 523.624205][T15556] ? lock_chain_count+0x20/0x20 [ 523.629099][T15556] should_fail_ex+0x394/0x4c0 [ 523.633824][T15556] should_failslab+0x9/0x20 [ 523.638362][T15556] slab_pre_alloc_hook+0x59/0x300 [ 523.643431][T15556] ? _raw_spin_unlock+0x40/0x40 [ 523.648315][T15556] ? string+0x257/0x290 [ 523.652505][T15556] ? __request_module+0x2d1/0x600 [ 523.657569][T15556] __kmem_cache_alloc_node+0x53/0x250 [ 523.662989][T15556] ? __request_module+0x2d1/0x600 [ 523.668054][T15556] kmalloc_trace+0x2a/0xe0 [ 523.672489][T15556] __request_module+0x2d1/0x600 [ 523.672519][T15556] ? end_current_label_crit_section+0x170/0x170 [ 523.683782][T15556] ? module_enforce_rwx_sections+0x150/0x150 [ 523.689806][T15556] ? apparmor_capable+0x137/0x1a0 [ 523.694848][T15556] ? capable+0x88/0xe0 [ 523.698935][T15556] ? dev_load+0x21/0x1f0 [ 523.703183][T15556] devinet_ioctl+0x127/0x1d70 [ 523.707871][T15556] ? __might_fault+0xc6/0x120 [ 523.712544][T15556] ? inet_ifa_byprefix+0x2a0/0x2a0 [ 523.717648][T15556] ? _copy_from_user+0xa5/0xe0 [ 523.722409][T15556] ? get_user_ifreq+0x12b/0x180 [ 523.727260][T15556] inet_ioctl+0x392/0x560 [ 523.731593][T15556] ? tomoyo_path_number_perm+0x217/0x5e0 [ 523.737232][T15556] ? inet_shutdown+0x370/0x370 [ 523.741989][T15556] ? slab_free_freelist_hook+0x130/0x1a0 [ 523.747619][T15556] ? tomoyo_path_number_perm+0x4b7/0x5e0 [ 523.753261][T15556] ? __kmem_cache_free+0xba/0x1f0 [ 523.758289][T15556] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 523.763779][T15556] sock_do_ioctl+0xfc/0x310 [ 523.768324][T15556] ? sock_show_fdinfo+0xb0/0xb0 [ 523.773247][T15556] sock_ioctl+0x5be/0x7e0 [ 523.777603][T15556] ? sock_poll+0x3e0/0x3e0 [ 523.782022][T15556] ? bpf_lsm_file_ioctl+0x9/0x10 [ 523.786958][T15556] ? security_file_ioctl+0x80/0xa0 [ 523.792066][T15556] ? sock_poll+0x3e0/0x3e0 [ 523.796479][T15556] __se_sys_ioctl+0xfd/0x170 [ 523.801064][T15556] do_syscall_64+0x55/0xb0 [ 523.805475][T15556] ? clear_bhb_loop+0x40/0x90 [ 523.810143][T15556] ? clear_bhb_loop+0x40/0x90 [ 523.814810][T15556] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 523.820725][T15556] RIP: 0033:0x7ff9eeb9e559 [ 523.825132][T15556] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 523.844742][T15556] RSP: 002b:00007ff9efa70028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 523.853153][T15556] RAX: ffffffffffffffda RBX: 00007ff9eee25fa0 RCX: 00007ff9eeb9e559 [ 523.861117][T15556] RDX: 0000200000000000 RSI: 0000000000008935 RDI: 0000000000000004 [ 523.869083][T15556] RBP: 00007ff9efa70090 R08: 0000000000000000 R09: 0000000000000000 [ 523.877052][T15556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 523.885039][T15556] R13: 00007ff9eee26038 R14: 00007ff9eee25fa0 R15: 00007ffcfdf0c3c8 [ 523.893024][T15556] [ 523.914995][T15534] delete_channel: no stack [ 524.012300][T15564] netlink: 144316 bytes leftover after parsing attributes in process `syz.6.3007'. [ 524.041125][T15566] netlink: 'syz.4.3006': attribute type 2 has an invalid length. [ 524.049217][T15566] netlink: 'syz.4.3006': attribute type 8 has an invalid length. [ 524.057596][T15566] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3006'. [ 524.270349][ T5783] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 524.279227][ T5783] Bluetooth: hci1: Injecting HCI hardware error event [ 524.287584][ T5784] Bluetooth: hci1: hardware error 0x00 [ 524.544513][T15578] delete_channel: no stack [ 525.354929][T15604] delete_channel: no stack [ 525.428638][T15609] netlink: 65047 bytes leftover after parsing attributes in process `syz.5.3024'. [ 525.763610][T15592] delete_channel: no stack [ 525.993632][T15639] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.3029'. [ 526.032990][T15639] netlink: 128 bytes leftover after parsing attributes in process `syz.7.3029'. [ 526.061138][T15639] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 526.097776][T15639] netlink: 'syz.7.3029': attribute type 10 has an invalid length. [ 526.106007][T15639] netlink: 55 bytes leftover after parsing attributes in process `syz.7.3029'. [ 526.175187][T15642] Dead loop on virtual device ip6_vti0, fix it urgently! [ 526.414933][ T5784] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 527.082600][T15643] delete_channel: no stack [ 527.251302][T15655] FAULT_INJECTION: forcing a failure. [ 527.251302][T15655] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 527.265003][T15655] CPU: 0 PID: 15655 Comm: syz.5.3034 Not tainted syzkaller #0 [ 527.272486][T15655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 527.282554][T15655] Call Trace: [ 527.285833][T15655] [ 527.288759][T15655] dump_stack_lvl+0x18c/0x250 [ 527.293448][T15655] ? show_regs_print_info+0x20/0x20 [ 527.298643][T15655] ? load_image+0x420/0x420 [ 527.303152][T15655] ? __might_fault+0xaa/0x120 [ 527.307830][T15655] ? __lock_acquire+0x7eb0/0x7eb0 [ 527.312859][T15655] should_fail_ex+0x394/0x4c0 [ 527.317543][T15655] _copy_from_user+0x2f/0xe0 [ 527.322132][T15655] ___sys_sendmsg+0x1c7/0x360 [ 527.326808][T15655] ? get_pid_task+0x20/0x1e0 [ 527.331401][T15655] ? __sys_sendmsg+0x2b0/0x2b0 [ 527.336177][T15655] ? __lock_acquire+0x7eb0/0x7eb0 [ 527.341211][T15655] __se_sys_sendmsg+0x1d0/0x2c0 [ 527.346081][T15655] ? __x64_sys_sendmsg+0x80/0x80 [ 527.351040][T15655] ? lockdep_hardirqs_on+0x98/0x150 [ 527.356239][T15655] do_syscall_64+0x55/0xb0 [ 527.360651][T15655] ? clear_bhb_loop+0x40/0x90 [ 527.365324][T15655] ? clear_bhb_loop+0x40/0x90 [ 527.369999][T15655] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 527.375901][T15655] RIP: 0033:0x7f90d0b9e559 [ 527.380314][T15655] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 527.399923][T15655] RSP: 002b:00007f90d1ace028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 527.408333][T15655] RAX: ffffffffffffffda RBX: 00007f90d0e25fa0 RCX: 00007f90d0b9e559 [ 527.416295][T15655] RDX: 0000000000000000 RSI: 00002000000009c0 RDI: 0000000000000003 [ 527.424259][T15655] RBP: 00007f90d1ace090 R08: 0000000000000000 R09: 0000000000000000 [ 527.432221][T15655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 527.440182][T15655] R13: 00007f90d0e26038 R14: 00007f90d0e25fa0 R15: 00007ffd4da5cf98 [ 527.448159][T15655] [ 527.618078][T15667] netlink: 'syz.6.3037': attribute type 21 has an invalid length. [ 527.626625][T15667] netlink: 100 bytes leftover after parsing attributes in process `syz.6.3037'. [ 527.649069][T15667] netlink: 'syz.6.3037': attribute type 4 has an invalid length. [ 527.665771][T15667] Dead loop on virtual device ip6_vti0, fix it urgently! [ 527.775798][T15677] FAULT_INJECTION: forcing a failure. [ 527.775798][T15677] name failslab, interval 1, probability 0, space 0, times 0 [ 527.789916][T15677] CPU: 1 PID: 15677 Comm: syz.4.3041 Not tainted syzkaller #0 [ 527.797394][T15677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 527.807467][T15677] Call Trace: [ 527.810756][T15677] [ 527.813691][T15677] dump_stack_lvl+0x18c/0x250 [ 527.818367][T15677] ? sctp_sendmsg+0x1519/0x27b0 [ 527.823218][T15677] ? ___sys_sendmsg+0x2a6/0x360 [ 527.828071][T15677] ? show_regs_print_info+0x20/0x20 [ 527.833264][T15677] ? load_image+0x420/0x420 [ 527.837781][T15677] should_fail_ex+0x394/0x4c0 [ 527.842462][T15677] should_failslab+0x9/0x20 [ 527.846964][T15677] slab_pre_alloc_hook+0x59/0x300 [ 527.851982][T15677] ? sctp_add_bind_addr+0x8c/0x360 [ 527.857095][T15677] __kmem_cache_alloc_node+0x53/0x250 [ 527.862468][T15677] ? sctp_add_bind_addr+0x8c/0x360 [ 527.867572][T15677] kmalloc_trace+0x2a/0xe0 [ 527.871988][T15677] sctp_add_bind_addr+0x8c/0x360 [ 527.876924][T15677] sctp_copy_local_addr_list+0x31b/0x4e0 [ 527.882558][T15677] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 527.888275][T15677] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 527.894337][T15677] ? sctp_v4_is_any+0x35/0x60 [ 527.899008][T15677] ? sctp_copy_one_addr+0x8c/0x350 [ 527.904121][T15677] sctp_bind_addr_copy+0xb3/0x3c0 [ 527.909143][T15677] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 527.915467][T15677] sctp_connect_new_asoc+0x2f9/0x6a0 [ 527.920749][T15677] ? __sctp_connect+0xd80/0xd80 [ 527.925596][T15677] ? __local_bh_enable_ip+0x13a/0x1c0 [ 527.930988][T15677] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 527.936574][T15677] ? security_sctp_bind_connect+0x89/0xb0 [ 527.942308][T15677] sctp_sendmsg+0x1519/0x27b0 [ 527.947000][T15677] ? sctp_getsockopt+0xb60/0xb60 [ 527.951940][T15677] ? aa_af_perm+0x330/0x330 [ 527.956448][T15677] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 527.962858][T15677] ? sock_rps_record_flow+0x19/0x3f0 [ 527.968142][T15677] ? inet_sendmsg+0xce/0x2a0 [ 527.972728][T15677] ? inet_send_prepare+0x250/0x250 [ 527.977842][T15677] ____sys_sendmsg+0x61b/0x980 [ 527.982612][T15677] ? __sys_sendmsg_sock+0x30/0x30 [ 527.987631][T15677] ? __import_iovec+0x5f2/0x850 [ 527.992489][T15677] ? import_iovec+0x73/0xa0 [ 527.996994][T15677] ___sys_sendmsg+0x2a6/0x360 [ 528.001677][T15677] ? __sys_sendmsg+0x2b0/0x2b0 [ 528.006466][T15677] ? trace_call_bpf+0xc3/0x6c0 [ 528.011244][T15677] __se_sys_sendmsg+0x1d0/0x2c0 [ 528.016094][T15677] ? perf_trace_preemptirq_template+0x269/0x330 [ 528.022336][T15677] ? __x64_sys_sendmsg+0x80/0x80 [ 528.027283][T15677] ? lockdep_hardirqs_on+0x98/0x150 [ 528.032480][T15677] do_syscall_64+0x55/0xb0 [ 528.036890][T15677] ? clear_bhb_loop+0x40/0x90 [ 528.041556][T15677] ? clear_bhb_loop+0x40/0x90 [ 528.046228][T15677] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 528.052144][T15677] RIP: 0033:0x7f805419e559 [ 528.056569][T15677] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 528.076177][T15677] RSP: 002b:00007f8055046028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 528.084680][T15677] RAX: ffffffffffffffda RBX: 00007f8054425fa0 RCX: 00007f805419e559 [ 528.092646][T15677] RDX: 000000000c000840 RSI: 00002000000019c0 RDI: 0000000000000003 [ 528.100612][T15677] RBP: 00007f8055046090 R08: 0000000000000000 R09: 0000000000000000 [ 528.108577][T15677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 528.116547][T15677] R13: 00007f8054426038 R14: 00007f8054425fa0 R15: 00007ffc4d9ac878 [ 528.124528][T15677] [ 528.342661][T15687] delete_channel: no stack [ 528.484688][T15661] delete_channel: no stack [ 528.604415][T15696] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.3048'. [ 528.644853][T15696] netlink: 128 bytes leftover after parsing attributes in process `syz.5.3048'. [ 528.680625][T15696] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 528.708488][T15701] netlink: 'syz.5.3048': attribute type 10 has an invalid length. [ 528.727378][T15701] netlink: 55 bytes leftover after parsing attributes in process `syz.5.3048'. [ 528.744287][T15701] FAULT_INJECTION: forcing a failure. [ 528.744287][T15701] name failslab, interval 1, probability 0, space 0, times 0 [ 528.773282][T15701] CPU: 0 PID: 15701 Comm: syz.5.3048 Not tainted syzkaller #0 [ 528.780802][T15701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 528.790875][T15701] Call Trace: [ 528.794171][T15701] [ 528.797114][T15701] dump_stack_lvl+0x18c/0x250 [ 528.801816][T15701] ? show_regs_print_info+0x20/0x20 [ 528.807036][T15701] ? load_image+0x420/0x420 [ 528.811567][T15701] ? __lock_acquire+0x7eb0/0x7eb0 [ 528.816624][T15701] should_fail_ex+0x394/0x4c0 [ 528.821338][T15701] should_failslab+0x9/0x20 [ 528.825877][T15701] slab_pre_alloc_hook+0x59/0x300 [ 528.830922][T15701] ? br_netlink_fini+0x30/0x30 [ 528.835848][T15701] kmem_cache_alloc_node+0x5e/0x310 [ 528.841063][T15701] ? __alloc_skb+0x103/0x2c0 [ 528.845664][T15701] __alloc_skb+0x103/0x2c0 [ 528.850081][T15701] rtmsg_ifinfo_build_skb+0x83/0x260 [ 528.855375][T15701] rtnetlink_event+0x1b7/0x260 [ 528.860143][T15701] notifier_call_chain+0x18f/0x380 [ 528.865253][T15701] __netdev_upper_dev_unlink+0x206/0x7b0 [ 528.870882][T15701] ? netdev_upper_dev_unlink+0xe0/0xe0 [ 528.876334][T15701] ? __skb_flow_dissect+0x66a1/0x6e70 [ 528.881712][T15701] ? netdev_upper_dev_unlink+0x8c/0xe0 [ 528.887176][T15701] netdev_upper_dev_unlink+0x9a/0xe0 [ 528.892460][T15701] ? netdev_master_upper_dev_link+0x100/0x100 [ 528.898527][T15701] unregister_vlan_dev+0x337/0x4d0 [ 528.903717][T15701] ? vlan_gro_complete+0xd0/0xd0 [ 528.908649][T15701] rtnl_dellink+0x4ed/0x7c0 [ 528.913155][T15701] ? rtnl_newlink+0x2170/0x2170 [ 528.918001][T15701] ? __lock_acquire+0x135d/0x7eb0 [ 528.923019][T15701] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 528.929098][T15701] ? arch_stack_walk+0x160/0x190 [ 528.934072][T15701] ? rtnetlink_rcv_msg+0x7ed/0xf90 [ 528.939187][T15701] ? mutex_lock_nested+0x20/0x20 [ 528.944131][T15701] ? rtnl_newlink+0x2170/0x2170 [ 528.948979][T15701] rtnetlink_rcv_msg+0x843/0xf90 [ 528.953917][T15701] ? rtnetlink_rcv_msg+0x220/0xf90 [ 528.959033][T15701] ? rtnetlink_bind+0x80/0x80 [ 528.963704][T15701] ? perf_trace_preemptirq_template+0xac/0x330 [ 528.969859][T15701] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 528.975834][T15701] ? lock_chain_count+0x20/0x20 [ 528.980683][T15701] ? __local_bh_enable_ip+0x13a/0x1c0 [ 528.986052][T15701] ? lockdep_hardirqs_on+0x98/0x150 [ 528.991247][T15701] ? __local_bh_enable_ip+0x13a/0x1c0 [ 528.996612][T15701] ? _local_bh_enable+0xa0/0xa0 [ 529.001459][T15701] ? __dev_queue_xmit+0x272/0x37e0 [ 529.006566][T15701] ? __dev_queue_xmit+0x1329/0x37e0 [ 529.011756][T15701] ? __dev_queue_xmit+0x272/0x37e0 [ 529.016879][T15701] ? ref_tracker_free+0x686/0x830 [ 529.021905][T15701] netlink_rcv_skb+0x235/0x4c0 [ 529.026667][T15701] ? rtnetlink_bind+0x80/0x80 [ 529.031352][T15701] ? netlink_ack+0x1160/0x1160 [ 529.036123][T15701] ? __lock_acquire+0x7eb0/0x7eb0 [ 529.041148][T15701] ? netlink_deliver_tap+0x2e/0x1b0 [ 529.046350][T15701] netlink_unicast+0x7b1/0x930 [ 529.051121][T15701] netlink_sendmsg+0x8d0/0xbf0 [ 529.055898][T15701] ? netlink_getsockopt+0x590/0x590 [ 529.061094][T15701] ? apparmor_socket_sendmsg+0x8e/0x330 [ 529.066635][T15701] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 529.071918][T15701] ? security_socket_sendmsg+0x80/0xa0 [ 529.077383][T15701] ? netlink_getsockopt+0x590/0x590 [ 529.082598][T15701] ____sys_sendmsg+0x61b/0x980 [ 529.087382][T15701] ? __asan_memset+0x22/0x40 [ 529.091979][T15701] ? __sys_sendmsg_sock+0x30/0x30 [ 529.097001][T15701] ? __import_iovec+0x5f2/0x850 [ 529.101856][T15701] ? import_iovec+0x73/0xa0 [ 529.106364][T15701] ___sys_sendmsg+0x2a6/0x360 [ 529.111042][T15701] ? get_pid_task+0x20/0x1e0 [ 529.115633][T15701] ? __sys_sendmsg+0x2b0/0x2b0 [ 529.120410][T15701] ? __lock_acquire+0x7eb0/0x7eb0 [ 529.125445][T15701] __se_sys_sendmsg+0x1d0/0x2c0 [ 529.130292][T15701] ? __x64_sys_sendmsg+0x80/0x80 [ 529.135240][T15701] ? lockdep_hardirqs_on+0x98/0x150 [ 529.140436][T15701] do_syscall_64+0x55/0xb0 [ 529.144844][T15701] ? clear_bhb_loop+0x40/0x90 [ 529.149513][T15701] ? clear_bhb_loop+0x40/0x90 [ 529.154183][T15701] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 529.160076][T15701] RIP: 0033:0x7f90d0b9e559 [ 529.164483][T15701] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 529.184081][T15701] RSP: 002b:00007f90d1aad028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 529.192487][T15701] RAX: ffffffffffffffda RBX: 00007f90d0e26090 RCX: 00007f90d0b9e559 [ 529.200450][T15701] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 529.208409][T15701] RBP: 00007f90d1aad090 R08: 0000000000000000 R09: 0000000000000000 [ 529.216372][T15701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 529.224337][T15701] R13: 00007f90d0e26128 R14: 00007f90d0e26090 R15: 00007ffd4da5cf98 [ 529.232314][T15701] [ 529.294298][T15695] ================================================================== [ 529.302474][T15695] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6c7/0x900 [ 529.310375][T15695] Write of size 72 at addr ffff88801cff1b10 by task syz.6.3049/15695 [ 529.318452][T15695] [ 529.320855][T15695] CPU: 0 PID: 15695 Comm: syz.6.3049 Not tainted syzkaller #0 [ 529.328460][T15695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 529.338527][T15695] Call Trace: [ 529.341805][T15695] [ 529.344734][T15695] dump_stack_lvl+0x18c/0x250 [ 529.349417][T15695] ? read_lock_is_recursive+0x20/0x20 [ 529.354790][T15695] ? show_regs_print_info+0x20/0x20 [ 529.359980][T15695] ? load_image+0x420/0x420 [ 529.364487][T15695] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 529.369948][T15695] ? __virt_addr_valid+0x10c/0x380 [ 529.375056][T15695] ? __virt_addr_valid+0x10c/0x380 [ 529.380163][T15695] ? __virt_addr_valid+0x10c/0x380 [ 529.385270][T15695] print_report+0xa8/0x210 [ 529.389687][T15695] ? __bpf_get_stackid+0x6c7/0x900 [ 529.394797][T15695] kasan_report+0x117/0x150 [ 529.399301][T15695] ? __bpf_get_stackid+0x6c7/0x900 [ 529.404413][T15695] kasan_check_range+0x241/0x290 [ 529.409347][T15695] ? __bpf_get_stackid+0x6c7/0x900 [ 529.414451][T15695] __asan_memcpy+0x40/0x70 [ 529.418866][T15695] __bpf_get_stackid+0x6c7/0x900 [ 529.423804][T15695] bpf_get_stackid_pe+0x343/0x410 [ 529.428913][T15695] bpf_prog_6611c23d801ea08d+0x29/0x3e [ 529.434363][T15695] bpf_overflow_handler+0x1fc/0x510 [ 529.439561][T15695] ? bpf_overflow_handler+0xde/0x510 [ 529.444851][T15695] ? tp_perf_event_destroy+0x20/0x20 [ 529.450135][T15695] ? verify_lock_unused+0x140/0x140 [ 529.455328][T15695] ? __perf_event_account_interrupt+0x187/0x280 [ 529.461565][T15695] __perf_event_overflow+0x461/0x660 [ 529.466869][T15695] perf_swevent_overflow+0x274/0x340 [ 529.472176][T15695] ? perf_event_switch_output+0x790/0x790 [ 529.477909][T15695] ? rcu_is_watching+0x15/0xb0 [ 529.482680][T15695] perf_swevent_event+0x45c/0x570 [ 529.487705][T15695] ? perf_tp_event+0x1550/0x1550 [ 529.492637][T15695] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 529.498796][T15695] ___perf_sw_event+0x4ab/0x730 [ 529.503653][T15695] ? ___perf_sw_event+0x19e/0x730 [ 529.508672][T15695] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 529.515086][T15695] ? do_raw_spin_unlock+0x121/0x230 [ 529.520293][T15695] ? mark_lock+0x94/0x320 [ 529.524617][T15695] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 529.530594][T15695] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 529.537795][T15695] ? lock_chain_count+0x20/0x20 [ 529.542649][T15695] __perf_sw_event+0x139/0x270 [ 529.547415][T15695] do_user_addr_fault+0x1242/0x12d0 [ 529.552618][T15695] ? rcu_is_watching+0x15/0xb0 [ 529.557385][T15695] exc_page_fault+0x64/0x100 [ 529.561977][T15695] asm_exc_page_fault+0x26/0x30 [ 529.566845][T15695] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 529.572647][T15695] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 529.592260][T15695] RSP: 0018:ffffc90003acf718 EFLAGS: 00050206 [ 529.598331][T15695] RAX: ffffffff84326101 RBX: 1ffff92000759fc7 RCX: 0000000000000140 [ 529.606305][T15695] RDX: 0000000000000000 RSI: ffff888067a70178 RDI: 0000200000041000 [ 529.614274][T15695] RBP: ffffc90003acf868 R08: ffff888067a702b7 R09: 1ffff1100cf4e056 [ 529.622244][T15695] R10: dffffc0000000000 R11: ffffed100cf4e057 R12: ffff888067a600e8 [ 529.630209][T15695] R13: 00000000000101d0 R14: 00000000000101d0 R15: ffffc90003acfe48 [ 529.638180][T15695] ? _copy_to_iter+0x171/0x1110 [ 529.643040][T15695] _copy_to_iter+0x24f/0x1110 [ 529.647730][T15695] ? __lock_acquire+0x7eb0/0x7eb0 [ 529.652757][T15695] ? iov_iter_init+0x1e0/0x1e0 [ 529.657517][T15695] ? __virt_addr_valid+0x10c/0x380 [ 529.662623][T15695] ? __check_object_size+0x4fc/0xa40 [ 529.667908][T15695] __skb_datagram_iter+0xdb/0x780 [ 529.672929][T15695] ? skb_copy_datagram_iter+0x200/0x200 [ 529.678471][T15695] skb_copy_datagram_iter+0xb1/0x200 [ 529.683753][T15695] tipc_recvstream+0x730/0xe90 [ 529.688612][T15695] ? tipc_sendstream+0x70/0x70 [ 529.693374][T15695] ____sys_recvmsg+0x2bd/0x5d0 [ 529.698142][T15695] ? __sys_recvmsg_sock+0x50/0x50 [ 529.703167][T15695] ? import_iovec+0x73/0xa0 [ 529.707669][T15695] ___sys_recvmsg+0x214/0x590 [ 529.712342][T15695] ? __sys_recvmsg+0x2a0/0x2a0 [ 529.717110][T15695] ? __fget_files+0x3fc/0x460 [ 529.721790][T15695] __x64_sys_recvmsg+0x21e/0x2f0 [ 529.726727][T15695] ? ___sys_recvmsg+0x590/0x590 [ 529.731578][T15695] ? lockdep_hardirqs_on+0x98/0x150 [ 529.736770][T15695] do_syscall_64+0x55/0xb0 [ 529.741181][T15695] ? clear_bhb_loop+0x40/0x90 [ 529.745860][T15695] ? clear_bhb_loop+0x40/0x90 [ 529.750532][T15695] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 529.756426][T15695] RIP: 0033:0x7ff9eeb9e559 [ 529.760836][T15695] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 529.780436][T15695] RSP: 002b:00007ff9efa70028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 529.788842][T15695] RAX: ffffffffffffffda RBX: 00007ff9eee25fa0 RCX: 00007ff9eeb9e559 [ 529.796806][T15695] RDX: 0000000000001f00 RSI: 0000200000000900 RDI: 000000000000000a [ 529.804770][T15695] RBP: 00007ff9eec358b0 R08: 0000000000000000 R09: 0000000000000000 [ 529.812730][T15695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 529.820692][T15695] R13: 00007ff9eee26038 R14: 00007ff9eee25fa0 R15: 00007ffcfdf0c3c8 [ 529.828663][T15695] [ 529.831668][T15695] [ 529.833982][T15695] Allocated by task 15695: [ 529.838454][T15695] kasan_set_track+0x4e/0x70 [ 529.843042][T15695] __kasan_kmalloc+0x8f/0xa0 [ 529.847636][T15695] __kmalloc_node+0xb6/0x240 [ 529.852221][T15695] bpf_map_area_alloc+0x5e/0x110 [ 529.857153][T15695] prealloc_elems_and_freelist+0x86/0x1c0 [ 529.862867][T15695] stack_map_alloc+0x32b/0x4b0 [ 529.867629][T15695] map_create+0x877/0x12f0 [ 529.872037][T15695] __sys_bpf+0x651/0x890 [ 529.876269][T15695] __x64_sys_bpf+0x7c/0x90 [ 529.880673][T15695] do_syscall_64+0x55/0xb0 [ 529.885077][T15695] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 529.890967][T15695] [ 529.893277][T15695] Last potentially related work creation: [ 529.898979][T15695] kasan_save_stack+0x3e/0x60 [ 529.903646][T15695] __kasan_record_aux_stack+0xaf/0xc0 [ 529.909012][T15695] call_rcu+0x153/0x900 [ 529.913159][T15695] nf_unregister_net_hooks+0xcb/0x130 [ 529.918595][T15695] setup_net+0x7e5/0xa20 [ 529.922834][T15695] copy_net_ns+0x361/0x530 [ 529.927242][T15695] create_new_namespaces+0x3ce/0x700 [ 529.932518][T15695] copy_namespaces+0x42a/0x4a0 [ 529.937277][T15695] copy_process+0x16f6/0x3da0 [ 529.941943][T15695] kernel_clone+0x24b/0x8a0 [ 529.946439][T15695] __x64_sys_clone+0x1b7/0x230 [ 529.951193][T15695] do_syscall_64+0x55/0xb0 [ 529.955600][T15695] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 529.961496][T15695] [ 529.963809][T15695] Second to last potentially related work creation: [ 529.970447][T15695] kasan_save_stack+0x3e/0x60 [ 529.975117][T15695] __kasan_record_aux_stack+0xaf/0xc0 [ 529.980482][T15695] call_rcu+0x153/0x900 [ 529.984631][T15695] __nf_register_net_hook+0x787/0x910 [ 529.989990][T15695] nf_register_net_hook+0xb2/0x190 [ 529.995091][T15695] nf_register_net_hooks+0x44/0x1b0 [ 530.000279][T15695] nf_ct_netns_do_get+0x213/0x5c0 [ 530.005363][T15695] nf_ct_netns_inet_get+0x3b/0x150 [ 530.010464][T15695] nf_conncount_init+0x127/0x380 [ 530.015454][T15695] ovs_ct_init+0x264/0x430 [ 530.019894][T15695] ovs_init_net+0x1e6/0x250 [ 530.024427][T15695] ops_init+0x391/0x640 [ 530.028575][T15695] setup_net+0x3b6/0xa20 [ 530.032810][T15695] copy_net_ns+0x361/0x530 [ 530.037234][T15695] create_new_namespaces+0x3ce/0x700 [ 530.042516][T15695] unshare_nsproxy_namespaces+0x11a/0x160 [ 530.048231][T15695] ksys_unshare+0x4fa/0x8f0 [ 530.052729][T15695] __x64_sys_unshare+0x38/0x40 [ 530.057486][T15695] do_syscall_64+0x55/0xb0 [ 530.061893][T15695] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 530.067785][T15695] [ 530.070100][T15695] The buggy address belongs to the object at ffff88801cff1b00 [ 530.070100][T15695] which belongs to the cache kmalloc-cg-64 of size 64 [ 530.084372][T15695] The buggy address is located 16 bytes inside of [ 530.084372][T15695] allocated 40-byte region [ffff88801cff1b00, ffff88801cff1b28) [ 530.098371][T15695] [ 530.100686][T15695] The buggy address belongs to the physical page: [ 530.107144][T15695] page:ffffea000073fc40 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1cff1 [ 530.117291][T15695] memcg:ffff888032022801 [ 530.121514][T15695] ksm flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff) [ 530.129393][T15695] page_type: 0xffffffff() [ 530.133712][T15695] raw: 00fff00000000800 ffff88801884da00 ffffea0001798840 0000000000000003 [ 530.142284][T15695] raw: 0000000000000000 0000000080200020 00000001ffffffff ffff888032022801 [ 530.150851][T15695] page dumped because: kasan: bad access detected [ 530.157265][T15695] page_owner tracks the page as allocated [ 530.162968][T15695] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 13078, tgid 13076 (syz.7.2228), ts 421741337588, free_ts 421638979822 [ 530.181392][T15695] post_alloc_hook+0x1c1/0x200 [ 530.186152][T15695] get_page_from_freelist+0x2181/0x22a0 [ 530.191689][T15695] __alloc_pages+0x1f0/0x460 [ 530.196368][T15695] alloc_slab_page+0x5d/0x180 [ 530.201123][T15695] new_slab+0x87/0x2d0 [ 530.205185][T15695] ___slab_alloc+0xc5c/0x12f0 [ 530.209851][T15695] __kmem_cache_alloc_node+0x11f/0x250 [ 530.215307][T15695] kmalloc_trace+0x2a/0xe0 [ 530.219718][T15695] alloc_fdtable+0xca/0x2c0 [ 530.224216][T15695] dup_fd+0x747/0xa20 [ 530.228189][T15695] copy_files+0xaf/0x110 [ 530.232422][T15695] copy_process+0x157d/0x3da0 [ 530.237092][T15695] kernel_clone+0x24b/0x8a0 [ 530.241590][T15695] __x64_sys_clone+0x1b7/0x230 [ 530.246351][T15695] do_syscall_64+0x55/0xb0 [ 530.250759][T15695] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 530.256652][T15695] page last free stack trace: [ 530.261310][T15695] free_unref_page_prepare+0x7d7/0x8f0 [ 530.266759][T15695] free_unref_page+0x32/0x2e0 [ 530.271425][T15695] ringbuf_map_free+0xc9/0x120 [ 530.276178][T15695] bpf_map_free_deferred+0x103/0x3a0 [ 530.281454][T15695] process_scheduled_works+0xa60/0x1600 [ 530.286995][T15695] worker_thread+0xa5e/0xfe0 [ 530.291592][T15695] kthread+0x2fa/0x390 [ 530.295670][T15695] ret_from_fork+0x48/0x80 [ 530.300098][T15695] ret_from_fork_asm+0x11/0x20 [ 530.304904][T15695] [ 530.307219][T15695] Memory state around the buggy address: [ 530.312893][T15695] ffff88801cff1a00: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 530.320945][T15695] ffff88801cff1a80: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 530.328994][T15695] >ffff88801cff1b00: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 530.337041][T15695] ^ [ 530.342399][T15695] ffff88801cff1b80: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 530.350457][T15695] ffff88801cff1c00: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 530.358511][T15695] ================================================================== [ 530.366573][T15695] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 530.373752][T15695] CPU: 0 PID: 15695 Comm: syz.6.3049 Not tainted syzkaller #0 [ 530.381200][T15695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 530.391247][T15695] Call Trace: [ 530.394523][T15695] [ 530.397446][T15695] dump_stack_lvl+0x18c/0x250 [ 530.402118][T15695] ? show_regs_print_info+0x20/0x20 [ 530.407306][T15695] ? load_image+0x420/0x420 [ 530.411811][T15695] panic+0x2ca/0x720 [ 530.415702][T15695] ? __lock_acquire+0x7eb0/0x7eb0 [ 530.420725][T15695] ? bpf_jit_dump+0xd0/0xd0 [ 530.425227][T15695] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 530.431115][T15695] ? _raw_spin_unlock+0x40/0x40 [ 530.435965][T15695] ? __bpf_get_stackid+0x6c7/0x900 [ 530.441077][T15695] check_panic_on_warn+0x84/0xa0 [ 530.446016][T15695] ? __bpf_get_stackid+0x6c7/0x900 [ 530.451124][T15695] end_report+0x6f/0x130 [ 530.455367][T15695] kasan_report+0x128/0x150 [ 530.459866][T15695] ? __bpf_get_stackid+0x6c7/0x900 [ 530.464978][T15695] kasan_check_range+0x241/0x290 [ 530.469912][T15695] ? __bpf_get_stackid+0x6c7/0x900 [ 530.475018][T15695] __asan_memcpy+0x40/0x70 [ 530.479433][T15695] __bpf_get_stackid+0x6c7/0x900 [ 530.484370][T15695] bpf_get_stackid_pe+0x343/0x410 [ 530.489394][T15695] bpf_prog_6611c23d801ea08d+0x29/0x3e [ 530.494845][T15695] bpf_overflow_handler+0x1fc/0x510 [ 530.500043][T15695] ? bpf_overflow_handler+0xde/0x510 [ 530.505323][T15695] ? tp_perf_event_destroy+0x20/0x20 [ 530.510606][T15695] ? verify_lock_unused+0x140/0x140 [ 530.515797][T15695] ? __perf_event_account_interrupt+0x187/0x280 [ 530.522030][T15695] __perf_event_overflow+0x461/0x660 [ 530.527314][T15695] perf_swevent_overflow+0x274/0x340 [ 530.532598][T15695] ? perf_event_switch_output+0x790/0x790 [ 530.538317][T15695] ? rcu_is_watching+0x15/0xb0 [ 530.543083][T15695] perf_swevent_event+0x45c/0x570 [ 530.548110][T15695] ? perf_tp_event+0x1550/0x1550 [ 530.553046][T15695] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 530.559197][T15695] ___perf_sw_event+0x4ab/0x730 [ 530.564046][T15695] ? ___perf_sw_event+0x19e/0x730 [ 530.569067][T15695] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 530.575476][T15695] ? do_raw_spin_unlock+0x121/0x230 [ 530.580689][T15695] ? mark_lock+0x94/0x320 [ 530.585010][T15695] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 530.590983][T15695] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 530.598180][T15695] ? lock_chain_count+0x20/0x20 [ 530.603027][T15695] __perf_sw_event+0x139/0x270 [ 530.607791][T15695] do_user_addr_fault+0x1242/0x12d0 [ 530.612987][T15695] ? rcu_is_watching+0x15/0xb0 [ 530.617750][T15695] exc_page_fault+0x64/0x100 [ 530.622337][T15695] asm_exc_page_fault+0x26/0x30 [ 530.627180][T15695] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 530.632980][T15695] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 530.652578][T15695] RSP: 0018:ffffc90003acf718 EFLAGS: 00050206 [ 530.658638][T15695] RAX: ffffffff84326101 RBX: 1ffff92000759fc7 RCX: 0000000000000140 [ 530.666610][T15695] RDX: 0000000000000000 RSI: ffff888067a70178 RDI: 0000200000041000 [ 530.674573][T15695] RBP: ffffc90003acf868 R08: ffff888067a702b7 R09: 1ffff1100cf4e056 [ 530.682537][T15695] R10: dffffc0000000000 R11: ffffed100cf4e057 R12: ffff888067a600e8 [ 530.690500][T15695] R13: 00000000000101d0 R14: 00000000000101d0 R15: ffffc90003acfe48 [ 530.698480][T15695] ? _copy_to_iter+0x171/0x1110 [ 530.703340][T15695] _copy_to_iter+0x24f/0x1110 [ 530.708030][T15695] ? __lock_acquire+0x7eb0/0x7eb0 [ 530.713058][T15695] ? iov_iter_init+0x1e0/0x1e0 [ 530.717820][T15695] ? __virt_addr_valid+0x10c/0x380 [ 530.722928][T15695] ? __check_object_size+0x4fc/0xa40 [ 530.728209][T15695] __skb_datagram_iter+0xdb/0x780 [ 530.733233][T15695] ? skb_copy_datagram_iter+0x200/0x200 [ 530.738772][T15695] skb_copy_datagram_iter+0xb1/0x200 [ 530.744054][T15695] tipc_recvstream+0x730/0xe90 [ 530.748821][T15695] ? tipc_sendstream+0x70/0x70 [ 530.753577][T15695] ____sys_recvmsg+0x2bd/0x5d0 [ 530.758345][T15695] ? __sys_recvmsg_sock+0x50/0x50 [ 530.763373][T15695] ? import_iovec+0x73/0xa0 [ 530.767877][T15695] ___sys_recvmsg+0x214/0x590 [ 530.772557][T15695] ? __sys_recvmsg+0x2a0/0x2a0 [ 530.777329][T15695] ? __fget_files+0x3fc/0x460 [ 530.782009][T15695] __x64_sys_recvmsg+0x21e/0x2f0 [ 530.786944][T15695] ? ___sys_recvmsg+0x590/0x590 [ 530.791801][T15695] ? lockdep_hardirqs_on+0x98/0x150 [ 530.796996][T15695] do_syscall_64+0x55/0xb0 [ 530.801401][T15695] ? clear_bhb_loop+0x40/0x90 [ 530.806069][T15695] ? clear_bhb_loop+0x40/0x90 [ 530.810740][T15695] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 530.816631][T15695] RIP: 0033:0x7ff9eeb9e559 [ 530.821038][T15695] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 530.840638][T15695] RSP: 002b:00007ff9efa70028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 530.849049][T15695] RAX: ffffffffffffffda RBX: 00007ff9eee25fa0 RCX: 00007ff9eeb9e559 [ 530.857015][T15695] RDX: 0000000000001f00 RSI: 0000200000000900 RDI: 000000000000000a [ 530.864976][T15695] RBP: 00007ff9eec358b0 R08: 0000000000000000 R09: 0000000000000000 [ 530.872941][T15695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 530.880911][T15695] R13: 00007ff9eee26038 R14: 00007ff9eee25fa0 R15: 00007ffcfdf0c3c8 [ 530.888974][T15695] [ 530.892245][T15695] Kernel Offset: disabled [ 530.896556][T15695] Rebooting in 86400 seconds..