last executing test programs: 2m35.318455541s ago: executing program 0 (id=3275): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffff, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x3, 0xcfb5, 0x1, 0x0, 0x0, 0x0, 0x0, 0xe8, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1d}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8940, &(0x7f0000000080)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1f, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000e6ffffff85000000b000000085000000d000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)}, 0x4048004) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000400000008000000000000000100"/48, @ANYRES32=r3, @ANYBLOB="0100000002"], 0x40) perf_event_open(0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb791000"], 0xfdef) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x10, 0x32, 0x43e1bd74, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f00000001c0)=0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r4, 0xffffffffffffffff}, &(0x7f0000000780), &(0x7f00000007c0)}, 0x20) r8 = socket$kcm(0x22, 0x2, 0x21) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x80044944, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x15, 0x4, &(0x7f0000000340)=@raw=[@call={0x85, 0x0, 0x0, 0x2b}, @ldst={0x2, 0x3, 0x1, 0x4, 0x1, 0x3e, 0x4}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x1}], &(0x7f0000000380)='GPL\x00', 0x0, 0xc6, &(0x7f0000000600)=""/198, 0x40f00, 0x24, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x1, 0xb, 0x7, 0x7fffffff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[r1, r4, r1, r7], 0x0, 0x10, 0x7}, 0x94) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r7, &(0x7f00000000c0)}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000140)={0xffffffffffffffff, r9}, 0xc) socket$kcm(0x10, 0x2, 0x0) socketpair(0x1f, 0x5, 0xffffff5d, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r5, 0x4008240b, &(0x7f0000000280)={0x0, 0x80, 0x18, 0x3, 0x1, 0xd2, 0x0, 0x2, 0x80000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000240), 0x9}, 0x280, 0xffff, 0xfbd3, 0x6, 0xcdf7, 0x322, 0x3, 0x0, 0x3, 0x0, 0x4000000}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r10}, 0x8) 2m34.855736093s ago: executing program 0 (id=3277): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xffffffffffffff68, 0xc, 0x2, [@enum64={0x2, 0x0, 0x0, 0x13, 0x0, 0x4, [{0x9, 0x2, 0x9}, {0xe, 0x80000001, 0x1ff}, {0x5, 0x2, 0x9}, {0xc, 0xfffffffd, 0x1}]}]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x2020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x644b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x2}, 0x8004, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) sendmsg$inet(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x8004) close(r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="b87437eeeee8dd3aa42a3f03009d4211084a41acc428b74b6a502ce00091255409000000000000009fd56bdda1519fa9ef65015f92297ff703d745bbe6a003abcadf3fd687fba9f7f90afa52e4e084f7a2ea2ff4060c7ce1c7d523ad07346fb8c869a13e570e0c2fdfac36dde3ea98e4fcbc235996c9a5b00326"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x0, 0x7, 0x10000}, 0x28) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000840)="8c74debe49bf20cedc094010963f8b4e45076dc4066f0a26337fae85fdd65f31029c6fc1d018e9a883a6358f212e3accd7a824975dc3b39ed754d5e3cc7666b436284e409a4bc4051d7763089fd68bb22bac1a3348de86ce51d84887cff5522058c81fc114d9764a6287a8825bb29cdcd8830c4aaa3add2fbe1ad913061b3b44e2d0de1f6151f11aac03be1c5eb76b2dd9ba2a0d0658f8f647dd07748fdc631a2cf9a71686630243a6315026255da249ade028ece86cf226ba38b0a87568aa91f1a7fffedb5e44672c64a797c2adecec90", 0xd1}], 0x1}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0xa}, 0x36) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000440)="d8000000180081034ef0f206b74cb9040a1d080006007c06e8fc55a10a0015000600142603600e1208000f0000000401a8000100df80ffff00000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b31627ffe06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a468eb4edbb57a5025ccca9e00360db798262f3dcace0d0bdb8e73ece0b42a9ecbee12cf1de59bf09ebc62e9b6e6bf545de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r2) r5 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000680)={r5, r4, 0x0, 0x0, 0x0}, 0x30) socket$kcm(0x10, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1a, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x809a}, 0x48) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r6) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x7, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0x2}, @generic={0x1, 0x7, 0x2, 0x5, 0x2cb8}, @call={0x85, 0x0, 0x0, 0x35}]}, &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x10, 0x100080a}, 0x94) setsockopt$sock_attach_bpf(r7, 0x1, 0x24, &(0x7f0000000000), 0x4) 2m34.511534001s ago: executing program 0 (id=3280): r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x7, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef6}, 0xbafa, 0xff, 0x98, 0x2, 0x0, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18, 0x24000001}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f00000005c0)=ANY=[@ANYBLOB='b 922'], 0xa) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x4) r4 = perf_event_open$cgroup(&(0x7f0000000180)={0x4, 0x80, 0x41, 0x8, 0x3, 0x6, 0x0, 0x80d4, 0x42806, 0xa, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xd, 0x1, @perf_config_ext={0x10000, 0x6}, 0x3860, 0x4, 0xc, 0x8, 0x2, 0xffffffff, 0xf001, 0x0, 0xb21, 0x0, 0x3}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_REFRESH(r4, 0x2402, 0x7aa) ioctl$PERF_EVENT_IOC_DISABLE(r4, 0x2401, 0x80000001) r5 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r5, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac141411cf2600010000000028000000000000000000000007000000014414"], 0x48}, 0x200040c4) 2m34.287873877s ago: executing program 0 (id=3283): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xe, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x80000001, 0x1000000000000401}, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0xdd1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f00000000c0)={0x7, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000700020000000000fcffffff71104100000000009500"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x18000000000002a0, 0x3, 0x0, &(0x7f0000000140)="b9ff03", 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0xc, [@type_tag={0xa, 0x0, 0x0, 0x12, 0x2}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x4, 0x5}, {0x2, 0x3}, {0xe, 0x3}]}, @volatile={0x8, 0x0, 0x0, 0x9, 0x5}]}, {0x0, [0x0, 0x5f, 0x30, 0x2e, 0x61, 0x61, 0x30, 0x61, 0x5f, 0x0]}}, &(0x7f00000001c0)=""/89, 0x60, 0x59, 0x0, 0x8}, 0x28) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300), 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={r2, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0xffffffff, 0x0, r2, 0x9, '\x00', r3, r1, 0x5, 0x3, 0x5}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000640)='syzkaller\x00', 0x8, 0x8d, &(0x7f0000000680)=""/141}, 0x94) 2m33.685891152s ago: executing program 0 (id=3285): perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x4000000000009376, 0x82241, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0xff}, 0x100100, 0xc8, 0x1, 0x4, 0x0, 0x20, 0x8ec9}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x1c0a8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0x23, 0x5, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1200000004010000080000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000300"/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r5}, &(0x7f0000001d80), &(0x7f0000001d40)=r4}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000680)={r5, &(0x7f0000000580), &(0x7f0000000780)=""/140}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0xf6, 0x0, 0xe, 0x0, 0x0, 0x0, 0xc0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10, 0x20000000004}, 0x6000, 0x0, 0x1, 0x6, 0xa, 0x2001000a, 0xfffc, 0x0, 0x3ff, 0x0, 0x5}, 0x0, 0x3, 0xffffffffffffffff, 0xd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d08000b000000e8fe55a1180015000600142603600e1209000d00e8030000a80016000a0003", 0x37}], 0x1}, 0x20010) r8 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) write$cgroup_type(r8, &(0x7f0000000100), 0x9) sendmsg(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x2, 0x4, 0x1, {0xa, 0x4e21, 0x9, @mcast2, 0x6}}}, 0x80, 0x0}, 0x4004800) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0xfffffffffffffe14, &(0x7f0000000240)=[{&(0x7f0000000000)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe5538250015000600149b0000001208000313eba96240a8002b", 0x33}], 0x1}, 0x80) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfe33) close(r7) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sendmsg$kcm(r3, &(0x7f0000000dc0)={&(0x7f00000002c0)=@generic={0xa, "fd438441b2d08c8c1fd891503c4caac2bea8e335bfa4b6f8ed3fb5fe46f5e8863c7779201d71ff247f1364d36740934682570030d74451d31190460931ba1cda206a6aad6f8a37f43e7319b4a4d1cc5fe9a15fc55561be5d9c90997c9fc5cd09cf488ef958ee07fea6c0bcdafd59cdc00ab653c40c01166a0edb299127f8"}, 0x80, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="3aaf2d", 0x3}, {&(0x7f00000008c0)="a1ce35114ebbdffb0eba10fb32d4cf492290629c9a41fa8ec80452f0242f1dec49440d87050d9c4cfb6de03c8349b9efd112067ffa358867ddf938468876a0ea7feeab303befbec4eafc65c14ca88d09a2befce4b509db400739230fba64c8a9b4e964695564bd1c1c", 0x69}, {&(0x7f0000000600)="ddf16966d6d6c352c0bd5eb5107af217c71b0a6969043e5ce1e7358a48b30e89a273d5b8687b873309bc55bcdbfe795f3d703031ce89b8593b0c963115f53630fbc78ef907bebca30c3b5e1f49c8461d17a29163ac405928f88d5bf7c9d8cf35c9c6ac12a50b15c2e3c171fd1fe1494347a512ef23567be48acee9a62549", 0x7e}, {&(0x7f00000006c0)="50efbcf5b4b92b5272af8900afb57884e82bd3437f4ea390921e4fca93c18224b738841268337995dd482c606b8d4c5111d64bb95ac869", 0x37}, {&(0x7f0000000700)="a97e82c67bff4076287b83d3df38cc00d229ed5a690012338ca0c4", 0x1b}], 0x6, &(0x7f0000000b00)=[{0xc0, 0x119, 0x2, "19cf4318f964f14cf48330a3093a534643bb91af68a3d8c62279b9be013e1b4344badc725f297bbcaeb9df8999a05e10ea7ba56e73623046252b730d6fe4e06b81e2e115abdfd699623ba70c11e0d70daa54372a79caaaebedbcc58c0ce21959ac245bebf35baf25a0bcd8ce007fc6c08b3a8d0df9d5ca05e87bbd53927a17d57564d0da4d21afa55851c8fa44b6e7568dce1ef0d9ccbe2edd0c9bf5908992cb82abc5bebbac0ad7c9"}, {0x48, 0x102, 0x8, "c70a045bbf7eaa5ae0f42e8e64582ce9d23676b267dfc1c7b2166e4e8ad8051bc92e414bc9fd05f89d50a8bf2d280a97ac1cab2e6efa"}, {0x10, 0x1}, {0x68, 0x3a, 0x5, "d9e8994d572167ec6300c24fbd86e937831ad53cead9b00f7182616ccbdd1310d8a79fd2fbc15acc2e4b6a8fb0583cb8b4390f560a8623f605f45078a727515874a5acf2c2805f2a7d128a94451de75373"}, {0x70, 0x116, 0xc, "3668b1a35fbcc3e23ba0fffff80ac38e0a42e8049b8996cab54d6c09e38b407e39555e72b77f9c33202b2adac68121250972f1687ef4c20ddc8146556cfdb69a1a7c351af2ae090891f2d8c4f1bffc3d6ea681470c1e37ae446916c2e7f76d7b"}], 0x1f0}, 0x4004014) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x5) 2m33.317648651s ago: executing program 0 (id=3287): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.sectors\x00', 0x0, 0x0) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r1, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, 0x94) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_freezer_state(r2, &(0x7f0000000140), 0x2, 0x0) (async) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r5 = openat$cgroup_procs(r2, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000300)=r4, 0x12) (async) write$cgroup_freezer_state(r3, &(0x7f00000004c0)='FROZEN\x00', 0x7) (async) write$cgroup_freezer_state(r3, &(0x7f0000000080)='THAWED\x00', 0x7) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) (async) r8 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20488, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x111d09, 0x4, 0x10000, 0x1, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1) recvmsg$unix(r6, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[@ANYRES8=r7, @ANYBLOB="3eca", @ANYRES32=r8], 0x9a) (async) openat$cgroup_devices(r9, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) socket$kcm(0x21, 0x2, 0xa) perf_event_open$cgroup(&(0x7f0000000200)={0x5, 0x80, 0x7, 0x31, 0x2, 0x7, 0x0, 0x9, 0x2008, 0xb, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8000, 0x0, @perf_bp={&(0x7f0000000140), 0x1}, 0x40, 0x3, 0x1, 0x7, 0x2, 0x3, 0xf4, 0x0, 0x5, 0x0, 0x7fffffff}, r0, 0x2, r10, 0x1) sendmsg$kcm(r9, &(0x7f0000000080)={&(0x7f0000000000)=@nl=@proc={0x10, 0x0, 0x25dfdbff}, 0x80, 0x0, 0x0, &(0x7f0000000280)=[{0x20, 0x110, 0x4, '\x00'/11}, {0x18, 0x110, 0x1, "10"}], 0x38}, 0x20004000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000043000000419e24d5f23c3a9a000000000000000200000000040000000000000a03000000020000000000000402000000010000000000000a020000000000"], 0x0, 0x4e, 0x0, 0x0, 0x20}, 0x28) 2m18.262855355s ago: executing program 32 (id=3287): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.sectors\x00', 0x0, 0x0) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r1, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, 0x94) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_freezer_state(r2, &(0x7f0000000140), 0x2, 0x0) (async) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r5 = openat$cgroup_procs(r2, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000300)=r4, 0x12) (async) write$cgroup_freezer_state(r3, &(0x7f00000004c0)='FROZEN\x00', 0x7) (async) write$cgroup_freezer_state(r3, &(0x7f0000000080)='THAWED\x00', 0x7) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) (async) r8 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20488, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x111d09, 0x4, 0x10000, 0x1, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1) recvmsg$unix(r6, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[@ANYRES8=r7, @ANYBLOB="3eca", @ANYRES32=r8], 0x9a) (async) openat$cgroup_devices(r9, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) socket$kcm(0x21, 0x2, 0xa) perf_event_open$cgroup(&(0x7f0000000200)={0x5, 0x80, 0x7, 0x31, 0x2, 0x7, 0x0, 0x9, 0x2008, 0xb, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8000, 0x0, @perf_bp={&(0x7f0000000140), 0x1}, 0x40, 0x3, 0x1, 0x7, 0x2, 0x3, 0xf4, 0x0, 0x5, 0x0, 0x7fffffff}, r0, 0x2, r10, 0x1) sendmsg$kcm(r9, &(0x7f0000000080)={&(0x7f0000000000)=@nl=@proc={0x10, 0x0, 0x25dfdbff}, 0x80, 0x0, 0x0, &(0x7f0000000280)=[{0x20, 0x110, 0x4, '\x00'/11}, {0x18, 0x110, 0x1, "10"}], 0x38}, 0x20004000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000043000000419e24d5f23c3a9a000000000000000200000000040000000000000a03000000020000000000000402000000010000000000000a020000000000"], 0x0, 0x4e, 0x0, 0x0, 0x20}, 0x28) 6.606055066s ago: executing program 1 (id=4231): r0 = socket$kcm(0x1e, 0x1, 0x0) (async) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 32) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) (rerun: 32) setsockopt$sock_attach_bpf(r2, 0x10f, 0x85, &(0x7f0000000180), 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) r4 = socket$kcm(0xa, 0x2, 0x0) r5 = socket$kcm(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r5, 0x29, 0x37, 0x0, 0x0) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB], 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @xdp}, 0x94) setsockopt$sock_attach_bpf(r4, 0x29, 0x39, &(0x7f0000000100)=r6, 0x120) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef437000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) (async) socket$kcm(0x1e, 0x4, 0x0) (async) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[], 0x50) (async, rerun: 32) sendmsg$kcm(r4, &(0x7f0000003600)={&(0x7f00000021c0)=@in={0x2, 0x4e22, @loopback}, 0x80, &(0x7f0000003480)=[{&(0x7f0000002240)="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", 0xdfc}, {&(0x7f0000003240)="f92e81460b16d9582e31d8857b1bc98e88cd5ba1f53137fbc1dde61d65973c9e946c745cc2779901fe8697c0a0811320c89588a3c7bfabd27c2c3f3bef61fb25367fd326812daaaaea7072ce88bbedaa7adc56e4fb1663829b77887a47b8b6f03a38a4c592774475f8f8c2bf6d48b144e42d1d8c0d8b0d3e07a11bf34cdf0f0fc78544b4f24f3231", 0x88}, {&(0x7f0000003300)}, {&(0x7f0000003380)="055148d16ba91c9bfeb5f31cfd06f9bad49a4ddc71e59180a1c3e8eab9a8811d72eec967a8e3b2f9fced6ec97829e9201cc561753d3cc950a7e8f7d4bb0cb301f4a12765", 0x44}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="3000f9ff000000000000000007000000661ca709d967dceed746e307d31843d5adb4ef8b479e0400cd63650000000000ebeca532f8c45690c55f0d4307d180be3bf36e22b0d038da2b4e11669151b393bec9c4b46defe09d7f58e270c01ddc14477d17b3509e258155e52fc47703f8a6387835"], 0x30}, 0x20000040) (async, rerun: 32) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)}, 0xfc) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000080) (async, rerun: 64) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[], 0x48) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0x1c, &(0x7f0000003640)=ANY=[@ANYBLOB="18080012b000010000000000345c8d63f8000000a8a2ad90b58ec4cb5ba8da976a6a95c48ea3b5e89ab8c459e8ebbdfe7defec1238ae91b2adec82d736639cb4f4973b7261d894ac58128f1fd5010a07b888851a2ca48a29e79701d2aada71b80412240e7b64f169553a184ad5e231851a024c1640af26841d67ea0f56523acf0ce05197067f51945552b265db6432d290e20cddffadcc128c30658d2e86eb1c1f5f052322520fd1e124c74a8e2f7448433190e4ff8aab25b5da593987ccb129e169f6a451ec9ca22a", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007baaf8ff00000000b609000003400000dbaaf8ffa0000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffc702", @ANYRES32=r7, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000020000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) (async) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async) r9 = socket$kcm(0x1e, 0x4, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000)={0x80000}, 0x59}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r10, 0x18000000000002a0, 0x98, 0x0, &(0x7f0000000640)="b90103600040f000009e0ff241056610f00800594074b14a270fb59fce8a901e7fd9f0461ef4a212b9726937d648099e62c850eaf57378bca53837a15478a42e7f9a226db3d370df0a6cdf12d7ba3523509c659e43dd12d479c826fdfe872e0b982fb136c0667ffb09ef031bd4e53f24156b25a3075b9f7e6538aab57ebf9d6eecd996dc1e77e2812a78543b2f9cd8652c5388e72fd3b17a", 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async) r11 = socket$kcm(0x1e, 0x0, 0x0) setsockopt$sock_attach_bpf(r11, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async) socket$kcm(0x1e, 0x4, 0x0) 6.075072599s ago: executing program 1 (id=4235): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000040000000600000007"], 0x50) close(0x3) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x8, 0x40, 0x5, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x1003, r3}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0b00000005000000010001000a00000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000500), 0x8, r5}, 0x38) r6 = socket$kcm(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r6, 0x1, 0x28, &(0x7f0000000040), 0x4) recvmsg$kcm(r6, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x2) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef59510525ba56dcd79a36c23d3b9844e1571a86ea1698fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r8 = perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffb, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x1}, 0x10008, 0x0, 0x4082c5, 0x0, 0x4}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0x40082404, &(0x7f0000000000)=0x7) sendmsg$kcm(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7590e1211000000e3bd012a128748fdb8021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4040004) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) 5.407906986s ago: executing program 1 (id=4242): r0 = socket$kcm(0x2b, 0x1, 0x0) close(r0) r1 = socket$kcm(0xa, 0x5, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x800, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00S'], 0x48) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000000)={0x3, 0x0, [0x0, 0x0, 0x0]}) r3 = socket$kcm(0xa, 0x2, 0x88) recvmsg$kcm(r3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/3, 0x3}, 0x2062) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r4, 0x6, 0xd, &(0x7f0000001b40), 0x4) setsockopt$sock_attach_bpf(r4, 0x1, 0x19, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8b, 0x5, 0x9, 0x81, 0x1}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r5, &(0x7f0000000140), 0x0}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYRES16=r3], 0x0, 0x44}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x3, 0x14, &(0x7f0000000340)=ANY=[@ANYRES32=r2, @ANYRES16=r2], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r6, &(0x7f0000000300), 0x2, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="2e00000011008188040f80ec59acbc0413a1810031000000000f000000028002002d1f000000000000", 0x29}], 0x1}, 0x44004) sendmsg$kcm(r1, &(0x7f00000017c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x80fe, 0xa, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x26}}, 0x12, 0x2}, 0x80, &(0x7f0000000180)=[{&(0x7f00000004c0)="7f", 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000084000000070000007f00000000000000b8"], 0xd0}, 0x480c4) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f00000001c0), 0x45) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r9, &(0x7f0000000000), 0xfdef) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x20}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000002d80)={&(0x7f0000000380)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x0, 0x2, 0x2, 0x4, {0xa, 0x4e20, 0x80000000, @mcast2, 0xf}}}, 0x80, &(0x7f0000002c40)=[{&(0x7f0000000440)="8539c5f0653d3cc5577505b136cc48da53139093a6ec679e5d085a02074538c36f2a621321ec25a87a7de26a5951ab6f20b0e2", 0x33}, {&(0x7f0000001b80)="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", 0x1000}, {&(0x7f0000002b80)="216393c9cfb67f416aeb8abf8721f3888798fc6973cb4040e83c74391b22de30c158ec2144304dce6045cbc171a40b79605d1cbef9a42ce82269739d43b0d912af859f9bbf1e08278bc65cd5163ee6b37a9bd821b1b8a735dce79bd8a67bc9312eafe6ee73ebdf13dcaf8769e457314c000c2e656a0cde7ed0cf6bc2d3bd45ac7805e796e530504d6d5e13d8c12c3d912589310b81dff7318d3e86eeaa2d7bb138a2cc08e364234b0c22ef507a63735fd4ccea7c1e523159", 0xb8}], 0x3, &(0x7f0000002c80)=[{0xd8, 0x10d, 0x2, "cf677036f4ae2b4e1cfd68a3b5af7137eeaff4dbd23290af6ff3beb35a1732fc4b1766ec538a0d5067e1819c84ca8afb40239b6e07ffb0fb9c9df55788141d15676aa70de9cc37a4d8aa5fb9ad98f8e39a473584c96672177643d0f6c084c43dcece9f137eeac6162afbd4100a3a21f6522f7ad5afd92ab8249593c9d9c4f5e4277d6b049bbac26c4787bbba9ed94d4b34f2e13d230ef7c8807c00e727241fc7dc4f3f792be7e58ef5eb4eab989b0fedd2ad7cc16a82958e974bc1592619da3f9737"}], 0xd8}, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000580)="5c00000052006bab9a3fe3d86e17aa0a020000001d0048007ab608ffff0af36504001a00380219bc060000070005251e61a2949a3651f60a84c92ad49380e78f6f38732006c911b3bdc4ed719ef6a1577a", 0x51}, {&(0x7f0000000480)="a58ec582de287deb6b5800", 0xb}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) 4.44943765s ago: executing program 1 (id=4248): openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) socketpair(0x28, 0x2, 0x28, &(0x7f0000001400)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="08000000040000000400000007"], 0x50) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x2, 0x8, 0x1, 0x1, 0x2020007, 0xec49, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x3ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90424fc60040207000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0813", 0x0, 0xe8a2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8edd28d9002000008000000b703000000000000850000007200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020696c250000000000202020db1af8fff1000000bda102000000000007010000f8ffffffb702000008000000b70300000024a6000000850000007b000000950000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000140), 0x4) sendmsg$kcm(r4, &(0x7f0000000300)={&(0x7f00000001c0)=@ieee802154={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0002}}}, 0x80, &(0x7f0000000480)=[{&(0x7f00000007c0)="27031c00f40e1400020000000000000006e1f0000000890900000002ee1680ca82973d2bd4b836954268e611c0", 0x2d}, {&(0x7f0000001a80)="7cdb015fbb1990080000006a2615837b6487d32d2fb46cbd152314980741e032cef721aadbc1994f1d49784b25a274803a7caf917f73a677974c21ab81963cf096b03d0369ef39458a06a2bccd5f12f4584d19a07664fe933703f7f6030000003abfd437d1e03de09e6074561fe9216c8b8ba00820c3de3c53bdba305901d7103513c9c2b71ea428a38f832416f3cafeccc552044f00ff3570a9ab9cf26b9af6af17547bf7f4e1762be569a68d54e854db809b155cc566b08f25c90861e29ab717f760ad57bbfd48e867a91d63c1ac78aafe22fc56f053ed1cc606f09b", 0xdd}, {&(0x7f0000000800)="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", 0xe09}], 0x3}, 0x24000008) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(0x3) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x5, 0x7ff}, 0x104101, 0x4, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x6, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x200}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0xd9d7b1b3f04cda74, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a0038001d00", 0x61}, {&(0x7f00000000c0)="83d2ff5f00000080d2898a0cc6d6703b87eb28f77b09bc7e64f918fa3be4664d327d90424d5503002800"/52, 0x34}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) socket$kcm(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r8, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1c, 0xc, &(0x7f0000000380)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2003, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r9, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$inet(r4, &(0x7f00000029c0)={&(0x7f00000000c0)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000002900)=[{&(0x7f0000000100)="814024a505317094e4e7ed58e1ef84b0ed8288cc864fa2965c45c1361b994905832259607b7536a41b849a548d8ca5d51da3fcddebdc40d7c1258745ea8c2354446f6b22391b3a93a2c5b5ad6a7ab15e0f95b62e280f820ea40bfbdb40abfbf3ff46ac0cf6d9", 0x66}, {&(0x7f0000001440)="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", 0x1000}, {&(0x7f0000002440)="13108de30cd37ecc4f57428fcbe0e12f87bee803fdf929cddb0b4fbf6de04d26563f6da0c2b5ff998710f98563fa9977c15a4adaad0b12eff005cb6fd6d87170f5744731a9dac857fe177368160fae9f0df394b04dd72e1b6c485f69b76fbcd1b6e976b3b4ec0fd79d02773d746a7f11c8789534362882888422b541d712d34f0510ef4087f0c681424e780c6f2633c2ba01148045eaf4ecd8809f6bc0", 0x9d}, {&(0x7f0000002500)="3e74540180ecad3c81c8e6455d0904e28e0ce454dfd896bd516d12ed79e7c99d796698577db4aed34d251761561f063ecddddb9338b02fc014b65e9b12f32d8867ff73d18b93e8e66fb987aa5e7d7731f45572fb5339b1465419471a818d65815a0dd0ad0535298547680d8e25efaf2fe638beead3a2926f2a1335e70de588e1b406360ddac4ce4fde4a5b01550f7432fa9098a0ced4ce430de144545b94a6815e6abc40e794738db512de0f40e68137", 0xb0}, {&(0x7f00000025c0)="a518bb919e9e76e2ffb4a7a2378360b9e80ff12f1f5735a00cf484f8d8bb579be36071cc7fce04d02010368fd31afd2b322dfcdf1ef532243ae5c93f8972b70b69d7a38541a0affbe3a927c1385713719515d813a09414a5024d8ec3dbc16b9bc17c95c0adf944cfd2cd7b681c51e89c565a1afe2b71f6a60547a3844211ad1d0090f33eb5954de6dc9dcbcd9bc06164a0882af477dfa45104646bc5d46981cba2c66e431cc82045f579ed267b6c7093baa44a19adfcf385ea4b0201c9a8dbd23e38bca376a1a9eefdaf5e527c61aca5d67ec3a5430b482890133d46", 0xdc}, {&(0x7f00000026c0)="393a3d85f324cdd6d8fe9c53f20f50b5bf6afbbf38e8d435f194edd6a41a763fa3e77f6ed09dfb1ff3305114849548bd75e8789788e0f5e005addf96d62af56c64b7e138be0a2aa6f50eec42ab4f1729f85e99600a5390c78a331aaaae502d64d7d93e3fecd023c0a1fb13563a34fdb9e9b543a0fb8459141812f257c6cf2cecc4be6c44f47fe8f37d5d720a5f79c4371f4fae8c6d5daf7181443d4d8c3094e71cd37edca2824d26377d181af2895201eda5f1567480040d5955", 0xba}, {&(0x7f0000002780)="879cd5e2aa8b7d17cdf77e0f1202331c0349be834c8e73abc4e5ae65a2fe7ed0b48750c473933b086a1b0fe0fed114a07b3041324ff3e68ff09cb90b451cb59c20593d3fdd87ae83bafa69e33a8441c6ad77ce8cc4cd256c62dd5480377c1484e665c2b013a4ad058c021c4f73225358fe2847eda91da9f3180608ae191f01446acd06a7488a0b06b2f32bc71292", 0x8e}, {&(0x7f0000002840)="312b793f7bb0889d5485a84b1d6174a6e0afc9c63367a31734d41be6c7c02b0cbbeaa5be6db1cda2e202cfe2e1948d6ac5d95e0270d43e99fa3b13cdb9958f4a30e6d4d3b09b634bb5890072e16be21bd1601b7fc07b0c3b627f91927bcc21a72ebf1949d05efb97b571611c4757a464415e6ac4487698143000f0037dc509e69b0e6af8829e1dabe29c81", 0x8b}], 0x8, &(0x7f0000002980)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0x18}, 0x0) 2.619647215s ago: executing program 2 (id=4252): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xd040, 0x10000}, 0x14403, 0xfffc, 0x0, 0x5, 0x582, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0x250a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x8e, 0x4, 0x11, 0x7, 0x0, 0x9, 0x80000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x8, @perf_config_ext={0xdb6, 0xf9f7}, 0x10, 0x1, 0x1ff, 0x0, 0x9, 0x25, 0xfff8, 0x0, 0x4, 0x0, 0x3}, 0x0, 0x9, 0xffffffffffffffff, 0x5) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef001e000000002c"], 0x66) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0xff00) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400009"], 0x50) r4 = socket$kcm(0xa, 0x5, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x890b, &(0x7f0000000000)) 2.614486445s ago: executing program 4 (id=4253): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x1c0a8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0x23, 0x5, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000680)={0xffffffffffffffff, &(0x7f0000000580), &(0x7f0000000780)=""/140}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0xf6, 0x0, 0xe, 0x0, 0x0, 0x0, 0xc0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10, 0x20000000004}, 0x6000, 0x0, 0x1, 0x6, 0xa, 0x2001000a, 0xfffc, 0x0, 0x3ff, 0x0, 0x5}, 0x0, 0x3, 0xffffffffffffffff, 0xd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}, 0x20010) r7 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) write$cgroup_type(r7, &(0x7f0000000100), 0x9) sendmsg(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x2, 0x4, 0x1, {0xa, 0x4e21, 0x9, @mcast2, 0x6}}}, 0x80, 0x0}, 0x4004800) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0xfffffffffffffe14, &(0x7f0000000240)=[{&(0x7f0000000000)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe5538250015000600149b0000001208000313eba96240a8002b", 0x33}], 0x1}, 0x80) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0xfe33) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sendmsg$kcm(r3, &(0x7f0000000dc0)={&(0x7f00000002c0)=@generic={0xa, "fd438441b2d08c8c1fd891503c4caac2bea8e335bfa4b6f8ed3fb5fe46f5e8863c7779201d71ff247f1364d36740934682570030d74451d31190460931ba1cda206a6aad6f8a37f43e7319b4a4d1cc5fe9a15fc55561be5d9c90997c9fc5cd09cf488ef958ee07fea6c0bcdafd59cdc00ab653c40c01166a0edb299127f8"}, 0x80, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="3aaf2d", 0x3}, {&(0x7f00000008c0)="a1ce35114ebbdffb0eba10fb32d4cf492290629c9a41fa8ec80452f0242f1dec49440d87050d9c4cfb6de03c8349b9efd112067ffa358867ddf938468876a0ea7feeab303befbec4eafc65c14ca88d09a2befce4b509db400739230fba64c8a9b4e964695564bd1c1c", 0x69}, {&(0x7f0000000600)="ddf16966d6d6c352c0bd5eb5107af217c71b0a6969043e5ce1e7358a48b30e89a273d5b8687b873309bc55bcdbfe795f3d703031ce89b8593b0c963115f53630fbc78ef907bebca30c3b5e1f49c8461d17a29163ac405928f88d5bf7c9d8cf35c9c6ac12a50b15c2e3c171fd1fe1494347a512ef23567be48acee9a62549", 0x7e}, {&(0x7f00000006c0)="50efbcf5b4b92b5272af8900afb57884e82bd3437f4ea390921e4fca93c18224b738841268337995dd482c606b8d4c5111d64bb95ac869", 0x37}, {&(0x7f0000000700)="a97e82c67bff4076287b83d3df38cc00d229ed5a690012338ca0c4", 0x1b}], 0x6, &(0x7f0000000b00)=[{0xc0, 0x119, 0x2, "19cf4318f964f14cf48330a3093a534643bb91af68a3d8c62279b9be013e1b4344badc725f297bbcaeb9df8999a05e10ea7ba56e73623046252b730d6fe4e06b81e2e115abdfd699623ba70c11e0d70daa54372a79caaaebedbcc58c0ce21959ac245bebf35baf25a0bcd8ce007fc6c08b3a8d0df9d5ca05e87bbd53927a17d57564d0da4d21afa55851c8fa44b6e7568dce1ef0d9ccbe2edd0c9bf5908992cb82abc5bebbac0ad7c9"}, {0x48, 0x102, 0x8, "c70a045bbf7eaa5ae0f42e8e64582ce9d23676b267dfc1c7b2166e4e8ad8051bc92e414bc9fd05f89d50a8bf2d280a97ac1cab2e6efa"}, {0x10, 0x1}, {0x68, 0x3a, 0x5, "d9e8994d572167ec6300c24fbd86e937831ad53cead9b00f7182616ccbdd1310d8a79fd2fbc15acc2e4b6a8fb0583cb8b4390f560a8623f605f45078a727515874a5acf2c2805f2a7d128a94451de75373"}, {0x70, 0x116, 0xc, "3668b1a35fbcc3e23ba0fffff80ac38e0a42e8049b8996cab54d6c09e38b407e39555e72b77f9c33202b2adac68121250972f1687ef4c20ddc8146556cfdb69a1a7c351af2ae090891f2d8c4f1bffc3d6ea681470c1e37ae446916c2e7f76d7b"}], 0x1f0}, 0x4004014) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x5) 2.490011788s ago: executing program 1 (id=4254): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000340)="6c99045a7d7d57b0395437077142c769f8c270ea2f5bfa41d49671ab6f30d62878e3d5fe75dfd0bf363a5ad1fd3dff6a16f4cd3429879319466d", 0x3a}, {&(0x7f0000000500)="a6ba53155aff91888f5235813d49f6abd81f87afbb153b5439be2382fe56a73345a0aeb7eff229e95d20be7e37dfa9e624de350a552d03084546b45a0a851f0b4eb2b7c4a4474cd6d2cea73b6fbfc861b620fa5b4dd0edcd23592f80d6c0119cce87dedf707ec6f9da23c94a020fb1992d8ad81a68b4f3d36551ee0af10031da98eb83cb685b1c888dca408c88d5ed2bc5737012da6be97ea46bc254307bd25baec6b2df47650b4e784a87b1a0a5b4e6c519ff8da5bef5b567ab38ded194d7bc3f3963ee44c0d1c63378f3a72ad8250b2f526504798c4d97", 0xd8}, {&(0x7f0000000600)="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", 0xfd}, {&(0x7f0000000700)="fa77cbc347fe045c3d70a50be949ccba22157e859b738cb0984c20e7f98453d76dadee2707204cb903d1ae98179ca743901a27d8a7e16f472fd4f53409951886dfc46191b1c7d9e959e86016082ef9d5ef21bb5bc16170348ebf565d6366db6a42615cb4efca5db1addc24e62aec79234c2f702fd7d1181384ef3aa13fdeeffe9f6e754ca00c1e73332c87ecb37bc9235e085661034cb6bd0ee6eea7bda094ba9c36f1e747fee5aec5eb28086703c6328d4ad11b16c184846208036e87ead54e227f53cc562b1c3c90d97b9e", 0xcc}, {&(0x7f0000000800)="888ce87826cc34a75451cf3c4cd292e69fdf4e6b9d03a4e2ab108790b45d3e8874a13996c5760cd924a37b6224cc7bb2113844976bd1c2dd9b07dcbeb2c1036fd554d065f689bb6f1636a95a23af550b20ea9ee8da3461256bf8fe576f60440c04771362d5ec211fd95ec1c764ffc2d5861524f1e317e0445d8befa5bb678288bfb0b8e96dc1042dde63e636f861e52cf0ba713aa5b3d119de9fd4cb52a4213cd1f2a458723f49dc316d7711519a039384eb5242e1e7f5b08bff8f90afb1f63700402e9b9ceb1ccd0279ccb75e354e16b3d74987f0683f17062a3bee5a41524c856ce2f6e51c80c8edd4363544c254159cd1c0e5a3c91351a6", 0xf9}, {&(0x7f0000000900)="4d443f1c7f05957aa598b3044932f4fda4338e26b8e74213a454db877807a5531dbe0a31c6ea9350c8d5fa7bdaaa2f9173bc1195f39cd52b7a14f018b42309bd0645c093ad45f94d0fd049ae6fc9d0f6f5040e20988519e57aa382bf6e65b65793dace5e987becd306ddff022f35b281732d8ae237eaa35ce3d6f65ce648af29f228060918eba65dc73ee77fc5ffb522dee9b04e82377b7c316cc5606b4f08f120412e9f4e0638f7d6193f82b22bbfbcc4d7f8f8a97ee1cc60938b03df021c0f", 0xc0}, {&(0x7f00000009c0)="47239e132be9c2563cdf5ff5c39a44c97d17c4a1bf4c64c40627ebd9e2bf8d2e2305d492a54951d873a5c5819852c11dbd8ee7c996e5af7a3275caf91c60313c7862", 0x42}, {&(0x7f0000000a40)="bc74e127d695c47c002c343dbbee7be11ab2b6273876b9e0b01ffcb184c13da416f00a98955ef64d11bd53c4cefcdb7a97c6bba941c6d337f8778243233e6df0423b98747bbd267744f11a0eb52c98c6a43aed853e48456ee3fbfd96ad80fe40b2af4bd7113ea1022a26c16d3ee6e68ad6abc0ab12b7c667dfb1b5fe84708169d3efaf1aff61aad4f66dda18415d82122f8a1b8287a2be68e3e25985a2529d7105ecdbdc9714a92ca1764d4f8aedee122b383fab7bb1822e1c09e4fc70bde1b6b881b26562a1ca800eecc2c85c488ff743ca07b3c8cf05b02a1ccc892dcfad0e815191a3690e22d244a5b91ede770f", 0xef}], 0x8}, 0x20000000) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="3504000040000511d25a35400c0002000200002037153e370c040180060410", 0x1f}], 0x1}, 0x10049014) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b05d25a806f8c6394f91a24fc600702", 0x16}], 0x1, 0x0, 0x0, 0x400300}, 0x20044050) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x0, 0x5b, 0x0, 0x0, 0xfde, 0x0, 0x29, 0x4f, &(0x7f00000001c0)="4e6f466c21233bd7f42b4dc8611a1e1088672ffa9153177f95ca88f2b010232a390e9e80d6c527972f", 0x0, 0x3, 0x0, 0x2d2}, 0x50) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x100084, 0x10000, 0x0, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) (async) close(0xffffffffffffffff) (async) socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xb704, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x90) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x10}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f0, &(0x7f0000000080)) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r4, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000084000000000100000100000000", @ANYRES32, @ANYRESHEX=0x0], 0x50) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c020000000000005f00"], 0x0, 0x34, 0x0, 0x0, 0x0, 0x10000}, 0xfffffd7e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x90) (async) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) 2.42990841s ago: executing program 2 (id=4255): bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000040)="df3ec896749f247849e3abaad2b1b6e33e53c3671f93ef1db598de00a4ccacafda6ffbba3698113427027c8de3f53e6f94e726626b5deb505fecdca67b8cd94e317f636004651bcd54cf50dc1085f5b7c40d2cdea33bce4367ed4f1ec759523acb8a1134db24130970ae74e1e5a93269829c6b9b8b507abcd61768b3cd15da363c365870167f61700afd81ebb28d78061e32f833ad5e8bd3e6de54c48750d50461e0", &(0x7f0000000100)=""/89}, 0x20) socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) socket$kcm(0x29, 0x7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="61128c000000000061138c0000000000bf2000000000000015000000081400002d0301000000000095000000000000006916600000000000bf67000000000000260300000fff0710670600000f000000170300000ee60020bf050000000000001d360000000000006507f9ff01000000070700004c000000cc75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000000500000000000000950000000000000032ff7f5be95e09b67754bb12feffffff8ecf264e0f84f9f17d3c51e3c7bdd2d17f2f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd399703d6c4f6f3be5b369289aa6812b8e007e733b9a4f16d0abbd5ad9381806ef08513e3d3778a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad5b803306b17cf4ef3f1d45f65727546e7c955ccefa1f6ab689fde4de4e63edf10271a5144ddc8da3aa5b0ab733a1b901627b562ed04ae76002d4519af619e3a2a4d69e0dee5eb106774a8f3e6916dfec88b5634ef79b02d2ca8ff54c158f0200000000eafb735fd552bdc206004aeb0743eb2dc819c75c8ac86d8a297dff0445a13d006723888fb126a163f16fb2ad9bc1162ba7cbebe174cecac4d03723f1c932b3faffffffffffffff5fc998e13b670e373e3e5897f7ad2e99e0e67a993716dbf580469f0f53acbb40b401e3738270b315d362ed834f2a0700000096649a462e7ee4bcf8b07a101c879730beb4000000000000000000000000000000bc00f674629709e7e78f4ddc3d1bc3ebf0bd9d42ca019dd5d022cf7468659fbe2562671cd47840a7afaab43176e65ec1118d46d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7eab04871bc47287cd313f3bea788ea2bcdc340ffb567b40407d000000000000000000000000005f37d83f84e98a523d80bd0d0d703f3767ce603c9d4867b63d20a268bb9f15a0a6e66ce4660fbee91629ab028acfc1d9260e9659a0f6a5480a55c22fe3ae5f562d0ae520c38d2bab6528000000596fb73a96b33c81cdbbd421a27f7f1db054cc7a0a4d372849c99a98822103b9851d924b85b1ca4b21b187db00000000000000066dead3b9670a7604a5ddd0fd2e4fb8a5749a8a8ad78454ba1eebeff1b528da294247d294d2487babb176fdfafeb3d492a325671e6b91afb41f87feda4ce2f468a3758750c0b8f151d4d8574bbbe027687a0e12311cdf3384a26ee3f6f2424ba1e5be98ef1f8f2db9a4991e234f9f447e1730ceaf54cf25c0e3ad7cbb0de06d55db89d154c9d3fcd01c551b0ef58034c252629aefbfd5305845b9a8763b264e8f0bcd0f606fe92e511f122325ebc5fef1b68f2e2ec7bebe423d4baae0e27845d0eb8b8a4f97f83424221e94a5c4623feb8496ccdbc55b27773bf1b3e6a91a20e0c27fc80262647f88d8d1123d199b2c7729bb7700e887ea963f00004a1d0851dbfb9308d16cadcc7b477c9a9586571182526898735552a203c4797228533b1a73ab44aa115136353964648abcc4adbe765556643842290a92eafea0ec2c000000000000000000000000000000e1f3518dc3fc2bbefe043804ac1b6b1c8b7e3afed045a3a808700bca61a39d5bfa83877803013e2d145e642253632f3a283c6eee0e22cb69fe7f94786220c31e9b2a82a9856e947bace74923e4740bf1c17cb41ef19161c3d417655517c28bd08dee32d77a40b834ba7a12223354e9321b8300f7d5d63fa0e8f074adc176285a8f41609ce040cec99943792f5443ca5292447b0f0f240743c4b2b8142ce0b43d4d1731ce11533f61ef241c83557f5aae58a848b5ccce86b8b0fb21fe369c90f06e2d9680003df72f3f0060e6c3415cc1026d342003bece09fbfd062efdd9b48377335903f3b4e87386915e3ac429a4db646da1cc6e29ad8650f4da326cbfdce12c8d5deba32549d6aefe422e0d665d62325c737fe76ec1f3c3670ed96f86738a2cf1c59b5f9b84ffd068f7b4509f53617910a41b811a3f7cd6251f8100008133af11a4db2d00c0ad86ce9f40f3e06b41b45f72b1598a12abddf58ac778bff2f1e49306a1d2f80b2a7d7a28f3997ee60793c62ffee96535e47adac9f367395cf26056a4b76d646f7682f21beafcdb7a9c07acfd145487426f1a009327b8ec6e695e6a7ddcc2c9151cc9c4efa413fa1e521b398151247104bc47748199441cf298e925ef2e3374f4ec0193b38a355c35ee44962fceb3f418510742c93a442f857733b74b6d9197cd62784d7f2afa6a4bc5cae18e33435665250241a7ffd96fc0790000009c17c570096bb75de737107e029b18ec0e61ab3761366452a1c6e3e3c912170f874555aaefc9644cffa768eb2b47c6b040698746df86026730db64859c46cdfb775b86214cfd1932d5ad87c56ea4f38bca780000000000000000000000003bf179c894590cb06b546082451bb735e7152afd5340683663e8effbfb49855ec98703a1e141ab7510fc0e3b081e72d25bfa4e52bedadd11e152bb1dcfcfe942b97b813cf4cdd8626ecfb630425db071c1bfdb03fee96f80b1a96f9427e17edfdc902749ccbab746e26a3a46527b3a32c49dab9608ab1dca3982590c1e78ff5c87d10eef5c3707974981c01c00000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf000000}, 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x181000, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) r5 = socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0xe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000300), 0x1}, 0xc00, 0x0, 0x9, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$inet(r5, 0x0, 0x40811) socket$kcm(0xa, 0x5, 0x0) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000440)=0x3, 0x12) gettid() write$cgroup_devices(r4, &(0x7f0000000280)=ANY=[@ANYBLOB='a'], 0x9) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f94ea3c92b", 0x14}], 0x1}, 0x40) bpf$MAP_CREATE(0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000ffc0a7429f66495a0d9e5a2501e2bf727c031abfcb6d2972fac1cd01c461e8d9642310a9afebacb058766243dc57c0cef4f260e8cea4f421fe643626998aa754ea6f9b4672786642bf0104bc63d690e785fe4ac0bb996ffe12c40773126d5668740bbcdb33a5909f9c3ee8837892b7a492c191372e15b5e535a5708b5e0ae2652422e5f97871bad4d150abe09c5972fac6273e4a364f877bf4304a66779bacff965171746dc586cf2e5a9801563e05bd567ba5", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x48, 0x4, 0xfe, 0x3}, {0x44, 0x94}, {}]}) 2.3999861s ago: executing program 1 (id=4256): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x4}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="d80000001800810804000000db44b904021d080010000000e8fe55a10a", 0x1d}], 0x1, 0x0, 0x0, 0x6000}, 0x6000800) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0xb, 0x2, 0x2}}, 0x80, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f7d28344b904020000", 0x2}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x33fe0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000b98bc2cc00000000002020207b1af8ff00000000bfa100000000000007010000d8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x16, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000380)='\x00'/14, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0300000004000000040000000a0000", @ANYRES32, @ANYBLOB="0100"/20, @ANYRESHEX=r1, @ANYBLOB="020000000100000005000000000000000000000000000000000000000670d49d497ff2768b79902f546ca50a7350d2cc36edb210a52c919d5d05fec0dfe5b4b4c922b0d82f4cccf0a83b81e51db65729c9eb17a6de91281dfdeae217d76ba5342aa8e00c4c3cc93d0128cd25b7403ad0e03d004555b795aa9e1fdbb9535706d86325242fccf954c3f44bcec26e359b6aa319cfeca019998d6cdf9680b4f28b79f7893089d1564e172f67fd6a4baa4cd0d9b7443edf685b93ad323b88d51b391d639f680d6b3709a9d90a6800e9a8ca55552cb0d4f584272d2840d32fca1c9c26"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x4, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x1ff, 0x0, 0xa6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, &(0x7f00000000c0), 0x19) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="9d15", 0x2}], 0x1}, 0x8051) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYRES8], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x2, 0x5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000780)="d80000001a0081044e81f782db4cb904021d0800fe007c05e8fe55a115001c000200142603600e12080005007a010401a800160020001d400d000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) 2.359248221s ago: executing program 4 (id=4257): perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000004000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x1e, 0x4, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r1, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000140)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400), 0x0, 0xae, &(0x7f0000000440)=[{}, {}], 0x10, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0xef, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) socket$kcm(0x1e, 0x4, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) r2 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='\x00') r3 = socket$kcm(0x18, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x40047452, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10, 0x10001}, 0x0, 0x10, 0x0, 0x4, 0x5, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000240)=0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa}, 0x94) openat$cgroup_int(r2, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000080)) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, 0x0}, 0x0) 2.330938082s ago: executing program 3 (id=4258): perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb4, 0x0, 0x0, 0x0, 0x20, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3542, 0x1ff, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.98841443s ago: executing program 3 (id=4259): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000040000000400000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffff000000000085000000330000009500000000000000"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@ifindex, 0x11, 0x1, 0x7ff, &(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYRES8=r2], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x4, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000040000080000000000000000c3120c00f100000095"], &(0x7f0000000200)='syzkaller\x00', 0x1, 0x98, &(0x7f0000000a40)=""/152, 0x41100, 0xe}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x12, 0xb, 0x8, 0x2, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r7, &(0x7f0000000300), 0x0}, 0x20) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20) write$cgroup_subtree(r9, &(0x7f0000001a00)=ANY=[@ANYBLOB="13100000120091ef"], 0xfe33) recvmsg$kcm(r9, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xfffffffffffdffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r11, 0x40042408, r10) socketpair(0x22, 0x2, 0x3, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r12, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) r13 = openat$cgroup_procs(r8, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r13, &(0x7f00000005c0)=r6, 0x12) 1.740569506s ago: executing program 4 (id=4260): r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x18) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000010"], 0x0, 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000811900000000000000800014850000006d00000095"], 0x0, 0x7}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r3}, 0x94) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) r5 = socket$kcm(0x15, 0x5, 0x0) sendmsg$inet(r5, &(0x7f0000000840)={&(0x7f0000000640)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x20}}, 0xc, 0x0}, 0x4000000) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x6, 0x2, 0xffffffff, 0x2390, r0, 0x5, '\x00', r3, r4, 0x5, 0x2, 0x1, 0x8}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000080000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000800b7040000010000008500000033000000850000000700000095"], &(0x7f00000004c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r7, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x50) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x18) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000000}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000010"], 0x0, 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000811900000000000000800014850000006d00000095"], 0x0, 0x7}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r3}, 0x94) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) (async) socket$kcm(0x15, 0x5, 0x0) (async) sendmsg$inet(r5, &(0x7f0000000840)={&(0x7f0000000640)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x20}}, 0xc, 0x0}, 0x4000000) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x6, 0x2, 0xffffffff, 0x2390, r0, 0x5, '\x00', r3, r4, 0x5, 0x2, 0x1, 0x8}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000080000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000800b7040000010000008500000033000000850000000700000095"], &(0x7f00000004c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r7, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x50) (async) 1.462048284s ago: executing program 2 (id=4261): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x4001, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x30004084) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000180)=""/60, 0x3c}, {0x0}, {0x0}], 0x3}, 0x2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0xacfd1884ef343e87, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x6, 0xfff}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x4000000009, 0x6, 0x2, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f088ca65e00500000a0000000677fbac141416e000030a44079f03b180006000000000845013f2325f003901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) 1.272394428s ago: executing program 4 (id=4262): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x6, 0x0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000002040)={0xffffffffffffffff, 0x0}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x6, 0x9e1, 0x5, 0x2, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffefffffffffffff, r1, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b20, &(0x7f0000000040)={'wlan1\x00', @random="000010000b00"}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f2, 0x0) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r4 = socket$kcm(0x10, 0x3, 0x0) write$cgroup_subtree(r4, &(0x7f0000001ec0)=ANY=[@ANYBLOB="13120000120091ef04e9befbbd00005c0a"], 0xfe33) recvmsg$kcm(r4, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x42) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x36, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000005c0)=r5, 0x12) r7 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000040)=0x1, 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f000801}, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x10040) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 608.134385ms ago: executing program 2 (id=4263): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xd040, 0x10000}, 0x14403, 0xfffc, 0x0, 0x5, 0x582, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0x250a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x8e, 0x4, 0x11, 0x7, 0x0, 0x9, 0x80000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x8, @perf_config_ext={0xdb6, 0xf9f7}, 0x10, 0x1, 0x1ff, 0x0, 0x9, 0x25, 0xfff8, 0x0, 0x4, 0x0, 0x3}, 0x0, 0x9, 0xffffffffffffffff, 0x5) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef001e000000002c"], 0x66) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0xff00) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400009"], 0x50) r4 = socket$kcm(0xa, 0x5, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x890b, &(0x7f0000000000)) 477.385248ms ago: executing program 4 (id=4264): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x6, 0x0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000002040)={0xffffffffffffffff, 0x0}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f2, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r2 = socket$kcm(0x10, 0x3, 0x0) write$cgroup_subtree(r2, &(0x7f0000001ec0)=ANY=[@ANYBLOB="13120000120091ef04e9befbbd00005c0a"], 0xfe33) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r4) ioctl$SIOCSIFHWADDR(r4, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r1], 0x0, 0x80}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="850200000000000018100000", @ANYRES32, @ANYBLOB="00008cff07887e7cf83500000000000045"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x2, &(0x7f0000000000)=ANY=[], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4b}, 0x94) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) recvmsg$kcm(r2, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x42) 408.24031ms ago: executing program 3 (id=4265): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x1c0a8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0x23, 0x5, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000680)={0xffffffffffffffff, &(0x7f0000000580), &(0x7f0000000780)=""/140}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0xf6, 0x0, 0xe, 0x0, 0x0, 0x0, 0xc0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10, 0x20000000004}, 0x6000, 0x0, 0x1, 0x6, 0xa, 0x2001000a, 0xfffc, 0x0, 0x3ff, 0x0, 0x5}, 0x0, 0x3, 0xffffffffffffffff, 0xd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}, 0x20010) r7 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) write$cgroup_type(r7, &(0x7f0000000100), 0x9) sendmsg(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x2, 0x4, 0x1, {0xa, 0x4e21, 0x9, @mcast2, 0x6}}}, 0x80, 0x0}, 0x4004800) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0xfffffffffffffe14, &(0x7f0000000240)=[{&(0x7f0000000000)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe5538250015000600149b0000001208000313eba96240a8002b", 0x33}], 0x1}, 0x80) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0xfe33) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sendmsg$kcm(r3, &(0x7f0000000dc0)={&(0x7f00000002c0)=@generic={0xa, "fd438441b2d08c8c1fd891503c4caac2bea8e335bfa4b6f8ed3fb5fe46f5e8863c7779201d71ff247f1364d36740934682570030d74451d31190460931ba1cda206a6aad6f8a37f43e7319b4a4d1cc5fe9a15fc55561be5d9c90997c9fc5cd09cf488ef958ee07fea6c0bcdafd59cdc00ab653c40c01166a0edb299127f8"}, 0x80, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000440)="3aaf2d", 0x3}, {&(0x7f00000008c0)="a1ce35114ebbdffb0eba10fb32d4cf492290629c9a41fa8ec80452f0242f1dec49440d87050d9c4cfb6de03c8349b9efd112067ffa358867ddf938468876a0ea7feeab303befbec4eafc65c14ca88d09a2befce4b509db400739230fba64c8a9b4e964695564bd1c1c", 0x69}, {&(0x7f0000000600)="ddf16966d6d6c352c0bd5eb5107af217c71b0a6969043e5ce1e7358a48b30e89a273d5b8687b873309bc55bcdbfe795f3d703031ce89b8593b0c963115f53630fbc78ef907bebca30c3b5e1f49c8461d17a29163ac405928f88d5bf7c9d8cf35c9c6ac12a50b15c2e3c171fd1fe1494347a512ef23567be48acee9a62549", 0x7e}, {&(0x7f00000006c0)="50efbcf5b4b92b5272af8900afb57884e82bd3437f4ea390921e4fca93c18224b738841268337995dd482c606b8d4c5111d64bb95ac869", 0x37}, {&(0x7f0000000700)="a97e82c67bff4076287b83d3df38cc00d229ed5a690012338ca0c4", 0x1b}], 0x6, &(0x7f0000000b00)=[{0xc0, 0x119, 0x2, "19cf4318f964f14cf48330a3093a534643bb91af68a3d8c62279b9be013e1b4344badc725f297bbcaeb9df8999a05e10ea7ba56e73623046252b730d6fe4e06b81e2e115abdfd699623ba70c11e0d70daa54372a79caaaebedbcc58c0ce21959ac245bebf35baf25a0bcd8ce007fc6c08b3a8d0df9d5ca05e87bbd53927a17d57564d0da4d21afa55851c8fa44b6e7568dce1ef0d9ccbe2edd0c9bf5908992cb82abc5bebbac0ad7c9"}, {0x48, 0x102, 0x8, "c70a045bbf7eaa5ae0f42e8e64582ce9d23676b267dfc1c7b2166e4e8ad8051bc92e414bc9fd05f89d50a8bf2d280a97ac1cab2e6efa"}, {0x10, 0x1}, {0x68, 0x3a, 0x5, "d9e8994d572167ec6300c24fbd86e937831ad53cead9b00f7182616ccbdd1310d8a79fd2fbc15acc2e4b6a8fb0583cb8b4390f560a8623f605f45078a727515874a5acf2c2805f2a7d128a94451de75373"}, {0x70, 0x116, 0xc, "3668b1a35fbcc3e23ba0fffff80ac38e0a42e8049b8996cab54d6c09e38b407e39555e72b77f9c33202b2adac68121250972f1687ef4c20ddc8146556cfdb69a1a7c351af2ae090891f2d8c4f1bffc3d6ea681470c1e37ae446916c2e7f76d7b"}], 0x1f0}, 0x4004014) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x5) 335.301801ms ago: executing program 2 (id=4266): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000040000000600000007"], 0x50) close(0x3) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x8, 0x40, 0x5, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x1003, r3}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0b00000005000000010001000a00000001"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r6}, 0xc) r7 = socket$kcm(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r7, 0x1, 0x28, &(0x7f0000000040), 0x4) recvmsg$kcm(r7, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x2) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef59510525ba56dcd79a36c23d3b9844e1571a86ea1698fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r9 = perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffb, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x1}, 0x10008, 0x0, 0x4082c5, 0x0, 0x4}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r9, 0x40082404, &(0x7f0000000000)=0x7) sendmsg$kcm(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7590e1211000000e3bd012a128748fdb8021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4040004) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) 188.546595ms ago: executing program 3 (id=4267): perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb4, 0x0, 0x0, 0x0, 0x66, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3542, 0x1ff, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 93.885618ms ago: executing program 4 (id=4268): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x5, 0x111, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ff, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x9006, 0xa, 0x0, 0x0, 0x0, 0x0, 0x3000, 0x0, 0xfffffffd, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x845) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) socket$kcm(0x23, 0x5, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x10001, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x6, 0x100000001}, 0x36, 0x5, 0x8, 0x3, 0x2, 0x9}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) close(0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0e00000004000000080000000d00000000000000", @ANYRES32, @ANYBLOB="000000000078adff91c3ea7c035100"/29, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000200000000000000000018110000", @ANYRES32, @ANYRES8], 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r4, 0x0, 0x0}, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x3, 0x2}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRESDEC=0x0], 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r5) r6 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r6, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0xfffffffd, @empty}, 0x80, 0x0}, 0x20000001) write$cgroup_type(r5, &(0x7f0000000080), 0x11ffffce1) r7 = openat$cgroup_devices(r0, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r7, &(0x7f00000000c0)=ANY=[@ANYBLOB='c *:23', @ANYRESHEX=r0], 0xa) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfe33) 93.486078ms ago: executing program 3 (id=4269): r0 = socket$kcm(0x2c, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000740)={&(0x7f00000003c0)=@l2tp={0x2, 0x0, @local, 0x4}, 0x80, 0x0}, 0x48020) getpid() perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x8}, 0x3542, 0x1ff, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 13.441449ms ago: executing program 2 (id=4270): r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x4000}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000140)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x0, 0x3d, &(0x7f0000000200)=[{}, {}], 0x10, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x6c, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) r2 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x64, &(0x7f0000000000)=r4, 0x1c) socketpair$unix(0x1, 0x1, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x8, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x4005, 0x35, 0x43a1bd78, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0xf2a}, 0x0, 0xffffffffffffffff, r5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020032000b07d25a806f8c6394f90424fc602f0000000a740200053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x8001, 0x0, r0, 0x0, '\x00', r1, r4, 0x2, 0x0, 0x1}, 0x50) r7 = perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3542, 0x1ff, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = perf_event_open$cgroup(&(0x7f0000000040)={0x5, 0x80, 0x81, 0x7, 0x10, 0x9, 0x0, 0x10, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000000), 0x3}, 0x0, 0x4, 0xfffff543, 0x9, 0x4, 0x400, 0x9, 0x0, 0x51200000, 0x0, 0x7}, 0xffffffffffffffff, 0xffffffffffffffff, r7, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x3, 0x1}]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) ioctl$PERF_EVENT_IOC_DISABLE(r8, 0x2401, 0x8) 0s ago: executing program 3 (id=4271): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x4, 0x10009, 0x4}], 0x10, 0xfffffff6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={0x0}, 0x10, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6f94f90224fc600e0005000a000200053582c137153e3704000b80fc0b09000300", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="d80000001800810804000000db44b904021d080010000000e8fe55a10a", 0x1d}], 0x1, 0x0, 0x0, 0x6000}, 0x6000800) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0xb, 0x2, 0x2}}, 0x80, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f7d28344b904020000", 0x2}], 0x1}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x6, [@float={0xa, 0x0, 0x0, 0x10, 0x10}, @var={0xa, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x5f, 0x2e, 0x30, 0x0]}}, &(0x7f0000000200)=""/101, 0x3a, 0x65, 0x1, 0xf, 0x10000}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000640)={r7, 0x20, &(0x7f0000000600)={&(0x7f00000002c0)=""/234, 0xea, 0x0, &(0x7f0000000500)=""/214, 0xd6}}, 0x10) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x33fe0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x100c, 0x7f, 0x0, 0x0, 0x200000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x9e4, 0x5, 0x8, 0x20005, 0xfffd, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x2000}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10}, @type_tag={0x1, 0x0, 0x0, 0x12, 0x1}]}, {0x0, [0x61]}}, 0x0, 0x4f}, 0x28) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="140000002d000b63d25a00648c2594f90424f3db", 0x14}], 0x1}, 0x4000800) kernel console output (not intermixed with test programs): 0 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 600.988526][T16850] RSP: 002b:00007f687c156028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 600.996943][T16850] RAX: ffffffffffffffda RBX: 00007f687b425fa0 RCX: 00007f687b19e199 [ 601.004932][T16850] RDX: 0000000000000003 RSI: 0000000000000084 RDI: 0000000000000006 [ 601.012900][T16850] RBP: 00007f687c156090 R08: 0000000000000010 R09: 0000000000000000 [ 601.020869][T16850] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 601.028838][T16850] R13: 00007f687b426038 R14: 00007f687b425fa0 R15: 00007ffea9884648 [ 601.036836][T16850] [ 601.271142][T16870] netlink: 'syz.3.3123': attribute type 33 has an invalid length. [ 601.279530][T16870] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3123'. [ 601.512010][T16874] netlink: 'syz.1.3125': attribute type 3 has an invalid length. [ 601.524266][T16874] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3125'. [ 601.676294][T16880] netlink: 'syz.0.3128': attribute type 3 has an invalid length. [ 601.708458][T16884] FAULT_INJECTION: forcing a failure. [ 601.708458][T16884] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 601.724512][T16884] CPU: 0 PID: 16884 Comm: syz.1.3130 Not tainted syzkaller #0 [ 601.732008][T16884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 601.742077][T16884] Call Trace: [ 601.745379][T16884] [ 601.748327][T16884] dump_stack_lvl+0x18c/0x250 [ 601.753043][T16884] ? show_regs_print_info+0x20/0x20 [ 601.758273][T16884] ? load_image+0x420/0x420 [ 601.762801][T16884] ? __lock_acquire+0x7eb0/0x7eb0 [ 601.767851][T16884] ? snprintf+0xe9/0x140 [ 601.772121][T16884] should_fail_ex+0x394/0x4c0 [ 601.776829][T16884] _copy_to_user+0x2f/0xa0 [ 601.781269][T16884] simple_read_from_buffer+0xe7/0x150 [ 601.786657][T16884] proc_fail_nth_read+0x1e8/0x260 [ 601.791700][T16884] ? proc_fault_inject_write+0x360/0x360 [ 601.797367][T16884] ? fsnotify_perm+0x271/0x5e0 [ 601.802158][T16884] ? proc_fault_inject_write+0x360/0x360 [ 601.807810][T16884] vfs_read+0x298/0x990 [ 601.811974][T16884] ? kernel_read+0x1e0/0x1e0 [ 601.816563][T16884] ? __fget_files+0x28/0x460 [ 601.821156][T16884] ? __fget_files+0x3fc/0x460 [ 601.825839][T16884] ? __fdget_pos+0x2a3/0x330 [ 601.830427][T16884] ? ksys_read+0x74/0x260 [ 601.834756][T16884] ksys_read+0x151/0x260 [ 601.838999][T16884] ? vfs_write+0x9a0/0x9a0 [ 601.843419][T16884] ? lockdep_hardirqs_on+0x98/0x150 [ 601.848615][T16884] do_syscall_64+0x55/0xb0 [ 601.853031][T16884] ? clear_bhb_loop+0x40/0x90 [ 601.857703][T16884] ? clear_bhb_loop+0x40/0x90 [ 601.862374][T16884] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 601.868269][T16884] RIP: 0033:0x7f09a855e9ce [ 601.872680][T16884] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 601.892283][T16884] RSP: 002b:00007f09a948dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 601.900709][T16884] RAX: ffffffffffffffda RBX: 00007f09a948e6c0 RCX: 00007f09a855e9ce [ 601.908675][T16884] RDX: 000000000000000f RSI: 00007f09a948e0a0 RDI: 0000000000000007 [ 601.916639][T16884] RBP: 00007f09a948e090 R08: 0000000000000000 R09: 0000000000000000 [ 601.924606][T16884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 601.932571][T16884] R13: 00007f09a8826038 R14: 00007f09a8825fa0 R15: 00007ffdf7c6ccc8 [ 601.940572][T16884] [ 602.266806][T16892] mac80211_hwsim hwsim48 wlan1: entered allmulticast mode [ 602.586571][T16910] validate_nla: 2 callbacks suppressed [ 602.586591][T16910] netlink: 'syz.1.3142': attribute type 2 has an invalid length. [ 602.617011][T16912] netlink: 'syz.2.3141': attribute type 3 has an invalid length. [ 602.646636][T16912] netlink: 'syz.2.3141': attribute type 1 has an invalid length. [ 602.654511][T16912] netlink: 'syz.2.3141': attribute type 6 has an invalid length. [ 602.666611][T16912] __nla_validate_parse: 1 callbacks suppressed [ 602.666624][T16912] netlink: 144448 bytes leftover after parsing attributes in process `syz.2.3141'. [ 603.009330][T16924] netlink: 'syz.1.3145': attribute type 39 has an invalid length. [ 605.757926][T16920] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3144'. [ 605.845075][T16941] netlink: 'syz.0.3148': attribute type 10 has an invalid length. [ 605.877656][T16941] veth0_vlan: left promiscuous mode [ 605.884511][T16941] veth0_vlan: entered promiscuous mode [ 605.908265][T16945] netlink: 208064 bytes leftover after parsing attributes in process `syz.2.3150'. [ 605.916048][T16941] team0: Device veth0_vlan failed to register rx_handler [ 605.929572][T16945] netlink: 'syz.2.3150': attribute type 1 has an invalid length. [ 606.126682][T16957] netlink: 'syz.2.3152': attribute type 21 has an invalid length. [ 606.194109][T16957] netlink: 'syz.2.3152': attribute type 30 has an invalid length. [ 606.362487][T16970] netlink: 'syz.1.3157': attribute type 10 has an invalid length. [ 607.216280][T16970] team0 (unregistering): Port device C removed [ 607.244344][T16970] team0 (unregistering): Port device team_slave_1 removed [ 607.443499][T16993] sctp: [Deprecated]: syz.0.3162 (pid 16993) Use of int in maxseg socket option. [ 607.443499][T16993] Use struct sctp_assoc_value instead [ 607.613526][T17003] netlink: 'syz.3.3167': attribute type 21 has an invalid length. [ 607.638968][T17003] netlink: 'syz.3.3167': attribute type 30 has an invalid length. [ 609.119423][T17067] netlink: 208064 bytes leftover after parsing attributes in process `syz.0.3185'. [ 609.313264][T17071] netlink: 'syz.3.3186': attribute type 3 has an invalid length. [ 609.348222][T17071] netlink: 'syz.3.3186': attribute type 1 has an invalid length. [ 609.371029][T17071] netlink: 'syz.3.3186': attribute type 6 has an invalid length. [ 609.390204][T17071] netlink: 144448 bytes leftover after parsing attributes in process `syz.3.3186'. [ 610.830187][T17082] netlink: 'syz.1.3190': attribute type 10 has an invalid length. [ 611.165932][T17093] netlink: 'syz.3.3194': attribute type 21 has an invalid length. [ 611.197659][T17093] netlink: 'syz.3.3194': attribute type 30 has an invalid length. [ 611.661434][T17100] netlink: 539 bytes leftover after parsing attributes in process `syz.2.3195'. [ 611.699113][T17098] netlink: 'syz.1.3196': attribute type 3 has an invalid length. [ 611.739047][T17098] netlink: 'syz.1.3196': attribute type 1 has an invalid length. [ 611.799627][T17098] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3196'. [ 612.122187][T17104] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3197'. [ 612.293571][T17107] FAULT_INJECTION: forcing a failure. [ 612.293571][T17107] name failslab, interval 1, probability 0, space 0, times 0 [ 612.327530][T17107] CPU: 0 PID: 17107 Comm: syz.2.3198 Not tainted syzkaller #0 [ 612.335067][T17107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 612.345152][T17107] Call Trace: [ 612.348447][T17107] [ 612.351392][T17107] dump_stack_lvl+0x18c/0x250 [ 612.356102][T17107] ? show_regs_print_info+0x20/0x20 [ 612.361319][T17107] ? load_image+0x420/0x420 [ 612.365846][T17107] ? __might_sleep+0xe0/0xe0 [ 612.370455][T17107] ? __lock_acquire+0x7eb0/0x7eb0 [ 612.375506][T17107] should_fail_ex+0x394/0x4c0 [ 612.380222][T17107] should_failslab+0x9/0x20 [ 612.384742][T17107] slab_pre_alloc_hook+0x59/0x300 [ 612.389801][T17107] kmem_cache_alloc+0x5a/0x2c0 [ 612.394579][T17107] ? __anon_vma_prepare+0x68/0x440 [ 612.399719][T17107] __anon_vma_prepare+0x68/0x440 [ 612.404683][T17107] ? __pte_alloc+0x113/0x2a0 [ 612.409303][T17107] handle_mm_fault+0x3ded/0x4a50 [ 612.414264][T17107] ? handle_mm_fault+0xe6/0x4a50 [ 612.419245][T17107] ? numa_migrate_prep+0x350/0x350 [ 612.424391][T17107] ? lock_chain_count+0x20/0x20 [ 612.429273][T17107] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 612.434582][T17107] do_user_addr_fault+0x736/0x12d0 [ 612.439747][T17107] exc_page_fault+0x64/0x100 [ 612.444365][T17107] asm_exc_page_fault+0x26/0x30 [ 612.449231][T17107] RIP: 0010:__put_user_4+0x11/0x20 [ 612.454359][T17107] Code: 01 ca c3 90 90 90 90 90 90 f3 0f 1e fa 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 90 90 90 90 90 90 90 f3 0f 1e fa 0f 01 cb [ 612.473976][T17107] RSP: 0018:ffffc90010517e80 EFLAGS: 00050202 [ 612.480063][T17107] RAX: 0000000000000004 RBX: 0000000000000000 RCX: 0000200000000380 [ 612.488049][T17107] RDX: 0000000000000000 RSI: ffffffff8acade60 RDI: ffffffff8b1d4020 [ 612.496032][T17107] RBP: 0000000000000004 R08: ffffffff8e8c626f R09: 1ffffffff1d18c4d [ 612.504014][T17107] R10: dffffc0000000000 R11: fffffbfff1d18c4e R12: 0000000000000800 [ 612.511995][T17107] R13: 0000200000000380 R14: 0000000000000024 R15: 0000000000000800 [ 612.520015][T17107] __sys_socketpair+0xb8/0x550 [ 612.524819][T17107] __x64_sys_socketpair+0x9b/0xb0 [ 612.529864][T17107] do_syscall_64+0x55/0xb0 [ 612.534299][T17107] ? clear_bhb_loop+0x40/0x90 [ 612.538991][T17107] ? clear_bhb_loop+0x40/0x90 [ 612.543696][T17107] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 612.549606][T17107] RIP: 0033:0x7f687b19e199 [ 612.554037][T17107] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 612.573663][T17107] RSP: 002b:00007f687c156028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 612.582184][T17107] RAX: ffffffffffffffda RBX: 00007f687b425fa0 RCX: 00007f687b19e199 [ 612.590178][T17107] RDX: 0000000000000774 RSI: 0000000000000800 RDI: 0000000000000024 [ 612.598160][T17107] RBP: 00007f687c156090 R08: 0000000000000000 R09: 0000000000000000 [ 612.606141][T17107] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000001 [ 612.614139][T17107] R13: 00007f687b426038 R14: 00007f687b425fa0 R15: 00007ffea9884648 [ 612.622163][T17107] [ 613.719737][T17122] netlink: 'syz.3.3205': attribute type 21 has an invalid length. [ 613.741939][T17122] netlink: 'syz.3.3205': attribute type 30 has an invalid length. [ 614.162115][T17137] FAULT_INJECTION: forcing a failure. [ 614.162115][T17137] name failslab, interval 1, probability 0, space 0, times 0 [ 614.205300][T17137] CPU: 1 PID: 17137 Comm: syz.3.3208 Not tainted syzkaller #0 [ 614.212811][T17137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 614.222879][T17137] Call Trace: [ 614.226169][T17137] [ 614.229113][T17137] dump_stack_lvl+0x18c/0x250 [ 614.233838][T17137] ? show_regs_print_info+0x20/0x20 [ 614.239065][T17137] ? load_image+0x420/0x420 [ 614.243592][T17137] ? __might_sleep+0xe0/0xe0 [ 614.248204][T17137] ? __lock_acquire+0x7eb0/0x7eb0 [ 614.253253][T17137] should_fail_ex+0x394/0x4c0 [ 614.257954][T17137] should_failslab+0x9/0x20 [ 614.262475][T17137] slab_pre_alloc_hook+0x59/0x300 [ 614.267528][T17137] kmem_cache_alloc+0x5a/0x2c0 [ 614.272315][T17137] ? __anon_vma_prepare+0xb6/0x440 [ 614.277449][T17137] __anon_vma_prepare+0xb6/0x440 [ 614.282403][T17137] ? __pte_alloc+0x113/0x2a0 [ 614.287019][T17137] handle_mm_fault+0x3ded/0x4a50 [ 614.291984][T17137] ? handle_mm_fault+0xe6/0x4a50 [ 614.296951][T17137] ? numa_migrate_prep+0x350/0x350 [ 614.302100][T17137] ? lock_chain_count+0x20/0x20 [ 614.306977][T17137] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 614.312281][T17137] do_user_addr_fault+0x736/0x12d0 [ 614.317436][T17137] exc_page_fault+0x64/0x100 [ 614.322061][T17137] asm_exc_page_fault+0x26/0x30 [ 614.326932][T17137] RIP: 0010:__put_user_4+0x11/0x20 [ 614.332065][T17137] Code: 01 ca c3 90 90 90 90 90 90 f3 0f 1e fa 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 90 90 90 90 90 90 90 f3 0f 1e fa 0f 01 cb [ 614.351688][T17137] RSP: 0018:ffffc900108b7e80 EFLAGS: 00050202 [ 614.357778][T17137] RAX: 0000000000000004 RBX: 0000000000000000 RCX: 0000200000000380 [ 614.365764][T17137] RDX: 0000000000000000 RSI: ffffffff8acade60 RDI: ffffffff8b1d4020 [ 614.373752][T17137] RBP: 0000000000000004 R08: ffffffff8e8c626f R09: 1ffffffff1d18c4d [ 614.381738][T17137] R10: dffffc0000000000 R11: fffffbfff1d18c4e R12: 0000000000000800 [ 614.389727][T17137] R13: 0000200000000380 R14: 0000000000000024 R15: 0000000000000800 [ 614.397737][T17137] __sys_socketpair+0xb8/0x550 [ 614.402536][T17137] __x64_sys_socketpair+0x9b/0xb0 [ 614.407584][T17137] do_syscall_64+0x55/0xb0 [ 614.412023][T17137] ? clear_bhb_loop+0x40/0x90 [ 614.416718][T17137] ? clear_bhb_loop+0x40/0x90 [ 614.421411][T17137] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 614.427330][T17137] RIP: 0033:0x7f5089d9e199 [ 614.431763][T17137] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 614.451391][T17137] RSP: 002b:00007f508ad0d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 614.459838][T17137] RAX: ffffffffffffffda RBX: 00007f508a025fa0 RCX: 00007f5089d9e199 [ 614.467828][T17137] RDX: 0000000000000774 RSI: 0000000000000800 RDI: 0000000000000024 [ 614.475817][T17137] RBP: 00007f508ad0d090 R08: 0000000000000000 R09: 0000000000000000 [ 614.483804][T17137] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000001 [ 614.491792][T17137] R13: 00007f508a026038 R14: 00007f508a025fa0 R15: 00007ffe8da99f28 [ 614.499800][T17137] [ 614.681690][T17133] : port 1(gretap0) entered blocking state [ 614.707974][T17133] : port 1(gretap0) entered disabled state [ 614.726831][T17133] gretap0: entered allmulticast mode [ 614.762793][T17133] gretap0: entered promiscuous mode [ 614.785942][T17132] netlink: 'syz.2.3207': attribute type 3 has an invalid length. [ 614.812906][T17132] netlink: 'syz.2.3207': attribute type 1 has an invalid length. [ 614.823257][T17132] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3207'. [ 614.867660][T17141] netlink: 'syz.3.3210': attribute type 12 has an invalid length. [ 614.876140][T17141] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3210'. [ 614.956938][T17143] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3210'. [ 615.131742][T17142] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3209'. [ 616.215934][T17165] FAULT_INJECTION: forcing a failure. [ 616.215934][T17165] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 616.230568][T17165] CPU: 1 PID: 17165 Comm: syz.0.3218 Not tainted syzkaller #0 [ 616.238060][T17165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 616.248138][T17165] Call Trace: [ 616.251438][T17165] [ 616.254365][T17165] dump_stack_lvl+0x18c/0x250 [ 616.259040][T17165] ? show_regs_print_info+0x20/0x20 [ 616.264232][T17165] ? load_image+0x420/0x420 [ 616.268727][T17165] ? __lock_acquire+0x7eb0/0x7eb0 [ 616.273742][T17165] ? perf_trace_lock_acquire+0x105/0x400 [ 616.279363][T17165] should_fail_ex+0x394/0x4c0 [ 616.284036][T17165] prepare_alloc_pages+0x1e1/0x5b0 [ 616.289161][T17165] __alloc_pages+0x134/0x460 [ 616.293773][T17165] ? zone_statistics+0x170/0x170 [ 616.298723][T17165] ? __lock_acquire+0x7eb0/0x7eb0 [ 616.303743][T17165] __folio_alloc+0x10/0x20 [ 616.308145][T17165] vma_alloc_folio+0x474/0x8f0 [ 616.312899][T17165] handle_mm_fault+0x1ab6/0x4a50 [ 616.317825][T17165] ? handle_mm_fault+0xe6/0x4a50 [ 616.322756][T17165] ? numa_migrate_prep+0x350/0x350 [ 616.327874][T17165] ? lock_chain_count+0x20/0x20 [ 616.332737][T17165] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 616.338027][T17165] do_user_addr_fault+0x736/0x12d0 [ 616.343177][T17165] exc_page_fault+0x64/0x100 [ 616.347780][T17165] asm_exc_page_fault+0x26/0x30 [ 616.352621][T17165] RIP: 0010:__put_user_4+0x11/0x20 [ 616.357737][T17165] Code: 01 ca c3 90 90 90 90 90 90 f3 0f 1e fa 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 90 90 90 90 90 90 90 f3 0f 1e fa 0f 01 cb [ 616.377346][T17165] RSP: 0018:ffffc9001146fe80 EFLAGS: 00050202 [ 616.383411][T17165] RAX: 0000000000000004 RBX: 0000000000000000 RCX: 0000200000000380 [ 616.391381][T17165] RDX: 0000000000000000 RSI: ffffffff8acade60 RDI: ffffffff8b1d4020 [ 616.399401][T17165] RBP: 0000000000000004 R08: ffffffff8e8c626f R09: 1ffffffff1d18c4d [ 616.407372][T17165] R10: dffffc0000000000 R11: fffffbfff1d18c4e R12: 0000000000000800 [ 616.415358][T17165] R13: 0000200000000380 R14: 0000000000000024 R15: 0000000000000800 [ 616.423347][T17165] __sys_socketpair+0xb8/0x550 [ 616.428108][T17165] __x64_sys_socketpair+0x9b/0xb0 [ 616.433123][T17165] do_syscall_64+0x55/0xb0 [ 616.437540][T17165] ? clear_bhb_loop+0x40/0x90 [ 616.442229][T17165] ? clear_bhb_loop+0x40/0x90 [ 616.446915][T17165] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 616.452801][T17165] RIP: 0033:0x7fa33119e199 [ 616.457202][T17165] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 616.476800][T17165] RSP: 002b:00007fa332082028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 616.485203][T17165] RAX: ffffffffffffffda RBX: 00007fa331425fa0 RCX: 00007fa33119e199 [ 616.493175][T17165] RDX: 0000000000000774 RSI: 0000000000000800 RDI: 0000000000000024 [ 616.501168][T17165] RBP: 00007fa332082090 R08: 0000000000000000 R09: 0000000000000000 [ 616.509130][T17165] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000001 [ 616.517089][T17165] R13: 00007fa331426038 R14: 00007fa331425fa0 R15: 00007ffce5e6d5e8 [ 616.525059][T17165] [ 616.593766][T17166] netlink: 'syz.1.3217': attribute type 2 has an invalid length. [ 616.609162][T17166] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3217'. [ 616.718582][T17168] netlink: 'syz.0.3220': attribute type 3 has an invalid length. [ 616.726573][T17168] netlink: 'syz.0.3220': attribute type 1 has an invalid length. [ 616.767551][T17168] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3220'. [ 617.043835][T17175] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3223'. [ 617.659563][T17179] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3224'. [ 617.670630][T17179] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3224'. [ 617.980065][T17195] FAULT_INJECTION: forcing a failure. [ 617.980065][T17195] name failslab, interval 1, probability 0, space 0, times 0 [ 618.057710][T17195] CPU: 1 PID: 17195 Comm: syz.1.3228 Not tainted syzkaller #0 [ 618.065226][T17195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 618.075290][T17195] Call Trace: [ 618.078567][T17195] [ 618.081492][T17195] dump_stack_lvl+0x18c/0x250 [ 618.086176][T17195] ? show_regs_print_info+0x20/0x20 [ 618.091389][T17195] ? load_image+0x420/0x420 [ 618.095891][T17195] ? __might_sleep+0xe0/0xe0 [ 618.100479][T17195] ? __lock_acquire+0x7eb0/0x7eb0 [ 618.105498][T17195] ? __might_sleep+0xe0/0xe0 [ 618.110088][T17195] should_fail_ex+0x394/0x4c0 [ 618.114771][T17195] should_failslab+0x9/0x20 [ 618.119278][T17195] slab_pre_alloc_hook+0x59/0x300 [ 618.124312][T17195] kmem_cache_alloc_lru+0x4d/0x2b0 [ 618.129424][T17195] ? sock_alloc_inode+0x28/0xc0 [ 618.134281][T17195] sock_alloc_inode+0x28/0xc0 [ 618.138958][T17195] ? sockfs_init_fs_context+0xb0/0xb0 [ 618.144327][T17195] new_inode_pseudo+0x63/0x1d0 [ 618.149088][T17195] __sock_create+0x12d/0x940 [ 618.153676][T17195] ? __might_fault+0xaa/0x120 [ 618.158350][T17195] ? __might_fault+0xc6/0x120 [ 618.163024][T17195] __sys_socketpair+0x1c1/0x550 [ 618.167875][T17195] __x64_sys_socketpair+0x9b/0xb0 [ 618.172899][T17195] do_syscall_64+0x55/0xb0 [ 618.177320][T17195] ? clear_bhb_loop+0x40/0x90 [ 618.181990][T17195] ? clear_bhb_loop+0x40/0x90 [ 618.186666][T17195] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 618.192560][T17195] RIP: 0033:0x7f09a859e199 [ 618.196970][T17195] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 618.216570][T17195] RSP: 002b:00007f09a948e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 618.224981][T17195] RAX: ffffffffffffffda RBX: 00007f09a8825fa0 RCX: 00007f09a859e199 [ 618.232947][T17195] RDX: 0000000000000774 RSI: 0000000000000800 RDI: 0000000000000024 [ 618.240913][T17195] RBP: 00007f09a948e090 R08: 0000000000000000 R09: 0000000000000000 [ 618.248885][T17195] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000001 [ 618.256854][T17195] R13: 00007f09a8826038 R14: 00007f09a8825fa0 R15: 00007ffdf7c6ccc8 [ 618.264834][T17195] [ 618.597447][T17195] socket: no more sockets [ 618.883169][T17214] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3234'. [ 618.974009][T17212] netlink: 'syz.1.3233': attribute type 2 has an invalid length. [ 619.746576][T17236] FAULT_INJECTION: forcing a failure. [ 619.746576][T17236] name failslab, interval 1, probability 0, space 0, times 0 [ 619.781043][T17236] CPU: 0 PID: 17236 Comm: syz.2.3241 Not tainted syzkaller #0 [ 619.788551][T17236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 619.798620][T17236] Call Trace: [ 619.801912][T17236] [ 619.804855][T17236] dump_stack_lvl+0x18c/0x250 [ 619.809569][T17236] ? show_regs_print_info+0x20/0x20 [ 619.814799][T17236] ? load_image+0x420/0x420 [ 619.819330][T17236] ? __might_sleep+0xe0/0xe0 [ 619.823952][T17236] ? __lock_acquire+0x7eb0/0x7eb0 [ 619.829007][T17236] should_fail_ex+0x394/0x4c0 [ 619.833722][T17236] should_failslab+0x9/0x20 [ 619.838254][T17236] slab_pre_alloc_hook+0x59/0x300 [ 619.843311][T17236] ? lockdep_softirqs_off+0x440/0x440 [ 619.848710][T17236] kmem_cache_alloc+0x5a/0x2c0 [ 619.853530][T17236] ? security_inode_alloc+0x34/0x110 [ 619.858849][T17236] security_inode_alloc+0x34/0x110 [ 619.863988][T17236] inode_init_always+0x914/0xc90 [ 619.868946][T17236] new_inode_pseudo+0x95/0x1d0 [ 619.873717][T17236] __sock_create+0x12d/0x940 [ 619.878308][T17236] ? __might_fault+0xaa/0x120 [ 619.882980][T17236] ? __might_fault+0xc6/0x120 [ 619.887655][T17236] __sys_socketpair+0x1c1/0x550 [ 619.892511][T17236] __x64_sys_socketpair+0x9b/0xb0 [ 619.897536][T17236] do_syscall_64+0x55/0xb0 [ 619.901950][T17236] ? clear_bhb_loop+0x40/0x90 [ 619.906620][T17236] ? clear_bhb_loop+0x40/0x90 [ 619.911294][T17236] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 619.917195][T17236] RIP: 0033:0x7f687b19e199 [ 619.921609][T17236] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 619.941212][T17236] RSP: 002b:00007f687c156028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 619.949625][T17236] RAX: ffffffffffffffda RBX: 00007f687b425fa0 RCX: 00007f687b19e199 [ 619.957599][T17236] RDX: 0000000000000774 RSI: 0000000000000800 RDI: 0000000000000024 [ 619.965563][T17236] RBP: 00007f687c156090 R08: 0000000000000000 R09: 0000000000000000 [ 619.973527][T17236] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000002 [ 619.981493][T17236] R13: 00007f687b426038 R14: 00007f687b425fa0 R15: 00007ffea9884648 [ 619.989472][T17236] [ 620.053295][T17236] socket: no more sockets [ 621.049838][T17257] netlink: 'syz.3.3249': attribute type 21 has an invalid length. [ 621.079385][T17257] netlink: 'syz.3.3249': attribute type 30 has an invalid length. [ 621.134010][T17263] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 621.148906][T17263] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 621.177732][T17263] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 621.200364][T17263] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 621.369473][T16472] Bluetooth: hci2: command 0x0406 tx timeout [ 621.521217][T17270] __nla_validate_parse: 2 callbacks suppressed [ 621.521256][T17270] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3252'. [ 621.734615][T17268] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3248'. [ 623.010452][T17297] netlink: 'syz.1.3260': attribute type 21 has an invalid length. [ 623.057642][T17297] netlink: 'syz.1.3260': attribute type 30 has an invalid length. [ 623.892068][T17312] netlink: 'syz.1.3266': attribute type 10 has an invalid length. [ 624.318863][T17319] netlink: 180 bytes leftover after parsing attributes in process `syz.0.3267'. [ 624.412741][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.424675][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.547482][T17324] netlink: 'syz.0.3270': attribute type 21 has an invalid length. [ 624.556814][T17324] netlink: 'syz.0.3270': attribute type 30 has an invalid length. [ 624.849231][T17314] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3265'. [ 624.949750][T17332] netlink: 'syz.1.3273': attribute type 7 has an invalid length. [ 625.181752][T17335] delete_channel: no stack [ 625.480080][T17336] tap0: tun_chr_ioctl cmd 2148553947 [ 625.575452][T17354] netlink: 'syz.0.3277': attribute type 21 has an invalid length. [ 625.587559][T17354] IPv6: NLM_F_CREATE should be specified when creating new route [ 625.636257][T17354] IPv6: Can't replace route, no match found [ 625.858682][T17367] netlink: 'syz.2.3281': attribute type 10 has an invalid length. [ 625.976442][T17368] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3282'. [ 626.038718][T17367] team0: Device gre0 is of different type [ 626.668756][T17375] syzkaller0: entered promiscuous mode [ 626.684912][T17375] syzkaller0: entered allmulticast mode [ 626.899934][T17386] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3286'. [ 627.041672][T17358] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3278'. [ 627.134789][T17358] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 627.654387][T17397] netlink: 'syz.1.3289': attribute type 3 has an invalid length. [ 627.684989][T17397] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3289'. [ 630.457152][T17394] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3289'. [ 630.467066][T17394] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 630.771665][T17432] netlink: 'syz.1.3296': attribute type 33 has an invalid length. [ 630.783236][T17432] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3296'. [ 630.950523][T17437] netlink: 'syz.1.3298': attribute type 21 has an invalid length. [ 630.967975][T17437] netlink: 'syz.1.3298': attribute type 30 has an invalid length. [ 631.121326][T17439] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3297'. [ 631.560238][T17447] netlink: 'syz.2.3302': attribute type 1 has an invalid length. [ 631.578154][T17447] netlink: 14975 bytes leftover after parsing attributes in process `syz.2.3302'. [ 631.618434][ T5784] Bluetooth: hci1: command 0x0406 tx timeout [ 631.958173][T17469] netlink: 'syz.2.3308': attribute type 21 has an invalid length. [ 631.968767][T17469] netlink: 'syz.2.3308': attribute type 30 has an invalid length. [ 632.235760][T17484] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3310'. [ 632.336974][T17486] netlink: 'syz.2.3312': attribute type 29 has an invalid length. [ 632.365407][T17486] netlink: 'syz.2.3312': attribute type 29 has an invalid length. [ 632.385121][T17489] netlink: 'syz.2.3312': attribute type 29 has an invalid length. [ 632.405923][T17486] netlink: 'syz.2.3312': attribute type 29 has an invalid length. [ 632.437897][T17488] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.3313'. [ 632.440118][T17486] veth0_vlan: entered allmulticast mode [ 632.483267][T17486] veth0_vlan: left promiscuous mode [ 632.505083][T17486] veth0_vlan: entered promiscuous mode [ 632.515614][T17486] team0: Device veth0_vlan failed to register rx_handler [ 632.680714][T17497] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3316'. [ 633.477698][T17517] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3323'. [ 636.247094][T17524] validate_nla: 7 callbacks suppressed [ 636.247110][T17524] netlink: 'syz.1.3327': attribute type 1 has an invalid length. [ 636.261369][T17524] netlink: 154788 bytes leftover after parsing attributes in process `syz.1.3327'. [ 636.281003][T17522] netlink: 'syz.2.3326': attribute type 3 has an invalid length. [ 636.297891][T17522] netlink: 'syz.2.3326': attribute type 1 has an invalid length. [ 636.305790][T17522] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3326'. [ 636.450594][T17534] netlink: 'syz.2.3331': attribute type 21 has an invalid length. [ 636.462730][T17534] netlink: 'syz.2.3331': attribute type 30 has an invalid length. [ 636.516977][T17536] netlink: 'syz.3.3332': attribute type 10 has an invalid length. [ 636.533105][T17536] team0: Device vxcan1 is of different type [ 636.960386][T17557] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3339'. [ 636.990149][T17558] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3336'. [ 637.003631][T17557] netlink: 'syz.1.3339': attribute type 1 has an invalid length. [ 637.016074][T17557] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.3339'. [ 637.134194][T17560] netlink: 'syz.2.3340': attribute type 3 has an invalid length. [ 637.164418][T17560] netlink: 'syz.2.3340': attribute type 1 has an invalid length. [ 637.174182][T17560] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3340'. [ 637.282717][T17568] netlink: 'syz.1.3342': attribute type 21 has an invalid length. [ 638.739525][T17595] bridge0: port 1(bridge_slave_0) entered forwarding state [ 638.766096][T17595] pim6reg1: entered promiscuous mode [ 638.771593][T17595] pim6reg1: entered allmulticast mode [ 639.071987][T17604] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3353'. [ 639.112676][T17605] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3352'. [ 639.483917][T17613] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3357'. [ 639.521044][T17609] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3355'. [ 639.848358][T17620] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3360'. [ 639.950380][T17629] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3362'. [ 640.230654][T17640] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3366'. [ 640.400216][T17645] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3368'. [ 640.488192][T17643] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3367'. [ 640.788306][T17648] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.3369'. [ 641.597067][T17678] validate_nla: 14 callbacks suppressed [ 641.597138][T17678] netlink: 'syz.3.3381': attribute type 21 has an invalid length. [ 641.621938][T17678] netlink: 'syz.3.3381': attribute type 30 has an invalid length. [ 641.692359][T16472] Bluetooth: hci2: unexpected event 0x0f length: 151 > 4 [ 641.692417][T16472] Bluetooth: hci2: unexpected event for opcode 0x0000 [ 641.934615][T17688] netlink: 'syz.1.3386': attribute type 39 has an invalid length. [ 642.493131][ T5784] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 642.502915][ T5784] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 642.510890][ T5784] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 642.519140][ T5784] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 642.526718][ T5784] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 642.534332][ T5784] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 642.857708][T17706] chnl_net:caif_netlink_parms(): no params data found [ 642.963043][T17706] bridge0: port 1(bridge_slave_0) entered blocking state [ 642.970603][T17706] bridge0: port 1(bridge_slave_0) entered disabled state [ 642.977873][T17706] bridge_slave_0: entered allmulticast mode [ 642.985312][T17706] bridge_slave_0: entered promiscuous mode [ 643.001202][T17706] bridge0: port 2(bridge_slave_1) entered blocking state [ 643.008542][T17706] bridge0: port 2(bridge_slave_1) entered disabled state [ 643.015725][T17706] bridge_slave_1: entered allmulticast mode [ 643.023170][T17706] bridge_slave_1: entered promiscuous mode [ 643.062393][T17706] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 643.074863][T17706] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 643.111425][T17706] team0: Port device team_slave_0 added [ 643.146143][T17706] team0: Port device team_slave_1 added [ 643.177948][T17721] netlink: 'syz.2.3394': attribute type 21 has an invalid length. [ 643.186048][T17721] netlink: 'syz.2.3394': attribute type 30 has an invalid length. [ 643.207042][T17706] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 643.222828][T17706] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 643.257410][T17706] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 643.273434][T17706] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 643.280667][T17706] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 643.307182][T17706] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 643.428948][T17732] netlink: 'syz.2.3399': attribute type 29 has an invalid length. [ 643.431624][T17706] hsr_slave_0: entered promiscuous mode [ 643.475428][T17706] hsr_slave_1: entered promiscuous mode [ 643.501468][T17732] netlink: 'syz.2.3399': attribute type 29 has an invalid length. [ 643.627741][T17732] netlink: 'syz.2.3399': attribute type 29 has an invalid length. [ 643.940008][T17706] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 643.962368][T17706] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 643.994635][T17706] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 644.014799][T17706] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 644.166095][T17706] 8021q: adding VLAN 0 to HW filter on device bond0 [ 644.230953][T17706] 8021q: adding VLAN 0 to HW filter on device team0 [ 644.243832][ T7047] bridge0: port 1(bridge_slave_0) entered blocking state [ 644.250933][ T7047] bridge0: port 1(bridge_slave_0) entered forwarding state [ 644.312829][ T7752] bridge0: port 2(bridge_slave_1) entered blocking state [ 644.319991][ T7752] bridge0: port 2(bridge_slave_1) entered forwarding state [ 644.567419][ T5784] Bluetooth: hci3: command tx timeout [ 644.914633][T17766] __nla_validate_parse: 7 callbacks suppressed [ 644.914650][T17766] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.3403'. [ 645.031391][T17706] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 645.152687][T17773] netlink: 'syz.3.3406': attribute type 21 has an invalid length. [ 645.169815][T17773] netlink: 'syz.3.3406': attribute type 30 has an invalid length. [ 645.269997][T17777] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3407'. [ 645.445303][ T5784] Bluetooth: hci1: unexpected event 0x0f length: 151 > 4 [ 645.445345][ T5784] Bluetooth: hci1: unexpected event for opcode 0x0000 [ 645.537020][T17706] veth0_vlan: entered promiscuous mode [ 645.599869][T17706] veth1_vlan: entered promiscuous mode [ 645.655247][T17706] veth0_macvtap: entered promiscuous mode [ 645.678246][T17706] veth1_macvtap: entered promiscuous mode [ 645.690327][T17788] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3411'. [ 645.711600][T17706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 645.729626][T17706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 645.741159][T17706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 645.767554][T17706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 645.787726][T17706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 645.806952][T17793] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3409'. [ 645.817525][T17706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 645.849473][T17706] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 645.895777][T17706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 645.918675][T17706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 645.945704][T17706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 645.969643][T17795] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.3412'. [ 645.974207][T17706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 645.997341][T17706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 646.017328][T17706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.039133][T17706] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 646.052051][T17706] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.070912][T17706] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.080659][T17706] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.098906][T17706] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.265393][ T7752] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 646.297928][ T7752] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 646.336936][ T7752] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 646.357849][ T7752] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 646.456691][T17805] FAULT_INJECTION: forcing a failure. [ 646.456691][T17805] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 646.507777][T17805] CPU: 1 PID: 17805 Comm: syz.3.3417 Not tainted syzkaller #0 [ 646.515298][T17805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 646.525383][T17805] Call Trace: [ 646.528688][T17805] [ 646.531640][T17805] dump_stack_lvl+0x18c/0x250 [ 646.536367][T17805] ? show_regs_print_info+0x20/0x20 [ 646.541606][T17805] ? load_image+0x420/0x420 [ 646.546155][T17805] ? __might_fault+0xaa/0x120 [ 646.550866][T17805] ? __lock_acquire+0x7eb0/0x7eb0 [ 646.555915][T17805] should_fail_ex+0x394/0x4c0 [ 646.560626][T17805] _copy_from_user+0x2f/0xe0 [ 646.565238][T17805] sk_setsockopt+0x2b9/0x2b20 [ 646.569938][T17805] ? sockopt_capable+0x60/0x60 [ 646.574722][T17805] ? aa_sk_perm+0x83c/0x970 [ 646.579235][T17805] ? __fget_files+0x28/0x460 [ 646.583844][T17805] ? aa_af_perm+0x330/0x330 [ 646.588363][T17805] ? __fget_files+0x28/0x460 [ 646.592963][T17805] ? aa_sock_opt_perm+0x74/0x100 [ 646.597911][T17805] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 646.603468][T17805] ? security_socket_setsockopt+0x7e/0xa0 [ 646.609200][T17805] do_sock_setsockopt+0x11b/0x1a0 [ 646.614266][T17805] __x64_sys_setsockopt+0x182/0x200 [ 646.619490][T17805] do_syscall_64+0x55/0xb0 [ 646.623914][T17805] ? clear_bhb_loop+0x40/0x90 [ 646.628592][T17805] ? clear_bhb_loop+0x40/0x90 [ 646.633278][T17805] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 646.639182][T17805] RIP: 0033:0x7f5089d9e199 [ 646.643607][T17805] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 646.663221][T17805] RSP: 002b:00007f508ad0d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 646.671645][T17805] RAX: ffffffffffffffda RBX: 00007f508a025fa0 RCX: 00007f5089d9e199 [ 646.679620][T17805] RDX: 0000000000000007 RSI: 0000000000000001 RDI: 0000000000000004 [ 646.687595][T17805] RBP: 00007f508ad0d090 R08: 0000000000000004 R09: 0000000000000000 [ 646.695569][T17805] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 646.703543][T17805] R13: 00007f508a026038 R14: 00007f508a025fa0 R15: 00007ffe8da99f28 [ 646.711543][T17805] [ 646.725202][ T5784] Bluetooth: hci3: command tx timeout [ 647.124237][T17819] validate_nla: 3 callbacks suppressed [ 647.124271][T17819] netlink: 'syz.1.3421': attribute type 10 has an invalid length. [ 647.291182][T17832] netlink: 'syz.2.3424': attribute type 7 has an invalid length. [ 647.586927][T17843] netlink: 'syz.1.3427': attribute type 21 has an invalid length. [ 647.618084][T17843] netlink: 'syz.1.3427': attribute type 30 has an invalid length. [ 647.816179][T17855] FAULT_INJECTION: forcing a failure. [ 647.816179][T17855] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 647.839624][T17855] CPU: 1 PID: 17855 Comm: syz.4.3429 Not tainted syzkaller #0 [ 647.847154][T17855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 647.857243][T17855] Call Trace: [ 647.860554][T17855] [ 647.863516][T17855] dump_stack_lvl+0x18c/0x250 [ 647.868247][T17855] ? show_regs_print_info+0x20/0x20 [ 647.873497][T17855] ? load_image+0x420/0x420 [ 647.878044][T17855] ? __lock_acquire+0x7eb0/0x7eb0 [ 647.883099][T17855] ? snprintf+0xe9/0x140 [ 647.887370][T17855] should_fail_ex+0x394/0x4c0 [ 647.892078][T17855] _copy_to_user+0x2f/0xa0 [ 647.896506][T17855] simple_read_from_buffer+0xe7/0x150 [ 647.901904][T17855] proc_fail_nth_read+0x1e8/0x260 [ 647.906955][T17855] ? proc_fault_inject_write+0x360/0x360 [ 647.912615][T17855] ? fsnotify_perm+0x271/0x5e0 [ 647.917394][T17855] ? proc_fault_inject_write+0x360/0x360 [ 647.923044][T17855] vfs_read+0x298/0x990 [ 647.927226][T17855] ? kernel_read+0x1e0/0x1e0 [ 647.931830][T17855] ? __fget_files+0x28/0x460 [ 647.936439][T17855] ? __fget_files+0x3fc/0x460 [ 647.941151][T17855] ? __fdget_pos+0x2a3/0x330 [ 647.945750][T17855] ? ksys_read+0x74/0x260 [ 647.950101][T17855] ksys_read+0x151/0x260 [ 647.954368][T17855] ? vfs_write+0x9a0/0x9a0 [ 647.958800][T17855] ? lockdep_hardirqs_on+0x98/0x150 [ 647.964010][T17855] do_syscall_64+0x55/0xb0 [ 647.968437][T17855] ? clear_bhb_loop+0x40/0x90 [ 647.973116][T17855] ? clear_bhb_loop+0x40/0x90 [ 647.977816][T17855] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 647.983724][T17855] RIP: 0033:0x7f3dd595e9ce [ 647.988149][T17855] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 648.007759][T17855] RSP: 002b:00007f3dd68dffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 648.016182][T17855] RAX: ffffffffffffffda RBX: 00007f3dd68e06c0 RCX: 00007f3dd595e9ce [ 648.024156][T17855] RDX: 000000000000000f RSI: 00007f3dd68e00a0 RDI: 0000000000000005 [ 648.032130][T17855] RBP: 00007f3dd68e0090 R08: 0000000000000000 R09: 0000000000000000 [ 648.040105][T17855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 648.048078][T17855] R13: 00007f3dd5c26038 R14: 00007f3dd5c25fa0 R15: 00007ffdaa6615d8 [ 648.056078][T17855] [ 648.358580][T17870] sctp: [Deprecated]: syz.1.3434 (pid 17870) Use of struct sctp_assoc_value in delayed_ack socket option. [ 648.358580][T17870] Use struct sctp_sack_info instead [ 648.410394][T17865] netlink: 'syz.4.3432': attribute type 2 has an invalid length. [ 648.430668][T17865] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3432'. [ 648.554702][T17872] netlink: 'syz.3.3433': attribute type 3 has an invalid length. [ 648.565568][T17872] netlink: 'syz.3.3433': attribute type 1 has an invalid length. [ 648.577535][T17872] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3433'. [ 648.588817][T17876] netlink: 'syz.1.3436': attribute type 1 has an invalid length. [ 648.807632][ T5784] Bluetooth: hci3: command tx timeout [ 649.016747][T17887] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3440'. [ 649.350651][T17896] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3444'. [ 649.400162][T17896] team0: Port device team_slave_0 removed [ 649.408609][T17896] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 649.944320][T17907] netlink: 'syz.2.3446': attribute type 3 has an invalid length. [ 649.964305][T17907] netlink: 'syz.2.3446': attribute type 1 has an invalid length. [ 649.984605][T17907] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3446'. [ 650.336650][T17920] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.3450'. [ 650.888025][ T5784] Bluetooth: hci3: command tx timeout [ 651.505187][T17932] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3456'. [ 651.819838][T17946] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3460'. [ 651.869592][T17942] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3458'. [ 652.150298][T17959] validate_nla: 5 callbacks suppressed [ 652.150313][T17959] netlink: 'syz.4.3463': attribute type 10 has an invalid length. [ 652.190621][T17959] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.3463'. [ 652.283300][T17966] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3466'. [ 652.292783][T17966] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 652.333298][T17968] netlink: 'syz.1.3467': attribute type 3 has an invalid length. [ 652.344155][T17968] netlink: 'syz.1.3467': attribute type 1 has an invalid length. [ 652.352962][T17968] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3467'. [ 652.471257][T17970] netlink: 'syz.1.3468': attribute type 21 has an invalid length. [ 652.536663][T17970] netlink: 'syz.1.3468': attribute type 30 has an invalid length. [ 652.695433][T17973] bond0: entered promiscuous mode [ 652.700777][T17973] bond_slave_0: entered promiscuous mode [ 652.706560][T17973] bond_slave_1: entered promiscuous mode [ 652.713292][T17973] bond0: entered allmulticast mode [ 652.720160][T17973] bond_slave_0: entered allmulticast mode [ 652.725975][T17973] bond_slave_1: entered allmulticast mode [ 653.065864][T17983] netlink: 'syz.4.3472': attribute type 2 has an invalid length. [ 653.096890][T17980] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3472'. [ 653.306261][T17986] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3474'. [ 653.654591][T17996] netlink: 'syz.3.3478': attribute type 10 has an invalid length. [ 653.806018][T17996] team0 (unregistering): Port device team_slave_1 removed [ 653.825325][T18005] netlink: 'syz.2.3480': attribute type 3 has an invalid length. [ 654.482277][T18027] netlink: 'syz.2.3489': attribute type 2 has an invalid length. [ 654.606830][T18032] netlink: 'syz.1.3490': attribute type 21 has an invalid length. [ 655.043451][T18042] __nla_validate_parse: 4 callbacks suppressed [ 655.043483][T18042] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3494'. [ 655.194876][T18042] hsr_slave_0: left promiscuous mode [ 655.227171][T18046] netlink: 202920 bytes leftover after parsing attributes in process `syz.3.3496'. [ 655.323967][T18042] hsr_slave_1: left promiscuous mode [ 655.383714][T18049] netlink: 10 bytes leftover after parsing attributes in process `syz.1.3494'. [ 655.400164][T18055] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3498'. [ 655.568628][T18065] netlink: 2087 bytes leftover after parsing attributes in process `syz.2.3500'. [ 659.031581][T18108] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.3511'. [ 659.083906][T18097] validate_nla: 5 callbacks suppressed [ 659.083920][T18097] netlink: 'syz.2.3508': attribute type 2 has an invalid length. [ 659.136805][T18097] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3508'. [ 659.954714][T18124] netlink: 'syz.4.3516': attribute type 7 has an invalid length. [ 660.491820][T18137] netlink: 15743 bytes leftover after parsing attributes in process `syz.1.3519'. [ 660.707103][T18139] netlink: 'syz.3.3520': attribute type 3 has an invalid length. [ 660.717022][T18139] netlink: 'syz.3.3520': attribute type 1 has an invalid length. [ 660.742314][T18139] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3520'. [ 660.765851][T18144] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3522'. [ 660.796246][T18146] netlink: 'syz.4.3521': attribute type 2 has an invalid length. [ 660.815581][T18141] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3521'. [ 660.927136][T18152] netlink: 'syz.4.3525': attribute type 9 has an invalid length. [ 660.941041][T18152] netlink: 155304 bytes leftover after parsing attributes in process `syz.4.3525'. [ 660.996379][T18153] sit0: entered promiscuous mode [ 661.014620][T18153] sit0: entered allmulticast mode [ 661.175611][T18163] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.183307][T18163] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.216765][T18163] bridge0: entered promiscuous mode [ 662.638254][T18174] netlink: 'syz.2.3530': attribute type 7 has an invalid length. [ 662.646326][T18180] netlink: 'syz.3.3531': attribute type 3 has an invalid length. [ 662.676326][T18180] netlink: 'syz.3.3531': attribute type 1 has an invalid length. [ 662.716926][T18180] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3531'. [ 662.856743][T18192] netlink: 'syz.1.3535': attribute type 39 has an invalid length. [ 662.875478][T18192] macvlan0: entered promiscuous mode [ 662.890994][T18192] macvlan0: entered allmulticast mode [ 662.917893][T18192] veth1_vlan: entered allmulticast mode [ 662.964410][T18187] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3534'. [ 664.439801][T18235] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.3548'. [ 664.449422][T18237] validate_nla: 1 callbacks suppressed [ 664.449435][T18237] netlink: 'syz.2.3547': attribute type 2 has an invalid length. [ 664.496205][T18232] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3547'. [ 664.818339][T18236] netlink: 'syz.1.3546': attribute type 7 has an invalid length. [ 664.902896][T18248] netlink: 'syz.2.3552': attribute type 21 has an invalid length. [ 664.925729][T18248] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3552'. [ 665.274183][T18260] netlink: 'syz.4.3555': attribute type 10 has an invalid length. [ 665.367571][T18260] macvlan0: entered promiscuous mode [ 665.425867][T18260] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 665.434860][ T5784] Bluetooth: hci1: unexpected event for opcode 0x0030 [ 665.463696][T18265] netlink: 'syz.1.3557': attribute type 3 has an invalid length. [ 665.473803][T18265] netlink: 'syz.1.3557': attribute type 1 has an invalid length. [ 665.499904][T18265] __nla_validate_parse: 1 callbacks suppressed [ 665.499948][T18265] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3557'. [ 665.737468][T18286] netlink: 'syz.3.3560': attribute type 2 has an invalid length. [ 665.872984][T18278] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3560'. [ 665.900701][T18288] netlink: 40227 bytes leftover after parsing attributes in process `syz.1.3563'. [ 666.126798][T18292] netlink: 'syz.1.3565': attribute type 3 has an invalid length. [ 666.821827][T18304] netlink: 'syz.3.3566': attribute type 7 has an invalid length. [ 666.925254][T18311] netlink: 'syz.1.3568': attribute type 3 has an invalid length. [ 666.972018][T18311] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3568'. [ 667.002483][T18314] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3570'. [ 667.663386][T18333] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3573'. [ 667.840265][T18338] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3576'. [ 668.216967][T18350] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3581'. [ 668.248910][T18348] bridge0: left promiscuous mode [ 668.254468][T18348] bridge0: entered allmulticast mode [ 668.316380][T18355] bridge_slave_1: left allmulticast mode [ 668.337349][T18355] bridge_slave_1: left promiscuous mode [ 668.349077][T18355] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.419473][T18355] bridge_slave_0: left allmulticast mode [ 668.441932][T18355] bridge_slave_0: left promiscuous mode [ 668.467814][T18355] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.889910][T18368] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3587'. [ 669.027496][T18379] netlink: 192 bytes leftover after parsing attributes in process `syz.4.3586'. [ 669.720393][T18397] validate_nla: 10 callbacks suppressed [ 669.720438][T18397] netlink: 'syz.3.3594': attribute type 17 has an invalid length. [ 669.778113][T18397] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 669.801472][T18402] netlink: 'syz.1.3595': attribute type 21 has an invalid length. [ 669.822798][T18402] netlink: 'syz.1.3595': attribute type 30 has an invalid length. [ 669.943255][T18401] netlink: 'syz.2.3596': attribute type 2 has an invalid length. [ 669.951943][T18401] netlink: 'syz.2.3596': attribute type 8 has an invalid length. [ 670.117209][T18412] netlink: 'syz.4.3597': attribute type 2 has an invalid length. [ 670.458653][T18422] tc_dump_action: action bad kind [ 670.876510][T18435] __nla_validate_parse: 9 callbacks suppressed [ 670.876543][T18435] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3606'. [ 670.945748][T18439] netlink: 'syz.4.3607': attribute type 21 has an invalid length. [ 670.969115][T18439] netlink: 'syz.4.3607': attribute type 30 has an invalid length. [ 671.128422][T18442] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3608'. [ 671.279317][T18449] netlink: 'syz.4.3611': attribute type 3 has an invalid length. [ 671.298246][T18449] netlink: 'syz.4.3611': attribute type 1 has an invalid length. [ 671.306143][T18449] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3611'. [ 671.333093][T18445] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3610'. [ 671.628504][T18457] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3622'. [ 671.777909][T18464] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3615'. [ 671.842279][T18468] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3617'. [ 671.989689][T18470] netlink: 212912 bytes leftover after parsing attributes in process `syz.2.3618'. [ 672.026913][T18470] openvswitch: netlink: IP tunnel dst address not specified [ 672.360108][T18482] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3623'. [ 672.882129][T18488] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3625'. [ 674.947813][T18540] validate_nla: 10 callbacks suppressed [ 674.947848][T18540] netlink: 'syz.2.3644': attribute type 39 has an invalid length. [ 675.168697][T18547] netlink: 'syz.1.3645': attribute type 3 has an invalid length. [ 675.189592][T18547] netlink: 'syz.1.3645': attribute type 1 has an invalid length. [ 675.334622][T18555] netlink: 'syz.3.3646': attribute type 2 has an invalid length. [ 675.453909][T18557] netlink: 'syz.1.3647': attribute type 21 has an invalid length. [ 675.487549][T18557] IPv6: NLM_F_CREATE should be specified when creating new route [ 675.495436][T18557] IPv6: Can't replace route, no match found [ 675.555527][T18560] tun0: tun_chr_ioctl cmd 1074025681 [ 675.613865][T18565] FAULT_INJECTION: forcing a failure. [ 675.613865][T18565] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 675.635772][T18566] netlink: 'syz.4.3650': attribute type 21 has an invalid length. [ 675.639677][T18565] CPU: 1 PID: 18565 Comm: syz.1.3651 Not tainted syzkaller #0 [ 675.651143][T18565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 675.661211][T18565] Call Trace: [ 675.664502][T18565] [ 675.667447][T18565] dump_stack_lvl+0x18c/0x250 [ 675.667476][T18566] netlink: 'syz.4.3650': attribute type 30 has an invalid length. [ 675.672139][T18565] ? show_regs_print_info+0x20/0x20 [ 675.672166][T18565] ? load_image+0x420/0x420 [ 675.672191][T18565] ? __might_fault+0xaa/0x120 [ 675.672212][T18565] ? __lock_acquire+0x7eb0/0x7eb0 [ 675.699386][T18565] should_fail_ex+0x394/0x4c0 [ 675.704071][T18565] _copy_from_user+0x2f/0xe0 [ 675.708684][T18565] ___sys_sendmsg+0x1c7/0x360 [ 675.713362][T18565] ? get_pid_task+0x20/0x1e0 [ 675.717954][T18565] ? __sys_sendmsg+0x2b0/0x2b0 [ 675.722728][T18565] ? __lock_acquire+0x7eb0/0x7eb0 [ 675.727770][T18565] __se_sys_sendmsg+0x1d0/0x2c0 [ 675.732618][T18565] ? perf_trace_preemptirq_template+0x269/0x330 [ 675.738863][T18565] ? __x64_sys_sendmsg+0x80/0x80 [ 675.743811][T18565] ? lockdep_hardirqs_on+0x98/0x150 [ 675.749006][T18565] do_syscall_64+0x55/0xb0 [ 675.753442][T18565] ? clear_bhb_loop+0x40/0x90 [ 675.758132][T18565] ? clear_bhb_loop+0x40/0x90 [ 675.762816][T18565] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 675.768728][T18565] RIP: 0033:0x7f09a859e199 [ 675.773147][T18565] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 675.792754][T18565] RSP: 002b:00007f09a948e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 675.801182][T18565] RAX: ffffffffffffffda RBX: 00007f09a8825fa0 RCX: 00007f09a859e199 [ 675.809158][T18565] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005 [ 675.817129][T18565] RBP: 00007f09a948e090 R08: 0000000000000000 R09: 0000000000000000 [ 675.825110][T18565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 675.833078][T18565] R13: 00007f09a8826038 R14: 00007f09a8825fa0 R15: 00007ffdf7c6ccc8 [ 675.841065][T18565] [ 676.194556][T18575] netlink: 'syz.1.3653': attribute type 10 has an invalid length. [ 676.363431][T18578] netlink: 'syz.2.3656': attribute type 3 has an invalid length. [ 676.386006][T18578] netlink: 'syz.2.3656': attribute type 1 has an invalid length. [ 676.419335][T18578] __nla_validate_parse: 7 callbacks suppressed [ 676.419371][T18578] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3656'. [ 676.728334][T18592] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3658'. [ 676.811954][T18599] FAULT_INJECTION: forcing a failure. [ 676.811954][T18599] name failslab, interval 1, probability 0, space 0, times 0 [ 676.845691][T18599] CPU: 1 PID: 18599 Comm: syz.3.3661 Not tainted syzkaller #0 [ 676.853207][T18599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 676.863281][T18599] Call Trace: [ 676.866578][T18599] [ 676.869526][T18599] dump_stack_lvl+0x18c/0x250 [ 676.874247][T18599] ? show_regs_print_info+0x20/0x20 [ 676.879468][T18599] ? load_image+0x420/0x420 [ 676.883990][T18599] should_fail_ex+0x394/0x4c0 [ 676.888682][T18599] should_failslab+0x9/0x20 [ 676.893197][T18599] slab_pre_alloc_hook+0x59/0x300 [ 676.898236][T18599] ? __lock_acquire+0x7eb0/0x7eb0 [ 676.903277][T18599] kmem_cache_alloc_node+0x5e/0x310 [ 676.908480][T18599] ? __alloc_skb+0x103/0x2c0 [ 676.913073][T18599] __alloc_skb+0x103/0x2c0 [ 676.917493][T18599] netlink_sendmsg+0x66a/0xbf0 [ 676.922357][T18599] ? lockdep_hardirqs_on+0x98/0x150 [ 676.927563][T18599] ? netlink_getsockopt+0x590/0x590 [ 676.932763][T18599] ? security_socket_sendmsg+0x5a/0xa0 [ 676.938221][T18599] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 676.943507][T18599] ? security_socket_sendmsg+0x80/0xa0 [ 676.948969][T18599] ? netlink_getsockopt+0x590/0x590 [ 676.954174][T18599] ____sys_sendmsg+0x61b/0x980 [ 676.958936][T18599] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 676.965096][T18599] ? __asan_memset+0x22/0x40 [ 676.969684][T18599] ? __sys_sendmsg_sock+0x30/0x30 [ 676.974704][T18599] ? __import_iovec+0x5f2/0x850 [ 676.979568][T18599] ? import_iovec+0x73/0xa0 [ 676.984071][T18599] ___sys_sendmsg+0x2a6/0x360 [ 676.988751][T18599] ? __sys_sendmsg+0x2b0/0x2b0 [ 676.993570][T18599] __se_sys_sendmsg+0x1d0/0x2c0 [ 676.998435][T18599] ? __x64_sys_sendmsg+0x80/0x80 [ 677.003396][T18599] do_syscall_64+0x55/0xb0 [ 677.007816][T18599] ? clear_bhb_loop+0x40/0x90 [ 677.012493][T18599] ? clear_bhb_loop+0x40/0x90 [ 677.017181][T18599] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 677.023088][T18599] RIP: 0033:0x7f5089d9e199 [ 677.027519][T18599] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 677.047124][T18599] RSP: 002b:00007f508ad0d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 677.055542][T18599] RAX: ffffffffffffffda RBX: 00007f508a025fa0 RCX: 00007f5089d9e199 [ 677.063523][T18599] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005 [ 677.071493][T18599] RBP: 00007f508ad0d090 R08: 0000000000000000 R09: 0000000000000000 [ 677.079464][T18599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 677.087434][T18599] R13: 00007f508a026038 R14: 00007f508a025fa0 R15: 00007ffe8da99f28 [ 677.095414][T18599] [ 677.435383][T18606] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 677.496662][T18606] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3663'. [ 677.886016][T18619] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3667'. [ 678.365989][T18630] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3671'. [ 678.956597][T18646] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3677'. [ 678.975985][T18646] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3677'. [ 679.004743][T18648] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3677'. [ 679.045468][T18648] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3677'. [ 679.141292][T18651] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3678'. [ 679.246198][T18653] syzkaller0: entered promiscuous mode [ 679.260513][T18653] syzkaller0: entered allmulticast mode [ 680.505618][T18688] validate_nla: 12 callbacks suppressed [ 680.505657][T18688] netlink: 'syz.4.3689': attribute type 21 has an invalid length. [ 680.524761][T18688] netlink: 'syz.4.3689': attribute type 30 has an invalid length. [ 681.055335][T18696] syzkaller0: entered promiscuous mode [ 681.080718][T18696] syzkaller0: entered allmulticast mode [ 683.557685][T18704] netlink: 'syz.3.3693': attribute type 2 has an invalid length. [ 683.565895][T18706] __nla_validate_parse: 1 callbacks suppressed [ 683.565908][T18706] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3693'. [ 683.582839][T18710] netlink: 'syz.1.3695': attribute type 21 has an invalid length. [ 683.591278][T18710] netlink: 'syz.1.3695': attribute type 30 has an invalid length. [ 683.627434][T18710] FAULT_INJECTION: forcing a failure. [ 683.627434][T18710] name failslab, interval 1, probability 0, space 0, times 0 [ 683.628433][T18714] netlink: 15743 bytes leftover after parsing attributes in process `syz.2.3696'. [ 683.657747][T18710] CPU: 1 PID: 18710 Comm: syz.1.3695 Not tainted syzkaller #0 [ 683.665259][T18710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 683.675349][T18710] Call Trace: [ 683.678672][T18710] [ 683.681649][T18710] dump_stack_lvl+0x18c/0x250 [ 683.686394][T18710] ? show_regs_print_info+0x20/0x20 [ 683.691631][T18710] ? load_image+0x420/0x420 [ 683.696147][T18710] ? __might_sleep+0xe0/0xe0 [ 683.700764][T18710] ? __lock_acquire+0x7eb0/0x7eb0 [ 683.705825][T18710] should_fail_ex+0x394/0x4c0 [ 683.710568][T18710] should_failslab+0x9/0x20 [ 683.715123][T18710] slab_pre_alloc_hook+0x59/0x300 [ 683.720208][T18710] ? mark_lock+0x94/0x320 [ 683.724595][T18710] kmem_cache_alloc_node+0x5e/0x310 [ 683.729841][T18710] ? __lock_acquire+0x135d/0x7eb0 [ 683.734909][T18710] ? __alloc_skb+0x103/0x2c0 [ 683.739560][T18710] __alloc_skb+0x103/0x2c0 [ 683.744022][T18710] netlink_ack+0x377/0x1160 [ 683.748561][T18710] ? lock_chain_count+0x20/0x20 [ 683.753433][T18710] ? verify_lock_unused+0x140/0x140 [ 683.758656][T18710] ? netlink_dump+0xec0/0xec0 [ 683.763361][T18710] ? perf_trace_lock+0xfc/0x3b0 [ 683.768223][T18710] netlink_rcv_skb+0x2b3/0x4c0 [ 683.772990][T18710] ? rtnetlink_bind+0x80/0x80 [ 683.777758][T18710] ? netlink_ack+0x1160/0x1160 [ 683.782540][T18710] ? __lock_acquire+0x7eb0/0x7eb0 [ 683.787571][T18710] ? net_generic+0x1e/0x240 [ 683.792080][T18710] ? netlink_deliver_tap+0x2e/0x1b0 [ 683.797284][T18710] netlink_unicast+0x7b1/0x930 [ 683.802071][T18710] netlink_sendmsg+0x8d0/0xbf0 [ 683.806852][T18710] ? netlink_getsockopt+0x590/0x590 [ 683.812066][T18710] ? apparmor_socket_sendmsg+0x8e/0x330 [ 683.817621][T18710] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 683.822907][T18710] ? security_socket_sendmsg+0x80/0xa0 [ 683.828359][T18710] ? netlink_getsockopt+0x590/0x590 [ 683.833556][T18710] ____sys_sendmsg+0x61b/0x980 [ 683.838325][T18710] ? __asan_memset+0x22/0x40 [ 683.842914][T18710] ? __sys_sendmsg_sock+0x30/0x30 [ 683.847937][T18710] ? __import_iovec+0x5f2/0x850 [ 683.852796][T18710] ? import_iovec+0x73/0xa0 [ 683.857304][T18710] ___sys_sendmsg+0x2a6/0x360 [ 683.861991][T18710] ? __sys_sendmsg+0x2b0/0x2b0 [ 683.866777][T18710] ? __lock_acquire+0x7eb0/0x7eb0 [ 683.871821][T18710] __se_sys_sendmsg+0x1d0/0x2c0 [ 683.876674][T18710] ? perf_trace_preemptirq_template+0x269/0x330 [ 683.882936][T18710] ? __x64_sys_sendmsg+0x80/0x80 [ 683.887896][T18710] ? lockdep_hardirqs_on+0x98/0x150 [ 683.893107][T18710] do_syscall_64+0x55/0xb0 [ 683.897531][T18710] ? clear_bhb_loop+0x40/0x90 [ 683.902203][T18710] ? clear_bhb_loop+0x40/0x90 [ 683.906877][T18710] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 683.912775][T18710] RIP: 0033:0x7f09a859e199 [ 683.917193][T18710] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 683.936802][T18710] RSP: 002b:00007f09a948e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 683.945216][T18710] RAX: ffffffffffffffda RBX: 00007f09a8825fa0 RCX: 00007f09a859e199 [ 683.953182][T18710] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005 [ 683.961155][T18710] RBP: 00007f09a948e090 R08: 0000000000000000 R09: 0000000000000000 [ 683.969122][T18710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 683.977093][T18710] R13: 00007f09a8826038 R14: 00007f09a8825fa0 R15: 00007ffdf7c6ccc8 [ 683.985073][T18710] [ 685.851362][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.858352][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.954684][T18722] netlink: 'syz.3.3698': attribute type 3 has an invalid length. [ 685.962904][T18722] netlink: 'syz.3.3698': attribute type 1 has an invalid length. [ 685.971116][T18722] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3698'. [ 686.103427][T18744] netlink: 'syz.1.3704': attribute type 21 has an invalid length. [ 686.130013][T18744] netlink: 'syz.1.3704': attribute type 30 has an invalid length. [ 686.303891][T18751] netlink: 'syz.4.3708': attribute type 21 has an invalid length. [ 686.343219][T18751] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3708'. [ 686.397942][T18754] netlink: 'syz.2.3706': attribute type 2 has an invalid length. [ 686.430853][T18748] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3706'. [ 686.737560][T18758] netlink: 'syz.4.3708': attribute type 10 has an invalid length. [ 686.749438][T18760] netlink: 'syz.4.3708': attribute type 10 has an invalid length. [ 687.322393][T18773] netlink: 'syz.1.3714': attribute type 3 has an invalid length. [ 687.364005][T18773] netlink: 'syz.1.3714': attribute type 1 has an invalid length. [ 687.397623][T18773] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3714'. [ 688.193201][T18780] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3723'. [ 688.320337][T18784] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.3716'. [ 688.558124][T18793] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3718'. [ 688.660070][T18793] team0: Port device team_slave_0 removed [ 688.673648][T18793] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 690.097974][T18806] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3720'. [ 690.136413][T18806] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 691.015468][T18826] validate_nla: 3 callbacks suppressed [ 691.015502][T18826] netlink: 'syz.1.3727': attribute type 3 has an invalid length. [ 691.091870][T18826] netlink: 'syz.1.3727': attribute type 1 has an invalid length. [ 691.148623][T18826] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3727'. [ 691.584789][T18837] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.3731'. [ 691.653640][T18840] netlink: 'syz.4.3730': attribute type 21 has an invalid length. [ 691.708159][T18840] netlink: 'syz.4.3730': attribute type 30 has an invalid length. [ 691.765313][T18838] sctp: [Deprecated]: syz.1.3731 (pid 18838) Use of struct sctp_assoc_value in delayed_ack socket option. [ 691.765313][T18838] Use struct sctp_sack_info instead [ 691.827516][T18839] sctp: [Deprecated]: syz.1.3731 (pid 18839) Use of struct sctp_assoc_value in delayed_ack socket option. [ 691.827516][T18839] Use struct sctp_sack_info instead [ 692.402545][T18850] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3733'. [ 692.494272][T18850] hsr_slave_0: left promiscuous mode [ 692.563734][T18850] hsr_slave_1: left promiscuous mode [ 693.394174][T18860] netlink: 208064 bytes leftover after parsing attributes in process `syz.2.3737'. [ 693.805993][T18875] netlink: 'syz.3.3739': attribute type 3 has an invalid length. [ 693.945901][T18875] netlink: 'syz.3.3739': attribute type 1 has an invalid length. [ 693.987588][T18875] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3739'. [ 694.439906][T18887] netlink: 'syz.4.3742': attribute type 21 has an invalid length. [ 694.498166][T18887] netlink: 'syz.4.3742': attribute type 30 has an invalid length. [ 694.982827][T18896] netlink: 'syz.3.3746': attribute type 3 has an invalid length. [ 695.029155][T18896] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.3746'. [ 695.901945][T18913] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3750'. [ 695.995907][T18913] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3750'. [ 696.058423][T18913] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3750'. [ 696.105329][T18916] netlink: 'syz.3.3751': attribute type 21 has an invalid length. [ 696.137479][T18916] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3751'. [ 696.169436][T18913] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3750'. [ 696.396830][T18921] netlink: 'syz.1.3752': attribute type 3 has an invalid length. [ 696.489620][T18921] netlink: 'syz.1.3752': attribute type 1 has an invalid length. [ 696.567418][T18921] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3752'. [ 696.653758][T18925] netlink: 'syz.4.3753': attribute type 21 has an invalid length. [ 696.707734][T18925] netlink: 'syz.4.3753': attribute type 30 has an invalid length. [ 696.738069][T18928] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.3753'. [ 697.839831][ T5784] Bluetooth: hci3: unexpected event 0x0f length: 151 > 4 [ 698.129817][T18947] netlink: 15999 bytes leftover after parsing attributes in process `syz.3.3761'. [ 699.298540][T18966] netlink: 'syz.2.3764': attribute type 3 has an invalid length. [ 699.308690][T18966] netlink: 'syz.2.3764': attribute type 1 has an invalid length. [ 699.342375][T18966] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3764'. [ 699.629771][T18969] netlink: 'syz.2.3766': attribute type 21 has an invalid length. [ 699.679630][T18969] netlink: 'syz.2.3766': attribute type 30 has an invalid length. [ 699.937644][ T5784] Bluetooth: hci4: unexpected event 0x0f length: 151 > 4 [ 699.965905][T18976] syzkaller0: entered promiscuous mode [ 699.987389][T18976] syzkaller0: entered allmulticast mode [ 700.344856][T18990] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.3771'. [ 701.861123][ T5784] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 701.876364][ T5784] Bluetooth: hci3: Injecting HCI hardware error event [ 701.886370][T16472] Bluetooth: hci3: hardware error 0x00 [ 702.537597][T19006] netlink: 'syz.4.3775': attribute type 3 has an invalid length. [ 702.545684][T19006] netlink: 'syz.4.3775': attribute type 1 has an invalid length. [ 702.567859][T19006] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3775'. [ 702.607776][T19014] netlink: 'syz.3.3777': attribute type 2 has an invalid length. [ 702.629900][T19008] netlink: 209628 bytes leftover after parsing attributes in process `syz.2.3776'. [ 702.639438][T19014] netlink: 119 bytes leftover after parsing attributes in process `syz.3.3777'. [ 702.656901][T19013] netlink: 'syz.1.3778': attribute type 21 has an invalid length. [ 702.679317][T19013] netlink: 'syz.1.3778': attribute type 30 has an invalid length. [ 702.713459][T19008] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3776'. [ 702.839859][ T5784] Bluetooth: hci2: unexpected event 0x0f length: 151 > 4 [ 702.989305][T19035] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 703.254221][T19043] netlink: 'syz.3.3787': attribute type 3 has an invalid length. [ 703.288863][T19043] netlink: 'syz.3.3787': attribute type 1 has an invalid length. [ 703.320026][T19043] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3787'. [ 703.383960][T19039] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.3785'. [ 703.613028][T19051] netlink: 'syz.2.3790': attribute type 21 has an invalid length. [ 703.621965][T19051] netlink: 'syz.2.3790': attribute type 30 has an invalid length. [ 703.764778][T19054] syz.3.3791[19054] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 703.765133][T19054] syz.3.3791[19054] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 704.008131][T16472] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 704.026339][ T5784] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 704.035660][ T5784] Bluetooth: hci4: Injecting HCI hardware error event [ 704.043844][T16472] Bluetooth: hci4: hardware error 0x00 [ 704.200042][T19049] netlink: 'syz.1.3789': attribute type 9 has an invalid length. [ 704.211040][T19049] netlink: 156008 bytes leftover after parsing attributes in process `syz.1.3789'. [ 704.389403][T19069] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 704.531914][T19076] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3799'. [ 704.560167][T19080] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3800'. [ 704.578930][T19080] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3800'. [ 704.918724][T19093] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 705.491476][T19109] delete_channel: no stack [ 705.682811][T19112] mac80211_hwsim hwsim54 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 706.167496][T16472] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 706.889240][T16472] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 706.898063][T16472] Bluetooth: hci2: Injecting HCI hardware error event [ 706.906562][ T5784] Bluetooth: hci2: hardware error 0x00 [ 707.605274][T19160] __nla_validate_parse: 14 callbacks suppressed [ 707.605314][T19160] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3826'. [ 707.671106][T19160] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3826'. [ 707.699245][T19164] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3826'. [ 707.830031][T19168] validate_nla: 13 callbacks suppressed [ 707.830048][T19168] netlink: 'syz.3.3828': attribute type 2 has an invalid length. [ 707.869039][T19165] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3828'. [ 707.914588][T19172] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.3839'. [ 707.927682][ T7752] wlan1: Trigger new scan to find an IBSS to join [ 707.934576][T19172] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.3839'. [ 707.949246][T19172] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.3839'. [ 708.333039][T16472] Bluetooth: hci1: unexpected event 0x0f length: 151 > 4 [ 708.460706][T19188] netlink: 'syz.1.3836': attribute type 29 has an invalid length. [ 708.507397][T19192] netlink: 15998 bytes leftover after parsing attributes in process `syz.4.3838'. [ 708.549719][T19188] netlink: 'syz.1.3836': attribute type 29 has an invalid length. [ 709.048024][ T5784] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 709.482070][T19202] netlink: 'syz.4.3843': attribute type 2 has an invalid length. [ 709.496121][T19202] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3843'. [ 709.551855][T19205] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3844'. [ 709.553971][T19200] netlink: 'syz.3.3842': attribute type 2 has an invalid length. [ 709.586029][T19206] netlink: 'syz.4.3843': attribute type 2 has an invalid length. [ 710.125295][T19229] mac80211_hwsim hwsim39 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 710.162457][ T1140] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 710.193700][ T1140] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 711.017984][T19252] netlink: 'syz.4.3854': attribute type 2 has an invalid length. [ 711.530126][T19270] netlink: 'syz.2.3858': attribute type 13 has an invalid length. [ 711.617145][T19276] netlink: 'syz.4.3863': attribute type 10 has an invalid length. [ 711.815244][T19276] team0: Cannot enslave team device to itself [ 711.829935][T19281] netlink: 'syz.3.3865': attribute type 2 has an invalid length. [ 711.841564][T19284] : renamed from bond0 (while UP) [ 712.407391][ T5784] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 712.423423][ T5784] Bluetooth: hci1: Injecting HCI hardware error event [ 712.431832][T16472] Bluetooth: hci1: hardware error 0x00 [ 712.593857][T19318] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 712.647667][T19313] __nla_validate_parse: 14 callbacks suppressed [ 712.647684][T19313] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3876'. [ 712.967581][ T7043] wlan1: Trigger new scan to find an IBSS to join [ 713.426071][T19327] netlink: 209820 bytes leftover after parsing attributes in process `syz.3.3881'. [ 713.436694][T19325] validate_nla: 5 callbacks suppressed [ 713.436710][T19325] netlink: 'syz.2.3880': attribute type 21 has an invalid length. [ 713.477646][T19325] netlink: 'syz.2.3880': attribute type 30 has an invalid length. [ 713.903262][T19343] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3886'. [ 714.042055][T19347] netlink: 'syz.4.3887': attribute type 3 has an invalid length. [ 714.056131][T19347] netlink: 'syz.4.3887': attribute type 1 has an invalid length. [ 714.064821][T19347] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3887'. [ 714.124232][ T7747] wlan1: Creating new IBSS network, BSSID ea:1b:a0:e7:58:ce [ 714.276736][T19353] netlink: 'syz.4.3890': attribute type 2 has an invalid length. [ 714.285164][T19353] netlink: 'syz.4.3890': attribute type 8 has an invalid length. [ 714.293726][T19353] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3890'. [ 714.304442][T19356] netlink: 'syz.2.3888': attribute type 2 has an invalid length. [ 714.312649][T19352] netlink: 946 bytes leftover after parsing attributes in process `syz.3.3889'. [ 714.330087][T19352] netlink: 'syz.3.3889': attribute type 10 has an invalid length. [ 714.338453][T19352] mac80211_hwsim hwsim48 wlan1: left allmulticast mode [ 714.346243][T19349] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3888'. [ 714.487636][T16472] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 714.855471][T19364] FAULT_INJECTION: forcing a failure. [ 714.855471][T19364] name failslab, interval 1, probability 0, space 0, times 0 [ 714.957636][T19364] CPU: 0 PID: 19364 Comm: syz.1.3894 Not tainted syzkaller #0 [ 714.965178][T19364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 714.975262][T19364] Call Trace: [ 714.978573][T19364] [ 714.981528][T19364] dump_stack_lvl+0x18c/0x250 [ 714.986254][T19364] ? show_regs_print_info+0x20/0x20 [ 714.991505][T19364] ? load_image+0x420/0x420 [ 714.996056][T19364] ? __might_sleep+0xe0/0xe0 [ 715.000684][T19364] ? __lock_acquire+0x7eb0/0x7eb0 [ 715.005741][T19364] ? mark_lock+0x94/0x320 [ 715.010118][T19364] should_fail_ex+0x394/0x4c0 [ 715.014850][T19364] should_failslab+0x9/0x20 [ 715.019387][T19364] slab_pre_alloc_hook+0x59/0x300 [ 715.024540][T19364] ? __local_bh_enable_ip+0x13a/0x1c0 [ 715.029954][T19364] kmem_cache_alloc_node+0x5e/0x310 [ 715.035190][T19364] ? __local_bh_enable_ip+0x13a/0x1c0 [ 715.040594][T19364] ? __alloc_skb+0x103/0x2c0 [ 715.045232][T19364] __alloc_skb+0x103/0x2c0 [ 715.049689][T19364] kcm_sendmsg+0x2359/0x27b0 [ 715.054482][T19364] ? aa_sk_perm+0x83c/0x970 [ 715.059045][T19364] ? aa_af_perm+0x330/0x330 [ 715.063592][T19364] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 715.070028][T19364] ? kcm_getsockopt+0x280/0x280 [ 715.074896][T19364] ? apparmor_socket_sendmsg+0x8e/0x330 [ 715.080457][T19364] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 715.085750][T19364] ? security_socket_sendmsg+0x80/0xa0 [ 715.091222][T19364] sock_write_iter+0x2dc/0x420 [ 715.096003][T19364] ? sock_read_iter+0x3f0/0x3f0 [ 715.100881][T19364] ? common_file_perm+0x198/0x1f0 [ 715.105951][T19364] vfs_write+0x474/0x9a0 [ 715.110214][T19364] ? file_end_write+0x250/0x250 [ 715.115111][T19364] ? __fget_files+0x3fc/0x460 [ 715.119831][T19364] ? __fdget_pos+0x1d8/0x330 [ 715.124442][T19364] ? ksys_write+0x74/0x260 [ 715.128881][T19364] ksys_write+0x151/0x260 [ 715.133231][T19364] ? __ia32_sys_read+0x90/0x90 [ 715.138014][T19364] ? lockdep_hardirqs_on+0x98/0x150 [ 715.143228][T19364] do_syscall_64+0x55/0xb0 [ 715.147659][T19364] ? clear_bhb_loop+0x40/0x90 [ 715.152345][T19364] ? clear_bhb_loop+0x40/0x90 [ 715.157032][T19364] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 715.162938][T19364] RIP: 0033:0x7f09a859e199 [ 715.167359][T19364] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 715.186974][T19364] RSP: 002b:00007f09a948e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 715.195395][T19364] RAX: ffffffffffffffda RBX: 00007f09a8825fa0 RCX: 00007f09a859e199 [ 715.203378][T19364] RDX: 00000000fffffdef RSI: 0000200000000140 RDI: 000000000000000c [ 715.211358][T19364] RBP: 00007f09a948e090 R08: 0000000000000000 R09: 0000000000000000 [ 715.219354][T19364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 715.227329][T19364] R13: 00007f09a8826038 R14: 00007f09a8825fa0 R15: 00007ffdf7c6ccc8 [ 715.235329][T19364] [ 715.355122][T19379] netlink: 'syz.2.3897': attribute type 21 has an invalid length. [ 715.377554][T19379] netlink: 'syz.2.3897': attribute type 30 has an invalid length. [ 715.595262][T19382] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3898'. [ 715.638312][T19382] batman_adv: batadv0: Adding interface: veth0_vlan [ 715.650386][T19382] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 715.682929][T19382] batman_adv: batadv0: Interface activated: veth0_vlan [ 715.710449][T19383] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3898'. [ 715.901303][T19389] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3899'. [ 716.060924][T19406] 8021q: adding VLAN 0 to HW filter on device team0 [ 716.070505][T19406] bond0: (slave team0): Enslaving as an active interface with an up link [ 717.461821][T19456] team0: Cannot enslave team device to itself [ 718.494768][T19490] __nla_validate_parse: 9 callbacks suppressed [ 718.494903][T19490] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.3930'. [ 718.674791][T19496] validate_nla: 22 callbacks suppressed [ 718.674808][T19496] netlink: 'syz.3.3932': attribute type 21 has an invalid length. [ 718.697093][T19496] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3932'. [ 718.706659][T19496] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3932'. [ 718.716339][T19500] netlink: 'syz.1.3933': attribute type 3 has an invalid length. [ 718.724994][T19500] netlink: 'syz.1.3933': attribute type 1 has an invalid length. [ 718.735675][T19500] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3933'. [ 718.751782][T19501] netlink: 'syz.4.3931': attribute type 10 has an invalid length. [ 718.761902][T19501] netlink: 'syz.4.3931': attribute type 11 has an invalid length. [ 718.774305][T19501] netlink: 'syz.4.3931': attribute type 11 has an invalid length. [ 718.782639][T19501] netlink: 'syz.4.3931': attribute type 11 has an invalid length. [ 718.790930][T19501] netlink: 'syz.4.3931': attribute type 11 has an invalid length. [ 718.799407][T19501] netlink: 'syz.4.3931': attribute type 11 has an invalid length. [ 718.810193][T19501] netlink: 'syz.4.3931': attribute type 11 has an invalid length. [ 718.819754][T19501] netlink: 'syz.4.3931': attribute type 11 has an invalid length. [ 718.828021][T19501] netlink: 'syz.4.3931': attribute type 11 has an invalid length. [ 718.839202][T19503] netlink: 'syz.4.3931': attribute type 9 has an invalid length. [ 718.847161][T19501] netlink: 'syz.4.3931': attribute type 11 has an invalid length. [ 718.855557][T19503] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.3931'. [ 718.865271][T19501] netlink: 'syz.4.3931': attribute type 11 has an invalid length. [ 718.881932][T19501] netlink: 'syz.4.3931': attribute type 4 has an invalid length. [ 718.899660][T19501] netlink: 'syz.4.3931': attribute type 5 has an invalid length. [ 718.912545][T19501] netlink: 208556 bytes leftover after parsing attributes in process `syz.4.3931'. [ 719.369475][T19509] netlink: 'syz.3.3937': attribute type 4 has an invalid length. [ 719.419288][T19513] netlink: 'syz.4.3939': attribute type 21 has an invalid length. [ 719.463185][T19513] netlink: 'syz.4.3939': attribute type 30 has an invalid length. [ 720.317124][T19527] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3944'. [ 721.060474][T19533] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 721.331961][T19539] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.3945'. [ 721.457969][T19542] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3948'. [ 721.691283][T19567] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.3951'. [ 722.512267][T19585] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 722.551402][T19585] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 722.744677][T19585] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 722.777132][T19585] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 722.825863][T19585] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 722.908968][T19585] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 722.960412][T19585] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 723.008990][T19585] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 723.076152][T19585] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 723.516126][T19600] __nla_validate_parse: 4 callbacks suppressed [ 723.516145][T19600] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3966'. [ 723.852846][T19613] netlink: 207508 bytes leftover after parsing attributes in process `syz.4.3971'. [ 723.878916][T19615] validate_nla: 14 callbacks suppressed [ 723.880534][T19615] netlink: 'syz.3.3972': attribute type 3 has an invalid length. [ 723.909951][T19615] netlink: 'syz.3.3972': attribute type 1 has an invalid length. [ 723.922677][T19615] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3972'. [ 723.934031][T19619] netlink: 'syz.1.3973': attribute type 21 has an invalid length. [ 723.948529][T19620] netlink: 'syz.2.3974': attribute type 21 has an invalid length. [ 723.982472][T19620] netlink: 'syz.2.3974': attribute type 30 has an invalid length. [ 725.683293][T19648] netlink: 'syz.1.3981': attribute type 21 has an invalid length. [ 725.727585][T19648] netlink: 'syz.1.3981': attribute type 30 has an invalid length. [ 726.115834][T19662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 726.187394][T19662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 726.257467][T19662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 726.297680][T19662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 726.327644][T19662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 726.437670][T19662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 726.978379][T19673] netlink: 'syz.1.3986': attribute type 21 has an invalid length. [ 727.008150][T19673] netlink: 'syz.1.3986': attribute type 30 has an invalid length. [ 727.024022][T19671] netlink: 'syz.4.3984': attribute type 3 has an invalid length. [ 727.053893][T19671] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3984'. [ 728.478588][T19697] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3990'. [ 729.798213][T19708] netlink: 539 bytes leftover after parsing attributes in process `syz.2.3994'. [ 733.591832][T19740] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 734.847013][T19740] batman_adv: batadv0: Removing interface: veth0_vlan [ 735.427859][T19740] bond0: (slave macvlan0): Releasing backup interface [ 737.324166][T19763] validate_nla: 1 callbacks suppressed [ 737.427811][T19763] netlink: 'syz.3.4009': attribute type 10 has an invalid length. [ 738.590618][T19780] net_ratelimit: 17 callbacks suppressed [ 738.590754][T19780] netlink: set zone limit has 8 unknown bytes [ 738.856409][T19780] netlink: 'syz.4.4016': attribute type 1 has an invalid length. [ 738.877607][T19780] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.4016'. [ 740.205280][T19797] netlink: 208064 bytes leftover after parsing attributes in process `syz.1.4020'. [ 740.330936][T19797] smc: net device  applied user defined pnetid CONFIG [ 740.627622][T19802] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.4022'. [ 740.763267][T19803] netlink: 192436 bytes leftover after parsing attributes in process `syz.4.4022'. [ 740.787346][T19803] openvswitch: netlink: Duplicate key (type 0). [ 741.499035][T19813] netlink: 'syz.1.4023': attribute type 10 has an invalid length. [ 741.873077][T19817] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4025'. [ 741.939672][T19817] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 742.651003][T19821] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.4027'. [ 744.440644][T19834] delete_channel: no stack [ 744.517022][T19841] netlink: set zone limit has 8 unknown bytes [ 744.741207][T19841] netlink: 'syz.2.4032': attribute type 1 has an invalid length. [ 744.777504][T19841] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.4032'. [ 746.137168][T19843] netlink: 'syz.3.4033': attribute type 33 has an invalid length. [ 746.153191][T19843] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4033'. [ 746.169521][T19843] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 746.224996][T19845] netlink: 'syz.1.4034': attribute type 3 has an invalid length. [ 746.235688][T19845] netlink: 'syz.1.4034': attribute type 1 has an invalid length. [ 746.251853][T19845] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4034'. [ 746.552732][T19858] netlink: 'syz.1.4045': attribute type 3 has an invalid length. [ 746.592038][T19858] netlink: 'syz.1.4045': attribute type 1 has an invalid length. [ 746.610760][T19858] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4045'. [ 746.774268][T19860] netlink: 'syz.4.4036': attribute type 2 has an invalid length. [ 746.830471][T19862] netlink: 'syz.2.4037': attribute type 10 has an invalid length. [ 746.840537][T19860] netlink: 1045 bytes leftover after parsing attributes in process `syz.4.4036'. [ 746.948934][T19867] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.4040'. [ 746.987200][T19862] team0: Port device veth0_to_bond added [ 747.354908][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.361367][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.402646][T19871] netlink: 'syz.3.4042': attribute type 29 has an invalid length. [ 747.451285][T19871] netlink: 'syz.3.4042': attribute type 29 has an invalid length. [ 747.514370][T19871] IPv6: …: Disabled Multicast RS [ 747.529579][T19872] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.4041'. [ 747.974129][T19887] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.4048'. [ 747.997320][T19887] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 748.017047][T19887] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 749.334327][T19918] mac80211_hwsim hwsim54 ..ăc¤±: renamed from wlan1 (while UP) [ 750.474769][T19944] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4063'. [ 750.489411][T19944] : renamed from caif0 [ 750.526576][T19944] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 750.542473][T19949] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.4064'. [ 750.871129][T19967] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.4069'. [ 751.950893][T19990] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4076'. [ 754.443995][T20048] netlink: 'syz.1.4094': attribute type 3 has an invalid length. [ 754.457081][T20048] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4094'. [ 754.816689][T20061] netlink: 'syz.2.4096': attribute type 10 has an invalid length. [ 755.268321][T20061] : (slave wlan1): Enslaving as an active interface with an up link [ 757.895073][T20091] netlink: 180 bytes leftover after parsing attributes in process `syz.1.4106'. [ 758.095077][T20101] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4107'. [ 758.196137][T20104] tap0: tun_chr_ioctl cmd 1074025677 [ 758.248259][T20104] tap0: linktype set to 773 [ 758.700947][T20110] netlink: 10 bytes leftover after parsing attributes in process `syz.1.4110'. [ 759.016053][T20125] netlink: 212912 bytes leftover after parsing attributes in process `syz.1.4113'. [ 759.514129][T20140] netlink: 'syz.2.4116': attribute type 3 has an invalid length. [ 759.561985][T20140] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4116'. [ 759.598767][T20141] netlink: 'syz.2.4116': attribute type 3 has an invalid length. [ 759.622777][T20141] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4116'. [ 759.696694][T20131] syzkaller0: entered promiscuous mode [ 759.702307][T20131] syzkaller0: entered allmulticast mode [ 760.004582][T20152] netlink: 1057 bytes leftover after parsing attributes in process `syz.3.4120'. [ 760.245250][T20166] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.4118'. [ 760.299538][T20168] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4121'. [ 762.413441][T20164] tap0: tun_chr_ioctl cmd 1074820166 [ 762.419542][T20168] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4121'. [ 762.513840][T20171] C: renamed from team_slave_0 [ 762.720493][T20183] macsec0: entered promiscuous mode [ 762.737574][T20183] macsec0: entered allmulticast mode [ 762.742892][T20183] veth1_macvtap: entered allmulticast mode [ 762.985603][T20200] netlink: 'syz.2.4128': attribute type 2 has an invalid length. [ 763.002024][T20200] __nla_validate_parse: 1 callbacks suppressed [ 763.002039][T20200] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4128'. [ 763.225762][T20206] netlink: 'syz.2.4132': attribute type 3 has an invalid length. [ 763.236890][T20206] netlink: 'syz.2.4132': attribute type 1 has an invalid length. [ 763.245026][T20206] netlink: 'syz.2.4132': attribute type 6 has an invalid length. [ 763.257367][T20206] netlink: 144448 bytes leftover after parsing attributes in process `syz.2.4132'. [ 763.446875][T20211] netlink: 212912 bytes leftover after parsing attributes in process `syz.2.4134'. [ 764.170576][T20233] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.4136'. [ 764.192779][T20229] tap0: tun_chr_ioctl cmd 1074820166 [ 764.367177][T20234] netlink: 'syz.3.4139': attribute type 2 has an invalid length. [ 764.396581][T20232] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4139'. [ 765.148505][T20251] netlink: 4091 bytes leftover after parsing attributes in process `syz.2.4144'. [ 765.834737][T20267] netlink: 'syz.2.4147': attribute type 2 has an invalid length. [ 765.844800][T20266] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4147'. [ 766.233257][T20278] netlink: 'syz.4.4150': attribute type 2 has an invalid length. [ 766.296784][T20273] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4150'. [ 766.340186][T20282] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4153'. [ 766.705333][T20287] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.4155'. [ 766.766940][T20291] netlink: 'syz.4.4157': attribute type 2 has an invalid length. [ 766.921128][T20305] FAULT_INJECTION: forcing a failure. [ 766.921128][T20305] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 766.946326][T20305] CPU: 0 PID: 20305 Comm: syz.4.4161 Not tainted syzkaller #0 [ 766.953858][T20305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 766.963954][T20305] Call Trace: [ 766.967264][T20305] [ 766.970232][T20305] dump_stack_lvl+0x18c/0x250 [ 766.974976][T20305] ? show_regs_print_info+0x20/0x20 [ 766.980230][T20305] ? load_image+0x420/0x420 [ 766.984802][T20305] ? __lock_acquire+0x7eb0/0x7eb0 [ 766.989875][T20305] ? __lock_acquire+0x7eb0/0x7eb0 [ 766.994953][T20305] should_fail_ex+0x394/0x4c0 [ 766.999696][T20305] _copy_from_user+0x2f/0xe0 [ 767.004353][T20305] perf_copy_attr+0x16a/0x820 [ 767.009106][T20305] __se_sys_perf_event_open+0x11b/0x1d40 [ 767.014808][T20305] ? mutex_unlock+0x10/0x10 [ 767.019453][T20305] ? __fget_files+0x3fc/0x460 [ 767.024190][T20305] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 767.029915][T20305] ? lock_chain_count+0x20/0x20 [ 767.034834][T20305] ? lockdep_hardirqs_on+0x98/0x150 [ 767.040072][T20305] ? __x64_sys_perf_event_open+0x20/0xc0 [ 767.045766][T20305] do_syscall_64+0x55/0xb0 [ 767.050225][T20305] ? clear_bhb_loop+0x40/0x90 [ 767.054939][T20305] ? clear_bhb_loop+0x40/0x90 [ 767.059637][T20305] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 767.065550][T20305] RIP: 0033:0x7f3dd599e199 [ 767.069980][T20305] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 767.089602][T20305] RSP: 002b:00007f3dd68e0028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 767.098031][T20305] RAX: ffffffffffffffda RBX: 00007f3dd5c25fa0 RCX: 00007f3dd599e199 [ 767.106014][T20305] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 00002000000010c0 [ 767.114008][T20305] RBP: 00007f3dd68e0090 R08: 0000000000000000 R09: 0000000000000000 [ 767.121997][T20305] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 767.129980][T20305] R13: 00007f3dd5c26038 R14: 00007f3dd5c25fa0 R15: 00007ffdaa6615d8 [ 767.138000][T20305] [ 767.159768][T20309] netlink: 'syz.1.4160': attribute type 2 has an invalid length. [ 767.330871][T20307] netlink: 'syz.2.4162': attribute type 2 has an invalid length. [ 767.760601][T20328] tap0: tun_chr_ioctl cmd 1074820166 [ 767.764839][T20335] FAULT_INJECTION: forcing a failure. [ 767.764839][T20335] name failslab, interval 1, probability 0, space 0, times 0 [ 767.782369][T20330] netlink: 'syz.1.4170': attribute type 2 has an invalid length. [ 767.799487][T20335] CPU: 1 PID: 20335 Comm: syz.4.4172 Not tainted syzkaller #0 [ 767.806974][T20335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 767.817029][T20335] Call Trace: [ 767.820307][T20335] [ 767.823231][T20335] dump_stack_lvl+0x18c/0x250 [ 767.827917][T20335] ? show_regs_print_info+0x20/0x20 [ 767.833114][T20335] ? load_image+0x420/0x420 [ 767.837620][T20335] ? __might_sleep+0xe0/0xe0 [ 767.842211][T20335] ? __lock_acquire+0x7eb0/0x7eb0 [ 767.847238][T20335] should_fail_ex+0x394/0x4c0 [ 767.851921][T20335] should_failslab+0x9/0x20 [ 767.856424][T20335] slab_pre_alloc_hook+0x59/0x300 [ 767.861457][T20335] kmem_cache_alloc_node+0x5e/0x310 [ 767.866660][T20335] ? perf_event_alloc+0x146/0x2150 [ 767.871770][T20335] perf_event_alloc+0x146/0x2150 [ 767.876703][T20335] ? _raw_spin_unlock+0x28/0x40 [ 767.881644][T20335] ? find_lively_task_by_vpid+0x19/0x290 [ 767.887277][T20335] ? find_lively_task_by_vpid+0x19/0x290 [ 767.892909][T20335] __se_sys_perf_event_open+0x796/0x1d40 [ 767.898545][T20335] ? mutex_unlock+0x10/0x10 [ 767.903044][T20335] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 767.908682][T20335] ? lock_chain_count+0x20/0x20 [ 767.913533][T20335] ? lockdep_hardirqs_on+0x98/0x150 [ 767.918726][T20335] ? __x64_sys_perf_event_open+0x20/0xc0 [ 767.924364][T20335] do_syscall_64+0x55/0xb0 [ 767.928782][T20335] ? clear_bhb_loop+0x40/0x90 [ 767.933450][T20335] ? clear_bhb_loop+0x40/0x90 [ 767.938122][T20335] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 767.944021][T20335] RIP: 0033:0x7f3dd599e199 [ 767.948432][T20335] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 767.968034][T20335] RSP: 002b:00007f3dd68e0028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 767.976442][T20335] RAX: ffffffffffffffda RBX: 00007f3dd5c25fa0 RCX: 00007f3dd599e199 [ 767.984409][T20335] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 00002000000010c0 [ 767.992377][T20335] RBP: 00007f3dd68e0090 R08: 0000000000000000 R09: 0000000000000000 [ 768.000341][T20335] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 768.008306][T20335] R13: 00007f3dd5c26038 R14: 00007f3dd5c25fa0 R15: 00007ffdaa6615d8 [ 768.016285][T20335] [ 768.056308][T20333] __nla_validate_parse: 5 callbacks suppressed [ 768.056325][T20333] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4170'. [ 768.140444][T20339] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4171'. [ 768.211501][T20339] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4171'. [ 768.243168][T20339] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.4171'. [ 768.255979][T20342] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4174'. [ 768.270223][T20332] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4171'. [ 768.285706][T20337] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4171'. [ 768.622210][T20352] netlink: 'syz.1.4177': attribute type 2 has an invalid length. [ 768.657033][T20352] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4177'. [ 768.770088][T20364] FAULT_INJECTION: forcing a failure. [ 768.770088][T20364] name failslab, interval 1, probability 0, space 0, times 0 [ 768.785230][T20364] CPU: 0 PID: 20364 Comm: syz.4.4181 Not tainted syzkaller #0 [ 768.792731][T20364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 768.802808][T20364] Call Trace: [ 768.806107][T20364] [ 768.809057][T20364] dump_stack_lvl+0x18c/0x250 [ 768.813764][T20364] ? show_regs_print_info+0x20/0x20 [ 768.818992][T20364] ? load_image+0x420/0x420 [ 768.823527][T20364] ? __might_sleep+0xe0/0xe0 [ 768.828149][T20364] ? __lock_acquire+0x7eb0/0x7eb0 [ 768.833204][T20364] should_fail_ex+0x394/0x4c0 [ 768.837904][T20364] should_failslab+0x9/0x20 [ 768.842405][T20364] slab_pre_alloc_hook+0x59/0x300 [ 768.847437][T20364] ? tracepoint_add_func+0x2f1/0xa10 [ 768.852742][T20364] ? tracepoint_add_func+0x2f1/0xa10 [ 768.858038][T20364] __kmem_cache_alloc_node+0x53/0x250 [ 768.863426][T20364] ? tracepoint_add_func+0x2f1/0xa10 [ 768.868707][T20364] __kmalloc+0xa7/0x240 [ 768.872864][T20364] ? trace_event_raw_event_x86_exceptions+0x250/0x250 [ 768.879623][T20364] tracepoint_add_func+0x2f1/0xa10 [ 768.884743][T20364] ? trace_event_raw_event_x86_exceptions+0x250/0x250 [ 768.891509][T20364] tracepoint_probe_register+0x5e/0x90 [ 768.896965][T20364] ? trace_event_raw_event_x86_exceptions+0x250/0x250 [ 768.903732][T20364] perf_trace_event_init+0x4d4/0x9b0 [ 768.909034][T20364] perf_trace_init+0x238/0x2d0 [ 768.913803][T20364] perf_tp_event_init+0x8d/0x110 [ 768.918747][T20364] perf_try_init_event+0x12b/0x3c0 [ 768.923869][T20364] ? perf_event_alloc+0xb23/0x2150 [ 768.928999][T20364] perf_event_alloc+0xed4/0x2150 [ 768.933944][T20364] ? find_lively_task_by_vpid+0x19/0x290 [ 768.939592][T20364] ? find_lively_task_by_vpid+0x19/0x290 [ 768.945244][T20364] __se_sys_perf_event_open+0x796/0x1d40 [ 768.950892][T20364] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 768.956536][T20364] ? lock_chain_count+0x20/0x20 [ 768.961394][T20364] ? lockdep_hardirqs_on+0x98/0x150 [ 768.966604][T20364] ? __x64_sys_perf_event_open+0x20/0xc0 [ 768.972246][T20364] do_syscall_64+0x55/0xb0 [ 768.976681][T20364] ? clear_bhb_loop+0x40/0x90 [ 768.981362][T20364] ? clear_bhb_loop+0x40/0x90 [ 768.986039][T20364] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 768.991937][T20364] RIP: 0033:0x7f3dd599e199 [ 768.996349][T20364] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 769.015956][T20364] RSP: 002b:00007f3dd68e0028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 769.024368][T20364] RAX: ffffffffffffffda RBX: 00007f3dd5c25fa0 RCX: 00007f3dd599e199 [ 769.032337][T20364] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 00002000000010c0 [ 769.040304][T20364] RBP: 00007f3dd68e0090 R08: 0000000000000000 R09: 0000000000000000 [ 769.048273][T20364] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 769.056239][T20364] R13: 00007f3dd5c26038 R14: 00007f3dd5c25fa0 R15: 00007ffdaa6615d8 [ 769.064219][T20364] [ 769.161869][T20367] mac80211_hwsim hwsim47 wlan0: entered promiscuous mode [ 769.177852][T20367] mac80211_hwsim hwsim47 wlan0: entered allmulticast mode [ 769.329678][T20378] netlink: 164 bytes leftover after parsing attributes in process `syz.4.4184'. [ 769.462685][T20385] netlink: 'syz.4.4187': attribute type 1 has an invalid length. [ 769.503925][T20385] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.4187'. [ 769.829095][T20392] netlink: 'syz.3.4190': attribute type 2 has an invalid length. [ 769.897061][T20397] FAULT_INJECTION: forcing a failure. [ 769.897061][T20397] name failslab, interval 1, probability 0, space 0, times 0 [ 769.922610][T20399] netlink: 'syz.3.4193': attribute type 1 has an invalid length. [ 769.932366][T20397] CPU: 1 PID: 20397 Comm: syz.4.4192 Not tainted syzkaller #0 [ 769.939869][T20397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 769.949953][T20397] Call Trace: [ 769.953256][T20397] [ 769.956208][T20397] dump_stack_lvl+0x18c/0x250 [ 769.960923][T20397] ? show_regs_print_info+0x20/0x20 [ 769.966161][T20397] ? load_image+0x420/0x420 [ 769.970698][T20397] ? __might_sleep+0xe0/0xe0 [ 769.975314][T20397] ? __lock_acquire+0x7eb0/0x7eb0 [ 769.980369][T20397] should_fail_ex+0x394/0x4c0 [ 769.984574][T20402] veth1_macvtap: entered allmulticast mode [ 769.985063][T20397] should_failslab+0x9/0x20 [ 769.995382][T20397] slab_pre_alloc_hook+0x59/0x300 [ 770.000430][T20397] ? __perf_event_period+0x4d0/0x4d0 [ 770.005722][T20397] ? alloc_perf_context+0x4e/0x220 [ 770.010826][T20397] __kmem_cache_alloc_node+0x53/0x250 [ 770.016199][T20397] ? alloc_perf_context+0x4e/0x220 [ 770.021306][T20397] kmalloc_trace+0x2a/0xe0 [ 770.025723][T20397] alloc_perf_context+0x4e/0x220 [ 770.030657][T20397] find_get_context+0x71/0x660 [ 770.035424][T20397] __se_sys_perf_event_open+0xb05/0x1d40 [ 770.041066][T20397] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 770.046705][T20397] ? lock_chain_count+0x20/0x20 [ 770.051561][T20397] ? lockdep_hardirqs_on+0x98/0x150 [ 770.056756][T20397] ? __x64_sys_perf_event_open+0x20/0xc0 [ 770.062397][T20397] do_syscall_64+0x55/0xb0 [ 770.066814][T20397] ? clear_bhb_loop+0x40/0x90 [ 770.071484][T20397] ? clear_bhb_loop+0x40/0x90 [ 770.076158][T20397] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 770.082056][T20397] RIP: 0033:0x7f3dd599e199 [ 770.086492][T20397] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 770.106096][T20397] RSP: 002b:00007f3dd68e0028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 770.114512][T20397] RAX: ffffffffffffffda RBX: 00007f3dd5c25fa0 RCX: 00007f3dd599e199 [ 770.122476][T20397] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 00002000000010c0 [ 770.130440][T20397] RBP: 00007f3dd68e0090 R08: 0000000000000000 R09: 0000000000000000 [ 770.138408][T20397] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 770.146371][T20397] R13: 00007f3dd5c26038 R14: 00007f3dd5c25fa0 R15: 00007ffdaa6615d8 [ 770.154362][T20397] [ 770.404870][T20409] macvlan0: entered promiscuous mode [ 770.419042][T20409] macvlan0: entered allmulticast mode [ 770.468348][T20409] veth1_vlan: entered allmulticast mode [ 770.491195][T20409] : (slave macvlan0): Enslaving as an active interface with an up link [ 770.690370][T20409] veth1_vlan: left allmulticast mode [ 770.945878][T20429] validate_nla: 34 callbacks suppressed [ 770.945897][T20429] netlink: 'syz.1.4203': attribute type 3 has an invalid length. [ 771.124419][T20440] FAULT_INJECTION: forcing a failure. [ 771.124419][T20440] name failslab, interval 1, probability 0, space 0, times 0 [ 771.157312][T20440] CPU: 1 PID: 20440 Comm: syz.3.4206 Not tainted syzkaller #0 [ 771.164818][T20440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 771.174892][T20440] Call Trace: [ 771.178187][T20440] [ 771.181135][T20440] dump_stack_lvl+0x18c/0x250 [ 771.185854][T20440] ? show_regs_print_info+0x20/0x20 [ 771.191058][T20440] ? load_image+0x420/0x420 [ 771.195591][T20440] ? __might_sleep+0xe0/0xe0 [ 771.200200][T20440] ? __lock_acquire+0x7eb0/0x7eb0 [ 771.205235][T20440] ? trace_raw_output_contention_end+0xd0/0xd0 [ 771.211379][T20440] should_fail_ex+0x394/0x4c0 [ 771.216049][T20440] should_failslab+0x9/0x20 [ 771.220563][T20440] slab_pre_alloc_hook+0x59/0x300 [ 771.225606][T20440] ? find_get_pmu_context+0x81/0x9e0 [ 771.230884][T20440] __kmem_cache_alloc_node+0x53/0x250 [ 771.236264][T20440] ? find_get_pmu_context+0x81/0x9e0 [ 771.241573][T20440] kmalloc_trace+0x2a/0xe0 [ 771.246010][T20440] find_get_pmu_context+0x81/0x9e0 [ 771.251120][T20440] __se_sys_perf_event_open+0xbd4/0x1d40 [ 771.256756][T20440] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 771.262402][T20440] ? lock_chain_count+0x20/0x20 [ 771.267264][T20440] ? lockdep_hardirqs_on+0x98/0x150 [ 771.272467][T20440] ? __x64_sys_perf_event_open+0x20/0xc0 [ 771.278106][T20440] do_syscall_64+0x55/0xb0 [ 771.282516][T20440] ? clear_bhb_loop+0x40/0x90 [ 771.287312][T20440] ? clear_bhb_loop+0x40/0x90 [ 771.292002][T20440] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 771.297894][T20440] RIP: 0033:0x7f5089d9e199 [ 771.302310][T20440] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 771.321938][T20440] RSP: 002b:00007f508ad0d028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 771.330366][T20440] RAX: ffffffffffffffda RBX: 00007f508a025fa0 RCX: 00007f5089d9e199 [ 771.338325][T20440] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 00002000000010c0 [ 771.346291][T20440] RBP: 00007f508ad0d090 R08: 0000000000000000 R09: 0000000000000000 [ 771.354270][T20440] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 771.362230][T20440] R13: 00007f508a026038 R14: 00007f508a025fa0 R15: 00007ffe8da99f28 [ 771.370223][T20440] [ 771.670141][T20452] netlink: 'syz.2.4211': attribute type 27 has an invalid length. [ 772.158069][T20457] netlink: 'syz.3.4213': attribute type 2 has an invalid length. [ 772.884800][T20484] FAULT_INJECTION: forcing a failure. [ 772.884800][T20484] name failslab, interval 1, probability 0, space 0, times 0 [ 772.936381][T20484] CPU: 1 PID: 20484 Comm: syz.3.4222 Not tainted syzkaller #0 [ 772.943929][T20484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 772.954012][T20484] Call Trace: [ 772.957318][T20484] [ 772.960270][T20484] dump_stack_lvl+0x18c/0x250 [ 772.964987][T20484] ? show_regs_print_info+0x20/0x20 [ 772.970214][T20484] ? load_image+0x420/0x420 [ 772.974750][T20484] ? __might_sleep+0xe0/0xe0 [ 772.979375][T20484] ? __lock_acquire+0x7eb0/0x7eb0 [ 772.984437][T20484] should_fail_ex+0x394/0x4c0 [ 772.989150][T20484] should_failslab+0x9/0x20 [ 772.993679][T20484] slab_pre_alloc_hook+0x59/0x300 [ 772.998732][T20484] ? d_instantiate+0x6f/0x90 [ 773.003351][T20484] kmem_cache_alloc+0x5a/0x2c0 [ 773.008142][T20484] ? alloc_empty_file+0x9e/0x1d0 [ 773.013110][T20484] alloc_empty_file+0x9e/0x1d0 [ 773.017901][T20484] alloc_file+0x5b/0x600 [ 773.022175][T20484] alloc_file_pseudo+0x184/0x210 [ 773.027149][T20484] ? fput+0x1a0/0x1a0 [ 773.031173][T20484] anon_inode_getfile+0xc5/0x1a0 [ 773.036144][T20484] __se_sys_perf_event_open+0xf37/0x1d40 [ 773.041823][T20484] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 773.047500][T20484] ? lock_chain_count+0x20/0x20 [ 773.052389][T20484] ? lockdep_hardirqs_on+0x98/0x150 [ 773.057612][T20484] ? __x64_sys_perf_event_open+0x20/0xc0 [ 773.063275][T20484] do_syscall_64+0x55/0xb0 [ 773.067719][T20484] ? clear_bhb_loop+0x40/0x90 [ 773.072420][T20484] ? clear_bhb_loop+0x40/0x90 [ 773.077122][T20484] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 773.083028][T20484] RIP: 0033:0x7f5089d9e199 [ 773.087660][T20484] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 773.107294][T20484] RSP: 002b:00007f508ad0d028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 773.115737][T20484] RAX: ffffffffffffffda RBX: 00007f508a025fa0 RCX: 00007f5089d9e199 [ 773.123729][T20484] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 00002000000010c0 [ 773.131721][T20484] RBP: 00007f508ad0d090 R08: 0000000000000000 R09: 0000000000000000 [ 773.139713][T20484] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 773.147702][T20484] R13: 00007f508a026038 R14: 00007f508a025fa0 R15: 00007ffe8da99f28 [ 773.155712][T20484] [ 773.180015][T20489] netlink: 'syz.2.4223': attribute type 2 has an invalid length. [ 773.198192][T20489] __nla_validate_parse: 16 callbacks suppressed [ 773.198207][T20489] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4223'. [ 773.628663][T20507] netlink: 164 bytes leftover after parsing attributes in process `syz.4.4230'. [ 774.302912][T20526] FAULT_INJECTION: forcing a failure. [ 774.302912][T20526] name failslab, interval 1, probability 0, space 0, times 0 [ 774.341673][T20526] CPU: 1 PID: 20526 Comm: syz.3.4236 Not tainted syzkaller #0 [ 774.349187][T20526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 774.359260][T20526] Call Trace: [ 774.362560][T20526] [ 774.365513][T20526] dump_stack_lvl+0x18c/0x250 [ 774.370224][T20526] ? show_regs_print_info+0x20/0x20 [ 774.375456][T20526] ? load_image+0x420/0x420 [ 774.379986][T20526] ? __might_sleep+0xe0/0xe0 [ 774.384602][T20526] ? __lock_acquire+0x7eb0/0x7eb0 [ 774.389654][T20526] should_fail_ex+0x394/0x4c0 [ 774.394367][T20526] should_failslab+0x9/0x20 [ 774.398898][T20526] slab_pre_alloc_hook+0x59/0x300 [ 774.403953][T20526] ? d_instantiate+0x6f/0x90 [ 774.408571][T20526] kmem_cache_alloc+0x5a/0x2c0 [ 774.413364][T20526] ? alloc_empty_file+0x9e/0x1d0 [ 774.418327][T20526] alloc_empty_file+0x9e/0x1d0 [ 774.423117][T20526] alloc_file+0x5b/0x600 [ 774.427392][T20526] alloc_file_pseudo+0x184/0x210 [ 774.432361][T20526] ? fput+0x1a0/0x1a0 [ 774.436388][T20526] anon_inode_getfile+0xc5/0x1a0 [ 774.441362][T20526] __se_sys_perf_event_open+0xf37/0x1d40 [ 774.447037][T20526] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 774.452710][T20526] ? lock_chain_count+0x20/0x20 [ 774.457598][T20526] ? lockdep_hardirqs_on+0x98/0x150 [ 774.462819][T20526] ? __x64_sys_perf_event_open+0x20/0xc0 [ 774.468480][T20526] do_syscall_64+0x55/0xb0 [ 774.472925][T20526] ? clear_bhb_loop+0x40/0x90 [ 774.477619][T20526] ? clear_bhb_loop+0x40/0x90 [ 774.482320][T20526] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 774.488246][T20526] RIP: 0033:0x7f5089d9e199 [ 774.492686][T20526] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 774.512315][T20526] RSP: 002b:00007f508ad0d028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 774.520757][T20526] RAX: ffffffffffffffda RBX: 00007f508a025fa0 RCX: 00007f5089d9e199 [ 774.528756][T20526] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 00002000000010c0 [ 774.536751][T20526] RBP: 00007f508ad0d090 R08: 0000000000000000 R09: 0000000000000000 [ 774.544743][T20526] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 774.552738][T20526] R13: 00007f508a026038 R14: 00007f508a025fa0 R15: 00007ffe8da99f28 [ 774.560753][T20526] [ 774.652568][T20538] netlink: 'syz.1.4235': attribute type 2 has an invalid length. [ 774.689524][T20538] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4235'. [ 775.012996][T20547] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4240'. [ 775.572984][T20570] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.4247'. [ 775.911554][T20576] netlink: 212424 bytes leftover after parsing attributes in process `syz.1.4248'. [ 776.042796][T20579] netlink: 'syz.1.4248': attribute type 29 has an invalid length. [ 776.059701][T20581] FAULT_INJECTION: forcing a failure. [ 776.059701][T20581] name failslab, interval 1, probability 0, space 0, times 0 [ 776.096293][T20581] CPU: 0 PID: 20581 Comm: syz.3.4250 Not tainted syzkaller #0 [ 776.103830][T20581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 776.113935][T20581] Call Trace: [ 776.117260][T20581] [ 776.120250][T20581] dump_stack_lvl+0x18c/0x250 [ 776.125009][T20581] ? show_regs_print_info+0x20/0x20 [ 776.130276][T20581] ? load_image+0x420/0x420 [ 776.134852][T20581] ? __might_sleep+0xe0/0xe0 [ 776.139491][T20581] ? __lock_acquire+0x7eb0/0x7eb0 [ 776.144566][T20581] should_fail_ex+0x394/0x4c0 [ 776.149297][T20581] should_failslab+0x9/0x20 [ 776.153825][T20581] slab_pre_alloc_hook+0x59/0x300 [ 776.158898][T20581] kmem_cache_alloc+0x5a/0x2c0 [ 776.163690][T20581] ? security_file_alloc+0x34/0x120 [ 776.168938][T20581] security_file_alloc+0x34/0x120 [ 776.173999][T20581] init_file+0x94/0x1f0 [ 776.178195][T20581] alloc_empty_file+0xb7/0x1d0 [ 776.182993][T20581] alloc_file+0x5b/0x600 [ 776.187296][T20581] alloc_file_pseudo+0x184/0x210 [ 776.192275][T20581] ? fput+0x1a0/0x1a0 [ 776.196321][T20581] anon_inode_getfile+0xc5/0x1a0 [ 776.201302][T20581] __se_sys_perf_event_open+0xf37/0x1d40 [ 776.206999][T20581] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 776.212700][T20581] ? lock_chain_count+0x20/0x20 [ 776.217597][T20581] ? lockdep_hardirqs_on+0x98/0x150 [ 776.222817][T20581] ? __x64_sys_perf_event_open+0x20/0xc0 [ 776.228484][T20581] do_syscall_64+0x55/0xb0 [ 776.232922][T20581] ? clear_bhb_loop+0x40/0x90 [ 776.237635][T20581] ? clear_bhb_loop+0x40/0x90 [ 776.242352][T20581] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 776.248277][T20581] RIP: 0033:0x7f5089d9e199 [ 776.252724][T20581] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 776.272358][T20581] RSP: 002b:00007f508ad0d028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 776.280804][T20581] RAX: ffffffffffffffda RBX: 00007f508a025fa0 RCX: 00007f5089d9e199 [ 776.288797][T20581] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 00002000000010c0 [ 776.296789][T20581] RBP: 00007f508ad0d090 R08: 0000000000000000 R09: 0000000000000000 [ 776.304777][T20581] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 776.312802][T20581] R13: 00007f508a026038 R14: 00007f508a025fa0 R15: 00007ffe8da99f28 [ 776.320853][T20581] [ 776.460239][T20579] netlink: 'syz.1.4248': attribute type 29 has an invalid length. [ 777.758483][T20590] netlink: 164 bytes leftover after parsing attributes in process `syz.4.4253'. [ 777.780661][T20586] netlink: 'syz.3.4251': attribute type 2 has an invalid length. [ 777.806548][T20586] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4251'. [ 777.962201][T20602] netlink: 'syz.1.4256': attribute type 11 has an invalid length. [ 777.988075][T20602] netlink: 176 bytes leftover after parsing attributes in process `syz.1.4256'. [ 779.124485][T20620] netlink: 'syz.1.4256': attribute type 28 has an invalid length. [ 779.173040][T20620] netlink: 'syz.1.4256': attribute type 29 has an invalid length. [ 779.216829][T20624] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.4262'. [ 779.436725][T20620] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4256'. [ 779.579254][T20611] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.4259'. [ 779.655527][T20611] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.4259'. [ 779.734908][T20610] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.4259'. [ 779.824252][T20634] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.4264'. [ 779.842152][T20634] netlink: 'syz.4.4264': attribute type 29 has an invalid length. [ 779.880266][T20634] netlink: 'syz.4.4264': attribute type 29 has an invalid length. [ 779.921679][T20634] IPv6: …: Disabled Multicast RS [ 779.939532][T20636] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4265'. [ 780.141891][T20646] netlink: 'syz.2.4266': attribute type 2 has an invalid length. [ 780.157155][T20640] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4266'. [ 780.357058][T20650] ================================================================== [ 780.365179][T20650] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6c7/0x900 [ 780.372996][T20650] Write of size 72 at addr ffff88802bb98f10 by task syz.3.4271/20650 [ 780.381047][T20650] [ 780.383359][T20650] CPU: 1 PID: 20650 Comm: syz.3.4271 Not tainted syzkaller #0 [ 780.390801][T20650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 780.400852][T20650] Call Trace: [ 780.404119][T20650] [ 780.407052][T20650] dump_stack_lvl+0x18c/0x250 [ 780.411765][T20650] ? read_lock_is_recursive+0x20/0x20 [ 780.411903][T20656] netlink: 'syz.3.4271': attribute type 11 has an invalid length. [ 780.417143][T20650] ? show_regs_print_info+0x20/0x20 [ 780.417179][T20650] ? load_image+0x420/0x420 [ 780.417203][T20650] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 780.425374][T20656] netlink: 176 bytes leftover after parsing attributes in process `syz.3.4271'. [ 780.430185][T20650] ? __virt_addr_valid+0x10c/0x380 [ 780.430216][T20650] ? __virt_addr_valid+0x10c/0x380 [ 780.430239][T20650] ? __virt_addr_valid+0x10c/0x380 [ 780.430265][T20650] print_report+0xa8/0x210 [ 780.430292][T20650] ? __bpf_get_stackid+0x6c7/0x900 [ 780.474038][T20650] kasan_report+0x117/0x150 [ 780.478557][T20650] ? __bpf_get_stackid+0x6c7/0x900 [ 780.483677][T20650] kasan_check_range+0x241/0x290 [ 780.488612][T20650] ? __bpf_get_stackid+0x6c7/0x900 [ 780.493723][T20650] __asan_memcpy+0x40/0x70 [ 780.498143][T20650] __bpf_get_stackid+0x6c7/0x900 [ 780.503086][T20650] bpf_get_stackid_pe+0x343/0x410 [ 780.508115][T20650] bpf_prog_6611c23d801ea08d+0x29/0x3e [ 780.513571][T20650] bpf_overflow_handler+0x1fc/0x510 [ 780.518773][T20650] ? bpf_overflow_handler+0xde/0x510 [ 780.524059][T20650] ? tp_perf_event_destroy+0x20/0x20 [ 780.529347][T20650] ? verify_lock_unused+0x140/0x140 [ 780.534543][T20650] ? __perf_event_account_interrupt+0x187/0x280 [ 780.540779][T20650] __perf_event_overflow+0x461/0x660 [ 780.546077][T20650] perf_swevent_overflow+0x274/0x340 [ 780.551366][T20650] ? perf_event_switch_output+0x790/0x790 [ 780.557086][T20650] ? rcu_is_watching+0x15/0xb0 [ 780.561851][T20650] perf_swevent_event+0x45c/0x570 [ 780.566873][T20650] ? perf_tp_event+0x1550/0x1550 [ 780.571812][T20650] ___perf_sw_event+0x4ab/0x730 [ 780.576688][T20650] ? ___perf_sw_event+0x19e/0x730 [ 780.581732][T20650] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 780.588180][T20650] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 780.594168][T20650] ? lock_chain_count+0x20/0x20 [ 780.599021][T20650] ? perf_trace_lock+0x303/0x3b0 [ 780.603958][T20650] __perf_sw_event+0x139/0x270 [ 780.608729][T20650] do_user_addr_fault+0x1242/0x12d0 [ 780.613935][T20650] ? rcu_is_watching+0x15/0xb0 [ 780.618706][T20650] exc_page_fault+0x64/0x100 [ 780.623297][T20650] asm_exc_page_fault+0x26/0x30 [ 780.628150][T20650] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 780.633952][T20650] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 780.653555][T20650] RSP: 0018:ffffc900054077b8 EFLAGS: 00050206 [ 780.659619][T20650] RAX: ffffffff84325201 RBX: 0000000000033fe0 RCX: 0000000000032020 [ 780.667584][T20650] RDX: 0000000000000001 RSI: 0000200000002000 RDI: ffffc9000be3afc0 [ 780.675551][T20650] RBP: ffffc900054078f0 R08: ffffc9000be6cfdf R09: 1ffff920017cd9fb [ 780.683515][T20650] R10: dffffc0000000000 R11: fffff520017cd9fc R12: ffffc9000be39000 [ 780.691482][T20650] R13: 0000200000000040 R14: ffffc90005407e38 R15: 1ffff92000a80fc7 [ 780.699455][T20650] ? _copy_from_iter+0x1f1/0x1290 [ 780.704503][T20650] _copy_from_iter+0x242/0x1290 [ 780.709365][T20650] ? __rwlock_init+0x150/0x150 [ 780.714132][T20650] ? copyout_mc+0x70/0x70 [ 780.718456][T20650] ? do_raw_spin_unlock+0x121/0x230 [ 780.723656][T20650] ? _raw_spin_unlock+0x28/0x40 [ 780.728519][T20650] ? find_vmap_area+0xfc/0x110 [ 780.733292][T20650] ? __check_object_size+0x4fc/0xa40 [ 780.738578][T20650] netlink_sendmsg+0x76b/0xbf0 [ 780.743353][T20650] ? netlink_getsockopt+0x590/0x590 [ 780.748556][T20650] ? apparmor_socket_sendmsg+0x8e/0x330 [ 780.754119][T20650] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 780.759415][T20650] ? security_socket_sendmsg+0x80/0xa0 [ 780.764873][T20650] ? netlink_getsockopt+0x590/0x590 [ 780.770077][T20650] ____sys_sendmsg+0x61b/0x980 [ 780.774850][T20650] ? __asan_memset+0x22/0x40 [ 780.779443][T20650] ? __sys_sendmsg_sock+0x30/0x30 [ 780.784467][T20650] ? __import_iovec+0x5f2/0x850 [ 780.789331][T20650] ? import_iovec+0x73/0xa0 [ 780.793861][T20650] ___sys_sendmsg+0x2a6/0x360 [ 780.798544][T20650] ? __sys_sendmsg+0x2b0/0x2b0 [ 780.803338][T20650] __se_sys_sendmsg+0x1d0/0x2c0 [ 780.808206][T20650] ? __x64_sys_sendmsg+0x80/0x80 [ 780.813151][T20650] ? lockdep_hardirqs_on+0x98/0x150 [ 780.818350][T20650] do_syscall_64+0x55/0xb0 [ 780.822763][T20650] ? clear_bhb_loop+0x40/0x90 [ 780.827439][T20650] ? clear_bhb_loop+0x40/0x90 [ 780.832110][T20650] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 780.838006][T20650] RIP: 0033:0x7f5089d9e199 [ 780.842417][T20650] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 780.862017][T20650] RSP: 002b:00007f508ad0d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 780.870428][T20650] RAX: ffffffffffffffda RBX: 00007f508a025fa0 RCX: 00007f5089d9e199 [ 780.878394][T20650] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 780.886358][T20650] RBP: 00007f5089e358e0 R08: 0000000000000000 R09: 0000000000000000 [ 780.894325][T20650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 780.902291][T20650] R13: 00007f508a026038 R14: 00007f508a025fa0 R15: 00007ffe8da99f28 [ 780.910272][T20650] [ 780.913283][T20650] [ 780.915597][T20650] Allocated by task 20650: [ 780.920001][T20650] kasan_set_track+0x4e/0x70 [ 780.924587][T20650] __kasan_kmalloc+0x8f/0xa0 [ 780.929174][T20650] __kmalloc_node+0xb6/0x240 [ 780.933758][T20650] bpf_map_area_alloc+0x5e/0x110 [ 780.938696][T20650] prealloc_elems_and_freelist+0x86/0x1c0 [ 780.944413][T20650] stack_map_alloc+0x32b/0x4b0 [ 780.949172][T20650] map_create+0x877/0x12f0 [ 780.953580][T20650] __sys_bpf+0x651/0x890 [ 780.957816][T20650] __x64_sys_bpf+0x7c/0x90 [ 780.962230][T20650] do_syscall_64+0x55/0xb0 [ 780.966642][T20650] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 780.972536][T20650] [ 780.974852][T20650] Last potentially related work creation: [ 780.980554][T20650] kasan_save_stack+0x3e/0x60 [ 780.985234][T20650] __kasan_record_aux_stack+0xaf/0xc0 [ 780.990607][T20650] call_rcu+0x153/0x900 [ 780.994758][T20650] nf_unregister_net_hooks+0xcb/0x130 [ 781.000205][T20650] nf_defrag_ipv6_disable+0x95/0xe0 [ 781.005447][T20650] nf_ct_netns_put+0x375/0x520 [ 781.010235][T20650] nf_conncount_destroy+0x41/0x150 [ 781.015395][T20650] ovs_ct_exit_finish+0xa5/0x210 [ 781.020355][T20650] ovs_exit_net+0xed/0x7a0 [ 781.024802][T20650] setup_net+0x7e5/0xa20 [ 781.029038][T20650] copy_net_ns+0x361/0x530 [ 781.033449][T20650] create_new_namespaces+0x3ce/0x700 [ 781.038728][T20650] copy_namespaces+0x42a/0x4a0 [ 781.043484][T20650] copy_process+0x16f6/0x3da0 [ 781.048153][T20650] kernel_clone+0x24b/0x8a0 [ 781.052646][T20650] __x64_sys_clone+0x1b7/0x230 [ 781.057400][T20650] do_syscall_64+0x55/0xb0 [ 781.061813][T20650] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 781.067702][T20650] [ 781.070016][T20650] The buggy address belongs to the object at ffff88802bb98f00 [ 781.070016][T20650] which belongs to the cache kmalloc-cg-64 of size 64 [ 781.084147][T20650] The buggy address is located 16 bytes inside of [ 781.084147][T20650] allocated 40-byte region [ffff88802bb98f00, ffff88802bb98f28) [ 781.098109][T20650] [ 781.100426][T20650] The buggy address belongs to the physical page: [ 781.106838][T20650] page:ffffea0000aee600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2bb98 [ 781.116979][T20650] memcg:ffff88807723c201 [ 781.121205][T20650] anon flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff) [ 781.129185][T20650] page_type: 0xffffffff() [ 781.133509][T20650] raw: 00fff00000000800 ffff888017c4da00 0000000000000000 dead000000000001 [ 781.142082][T20650] raw: 0000000000000000 0000000080200020 00000001ffffffff ffff88807723c201 [ 781.150652][T20650] page dumped because: kasan: bad access detected [ 781.157060][T20650] page_owner tracks the page as allocated [ 781.162759][T20650] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 5779, tgid 5779 (syz-executor), ts 191296988309, free_ts 191296398286 [ 781.181164][T20650] post_alloc_hook+0x1c1/0x200 [ 781.185924][T20650] get_page_from_freelist+0x2181/0x22a0 [ 781.191462][T20650] __alloc_pages+0x1f0/0x460 [ 781.196042][T20650] alloc_slab_page+0x5d/0x180 [ 781.200714][T20650] new_slab+0x87/0x2d0 [ 781.204783][T20650] ___slab_alloc+0xc5c/0x12f0 [ 781.209449][T20650] __kmem_cache_alloc_node+0x11f/0x250 [ 781.214906][T20650] kmalloc_trace+0x2a/0xe0 [ 781.219339][T20650] alloc_fdtable+0xca/0x2c0 [ 781.223835][T20650] dup_fd+0x747/0xa20 [ 781.227814][T20650] copy_files+0xaf/0x110 [ 781.232048][T20650] copy_process+0x157d/0x3da0 [ 781.236716][T20650] kernel_clone+0x24b/0x8a0 [ 781.241213][T20650] __x64_sys_clone+0x1b7/0x230 [ 781.245972][T20650] do_syscall_64+0x55/0xb0 [ 781.250386][T20650] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 781.256281][T20650] page last free stack trace: [ 781.260944][T20650] free_unref_page_prepare+0x7d7/0x8f0 [ 781.266397][T20650] free_unref_page+0x32/0x2e0 [ 781.271062][T20650] vfree+0x1a7/0x340 [ 781.274951][T20650] __do_replace+0x878/0x9b0 [ 781.279446][T20650] do_ip6t_set_ctl+0xb41/0xe10 [ 781.284201][T20650] nf_setsockopt+0x263/0x280 [ 781.288787][T20650] do_sock_setsockopt+0x175/0x1a0 [ 781.293806][T20650] __x64_sys_setsockopt+0x182/0x200 [ 781.299001][T20650] do_syscall_64+0x55/0xb0 [ 781.303417][T20650] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 781.309308][T20650] [ 781.311619][T20650] Memory state around the buggy address: [ 781.317244][T20650] ffff88802bb98e00: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 781.325315][T20650] ffff88802bb98e80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 781.333373][T20650] >ffff88802bb98f00: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 781.341434][T20650] ^ [ 781.346807][T20650] ffff88802bb98f80: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 781.354866][T20650] ffff88802bb99000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 781.362918][T20650] ================================================================== [ 781.370986][T20650] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 781.378165][T20650] CPU: 1 PID: 20650 Comm: syz.3.4271 Not tainted syzkaller #0 [ 781.385618][T20650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 781.395667][T20650] Call Trace: [ 781.398940][T20650] [ 781.401866][T20650] dump_stack_lvl+0x18c/0x250 [ 781.406549][T20650] ? show_regs_print_info+0x20/0x20 [ 781.411756][T20650] ? load_image+0x420/0x420 [ 781.416289][T20650] panic+0x2ca/0x720 [ 781.420184][T20650] ? __lock_acquire+0x7eb0/0x7eb0 [ 781.425206][T20650] ? bpf_jit_dump+0xd0/0xd0 [ 781.429709][T20650] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 781.435602][T20650] ? _raw_spin_unlock+0x40/0x40 [ 781.440452][T20650] ? __bpf_get_stackid+0x6c7/0x900 [ 781.445559][T20650] check_panic_on_warn+0x84/0xa0 [ 781.450495][T20650] ? __bpf_get_stackid+0x6c7/0x900 [ 781.455602][T20650] end_report+0x6f/0x130 [ 781.459842][T20650] kasan_report+0x128/0x150 [ 781.464346][T20650] ? __bpf_get_stackid+0x6c7/0x900 [ 781.469459][T20650] kasan_check_range+0x241/0x290 [ 781.474411][T20650] ? __bpf_get_stackid+0x6c7/0x900 [ 781.479539][T20650] __asan_memcpy+0x40/0x70 [ 781.483959][T20650] __bpf_get_stackid+0x6c7/0x900 [ 781.488905][T20650] bpf_get_stackid_pe+0x343/0x410 [ 781.493932][T20650] bpf_prog_6611c23d801ea08d+0x29/0x3e [ 781.499393][T20650] bpf_overflow_handler+0x1fc/0x510 [ 781.504598][T20650] ? bpf_overflow_handler+0xde/0x510 [ 781.509884][T20650] ? tp_perf_event_destroy+0x20/0x20 [ 781.515184][T20650] ? verify_lock_unused+0x140/0x140 [ 781.520392][T20650] ? __perf_event_account_interrupt+0x187/0x280 [ 781.526630][T20650] __perf_event_overflow+0x461/0x660 [ 781.531916][T20650] perf_swevent_overflow+0x274/0x340 [ 781.537361][T20650] ? perf_event_switch_output+0x790/0x790 [ 781.543093][T20650] ? rcu_is_watching+0x15/0xb0 [ 781.547857][T20650] perf_swevent_event+0x45c/0x570 [ 781.552880][T20650] ? perf_tp_event+0x1550/0x1550 [ 781.557818][T20650] ___perf_sw_event+0x4ab/0x730 [ 781.562667][T20650] ? ___perf_sw_event+0x19e/0x730 [ 781.567687][T20650] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 781.574118][T20650] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 781.580096][T20650] ? lock_chain_count+0x20/0x20 [ 781.584943][T20650] ? perf_trace_lock+0x303/0x3b0 [ 781.589902][T20650] __perf_sw_event+0x139/0x270 [ 781.594669][T20650] do_user_addr_fault+0x1242/0x12d0 [ 781.599870][T20650] ? rcu_is_watching+0x15/0xb0 [ 781.604653][T20650] exc_page_fault+0x64/0x100 [ 781.609251][T20650] asm_exc_page_fault+0x26/0x30 [ 781.614102][T20650] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 781.619913][T20650] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 781.639524][T20650] RSP: 0018:ffffc900054077b8 EFLAGS: 00050206 [ 781.645596][T20650] RAX: ffffffff84325201 RBX: 0000000000033fe0 RCX: 0000000000032020 [ 781.653563][T20650] RDX: 0000000000000001 RSI: 0000200000002000 RDI: ffffc9000be3afc0 [ 781.661526][T20650] RBP: ffffc900054078f0 R08: ffffc9000be6cfdf R09: 1ffff920017cd9fb [ 781.669502][T20650] R10: dffffc0000000000 R11: fffff520017cd9fc R12: ffffc9000be39000 [ 781.677472][T20650] R13: 0000200000000040 R14: ffffc90005407e38 R15: 1ffff92000a80fc7 [ 781.685445][T20650] ? _copy_from_iter+0x1f1/0x1290 [ 781.690481][T20650] _copy_from_iter+0x242/0x1290 [ 781.695335][T20650] ? __rwlock_init+0x150/0x150 [ 781.700103][T20650] ? copyout_mc+0x70/0x70 [ 781.704435][T20650] ? do_raw_spin_unlock+0x121/0x230 [ 781.709656][T20650] ? _raw_spin_unlock+0x28/0x40 [ 781.714508][T20650] ? find_vmap_area+0xfc/0x110 [ 781.719358][T20650] ? __check_object_size+0x4fc/0xa40 [ 781.724660][T20650] netlink_sendmsg+0x76b/0xbf0 [ 781.729432][T20650] ? netlink_getsockopt+0x590/0x590 [ 781.734631][T20650] ? apparmor_socket_sendmsg+0x8e/0x330 [ 781.740185][T20650] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 781.745481][T20650] ? security_socket_sendmsg+0x80/0xa0 [ 781.750936][T20650] ? netlink_getsockopt+0x590/0x590 [ 781.756135][T20650] ____sys_sendmsg+0x61b/0x980 [ 781.760903][T20650] ? __asan_memset+0x22/0x40 [ 781.765497][T20650] ? __sys_sendmsg_sock+0x30/0x30 [ 781.770520][T20650] ? __import_iovec+0x5f2/0x850 [ 781.775378][T20650] ? import_iovec+0x73/0xa0 [ 781.779889][T20650] ___sys_sendmsg+0x2a6/0x360 [ 781.784574][T20650] ? __sys_sendmsg+0x2b0/0x2b0 [ 781.789368][T20650] __se_sys_sendmsg+0x1d0/0x2c0 [ 781.794219][T20650] ? __x64_sys_sendmsg+0x80/0x80 [ 781.799167][T20650] ? lockdep_hardirqs_on+0x98/0x150 [ 781.804368][T20650] do_syscall_64+0x55/0xb0 [ 781.808786][T20650] ? clear_bhb_loop+0x40/0x90 [ 781.813454][T20650] ? clear_bhb_loop+0x40/0x90 [ 781.818125][T20650] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 781.824024][T20650] RIP: 0033:0x7f5089d9e199 [ 781.828433][T20650] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 781.848038][T20650] RSP: 002b:00007f508ad0d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 781.856448][T20650] RAX: ffffffffffffffda RBX: 00007f508a025fa0 RCX: 00007f5089d9e199 [ 781.864415][T20650] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 781.872376][T20650] RBP: 00007f5089e358e0 R08: 0000000000000000 R09: 0000000000000000 [ 781.880339][T20650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 781.888299][T20650] R13: 00007f508a026038 R14: 00007f508a025fa0 R15: 00007ffe8da99f28 [ 781.896274][T20650] [ 781.899544][T20650] Kernel Offset: disabled [ 781.903858][T20650] Rebooting in 86400 seconds..