last executing test programs: 29.106036443s ago: executing program 2 (id=3308): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x3, 0xc, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x180, 0x4, 0x28}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xcb13119f635c50e1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r4}, 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r4}, 0xc) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8102032908000000000000000000ff0000ac14140a000000000000000000000000ac1414aa"], 0xfdef) close(0x3) 27.906822381s ago: executing program 4 (id=3320): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffffffffd98, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000029008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 27.704577596s ago: executing program 2 (id=3313): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x18000000000002a0, 0xe, 0x28, &(0x7f0000000000)="06ff03076844babeb89e14f086dd", 0x0, 0xfffffffc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 27.558199542s ago: executing program 4 (id=3314): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x2000300, 0xe, 0x0, &(0x7f0000000280)="63eced8e46010000312001acf12a", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc000000}, 0x50) 27.557721792s ago: executing program 1 (id=3315): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000f000000850000001500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0xfeff, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0xfdef) recvmsg(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/165, 0xa5}], 0x1}, 0x20) 27.464961746s ago: executing program 0 (id=3316): socket$kcm(0xa, 0x2, 0x73) perf_event_open$cgroup(&(0x7f0000000040)={0x4, 0x80, 0xb2, 0xe0, 0x3, 0xb, 0x0, 0x9, 0x1c440, 0x9, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x405, 0x2, @perf_config_ext={0x1000, 0x6ba3b737}, 0x100708, 0x8, 0x2, 0x8, 0x10001, 0x6, 0xdb7d, 0x0, 0x7, 0x0, 0x8000}, 0xffffffffffffffff, 0x400000000004, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f00000001c0), 0x6}, 0x2805, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0200000004000000060000000500000000100000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000c6c6d63746d4718199e27e846890350a4dd2e99a28a4c4a4229d4aa68f1e2cb03aa1a6c16ec5869d8c1f721d6269c9bbba01cf9c7a2bdb8539344783e4327d13f6a8608c78125858a66b2c1566a601a87acd39420000bf85f0ce795aa0e1bfc07979b4a27b8422b00c8527d2cbc65414e9ff9278", @ANYRES32, @ANYBLOB='\x00'/11], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r3}, 0xc) r4 = openat$cgroup_int(r1, 0x0, 0x2, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000100)=ANY=[]) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000400110000000a600e41b0000900ac00060411000000040012000a0003150248035c3b61c1d67f6f94207134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f900000000e32cfa8af26c8b7b55f4d2a6823a45f2", 0xd8}], 0x1}, 0x0) write$cgroup_subtree(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB='8-N:0/2'], 0x6a) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r6, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r6, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b8825fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b4", 0x27}], 0x1}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003680)={0x0, 0x0, 0x0, 0x0, &(0x7f00000036c0)=ANY=[], 0x2128}, 0x20000804) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @multicast}) 27.25406205s ago: executing program 4 (id=3318): socket$kcm(0x2, 0x3, 0x2) socket$kcm(0xa, 0x922000000003, 0x11) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x10, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x1c092, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0xb3e, 0xfffffffffffffff8}, 0x840, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x12, &(0x7f00000001c0), 0x4) socket$kcm(0x10, 0x3, 0x10) sendmsg$inet(r0, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmsg$unix(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x5605}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 27.172480177s ago: executing program 1 (id=3319): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$kcm(r2, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x4008041) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x7400}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x1ff}, 0x100c, 0x7, 0x0, 0x2, 0x0, 0x7, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) close(0xffffffffffffffff) 27.084980242s ago: executing program 3 (id=3321): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_config_ext={0x81, 0x69}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x204}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfffffffffffffc4a) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x5460, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f0, &(0x7f0000000080)) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socketpair(0x1, 0x3, 0x3, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000004440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000090}, 0x4040000) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="09000000040000000c0000000b"], 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0600000004002200080000000f00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r6}, 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={r4, 0x58, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c4, 0x1c4, 0x5, [@union={0x10, 0x6, 0x0, 0x5, 0x1, 0x2, [{0x7, 0x0, 0x939}, {0xb, 0x1, 0x401}, {0x3, 0x5, 0x7d}, {0x3, 0x6, 0x1}, {0xf, 0x4, 0xf}, {0x8, 0x5, 0x2}]}, @func_proto={0x0, 0x9, 0x0, 0xd, 0x0, [{0x3, 0x3}, {0x3, 0x4}, {0x3, 0x4}, {0xe, 0x1}, {0xc, 0x2}, {0x8, 0x4}, {0xa, 0x1}, {0xb, 0x4}, {0x1, 0x4}]}, @restrict={0xe, 0x0, 0x0, 0xb, 0x1}, @ptr={0xe, 0x0, 0x0, 0x2, 0x1}, @const={0xc, 0x0, 0x0, 0xa, 0x2}, @struct={0x2, 0x5, 0x0, 0x4, 0x1, 0xfffffffa, [{0xf, 0x4, 0x32}, {0xd, 0x0, 0x7f}, {0x10, 0x0, 0x7ff}, {0x2, 0x0, 0xbd7}, {0xf, 0x5, 0x7fffffff}]}, @typedef={0xa, 0x0, 0x0, 0x8, 0x5}, @struct={0xf, 0x7, 0x0, 0x4, 0x1, 0x81, [{0x6, 0x2, 0x7}, {0xb, 0x4, 0x2}, {0x4, 0x2, 0x5}, {0x7, 0x4, 0x40}, {0x1, 0x1, 0x4}, {0x0, 0x1, 0x8188}, {0xc, 0x2, 0xdb35}]}, @enum={0xe, 0x7, 0x0, 0x6, 0x4, [{0x2, 0x3}, {0xe, 0x3}, {0xf, 0xa0000000}, {0xa, 0x9}, {0x8, 0x2}, {0x2}, {0x10}]}]}, {0x0, [0x61, 0x2e, 0x5f]}}, &(0x7f0000000900)=""/97, 0x1e1, 0x61, 0x0, 0xfffff0d8, 0x10000}, 0x28) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b00)={{r5, 0xffffffffffffffff}, &(0x7f0000000a80), &(0x7f0000000ac0)=r6}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c40)={0x6, 0x16, &(0x7f0000000500)=ANY=[@ANYBLOB="85100000fcffffff185500000600000000000000000000001869000007000000000000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000000000008500000086000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000600000085000000060000008510000003000000181a0000", @ANYRES32=r6, @ANYBLOB="0008000010000000180000080000000000000000070071c5"], &(0x7f0000000440)='GPL\x00', 0x9, 0x1d, &(0x7f00000005c0)=""/29, 0x41100, 0x20, '\x00', r7, 0x25, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a40)={0x5, 0x0, 0x8, 0x9}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000b40)=[r5, r5, r9, r4, r4, r5, r5], &(0x7f0000000b80)=[{0x5, 0x1, 0x2, 0x4}, {0x2, 0x2, 0x5, 0x5}, {0x2, 0x5, 0xf, 0xb}, {0x383, 0x4, 0x7}, {0x5, 0x2, 0x9}, {0x0, 0x5, 0xf, 0x7}, {0x4, 0x2, 0x8, 0x4}, {0x3, 0x3, 0xb, 0xc}, {0x2, 0x5, 0x9, 0x8}], 0x10, 0xffffffff}, 0x94) 27.046648046s ago: executing program 0 (id=3322): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0xfffffffffffffffc, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000001c0), 0x12) r3 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000005c0)=r3, 0x12) r6 = openat$cgroup_ro(r4, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x1, 0x12) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000000c0)='THAWED\x00', 0x7) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x7fffffff, 0xc29a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="180000003a000b12d25a80648c2594f90424fc60100c0340", 0x18}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4b04}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0x1fffffffffffffcd, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$LINK_DETACH(0x22, 0x0, 0x0) 24.317166195s ago: executing program 3 (id=3323): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x3, 0xc, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x180, 0x4, 0x28}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xcb13119f635c50e1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r4}, 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r4}, 0xc) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8102032908000000000000000000ff0000ac14140a000000000000000000000000ac1414aa"], 0xfdef) close(0x3) 24.203255046s ago: executing program 4 (id=3324): r0 = socket$kcm(0xa, 0x5, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r2}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000080)={'nicvf0\x00', 0x400}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000001c0)={r0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r1, 0x58, &(0x7f00000000c0)}, 0x10) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum64={0x2, 0x0, 0x0, 0x13, 0x0, 0x4}]}, {0x0, [0x5f, 0x5f]}}, &(0x7f0000001980)=""/4096, 0x28, 0x1000, 0x1}, 0x28) bpf$MAP_CREATE(0x2000000000000000, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xe2115aaaaef6dd8a, 0x0) close(r4) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r4, 0x40107447, &(0x7f0000000180)) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@generic={&(0x7f00000001c0)='./file0\x00'}, 0x18) ioctl$TUNSETOFFLOAD(r6, 0x4004743d, 0x110e22fff6) write$cgroup_type(r6, &(0x7f0000000280), 0x9) 24.160893119s ago: executing program 1 (id=3325): r0 = socket$kcm(0xa, 0x2, 0x3a) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4, @perf_config_ext={0x8, 0x7f}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, &(0x7f0000000000)=[{0x0, 0x2}], 0x1}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2000) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, 0x0, 0x48280, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x5, 0xb, 0x8000, 0x4}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, r3}, 0x38) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0x58, &(0x7f0000000440)}, 0x10) sendmsg$inet(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000680)="f1272aaf0d5f54b597f1f44fe64bf43432e74b0ccd40f27a48d957c0cc9f7d8ff2408a4675a28e56c8d90a329f93979b45aa6958e2a4a4b2d661f6a333bdee0be285e064b0a8d450e88cd7ff45eb172961c9b7508c342ee666cb79dcbb83a17ca5c82dacd3b89d060bb2d3dad819253d71fa0eac891986ff94121cfc4659569cbd648128ac63440fd5ce7d8816", 0x8d}, {&(0x7f0000000280)}, {&(0x7f0000000880)="b1ea64e9f496e7c7b70576f4361af18d2edc2d4a21ee6578b452dfdec752e0fa690396c3cf43636bf74bfcbdce88917283a6d3919fccbe082c8e8fcffa71a1a888bc2a4cd1c8bcb9dcdf02e800e8f8058c704db76d3c671ae6b5ed2edf916c917f1a6eb594b11bf0ab977f505b96daf47d6b9baa22649fae51513cb172b37b31405578e45f29bb7357c715f882e250649c2904484ae4a851db291474c0ea531f39dcacafc8", 0xa5}, {&(0x7f0000000a40)="d9b85badd63033d7a328bd57de582806d9820f33896dfd9a6d7131f0d37f63a4a326cf6fcc28cfbd61518a7689e5655a39f0e783e84f398cbe6569948f68479a6d57e6caacf04b15ddfad7a2aa70f91efe8512a4aa5615498a8d48b876d5e87d2cbf52037ced95d091c2abd58cad0bbfecb80c7ea1ef01c194300ed0f6c86546e7e322545ce4492b2ebc6c51465a89db1ca9cdbba3d212567889752f81d0615b7a61ae6597e738cd6c6ea5ac33ce98066ea58c6faf2b83d84b48279656a44f9cd27e2f", 0xc3}], 0x4, &(0x7f0000000940)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_ttl={{0x14, 0x0, 0x2, 0x10000}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3d}}], 0x48}, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x1c, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000079000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x2, 0xf7, &(0x7f0000001e40)=""/4093}, 0x21) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000c80), 0x1}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000240)={r0}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80}, 0x0, 0x0, 0xffffffff, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r5}, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) write$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000c40)=@generic={0x0}, 0x18) r6 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001e00810ce00f80ecdb4cb9f207c804a00d000000010006fb0a0002000a0ada1b40d80500c500c50083", 0x2d}], 0x1, 0x0, 0x0, 0x5865}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000e50000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001e334185850000007300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x39}}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0d00000000eafff809e3fffff09780a33eca0000"], 0x18}, 0xfc00) 24.054202401s ago: executing program 0 (id=3326): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$kcm(0xa, 0x2, 0x88) write$cgroup_subtree(r0, 0x0, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x5411, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000)=r4, 0x10) sendmsg$inet(r1, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @private=0xa010101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000001940)='{', 0x1}], 0x1}, 0x80d1) sendmsg$inet(r1, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f00000000c0)='{', 0x1}], 0x1, 0x0, 0xf5}, 0x480d1) 24.032066557s ago: executing program 2 (id=3327): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000002c00)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000300000000020000000200000000000000000000000000000105da73a240000000000000000000"], 0x0, 0x4e}, 0x28) socket$kcm(0x2, 0x3, 0x106) socket$kcm(0x2, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1900000004000000040000000900000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000739d0800000000000000003500"/38], 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000f80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000700014002020c600e41b0000900ac000a05010000001600120002000000000000003b61c1d67f6f94007134cf01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a4500"/216, 0xd8}], 0x1}, 0x40080) r0 = socket$kcm(0x23, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x4) sendmsg$kcm(r0, &(0x7f00000003c0)={&(0x7f0000000000)=@phonet, 0x80, 0x0}, 0x0) 23.869770559s ago: executing program 3 (id=3328): socket$kcm(0x21, 0x2, 0x2) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/16], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f0000000040)=0x700, 0x0}, 0x20) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) close(0xffffffffffffffff) 23.681901677s ago: executing program 0 (id=3329): write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x4, 0x4, 0xf, 0x0, 0x1, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x2, 0x1, 0x84) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r5, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r7}, 0xc) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r8 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r8, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380)}], 0x1, &(0x7f0000007880)=[@ip_tos_u8={{0x11, 0x34000}}, @ip_pktinfo={{0x1c, 0x28f0700, 0x8, {0x0, @empty=0xa0050000}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x88}]}}}, @ip_tos_u8={{0x11}}], 0x68}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r9, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000680)=""/140, 0x8c}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x40000004) sendmsg$tipc(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="b8d3d8e48974aae5039847936746be1d81a34f9b68100dbf05177b2436f9d642df271fd6b9aa6701365ffc72380000000001000000fcf2fbb053e277a04d3f44e3f9bafec64080f64f103ee1de769e5e9dd8cbb68869a662eaad499c52a16f40cb3a1f6f3d5f8df14c53b2e6b5397f7806b6ff846de37a34c8342b9ac5a51eacf8a09cede8676044eafd3d7935f906", 0x8f}, {&(0x7f0000000840)="8d03cab9cbe923", 0x7}], 0x2}, 0x0) close(r10) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000000)="b9e403c6631e39495aa05dc7cf1c", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 23.598002283s ago: executing program 4 (id=3330): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f0000000040)=0x700, 0x0}, 0x20) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 23.319287836s ago: executing program 3 (id=3331): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x3, 0xc, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x180, 0x4, 0x28}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xcb13119f635c50e1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r4}, 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r4}, 0xc) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8102032908000000000000000000ff0000ac14140a000000000000000000000000ac1414aa"], 0xfdef) close(0x3) 23.241817054s ago: executing program 1 (id=3332): socket$kcm(0xa, 0x2, 0x73) perf_event_open$cgroup(&(0x7f0000000040)={0x4, 0x80, 0xb2, 0xe0, 0x3, 0xb, 0x0, 0x9, 0x1c440, 0x9, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x405, 0x2, @perf_config_ext={0x1000, 0x6ba3b737}, 0x100708, 0x8, 0x2, 0x8, 0x10001, 0x6, 0xdb7d, 0x0, 0x7, 0x0, 0x8000}, 0xffffffffffffffff, 0x400000000004, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f00000001c0), 0x6}, 0x2805, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0200000004000000060000000500000000100000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000c6c6d63746d4718199e27e846890350a4dd2e99a28a4c4a4229d4aa68f1e2cb03aa1a6c16ec5869d8c1f721d6269c9bbba01cf9c7a2bdb8539344783e4327d13f6a8608c78125858a66b2c1566a601a87acd39420000bf85f0ce795aa0e1bfc07979b4a27b8422b00c8527d2cbc65414e9ff9278", @ANYRES32, @ANYBLOB='\x00'/11], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r3}, 0xc) r4 = openat$cgroup_int(r1, 0x0, 0x2, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000100)=ANY=[]) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000400110000000a600e41b0000900ac00060411000000040012000a0003150248035c3b61c1d67f6f94207134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f900000000e32cfa8af26c8b7b55f4d2a6823a45f2", 0xd8}], 0x1}, 0x0) write$cgroup_subtree(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB='8-N:0/2'], 0x6a) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r6, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r6, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b8825fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b4", 0x27}], 0x1}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003680)={0x0, 0x0, 0x0, 0x0, &(0x7f00000036c0)=ANY=[], 0x2128}, 0x20000804) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @multicast}) 23.193387495s ago: executing program 2 (id=3333): r0 = socket$kcm(0xa, 0x5, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r2}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000080)={'nicvf0\x00', 0x400}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000001c0)={r0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r1, 0x58, &(0x7f00000000c0)}, 0x10) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) bpf$MAP_CREATE(0x2000000000000000, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xe2115aaaaef6dd8a, 0x0) close(r4) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r4, 0x40107447, &(0x7f0000000180)) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@generic={&(0x7f00000001c0)='./file0\x00'}, 0x18) ioctl$TUNSETOFFLOAD(r6, 0x4004743d, 0x110e22fff6) write$cgroup_type(r6, &(0x7f0000000280), 0x9) 23.075528616s ago: executing program 3 (id=3334): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xdf, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x2, @perf_config_ext={0x408003, 0x1}, 0x14105, 0x32, 0xfffffbff, 0x0, 0x6, 0x0, 0xffda, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000140)='ns/mnt\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}, 0x14002) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000540)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB='1,1'], 0x31) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x1, &(0x7f00000001c0)=@raw=[@call={0x85, 0x0, 0x0, 0x63}], &(0x7f0000000240)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x3e, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x0, 0xd, 0x9, 0x91}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[r3, r2], &(0x7f0000000300)=[{0x0, 0x5, 0xe, 0x1}], 0x10, 0x101}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) r6 = socket$kcm(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000010007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r6, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x600) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) perf_event_open$cgroup(&(0x7f0000000040)={0x0, 0x80, 0xf8, 0x4, 0x2, 0x4, 0x0, 0x2, 0x8, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb3c, 0x2, @perf_bp={&(0x7f0000000000), 0x4}, 0x800, 0x6, 0xfffff58a, 0x1, 0x1, 0x0, 0x8, 0x0, 0x1}, r7, 0xb, r8, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="61122c00000000006113140000000000bf1000000000000025000200091b00003d030100000000008701000000000000bc26000000000000bf67000000000000150300000ee600f0670200001400000015030000ffffffffbf050000000000000f650000000000006507f4ff02000400070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d56825c4bf261d1ec069e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe70305863f970eac3510ac99b798f8125f1c322c2a154a8a8d"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 23.022153836s ago: executing program 0 (id=3335): socket$kcm(0x2, 0x3, 0x2) socket$kcm(0xa, 0x922000000003, 0x11) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x10, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x1c092, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0xb3e, 0xfffffffffffffff8}, 0x840, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x12, &(0x7f00000001c0), 0x4) socket$kcm(0x10, 0x3, 0x10) sendmsg$inet(r0, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmsg$unix(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x5605}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 22.904780067s ago: executing program 1 (id=3336): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$kcm(r2, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x4008041) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x7400}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x1ff}, 0x100c, 0x7, 0x0, 0x2, 0x0, 0x7, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) close(0xffffffffffffffff) 19.981910343s ago: executing program 1 (id=3337): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="160000000000000004000000ff00000094000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYBLOB="000000000000000000000061c6e1fdb1d79ba5"], 0x48) sendmsg$kcm(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000001c0)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a19c9d8714060014000000000508000a0043000040a80012001200014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d765dd11683296b7947968c7c0b7a196e6f661", 0x6e}, {&(0x7f0000000140)="aa581ff83dac4a519b67538bfa897e210c31e1446808358248cf2d795634b12c4ce81c3876aff89235b78ea0e5c5badfa122797d62c09ada7441b4f31cd5e6fc4b2a325fb5e811fead55530751e6f4bc4b40d94743ed5bd8ec1fff7b0abcc6eaabeb7a2f5f985467a8db", 0x6a}], 0x2}, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001740)={@fallback=r3, 0x34, 0x0, 0x5, &(0x7f0000001640), 0x0, 0x0, &(0x7f0000001680), 0x0, &(0x7f0000001700)}, 0x40) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000740)=@generic={&(0x7f0000000700)='./file0\x00', 0x0, 0x8}, 0x18) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f97e24fc6004030e000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x74000000}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001580)={0x18, 0xc, &(0x7f00000013c0)=ANY=[@ANYBLOB="180000000200000000000000080000000c910c00080000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000400000087000000060000009500000000000000"], &(0x7f0000001440)='syzkaller\x00', 0x7d3, 0x7, &(0x7f0000001480)=""/7, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000014c0)={0x2, 0x5, 0x6474, 0xfffffffd}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000001500)=[0x1], &(0x7f0000001540)=[{0x2, 0x3, 0x9, 0x6}, {0x5, 0x2, 0xf, 0x8}, {0xef, 0x5, 0x8, 0xa}], 0x10, 0xc2d1}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000540)={@fallback=r6, r3, 0x4, 0x0, r4, @void, @value=r7}, 0x20) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x400}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x4}, 0x0, 0x3, r1, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r8, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1ff8d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002706870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a83984e68a6d80a5f5222ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0007000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1f6428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e1700000000000000000a034000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1ebbb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa5210b16eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1c, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) r10 = socket$kcm(0x2, 0x922000000004, 0x106) setsockopt$sock_attach_bpf(r10, 0x29, 0x46, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x18000000000002a0, 0xdc, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f086dd47e0ffff00122c00631177fbac141416e000030a44079f034d2f87e589ca6aab845013f2325f1a3987050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a22", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0}, 0x50) 19.981159413s ago: executing program 4 (id=3338): ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x15) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd, 0x40000000}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1bff11000000b605e2670b8ae9ebed97", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x50) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, &(0x7f0000000500), 0x4) socketpair(0x1, 0x20000000000001, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)=@caif=@dgm={0x25, 0x1a}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000080)='r', 0x1}], 0x1}, 0x48004) r2 = syz_clone(0x8000, &(0x7f00000001c0)="7198202e8499f3d4edbed2ee146583e7fe968794b30b7f178d48c1c20facd9d88a22cb4bf67da53510560b7115dacb43864db1600b0048bec1b8b7a26b751ec947fceed4ddd9cbf9005ea3a26fc3d4111744fe62ce52523ca0c3489739fab1d0f8f994360e9de5ce5501826363493dace2f1e6c6583c3370de160f018870414ff7610aca4abb3ce17bc047e9a2a7fad51cbf2422d4d3150edc5f93cb8af55fdb7347ef1fd7026c684b98efc41d2aa5874a7963db670c7dcd68f72fe4f12e45dd7bd31481f7d4aadc17d1459275051783da0fd5bd4c9aac4342a10e1ee5f5db7f7abd32", 0xe3, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x9}, r2, 0xf, 0xffffffffffffffff, 0xb) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000400)='syz0\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r4, &(0x7f0000000440), 0x2, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x50000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000840)='ns/mnt\x00') r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRESDEC=r4, @ANYBLOB='\x00'/20, @ANYRES32=r3, @ANYRES32=0x0, @ANYRES16=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180600000000040000000000000000", @ANYRES32=r5, @ANYBLOB], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0xa, 0x5, 0x0) r6 = socket$kcm(0xa, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="9beb01031800000000000000000000008000000002"], 0x0, 0x1a}, 0x28) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x8916, &(0x7f0000000000)={r6}) 19.972941112s ago: executing program 0 (id=3339): r0 = socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x5, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000080000000000000064ffec850000007d000000040000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r2, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001440)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0x8, 0x0, 0xfffffffffffffffd}}, 0x10) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x1, &(0x7f0000000000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x1}], 0x0, 0x446, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9aa, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x2037, 0xc8}, 0x0, 0xc, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r6, 0x0, 0x0) r7 = socket$kcm(0x2, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000280)={&(0x7f0000000300)={0x2, 0x4e1f, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_retopts={{0x10}}], 0x10, 0x5}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x13, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bd7dbace8b5be30759339ef4a106000000000027010000f8ffffffb702000008000000b703000000000000850000000500000018010000202070250000000000202020db1af8ff41000000bca100000000000007010000f8ffffffb702000008000000b7f8b74caeacd69bc0142185e3bcb87f030000000000008500000005"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@struct={0x1}]}, {0x0, [0x61, 0x2e, 0x30, 0x30, 0x2e]}}, &(0x7f0000000040)=""/247, 0x2b, 0xf7, 0x1}, 0x28) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, r4, 0x5, 0x5, 0x2}, 0x50) 19.96082038s ago: executing program 3 (id=3340): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080207000000040000a118000200e000000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) (fail_nth: 4) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x6, 0x4, 0x599, 0xa, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x0, &(0x7f0000000480), 0x0, 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa2}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'vxcan1\x00', @remote}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0, 0x20000000}, 0x200000c0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f375ffff86dd6317ce62070000000000000000431ccaf57b00000000000000000104"], 0xfe1b) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 19.152319893s ago: executing program 2 (id=3341): socket$kcm(0x21, 0x2, 0x2) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) close(0xffffffffffffffff) 16.41001065s ago: executing program 2 (id=3342): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x0, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) socket$kcm(0xa, 0x2, 0x88) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d004892e822a6abc02ad2602a5ad6f7007ea60864160af365935cfaea3f49d8df1931a0e64ffc4c78029ee517d34460bc06000000938037e70e457ae2bb24ef6697070000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000240)=""/190, 0xbe}, {&(0x7f0000000380)=""/113, 0x71}, {&(0x7f0000000900)=""/123, 0x7b}, {&(0x7f00000020c0)=""/4096, 0x107b}, {&(0x7f00000000c0)=""/172, 0xac}], 0x5}, 0x40010022) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0xe, 0x40, 0x3, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000040), 0x1003, r1}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r1, &(0x7f0000000300), 0x0}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x5, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r4, &(0x7f00000001c0), 0x0}, 0x20) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) 4.885880285s ago: executing program 32 (id=3339): r0 = socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x5, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000080000000000000064ffec850000007d000000040000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r2, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001440)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0x8, 0x0, 0xfffffffffffffffd}}, 0x10) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x1, &(0x7f0000000000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x1}], 0x0, 0x446, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9aa, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x2037, 0xc8}, 0x0, 0xc, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r6, 0x0, 0x0) r7 = socket$kcm(0x2, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000280)={&(0x7f0000000300)={0x2, 0x4e1f, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_retopts={{0x10}}], 0x10, 0x5}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x13, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bd7dbace8b5be30759339ef4a106000000000027010000f8ffffffb702000008000000b703000000000000850000000500000018010000202070250000000000202020db1af8ff41000000bca100000000000007010000f8ffffffb702000008000000b7f8b74caeacd69bc0142185e3bcb87f030000000000008500000005"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@struct={0x1}]}, {0x0, [0x61, 0x2e, 0x30, 0x30, 0x2e]}}, &(0x7f0000000040)=""/247, 0x2b, 0xf7, 0x1}, 0x28) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, r4, 0x5, 0x5, 0x2}, 0x50) 4.698297443s ago: executing program 33 (id=3337): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="160000000000000004000000ff00000094000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="c12fc0693cb2ae1523baea2f7689981d159f16e0effa2b99db12f796a35bec20a9d0604d39379846be5f71d7ea2e3df2d0d98a5755f95a70392aef674c661bd76c196796799779836f6668f897917e1dd86db9e1d2dc0f5c3501eecef5a8845dfdb14227ed9e4c0812b23dfb602c2abcb96b9bd6429390789fe8ef67b3a8a188d9184b0c6f0ce4367b1eeb60578cb90f8d8ccd86ac29d9a9c7f63e623503cd230704efe97018963b03ada0eb0a2ad58fdfb8c3bfa9874729749eef724550742e593819c4f5359fe3c626e8a3e6b3d4b5ae2ffed34894d755699663f4a425bc1e983cb2addf70b3b7ce4cba849b23689150e8e42d5ef6a48ab4c06fcf0974bd2f3dd73c373ccfac648fd33d4352236b2a3915f9c09486b0745085ef2547d1953a2ec1e49bce82e3526867c1962fbdcd698c359cf8e7b93229f0eabdde0c65c7fb263f85f002601bf0a9066c2dadc62e1b4048739dde5dc5a32404db713c3fded08e9e0260f0ea0950d29187c0cc53420950883044c67887fcfaf54b178281a17eab1b4330dd79591ce96ee952d1daa34d03fc86ad9de2f398c8d673f72c99cade8d2612285161a66039ca882892089dba7f2cf80bf94390492ca593e42b728df773e83733af131a7a192868db4b5bcc43df52ca51212ce4f1ade8323c9a76e036c2e258f02d708242c01e349da2bc512c39f2ad20c3389a0aa963cc6ffd6fa5d10d6df51ba5553e5634b0f7a20d99af156f1295963b61f622429a65faf23486b8c8b1a302fcaa9ad948ed2e863332fc1c6bf1629c8a862a5bbc76d273e83a1a968c8b1a6e45393d00c20cad832e61ad15e6ed46865d94dd4b974848f1d3acbbf04b01b2b0508d72e95d0f3451fad55cf370a47ff15b1b83e563ca282b1bb974ebdab0d66a7b5ebf465b6bcd3646c07471573673992937ea9247d8d535b8ecb110676a92ff44176663ff30cf0a88abb7a34b4607e40560bedc6127997ed117659b6cc154e6aa454ca3fb6aa0f310562e46620fbf7ac73f8bba63088f1c83ece3a65b2a5f395e06635f0f98498ac854856ec29068041a071a4a38ff8169a06fe0593028dc1e3859749eb74a4fd79ad2fe858ad12c9fa2ed7fb2f423233df281c8084e88d78acbda44bc492b3d4badc7e934e8c784ec96d4ff046fabe2d2acf05194591d9f420d3e3ef9a777fa6e9651cb6b7e70b97864eac3f2c031dcb6f8eb90eaec2324835509f86c1ed48c9a143fd6f50544c146370102c36e4d347c22900f8bb5543f4d733f6eec4d256157e9e822002176a9bd23ae88b030184ad99c0dbc9bb1dc2776f945289498b30683fce708f258db08715c0aba8b68daa10c49677c45424da7f8cf0fb1916ee9e766d21320b6249c061b5f3141469847812375b2d4da62a6409cf3205c75284d5b61f7273ae7a2e2d8fc1c529f2b36838f752392321395d4b8b966c0675315c12813713e295f862934d561c9a2a1434a2e7b4927ca726dc204dcb2bd6899da5dfe6e98bfc4a75a18daf8b7afccf1a57b67d8c18efeac1641b8b25c1916bf23a449848ffd1c8a87063e627aa748e75c74e7f7dd3c22d9d8748c5ecea240f8a3b8d4e950a701fffc81b960e44c2c3b0784cf7fce9af89fa6a947bef0d2da4ab09dd468af1eac7b7d18f1cad49e9a2b6220984991037fae8c3ce4eef761ae4abcde9c793a4922a288f862840ad790c0dce1a4da2fb8d754f30b8b59fecff3189a9c2c9ce2a65beceac13f021453f5145b9615031f46fffa66fa07827a1e789cb2657dc7e4e9232b11d53f69d4deb2a34dfd83144da837a15235e11d1482b59e5b058d1821db367e5a9cb9be19259dc97aae3ff92bd7da9621db0fde1bad6c9e0be43d3ed1786e2c822d3ccc1c3e77cba26a79825a7c6620d2b95238ff1a0fdc8aee052f2c47fdc03c7e46d2ba76644fbfa50ee9f370564db2632476bcee45ff31ac4b81cadcc1acaa05132e4b4e55351bc6f5c76b18b04f88d40b853b2808766645cf7c47b8cfe1662b95de92efd74af6936f805900b206991c5afe08139742a25d8e2f9a5d6efd1f45b549d8bb546f7b99949464cb330ec5ad7bb88e0343af95697bb91906addd98b551c35a01926266cf194e2df2321040290fb2418240423abcedfeec414720710fb82a3002cea8b5fc3f19d4a084d507394b38affc724b5754807ffb569b907c5ba63e27ce0d1d79fd12d77f9d2078cc019589cdcbb60bb36214120c4c8dfe3328f66f105cf404e58d07b3f0a553d1d3c2c930ec78b39f18fdcc70a995630802aab66e8b9e45455f1a6429c25e5a9295f538ac9221ca7910e7b87f271dcfdd77e738863f5f8f894a5f2795a9944e2f6eaee1c6ecb3e730921a348d862fc00b6862ccc334071aadf2ce1d910a4565e5221fdef1f8a9affaee3f17ff7d768a390cd77ed4a651fbf4b689556c6cbc374771aba484ec19b3f7274f82e53c65cb30907f0d6004ba3e4b3364e84a5412a65386e0744195354b43ff3a37c86dd96daf2931f4e451dbada363d2067f026bf0d35d55feaf8bdf4c8b8652767a62f7430dce69bd55103fbd4f2dfb2eb037d3aa8f9b08b5a50e1be7a8baa599f47dda890a390b03a9ddc3df11a1c86534590c47f4f93aaa708d88f9a66a6255ec9c14d065a6122c9d0e9f1c019d9b121a19e036b53de4c8caf0403ca04bec328504f8ddb52f4fb451d130eb452850e1e45701b4f1b887c55334acfd9b6d889ef80d18c0d05caa7afd05647f8a9b0b9c8f09ec5093c5bb9acbdd44e3a49cf7fd4ad90806a16468f198685cf86e9ffc290b6fd4c33d9d314e3bc3ec502ca0020b1f482d69e14c85daefd2414ecfbd1d16edfeecb553049c0448890d31a49003e02f0323f40c7f1bbe06316c7f42d66fba91c820df06cb832ffdf7e81e5000f101a0dd70681019129ed66adf4fc7241be6da45960609ba4a224c5954ee52b8a9b548b6e5b04344eccb0fa6a17d4e77d3f4c6e6b0ebc93449be442b1d051ace8fc75175a02cb803b164db725b31afa3aa7b2a8c21ead89ef14bdb9a81eb73551d1b0d70b470b210e422ef99fe5eb69e5dc3b2222570a9b6c4d9821c883b9ea73d62ed30e500e719aef6d5b028b1e228753b8f9e61e9939326db6776b9049887677c45246df5523e7c29266a238942be0021c0a8349a9c979c1584b933d60956587c50293fb13b24d6b78e9a53759a8cc797b4b3975dd8902d4bc7a3ba71e0e9f2ab9d1dbff81eb5d15f3950a3ba2372ad94eb756809162c5d0db7afe1676d82ee6e3807535aecde4a58d54ef2ddd5da555e6d5d14b7dabbbd968aef1dd77617a701224010c79688c8aa2707979f22b6a0f3095a5c393723b82e6145f2e47d88af9c62a0545f15fa292d0f20d9c068ecd40fc9bc66738a0e0161f0bbbee7b8011924de21d02eb9425c475b1b57d0186f83ce53e11a440cbbc589310b81a7185c3752418dac30aab4ba6db645fc99dd670d71bcf977d9f921c41e835daace1b457d61d7a36fc68fa6bfc3e90793baa1339a8196265a22333606471a66a6c4d52ff18526b886e9c9eb4beee7b4a478ff5a373dd352dd306ac2e929ec3a97efe3222bc0a4cc7468ba830b2b502b22440cec8681b58a6e52bdd9509d3d7d3448561b70f76ef47b0a6e7f1df57514a8500769abf9dd0dcb90f71e2c851cc19f1f7dd7e574a69bc7f5045f96ac69cc3eec94942e95ff0ff663cc328c113334383c2f2597d0f72d4e69b852e2bf60cec435bbec42406482805a2b992a2625f83f2ac05aee75ec3a25768c9cadd8cbd00a860bd3e8f3697427d9e90364a8a0af0aaa88c224cb8438915d89f986d530d289cf1eec51fe39f1797564f473fe99d34a16686d2e5ee75c2630ddab86a091df8e5971c6c0a7eef88e476481f29a5e6af20610bf4fa7f14b970d331759f6e019c55d6233f3a4a84b292f9f8dc5cd0b6fef43203dbd256db953c44a18b8bfda14eb7a17585eba5e05b508fbe05e72a2092fbacc7469cba5227fc0903902760760077707573c30a0a28e17a10a95a1aea8ebb2a660e5fc231dbf06b4cdd6ba1f70373aac456e99283ef99f8531ab5d50243d1fd6863fccb3bf0814189d91c561d7ef5bafddba83455f366595155f996f413631b7aa5a7b47b7dc6d3975f2007418d5140416b85cd300f200324a3337c8e9a8819db3d50b347a3cbd61b1ae8baf384f2c6029b52e26e171c8814228e71a23b60658cd88b39f8d518e708d22821f7293b3033d7cf71b4ed0b13edf0c775c4fc6465b8bea9fc9be274789c0c94eb5b63a0b76948da2880c8fa3c8f9a18a0162c0deb99a853531547cd4e459fb7b130709cdaa2daf791fe5934ce60f373c1d85e307bf95ba355ecdcb45aebaa4477935c4d1ee66f5fff20045b3f796801dddae24dca6f8dd63e9268c5803edf87c555321ea0cde9db94e004d29c89ef7c2f5b65f1a5cd80613669ca6b322915dfc8973684a0b5c07f5562111c5ed693bce43951f46761fd52877c16aa5e5b30ad5ad18913d9a62a438881348d38b65fa0ec1133853ebe98b5ff79af6f65fc9f69d0406d63c15cc48d51b2add08efeec2e2c0e8747e51f7f9ad5c754b2a1b630188b6de5872f39a0eed351fe87c279bb3477b5e9d540ef1b2683240c55d4debb8d84866d6d21a437f5414f098104aee696afec060c3cd9b6012db1a6a189c4fcfd25c8b32deca0a98be27abcae0c85758944f5d1e713ad98c97d5461571f86cb0c91cacde55cd803da82eec1530c7a15503b26c3cd5903e0ee74a890e79ca508c6136a20b870f9a9c85af13562be6c8bb04eb45974228ca040b73a2c59841815ed2d6e1307772bb9264181ca4a1948003ff06b82d35bf7428ad17d6e1a1fff0df432e4a0d269db35075cb05d80caf7a54b97e98ca389e805ec7554719fda161201a7ff84de4985a83b39df13a7c270a2746c14125acc25598fb94233ef6a681b424b9af44235c0c7b3f0c93dbe03f7bfc71c9ec100f1c4e1656a5128d21f2199b28605073a16bc64d86692441f8a7812380c1f0e87485f04eb3ce50aef9c2f97a19a24decc0ed83ca86f34de3eb5ac537eaf513928aac52bd374c79393b6eeada7807e21122aeb6d1a8e6a6f7545004e40c18e2f339e0b81f066756339ff090ef0bb9ed78b2691ee197f4da2cd7726cda8ec4f680c52195d0ceda2be73a85e144ce0cf513426fd84323f106eeaba879bd7b57bae8f00d2cf0f132e461535c38c87d34ca891c9bb5741aae5d89d938800ebcf25327b41f7a173a9c575edcf9a8f7aa0da083d7163c3aadc8a370e29b982316d1de13aabc9f6dea5044a45c0d8507b0b92a8c3109ca4aef1da6e82c5fe14ff7bad9f5ba433135f2007738c0944950aa895b2aab71c0879e69ede51887ed285d3c98a35f8bf62645205f1aa0c19e1e2787972cfe40cec569deab589de785db3a0117cb3eb8e73026fc3f77ff4e5c4dedc94d868525ba40f35734f561d6223255d7a4371f13611f03e9ab03444008dc2c73efb50e7d600c33f7ff667e8e5afbedcb19b1464ec930bcb25ef2c927423e371af6d54bd0b953f779a50cb092de75932c2a664d1bfc6f19690677e6185842d928350fb6704ad51fdd481428f4b23b7bea71a01a5aaa9cbfa4bdd65429c5e1445ffeda364ebc00c64df38344a5b5ace3f0a4e2aca11a48ad4f8d3cb263fa6afaf7025685654f048606f4e638dd11840d69e75f4ba6327862c5ff47e81d3f257e42c700926e94a700f8d983e73be803cf435493c82bd088dce683ea877aa707a756897d3cb90faac4365adc42ab", @ANYBLOB="000000000000000000000061c6e1fdb1d79ba5"], 0x48) sendmsg$kcm(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000001c0)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a19c9d8714060014000000000508000a0043000040a80012001200014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d765dd11683296b7947968c7c0b7a196e6f661", 0x6e}, {&(0x7f0000000140)="aa581ff83dac4a519b67538bfa897e210c31e1446808358248cf2d795634b12c4ce81c3876aff89235b78ea0e5c5badfa122797d62c09ada7441b4f31cd5e6fc4b2a325fb5e811fead55530751e6f4bc4b40d94743ed5bd8ec1fff7b0abcc6eaabeb7a2f5f985467a8db", 0x6a}], 0x2}, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001740)={@fallback=r3, 0x34, 0x0, 0x5, &(0x7f0000001640), 0x0, 0x0, &(0x7f0000001680), 0x0, &(0x7f0000001700)}, 0x40) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000740)=@generic={&(0x7f0000000700)='./file0\x00', 0x0, 0x8}, 0x18) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f97e24fc6004030e000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x74000000}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001580)={0x18, 0xc, &(0x7f00000013c0)=ANY=[@ANYBLOB="180000000200000000000000080000000c910c00080000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000400000087000000060000009500000000000000"], &(0x7f0000001440)='syzkaller\x00', 0x7d3, 0x7, &(0x7f0000001480)=""/7, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000014c0)={0x2, 0x5, 0x6474, 0xfffffffd}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000001500)=[0x1], &(0x7f0000001540)=[{0x2, 0x3, 0x9, 0x6}, {0x5, 0x2, 0xf, 0x8}, {0xef, 0x5, 0x8, 0xa}], 0x10, 0xc2d1}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000540)={@fallback=r6, r3, 0x4, 0x0, r4, @void, @value=r7}, 0x20) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x400}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x4}, 0x0, 0x3, r1, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r8, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1c, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) r10 = socket$kcm(0x2, 0x922000000004, 0x106) setsockopt$sock_attach_bpf(r10, 0x29, 0x46, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x18000000000002a0, 0xdc, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f086dd47e0ffff00122c00631177fbac141416e000030a44079f034d2f87e589ca6aab845013f2325f1a3987050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a22", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0}, 0x50) 3.899382988s ago: executing program 34 (id=3340): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080207000000040000a118000200e000000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) (fail_nth: 4) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x6, 0x4, 0x599, 0xa, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x0, &(0x7f0000000480), 0x0, 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa2}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'vxcan1\x00', @remote}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0, 0x20000000}, 0x200000c0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f375ffff86dd6317ce62070000000000000000431ccaf57b00000000000000000104"], 0xfe1b) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.281598714s ago: executing program 35 (id=3338): ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x15) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd, 0x40000000}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1bff11000000b605e2670b8ae9ebed97", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x50) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, &(0x7f0000000500), 0x4) socketpair(0x1, 0x20000000000001, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)=@caif=@dgm={0x25, 0x1a}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000080)='r', 0x1}], 0x1}, 0x48004) r2 = syz_clone(0x8000, &(0x7f00000001c0)="7198202e8499f3d4edbed2ee146583e7fe968794b30b7f178d48c1c20facd9d88a22cb4bf67da53510560b7115dacb43864db1600b0048bec1b8b7a26b751ec947fceed4ddd9cbf9005ea3a26fc3d4111744fe62ce52523ca0c3489739fab1d0f8f994360e9de5ce5501826363493dace2f1e6c6583c3370de160f018870414ff7610aca4abb3ce17bc047e9a2a7fad51cbf2422d4d3150edc5f93cb8af55fdb7347ef1fd7026c684b98efc41d2aa5874a7963db670c7dcd68f72fe4f12e45dd7bd31481f7d4aadc17d1459275051783da0fd5bd4c9aac4342a10e1ee5f5db7f7abd32", 0xe3, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x9}, r2, 0xf, 0xffffffffffffffff, 0xb) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000400)='syz0\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r4, &(0x7f0000000440), 0x2, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x50000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000840)='ns/mnt\x00') r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRESDEC=r4, @ANYBLOB='\x00'/20, @ANYRES32=r3, @ANYRES32=0x0, @ANYRES16=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180600000000040000000000000000", @ANYRES32=r5, @ANYBLOB], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0xa, 0x5, 0x0) r6 = socket$kcm(0xa, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="9beb01031800000000000000000000008000000002"], 0x0, 0x1a}, 0x28) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x8916, &(0x7f0000000000)={r6}) 0s ago: executing program 36 (id=3342): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x0, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) socket$kcm(0xa, 0x2, 0x88) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d004892e822a6abc02ad2602a5ad6f7007ea60864160af365935cfaea3f49d8df1931a0e64ffc4c78029ee517d34460bc06000000938037e70e457ae2bb24ef6697070000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000240)=""/190, 0xbe}, {&(0x7f0000000380)=""/113, 0x71}, {&(0x7f0000000900)=""/123, 0x7b}, {&(0x7f00000020c0)=""/4096, 0x107b}, {&(0x7f00000000c0)=""/172, 0xac}], 0x5}, 0x40010022) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0xe, 0x40, 0x3, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000040), 0x1003, r1}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r1, &(0x7f0000000300), 0x0}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x5, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r4, &(0x7f00000001c0), 0x0}, 0x20) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) kernel console output (not intermixed with test programs): 0001 [ 522.115804][T10878] R13: 00007fa28ac16128 R14: 00007fa28ac16090 R15: 00007fffefb6ec18 [ 522.123851][T10878] [ 522.417976][T10885] bY4`Ҙ: renamed from lo [ 522.875096][T10895] netlink: 'syz.0.2065': attribute type 1 has an invalid length. [ 522.891964][T10895] netlink: 'syz.0.2065': attribute type 3 has an invalid length. [ 522.904057][T10895] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2065'. [ 523.067604][T10900] device syzkaller0 entered promiscuous mode [ 526.652699][T10930] netlink: 130181 bytes leftover after parsing attributes in process `syz.0.2077'. [ 529.167990][T10937] netlink: 'syz.1.2078': attribute type 4 has an invalid length. [ 529.689159][T10960] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2087'. [ 529.728487][T10960] netlink: 'syz.3.2087': attribute type 1 has an invalid length. [ 529.769023][T10960] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.2087'. [ 531.648132][T10991] netlink: 'syz.2.2095': attribute type 4 has an invalid length. [ 532.062727][T11005] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 532.161046][T11007] bY4`Ҙ: renamed from lo [ 532.611882][T11022] FAULT_INJECTION: forcing a failure. [ 532.611882][T11022] name failslab, interval 1, probability 0, space 0, times 0 [ 532.713050][T11021] netlink: 'syz.1.2110': attribute type 4 has an invalid length. [ 532.796480][T11022] CPU: 1 PID: 11022 Comm: syz.0.2109 Not tainted syzkaller #0 [ 532.804033][T11022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 532.814165][T11022] Call Trace: [ 532.817480][T11022] [ 532.820447][T11022] dump_stack_lvl+0x188/0x24e [ 532.825183][T11022] ? show_regs_print_info+0x12/0x12 [ 532.830433][T11022] ? load_image+0x400/0x400 [ 532.834993][T11022] ? __might_sleep+0xd0/0xd0 [ 532.839623][T11022] ? __lock_acquire+0x7d10/0x7d10 [ 532.844697][T11022] ? mark_lock+0x94/0x320 [ 532.849077][T11022] should_fail_ex+0x399/0x4d0 [ 532.853863][T11022] should_failslab+0x5/0x20 [ 532.858702][T11022] slab_pre_alloc_hook+0x59/0x310 [ 532.863774][T11022] ? __get_vm_area_node+0x122/0x330 [ 532.869037][T11022] __kmem_cache_alloc_node+0x4f/0x260 [ 532.874635][T11022] ? __get_vm_area_node+0x122/0x330 [ 532.879883][T11022] kmalloc_node_trace+0x22/0xe0 [ 532.885230][T11022] __get_vm_area_node+0x122/0x330 [ 532.890305][T11022] __vmalloc_node_range+0x357/0x13b0 [ 532.895670][T11022] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 532.901298][T11022] ? free_vm_area+0x50/0x50 [ 532.905849][T11022] ? end_current_label_crit_section+0x170/0x170 [ 532.912218][T11022] ? __lock_acquire+0x7d10/0x7d10 [ 532.917298][T11022] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 532.922900][T11022] __vmalloc+0x76/0x80 [ 532.927018][T11022] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 532.932621][T11022] bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 532.938053][T11022] ? bpf_lsm_capable+0x5/0x10 [ 532.942787][T11022] bpf_prog_alloc+0x1c/0x1b0 [ 532.947497][T11022] bpf_prog_load+0x7c9/0x1560 [ 532.952253][T11022] ? map_freeze+0x390/0x390 [ 532.957154][T11022] ? __might_fault+0xa6/0x120 [ 532.961889][T11022] ? trace_call_bpf+0xbf/0x6b0 [ 532.966712][T11022] ? __might_fault+0xa6/0x120 [ 532.971427][T11022] ? __might_fault+0xc2/0x120 [ 532.976148][T11022] ? __might_fault+0xa6/0x120 [ 532.980863][T11022] ? bpf_lsm_bpf+0x5/0x10 [ 532.985232][T11022] ? security_bpf+0x7a/0xa0 [ 532.989961][T11022] __sys_bpf+0x5b8/0x780 [ 532.994264][T11022] ? bpf_link_show_fdinfo+0x380/0x380 [ 532.999702][T11022] ? lock_chain_count+0x20/0x20 [ 533.004611][T11022] __x64_sys_bpf+0x78/0x90 [ 533.009075][T11022] do_syscall_64+0x4c/0xa0 [ 533.013539][T11022] ? clear_bhb_loop+0x60/0xb0 [ 533.018258][T11022] ? clear_bhb_loop+0x60/0xb0 [ 533.022975][T11022] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 533.028906][T11022] RIP: 0033:0x7f3cd639c799 [ 533.033451][T11022] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 533.053117][T11022] RSP: 002b:00007f3cd71ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 533.061584][T11022] RAX: ffffffffffffffda RBX: 00007f3cd6615fa0 RCX: 00007f3cd639c799 [ 533.069594][T11022] RDX: 0000000000000094 RSI: 0000200000000600 RDI: 0000000000000005 [ 533.077690][T11022] RBP: 00007f3cd71ea090 R08: 0000000000000000 R09: 0000000000000000 [ 533.085700][T11022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 533.093711][T11022] R13: 00007f3cd6616038 R14: 00007f3cd6615fa0 R15: 00007ffdcaf75708 [ 533.101751][T11022] [ 533.150327][T11022] syz.0.2109: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 533.171919][T11022] CPU: 1 PID: 11022 Comm: syz.0.2109 Not tainted syzkaller #0 [ 533.179465][T11022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 533.189570][T11022] Call Trace: [ 533.192885][T11022] [ 533.195858][T11022] dump_stack_lvl+0x188/0x24e [ 533.200599][T11022] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 533.207069][T11022] ? show_regs_print_info+0x12/0x12 [ 533.212340][T11022] ? load_image+0x400/0x400 [ 533.216890][T11022] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 533.223356][T11022] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 533.229914][T11022] warn_alloc+0x242/0x330 [ 533.234302][T11022] ? __get_vm_area_node+0x122/0x330 [ 533.239590][T11022] ? zone_watermark_ok_safe+0x270/0x270 [ 533.245199][T11022] ? rcu_is_watching+0x11/0xa0 [ 533.250029][T11022] ? __get_vm_area_node+0x318/0x330 [ 533.255287][T11022] __vmalloc_node_range+0x37c/0x13b0 [ 533.260646][T11022] ? free_vm_area+0x50/0x50 [ 533.265216][T11022] ? end_current_label_crit_section+0x170/0x170 [ 533.271507][T11022] ? __lock_acquire+0x7d10/0x7d10 [ 533.276606][T11022] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 533.282234][T11022] __vmalloc+0x76/0x80 [ 533.286361][T11022] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 533.291970][T11022] bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 533.297401][T11022] ? bpf_lsm_capable+0x5/0x10 [ 533.302137][T11022] bpf_prog_alloc+0x1c/0x1b0 [ 533.306782][T11022] bpf_prog_load+0x7c9/0x1560 [ 533.311519][T11022] ? map_freeze+0x390/0x390 [ 533.316069][T11022] ? __might_fault+0xa6/0x120 [ 533.321234][T11022] ? trace_call_bpf+0xbf/0x6b0 [ 533.326058][T11022] ? __might_fault+0xa6/0x120 [ 533.330782][T11022] ? __might_fault+0xc2/0x120 [ 533.335496][T11022] ? __might_fault+0xa6/0x120 [ 533.340213][T11022] ? bpf_lsm_bpf+0x5/0x10 [ 533.344579][T11022] ? security_bpf+0x7a/0xa0 [ 533.349124][T11022] __sys_bpf+0x5b8/0x780 [ 533.353421][T11022] ? bpf_link_show_fdinfo+0x380/0x380 [ 533.358854][T11022] ? lock_chain_count+0x20/0x20 [ 533.363767][T11022] __x64_sys_bpf+0x78/0x90 [ 533.368232][T11022] do_syscall_64+0x4c/0xa0 [ 533.372695][T11022] ? clear_bhb_loop+0x60/0xb0 [ 533.377422][T11022] ? clear_bhb_loop+0x60/0xb0 [ 533.382169][T11022] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 533.388111][T11022] RIP: 0033:0x7f3cd639c799 [ 533.392561][T11022] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 533.412214][T11022] RSP: 002b:00007f3cd71ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 533.420670][T11022] RAX: ffffffffffffffda RBX: 00007f3cd6615fa0 RCX: 00007f3cd639c799 [ 533.428683][T11022] RDX: 0000000000000094 RSI: 0000200000000600 RDI: 0000000000000005 [ 533.436790][T11022] RBP: 00007f3cd71ea090 R08: 0000000000000000 R09: 0000000000000000 [ 533.444795][T11022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 533.452814][T11022] R13: 00007f3cd6616038 R14: 00007f3cd6615fa0 R15: 00007ffdcaf75708 [ 533.460855][T11022] [ 533.557797][T11022] Mem-Info: [ 533.561202][T11022] active_anon:7036 inactive_anon:0 isolated_anon:0 [ 533.561202][T11022] active_file:18522 inactive_file:40108 isolated_file:0 [ 533.561202][T11022] unevictable:768 dirty:117 writeback:0 [ 533.561202][T11022] slab_reclaimable:21203 slab_unreclaimable:97749 [ 533.561202][T11022] mapped:30008 shmem:1361 pagetables:613 [ 533.561202][T11022] sec_pagetables:0 bounce:0 [ 533.561202][T11022] kernel_misc_reclaimable:0 [ 533.561202][T11022] free:1321147 free_pcp:8030 free_cma:0 [ 533.634160][T11022] Node 0 active_anon:28144kB inactive_anon:0kB active_file:74088kB inactive_file:160232kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120032kB dirty:468kB writeback:0kB shmem:3908kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10336kB pagetables:2452kB sec_pagetables:0kB all_unreclaimable? no [ 533.683197][T11022] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 533.715533][T11022] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 533.746671][T11022] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 533.752513][T11022] Node 0 DMA32 free:1375428kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:28144kB inactive_anon:0kB active_file:74088kB inactive_file:160232kB unevictable:1536kB writepending:468kB present:3129332kB managed:2592980kB mlocked:0kB bounce:0kB free_pcp:11152kB local_pcp:5876kB free_cma:0kB [ 533.784712][T11022] lowmem_reserve[]: 0 0 1 1 1 [ 533.789506][T11022] Node 0 Normal free:20kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:12kB free_cma:0kB [ 533.817823][T11022] lowmem_reserve[]: 0 0 0 0 0 [ 533.822658][T11022] Node 1 Normal free:3893780kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:20328kB local_pcp:11232kB free_cma:0kB [ 533.853825][T11022] lowmem_reserve[]: 0 0 0 0 0 [ 533.858983][T11022] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 533.872281][T11022] Node 0 DMA32: 517*4kB (UM) 587*8kB (UME) 712*16kB (UME) 2345*32kB (UME) 373*64kB (UME) 107*128kB (UME) 65*256kB (UM) 24*512kB (ME) 9*1024kB (ME) 1*2048kB (E) 294*4096kB (M) = 1375180kB [ 533.899733][T11022] Node 0 Normal: 1*4kB (U) 2*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 533.914493][T11022] Node 1 Normal: 221*4kB (UE) 52*8kB (UME) 40*16kB (UME) 38*32kB (UME) 23*64kB (UME) 14*128kB (UME) 1*256kB (U) 2*512kB (UM) 1*1024kB (E) 1*2048kB (E) 948*4096kB (UM) = 3893780kB [ 533.944385][T11022] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 533.954363][T11022] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 533.973370][T11022] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 533.984073][T11022] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 534.001868][T11022] 59991 total pagecache pages [ 534.007820][T11022] 0 pages in swap cache [ 534.012265][T11022] Free swap = 124996kB [ 534.023267][T11022] Total swap = 124996kB [ 534.028049][T11022] 2097051 pages RAM [ 534.032066][T11022] 0 pages HighMem/MovableOnly [ 534.043499][T11022] 415205 pages reserved [ 534.048052][T11022] 0 pages cma reserved [ 534.483360][T11033] netlink: 'syz.1.2122': attribute type 10 has an invalid length. [ 534.578822][T11039] netlink: 'syz.3.2112': attribute type 4 has an invalid length. [ 534.602392][T11037] netlink: 'syz.4.2114': attribute type 4 has an invalid length. [ 535.012349][T11052] netlink: 'syz.0.2120': attribute type 10 has an invalid length. [ 535.279248][T11052] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 535.408967][T11061] netlink: 'syz.4.2124': attribute type 21 has an invalid length. [ 535.436176][T11061] netlink: 'syz.4.2124': attribute type 1 has an invalid length. [ 535.618382][T11061] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2124'. [ 537.336280][T11086] netlink: 'syz.2.2128': attribute type 10 has an invalid length. [ 537.427176][T11088] netlink: 'syz.3.2130': attribute type 4 has an invalid length. [ 537.693424][T11093] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2131'. [ 539.581404][T11139] netlink: 'syz.1.2144': attribute type 4 has an invalid length. [ 540.995733][T11161] netlink: 'syz.1.2153': attribute type 4 has an invalid length. [ 541.274222][T11167] netlink: 'syz.3.2154': attribute type 10 has an invalid length. [ 541.664179][T11169] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2155'. [ 542.640724][T11179] mac80211_hwsim hwsim27 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 542.711790][T11182] netlink: 'syz.2.2159': attribute type 10 has an invalid length. [ 544.991461][T11208] netlink: 'syz.4.2167': attribute type 3 has an invalid length. [ 545.010691][T11208] netlink: 13427 bytes leftover after parsing attributes in process `syz.4.2167'. [ 545.158728][T11211] netlink: 'syz.1.2168': attribute type 4 has an invalid length. [ 545.338400][T11219] netlink: 'syz.2.2169': attribute type 10 has an invalid length. [ 545.429306][T11222] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2173'. [ 545.559756][T11228] netlink: 'syz.3.2175': attribute type 3 has an invalid length. [ 545.574783][T11228] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2175'. [ 547.146187][T11248] FAULT_INJECTION: forcing a failure. [ 547.146187][T11248] name failslab, interval 1, probability 0, space 0, times 0 [ 547.159340][T11248] CPU: 1 PID: 11248 Comm: syz.4.2182 Not tainted syzkaller #0 [ 547.166859][T11248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 547.177086][T11248] Call Trace: [ 547.180402][T11248] [ 547.183367][T11248] dump_stack_lvl+0x188/0x24e [ 547.188095][T11248] ? sctp_sendmsg+0x15b0/0x2940 [ 547.193024][T11248] ? ___sys_sendmsg+0x2a2/0x360 [ 547.197933][T11248] ? show_regs_print_info+0x12/0x12 [ 547.203183][T11248] ? load_image+0x400/0x400 [ 547.207758][T11248] should_fail_ex+0x399/0x4d0 [ 547.212501][T11248] should_failslab+0x5/0x20 [ 547.217052][T11248] slab_pre_alloc_hook+0x59/0x310 [ 547.222164][T11248] ? sctp_add_bind_addr+0x89/0x350 [ 547.227326][T11248] __kmem_cache_alloc_node+0x4f/0x260 [ 547.232735][T11248] ? sctp_add_bind_addr+0x89/0x350 [ 547.237878][T11248] kmalloc_trace+0x26/0xe0 [ 547.242590][T11248] sctp_add_bind_addr+0x89/0x350 [ 547.247559][T11248] sctp_copy_local_addr_list+0x311/0x4e0 [ 547.253265][T11248] ? sctp_copy_local_addr_list+0xa1/0x4e0 [ 547.259029][T11248] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 547.265141][T11248] ? sctp_v6_is_any+0x60/0x70 [ 547.269857][T11248] ? sctp_copy_one_addr+0x93/0x660 [ 547.275003][T11248] sctp_bind_addr_copy+0xaf/0x3c0 [ 547.280056][T11248] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 547.286426][T11248] sctp_connect_new_asoc+0x2f5/0x6a0 [ 547.291770][T11248] ? __sctp_connect+0xd80/0xd80 [ 547.296661][T11248] ? __local_bh_enable_ip+0x136/0x1c0 [ 547.302064][T11248] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 547.307643][T11248] ? security_sctp_bind_connect+0x85/0xb0 [ 547.313392][T11248] sctp_sendmsg+0x15b0/0x2940 [ 547.318125][T11248] ? sctp_getsockopt+0x8a0/0x8a0 [ 547.323115][T11248] ? __lock_acquire+0x7d10/0x7d10 [ 547.328175][T11248] ? aa_af_perm+0x340/0x340 [ 547.332738][T11248] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 547.339208][T11248] ? inet_sendmsg+0xe5/0x2f0 [ 547.343844][T11248] ? inet_send_prepare+0x260/0x260 [ 547.348995][T11248] ____sys_sendmsg+0x5be/0x970 [ 547.353796][T11248] ? __sys_sendmsg_sock+0x30/0x30 [ 547.358851][T11248] ? __import_iovec+0x315/0x500 [ 547.363977][T11248] ? import_iovec+0x6f/0xa0 [ 547.368516][T11248] ___sys_sendmsg+0x2a2/0x360 [ 547.373228][T11248] ? __sys_sendmsg+0x290/0x290 [ 547.378652][T11248] ? __lock_acquire+0x7d10/0x7d10 [ 547.383745][T11248] __se_sys_sendmsg+0x1bb/0x2a0 [ 547.388712][T11248] ? ct_nmi_exit+0x145/0x1c0 [ 547.393331][T11248] ? __x64_sys_sendmsg+0x80/0x80 [ 547.398413][T11248] ? lockdep_hardirqs_on+0x94/0x140 [ 547.403636][T11248] do_syscall_64+0x4c/0xa0 [ 547.408087][T11248] ? clear_bhb_loop+0x60/0xb0 [ 547.412791][T11248] ? clear_bhb_loop+0x60/0xb0 [ 547.417493][T11248] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 547.423409][T11248] RIP: 0033:0x7f260719c799 [ 547.427851][T11248] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 547.447478][T11248] RSP: 002b:00007f26080e2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 547.455924][T11248] RAX: ffffffffffffffda RBX: 00007f2607415fa0 RCX: 00007f260719c799 [ 547.464106][T11248] RDX: 0000000000000041 RSI: 0000200000000600 RDI: 0000000000000003 [ 547.472120][T11248] RBP: 00007f26080e2090 R08: 0000000000000000 R09: 0000000000000000 [ 547.480117][T11248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 547.488213][T11248] R13: 00007f2607416038 R14: 00007f2607415fa0 R15: 00007ffc90a3f8f8 [ 547.496564][T11248] [ 547.753533][T11252] netlink: 'syz.4.2184': attribute type 4 has an invalid length. [ 548.121635][T11258] netlink: 'syz.3.2188': attribute type 4 has an invalid length. [ 548.572525][T11274] netlink: 'syz.4.2194': attribute type 6 has an invalid length. [ 548.677601][T11274] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2194'. [ 550.316861][T11300] netlink: 'syz.2.2201': attribute type 4 has an invalid length. [ 551.349270][T11302] netlink: 'syz.4.2202': attribute type 4 has an invalid length. [ 551.585716][T11313] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2206'. [ 552.442043][T11325] device syzkaller0 entered promiscuous mode [ 552.717185][T11335] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.2215'. [ 555.103079][T11330] netlink: 'syz.1.2214': attribute type 10 has an invalid length. [ 555.114913][T11340] netlink: 'syz.4.2217': attribute type 4 has an invalid length. [ 555.673773][T11368] netlink: 'syz.1.2225': attribute type 2 has an invalid length. [ 555.702069][T11368] netlink: 'syz.1.2225': attribute type 1 has an invalid length. [ 555.712217][T11368] netlink: 148288 bytes leftover after parsing attributes in process `syz.1.2225'. [ 555.775187][T11372] netlink: 'syz.3.2228': attribute type 10 has an invalid length. [ 555.785999][T11372] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2228'. [ 557.394099][T11388] device syzkaller0 entered promiscuous mode [ 557.402681][T11389] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2234'. [ 557.440491][T11385] netlink: 'syz.4.2231': attribute type 4 has an invalid length. [ 562.927334][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.933722][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.962573][T11404] netlink: 'syz.3.2239': attribute type 25 has an invalid length. [ 562.980222][T11404] netlink: 'syz.3.2239': attribute type 29 has an invalid length. [ 563.149059][T11430] netlink: 'syz.0.2245': attribute type 4 has an invalid length. [ 563.440876][T11443] FAULT_INJECTION: forcing a failure. [ 563.440876][T11443] name failslab, interval 1, probability 0, space 0, times 0 [ 563.453781][T11443] CPU: 1 PID: 11443 Comm: syz.0.2251 Not tainted syzkaller #0 [ 563.461480][T11443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 563.471600][T11443] Call Trace: [ 563.474926][T11443] [ 563.477898][T11443] dump_stack_lvl+0x188/0x24e [ 563.482839][T11443] ? show_regs_print_info+0x12/0x12 [ 563.488120][T11443] ? load_image+0x400/0x400 [ 563.492788][T11443] ? kasan_set_track+0x60/0x70 [ 563.497612][T11443] ? kasan_set_track+0x4b/0x70 [ 563.502448][T11443] should_fail_ex+0x399/0x4d0 [ 563.507189][T11443] should_failslab+0x5/0x20 [ 563.511930][T11443] slab_pre_alloc_hook+0x59/0x310 [ 563.517007][T11443] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 563.523129][T11443] kmem_cache_alloc_node+0x5a/0x320 [ 563.528721][T11443] ? __alloc_skb+0xfc/0x7e0 [ 563.533300][T11443] __alloc_skb+0xfc/0x7e0 [ 563.537699][T11443] ndisc_alloc_skb+0xa6/0x450 [ 563.542429][T11443] ndisc_ns_create+0x1ce/0x620 [ 563.547357][T11443] ndisc_solicit+0x347/0x660 [ 563.552011][T11443] ? __neigh_event_send+0xec1/0x15f0 [ 563.557360][T11443] ? ndisc_cleanup+0x30/0x30 [ 563.562009][T11443] ? ndisc_cleanup+0x30/0x30 [ 563.566651][T11443] __neigh_event_send+0xf22/0x15f0 [ 563.571823][T11443] neigh_resolve_output+0x197/0x730 [ 563.577079][T11443] ? __ipv6_neigh_lookup_noref+0x61d/0x7d0 [ 563.582955][T11443] ip6_finish_output2+0xdd6/0x15d0 [ 563.588129][T11443] ? ip6_finish_output2+0x58f/0x15d0 [ 563.593478][T11443] ? nf_hook+0x390/0x390 [ 563.597790][T11443] ? ip6_finish_output+0x577/0x820 [ 563.602960][T11443] ip6_xmit+0x10c5/0x1860 [ 563.607364][T11443] ? ip6_autoflowlabel+0xd0/0xd0 [ 563.612391][T11443] ? inet6_csk_route_socket+0x614/0xeb0 [ 563.618002][T11443] ? read_lock_is_recursive+0x10/0x10 [ 563.623447][T11443] inet6_csk_xmit+0x42a/0x6b0 [ 563.628265][T11443] ? inet6_csk_xmit+0x1cd/0x6b0 [ 563.633170][T11443] ? inet6_csk_addr2sockaddr+0x1d0/0x1d0 [ 563.638867][T11443] ? csum_ipv6_magic+0x1e6/0x2f0 [ 563.643863][T11443] __tcp_transmit_skb+0x1c92/0x31a0 [ 563.649141][T11443] ? __tcp_send_ack+0x5a0/0x5a0 [ 563.654094][T11443] ? tcp_fastopen_cache_get+0x2b/0x4c0 [ 563.659633][T11443] ? tcp_fastopen_cookie_check+0x269/0x3c0 [ 563.666013][T11443] tcp_connect+0x2db9/0x4ac0 [ 563.670710][T11443] tcp_v6_connect+0x119b/0x18c0 [ 563.675624][T11443] ? tcp_v6_pre_connect+0xf0/0xf0 [ 563.680716][T11443] ? __se_sys_sendmsg+0x1bb/0x2a0 [ 563.686238][T11443] ? do_syscall_64+0x4c/0xa0 [ 563.690889][T11443] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 563.697024][T11443] __inet_stream_connect+0x242/0xe10 [ 563.702378][T11443] ? inet_dgram_connect+0x360/0x360 [ 563.707686][T11443] tcp_sendmsg_fastopen+0x38f/0x600 [ 563.713023][T11443] tcp_sendmsg_locked+0x39dd/0x3f50 [ 563.718270][T11443] ? verify_lock_unused+0x140/0x140 [ 563.723546][T11443] ? mark_lock+0x94/0x320 [ 563.727937][T11443] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 563.734068][T11443] ? lock_chain_count+0x20/0x20 [ 563.738978][T11443] ? tcp_set_state+0x520/0x520 [ 563.743807][T11443] tcp_sendmsg+0x2b/0x40 [ 563.748093][T11443] ? inet6_compat_ioctl+0x3c0/0x3c0 [ 563.753403][T11443] ____sys_sendmsg+0x5be/0x970 [ 563.758238][T11443] ? __sys_sendmsg_sock+0x30/0x30 [ 563.763329][T11443] ? __import_iovec+0x315/0x500 [ 563.768670][T11443] ? import_iovec+0x6f/0xa0 [ 563.773222][T11443] ___sys_sendmsg+0x2a2/0x360 [ 563.777964][T11443] ? __sys_sendmsg+0x290/0x290 [ 563.782812][T11443] ? __lock_acquire+0x7d10/0x7d10 [ 563.787919][T11443] __se_sys_sendmsg+0x1bb/0x2a0 [ 563.793192][T11443] ? __x64_sys_sendmsg+0x80/0x80 [ 563.798213][T11443] ? lockdep_hardirqs_on+0x94/0x140 [ 563.803725][T11443] do_syscall_64+0x4c/0xa0 [ 563.808191][T11443] ? clear_bhb_loop+0x60/0xb0 [ 563.812928][T11443] ? clear_bhb_loop+0x60/0xb0 [ 563.817652][T11443] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 563.823590][T11443] RIP: 0033:0x7f3cd639c799 [ 563.828054][T11443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 563.847807][T11443] RSP: 002b:00007f3cd71ea028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 563.856300][T11443] RAX: ffffffffffffffda RBX: 00007f3cd6615fa0 RCX: 00007f3cd639c799 [ 563.864320][T11443] RDX: 000000003004c041 RSI: 0000200000000080 RDI: 0000000000000005 [ 563.874160][T11443] RBP: 00007f3cd71ea090 R08: 0000000000000000 R09: 0000000000000000 [ 563.882185][T11443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 563.890221][T11443] R13: 00007f3cd6616038 R14: 00007f3cd6615fa0 R15: 00007ffdcaf75708 [ 563.898263][T11443] [ 564.393011][T11458] FAULT_INJECTION: forcing a failure. [ 564.393011][T11458] name failslab, interval 1, probability 0, space 0, times 0 [ 564.442011][T11458] CPU: 0 PID: 11458 Comm: syz.2.2253 Not tainted syzkaller #0 [ 564.449561][T11458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 564.459695][T11458] Call Trace: [ 564.463302][T11458] [ 564.466291][T11458] dump_stack_lvl+0x188/0x24e [ 564.471028][T11458] ? sctp_sendmsg+0x15b0/0x2940 [ 564.475947][T11458] ? ___sys_sendmsg+0x2a2/0x360 [ 564.480859][T11458] ? show_regs_print_info+0x12/0x12 [ 564.486111][T11458] ? load_image+0x400/0x400 [ 564.490673][T11458] should_fail_ex+0x399/0x4d0 [ 564.495422][T11458] should_failslab+0x5/0x20 [ 564.500027][T11458] slab_pre_alloc_hook+0x59/0x310 [ 564.505197][T11458] ? sctp_add_bind_addr+0x89/0x350 [ 564.510396][T11458] __kmem_cache_alloc_node+0x4f/0x260 [ 564.515905][T11458] ? sctp_add_bind_addr+0x89/0x350 [ 564.521081][T11458] kmalloc_trace+0x26/0xe0 [ 564.525580][T11458] sctp_add_bind_addr+0x89/0x350 [ 564.530743][T11458] sctp_copy_local_addr_list+0x311/0x4e0 [ 564.536602][T11458] ? sctp_copy_local_addr_list+0xa1/0x4e0 [ 564.542457][T11458] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 564.548580][T11458] ? sctp_v6_is_any+0x60/0x70 [ 564.553400][T11458] ? sctp_copy_one_addr+0x93/0x660 [ 564.558564][T11458] sctp_bind_addr_copy+0xaf/0x3c0 [ 564.563641][T11458] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 564.570011][T11458] sctp_connect_new_asoc+0x2f5/0x6a0 [ 564.575333][T11458] ? __sctp_connect+0xd80/0xd80 [ 564.580213][T11458] ? __local_bh_enable_ip+0x136/0x1c0 [ 564.585621][T11458] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 564.591195][T11458] ? security_sctp_bind_connect+0x85/0xb0 [ 564.596944][T11458] sctp_sendmsg+0x15b0/0x2940 [ 564.601670][T11458] ? sctp_getsockopt+0x8a0/0x8a0 [ 564.606810][T11458] ? __lock_acquire+0x7d10/0x7d10 [ 564.611878][T11458] ? aa_af_perm+0x340/0x340 [ 564.616405][T11458] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 564.622940][T11458] ? inet_sendmsg+0xe5/0x2f0 [ 564.627568][T11458] ? inet_send_prepare+0x260/0x260 [ 564.632741][T11458] ____sys_sendmsg+0x5be/0x970 [ 564.637665][T11458] ? __sys_sendmsg_sock+0x30/0x30 [ 564.642754][T11458] ? __import_iovec+0x315/0x500 [ 564.647756][T11458] ? import_iovec+0x6f/0xa0 [ 564.652499][T11458] ___sys_sendmsg+0x2a2/0x360 [ 564.657430][T11458] ? __sys_sendmsg+0x290/0x290 [ 564.662291][T11458] ? trace_call_bpf+0xbf/0x6b0 [ 564.667318][T11458] __se_sys_sendmsg+0x1bb/0x2a0 [ 564.672270][T11458] ? __x64_sys_sendmsg+0x80/0x80 [ 564.677281][T11458] ? lockdep_hardirqs_on+0x94/0x140 [ 564.682556][T11458] do_syscall_64+0x4c/0xa0 [ 564.687628][T11458] ? clear_bhb_loop+0x60/0xb0 [ 564.692595][T11458] ? clear_bhb_loop+0x60/0xb0 [ 564.697311][T11458] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 564.703238][T11458] RIP: 0033:0x7f4e5759c799 [ 564.707714][T11458] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 564.731358][T11458] RSP: 002b:00007f4e58525028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 564.739808][T11458] RAX: ffffffffffffffda RBX: 00007f4e57815fa0 RCX: 00007f4e5759c799 [ 564.747841][T11458] RDX: 0000000020004054 RSI: 00002000000005c0 RDI: 0000000000000003 [ 564.755861][T11458] RBP: 00007f4e58525090 R08: 0000000000000000 R09: 0000000000000000 [ 564.763867][T11458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 564.771870][T11458] R13: 00007f4e57816038 R14: 00007f4e57815fa0 R15: 00007ffcdc901cd8 [ 564.779879][T11458] [ 565.419902][T11478] netlink: 'syz.1.2260': attribute type 7 has an invalid length. [ 568.052021][T11507] netlink: 'syz.2.2270': attribute type 4 has an invalid length. [ 572.104872][T11531] bY4`Ҙ: renamed from lo [ 572.388756][T11545] netlink: 'syz.2.2283': attribute type 2 has an invalid length. [ 572.424794][T11545] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2283'. [ 572.526814][T11550] netlink: 'syz.0.2284': attribute type 4 has an invalid length. [ 575.673395][T11567] netlink: 'syz.2.2290': attribute type 9 has an invalid length. [ 575.719841][T11567] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.2290'. [ 578.232186][T11603] netlink: 'syz.1.2300': attribute type 7 has an invalid length. [ 578.440008][T11605] netlink: 'syz.3.2299': attribute type 7 has an invalid length. [ 579.214340][T11627] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2306'. [ 583.039784][T11653] bY4`Ҙ: renamed from lo [ 583.627172][T11669] bridge0: port 4(ip6gretap0) entered blocking state [ 583.691894][T11669] bridge0: port 4(ip6gretap0) entered disabled state [ 583.741192][T11669] device ip6gretap0 entered promiscuous mode [ 583.757261][T11669] bridge0: port 4(ip6gretap0) entered blocking state [ 583.764154][T11669] bridge0: port 4(ip6gretap0) entered forwarding state [ 583.933527][T11674] netlink: 'syz.0.2320': attribute type 7 has an invalid length. [ 585.136615][T11698] netlink: 'syz.2.2327': attribute type 4 has an invalid length. [ 585.577184][T11706] netlink: 'syz.0.2331': attribute type 12 has an invalid length. [ 585.625227][T11706] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2331'. [ 585.807145][T11706] netlink: 'syz.0.2331': attribute type 10 has an invalid length. [ 586.202068][T11706] team0 (unregistering): Port device team_slave_0 removed [ 586.372097][T11706] team0 (unregistering): Port device team_slave_1 removed [ 586.548851][T11715] netlink: 'syz.2.2335': attribute type 7 has an invalid length. [ 586.590115][T11723] netlink: 'syz.4.2336': attribute type 10 has an invalid length. [ 586.616788][T11723] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 588.797715][T11752] netlink: 'syz.4.2343': attribute type 4 has an invalid length. [ 589.148297][T11768] netlink: 'syz.4.2348': attribute type 4 has an invalid length. [ 590.328655][T11795] netlink: 'syz.0.2360': attribute type 4 has an invalid length. [ 590.822050][T11796] device syzkaller0 entered promiscuous mode [ 590.840842][T11805] netlink: 'syz.0.2363': attribute type 4 has an invalid length. [ 594.532561][T11821] netlink: 'syz.0.2367': attribute type 27 has an invalid length. [ 594.590697][T11821] bond0: (slave bond_slave_0): Releasing backup interface [ 595.192775][T11851] netlink: 'syz.2.2377': attribute type 4 has an invalid length. [ 596.931687][T11869] netlink: 'syz.2.2383': attribute type 2 has an invalid length. [ 596.965495][T11869] netlink: 'syz.2.2383': attribute type 8 has an invalid length. [ 596.994642][T11869] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2383'. [ 598.266404][T11883] netlink: 'syz.1.2385': attribute type 2 has an invalid length. [ 598.275073][T11883] netlink: 'syz.1.2385': attribute type 8 has an invalid length. [ 598.306436][T11883] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2385'. [ 598.963365][T11902] netlink: 'syz.0.2393': attribute type 4 has an invalid length. [ 601.013598][T11930] netlink: 'syz.3.2402': attribute type 21 has an invalid length. [ 601.548621][T11956] netlink: 'syz.4.2407': attribute type 10 has an invalid length. [ 601.571973][T11956] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2407'. [ 601.889010][T11963] netlink: 'syz.2.2409': attribute type 4 has an invalid length. [ 601.899420][T11964] FAULT_INJECTION: forcing a failure. [ 601.899420][T11964] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 601.943392][T11964] CPU: 0 PID: 11964 Comm: syz.0.2411 Not tainted syzkaller #0 [ 601.950955][T11964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 601.961060][T11964] Call Trace: [ 601.964385][T11964] [ 601.967362][T11964] dump_stack_lvl+0x188/0x24e [ 601.972099][T11964] ? show_regs_print_info+0x12/0x12 [ 601.977358][T11964] ? load_image+0x400/0x400 [ 601.981966][T11964] ? __lock_acquire+0x7d10/0x7d10 [ 601.987059][T11964] should_fail_ex+0x399/0x4d0 [ 601.991844][T11964] _copy_from_user+0x2c/0x170 [ 601.996596][T11964] iovec_from_user+0x143/0x360 [ 602.001418][T11964] __import_iovec+0x6d/0x500 [ 602.006069][T11964] ? __might_fault+0xa6/0x120 [ 602.010896][T11964] import_iovec+0x6f/0xa0 [ 602.015348][T11964] ___sys_recvmsg+0x4b6/0x590 [ 602.020081][T11964] ? __sys_recvmsg+0x290/0x290 [ 602.024887][T11964] ? common_file_perm+0x171/0x1c0 [ 602.029947][T11964] ? __fget_files+0x43d/0x4b0 [ 602.034668][T11964] __x64_sys_recvmsg+0x205/0x2e0 [ 602.039642][T11964] ? ___sys_recvmsg+0x590/0x590 [ 602.044545][T11964] ? lockdep_hardirqs_on+0x94/0x140 [ 602.049786][T11964] do_syscall_64+0x4c/0xa0 [ 602.054230][T11964] ? clear_bhb_loop+0x60/0xb0 [ 602.058955][T11964] ? clear_bhb_loop+0x60/0xb0 [ 602.063657][T11964] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 602.069574][T11964] RIP: 0033:0x7f3cd639c799 [ 602.074010][T11964] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 602.093728][T11964] RSP: 002b:00007f3cd71c9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 602.102168][T11964] RAX: ffffffffffffffda RBX: 00007f3cd6616090 RCX: 00007f3cd639c799 [ 602.110175][T11964] RDX: 0000000000000020 RSI: 0000200000000240 RDI: 0000000000000007 [ 602.118257][T11964] RBP: 00007f3cd71c9090 R08: 0000000000000000 R09: 0000000000000000 [ 602.126254][T11964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 602.134274][T11964] R13: 00007f3cd6616128 R14: 00007f3cd6616090 R15: 00007ffdcaf75708 [ 602.142375][T11964] [ 602.260928][T11966] netlink: 194236 bytes leftover after parsing attributes in process `syz.4.2412'. [ 602.271679][T11966] netlink: zone id is out of range [ 602.296226][T11969] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2413'. [ 602.298910][T11966] netlink: zone id is out of range [ 602.538267][T11966] netlink: get zone limit has 8 unknown bytes [ 603.450745][T11991] netlink: 'syz.2.2420': attribute type 4 has an invalid length. [ 605.076062][T12004] netlink: 'syz.2.2423': attribute type 4 has an invalid length. [ 605.580697][T12021] netlink: 'syz.0.2427': attribute type 10 has an invalid length. [ 605.625358][T12021] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2427'. [ 605.668740][T12021] device batadv_slave_1 entered promiscuous mode [ 605.773880][T12021] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 605.854811][T12021] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 607.128321][T12046] netlink: 'syz.4.2437': attribute type 4 has an invalid length. [ 608.312717][T12062] netlink: 'syz.4.2444': attribute type 17 has an invalid length. [ 608.324685][T12062] netlink: 'syz.4.2444': attribute type 16 has an invalid length. [ 608.344117][T12062] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2444'. [ 609.589099][T12073] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2448'. [ 609.614636][T12073] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2448'. [ 609.702206][T12073] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2448'. [ 609.736176][T12075] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2448'. [ 610.137986][T12086] netlink: 'syz.3.2452': attribute type 21 has an invalid length. [ 610.171242][T12086] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2452'. [ 610.242253][T12086] netlink: 'syz.3.2452': attribute type 1 has an invalid length. [ 614.100963][T12114] netlink: 'syz.1.2462': attribute type 4 has an invalid length. [ 614.149404][T12110] netlink: 'syz.4.2464': attribute type 10 has an invalid length. [ 614.208242][T12110] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2464'. [ 614.253103][T12110] device batadv_slave_1 entered promiscuous mode [ 614.270784][T12110] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 614.286677][T12110] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 614.337644][T12121] netlink: 'syz.3.2461': attribute type 4 has an invalid length. [ 614.629888][T12136] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2469'. [ 614.649563][T12137] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2471'. [ 615.402541][T12136] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2469'. [ 615.446661][T12150] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.2476'. [ 615.464904][T12139] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2469'. [ 615.565725][T12154] FAULT_INJECTION: forcing a failure. [ 615.565725][T12154] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 615.586709][T12154] CPU: 0 PID: 12154 Comm: syz.1.2478 Not tainted syzkaller #0 [ 615.594248][T12154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 615.604443][T12154] Call Trace: [ 615.607791][T12154] [ 615.610770][T12154] dump_stack_lvl+0x188/0x24e [ 615.615516][T12154] ? show_regs_print_info+0x12/0x12 [ 615.620783][T12154] ? load_image+0x400/0x400 [ 615.625352][T12154] ? __lock_acquire+0x7d10/0x7d10 [ 615.630453][T12154] should_fail_ex+0x399/0x4d0 [ 615.635209][T12154] _copy_from_user+0x2c/0x170 [ 615.640038][T12154] iovec_from_user+0x143/0x360 [ 615.644860][T12154] __import_iovec+0x6d/0x500 [ 615.649519][T12154] import_iovec+0x6f/0xa0 [ 615.654006][T12154] ___sys_sendmsg+0x252/0x360 [ 615.658846][T12154] ? __sys_sendmsg+0x290/0x290 [ 615.663723][T12154] ? __lock_acquire+0x7d10/0x7d10 [ 615.668872][T12154] __se_sys_sendmsg+0x1bb/0x2a0 [ 615.673880][T12154] ? __x64_sys_sendmsg+0x80/0x80 [ 615.678921][T12154] ? lockdep_hardirqs_on+0x94/0x140 [ 615.684183][T12154] do_syscall_64+0x4c/0xa0 [ 615.688676][T12154] ? clear_bhb_loop+0x60/0xb0 [ 615.693394][T12154] ? clear_bhb_loop+0x60/0xb0 [ 615.698128][T12154] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 615.704069][T12154] RIP: 0033:0x7f1c40b9c799 [ 615.708514][T12154] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 615.728152][T12154] RSP: 002b:00007f1c41a00028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 615.736602][T12154] RAX: ffffffffffffffda RBX: 00007f1c40e15fa0 RCX: 00007f1c40b9c799 [ 615.744610][T12154] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000007 [ 615.752623][T12154] RBP: 00007f1c41a00090 R08: 0000000000000000 R09: 0000000000000000 [ 615.760633][T12154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 615.768638][T12154] R13: 00007f1c40e16038 R14: 00007f1c40e15fa0 R15: 00007ffeac685908 [ 615.776665][T12154] [ 616.221926][T12162] netlink: 'syz.3.2480': attribute type 4 has an invalid length. [ 616.450014][T12170] netlink: 'syz.2.2484': attribute type 10 has an invalid length. [ 616.554920][T12170] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2484'. [ 616.563890][T12170] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 616.635995][T12170] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 616.662450][T12172] netlink: 'syz.0.2482': attribute type 4 has an invalid length. [ 617.486571][T12200] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2492'. [ 617.501311][T12200] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2492'. [ 617.512314][T12200] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2492'. [ 617.971291][T12212] netlink: 'syz.4.2496': attribute type 4 has an invalid length. [ 618.278565][T12218] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 618.666387][T12229] netlink: 'syz.3.2502': attribute type 10 has an invalid length. [ 618.674457][T12229] device batadv_slave_1 entered promiscuous mode [ 618.718719][T12229] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 618.747414][T12229] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 619.960872][T12251] netlink: 'syz.1.2509': attribute type 4 has an invalid length. [ 622.349144][T12289] netlink: 'syz.1.2522': attribute type 1 has an invalid length. [ 622.437866][T12289] __nla_validate_parse: 1 callbacks suppressed [ 622.437886][T12289] netlink: 112865 bytes leftover after parsing attributes in process `syz.1.2522'. [ 622.732757][T12291] netlink: 'syz.2.2524': attribute type 4 has an invalid length. [ 623.409773][T12304] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2528'. [ 623.541976][T12312] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2532'. [ 623.584180][T12312] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2532'. [ 623.617026][T12314] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2532'. [ 624.393574][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.400238][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.425446][T12339] netlink: 'syz.0.2539': attribute type 1 has an invalid length. [ 624.451468][T12339] netlink: 112865 bytes leftover after parsing attributes in process `syz.0.2539'. [ 625.416930][T12362] netlink: 'syz.2.2551': attribute type 4 has an invalid length. [ 626.303349][ T48] Bluetooth: hci1: unexpected event 0x09 length: 15 > 3 [ 627.164605][T12399] netlink: 'syz.4.2563': attribute type 4 has an invalid length. [ 627.460027][T12408] netlink: 'syz.0.2566': attribute type 1 has an invalid length. [ 628.075824][T12427] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2572'. [ 628.474251][T12438] FAULT_INJECTION: forcing a failure. [ 628.474251][T12438] name failslab, interval 1, probability 0, space 0, times 0 [ 628.498708][T12438] CPU: 1 PID: 12438 Comm: syz.2.2575 Not tainted syzkaller #0 [ 628.506282][T12438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 628.516375][T12438] Call Trace: [ 628.519697][T12438] [ 628.522668][T12438] dump_stack_lvl+0x188/0x24e [ 628.527395][T12438] ? sctp_sendmsg+0x15b0/0x2940 [ 628.532300][T12438] ? ___sys_sendmsg+0x2a2/0x360 [ 628.537295][T12438] ? show_regs_print_info+0x12/0x12 [ 628.542540][T12438] ? load_image+0x400/0x400 [ 628.547098][T12438] should_fail_ex+0x399/0x4d0 [ 628.551844][T12438] should_failslab+0x5/0x20 [ 628.556417][T12438] slab_pre_alloc_hook+0x59/0x310 [ 628.561496][T12438] ? sctp_add_bind_addr+0x89/0x350 [ 628.566683][T12438] __kmem_cache_alloc_node+0x4f/0x260 [ 628.572107][T12438] ? sctp_add_bind_addr+0x89/0x350 [ 628.577299][T12438] kmalloc_trace+0x26/0xe0 [ 628.581770][T12438] sctp_add_bind_addr+0x89/0x350 [ 628.586870][T12438] sctp_copy_local_addr_list+0x311/0x4e0 [ 628.592574][T12438] ? sctp_copy_local_addr_list+0xa1/0x4e0 [ 628.598355][T12438] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 628.604492][T12438] ? sctp_v6_is_any+0x60/0x70 [ 628.609223][T12438] ? sctp_copy_one_addr+0x93/0x660 [ 628.614483][T12438] sctp_bind_addr_copy+0xaf/0x3c0 [ 628.619583][T12438] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 628.625983][T12438] sctp_connect_new_asoc+0x2f5/0x6a0 [ 628.631331][T12438] ? __sctp_connect+0xd80/0xd80 [ 628.636231][T12438] ? __local_bh_enable_ip+0x136/0x1c0 [ 628.641721][T12438] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 628.647318][T12438] ? security_sctp_bind_connect+0x85/0xb0 [ 628.653083][T12438] sctp_sendmsg+0x15b0/0x2940 [ 628.657837][T12438] ? sctp_getsockopt+0x8a0/0x8a0 [ 628.662827][T12438] ? __lock_acquire+0x7d10/0x7d10 [ 628.667911][T12438] ? aa_af_perm+0x340/0x340 [ 628.672466][T12438] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 628.678945][T12438] ? inet_sendmsg+0xe5/0x2f0 [ 628.683595][T12438] ? inet_send_prepare+0x260/0x260 [ 628.688771][T12438] ____sys_sendmsg+0x5be/0x970 [ 628.693600][T12438] ? __sys_sendmsg_sock+0x30/0x30 [ 628.698675][T12438] ? __import_iovec+0x315/0x500 [ 628.703596][T12438] ? import_iovec+0x6f/0xa0 [ 628.708241][T12438] ___sys_sendmsg+0x2a2/0x360 [ 628.713429][T12438] ? __sys_sendmsg+0x290/0x290 [ 628.718303][T12438] ? trace_call_bpf+0xbf/0x6b0 [ 628.723153][T12438] __se_sys_sendmsg+0x1bb/0x2a0 [ 628.728068][T12438] ? __x64_sys_sendmsg+0x80/0x80 [ 628.733081][T12438] ? lockdep_hardirqs_on+0x94/0x140 [ 628.738341][T12438] do_syscall_64+0x4c/0xa0 [ 628.742832][T12438] ? clear_bhb_loop+0x60/0xb0 [ 628.747563][T12438] ? clear_bhb_loop+0x60/0xb0 [ 628.752291][T12438] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 628.758229][T12438] RIP: 0033:0x7f4e5759c799 [ 628.762691][T12438] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 628.782531][T12438] RSP: 002b:00007f4e58525028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 628.790990][T12438] RAX: ffffffffffffffda RBX: 00007f4e57815fa0 RCX: 00007f4e5759c799 [ 628.799010][T12438] RDX: 0000000000000041 RSI: 0000200000000600 RDI: 0000000000000003 [ 628.807027][T12438] RBP: 00007f4e58525090 R08: 0000000000000000 R09: 0000000000000000 [ 628.815063][T12438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 628.823076][T12438] R13: 00007f4e57816038 R14: 00007f4e57815fa0 R15: 00007ffcdc901cd8 [ 628.831112][T12438] [ 629.099313][T12444] netlink: 'syz.2.2578': attribute type 10 has an invalid length. [ 629.156976][T12444] netlink: 172 bytes leftover after parsing attributes in process `syz.2.2578'. [ 629.211981][T12445] netlink: 'syz.1.2577': attribute type 4 has an invalid length. [ 630.148875][ T48] Bluetooth: hci1: unexpected event 0x07 length: 15 < 255 [ 630.418249][T12482] netlink: 'syz.2.2595': attribute type 4 has an invalid length. [ 631.669771][T12513] netlink: 'syz.2.2606': attribute type 27 has an invalid length. [ 631.837342][T12517] netlink: 160 bytes leftover after parsing attributes in process `syz.1.2605'. [ 632.113101][T12522] netlink: 'syz.3.2608': attribute type 4 has an invalid length. [ 632.920069][T12540] device syzkaller0 entered promiscuous mode [ 636.082889][T12561] netlink: 'syz.4.2620': attribute type 10 has an invalid length. [ 636.091662][T12561] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2620'. [ 636.103153][T12561] device bond0 entered promiscuous mode [ 636.109552][T12561] device bond_slave_0 entered promiscuous mode [ 636.120180][T12561] device bond_slave_1 entered promiscuous mode [ 636.128370][T12561] device netdevsim0 entered promiscuous mode [ 636.171762][T12561] 8021q: adding VLAN 0 to HW filter on device bond0 [ 636.808337][T12570] netlink: 'syz.3.2622': attribute type 4 has an invalid length. [ 637.762113][T12599] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2630'. [ 641.118778][T12610] netlink: 'syz.2.2636': attribute type 4 has an invalid length. [ 642.373393][T12639] netlink: 'syz.0.2643': attribute type 10 has an invalid length. [ 642.417994][T12639] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2643'. [ 642.444916][T12639] device bond0 entered promiscuous mode [ 642.479604][T12639] device bond_slave_1 entered promiscuous mode [ 642.547481][T12639] device netdevsim0 entered promiscuous mode [ 642.608132][T12634] netlink: 'syz.1.2644': attribute type 10 has an invalid length. [ 643.184470][T12634] device syz_tun entered promiscuous mode [ 643.282856][T12658] FAULT_INJECTION: forcing a failure. [ 643.282856][T12658] name failslab, interval 1, probability 0, space 0, times 0 [ 643.296241][T12658] CPU: 1 PID: 12658 Comm: syz.3.2648 Not tainted syzkaller #0 [ 643.303753][T12658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 643.313854][T12658] Call Trace: [ 643.317169][T12658] [ 643.320135][T12658] dump_stack_lvl+0x188/0x24e [ 643.324958][T12658] ? sctp_sendmsg+0x15b0/0x2940 [ 643.329884][T12658] ? ___sys_sendmsg+0x2a2/0x360 [ 643.334788][T12658] ? show_regs_print_info+0x12/0x12 [ 643.340098][T12658] ? load_image+0x400/0x400 [ 643.344665][T12658] should_fail_ex+0x399/0x4d0 [ 643.349398][T12658] should_failslab+0x5/0x20 [ 643.353958][T12658] slab_pre_alloc_hook+0x59/0x310 [ 643.359030][T12658] ? sctp_add_bind_addr+0x89/0x350 [ 643.364185][T12658] __kmem_cache_alloc_node+0x4f/0x260 [ 643.369653][T12658] ? sctp_add_bind_addr+0x89/0x350 [ 643.374812][T12658] kmalloc_trace+0x26/0xe0 [ 643.379296][T12658] sctp_add_bind_addr+0x89/0x350 [ 643.384375][T12658] sctp_copy_local_addr_list+0x311/0x4e0 [ 643.390073][T12658] ? sctp_copy_local_addr_list+0xa1/0x4e0 [ 643.395854][T12658] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 643.401970][T12658] ? sctp_v6_is_any+0x60/0x70 [ 643.406689][T12658] ? sctp_copy_one_addr+0x93/0x660 [ 643.411871][T12658] sctp_bind_addr_copy+0xaf/0x3c0 [ 643.416951][T12658] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 643.423363][T12658] sctp_connect_new_asoc+0x2f5/0x6a0 [ 643.428709][T12658] ? __sctp_connect+0xd80/0xd80 [ 643.433611][T12658] ? __local_bh_enable_ip+0x136/0x1c0 [ 643.439127][T12658] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 643.444733][T12658] ? security_sctp_bind_connect+0x85/0xb0 [ 643.450515][T12658] sctp_sendmsg+0x15b0/0x2940 [ 643.455309][T12658] ? sctp_getsockopt+0x8a0/0x8a0 [ 643.460484][T12658] ? __lock_acquire+0x7d10/0x7d10 [ 643.465561][T12658] ? aa_af_perm+0x340/0x340 [ 643.470117][T12658] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 643.476595][T12658] ? inet_sendmsg+0xe5/0x2f0 [ 643.481242][T12658] ? inet_send_prepare+0x260/0x260 [ 643.486401][T12658] ____sys_sendmsg+0x5be/0x970 [ 643.491230][T12658] ? __sys_sendmsg_sock+0x30/0x30 [ 643.496320][T12658] ? __import_iovec+0x315/0x500 [ 643.501223][T12658] ? import_iovec+0x6f/0xa0 [ 643.505875][T12658] ___sys_sendmsg+0x2a2/0x360 [ 643.510632][T12658] ? __sys_sendmsg+0x290/0x290 [ 643.515480][T12658] ? trace_call_bpf+0xbf/0x6b0 [ 643.520324][T12658] __se_sys_sendmsg+0x1bb/0x2a0 [ 643.525232][T12658] ? __x64_sys_sendmsg+0x80/0x80 [ 643.530231][T12658] ? lockdep_hardirqs_on+0x94/0x140 [ 643.535500][T12658] do_syscall_64+0x4c/0xa0 [ 643.539974][T12658] ? clear_bhb_loop+0x60/0xb0 [ 643.544700][T12658] ? clear_bhb_loop+0x60/0xb0 [ 643.549453][T12658] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 643.555477][T12658] RIP: 0033:0x7fa28a99c799 [ 643.559930][T12658] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 643.579672][T12658] RSP: 002b:00007fa28b815028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 643.588135][T12658] RAX: ffffffffffffffda RBX: 00007fa28ac15fa0 RCX: 00007fa28a99c799 [ 643.596236][T12658] RDX: 0000000020004054 RSI: 00002000000005c0 RDI: 0000000000000003 [ 643.604257][T12658] RBP: 00007fa28b815090 R08: 0000000000000000 R09: 0000000000000000 [ 643.612287][T12658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 643.620300][T12658] R13: 00007fa28ac16038 R14: 00007fa28ac15fa0 R15: 00007fffefb6ec18 [ 643.628332][T12658] [ 644.282190][T12672] netlink: 'syz.1.2652': attribute type 3 has an invalid length. [ 644.327409][T12672] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2652'. [ 644.574803][T12681] netlink: 'syz.0.2655': attribute type 10 has an invalid length. [ 644.582984][T12681] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 644.618588][T12681] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 644.783996][T12683] device syzkaller0 entered promiscuous mode [ 646.932495][T12730] netlink: 'syz.2.2668': attribute type 21 has an invalid length. [ 647.769297][T12745] netlink: 'syz.3.2671': attribute type 4 has an invalid length. [ 648.081042][T12749] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2672'. [ 648.139765][T12749] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2672'. [ 648.245559][T12751] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2672'. [ 648.446590][T12761] netlink: 'syz.4.2675': attribute type 9 has an invalid length. [ 648.472860][T12761] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.2675'. [ 648.649558][ T48] Bluetooth: hci2: ISO packet for unknown connection handle 60 [ 649.328980][T12785] netlink: 'syz.2.2683': attribute type 4 has an invalid length. [ 650.487552][T12794] FAULT_INJECTION: forcing a failure. [ 650.487552][T12794] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 650.523917][T12794] CPU: 1 PID: 12794 Comm: syz.1.2685 Not tainted syzkaller #0 [ 650.531465][T12794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 650.541564][T12794] Call Trace: [ 650.544889][T12794] [ 650.547863][T12794] dump_stack_lvl+0x188/0x24e [ 650.552601][T12794] ? show_regs_print_info+0x12/0x12 [ 650.557852][T12794] ? load_image+0x400/0x400 [ 650.562422][T12794] ? __lock_acquire+0x7d10/0x7d10 [ 650.567499][T12794] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 650.573367][T12794] should_fail_ex+0x399/0x4d0 [ 650.578112][T12794] _copy_from_user+0x2c/0x170 [ 650.582837][T12794] ___sys_sendmsg+0x1c3/0x360 [ 650.587573][T12794] ? __sys_sendmsg+0x290/0x290 [ 650.592406][T12794] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 650.598208][T12794] __se_sys_sendmsg+0x1bb/0x2a0 [ 650.603128][T12794] ? __x64_sys_sendmsg+0x80/0x80 [ 650.608136][T12794] ? syscall_enter_from_user_mode+0x2a/0x80 [ 650.614090][T12794] do_syscall_64+0x4c/0xa0 [ 650.618561][T12794] ? clear_bhb_loop+0x60/0xb0 [ 650.623373][T12794] ? clear_bhb_loop+0x60/0xb0 [ 650.628096][T12794] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 650.634034][T12794] RIP: 0033:0x7f1c40b9c799 [ 650.638505][T12794] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 650.658347][T12794] RSP: 002b:00007f1c41a00028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 650.666908][T12794] RAX: ffffffffffffffda RBX: 00007f1c40e15fa0 RCX: 00007f1c40b9c799 [ 650.675094][T12794] RDX: 00000000040080c0 RSI: 00002000000003c0 RDI: 0000000000000005 [ 650.683106][T12794] RBP: 00007f1c41a00090 R08: 0000000000000000 R09: 0000000000000000 [ 650.691117][T12794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 650.699130][T12794] R13: 00007f1c40e16038 R14: 00007f1c40e15fa0 R15: 00007ffeac685908 [ 650.707312][T12794] [ 651.058942][T12798] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2687'. [ 651.152466][T12798] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2687'. [ 651.173742][T12799] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2687'. [ 651.731433][T12808] netlink: 'syz.1.2690': attribute type 4 has an invalid length. [ 651.778512][T12808] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2690'. [ 655.099578][T12816] netlink: 'syz.1.2694': attribute type 4 has an invalid length. [ 655.108306][T12838] netlink: 'syz.2.2696': attribute type 10 has an invalid length. [ 655.579392][T12854] netlink: 'syz.3.2702': attribute type 29 has an invalid length. [ 655.612380][T12854] netlink: 'syz.3.2702': attribute type 29 has an invalid length. [ 655.813089][T12858] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2704'. [ 655.892648][T12858] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2704'. [ 655.998231][T12863] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2704'. [ 657.401053][T12872] netlink: 'syz.4.2710': attribute type 4 has an invalid length. [ 657.468447][T12880] FAULT_INJECTION: forcing a failure. [ 657.468447][T12880] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 657.503839][T12880] CPU: 0 PID: 12880 Comm: syz.2.2712 Not tainted syzkaller #0 [ 657.511384][T12880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 657.521571][T12880] Call Trace: [ 657.524890][T12880] [ 657.527854][T12880] dump_stack_lvl+0x188/0x24e [ 657.532583][T12880] ? show_regs_print_info+0x12/0x12 [ 657.537828][T12880] ? load_image+0x400/0x400 [ 657.542378][T12880] ? __lock_acquire+0x7d10/0x7d10 [ 657.547457][T12880] should_fail_ex+0x399/0x4d0 [ 657.552181][T12880] prepare_alloc_pages+0x1e2/0x5f0 [ 657.557338][T12880] __alloc_pages+0x130/0x4f0 [ 657.561968][T12880] ? zone_statistics+0x170/0x170 [ 657.566943][T12880] ? wp_page_copy+0xcd2/0x1680 [ 657.571907][T12880] ? verify_lock_unused+0x140/0x140 [ 657.577144][T12880] __folio_alloc+0xe/0x30 [ 657.581513][T12880] vma_alloc_folio+0x4a3/0x900 [ 657.586322][T12880] wp_page_copy+0x28b/0x1680 [ 657.590938][T12880] ? do_wp_page+0x67f/0x1680 [ 657.595563][T12880] ? fault_dirty_shared_page+0x3c0/0x3c0 [ 657.601238][T12880] handle_mm_fault+0x1d19/0x3ee0 [ 657.606209][T12880] ? mt_find+0x157/0x830 [ 657.610665][T12880] ? numa_migrate_prep+0x250/0x250 [ 657.615805][T12880] ? lock_chain_count+0x20/0x20 [ 657.620688][T12880] ? lock_mm_and_find_vma+0xae/0x2f0 [ 657.625995][T12880] do_user_addr_fault+0x51f/0xb10 [ 657.631143][T12880] exc_page_fault+0x60/0x100 [ 657.635760][T12880] asm_exc_page_fault+0x22/0x30 [ 657.640633][T12880] RIP: 0010:copy_user_enhanced_fast_string+0xa/0x40 [ 657.647246][T12880] Code: ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 8d 0c ca 89 ca eb 20 0f 01 cb 83 fa 40 72 38 89 d1 a4 31 c0 0f 01 ca c3 89 ca eb 0a 90 90 90 90 90 90 90 90 90 90 [ 657.666894][T12880] RSP: 0018:ffffc9000d007628 EFLAGS: 00050202 [ 657.672995][T12880] RAX: ffffffff840eb601 RBX: 0000000000000e5c RCX: 000000000000055c [ 657.681256][T12880] RDX: 0000000000000e5c RSI: ffff88801fbde900 RDI: 0000200000006000 [ 657.689255][T12880] RBP: 0000000000000000 R08: ffff88801fbdee5b R09: 1ffff11003f7bdcb [ 657.697252][T12880] R10: dffffc0000000000 R11: ffffed1003f7bdcc R12: 00007fffffffe1a4 [ 657.705420][T12880] R13: 0000000000000e5c R14: ffff88801fbde000 R15: 0000200000005700 [ 657.713510][T12880] ? copyout+0xa1/0x120 [ 657.717811][T12880] copyout+0xe7/0x120 [ 657.721917][T12880] _copy_to_iter+0x48b/0x1040 [ 657.726927][T12880] ? iov_iter_init+0x1f0/0x1f0 [ 657.731744][T12880] ? __virt_addr_valid+0x188/0x540 [ 657.736898][T12880] ? __virt_addr_valid+0x465/0x540 [ 657.742047][T12880] ? __phys_addr_symbol+0x2b/0x70 [ 657.747108][T12880] ? __check_object_size+0x500/0xa40 [ 657.752435][T12880] __skb_datagram_iter+0xde/0x740 [ 657.757498][T12880] ? skb_copy_datagram_iter+0x290/0x290 [ 657.763611][T12880] skb_copy_datagram_iter+0xd7/0x290 [ 657.768929][T12880] netlink_recvmsg+0x2d0/0xe00 [ 657.773737][T12880] ? netlink_sendmsg+0xbd0/0xbd0 [ 657.778719][T12880] ? aa_af_perm+0x340/0x340 [ 657.783260][T12880] ? __might_fault+0xa6/0x120 [ 657.787966][T12880] ? bpf_lsm_socket_recvmsg+0x5/0x10 [ 657.793274][T12880] ? security_socket_recvmsg+0x85/0xb0 [ 657.798768][T12880] ? netlink_sendmsg+0xbd0/0xbd0 [ 657.803738][T12880] ____sys_recvmsg+0x2cb/0x5e0 [ 657.808629][T12880] ? __sys_recvmsg_sock+0x40/0x40 [ 657.813710][T12880] ? import_iovec+0x6f/0xa0 [ 657.818246][T12880] ___sys_recvmsg+0x212/0x590 [ 657.822970][T12880] ? __sys_recvmsg+0x290/0x290 [ 657.827769][T12880] ? common_file_perm+0x171/0x1c0 [ 657.832917][T12880] ? __fget_files+0x43d/0x4b0 [ 657.837639][T12880] __x64_sys_recvmsg+0x205/0x2e0 [ 657.842612][T12880] ? ___sys_recvmsg+0x590/0x590 [ 657.847511][T12880] ? lockdep_hardirqs_on+0x94/0x140 [ 657.852826][T12880] do_syscall_64+0x4c/0xa0 [ 657.857275][T12880] ? clear_bhb_loop+0x60/0xb0 [ 657.861983][T12880] ? clear_bhb_loop+0x60/0xb0 [ 657.866692][T12880] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 657.872866][T12880] RIP: 0033:0x7f4e5759c799 [ 657.877303][T12880] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 657.897105][T12880] RSP: 002b:00007f4e58525028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 657.905649][T12880] RAX: ffffffffffffffda RBX: 00007f4e57815fa0 RCX: 00007f4e5759c799 [ 657.913640][T12880] RDX: 0000000000010100 RSI: 0000200000000080 RDI: 0000000000000003 [ 657.921726][T12880] RBP: 00007f4e58525090 R08: 0000000000000000 R09: 0000000000000000 [ 657.929981][T12880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 657.938156][T12880] R13: 00007f4e57816038 R14: 00007f4e57815fa0 R15: 00007ffcdc901cd8 [ 657.946167][T12880] [ 658.759837][T12909] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2720'. [ 658.777418][T12909] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2720'. [ 658.800272][T12909] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2720'. [ 659.375883][T12917] netlink: 'syz.1.2723': attribute type 4 has an invalid length. [ 660.246537][T12922] netlink: 'syz.0.2725': attribute type 11 has an invalid length. [ 660.283883][T12922] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2725'. [ 660.998302][T12947] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2732'. [ 661.031322][T12947] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2732'. [ 661.074389][T12953] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2732'. [ 661.981317][T12958] netlink: 'syz.1.2734': attribute type 4 has an invalid length. [ 663.280965][T12977] device veth1_macvtap left promiscuous mode [ 663.318543][T12977] device macsec0 entered promiscuous mode [ 663.608669][T12993] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2746'. [ 663.658868][T12993] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2746'. [ 663.690932][T12999] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2746'. [ 663.756312][T12997] netlink: 'syz.1.2747': attribute type 10 has an invalid length. [ 663.777158][T13001] netlink: 'syz.0.2749': attribute type 4 has an invalid length. [ 663.789441][T12995] delete_channel: no stack [ 665.137881][T13027] netlink: 'syz.1.2754': attribute type 4 has an invalid length. [ 665.171021][T13027] netlink: 'syz.1.2754': attribute type 3 has an invalid length. [ 665.180346][T13030] FAULT_INJECTION: forcing a failure. [ 665.180346][T13030] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 665.204858][T13027] netlink: 153952 bytes leftover after parsing attributes in process `syz.1.2754'. [ 665.282602][T13030] CPU: 1 PID: 13030 Comm: syz.0.2756 Not tainted syzkaller #0 [ 665.290166][T13030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 665.300272][T13030] Call Trace: [ 665.303604][T13030] [ 665.306576][T13030] dump_stack_lvl+0x188/0x24e [ 665.311576][T13030] ? show_regs_print_info+0x12/0x12 [ 665.316873][T13030] ? load_image+0x400/0x400 [ 665.321455][T13030] ? __lock_acquire+0x7d10/0x7d10 [ 665.326805][T13030] ? __virt_addr_valid+0x188/0x540 [ 665.331971][T13030] should_fail_ex+0x399/0x4d0 [ 665.336733][T13030] _copy_from_user+0x2c/0x170 [ 665.341485][T13030] sctp_setsockopt+0x19a/0xf90 [ 665.346310][T13030] ? sock_common_recvmsg+0x190/0x190 [ 665.351683][T13030] __sys_setsockopt+0x2bf/0x3d0 [ 665.356636][T13030] __x64_sys_setsockopt+0xb1/0xc0 [ 665.361726][T13030] do_syscall_64+0x4c/0xa0 [ 665.366506][T13030] ? clear_bhb_loop+0x60/0xb0 [ 665.371464][T13030] ? clear_bhb_loop+0x60/0xb0 [ 665.376220][T13030] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 665.382438][T13030] RIP: 0033:0x7f3cd639c799 [ 665.387093][T13030] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 665.408772][T13030] RSP: 002b:00007f3cd71ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 665.417533][T13030] RAX: ffffffffffffffda RBX: 00007f3cd6615fa0 RCX: 00007f3cd639c799 [ 665.426196][T13030] RDX: 0000000000000011 RSI: 0000000000000084 RDI: 0000000000000006 [ 665.434298][T13030] RBP: 00007f3cd71ea090 R08: 0000000000000008 R09: 0000000000000000 [ 665.442294][T13030] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 665.450286][T13030] R13: 00007f3cd6616038 R14: 00007f3cd6615fa0 R15: 00007ffdcaf75708 [ 665.458303][T13030] [ 666.174329][T13042] netlink: 'syz.1.2760': attribute type 4 has an invalid length. [ 666.479892][T13051] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2763'. [ 666.490032][T13051] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2763'. [ 666.501118][T13051] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2763'. [ 668.523160][ T4283] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 668.533922][ T4283] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 668.542600][ T4283] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 668.557143][ T4283] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 668.565215][ T4283] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 668.573365][ T4283] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 670.684823][ T4283] Bluetooth: hci5: command 0x0409 tx timeout [ 670.884336][T13088] netlink: 'syz.4.2775': attribute type 10 has an invalid length. [ 671.270145][T13093] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2777'. [ 671.704297][T13088] wlan1: mtu less than device minimum [ 671.720151][T13088] bond0: (slave wlan1): Error -22 calling dev_set_mtu [ 671.740897][T13093] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2777'. [ 671.765900][T13075] chnl_net:caif_netlink_parms(): no params data found [ 671.796115][T13094] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2777'. [ 671.964762][ T4460] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.171875][ T4460] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.766382][ T4283] Bluetooth: hci5: command 0x041b tx timeout [ 673.177692][ T4460] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.199985][T13075] bridge0: port 1(bridge_slave_0) entered blocking state [ 673.212395][T13075] bridge0: port 1(bridge_slave_0) entered disabled state [ 673.223596][T13075] device bridge_slave_0 entered promiscuous mode [ 673.340930][ T4460] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.401781][T13075] bridge0: port 2(bridge_slave_1) entered blocking state [ 673.414733][T13075] bridge0: port 2(bridge_slave_1) entered disabled state [ 673.443166][T13075] device bridge_slave_1 entered promiscuous mode [ 673.541637][T13075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 673.572075][T13075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 673.658951][T13075] team0: Port device team_slave_0 added [ 673.678434][T13075] team0: Port device team_slave_1 added [ 673.730983][T13075] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 673.739751][T13075] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 673.774788][T13075] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 673.799742][T13075] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 673.813942][T13075] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 673.850316][T13075] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 674.166468][T13075] device hsr_slave_0 entered promiscuous mode [ 674.189096][T13075] device hsr_slave_1 entered promiscuous mode [ 674.213795][T13075] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 674.239922][T13075] Cannot create hsr debugfs directory [ 674.849374][ T4283] Bluetooth: hci5: command 0x040f tx timeout [ 675.039997][T13145] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2790'. [ 675.118492][T13145] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2790'. [ 675.219949][T13148] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2790'. [ 675.254213][T13147] netlink: 'syz.3.2791': attribute type 10 has an invalid length. [ 675.513029][T13147] device wlan1 entered promiscuous mode [ 675.554334][T13147] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 675.675330][ T4460] tipc: Left network mode [ 675.842553][ T4460] bridge0: port 3(ip6gretap0) entered disabled state [ 676.847538][ T4460] device ip6gretap0 left promiscuous mode [ 676.862673][ T4460] bridge0: port 3(ip6gretap0) entered disabled state [ 676.914750][ T4283] Bluetooth: hci5: command 0x0419 tx timeout [ 677.108259][T13186] netlink: 'syz.0.2798': attribute type 29 has an invalid length. [ 677.166598][T13186] netlink: 'syz.0.2798': attribute type 29 has an invalid length. [ 677.890192][T13203] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2804'. [ 678.378626][T13203] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2804'. [ 678.481986][T13204] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2804'. [ 679.086661][T13218] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.2807'. [ 679.211504][T13218] delete_channel: no stack [ 679.560114][T13075] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 679.694656][T13075] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 679.705359][T13075] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 679.785500][T13075] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 680.450987][T13075] 8021q: adding VLAN 0 to HW filter on device bond0 [ 680.823336][T13243] netlink: 'syz.1.2812': attribute type 3 has an invalid length. [ 681.007639][T13243] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2812'. [ 683.513605][T13075] 8021q: adding VLAN 0 to HW filter on device team0 [ 683.543536][T11110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 683.551873][T11110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 683.571467][T11110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 683.619801][T11110] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 683.655340][T11110] bridge0: port 1(bridge_slave_0) entered blocking state [ 683.662533][T11110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 683.764649][T11110] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 683.833160][T11110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 683.846772][T13261] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2817'. [ 683.873231][T11110] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 683.904750][T11110] bridge0: port 2(bridge_slave_1) entered blocking state [ 683.911923][T11110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 683.949976][T11110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 685.274766][T13261] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2817'. [ 685.284779][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 685.305817][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 685.382352][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 685.407611][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 685.425606][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 685.444836][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 685.523906][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 685.565557][T13075] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 685.674787][T13075] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 685.712898][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 685.739947][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 685.762594][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 685.799034][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.805925][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.121907][T13290] netlink: 202920 bytes leftover after parsing attributes in process `syz.3.2822'. [ 686.235796][T13290] delete_channel: no stack [ 688.560760][T13311] netlink: 'syz.4.2828': attribute type 21 has an invalid length. [ 688.585448][T13311] IPv6: NLM_F_CREATE should be specified when creating new route [ 688.593365][T13311] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 688.600813][T13311] IPv6: NLM_F_CREATE should be set when creating new route [ 688.608210][T13311] IPv6: NLM_F_CREATE should be set when creating new route [ 688.615543][T13311] IPv6: NLM_F_CREATE should be set when creating new route [ 689.007780][T13327] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2831'. [ 689.820339][T13327] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2831'. [ 689.885414][T13331] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2831'. [ 689.952198][ T4460] device hsr_slave_0 left promiscuous mode [ 690.028424][ T4460] device hsr_slave_1 left promiscuous mode [ 690.084730][ T4460] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 690.125413][ T4460] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 690.133486][ T4460] device bridge_slave_1 left promiscuous mode [ 690.140027][ T4460] bridge0: port 2(bridge_slave_1) entered disabled state [ 690.155551][ T4460] device bridge_slave_0 left promiscuous mode [ 690.162083][ T4460] bridge0: port 1(bridge_slave_0) entered disabled state [ 690.245556][ T4460] device veth1_macvtap left promiscuous mode [ 690.255248][ T4460] device veth0_macvtap left promiscuous mode [ 690.261472][ T4460] device veth1_vlan left promiscuous mode [ 690.287317][ T4460] device veth0_vlan left promiscuous mode [ 690.689294][T13359] netlink: 202920 bytes leftover after parsing attributes in process `syz.4.2837'. [ 690.718378][T13359] delete_channel: no stack [ 693.314196][T13075] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 693.322499][T13343] netlink: 'syz.1.2833': attribute type 4 has an invalid length. [ 693.331352][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 693.345097][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 693.368547][T13387] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2847'. [ 693.473393][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 693.515378][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 693.562648][T13075] device veth0_vlan entered promiscuous mode [ 693.605846][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 693.620767][T13395] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2848'. [ 693.633716][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 693.665296][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 693.673523][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 693.703664][T13395] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2848'. [ 693.719416][T13396] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2848'. [ 693.740340][T13394] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.2851'. [ 693.744215][T13075] device veth1_vlan entered promiscuous mode [ 693.783884][T13395] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2848'. [ 693.913857][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 693.930760][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 694.013468][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 694.067077][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 694.100489][T13075] device veth0_macvtap entered promiscuous mode [ 694.134102][T13075] device veth1_macvtap entered promiscuous mode [ 694.158333][T13408] netlink: 202920 bytes leftover after parsing attributes in process `syz.1.2852'. [ 694.178831][T13408] delete_channel: no stack [ 694.255613][T13075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 694.297427][T13075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 694.353468][T13075] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 694.413491][T13075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 694.469600][T13075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 694.530552][T13075] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 694.600498][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 694.617583][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 694.641514][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 694.663367][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 694.682253][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 694.693605][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 694.726627][T13075] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.742024][T13075] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.752371][T13075] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.774344][T13075] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.167045][ T4468] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 695.200537][ T4468] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 695.260234][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 695.357468][T13420] FAULT_INJECTION: forcing a failure. [ 695.357468][T13420] name failslab, interval 1, probability 0, space 0, times 0 [ 695.434936][T13420] CPU: 0 PID: 13420 Comm: syz.0.2858 Not tainted syzkaller #0 [ 695.442480][T13420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 695.448220][ T4473] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 695.452558][T13420] Call Trace: [ 695.463934][T13420] [ 695.466911][T13420] dump_stack_lvl+0x188/0x24e [ 695.471659][T13420] ? sctp_sendmsg+0x15b0/0x2940 [ 695.476658][T13420] ? ___sys_sendmsg+0x2a2/0x360 [ 695.481570][T13420] ? show_regs_print_info+0x12/0x12 [ 695.486829][T13420] ? load_image+0x400/0x400 [ 695.487455][ T4473] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 695.491394][T13420] should_fail_ex+0x399/0x4d0 [ 695.503459][T13420] should_failslab+0x5/0x20 [ 695.508025][T13420] slab_pre_alloc_hook+0x59/0x310 [ 695.513152][T13420] ? sctp_add_bind_addr+0x89/0x350 [ 695.518324][T13420] __kmem_cache_alloc_node+0x4f/0x260 [ 695.523773][T13420] ? sctp_add_bind_addr+0x89/0x350 [ 695.528962][T13420] kmalloc_trace+0x26/0xe0 [ 695.533444][T13420] sctp_add_bind_addr+0x89/0x350 [ 695.538448][T13420] sctp_copy_local_addr_list+0x311/0x4e0 [ 695.544145][T13420] ? sctp_copy_local_addr_list+0xa1/0x4e0 [ 695.550450][T13420] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 695.550699][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 695.556560][T13420] ? sctp_v4_is_any+0x31/0x50 [ 695.556591][T13420] ? sctp_copy_one_addr+0x93/0x660 [ 695.556623][T13420] sctp_bind_addr_copy+0xaf/0x3c0 [ 695.556654][T13420] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 695.556691][T13420] sctp_connect_new_asoc+0x2f5/0x6a0 [ 695.556725][T13420] ? __sctp_connect+0xd80/0xd80 [ 695.556754][T13420] ? __local_bh_enable_ip+0x136/0x1c0 [ 695.556774][T13420] ? _local_bh_enable+0xa0/0xa0 [ 695.556792][T13420] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 695.556822][T13420] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 695.556861][T13420] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 695.556885][T13420] ? security_sctp_bind_connect+0x85/0xb0 [ 695.556910][T13420] sctp_sendmsg+0x15b0/0x2940 [ 695.556955][T13420] ? aa_sk_perm+0x811/0x950 [ 695.556983][T13420] ? sctp_getsockopt+0x8a0/0x8a0 [ 695.557014][T13420] ? __might_fault+0xa6/0x120 [ 695.557036][T13420] ? aa_af_perm+0x340/0x340 [ 695.557061][T13420] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 695.660192][T13420] ? inet_sendmsg+0x78/0x2f0 [ 695.664849][T13420] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 695.670183][T13420] ? security_socket_sendmsg+0x7c/0xa0 [ 695.675709][T13420] ? inet_send_prepare+0x260/0x260 [ 695.680894][T13420] ____sys_sendmsg+0x5be/0x970 [ 695.685771][T13420] ? __sys_sendmsg_sock+0x30/0x30 [ 695.690891][T13420] ? __import_iovec+0x315/0x500 [ 695.695891][T13420] ? import_iovec+0x6f/0xa0 [ 695.700487][T13420] ___sys_sendmsg+0x2a2/0x360 [ 695.705228][T13420] ? __sys_sendmsg+0x290/0x290 [ 695.710070][T13420] ? __lock_acquire+0x7d10/0x7d10 [ 695.715191][T13420] __se_sys_sendmsg+0x1bb/0x2a0 [ 695.720113][T13420] ? __x64_sys_sendmsg+0x80/0x80 [ 695.725215][T13420] ? lockdep_hardirqs_on+0x94/0x140 [ 695.730473][T13420] do_syscall_64+0x4c/0xa0 [ 695.734942][T13420] ? clear_bhb_loop+0x60/0xb0 [ 695.739673][T13420] ? clear_bhb_loop+0x60/0xb0 [ 695.744417][T13420] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 695.750364][T13420] RIP: 0033:0x7f3cd639c799 [ 695.754917][T13420] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 695.774572][T13420] RSP: 002b:00007f3cd71ea028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 695.783040][T13420] RAX: ffffffffffffffda RBX: 00007f3cd6615fa0 RCX: 00007f3cd639c799 [ 695.791071][T13420] RDX: 00000000000480d1 RSI: 0000200000000140 RDI: 0000000000000004 [ 695.799120][T13420] RBP: 00007f3cd71ea090 R08: 0000000000000000 R09: 0000000000000000 [ 695.807146][T13420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 695.815163][T13420] R13: 00007f3cd6616038 R14: 00007f3cd6615fa0 R15: 00007ffdcaf75708 [ 695.823212][T13420] [ 696.433134][T13434] netlink: 'syz.0.2859': attribute type 4 has an invalid length. [ 697.149977][ T4460] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.250444][ T48] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 697.262423][ T48] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 697.272166][ T48] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 697.283463][ T48] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 697.291563][ T48] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 697.299289][ T48] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 697.386865][ T4460] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.372529][ T4460] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.536665][ T4460] bond0: (slave netdevsim0): Releasing backup interface [ 698.569007][ T4460] device netdevsim0 left promiscuous mode [ 698.592206][ T4460] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.077423][T13480] netlink: 'syz.2.2876': attribute type 4 has an invalid length. [ 699.404921][ T48] Bluetooth: hci1: command 0x0409 tx timeout [ 699.679777][T13456] chnl_net:caif_netlink_parms(): no params data found [ 700.003455][T13494] netlink: 'syz.0.2879': attribute type 4 has an invalid length. [ 700.045216][ T4460] tipc: Left network mode [ 700.423198][T13512] FAULT_INJECTION: forcing a failure. [ 700.423198][T13512] name failslab, interval 1, probability 0, space 0, times 0 [ 700.600372][T13512] CPU: 1 PID: 13512 Comm: syz.1.2885 Not tainted syzkaller #0 [ 700.608023][T13512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 700.618227][T13512] Call Trace: [ 700.621552][T13512] [ 700.624527][T13512] dump_stack_lvl+0x188/0x24e [ 700.629272][T13512] ? show_regs_print_info+0x12/0x12 [ 700.634541][T13512] ? load_image+0x400/0x400 [ 700.639117][T13512] ? __might_sleep+0xd0/0xd0 [ 700.643767][T13512] ? __lock_acquire+0x7d10/0x7d10 [ 700.648860][T13512] should_fail_ex+0x399/0x4d0 [ 700.653612][T13512] should_failslab+0x5/0x20 [ 700.658185][T13512] slab_pre_alloc_hook+0x59/0x310 [ 700.663278][T13512] kmem_cache_alloc_node+0x5a/0x320 [ 700.668620][T13512] ? __alloc_skb+0xfc/0x7e0 [ 700.673195][T13512] __alloc_skb+0xfc/0x7e0 [ 700.677623][T13512] ? netlink_autobind+0xda/0x300 [ 700.682799][T13512] netlink_sendmsg+0x654/0xbd0 [ 700.687689][T13512] ? netlink_getsockopt+0x550/0x550 [ 700.692950][T13512] ? aa_sock_msg_perm+0x94/0x150 [ 700.697939][T13512] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 700.703302][T13512] ? security_socket_sendmsg+0x7c/0xa0 [ 700.709175][T13512] ? netlink_getsockopt+0x550/0x550 [ 700.714609][T13512] ____sys_sendmsg+0x5be/0x970 [ 700.719441][T13512] ? __sys_sendmsg_sock+0x30/0x30 [ 700.724525][T13512] ? __import_iovec+0x315/0x500 [ 700.729439][T13512] ? import_iovec+0x6f/0xa0 [ 700.734114][T13512] ___sys_sendmsg+0x2a2/0x360 [ 700.738858][T13512] ? __sys_sendmsg+0x290/0x290 [ 700.743804][T13512] ? __lock_acquire+0x7d10/0x7d10 [ 700.749017][T13512] __se_sys_sendmsg+0x1bb/0x2a0 [ 700.754014][T13512] ? __x64_sys_sendmsg+0x80/0x80 [ 700.759037][T13512] ? lockdep_hardirqs_on+0x94/0x140 [ 700.764319][T13512] do_syscall_64+0x4c/0xa0 [ 700.768804][T13512] ? clear_bhb_loop+0x60/0xb0 [ 700.773702][T13512] ? clear_bhb_loop+0x60/0xb0 [ 700.778430][T13512] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 700.784379][T13512] RIP: 0033:0x7f1c40b9c799 [ 700.788850][T13512] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 700.808589][T13512] RSP: 002b:00007f1c41a00028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 700.817759][T13512] RAX: ffffffffffffffda RBX: 00007f1c40e15fa0 RCX: 00007f1c40b9c799 [ 700.825785][T13512] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000007 [ 700.833825][T13512] RBP: 00007f1c41a00090 R08: 0000000000000000 R09: 0000000000000000 [ 700.841845][T13512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 700.849871][T13512] R13: 00007f1c40e16038 R14: 00007f1c40e15fa0 R15: 00007ffeac685908 [ 700.857929][T13512] [ 701.268408][T13456] bridge0: port 1(bridge_slave_0) entered blocking state [ 701.304390][T13456] bridge0: port 1(bridge_slave_0) entered disabled state [ 701.325904][T13456] device bridge_slave_0 entered promiscuous mode [ 701.349217][T13456] bridge0: port 2(bridge_slave_1) entered blocking state [ 701.377816][T13456] bridge0: port 2(bridge_slave_1) entered disabled state [ 701.427535][T13456] device bridge_slave_1 entered promiscuous mode [ 701.474585][ T48] Bluetooth: hci1: command 0x041b tx timeout [ 702.830173][T13456] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 702.880436][T13456] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 703.588649][ T48] Bluetooth: hci1: command 0x040f tx timeout [ 704.137678][T13456] team0: Port device team_slave_0 added [ 704.143975][T13552] netlink: 'syz.3.2890': attribute type 4 has an invalid length. [ 704.238561][T13456] team0: Port device team_slave_1 added [ 704.419331][T13456] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 704.454029][T13572] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2895'. [ 704.457103][T13456] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 704.499827][T13456] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 704.615842][T13568] netlink: 'syz.2.2893': attribute type 4 has an invalid length. [ 704.632998][T13572] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2895'. [ 704.653461][T13456] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 704.681343][T13456] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 704.793840][T13456] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 704.925243][T13575] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2895'. [ 705.634727][ T48] Bluetooth: hci1: command 0x0419 tx timeout [ 705.763328][T13588] mac80211_hwsim hwsim27 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 705.990695][T13456] device hsr_slave_0 entered promiscuous mode [ 706.031438][T13456] device hsr_slave_1 entered promiscuous mode [ 706.192347][T13605] bY4`Ҙ: renamed from lo [ 707.873263][T13616] netlink: 11262 bytes leftover after parsing attributes in process `syz.1.2902'. [ 707.904139][T13620] netlink: 'syz.2.2905': attribute type 10 has an invalid length. [ 707.953045][T13620] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 708.005869][T13622] netlink: 'syz.3.2906': attribute type 4 has an invalid length. [ 708.182498][T13629] netlink: 'syz.1.2908': attribute type 2 has an invalid length. [ 708.186842][T13632] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2909'. [ 708.230549][T13629] netlink: 'syz.1.2908': attribute type 1 has an invalid length. [ 708.270190][T13632] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2909'. [ 709.228958][T13635] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2909'. [ 711.294852][ T4460] device hsr_slave_0 left promiscuous mode [ 711.321139][ T4460] device hsr_slave_1 left promiscuous mode [ 712.176487][ T4460] device veth1_macvtap left promiscuous mode [ 712.182608][ T4460] device veth0_macvtap left promiscuous mode [ 712.204134][ T4460] device veth1_vlan left promiscuous mode [ 712.212472][ T4460] device veth0_vlan left promiscuous mode [ 712.287630][T13703] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2926'. [ 713.435717][ T4460] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 713.448447][ T4460] device bond_slave_1 left promiscuous mode [ 713.500304][ T4460] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 713.509236][ T4460] device bond_slave_0 left promiscuous mode [ 713.790149][ T4460] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 713.799769][ T4460] bond0 (unregistering): Released all slaves [ 713.869414][T13703] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2926'. [ 713.895480][T13711] netlink: 'syz.0.2928': attribute type 4 has an invalid length. [ 713.913897][T13717] netlink: 11262 bytes leftover after parsing attributes in process `syz.2.2929'. [ 714.018637][T13456] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 714.066265][T13456] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 714.147545][T13456] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 714.248977][T13456] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 714.799232][T13456] 8021q: adding VLAN 0 to HW filter on device bond0 [ 714.920815][T13456] 8021q: adding VLAN 0 to HW filter on device team0 [ 714.976735][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 714.992255][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 715.046672][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 715.077541][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 715.108971][ T4468] bridge0: port 1(bridge_slave_0) entered blocking state [ 715.116222][ T4468] bridge0: port 1(bridge_slave_0) entered forwarding state [ 715.143424][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 715.157629][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 715.167055][ T4468] bridge0: port 2(bridge_slave_1) entered blocking state [ 715.174249][ T4468] bridge0: port 2(bridge_slave_1) entered forwarding state [ 715.202734][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 715.212034][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 715.233051][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 715.271761][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 715.294417][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 715.316940][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 715.333074][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 715.353172][T13456] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 715.373239][T13456] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 715.396378][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 715.412272][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 715.421335][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 715.440160][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 715.456926][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 715.480336][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 716.410345][T13773] netlink: 'syz.1.2944': attribute type 4 has an invalid length. [ 716.595156][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 716.603028][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 716.655081][T13456] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 718.055846][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 718.075639][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 718.208948][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 718.240762][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 718.291166][T13456] device veth0_vlan entered promiscuous mode [ 718.299903][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 718.326375][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 718.361716][T13456] device veth1_vlan entered promiscuous mode [ 718.458505][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 718.515570][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 718.567587][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 718.588552][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 718.658139][T13456] device veth0_macvtap entered promiscuous mode [ 718.736697][T13456] device veth1_macvtap entered promiscuous mode [ 718.880074][T13456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 718.924923][T13456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 718.954622][T13456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 718.975444][T13456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 718.998058][T13456] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 719.016959][T13839] netlink: 'syz.2.2960': attribute type 4 has an invalid length. [ 719.049097][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 719.065499][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 719.094253][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 719.208655][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 719.316242][T13456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 719.348436][T13456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 719.431317][T13456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 719.452551][T13456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 719.533287][T13456] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 719.599013][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 719.635942][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 719.707495][T13456] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 719.738507][T13456] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 719.804101][T13456] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 719.888480][T13456] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.672724][T13855] netlink: 11262 bytes leftover after parsing attributes in process `syz.3.2963'. [ 720.915810][ T4468] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 720.941787][ T4468] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 720.981817][T13889] mac80211_hwsim hwsim47 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 721.006137][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 721.082697][ T4488] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 721.099798][ T4488] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 721.114600][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 721.350690][T13903] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2973'. [ 721.618133][T13914] netlink: 'syz.0.2975': attribute type 29 has an invalid length. [ 724.462021][T13911] netlink: 'syz.0.2975': attribute type 21 has an invalid length. [ 724.484583][T13911] netlink: 'syz.0.2975': attribute type 11 has an invalid length. [ 724.505322][T13914] netlink: 'syz.0.2975': attribute type 29 has an invalid length. [ 724.861215][T13946] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2980'. [ 724.944897][T13946] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2980'. [ 725.021042][T13949] netlink: 202920 bytes leftover after parsing attributes in process `syz.1.2978'. [ 725.056691][T13951] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2980'. [ 725.109381][T13956] delete_channel: no stack [ 726.728511][T13976] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2989'. [ 726.750912][T13978] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2990'. [ 726.805134][T13978] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2990'. [ 726.889754][T13976] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2989'. [ 726.911291][T13981] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2990'. [ 726.981466][T13979] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2989'. [ 728.201063][T14005] delete_channel: no stack [ 728.495561][T14001] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.2997'. [ 729.202523][T14026] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3005'. [ 729.343750][T14028] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3006'. [ 729.382776][T14028] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3006'. [ 729.477031][T14031] netlink: 'syz.2.3008': attribute type 21 has an invalid length. [ 731.079859][T14053] netlink: 'syz.3.3015': attribute type 10 has an invalid length. [ 731.491900][T14067] netlink: 'syz.4.3020': attribute type 11 has an invalid length. [ 731.800038][T14067] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 731.884014][T14084] __nla_validate_parse: 9 callbacks suppressed [ 731.884038][T14084] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3024'. [ 731.922432][T14084] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3024'. [ 731.945312][T14088] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3024'. [ 731.976607][T14087] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3035'. [ 732.023827][T14087] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3035'. [ 732.126368][T14090] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3035'. [ 732.663009][T14099] netlink: 202920 bytes leftover after parsing attributes in process `syz.1.3027'. [ 732.705717][T14102] delete_channel: no stack [ 734.641444][T14133] netlink: 'syz.4.3038': attribute type 10 has an invalid length. [ 734.721007][T14133] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3038'. [ 734.766815][T14133] device bond0 entered promiscuous mode [ 734.794190][T14133] device bond_slave_0 entered promiscuous mode [ 734.825295][T14133] device bond_slave_1 entered promiscuous mode [ 734.969465][T14142] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3041'. [ 735.183523][T14142] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3041'. [ 737.586257][T14174] netlink: 'syz.1.3054': attribute type 10 has an invalid length. [ 738.242241][T14195] __nla_validate_parse: 4 callbacks suppressed [ 738.242262][T14195] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3058'. [ 739.900549][T14207] netlink: 'syz.2.3062': attribute type 10 has an invalid length. [ 739.915010][T14207] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3062'. [ 739.934569][T14207] device bond0 entered promiscuous mode [ 739.944639][T14207] device bond_slave_0 entered promiscuous mode [ 739.961328][T14207] device bond_slave_1 entered promiscuous mode [ 739.983868][T14207] device netdevsim0 entered promiscuous mode [ 740.149986][T14218] netlink: 'syz.0.3066': attribute type 3 has an invalid length. [ 740.201183][T14218] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3066'. [ 741.235468][T14242] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3073'. [ 741.270860][T14242] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3073'. [ 741.402132][T14247] netlink: 'syz.4.3075': attribute type 4 has an invalid length. [ 743.055269][T14290] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3088'. [ 743.083291][T14291] netlink: 'syz.4.3087': attribute type 9 has an invalid length. [ 743.088242][T14290] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3088'. [ 743.121444][T14291] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.3087'. [ 743.851078][T14308] FAULT_INJECTION: forcing a failure. [ 743.851078][T14308] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 743.913163][T14308] CPU: 1 PID: 14308 Comm: syz.4.3094 Not tainted syzkaller #0 [ 743.920710][T14308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 743.930827][T14308] Call Trace: [ 743.934162][T14308] [ 743.937134][T14308] dump_stack_lvl+0x188/0x24e [ 743.942042][T14308] ? show_regs_print_info+0x12/0x12 [ 743.947314][T14308] ? load_image+0x400/0x400 [ 743.951878][T14308] ? __lock_acquire+0x7d10/0x7d10 [ 743.956974][T14308] ? lockdep_hardirqs_on+0x94/0x140 [ 743.962230][T14308] should_fail_ex+0x399/0x4d0 [ 743.967150][T14308] _copy_from_user+0x2c/0x170 [ 743.971898][T14308] __copy_msghdr+0x3b7/0x580 [ 743.976558][T14308] ___sys_sendmsg+0x210/0x360 [ 743.981379][T14308] ? perf_trace_run_bpf_submit+0x124/0x1c0 [ 743.987266][T14308] ? __sys_sendmsg+0x290/0x290 [ 743.992111][T14308] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 743.998361][T14308] __se_sys_sendmsg+0x1bb/0x2a0 [ 744.003275][T14308] ? __x64_sys_sendmsg+0x80/0x80 [ 744.008288][T14308] ? syscall_enter_from_user_mode+0x2a/0x80 [ 744.014242][T14308] do_syscall_64+0x4c/0xa0 [ 744.018708][T14308] ? clear_bhb_loop+0x60/0xb0 [ 744.023431][T14308] ? clear_bhb_loop+0x60/0xb0 [ 744.028150][T14308] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 744.034084][T14308] RIP: 0033:0x7fd3b619c799 [ 744.038532][T14308] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 744.058192][T14308] RSP: 002b:00007fd3b7131028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 744.066740][T14308] RAX: ffffffffffffffda RBX: 00007fd3b6415fa0 RCX: 00007fd3b619c799 [ 744.074835][T14308] RDX: 00000000040080c0 RSI: 00002000000003c0 RDI: 0000000000000005 [ 744.082840][T14308] RBP: 00007fd3b7131090 R08: 0000000000000000 R09: 0000000000000000 [ 744.090865][T14308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 744.098876][T14308] R13: 00007fd3b6416038 R14: 00007fd3b6415fa0 R15: 00007fff43d85b18 [ 744.106993][T14308] [ 745.904376][T14327] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3100'. [ 745.917848][T14327] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3100'. [ 746.967679][T14351] netlink: 'syz.2.3108': attribute type 4 has an invalid length. [ 747.239446][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.245894][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.983959][T14366] netlink: 'syz.3.3113': attribute type 1 has an invalid length. [ 748.000514][T14366] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3113'. [ 748.283146][T14369] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3115'. [ 748.354203][T14369] device caif0 entered promiscuous mode [ 748.667428][T14382] bY4`Ҙ: renamed from lo [ 751.350554][T14441] netlink: 'syz.1.3142': attribute type 7 has an invalid length. [ 752.075874][T14454] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3148'. [ 753.418085][T14488] netlink: 188 bytes leftover after parsing attributes in process `syz.4.3156'. [ 755.114756][T14533] netlink: 'syz.4.3172': attribute type 10 has an invalid length. [ 758.421344][T14533] team0 (unregistering): Port device team_slave_0 removed [ 758.555946][T14533] team0 (unregistering): Port device team_slave_1 removed [ 758.927312][T14553] netlink: 'syz.0.3181': attribute type 10 has an invalid length. [ 758.974733][T14553] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3181'. [ 759.000512][T14553] device veth0_vlan left promiscuous mode [ 759.026664][T14553] device veth0_vlan entered promiscuous mode [ 759.291899][T14553] bridge0: port 3(veth0_vlan) entered blocking state [ 759.305853][T14553] bridge0: port 3(veth0_vlan) entered disabled state [ 759.371635][T14553] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 759.444609][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 759.485693][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 759.525248][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 760.637081][T14596] netlink: 'syz.0.3192': attribute type 9 has an invalid length. [ 760.652672][T14596] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.3192'. [ 765.392420][T14642] netlink: 'syz.1.3205': attribute type 27 has an invalid length. [ 766.533740][T14661] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3211'. [ 766.564650][T14661] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3211'. [ 766.602271][T14661] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3211'. [ 767.007109][T14682] device syzkaller0 entered promiscuous mode [ 768.360221][T14714] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3227'. [ 769.908353][T14711] netlink: 'syz.2.3225': attribute type 2 has an invalid length. [ 769.918815][T14711] netlink: 'syz.2.3225': attribute type 8 has an invalid length. [ 769.931036][T14711] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3225'. [ 769.943822][T14714] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3227'. [ 770.201762][T14734] FAULT_INJECTION: forcing a failure. [ 770.201762][T14734] name failslab, interval 1, probability 0, space 0, times 0 [ 770.309757][T14734] CPU: 0 PID: 14734 Comm: syz.4.3233 Not tainted syzkaller #0 [ 770.317321][T14734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 770.327429][T14734] Call Trace: [ 770.330766][T14734] [ 770.333736][T14734] dump_stack_lvl+0x188/0x24e [ 770.338478][T14734] ? show_regs_print_info+0x12/0x12 [ 770.343735][T14734] ? load_image+0x400/0x400 [ 770.348305][T14734] ? __might_sleep+0xd0/0xd0 [ 770.352955][T14734] ? __lock_acquire+0x7d10/0x7d10 [ 770.358058][T14734] should_fail_ex+0x399/0x4d0 [ 770.362822][T14734] should_failslab+0x5/0x20 [ 770.367399][T14734] slab_pre_alloc_hook+0x59/0x310 [ 770.372486][T14734] kmem_cache_alloc_node+0x5a/0x320 [ 770.377739][T14734] ? __alloc_skb+0xfc/0x7e0 [ 770.382326][T14734] __alloc_skb+0xfc/0x7e0 [ 770.386811][T14734] alloc_skb_with_frags+0xa7/0x710 [ 770.391975][T14734] ? mark_lock+0x94/0x320 [ 770.396369][T14734] ? __lock_acquire+0x12f4/0x7d10 [ 770.401459][T14734] sock_alloc_send_pskb+0x87f/0x9a0 [ 770.406732][T14734] ? sock_kzfree_s+0x50/0x50 [ 770.411370][T14734] ? verify_lock_unused+0x140/0x140 [ 770.416635][T14734] __ip6_append_data+0x2ae9/0x3d40 [ 770.421827][T14734] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 770.427188][T14734] ? ip6_mtu+0x79/0x3f0 [ 770.431662][T14734] ? ip6_setup_cork+0xfe0/0xfe0 [ 770.436578][T14734] ? ip6_setup_cork+0xa30/0xfe0 [ 770.441747][T14734] ip6_append_data+0x1ea/0x3e0 [ 770.446829][T14734] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 770.451736][T14734] l2tp_ip6_sendmsg+0x1208/0x1670 [ 770.456917][T14734] ? l2tp_ip6_destroy_sock+0x50/0x50 [ 770.462285][T14734] ? aa_af_perm+0x340/0x340 [ 770.466885][T14734] ? tomoyo_socket_sendmsg_permission+0x212/0x2f0 [ 770.473367][T14734] ? sock_rps_record_flow+0x19/0x3f0 [ 770.478720][T14734] ? inet_sendmsg+0x78/0x2f0 [ 770.483376][T14734] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 770.488711][T14734] ? security_socket_sendmsg+0x7c/0xa0 [ 770.494243][T14734] ? inet_send_prepare+0x260/0x260 [ 770.499528][T14734] ____sys_sendmsg+0x5be/0x970 [ 770.504356][T14734] ? __sys_sendmsg_sock+0x30/0x30 [ 770.509435][T14734] ? __import_iovec+0x315/0x500 [ 770.514339][T14734] ? import_iovec+0x6f/0xa0 [ 770.518892][T14734] ___sys_sendmsg+0x2a2/0x360 [ 770.523645][T14734] ? __sys_sendmsg+0x290/0x290 [ 770.528510][T14734] ? __lock_acquire+0x7d10/0x7d10 [ 770.533707][T14734] __se_sys_sendmsg+0x1bb/0x2a0 [ 770.538623][T14734] ? __x64_sys_sendmsg+0x80/0x80 [ 770.543640][T14734] ? lockdep_hardirqs_on+0x94/0x140 [ 770.548888][T14734] do_syscall_64+0x4c/0xa0 [ 770.553448][T14734] ? clear_bhb_loop+0x60/0xb0 [ 770.558194][T14734] ? clear_bhb_loop+0x60/0xb0 [ 770.563012][T14734] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 770.569154][T14734] RIP: 0033:0x7fd3b619c799 [ 770.573615][T14734] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 770.593285][T14734] RSP: 002b:00007fd3b7131028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 770.601764][T14734] RAX: ffffffffffffffda RBX: 00007fd3b6415fa0 RCX: 00007fd3b619c799 [ 770.609786][T14734] RDX: 0000000000000000 RSI: 0000200000001180 RDI: 0000000000000003 [ 770.617824][T14734] RBP: 00007fd3b7131090 R08: 0000000000000000 R09: 0000000000000000 [ 770.626897][T14734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 770.634916][T14734] R13: 00007fd3b6416038 R14: 00007fd3b6415fa0 R15: 00007fff43d85b18 [ 770.642953][T14734] [ 771.038151][T14749] netlink: 'syz.4.3237': attribute type 3 has an invalid length. [ 771.046395][T14749] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3237'. [ 771.883569][T14771] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3242'. [ 771.911902][T14771] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3242'. [ 771.946620][T14773] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3242'. [ 771.987112][T14770] bridge0: port 4(ip6gretap0) entered disabled state [ 771.995357][T14770] bridge0: port 3(dummy0) entered disabled state [ 772.003105][T14770] bridge0: port 2(bridge_slave_1) entered disabled state [ 772.012367][T14770] bridge0: port 1(bridge_slave_0) entered disabled state [ 772.138885][T14775] device ip6gretap0 left promiscuous mode [ 772.167656][T14775] bridge0: port 4(ip6gretap0) entered disabled state [ 772.186236][T14775] bridge0: port 3(dummy0) entered disabled state [ 772.207698][T14775] device bridge_slave_1 left promiscuous mode [ 772.220010][T14775] bridge0: port 2(bridge_slave_1) entered disabled state [ 772.237786][T14775] device bridge_slave_0 left promiscuous mode [ 772.268530][T14775] bridge0: port 1(bridge_slave_0) entered disabled state [ 772.444627][T14785] FAULT_INJECTION: forcing a failure. [ 772.444627][T14785] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 772.484728][T14785] CPU: 1 PID: 14785 Comm: syz.0.3248 Not tainted syzkaller #0 [ 772.492277][T14785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 772.502372][T14785] Call Trace: [ 772.505676][T14785] [ 772.508641][T14785] dump_stack_lvl+0x188/0x24e [ 772.513363][T14785] ? show_regs_print_info+0x12/0x12 [ 772.518594][T14785] ? load_image+0x400/0x400 [ 772.523128][T14785] ? __lock_acquire+0x7d10/0x7d10 [ 772.528194][T14785] should_fail_ex+0x399/0x4d0 [ 772.532914][T14785] prepare_alloc_pages+0x1e2/0x5f0 [ 772.538075][T14785] __alloc_pages+0x130/0x4f0 [ 772.542705][T14785] ? zone_statistics+0x170/0x170 [ 772.547682][T14785] ? trace_event_raw_event_lock+0x250/0x250 [ 772.553609][T14785] __folio_alloc+0xe/0x30 [ 772.557967][T14785] vma_alloc_folio+0x4a3/0x900 [ 772.562775][T14785] wp_page_copy+0x28b/0x1680 [ 772.567621][T14785] ? do_wp_page+0x67f/0x1680 [ 772.572262][T14785] ? fault_dirty_shared_page+0x3c0/0x3c0 [ 772.577987][T14785] handle_mm_fault+0x1d19/0x3ee0 [ 772.582990][T14785] ? mt_find+0x157/0x830 [ 772.587317][T14785] ? numa_migrate_prep+0x250/0x250 [ 772.592494][T14785] ? lock_chain_count+0x20/0x20 [ 772.597481][T14785] ? lock_mm_and_find_vma+0xae/0x2f0 [ 772.602820][T14785] do_user_addr_fault+0x51f/0xb10 [ 772.607932][T14785] exc_page_fault+0x60/0x100 [ 772.612574][T14785] asm_exc_page_fault+0x22/0x30 [ 772.617552][T14785] RIP: 0010:copy_user_enhanced_fast_string+0xa/0x40 [ 772.624200][T14785] Code: ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 8d 0c ca 89 ca eb 20 0f 01 cb 83 fa 40 72 38 89 d1 a4 31 c0 0f 01 ca c3 89 ca eb 0a 90 90 90 90 90 90 90 90 90 90 [ 772.643850][T14785] RSP: 0018:ffffc90004c7f628 EFLAGS: 00050206 [ 772.650194][T14785] RAX: ffffffff840eb601 RBX: 0000000000000128 RCX: 0000000000000128 [ 772.658288][T14785] RDX: 0000000000000128 RSI: ffff8880554e4000 RDI: 00002000000012c0 [ 772.666367][T14785] RBP: 0000000000000000 R08: ffff8880554e4127 R09: 1ffff1100aa9c824 [ 772.674363][T14785] R10: dffffc0000000000 R11: ffffed100aa9c825 R12: 00007fffffffeed8 [ 772.682578][T14785] R13: 0000000000000128 R14: ffff8880554e4000 R15: 00002000000012c0 [ 772.690607][T14785] ? copyout+0xa1/0x120 [ 772.694809][T14785] copyout+0xe7/0x120 [ 772.698833][T14785] _copy_to_iter+0x48b/0x1040 [ 772.703556][T14785] ? iov_iter_init+0x1f0/0x1f0 [ 772.708372][T14785] ? __virt_addr_valid+0x188/0x540 [ 772.713531][T14785] ? __virt_addr_valid+0x465/0x540 [ 772.718677][T14785] ? __phys_addr_symbol+0x2b/0x70 [ 772.723744][T14785] ? __check_object_size+0x500/0xa40 [ 772.729271][T14785] __skb_datagram_iter+0xde/0x740 [ 772.734327][T14785] ? skb_copy_datagram_iter+0x290/0x290 [ 772.740092][T14785] skb_copy_datagram_iter+0xd7/0x290 [ 772.745419][T14785] netlink_recvmsg+0x2d0/0xe00 [ 772.750230][T14785] ? netlink_sendmsg+0xbd0/0xbd0 [ 772.755213][T14785] ? aa_af_perm+0x340/0x340 [ 772.759752][T14785] ? __might_fault+0xa6/0x120 [ 772.764467][T14785] ? bpf_lsm_socket_recvmsg+0x5/0x10 [ 772.770388][T14785] ? security_socket_recvmsg+0x85/0xb0 [ 772.776056][T14785] ? netlink_sendmsg+0xbd0/0xbd0 [ 772.781038][T14785] ____sys_recvmsg+0x2cb/0x5e0 [ 772.785876][T14785] ? __sys_recvmsg_sock+0x40/0x40 [ 772.790973][T14785] ? import_iovec+0x6f/0xa0 [ 772.795508][T14785] ___sys_recvmsg+0x212/0x590 [ 772.800229][T14785] ? __sys_recvmsg+0x290/0x290 [ 772.805122][T14785] ? common_file_perm+0x171/0x1c0 [ 772.810267][T14785] ? __fget_files+0x43d/0x4b0 [ 772.814988][T14785] __x64_sys_recvmsg+0x205/0x2e0 [ 772.820142][T14785] ? ___sys_recvmsg+0x590/0x590 [ 772.825308][T14785] ? lockdep_hardirqs_on+0x94/0x140 [ 772.830535][T14785] do_syscall_64+0x4c/0xa0 [ 772.834982][T14785] ? clear_bhb_loop+0x60/0xb0 [ 772.839685][T14785] ? clear_bhb_loop+0x60/0xb0 [ 772.844679][T14785] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 772.850599][T14785] RIP: 0033:0x7f3cd639c799 [ 772.855087][T14785] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 772.874804][T14785] RSP: 002b:00007f3cd71c9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 772.883244][T14785] RAX: ffffffffffffffda RBX: 00007f3cd6616090 RCX: 00007f3cd639c799 [ 772.891324][T14785] RDX: 0000000000000020 RSI: 0000200000000240 RDI: 0000000000000007 [ 772.899347][T14785] RBP: 00007f3cd71c9090 R08: 0000000000000000 R09: 0000000000000000 [ 772.907438][T14785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 772.915477][T14785] R13: 00007f3cd6616128 R14: 00007f3cd6616090 R15: 00007ffdcaf75708 [ 772.923527][T14785] [ 773.014179][T14787] netlink: 'syz.1.3249': attribute type 4 has an invalid length. [ 773.046344][T14790] FAULT_INJECTION: forcing a failure. [ 773.046344][T14790] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 773.084669][T14790] CPU: 1 PID: 14790 Comm: syz.3.3250 Not tainted syzkaller #0 [ 773.092211][T14790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 773.102324][T14790] Call Trace: [ 773.105645][T14790] [ 773.108614][T14790] dump_stack_lvl+0x188/0x24e [ 773.113356][T14790] ? show_regs_print_info+0x12/0x12 [ 773.118613][T14790] ? lockdep_hardirqs_on+0x94/0x140 [ 773.123907][T14790] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 773.130149][T14790] should_fail_ex+0x399/0x4d0 [ 773.134904][T14790] _copy_from_user+0x2c/0x170 [ 773.139645][T14790] iovec_from_user+0x143/0x360 [ 773.144504][T14790] __import_iovec+0x6d/0x500 [ 773.149146][T14790] ? __might_fault+0xc2/0x120 [ 773.153886][T14790] import_iovec+0x6f/0xa0 [ 773.158360][T14790] ___sys_sendmsg+0x252/0x360 [ 773.163103][T14790] ? __sys_sendmsg+0x290/0x290 [ 773.168005][T14790] ? irqentry_enter+0x33/0x50 [ 773.172787][T14790] ? rcu_is_watching+0x11/0xa0 [ 773.177635][T14790] __se_sys_sendmsg+0x1bb/0x2a0 [ 773.182550][T14790] ? __x64_sys_sendmsg+0x80/0x80 [ 773.187663][T14790] ? lockdep_hardirqs_on+0x94/0x140 [ 773.192946][T14790] do_syscall_64+0x4c/0xa0 [ 773.197518][T14790] ? clear_bhb_loop+0x60/0xb0 [ 773.202249][T14790] ? clear_bhb_loop+0x60/0xb0 [ 773.207142][T14790] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 773.213115][T14790] RIP: 0033:0x7fa28a99c799 [ 773.217684][T14790] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 773.237836][T14790] RSP: 002b:00007fa28b815028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 773.246381][T14790] RAX: ffffffffffffffda RBX: 00007fa28ac15fa0 RCX: 00007fa28a99c799 [ 773.254592][T14790] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 773.262684][T14790] RBP: 00007fa28b815090 R08: 0000000000000000 R09: 0000000000000000 [ 773.270690][T14790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 773.278769][T14790] R13: 00007fa28ac16038 R14: 00007fa28ac15fa0 R15: 00007fffefb6ec18 [ 773.286791][T14790] [ 774.866303][T14837] netlink: 'syz.3.3264': attribute type 10 has an invalid length. [ 774.896868][T14837] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3264'. [ 775.786981][T14869] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.3275'. [ 776.040328][T14874] netlink: 'syz.4.3279': attribute type 21 has an invalid length. [ 776.067895][T14874] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3279'. [ 776.085454][T14874] netlink: 'syz.4.3279': attribute type 1 has an invalid length. [ 776.103804][T14875] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3280'. [ 776.142791][T14876] tun0: tun_chr_ioctl cmd 1074025680 [ 776.508265][T14886] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3284'. [ 776.554835][T14886] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3284'. [ 776.615875][T14886] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3284'. [ 779.877190][T14926] netlink: 'syz.3.3299': attribute type 21 has an invalid length. [ 780.342172][T14935] netlink: 'syz.1.3304': attribute type 4 has an invalid length. [ 782.251407][T14952] __nla_validate_parse: 1 callbacks suppressed [ 782.251428][T14952] netlink: 10 bytes leftover after parsing attributes in process `syz.4.3320'. [ 782.775326][T14967] netlink: 'syz.0.3316': attribute type 4 has an invalid length. [ 783.357554][T14983] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 786.974330][T15010] netlink: 'syz.1.3332': attribute type 4 has an invalid length. [ 790.861593][T15033] netlink: 'syz.0.3339': attribute type 10 has an invalid length. [ 791.038908][T15034] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.3337'. [ 793.709843][T15053] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3342'. [ 806.845799][ T4281] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 806.856170][ T4281] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 806.864383][ T4281] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 806.873743][ T4281] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 806.887746][ T4281] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 806.896344][ T4281] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 807.146091][T15071] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 807.160182][T15071] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 807.169794][T15071] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 807.180826][ T4281] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 807.189478][ T4281] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 807.198285][ T4281] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 807.899508][ T4281] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 807.909342][ T4281] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 807.918235][ T4281] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 807.927571][ T4281] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 807.936265][ T4281] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 807.943871][ T4281] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 808.561886][ T4281] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 808.571151][ T4281] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 808.596549][ T4281] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 808.605724][ T4281] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 808.614238][ T4281] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 808.622603][ T4281] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 808.924960][ T4281] Bluetooth: hci3: command 0x0409 tx timeout [ 809.274863][ T4281] Bluetooth: hci6: command 0x0409 tx timeout [ 809.985500][ T4281] Bluetooth: hci7: command 0x0409 tx timeout [ 810.675157][ T4283] Bluetooth: hci8: command 0x0409 tx timeout [ 810.791604][ T4283] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 810.801328][ T4283] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 810.810134][ T4283] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 810.818869][ T4283] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 810.835790][ T4283] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 810.843558][ T4283] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 811.024939][ T4281] Bluetooth: hci3: command 0x041b tx timeout [ 811.324997][ T4281] Bluetooth: hci6: command 0x041b tx timeout [ 812.074886][ T4281] Bluetooth: hci7: command 0x041b tx timeout [ 812.775316][ T4281] Bluetooth: hci8: command 0x041b tx timeout [ 812.874935][ T4281] Bluetooth: hci9: command 0x0409 tx timeout [ 813.075187][ T4281] Bluetooth: hci3: command 0x040f tx timeout [ 813.424934][ T4281] Bluetooth: hci6: command 0x040f tx timeout [ 814.125201][ T4281] Bluetooth: hci7: command 0x040f tx timeout [ 814.875128][ T4281] Bluetooth: hci8: command 0x040f tx timeout [ 814.924927][ T4281] Bluetooth: hci9: command 0x041b tx timeout [ 815.175159][ T4281] Bluetooth: hci3: command 0x0419 tx timeout [ 815.475147][ T4281] Bluetooth: hci6: command 0x0419 tx timeout [ 816.225032][ T4281] Bluetooth: hci7: command 0x0419 tx timeout [ 816.924806][ T4281] Bluetooth: hci8: command 0x0419 tx timeout [ 817.024917][ T4281] Bluetooth: hci9: command 0x040f tx timeout [ 817.675085][T13766] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 0-.... } 2655 jiffies s: 68889 root: 0x1/. [ 817.706610][T13766] rcu: blocking rcu_node structures (internal RCU debug): [ 817.713937][T13766] Sending NMI from CPU 1 to CPUs 0: [ 817.719367][ C0] NMI backtrace for cpu 0 [ 817.719378][ C0] CPU: 0 PID: 15028 Comm: syz.1.3337 Not tainted syzkaller #0 [ 817.719394][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 817.719405][ C0] RIP: 0010:lock_release+0x584/0x920 [ 817.719434][ C0] Code: ff ff ff 65 0f c1 05 db b2 9d 7e 83 f8 01 75 7f 43 c6 44 2f 04 00 48 c7 84 24 80 00 00 00 00 00 00 00 9c 8f 84 24 80 00 00 00 84 24 80 00 00 00 00 02 00 00 43 c6 44 2f 04 f8 75 70 f7 44 24 [ 817.719448][ C0] RSP: 0018:ffffc90000007660 EFLAGS: 00000046 [ 817.719463][ C0] RAX: 0000000000000001 RBX: da2e616334457c0f RCX: 8664e1e393a97400 [ 817.719475][ C0] RDX: 0000000000000002 RSI: ffffffff8a8c23a0 RDI: ffffffff8adf0de0 [ 817.719487][ C0] RBP: ffffc90000007770 R08: ffffffff8e1fcd2f R09: 1ffffffff1c3f9a5 [ 817.719499][ C0] R10: dffffc0000000000 R11: fffffbfff1c3f9a6 R12: ffff88802c47c6b0 [ 817.719512][ C0] R13: dffffc0000000000 R14: ffff88802c47c650 R15: 1ffff92000000ed8 [ 817.719525][ C0] FS: 00007f1c41a006c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 817.719540][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 817.719551][ C0] CR2: 00001ffffffffec0 CR3: 000000005a5fd000 CR4: 00000000003506f0 [ 817.719566][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 817.719576][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 817.719586][ C0] Call Trace: [ 817.719592][ C0] [ 817.719601][ C0] ? trace_call_bpf+0xbf/0x6b0 [ 817.719628][ C0] ? __lock_acquire+0x7d10/0x7d10 [ 817.719657][ C0] ? trace_call_bpf+0xbf/0x6b0 [ 817.719681][ C0] trace_call_bpf+0x5ca/0x6b0 [ 817.719704][ C0] ? trace_call_bpf+0xbf/0x6b0 [ 817.719731][ C0] ? __bpf_trace_bpf_trace_printk+0x20/0x20 [ 817.719758][ C0] ? kvm_sched_clock_read+0x14/0x40 [ 817.719773][ C0] ? sched_clock_cpu+0x6e/0x260 [ 817.719797][ C0] perf_trace_run_bpf_submit+0x79/0x1c0 [ 817.719826][ C0] perf_trace_preemptirq_template+0x268/0x320 [ 817.719852][ C0] ? asm_sysvec_irq_work+0x16/0x20 [ 817.719874][ C0] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 817.719899][ C0] ? __irq_exit_rcu+0x147/0x230 [ 817.719915][ C0] ? irq_exit_rcu+0x20/0x20 [ 817.719933][ C0] ? asm_sysvec_irq_work+0x16/0x20 [ 817.719953][ C0] trace_irq_enable_rcuidle+0xd3/0x140 [ 817.719978][ C0] trace_hardirqs_on+0x24/0x40 [ 817.719999][ C0] asm_sysvec_irq_work+0x16/0x20 [ 817.720018][ C0] RIP: 0010:rcu_read_unlock_special+0x7f/0x510 [ 817.720036][ C0] Code: eb 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 2b 42 c7 44 2b 08 f8 f3 f3 f3 65 44 8b 35 92 31 95 7e 41 f7 c6 00 00 f0 00 74 40 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 42 c7 44 2b 08 [ 817.720049][ C0] RSP: 0018:ffffc90000007aa0 EFLAGS: 00000206 [ 817.720061][ C0] RAX: 8664e1e393a97400 RBX: 1ffff92000000f5c RCX: 8664e1e393a97400 [ 817.720074][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8c1220 RDI: ffffffff8adf0de0 [ 817.720086][ C0] RBP: ffffc90000007b90 R08: ffffffff90af525f R09: 1ffffffff215ea4b [ 817.720099][ C0] R10: dffffc0000000000 R11: fffffbfff215ea4c R12: 0000000000000246 [ 817.720110][ C0] R13: dffffc0000000000 R14: ffff8880b8e3b900 R15: 0000000000000001 [ 817.720136][ C0] ? __rcu_read_unlock+0xd0/0xd0 [ 817.720167][ C0] __rcu_read_unlock+0x78/0xd0 [ 817.720182][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170 [ 817.720207][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 817.720225][ C0] ieee80211_iterate_active_interfaces_atomic+0x156/0x170 [ 817.720251][ C0] mac80211_hwsim_beacon+0xb7/0x1b0 [ 817.720279][ C0] __hrtimer_run_queues+0x560/0xd70 [ 817.720305][ C0] ? hw_scan_work+0xf50/0xf50 [ 817.720335][ C0] ? hrtimer_interrupt+0x9c0/0x9c0 [ 817.720353][ C0] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 817.720381][ C0] hrtimer_run_softirq+0x183/0x2a0 [ 817.720403][ C0] handle_softirqs+0x2a1/0x930 [ 817.720425][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 817.720444][ C0] ? do_softirq+0x210/0x210 [ 817.720462][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 817.720480][ C0] __irq_exit_rcu+0x13b/0x230 [ 817.720496][ C0] ? irq_exit_rcu+0x20/0x20 [ 817.720518][ C0] irq_exit_rcu+0x5/0x20 [ 817.720532][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 817.720560][ C0] [ 817.720564][ C0] [ 817.720570][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 817.720590][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x37/0x60 [ 817.720609][ C0] Code: 8b 15 15 fa 7f 7e 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 1c 16 00 00 00 74 2c 8b 91 f8 15 00 00 83 fa 02 75 21 <48> 8b 91 00 16 00 00 48 8b 32 48 8d 7e 01 8b 89 fc 15 00 00 48 39 [ 817.720623][ C0] RSP: 0018:ffffc9000c5cfcb8 EFLAGS: 00000246 [ 817.720635][ C0] RAX: ffffffff81e95e58 RBX: 0000000000000001 RCX: ffff88802c47bb80 [ 817.720647][ C0] RDX: 0000000000000002 RSI: 0000000000000001 RDI: 0000000000000000 [ 817.720657][ C0] RBP: ffffc9000c5cfdf8 R08: 0000000000000003 R09: 0000000000000004 [ 817.720667][ C0] R10: dffffc0000000000 R11: fffff520018b9fb0 R12: 1ffff920018b9fa4 [ 817.720680][ C0] R13: 000000000000000a R14: ffff88805a028c00 R15: dffffc0000000000 [ 817.720696][ C0] ? expand_files+0x128/0x800 [ 817.720726][ C0] expand_files+0x128/0x800 [ 817.720755][ C0] ? replace_fd+0x180/0x180 [ 817.720779][ C0] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 817.720804][ C0] ? _find_next_zero_bit+0x8a/0x130 [ 817.720826][ C0] alloc_fd+0x218/0x630 [ 817.720855][ C0] __sys_socketpair+0x64/0x540 [ 817.720883][ C0] __x64_sys_socketpair+0x97/0xb0 [ 817.720907][ C0] do_syscall_64+0x4c/0xa0 [ 817.720928][ C0] ? clear_bhb_loop+0x60/0xb0 [ 817.720947][ C0] ? clear_bhb_loop+0x60/0xb0 [ 817.720967][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 817.720986][ C0] RIP: 0033:0x7f1c40b9c799 [ 817.721000][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 817.721013][ C0] RSP: 002b:00007f1c41a00028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 817.721029][ C0] RAX: ffffffffffffffda RBX: 00007f1c40e15fa0 RCX: 00007f1c40b9c799 [ 817.721041][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 817.721050][ C0] RBP: 00007f1c40c32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 817.721060][ C0] R10: 0000200000001380 R11: 0000000000000246 R12: 0000000000000000 [ 817.721070][ C0] R13: 00007f1c40e16038 R14: 00007f1c40e15fa0 R15: 00007ffeac685908 [ 817.721092][ C0] [ 819.074951][ T4281] Bluetooth: hci9: command 0x0419 tx timeout