last executing test programs: 3.977428645s ago: executing program 3 (id=8321): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0x1}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x6, 0x0, 0xffda, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) write$cgroup_int(r5, &(0x7f00000000c0), 0x12) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x9, 0x5, 0x7, 0x8, 0x0, 0x80000001, 0x100, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x8000000000000000, 0x5}, 0x4, 0xb5, 0x9, 0x2, 0x10000, 0x10001, 0x9, 0x0, 0x7f, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000e8fe55a1180015000600142603600e1209000a0000000401a80016000a0013", 0x33}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080b01000000e8fe55a1180015000600142603600e1208", 0x29}], 0x10000365}, 0x24000880) r6 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x33fe0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socket$kcm(0x10, 0x2, 0x10) 3.626634478s ago: executing program 3 (id=8323): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000002000000000000000000000300000000000000000000000000000000000000000000000105"], 0x0, 0x42}, 0x28) r0 = socket$kcm(0xa, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000005000000850000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4) write$cgroup_freezer_state(r2, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socketpair(0x22, 0x3, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xc2e00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x40000) socket$kcm(0x22, 0x2, 0x21) r6 = socket$kcm(0x21, 0x2, 0xa) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2a084, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xb26a2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000001, 0x0, @perf_config_ext={0x9, 0xacb}, 0x10a424, 0x0, 0x0, 0x0, 0x0, 0x8, 0xd, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r6, 0x110, 0x2, &(0x7f0000000180), 0x4) sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb9200a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) 3.592001944s ago: executing program 2 (id=8324): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x200000000}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000080"], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003400000034d243e1ff2a890000000200000000000000000300000000030000000300000000000000000000000000000105000000100000040000000000000009"], 0x0, 0x4e}, 0x28) socketpair(0x27, 0x5, 0x10, &(0x7f0000000240)={0x0, 0x0}) socketpair(0x29, 0x80000, 0xffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x9, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10004, 0x2, @perf_config_ext, 0x10c002, 0xac5d, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)) close(r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000400000000000000fcffff0185000000bc0000001801000020646c2400000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000f000000850000000600000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f0000000680), &(0x7f0000000700)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000006c0)=ANY=[@ANYRES32=r3, @ANYRES32=r3, @ANYBLOB='&'], 0x10) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000000)="b9ff03076044238cb89e14f0080047", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, '\x00', 0x13}, 0x2}}, 0x80, 0x0, 0x0, 0x0, 0x18}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8000) close(0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x18000000000002a0, 0xa, 0x0, &(0x7f0000000580)="b904000000000000009e14f288a9", 0x0, 0x6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}, 0x50) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) 3.226900809s ago: executing program 2 (id=8328): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000009000000000000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000a00008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x21}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x4, 0x3}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000012000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)='`\x00\x00\x00.\x00\rd\nv-', 0xb}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @tracing=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') 2.435752762s ago: executing program 2 (id=8330): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0xe) perf_event_open(&(0x7f0000000040)={0x0, 0x4, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0xfffffffffffffffd, 0x84}, 0x0, 0x80000000, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="130300007800911fdabcf8b3077fa54a07"], 0xfe33) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) socket$kcm(0x29, 0x5, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r3 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r3, r2}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0xca, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r1, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) close(r1) 2.435312182s ago: executing program 1 (id=8331): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f93424fc60", 0x8c0}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4100}, 0x40002040) 2.415096876s ago: executing program 0 (id=8332): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x8d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0x6f5f, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0a00000004000000080000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000007c0)={{r1}, &(0x7f0000000740), &(0x7f0000000780)='%pI4 \x00'}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) syz_clone(0x1100, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$sock(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000001500)="15e7a2f0fd0be88eb6d28d110908bf9ce26b2a412c6eb13cc17991ff1195ca83de45a3e66c785d2a67ae61c64c7f996b2f87f3ea004a4a78acb54c6ad7bdd44a58b5bb79855e2c43a3d517fa5ea31afdab58afb86f9b47b3d89f8469cf28f9a4c080d543fb0f39211f28e158c5320062035dffb0fdf1ebff68796f250cf2a3f2ed626c9ab4dae49f8f4aec608cf88831d671e9f53ce792898a7a36b9b2d3b60695b9ef7d1686ac5d6ed0a1d3e2ac9e1411816ee19216b8b70af7856ac49e4633eeba99abc1993c20658330519e192d4c660d538da9226ced2202ff540c", 0xdd}], 0x2, &(0x7f0000001640)=[@mark={{0x14, 0x1, 0x24, 0x400}}, @mark={{0x14, 0x1, 0x24, 0x8001}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x9f}}], 0x78}, 0x0) 2.363627275s ago: executing program 3 (id=8333): bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0x1}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x6, 0x0, 0xffda, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) write$cgroup_int(r5, &(0x7f00000000c0), 0x12) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x9, 0x5, 0x7, 0x8, 0x0, 0x80000001, 0x100, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x8000000000000000, 0x5}, 0x4, 0xb5, 0x9, 0x2, 0x10000, 0x10001, 0x9, 0x0, 0x7f, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000e8fe55a1180015000600142603600e1209000a0000000401a80016000a0013", 0x33}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080b01000000e8fe55a1180015000600142603600e1208", 0x29}], 0x10000365}, 0x24000880) r6 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x33fe0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socket$kcm(0x10, 0x2, 0x10) 2.307646025s ago: executing program 1 (id=8334): r0 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0xf, &(0x7f00000002c0), 0x4) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) r1 = getpid() perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x1c842, 0x0, 0x7fffffff, 0x2, 0x3cd, 0x1, 0x7, 0x0, 0x0, 0x0, 0x7}, r1, 0x0, 0xffffffffffffffff, 0x2) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x0, 0x1}, 0x4, 0x0, 0xc2ba, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40305828, &(0x7f0000000040)=0x20000) perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x4, 0x87, 0x9, 0xc3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x2f0, 0xf72a}, 0x0, 0x3, 0xfffffff9, 0x3, 0x0, 0x9, 0xc, 0x0, 0x1, 0x0, 0x6}, r2, 0x10, 0xffffffffffffffff, 0x6) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYBLOB], 0xa) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@cgroup=r2, 0x23, 0x1, 0x7, &(0x7f0000000100)=[0x0], 0x1, 0x0, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0]}, 0x40) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="2b63707561631c74201f726c696d697420"], 0x11) socket$kcm(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0x50068, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_config_ext={0x2, 0xc}, 0x0, 0x8, 0x0, 0x3, 0x6, 0xc07, 0xfffd, 0x0, 0x4a0960e8, 0x0, 0x8000000000000001}, 0x0, 0x0, 0xffffffffffffffff, 0xf) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r3, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 2.298853897s ago: executing program 4 (id=8335): r0 = socket$kcm(0x10, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="d80000003100b904021d080005000400e8fe55a1180015000600142603600e120900210000090401a80016000a00014006000000036010faa000cf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbac3c7f4b497148599f9ce8017cbec4c2ee5a7cef4090000001fb791643a95e4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93450000000000000000", 0xd8}], 0x1}, 0x400c854) 2.146906784s ago: executing program 4 (id=8336): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[@ANYRES64=0x0], 0x0, 0x26}, 0x28) r1 = perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0x1}, &(0x7f0000000200), &(0x7f0000000300)}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={0xffffffffffffffff, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x3e, &(0x7f00000006c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000700), &(0x7f0000000740), 0x8, 0xf2, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x10, 0x5, 0x1, 0x9, 0x20013, 0xffffffffffffffff, 0x9, '\x00', r2, r0, 0x0, 0x9, 0xa}, 0x50) socket$kcm(0xa, 0x922000000003, 0x11) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x2, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x1e, 0x4, 0x0) socket$kcm(0x2, 0x3, 0x2) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000200"/31], 0xffffffffffffffff, 0x3e, 0x0, 0x2}, 0x28) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000001540)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x2}}, 0x80, 0x0}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000"], 0x0, 0x44}, 0x28) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r3}, 0x8) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4080) r5 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r5, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r5, &(0x7f0000000240)={&(0x7f00000007c0)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80, 0x0}, 0x326684230b85cfdc) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r6) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x7049) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xa, 0x6, 0x1, 0x6, 0x0, 0xffffffffffffffff, 0x101}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r7, &(0x7f00000009c0)="6ca813000089a6f77a7ef6a21d085cce794e5d7af9981ab2", &(0x7f0000000980)=""/2, 0x2}, 0x20) r8 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8916, &(0x7f0000000040)={'bond_slave_1\x00', @random="0200"}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000ed03cb83e31008500150000"], &(0x7f0000000040)='syzkaller\x00', 0x3, 0xeb, &(0x7f0000000080)=""/235, 0x40f00, 0x4d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x0, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x1, 0xf, 0x8, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000440)=[r7, 0xffffffffffffffff], 0x0, 0x10, 0x10001}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r4}, 0x8) 1.965010187s ago: executing program 3 (id=8337): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x1f7, 0x0, 0x0, 0x200}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d0027", 0x23}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x8, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8000000000f6}, 0x10c002, 0xac5d, 0x0, 0x5, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xc, &(0x7f0000000340)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x2e, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0xe4, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0xc2ba, 0x6, 0x4000000, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfa5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='cpu<=0||!') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdc, 0x401}, 0x1a00}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r3}, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, 0x0, 0x40) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000140)='%+9llu \x00'}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r5}, &(0x7f00000000c0), &(0x7f0000000140)='%+9llu \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r4}, &(0x7f00000000c0), 0x0}, 0x20) 1.7813161s ago: executing program 0 (id=8338): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7214000000000}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0xef) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000280)=@caif=@dgm={0x25, 0x6, 0x9}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000480)="62042700590200000300002f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a5d0292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f0000000840)="294f28dfe56d2c8ba23606bc7ecd1f634665cb5bed07bac5684da6eb21da1d6926910c5a0c653b0106869a8049d2a44ce42557b2e72e2bd367e9d01a5e7380cc4fc8e7c9044cc4115b978ca7427d749beaefdf2e48b369cb169ad7b1ced26bb161297c7e56a3e83e91b379c179017f8b4657d1b22eca6bca33036d33e1a684059c5301001ca6637ac780ab2bcfc22a666cd4e5876f11e9aee4724b7cb59731c97e70ebd7f7483994eb07de2f5d6a9448c3206cff6d290b433f331c2399e99ee3bdecf5689eddc3e54908000000a933bbc47b65ca6e9d7efbee6e3b1dbe87313111e85336d6890002db17751b6044f964dc90ea466f90856112be7f0a54b39a3f66cc4c39544300093158af39cdde429f50d8c7fbc0efaccca18e94b87dc586ee60baa55469755ab00e92b607f2aeee00ad72fb29c1847f85b2f8ec3a34864b18eaaa131a4940c9af11606e5d9360c3f4a2c8308d50c34b1bbaac018469ac346dc2a539e20350297097e7bf21ea0c2a0aa083b2b3543af05c7fb5391a1c81304b520fafb941b2dc3cfb03c3dd8567a459752a5ca573ee7cf4f518af508d141c98dc9914df1521e9ee49decdf2418e7f74adea9fda805bc75906dafd279aee36397966427cdef205c67fbbb3", 0x1cb}, {&(0x7f0000000a40)="0a985d7879f1bb", 0xfcb9}], 0x3}, 0x8045) 1.712000112s ago: executing program 4 (id=8339): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x200000000}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000080"], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003400000034d243e1ff2a890000000200000000000000000300000000030000000300000000000000000000000000000105000000100000040000000000000009"], 0x0, 0x4e}, 0x28) socketpair(0x27, 0x5, 0x10, &(0x7f0000000240)={0x0, 0x0}) socketpair(0x29, 0x80000, 0xffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x9, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10004, 0x2, @perf_config_ext, 0x10c002, 0xac5d, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)) close(r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000400000000000000fcffff0185000000bc0000001801000020646c2400000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000f000000850000000600000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f0000000680), &(0x7f0000000700)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000006c0)=ANY=[@ANYRES32=r3, @ANYRES32=r3, @ANYBLOB='&'], 0x10) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000000)="b9ff03076044238cb89e14f0080047", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, '\x00', 0x13}, 0x2}}, 0x80, 0x0, 0x0, 0x0, 0x18}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8000) close(0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x18000000000002a0, 0xa, 0x0, &(0x7f0000000580)="b904000000000000009e14f288a9", 0x0, 0x6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}, 0x50) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) 1.682263637s ago: executing program 0 (id=8340): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='cpu<=0||!') close(0xffffffffffffffff) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x581, 0x20c62, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7008, 0x0, @perf_bp={0x0}, 0x800, 0xca, 0x200002, 0x0, 0x7, 0x100, 0x0, 0x0, 0xe}, 0x0, 0xd, 0xffffffffffffffff, 0x3) recvmsg$unix(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x9a) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40002, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x29, 0x9, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x9, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x64b2074d57f2d605, 0x400000, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = socket$kcm(0xa, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000200), 0x4) sendmsg$kcm(r3, &(0x7f00000003c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000100)="b7", 0x1}], 0x1, 0x0, 0x100000}, 0x40080c0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x2000c090) 1.590311314s ago: executing program 1 (id=8341): r0 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x0, 0x88, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x8) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f00000001c0)) 1.462891747s ago: executing program 2 (id=8342): close(0xffffffffffffffff) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x30, 0xfa, 0x4, 0xfffff008}, {0x6, 0x5, 0xe, 0x7}]}) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x9, 0x1, 0x200, 0x0, 0x0, 0x0, 0x0, 0x3af8}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x68}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x6, [@var={0x2, 0x0, 0x0, 0xe, 0x3}, @union]}, {0x0, [0x5f, 0x61, 0x5f, 0x5f]}}, 0x0, 0x3a}, 0x28) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r1}, 0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x12, 0xa, 0x8, 0x2, 0x4}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r5, &(0x7f0000000300), 0x0}, 0x20) openat$cgroup_ro(r4, &(0x7f0000000b40)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x18, 0x8, 0x40, 0x42, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r6}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x20, 0xc, &(0x7f00000000c0)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0x8}], &(0x7f0000000200)='GPL\x00', 0x9, 0xce, &(0x7f0000000240)=""/206, 0x41000, 0x40, '\x00', 0x0, @netfilter=0x2d, r2, 0x8, &(0x7f0000000340)={0x6, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000840)=[r3, r3, r6, r3, 0xffffffffffffffff], 0x0, 0x10, 0x8001}, 0x94) close(0xffffffffffffffff) 1.350381327s ago: executing program 0 (id=8343): bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x7, 0x4, 0x300, 0xfffffffe, 0x0, 0x1}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12f900000100010004", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000340), 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000001, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a876d839240d29c035055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7e8dc34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bb44b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334583239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bf4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc508afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd360000000000000000ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c97a088a22e8b15c3e233db00002e30d46a0024d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c29c5c0ed5bcdf510c3c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ced92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f68fa8d7c2dfb28e1f05e46b0933c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d588afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda6900002a070886df42b27098773b45198b4a34ac97febd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d63521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07afef12ef060cd4403a099f32468f658000b4082d43e12186195cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea209b53b230ef0f2ab85cbdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bd3339403004b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab900000000000000000000d71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdbf24a0c5441ce046078492b53467cfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89cb349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb15f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c00c57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137df47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b558982016b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8b49e3d0168bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85a3009a5d30f479e293a3302e11350ea857b37e76ca3f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c8ffe0d508dcee3070e8b42ac38545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f98117919472b61b20026d7e646174b55d251f7f8ca5ccc22a5efb33b217eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4444e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24000000000000000000000000000000000000cd3211b3842b68a4eddca2eae28529e97a98d7ec3fd902df1ba8fc2ad2377e72d4e7aeacbbccef5614cd965511558f40720025c022bc9c213e407f6bc4b673c55aa8e729299a37fd6339acd906ac861ba56c9fa9b8b12b5e68a3cdadb906355e1f1d336a243172affe50d0fb36c3718a7498eed3d398f405a34d494414e87ef1ce1845510d43d00171d6b4b762f89564c22d542a119878709cd6822c3a3eb47a849b0737929fe9e1eecd1bff5a2b9880e2a6d8a3b3b7e88a673c96cda4455eff1c530db0e6598a2686aa09aeaf0f1aed95aeb8b0a2cc5ca31c0f56285cc05f7090a0e0583cf540d18cd8817e685c7b4ff176178ac1234f23e54445ec20b2689832d78409897a0307e89ebcd5f4ba042a3d10237a5a8a9a6eda36d2f337dc54537b80e8433341b135b4c5bb0173ffde46ccd260e1d4f2c51e8b07bb256f1317912cb1fc9e491e0bb9109e475cc795c23ad9f4f0042c5e9c655a4d865bc4a266e6a1d3d2b7ee53be9efb33a98933b5ba74ee3ac8d34b6af8c1fdbffade3abc80842b74354162f5b994ab5254cb068bc5e2ae242a1d37d0d49947c9317fa1a46c9e259ce0e1f9db992c53f7830a5e8f4fac6b187eb9f15ba61f730f86d7d7b63bbc7a1d9ff37e87a90a14e0655304da069f9009b62717649b6c6af94fcba713f8ee6fcce25aef44d009966614b61be9369ffc589a79051b0a0000000000000003ebd34c41afe268c33c9322c3a783772aec998f51a6e70fb932a8019e72ef5ab127bb30c79ebfd867441083546305fb39449c40a166ea389a6b77b7c87f66e8bf5806726b8fc50b943627314803a12c33312dce0a10f852da3e000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r1, 0x18000000000002a0, 0x1c, 0x0, &(0x7f00000011c0)="b9ffddc1ddcccdf175537d53888edfcef6e296510cff24fc83428137", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080)) 1.348500568s ago: executing program 4 (id=8344): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r0}, 0x38) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000a0000000200000003000044ff000200080000003600000604000000000000000000121d20000000694a259f9b60701b65a80a591470f9655365114a985c3621e823739398071865c2238f2f4dd4d047cebea8eeade9d4f8d8315cf687ae16abf2779eebecc3a63b334ed64e162e483184ca49356bee3b88abef4d5eb2c2144c367ee6"], 0x0, 0x3a}, 0x28) close(0xffffffffffffffff) socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x40448c0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x409}, 0x2000, 0xac61}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x3, &(0x7f0000000000)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x1}, @alu={0x7, 0x1, 0x1, 0x5, 0x9, 0x40}], 0x0, 0x8d8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x27}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x42, 0x0, 0x0, 0x2}, 0x48) openat$cgroup_ro(r1, 0x0, 0x275a, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 1.239472747s ago: executing program 3 (id=8345): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x115046, 0x0, 0x0, 0x9, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x20400, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@fallback=r0, 0x9, 0x0, 0xfffffffd, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0]}, 0x40) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) syz_clone(0x80000011, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$kcm(0x15, 0x5, 0x0) recvmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffd}, 0x100) recvmsg(r1, &(0x7f0000002800)={0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000000200)=""/64, 0x40}, {&(0x7f0000000240)=""/81, 0x51}, {&(0x7f00000002c0)}, {&(0x7f0000000340)=""/202, 0xca}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/14, 0xe}, {&(0x7f0000001540)=""/252, 0xfc}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/156, 0x9c}], 0x9, &(0x7f00000027c0)}, 0x1) 1.175982678s ago: executing program 1 (id=8346): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$inet(r1, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x12c, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}, 0x3e8) (fail_nth: 57) 1.158354062s ago: executing program 4 (id=8347): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0x1}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x6, 0x0, 0xffda, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) write$cgroup_int(r4, &(0x7f00000000c0), 0x12) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000e8fe55a1180015000600142603600e1209000a0000000401a80016000a0013", 0x33}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080b01000000e8fe55a1180015000600142603600e1208", 0x29}], 0x10000365}, 0x24000880) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x33fe0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socket$kcm(0x10, 0x2, 0x10) 439.607901ms ago: executing program 0 (id=8348): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x8d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0x6f5f, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0a00000004000000080000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000007c0)={{r1}, &(0x7f0000000740), &(0x7f0000000780)='%pI4 \x00'}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) syz_clone(0x1100, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$sock(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000500)="3154b36f9562de64f35eb192f90d2363e7ef150e3c26dd951f44ecf20ca3e3c48b9c31dd96d7ba7b3a1d217f8ac7b5670d223391a0b193eb541dec69b496a7880f096c53b480ac7ae8191197c85fc403f34d296b7e43a302ade1fd1bd0bdf08fb58317772a01b26b2e0b30a7416d17a1b8a55bf624dfd064c3ae27902eab6c9ff4e4c526ff4402840a563b55be57927c065fcac5f8a215340b498f62cf90618f1ca229d77628e0a69e17a87e584f7a770d73a1723988c529b54999d3deb7f116f97dda60fcdac8ddc458764c8ccd8671abdf898954a01819b8bd6d969dc15dfb2e06e8ba48bd995e359d79a0dd474fb290ddac92d2e60a5a80a32cadb6d19011898515c85324c66042db9a27ed961c4176c8ec0226269c8ad8d13c2d2fd93a63c2b06cd33813f96a05c5f22bcfabc77b01d980ee0c8d9607b4f8c4a6943191a19b98d0624117f4012dafe314bd9032323882dd761810ada60d69bea0954cc3688113fb76ce1a86b4ae2d66fb60fff3a3a7742f4676fea10cc9dc189142c4f28bef1fd51c459bfe2f3d34b6fb79692cbfe10c143a2c9799efc6d19c352efc0c1fc28fb3b120c2faefc14c1132e957b0321f750802eef43506d9d4a53b1996d882bfda9707b9800a574858b1b267c541cb87935e902c86778fe024aa6593a8eb14451f7514d3487d566740a81cef53f3c4202f86d037f9ec783a2d8b0cd8082f1a08d8ff650c869a6625750e9e9f34e55e3faa555054632ed0e49122b08fabc4f22b875b18492826f35f6ae9e92583ef58ce4ebff1bcd283a0c434b08aa0fc8408d6996113174df3d36c2cb18a9048f951978e8f4129277b1d94a534c7a2fa436486ebf172d8f775a105bffbb7aeb8afab579721379cabb0a5f89b1f729e43c37f40d851c51e317adb2aeb5ba359f72b00ae23b175cdd986534d2a9d6b9221f13cc94e60c9bad8118108d8696595f300006cebfa32f4c4c4a7d0bf68e2f0dae765b537ec3204a06064120a7ce7a8303790271ad0bce789e5cd0570e9e05ed36435af4db95dd42e0a82e61b7a69bd2525f27410e46eb7e87d899ff7a278ac51e20f664906fcf917a08b8fe3ace45c52803c8da94a39eed2b04fafbf48ec56914bdfdc190a512a1d41f3295bddae7d151c70d1b511b0b96241deb1cc0087aa837e1e5eb70807af5531b83e3ed48dd1efaf15e5832c33fa21a7737798da675c215982d7ac57e366f088bdf92fcd225ebf3cb92c72ee179974814d7341ec2b91e91c725bc46a5a4b9515b66aebc6ef1d66bfc558c0c75d53b5382ed4ee92f0d5eb99c6987f85f28dc2dbb302303e5afbc5532abea6c578d9687f1eebc679feb1585c82136761c84c7a7973d537bbc8e1e37e8ed9e57e6231a5ad2a402a9cbeab9bbc26b0fc371657e5b92201bc6b62498a934642c487e6f46e1dd1548351a966c944e78127c10530b1d73fd6b1298ccf5d8302846f4cf4f12e1e7a60351ec67a34d53f1725b003b9f829f9a76171afb1975dd2723aa936d7a2ad2117d4c17057692a628f47cae4f837b8a91e5ae9efda9e479f4de5873f019bce6be6ca4aad96000ab7ede5e839ba9487cce985367a9c417f982c2cfcac4694c16c4f1bdf5ccd22b16741888b383fbf68e1b75c2b11ae8142eac01bb6272cce36daea1b7567eba26e965fbad4deaa4689a45b85792238ce3d305527c0af1a09e0705937f7e0553f29d916af189d6f4e0a84dde77d27b76103b419359ffe74fd20710ef5aa590ca563bf662baa9d94ab80d7169ccef5b5d79b6a49617204f0dd38064c9f27fe833bc75c95a28d42bf05f026a9bde8e69c66c9b0d37b59b6c9f559a8fe3e931a67b6c2393971a2519452923084dc1dc7f6b2c5fc59e7e1988d9fc62f699041cf8315cd0c202b977e64e224933d923d7e967c5b9e7273b581cc76c158a0c1d29641bcadaee953e28057a1275e4f92aea600163d9860381fd70b6ae3378c32718c0be7215cb2377d27c98887ebc82cc95c72ea93831d5238449a809d1aadb8e4d6952d9fa0a1c922657d5d867418bea946579ab854198beece0052ba003d35edd643925114dcad0b26a0a3c7d99f265955a091f9564c04c6b112f19c7dc6ca120f11d3d45f78838fea938ab38a5dd5e4c8c0cc6bbc7f2d88fe52ccda55c6a88ca3e04e9e33eacf54ffc7cb913b378afa23c3d66585025a1b67ab3e24dbec22bb9a3ff9e8dd183544a63042682edfb90775fee6459c1eb8d4d3f6427dd35b209ac963b3d876f890fe387e46c1c8ecd5f38b5a165c0fd1a7118bed82b478168f3ba348db64dcc63379e633a4b59709ca4da1f3c5bf321e3547d3af761b87946d5829dbd55654bd113cd8cf35648b98fde1232469ba93965c6d55c976a99fbf899d21c69c4c23cae737317c532abb7497a7be74ddccec86290923014cc96c3e626c3f476152a63a02c5a862881fa38574af8918c32b7e41d95952bb620f16f47f83267851f93aded73c06717bd254daf1dcc19053be947a2fabbcb9c9649da5d23ccf6b2e63ca76540c3344db7136da40cbc5711e7ff35baa7e6f09a73beb722f6b5062edaf7b341bf88bb5b6c302c26a4a72fc43ad0213b833b8a350b477238a13131b61a5abc7c955687e7719936f2a1650a0fe1e22d76b95ee16b64d0d6713d376c72173f1b15eead191dda85e35fe75d80a118c37581fe942db8d4cb4d59de4b558b6fef9a3c086dc2641a79f63b1354fdba1d1af3c9ea9c9779664cd1cdacd6539f175dabf2ddbd237ed09e731fd08339d213bbe967f6903a73dabca7c462ee97b228bb63f68aa60c428aa19ffed096c5684f9b2de59dad11346bfabd5f701bb71391fdeb5be0123da424dd843bedcf5100cd4168d171cd7870e95800cbfc871ee30f4605d9d94281a3f3e7c5c4e19946a23837d5664220c85fedcae6cc7170e57c3325ca167d11e12d080db11cc850ce15b43fb80fbcd0b7c52348accd5795c46d0a22686a3a2c74356db114c0852d4e0861d25d950c7a73459cce03bfbcdf79f3e3208f12c6b5db9a8f284986237974d2da7754bcdc6960fb5b89581f199b5d1f3efa46d9dc61a8544bc2c6edd12e29b9d531db177937d1ea31403c0fe7a9803b417ca403ad7280f395e50a20f66287b95014782d1b9c855ec6620766ca1500f02fe01f210659da85dd4b594cae821ae3a54a9eb873c59d7e0b03f865817e541acd9b7c41a31a90677d158a8b71a25242bcdb53a2214ca9984e20d62e0dfa2925d2f9ffec449982ab1ca0a17b47d3c4ebb1c7a8966c09674e4ac7ddfc88e60f5bdcabd7f1c0d8594a5a261231c5130d283417335fab98c8022e7755a94f2fe5ddb9622d3bd023e864fa70f7ca8960aaf04651d5531605b91a7f481e489d8be0343519379e5840c83a68fa72106c03f151e328eb26f9b7404f59364b304b29a84fca9dc9143587c4dd3b77bffcb6496f87ef5035ca056696b39bbe0b782f12d4341491be606e012f53836842dd64e1b9721d6ef35d628eede5d46c66476862d4aee86b2a66da24aa6fe4a9c1fec45ab629b395721dc52412af511aa52787f41d8ad34f86a7264629b7e7f13f0bca8f386135c16566ee4a9406a45ed33761c53179a068ce316f54bb8a36b140a6a147dc4cd1cc61e67c7f0d6d67b4751469df95eda715ce233c785bf1ffdac6ae834e5e5ef70a91659ed21cb5450775924d7c269f261f632371e93cfcefa2a34368a030a32f2233aef94894d1ccfb3ce4419843aa464c2baea5a7b9bcf2450d0fe1d43e186c0a7f89cf20a0b5f55fb6f38151802477ad3f5848eae4585d0a531381093f6c8f829d85e4ed5ce815d84507927aa669aa47ba7ff6799c0464b07e80a56d1b46166236caeae156bc219727ffacded59ca29c81ba033e296d1e1df289c0ed35bf164d2806c03b1005e93cb8db8a1169f5140a6f4e7f6d785e6227f87645b1bdf2ccae570fdf08305af813f126b54aba79edd9d502d96f4e29ebbe8fd999e97e818e2885d9cdf4a371ec3e281acba247fc2cf0ed68404704daa8b101139674c34b3845de41f8c9e65705e840481ce7692bfa734c44803f3999dacf82e7349fcee36a79c194601b718b1db5c0b14d91c613ad1f0e78388be3a1726e7684b806840571fee297a81cf60484c03185f5e1300ac4340c3062187afaec17817c068e79c44bbb0ceaf100fd02cfb2a3a23366e6f8ceacce6da9dd5247590d92ce784d7afcbb8faac075bf941b4c83091c0c8591505f5e009f0bb32bbfa693a78403ae20b8c59dc37b71538d72a3695e4da3692d004cdf516d8e85185b7da9397f14e999594559d474a51621141c7d90178929f5c2947b1ec500fe6bc3c34ae166086eccc7e8e1374791b755129641f5e83c7e8866fcb88f5ffe7854881bae2cec6581cbfb91af0eb29c52f655f55dd89917b40f968abeed04881271de5834f41ac745489eed5fda2a8f1445dde8adf6f4bc66097f4c38bb20e92ba5b83c6e6c720919dea7d00f058af745e94b65e772d0545df42b1b40222f10040ee5ef4b7ec4d4443037055599ab027eddbff251a9cef83d2d9fd3beee7ec43dfddcb572f61c42741a161af24bb7b63eaf1f4295e1d466bbf7c138e72e40683f7c86505982eae03aadfd6aded7cfbfbc79210f6d9728e593d2a865f4f60c6655abea8d067cef56e2c5ac82da65465adb6d2e23b2b0dbe9cb5333a0ffc9cafe412a85d49afe3584a4600c24cb3609b657ba8d5aeb3a9e34ee0b7f646a9b4a75cb24633098dbb6c5622daeb424bf4f9b1e7e4dc4d489b6fdcf76e00600ed8e2014b1688dfdd42e4ac5a6cc44d1becc0cb87d79e2596bb95571cf3678b262a389cd4e219c788790de3af78797c20289159cad91e66479281441160b98cd7745d1fc10920c770b195527992c70e9821af9065b04de3f839bac4d602aaa419a29ea3c18a88f8548ee5eb7108819a5434e9a45b91b82863433ae1897b735296a7443a9e0118dc91aa9eaeab169b02b7ed65d6e33f15681df78dc10456231670f49d83aa7554890d99db76f581e5372efe71d53687b9d30a8b0564ddb945941480f23bd22c63bc681291964b80ec34bc04f8a825c7708eda70abb15f4cf5a355a41cce2176121027f4e4c55a6c10d27e61c9e034dd7cc8ee67f2ff2627a8e15823dd4a369ebe70e439e908728bc39da8592a44138cdd61e155d5830883b4753a6bfca787c40c4d3bf64182249b817b00a046adeefe4738250c40f6691e4301721f0f16a24c9301340deb9e04ca7aaa7700398d85215ffe50012cd64be13db5dee0a2d6ad4a349c24a5ae0f4dc5d8a747c193e2019f156867a054468365cc0d4c63c7a3ffdf579fef83d5d7cc067c63ab461ba3cf5560900a97ef7df15dca9d24a9eda6c44234cd546b3bd0c474ab7db1211c8b5eaa9b6f25fc1cad50f3bcd41e1b4150b201dee934cfb246053f6869508fe4dc2dc755c1daae7e51125f0e5e19c388ef718acc09bc8874569135f9e31f519fe360326ceb82b64d21efe0cc5f3245c7239edcade496e3d51f5aef544e36bed1941d18dae97da3d69f3cac9bc039573d3ced70d58d4539a01c83cbcf68d6d5d1774f5c73bff61e4522391ae12b2fa8fcf9f42107d4f4926363d155608ef66cd0f6fa7e99dc9ca3eae20c042b88825a0185a30d003c4134ae8643102f58a29fab2aae4c6fcb57bafcca02b551fed27f5e68c51a679de1758304befde2ec35debd917c1e459f3270c8e637869353d80865ddadef1cd0419fe96910b86c62bed339535711252c060f2f12d36f19c41f", 0x1000}, {&(0x7f0000001500)="15e7a2f0fd0be88eb6d28d110908bf9ce26b2a412c6eb13cc17991ff1195ca83de45a3e66c785d2a67ae61c64c7f996b2f87f3ea004a4a78acb54c6ad7bdd44a58b5bb79855e2c43a3d517fa5ea31afdab58afb86f9b47b3d89f8469cf28f9a4c080d543fb0f39211f28e158c5320062035dffb0fdf1ebff68796f250cf2a3f2ed626c9ab4dae49f8f4aec608cf88831d671e9f53ce792898a7a36b9b2d3b60695b9ef7d1686ac5d6ed0a1d3e2ac9e1411816ee19216b8b70af7856ac49e4633eeba99abc1993c20658330519e192d4c660d538da9226ced2202ff540c", 0xdd}], 0x2, &(0x7f0000001640)=[@mark={{0x14, 0x1, 0x24, 0x400}}, @mark={{0x14, 0x1, 0x24, 0x8001}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x9f}}], 0x78}, 0x0) 387.77308ms ago: executing program 1 (id=8349): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000080)=0xd0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r2, &(0x7f0000000100), 0x0}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)=ANY=[], 0x50) r3 = socket$kcm(0xa, 0x6, 0x0) close(r3) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32) socket$kcm(0x2, 0x2, 0x73) setsockopt$sock_attach_bpf(r3, 0x0, 0x4, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000000300)={&(0x7f0000000140)={0x2, 0x4e22, @dev}, 0x10, 0x0}, 0x4000090) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x7, 0x0, 0x0, 0xc4, 0xa, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x100882, 0x7ff, 0x6, 0x5, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x8d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0x6f5f, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8020, 0x0, 0x1780, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x20}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r4, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e0b9545dd30a2131677b2d0bfa91", 0x0, 0x27cb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x10, 0x2, 0x0) 384.827281ms ago: executing program 2 (id=8350): socket$kcm(0xa, 0x5, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r1, 0x6, 0x6, &(0x7f0000000040)=r0, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f00000001c0)='syzkaller\x00'}, 0x94) (async) r4 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000140)="897a00ccf6042d99f4d6f20700b6eef3a30574a933d8a79d70bd6e9971ef3e6db01f5ffcc43e7f3b", 0x28}], 0x1, 0x0, 0x0, 0x900}, 0x60) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r3, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x27cb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0xe, 0x40, 0x103, 0x41}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r5, 0x0, 0x0}, 0x20) (async) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x9, 0x42, 0x40}, 0x48) r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000180)=r0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r7, 0x400454cc, 0x0) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r6}, 0x38) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x830d}, 0x100721, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000240)={0x0, &(0x7f00000000c0)=""/40, &(0x7f0000000140), &(0x7f0000000180), 0x4, r6}, 0x38) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0xc, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, [@call={0x85, 0x0, 0x0, 0x29}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 314.472853ms ago: executing program 4 (id=8351): r0 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0xf, &(0x7f00000002c0), 0x4) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) r1 = getpid() perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x1c842, 0x0, 0x7fffffff, 0x2, 0x3cd, 0x1, 0x7, 0x0, 0x0, 0x0, 0x7}, r1, 0x0, 0xffffffffffffffff, 0x2) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x0, 0x1}, 0x4, 0x0, 0xc2ba, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40305828, &(0x7f0000000040)=0x20000) perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x4, 0x87, 0x9, 0xc3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x2f0, 0xf72a}, 0x0, 0x3, 0xfffffff9, 0x3, 0x0, 0x9, 0xc, 0x0, 0x1, 0x0, 0x6}, r2, 0x10, 0xffffffffffffffff, 0x6) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYBLOB], 0xa) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@cgroup=r2, 0x23, 0x1, 0x7, &(0x7f0000000100)=[0x0], 0x1, 0x0, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0]}, 0x40) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="2b63707561631c74201f726c696d697420"], 0x11) socket$kcm(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0x50068, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_config_ext={0x2, 0xc}, 0x0, 0x8, 0x0, 0x3, 0x6, 0xc07, 0xfffd, 0x0, 0x4a0960e8, 0x0, 0x8000000000000001}, 0x0, 0x0, 0xffffffffffffffff, 0xf) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r3, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 151.861102ms ago: executing program 3 (id=8352): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0xe) perf_event_open(&(0x7f0000000040)={0x0, 0x4, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0xfffffffffffffffd, 0x84}, 0x0, 0x80000000, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="130300007800911fdabcf8b3077fa54a07"], 0xfe33) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) socket$kcm(0x29, 0x5, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r3 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r3, r2}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0xca, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r1, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) close(r1) 149.989523ms ago: executing program 1 (id=8362): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0x1}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x6, 0x0, 0xffda, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) write$cgroup_int(r4, &(0x7f00000000c0), 0x12) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000e8fe55a1180015000600142603600e1209000a0000000401a80016000a0013", 0x33}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080b01000000e8fe55a1180015000600142603600e1208", 0x29}], 0x10000365}, 0x24000880) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x33fe0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socket$kcm(0x10, 0x2, 0x10) 22.889866ms ago: executing program 2 (id=8353): r0 = getpid() r1 = perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0xe09, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x374}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6493790710000000000080000b2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9924be41a9169bdfaf16da915b2e249f21c6eee84309e7a23c19a394830f2539fcb4e0b6eab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bfb1c0e6b1244d35b213bda84cc172afcc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbb888b0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab2e4b380a00d72bc0480f94479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b844139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a662d8bc9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e558d17879570c8ad943e392955f4f979ea13201bafe4f0f6ea508000000a0c548552b571bed5647323478a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151fcda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526894aa7fe5e68949a3b304723177d356c4604bca492ecec37e83efceefd78a2533659edc8bef9cb85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d350000000000000000e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e5a61561a9845e4ff29e2bd43b5b923b272341c5e093fd66a2946501559335781092cf8ce987c56cd31121624d7455f2a3666276c3c0e812b28e2f30d035cee5d0e77a3c72208ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f030b8d3ebcef5af469abe753314fae31a09c3a041a1e7b55c4e81dba1e12289ee34463aaf28345bde0c195bc9f022ca8ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262d0af3246eb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a0600adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa7000008000000000000117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cd50feeb7bfad9b7be3283b6450d34264e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5a71e0d7696caba172745c7dd919ffb631820420b75b6522c0e21c882c66f4f25ffb6d95e07e068000000000000eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff201000000000000002e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa66237e0dacc107f532348cc2116473381e961f3d9c8c21578fe3245097c280abe51427b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6f0100000000000000f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d174b0000000000000000000000fa08ad0731ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282b6caa2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae0533496b6d58da50ee80a6b9a7438978c5465113f668eb4484350048289d07dbef325d3221a7cb35f812f257941a9781e3214c2a3dcf89d99844b762a9cf17548c54fccad2c7ae8072b82e0880815daf966bd5343c1635e123f868a7167cfcff33320253af570f4ef9c0254afdd89ac3943562b530dd88da8a94013bbaf204bebc38055adc39f07f7c22711f4d1f6dcc928d1578a093c072e0b92babc76f47ee367e745a024a2278319d9a4d1378482b74c516647652bfb6e93002494a5cd74e2a9a4734487062437da23e1efa6ef7674108aaa3ffac859c3577c2637bb3bdc69bc365b1f20dba96b8acca62f3f80045318de0facf2ed44b814e842c2a520159bb6c320cec0910c0b8bd3d547bdfba2e09d24d117ed0388afd37affbad2f9c77c9c1314a16ffe64f5e3744a2fffd7039670f5706e589a4c3868db06fd892d68a547477f8ef686ff0dba7b8c18c94d5a89b0567a851750a35d9cc2217db890d89385fcaa00f0f2e524672e6f4c8bedfd5da5b157709b8265cf511dc5846ab1d85916c4a6b2d1b408575982e11230cbac0a9c6eaa03c945645581f678403c2a936c53ae72940aa92bcf22b82c6bc028e0acdddf9fef595f0f7a9f80c0e4c659ced769ec463d26a81e468846761a8e1efd6a031ab7adc8665e267be0065cc315aa23012423ec8b8492d9b50fa4d8c5891959b761eec6dc988532782fda13239c948e27853606e26225c796b79cc04f3d1a5a13000000001e301d82a27010d3ac6119d2b12caf282413672d20c852c50084d7b2d50754775ed63bc18023c31351af76e24788d96103455693b34e09a163a9f613a7e5530222cebd7fa0fbff32dc98088f9fab33648cc38e87dd2dd6ee157f5f018702696915661715c979b7796d4f101a257688af7c148e8615c938c4ca8a69f6fc585ec1dd1857a501f90b161eff23181a11a2b0da4c58d459cbf9db"], &(0x7f0000000000)='GPL\x00', 0x5, 0x53, &(0x7f000000cf3d)=""/195}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x24080, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc006, 0xac5d, 0xffffffff, 0x0, 0x0, 0x7}, r0, 0xffffffffffffffff, r3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={0xffffffffffffffff, 0x0, 0x0}, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r4, 0x6, 0x6, &(0x7f0000000040), 0x4) r5 = socket$kcm(0x2, 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f00000001c0)=r6, 0x4) write$cgroup_pressure(r6, &(0x7f00000001c0)={'some', 0x20, 0x80000001, 0x20, 0x7ff}, 0x2f) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3075e, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x5e02, 0x0, 0x0, 0x9, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003505d25a806f8c6394f97e24fc60", 0x14}], 0x1, 0x0, 0x0, 0x74000000}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r9 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="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", 0x13c}, {&(0x7f0000000380)="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", 0x2f2}], 0x2, 0x0, 0x0, 0x5865}, 0x0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0xa080, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) 0s ago: executing program 0 (id=8354): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r0}, 0x38) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000a0000000200000003000044ff000200080000003600000604000000000000000000121d20000000694a259f9b60701b65a80a591470f9655365114a985c3621e823739398071865c2238f2f4dd4d047cebea8eeade9d4f8d8315cf687ae16abf2779eebecc3a63b334ed64e162e483184ca49356bee3b88abef4d5eb2c2144c367ee6"], 0x0, 0x3a}, 0x28) close(0xffffffffffffffff) socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x40448c0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x409}, 0x2000, 0xac61}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r1}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x3, &(0x7f0000000000)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x1}, @alu={0x7, 0x1, 0x1, 0x5, 0x2, 0x40, 0x1}], 0x0, 0x8d8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x27}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) openat$cgroup_ro(r2, 0x0, 0x275a, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) kernel console output (not intermixed with test programs): d promiscuous mode [ 1448.989562][T27987] device team_slave_0 entered promiscuous mode [ 1449.002124][T27987] device team_slave_1 entered promiscuous mode [ 1449.019995][T27987] device bond0 entered promiscuous mode [ 1449.025907][T27987] device bond_slave_0 entered promiscuous mode [ 1449.040808][T27987] device bond_slave_1 entered promiscuous mode [ 1449.047216][T27987] device batadv_slave_0 entered promiscuous mode [ 1451.420797][T28001] netlink: 'syz.2.7155': attribute type 19 has an invalid length. [ 1451.428871][T28001] netlink: 156 bytes leftover after parsing attributes in process `syz.2.7155'. [ 1451.440781][T28008] netlink: 128 bytes leftover after parsing attributes in process `syz.1.7158'. [ 1451.472449][T28008] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 1451.597107][T28018] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7161'. [ 1452.552200][T28035] netlink: 'syz.3.7169': attribute type 21 has an invalid length. [ 1452.583134][T28035] netlink: 'syz.3.7169': attribute type 6 has an invalid length. [ 1452.621636][T28035] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7169'. [ 1452.822124][T28041] netlink: 'syz.4.7171': attribute type 39 has an invalid length. [ 1453.022461][ T4283] Bluetooth: hci0: unexpected event 0x16 length: 15 > 6 [ 1453.209189][T28055] : port 1(team0) entered blocking state [ 1453.245670][T28055] : port 1(team0) entered disabled state [ 1453.273055][T28055] device team0 entered promiscuous mode [ 1453.300072][T28055] device team_slave_0 entered promiscuous mode [ 1453.327877][T28055] device team_slave_1 entered promiscuous mode [ 1453.366184][T28055] device bond0 entered promiscuous mode [ 1453.380631][T28055] device bond_slave_0 entered promiscuous mode [ 1453.407390][T28055] device bond_slave_1 entered promiscuous mode [ 1453.433157][T28055] device dummy0 entered promiscuous mode [ 1453.474473][T28065] netlink: 'syz.1.7180': attribute type 21 has an invalid length. [ 1453.494834][T28065] FAULT_INJECTION: forcing a failure. [ 1453.494834][T28065] name failslab, interval 1, probability 0, space 0, times 0 [ 1453.529071][T28065] CPU: 0 PID: 28065 Comm: syz.1.7180 Not tainted syzkaller #0 [ 1453.536587][T28065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1453.546665][T28065] Call Trace: [ 1453.549959][T28065] [ 1453.552907][T28065] dump_stack_lvl+0x188/0x24e [ 1453.557609][T28065] ? show_regs_print_info+0x12/0x12 [ 1453.562834][T28065] ? load_image+0x410/0x410 [ 1453.567366][T28065] ? __lock_acquire+0x7c40/0x7c40 [ 1453.572417][T28065] ? memset+0x1e/0x40 [ 1453.576417][T28065] should_fail_ex+0x390/0x4c0 [ 1453.581129][T28065] should_failslab+0x5/0x20 [ 1453.585649][T28065] slab_pre_alloc_hook+0x59/0x300 [ 1453.590690][T28065] ? lockdep_softirqs_off+0x430/0x430 [ 1453.596083][T28065] ? fib6_info_alloc+0x2e/0xe0 [ 1453.600868][T28065] __kmem_cache_alloc_node+0x4f/0x270 [ 1453.606258][T28065] ? fib6_info_alloc+0x2e/0xe0 [ 1453.611039][T28065] __kmalloc+0xa3/0x240 [ 1453.615203][T28065] fib6_info_alloc+0x2e/0xe0 [ 1453.619789][T28065] ip6_route_info_create+0x455/0x1220 [ 1453.625156][T28065] ? nla_find+0x126/0x150 [ 1453.629497][T28065] inet6_rtm_newroute+0x5c0/0x1ca0 [ 1453.634613][T28065] ? ipv6_route_sysctl_init+0x270/0x270 [ 1453.640148][T28065] ? __mutex_lock+0x7ec/0xae0 [ 1453.644832][T28065] ? do_raw_spin_unlock+0x11d/0x230 [ 1453.650045][T28065] ? ipv6_route_sysctl_init+0x270/0x270 [ 1453.655579][T28065] rtnetlink_rcv_msg+0x863/0xfb0 [ 1453.660514][T28065] ? rtnetlink_rcv_msg+0x220/0xfb0 [ 1453.665623][T28065] ? rtnetlink_bind+0x80/0x80 [ 1453.670286][T28065] ? __local_bh_enable_ip+0x136/0x1c0 [ 1453.675650][T28065] ? lockdep_hardirqs_on+0x94/0x140 [ 1453.680850][T28065] ? __local_bh_enable_ip+0x136/0x1c0 [ 1453.686225][T28065] ? _local_bh_enable+0xa0/0xa0 [ 1453.691085][T28065] ? __dev_queue_xmit+0x281/0x3810 [ 1453.696206][T28065] ? __dev_queue_xmit+0x281/0x3810 [ 1453.701314][T28065] ? __dev_queue_xmit+0x1d84/0x3810 [ 1453.706511][T28065] ? __dev_queue_xmit+0x281/0x3810 [ 1453.711623][T28065] ? ref_tracker_free+0x682/0x830 [ 1453.716659][T28065] ? refcount_inc+0x70/0x70 [ 1453.721169][T28065] ? memcpy+0x3c/0x60 [ 1453.725170][T28065] ? __copy_skb_header+0x3ba/0x4f0 [ 1453.730289][T28065] ? __skb_clone+0x446/0x6c0 [ 1453.734877][T28065] netlink_rcv_skb+0x1ef/0x440 [ 1453.739638][T28065] ? rtnetlink_bind+0x80/0x80 [ 1453.744312][T28065] ? netlink_ack+0x1160/0x1160 [ 1453.749073][T28065] ? netlink_deliver_tap+0x2e/0x1b0 [ 1453.754265][T28065] netlink_unicast+0x7ad/0x920 [ 1453.759027][T28065] netlink_sendmsg+0x8ad/0xbd0 [ 1453.763788][T28065] ? netlink_getsockopt+0x550/0x550 [ 1453.768978][T28065] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1453.774520][T28065] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1453.779793][T28065] ? security_socket_sendmsg+0x7c/0xa0 [ 1453.785262][T28065] ? netlink_getsockopt+0x550/0x550 [ 1453.790482][T28065] ____sys_sendmsg+0x5ed/0x9a0 [ 1453.795258][T28065] ? __sys_sendmsg_sock+0x30/0x30 [ 1453.800278][T28065] ? __import_iovec+0x306/0x510 [ 1453.805134][T28065] ? import_iovec+0x6f/0xa0 [ 1453.809633][T28065] ___sys_sendmsg+0x2a2/0x360 [ 1453.814303][T28065] ? __sys_sendmsg+0x2a0/0x2a0 [ 1453.819069][T28065] ? trace_call_bpf+0xbf/0x6b0 [ 1453.823848][T28065] __se_sys_sendmsg+0x1c3/0x2b0 [ 1453.828689][T28065] ? ct_nmi_exit+0x145/0x1c0 [ 1453.833272][T28065] ? __x64_sys_sendmsg+0x80/0x80 [ 1453.838209][T28065] ? lockdep_hardirqs_on+0x94/0x140 [ 1453.843401][T28065] do_syscall_64+0x4c/0xa0 [ 1453.847805][T28065] ? clear_bhb_loop+0x60/0xb0 [ 1453.852472][T28065] ? clear_bhb_loop+0x60/0xb0 [ 1453.857137][T28065] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1453.863026][T28065] RIP: 0033:0x7f4527d9e159 [ 1453.867432][T28065] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1453.887028][T28065] RSP: 002b:00007f4528d0a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1453.895439][T28065] RAX: ffffffffffffffda RBX: 00007f4528025fa0 RCX: 00007f4527d9e159 [ 1453.903401][T28065] RDX: 0000000000000800 RSI: 0000200000000000 RDI: 0000000000000003 [ 1453.911361][T28065] RBP: 00007f4528d0a090 R08: 0000000000000000 R09: 0000000000000000 [ 1453.919319][T28065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1453.927281][T28065] R13: 00007f4528026038 R14: 00007f4528025fa0 R15: 00007ffd99c62068 [ 1453.935254][T28065] [ 1454.181438][T28082] netlink: 'syz.3.7187': attribute type 21 has an invalid length. [ 1455.253096][T28098] netlink: 'syz.0.7190': attribute type 39 has an invalid length. [ 1455.318522][T28104] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7192'. [ 1455.392226][T28104] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7192'. [ 1455.472554][T28110] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7192'. [ 1455.520276][T28117] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7192'. [ 1455.592236][T28119] netlink: 'syz.4.7196': attribute type 3 has an invalid length. [ 1455.600018][T28119] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7196'. [ 1455.656083][T28121] netlink: 'syz.4.7196': attribute type 16 has an invalid length. [ 1455.683290][T28121] netlink: 168 bytes leftover after parsing attributes in process `syz.4.7196'. [ 1455.709758][T28122] netlink: 'syz.4.7196': attribute type 16 has an invalid length. [ 1455.733344][T28122] netlink: 168 bytes leftover after parsing attributes in process `syz.4.7196'. [ 1455.917205][T28131] FAULT_INJECTION: forcing a failure. [ 1455.917205][T28131] name failslab, interval 1, probability 0, space 0, times 0 [ 1455.970748][T28131] CPU: 0 PID: 28131 Comm: syz.4.7200 Not tainted syzkaller #0 [ 1455.978363][T28131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1455.988438][T28131] Call Trace: [ 1455.991738][T28131] [ 1455.994688][T28131] dump_stack_lvl+0x188/0x24e [ 1455.999368][T28131] ? show_regs_print_info+0x12/0x12 [ 1456.004566][T28131] ? load_image+0x410/0x410 [ 1456.009074][T28131] ? __might_sleep+0xd0/0xd0 [ 1456.013660][T28131] ? __lock_acquire+0x7c40/0x7c40 [ 1456.018686][T28131] should_fail_ex+0x390/0x4c0 [ 1456.023370][T28131] should_failslab+0x5/0x20 [ 1456.027875][T28131] slab_pre_alloc_hook+0x59/0x300 [ 1456.032899][T28131] ? sk_prot_alloc+0xe7/0x210 [ 1456.037571][T28131] __kmem_cache_alloc_node+0x4f/0x270 [ 1456.042940][T28131] ? sk_prot_alloc+0xe7/0x210 [ 1456.047612][T28131] __kmalloc+0xa3/0x240 [ 1456.051770][T28131] sk_prot_alloc+0xe7/0x210 [ 1456.056265][T28131] ? sk_alloc+0x20/0x330 [ 1456.060499][T28131] sk_alloc+0x36/0x330 [ 1456.064563][T28131] ? bpf_ctx_init+0x154/0x190 [ 1456.069237][T28131] bpf_prog_test_run_skb+0x36d/0x18e0 [ 1456.074608][T28131] ? __fget_files+0x28/0x460 [ 1456.079201][T28131] ? __fget_files+0x3fc/0x460 [ 1456.083877][T28131] ? cpu_online+0xa0/0xa0 [ 1456.088204][T28131] bpf_prog_test_run+0x31c/0x390 [ 1456.093141][T28131] __sys_bpf+0x62b/0x780 [ 1456.097382][T28131] ? bpf_link_show_fdinfo+0x380/0x380 [ 1456.102759][T28131] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1456.108914][T28131] __x64_sys_bpf+0x78/0x90 [ 1456.113326][T28131] do_syscall_64+0x4c/0xa0 [ 1456.117734][T28131] ? clear_bhb_loop+0x60/0xb0 [ 1456.122398][T28131] ? clear_bhb_loop+0x60/0xb0 [ 1456.127066][T28131] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1456.132953][T28131] RIP: 0033:0x7fdd97d9e159 [ 1456.137387][T28131] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1456.157001][T28131] RSP: 002b:00007fdd98c55028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1456.165406][T28131] RAX: ffffffffffffffda RBX: 00007fdd98025fa0 RCX: 00007fdd97d9e159 [ 1456.173370][T28131] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 1456.181329][T28131] RBP: 00007fdd98c55090 R08: 0000000000000000 R09: 0000000000000000 [ 1456.189290][T28131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1456.197249][T28131] R13: 00007fdd98026038 R14: 00007fdd98025fa0 R15: 00007fffb93c9698 [ 1456.205222][T28131] [ 1456.631858][T28152] netlink: 'syz.3.7206': attribute type 10 has an invalid length. [ 1457.890429][T28152] device team0 left promiscuous mode [ 1457.914162][T28152] device team_slave_0 left promiscuous mode [ 1457.938266][T28152] device team_slave_1 left promiscuous mode [ 1457.959373][T28152] device bond0 left promiscuous mode [ 1457.985246][T28152] device bond_slave_0 left promiscuous mode [ 1458.010794][T28152] device bond_slave_1 left promiscuous mode [ 1458.030815][T28152] device dummy0 left promiscuous mode [ 1458.041311][T28152] : port 1(team0) entered disabled state [ 1458.178758][T28152] team0: Cannot enslave team device to itself [ 1458.228294][T28170] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.7210'. [ 1458.476740][T28184] netlink: 'syz.2.7215': attribute type 21 has an invalid length. [ 1458.871409][T28194] netlink: 'syz.0.7218': attribute type 27 has an invalid length. [ 1458.902160][T28194] netlink: 164 bytes leftover after parsing attributes in process `syz.0.7218'. [ 1459.989439][T28234] FAULT_INJECTION: forcing a failure. [ 1459.989439][T28234] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1460.074449][T28234] CPU: 0 PID: 28234 Comm: syz.0.7231 Not tainted syzkaller #0 [ 1460.081989][T28234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1460.092057][T28234] Call Trace: [ 1460.095353][T28234] [ 1460.098295][T28234] dump_stack_lvl+0x188/0x24e [ 1460.102988][T28234] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1460.109166][T28234] ? show_regs_print_info+0x12/0x12 [ 1460.114386][T28234] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1460.120562][T28234] ? dump_stack+0x5/0x12 [ 1460.124825][T28234] should_fail_ex+0x390/0x4c0 [ 1460.129529][T28234] _copy_from_user+0x2c/0x170 [ 1460.134228][T28234] __sys_bpf+0x2ea/0x780 [ 1460.138495][T28234] ? bpf_link_show_fdinfo+0x380/0x380 [ 1460.143910][T28234] __x64_sys_bpf+0x78/0x90 [ 1460.148351][T28234] do_syscall_64+0x4c/0xa0 [ 1460.152782][T28234] ? clear_bhb_loop+0x60/0xb0 [ 1460.157474][T28234] ? clear_bhb_loop+0x60/0xb0 [ 1460.162186][T28234] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1460.168098][T28234] RIP: 0033:0x7ff49139e159 [ 1460.172528][T28234] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1460.192321][T28234] RSP: 002b:00007ff49235a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1460.200750][T28234] RAX: ffffffffffffffda RBX: 00007ff491625fa0 RCX: 00007ff49139e159 [ 1460.208738][T28234] RDX: 0000000000000094 RSI: 000020000000e000 RDI: 0000000000000005 [ 1460.216718][T28234] RBP: 00007ff49235a090 R08: 0000000000000000 R09: 0000000000000000 [ 1460.224701][T28234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1460.232684][T28234] R13: 00007ff491626038 R14: 00007ff491625fa0 R15: 00007ffcb9c3dae8 [ 1460.240684][T28234] [ 1460.883294][T28258] netlink: 'syz.1.7238': attribute type 10 has an invalid length. [ 1460.935691][T28258] netlink: 'syz.1.7238': attribute type 19 has an invalid length. [ 1460.965115][T28258] netlink: 156 bytes leftover after parsing attributes in process `syz.1.7238'. [ 1461.893296][T28275] netlink: 188 bytes leftover after parsing attributes in process `syz.2.7245'. [ 1462.073230][T28281] netlink: 144 bytes leftover after parsing attributes in process `syz.0.7244'. [ 1462.300168][T28289] netlink: 'syz.2.7251': attribute type 10 has an invalid length. [ 1462.349332][T28289] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1463.308657][T28299] netlink: 14975 bytes leftover after parsing attributes in process `syz.4.7254'. [ 1463.446284][T28301] netlink: 'syz.0.7253': attribute type 10 has an invalid length. [ 1463.516674][T28301] netlink: 'syz.0.7253': attribute type 19 has an invalid length. [ 1463.572987][T28301] netlink: 156 bytes leftover after parsing attributes in process `syz.0.7253'. [ 1463.927703][T28310] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.7257'. [ 1463.982557][T28311] device Q6\bY4 entered promiscuous mode [ 1464.027720][T28311] A link change request failed with some changes committed already. Interface Q6\bY4 may have been left with an inconsistent configuration, please check. [ 1464.297945][T28315] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.7259'. [ 1464.317691][T28317] netlink: 188 bytes leftover after parsing attributes in process `syz.0.7261'. [ 1465.185859][T28335] netlink: 'syz.0.7267': attribute type 10 has an invalid length. [ 1465.265525][T28335] netlink: 'syz.0.7267': attribute type 19 has an invalid length. [ 1465.330857][T28335] netlink: 156 bytes leftover after parsing attributes in process `syz.0.7267'. [ 1466.655325][T28360] netlink: 188 bytes leftover after parsing attributes in process `syz.2.7273'. [ 1466.976280][T28364] netlink: 'syz.2.7275': attribute type 21 has an invalid length. [ 1467.264027][T28372] netlink: 184 bytes leftover after parsing attributes in process `syz.1.7278'. [ 1467.656743][T28375] netlink: 'syz.4.7279': attribute type 15 has an invalid length. [ 1467.710724][T28375] netlink: 'syz.4.7279': attribute type 7 has an invalid length. [ 1468.033147][T28378] netlink: 176 bytes leftover after parsing attributes in process `syz.1.7280'. [ 1468.515603][T28390] netlink: 'syz.4.7285': attribute type 16 has an invalid length. [ 1468.590982][T28390] netlink: 164 bytes leftover after parsing attributes in process `syz.4.7285'. [ 1468.732581][T28394] netlink: 'syz.2.7287': attribute type 39 has an invalid length. [ 1469.054850][T28398] : renamed from bridge_slave_0 [ 1470.028512][T28434] netlink: 'syz.2.7300': attribute type 39 has an invalid length. [ 1470.223586][T28437] netlink: 68520 bytes leftover after parsing attributes in process `syz.4.7302'. [ 1470.918366][T28456] netlink: 14 bytes leftover after parsing attributes in process `syz.2.7308'. [ 1471.107754][T28460] netlink: 'syz.2.7310': attribute type 10 has an invalid length. [ 1471.162340][T28460] netlink: 2 bytes leftover after parsing attributes in process `syz.2.7310'. [ 1471.219908][T28460] bridge0: port 2(bridge_slave_1) entered disabled state [ 1471.227719][T28460] bridge0: port 1(bridge_slave_0) entered disabled state [ 1471.296111][T28460] bridge0: port 2(bridge_slave_1) entered blocking state [ 1471.303443][T28460] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1471.311176][T28460] bridge0: port 1(bridge_slave_0) entered blocking state [ 1471.318455][T28460] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1471.367857][T28460] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1471.378445][T28462] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7311'. [ 1471.494522][T28469] netlink: 'syz.3.7314': attribute type 39 has an invalid length. [ 1471.628523][T28471] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7315'. [ 1471.849332][T28474] netlink: 'syz.1.7316': attribute type 10 has an invalid length. [ 1472.337592][T28486] FAULT_INJECTION: forcing a failure. [ 1472.337592][T28486] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1472.351631][T28486] CPU: 1 PID: 28486 Comm: syz.4.7318 Not tainted syzkaller #0 [ 1472.359110][T28486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1472.369157][T28486] Call Trace: [ 1472.372463][T28486] [ 1472.375385][T28486] dump_stack_lvl+0x188/0x24e [ 1472.380051][T28486] ? show_regs_print_info+0x12/0x12 [ 1472.385233][T28486] ? load_image+0x410/0x410 [ 1472.389732][T28486] ? __might_fault+0xa6/0x120 [ 1472.394413][T28486] should_fail_ex+0x390/0x4c0 [ 1472.399090][T28486] copyin+0x1b/0x120 [ 1472.402979][T28486] _copy_from_iter+0x447/0x1130 [ 1472.407817][T28486] ? sock_alloc_send_pskb+0x89d/0x9a0 [ 1472.413191][T28486] ? copyout_mc+0x110/0x110 [ 1472.417698][T28486] ? __virt_addr_valid+0x188/0x540 [ 1472.422832][T28486] ? __virt_addr_valid+0x188/0x540 [ 1472.427966][T28486] ? __virt_addr_valid+0x467/0x540 [ 1472.433092][T28486] ? __check_object_size+0x4f6/0xa70 [ 1472.438393][T28486] skb_copy_datagram_from_iter+0xee/0x6b0 [ 1472.444115][T28486] ? dev_get_by_index+0x1e/0x2d0 [ 1472.449051][T28486] ? skb_put+0x10e/0x200 [ 1472.453291][T28486] packet_sendmsg+0x35e7/0x4c30 [ 1472.458171][T28486] ? perf_trace_lock+0xf8/0x390 [ 1472.463029][T28486] ? trace_event_raw_event_lock+0x230/0x230 [ 1472.468958][T28486] ? aa_sk_perm+0x81f/0x950 [ 1472.473467][T28486] ? aa_af_perm+0x340/0x340 [ 1472.477966][T28486] ? packet_getsockopt+0x980/0x980 [ 1472.483086][T28486] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1472.488631][T28486] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1472.493910][T28486] ? security_socket_sendmsg+0x7c/0xa0 [ 1472.499373][T28486] ? packet_getsockopt+0x980/0x980 [ 1472.504484][T28486] ____sys_sendmsg+0x5ed/0x9a0 [ 1472.509255][T28486] ? __sys_sendmsg_sock+0x30/0x30 [ 1472.514274][T28486] ? __import_iovec+0x306/0x510 [ 1472.519140][T28486] ? import_iovec+0x6f/0xa0 [ 1472.523649][T28486] ___sys_sendmsg+0x2a2/0x360 [ 1472.528348][T28486] ? __sys_sendmsg+0x2a0/0x2a0 [ 1472.533147][T28486] ? __lock_acquire+0x7c40/0x7c40 [ 1472.538214][T28486] __se_sys_sendmsg+0x1c3/0x2b0 [ 1472.543071][T28486] ? ct_nmi_exit+0x145/0x1c0 [ 1472.547668][T28486] ? __x64_sys_sendmsg+0x80/0x80 [ 1472.552625][T28486] ? lockdep_hardirqs_on+0x94/0x140 [ 1472.557917][T28486] do_syscall_64+0x4c/0xa0 [ 1472.562334][T28486] ? clear_bhb_loop+0x60/0xb0 [ 1472.567007][T28486] ? clear_bhb_loop+0x60/0xb0 [ 1472.571680][T28486] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1472.577579][T28486] RIP: 0033:0x7fdd97d9e159 [ 1472.581991][T28486] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1472.601592][T28486] RSP: 002b:00007fdd98c55028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1472.610008][T28486] RAX: ffffffffffffffda RBX: 00007fdd98025fa0 RCX: 00007fdd97d9e159 [ 1472.617975][T28486] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 1472.625995][T28486] RBP: 00007fdd98c55090 R08: 0000000000000000 R09: 0000000000000000 [ 1472.633967][T28486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1472.641936][T28486] R13: 00007fdd98026038 R14: 00007fdd98025fa0 R15: 00007fffb93c9698 [ 1472.649929][T28486] [ 1472.788771][T28490] netlink: 'syz.4.7320': attribute type 4 has an invalid length. [ 1472.826317][T28492] netlink: 'syz.0.7321': attribute type 29 has an invalid length. [ 1472.859466][T28492] netlink: 'syz.0.7321': attribute type 29 has an invalid length. [ 1473.157048][T28502] netlink: 'syz.4.7326': attribute type 13 has an invalid length. [ 1473.181294][T28502] netlink: 24859 bytes leftover after parsing attributes in process `syz.4.7326'. [ 1473.228842][T28503] netlink: 'syz.4.7326': attribute type 13 has an invalid length. [ 1473.273254][T28503] netlink: 24859 bytes leftover after parsing attributes in process `syz.4.7326'. [ 1473.515094][T28510] netlink: 'syz.4.7327': attribute type 39 has an invalid length. [ 1473.847516][T28516] netlink: 'syz.2.7328': attribute type 10 has an invalid length. [ 1474.864372][T28556] netlink: 'syz.2.7342': attribute type 10 has an invalid length. [ 1474.874509][T28558] netlink: 'syz.3.7343': attribute type 3 has an invalid length. [ 1474.905676][T28556] device wlan1 left promiscuous mode [ 1474.912577][T28558] netlink: 13435 bytes leftover after parsing attributes in process `syz.3.7343'. [ 1475.163036][T28565] netlink: 'syz.3.7345': attribute type 39 has an invalid length. [ 1475.494329][T28580] netlink: 100 bytes leftover after parsing attributes in process `syz.3.7352'. [ 1475.556429][T28580] netlink: 14530 bytes leftover after parsing attributes in process `syz.3.7352'. [ 1475.704760][T28584] device syzkaller0 entered promiscuous mode [ 1475.742628][T28587] bridge0: port 1(bridge_slave_0) entered disabled state [ 1476.000310][T28587] : renamed from bridge_slave_0 [ 1476.304106][T28594] netlink: 164 bytes leftover after parsing attributes in process `syz.1.7357'. [ 1476.444443][T28598] netlink: 164 bytes leftover after parsing attributes in process `syz.1.7368'. [ 1476.706250][T28614] netlink: 199848 bytes leftover after parsing attributes in process `syz.2.7361'. [ 1476.724026][T28616] netlink: 199848 bytes leftover after parsing attributes in process `syz.2.7361'. [ 1478.076744][T28612] validate_nla: 5 callbacks suppressed [ 1478.076759][T28612] netlink: 'syz.4.7358': attribute type 10 has an invalid length. [ 1478.102308][T28612] device wlan1 left promiscuous mode [ 1478.172448][T28620] netlink: 'syz.1.7362': attribute type 39 has an invalid length. [ 1478.362256][T28628] netlink: 'syz.0.7366': attribute type 13 has an invalid length. [ 1478.576254][T28638] netlink: 'syz.0.7371': attribute type 16 has an invalid length. [ 1478.634195][T28638] netlink: 164 bytes leftover after parsing attributes in process `syz.0.7371'. [ 1478.699042][T28636] device team0 left promiscuous mode [ 1478.721220][T28636] device team_slave_0 left promiscuous mode [ 1478.729884][T28636] device team_slave_1 left promiscuous mode [ 1478.746846][T28636] device bond0 left promiscuous mode [ 1478.759825][T28636] device bond_slave_0 left promiscuous mode [ 1478.788465][T28636] device bond_slave_1 left promiscuous mode [ 1478.796535][T28636] device batadv_slave_0 left promiscuous mode [ 1478.807650][T28636] : port 1(team0) entered disabled state [ 1478.829507][T28647] netlink: 194236 bytes leftover after parsing attributes in process `syz.4.7373'. [ 1478.841230][T28647] netlink: zone id is out of range [ 1478.846571][T28647] netlink: zone id is out of range [ 1478.852179][T28647] netlink: zone id is out of range [ 1478.857536][T28647] netlink: get zone limit has 8 unknown bytes [ 1479.557358][T28667] netlink: 'syz.2.7377': attribute type 19 has an invalid length. [ 1479.586393][T28667] netlink: 156 bytes leftover after parsing attributes in process `syz.2.7377'. [ 1479.602385][T28672] netlink: 'syz.0.7379': attribute type 39 has an invalid length. [ 1479.624759][T28674] netlink: 'syz.1.7380': attribute type 10 has an invalid length. [ 1479.881307][T28686] netlink: 14536 bytes leftover after parsing attributes in process `syz.4.7385'. [ 1480.011007][T28694] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7387'. [ 1480.074809][T28694] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7387'. [ 1480.101166][T28696] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7387'. [ 1480.133751][T28694] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7387'. [ 1480.209968][T28699] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7388'. [ 1480.304243][T28705] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.7389'. [ 1481.036288][T28730] netlink: 'syz.2.7398': attribute type 39 has an invalid length. [ 1481.065197][T28724] netlink: 'syz.4.7394': attribute type 19 has an invalid length. [ 1482.081951][T28782] netlink: 'syz.2.7412': attribute type 19 has an invalid length. [ 1483.435012][T28825] validate_nla: 1 callbacks suppressed [ 1483.435029][T28825] netlink: 'syz.0.7433': attribute type 29 has an invalid length. [ 1483.472112][T28825] netlink: 'syz.0.7433': attribute type 29 has an invalid length. [ 1483.742193][T28829] netlink: 'syz.0.7433': attribute type 29 has an invalid length. [ 1483.800936][T28835] netlink: 'syz.4.7436': attribute type 39 has an invalid length. [ 1484.022739][T28838] delete_channel: no stack [ 1484.987762][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.994451][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.286783][T28847] __nla_validate_parse: 5 callbacks suppressed [ 1485.286802][T28847] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.7440'. [ 1485.321061][T28855] netlink: 'syz.2.7442': attribute type 10 has an invalid length. [ 1485.522206][T28871] netlink: 'syz.4.7446': attribute type 2 has an invalid length. [ 1485.550859][T28871] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.7446'. [ 1485.906354][T28896] netlink: 'syz.3.7455': attribute type 39 has an invalid length. [ 1486.063374][T28900] netlink: 'syz.0.7457': attribute type 10 has an invalid length. [ 1486.160726][T28900] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7457'. [ 1486.309891][T28900] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1486.844656][T28922] device syzkaller0 entered promiscuous mode [ 1486.872556][T28923] netlink: 'syz.1.7463': attribute type 21 has an invalid length. [ 1486.896588][T28923] netlink: 100 bytes leftover after parsing attributes in process `syz.1.7463'. [ 1487.041652][T28935] netlink: 161700 bytes leftover after parsing attributes in process `syz.4.7467'. [ 1487.074201][T28935] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1487.137813][T28935] netlink: 161700 bytes leftover after parsing attributes in process `syz.4.7467'. [ 1487.184343][T28935] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1489.230653][T28970] netlink: 'syz.3.7476': attribute type 39 has an invalid length. [ 1489.620822][T28985] : port 1(team0) entered blocking state [ 1489.638096][T28985] : port 1(team0) entered disabled state [ 1489.663099][T28985] device team0 entered promiscuous mode [ 1489.684508][T28985] device team_slave_0 entered promiscuous mode [ 1489.695023][T28985] device team_slave_1 entered promiscuous mode [ 1489.715684][T28985] device bond0 entered promiscuous mode [ 1489.742992][T28985] device bond_slave_0 entered promiscuous mode [ 1489.757910][T28985] device bond_slave_1 entered promiscuous mode [ 1489.772658][T28985] device batadv_slave_0 entered promiscuous mode [ 1489.945274][T28989] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7483'. [ 1489.981685][T28989] bond0: (slave bond_slave_0): Releasing backup interface [ 1492.529866][T28989] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 1492.550819][T28994] device team0 left promiscuous mode [ 1492.556271][T28994] device team_slave_0 left promiscuous mode [ 1492.571520][T28994] device team_slave_1 left promiscuous mode [ 1492.577865][T28994] device bond0 left promiscuous mode [ 1492.583540][T28994] device bond_slave_0 left promiscuous mode [ 1492.589869][T28994] device bond_slave_1 left promiscuous mode [ 1492.596144][T28994] device batadv_slave_0 left promiscuous mode [ 1492.603717][T28994] : port 1(team0) entered disabled state [ 1492.664035][T29006] netlink: 'syz.4.7489': attribute type 39 has an invalid length. [ 1492.712575][T29001] : port 1(team0) entered blocking state [ 1492.740727][T29001] : port 1(team0) entered disabled state [ 1492.754050][T29001] device team0 entered promiscuous mode [ 1492.761096][T29001] device team_slave_0 entered promiscuous mode [ 1492.767426][T29001] device team_slave_1 entered promiscuous mode [ 1492.792884][T29001] device bond0 entered promiscuous mode [ 1492.798920][T29001] device bond_slave_0 entered promiscuous mode [ 1492.817514][T29001] device bond_slave_1 entered promiscuous mode [ 1492.828645][T29001] device dummy0 entered promiscuous mode [ 1492.861928][T29004] device team0 left promiscuous mode [ 1492.867276][T29004] device team_slave_0 left promiscuous mode [ 1492.880964][T29004] device team_slave_1 left promiscuous mode [ 1492.886989][T29004] device bond0 left promiscuous mode [ 1492.899361][T29004] device bond_slave_0 left promiscuous mode [ 1492.905467][T29004] device bond_slave_1 left promiscuous mode [ 1492.912066][T29004] device dummy0 left promiscuous mode [ 1492.917858][T29004] : port 1(team0) entered disabled state [ 1492.974589][T29017] netlink: 'syz.2.7491': attribute type 22 has an invalid length. [ 1493.000850][T29017] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7491'. [ 1493.038282][T29023] netlink: 64 bytes leftover after parsing attributes in process `syz.4.7494'. [ 1493.049193][T29023] A link change request failed with some changes committed already. Interface Q6\bY4 may have been left with an inconsistent configuration, please check. [ 1493.333095][T29035] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7499'. [ 1493.348789][T29035] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7499'. [ 1493.367523][T29035] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7499'. [ 1493.748661][T29044] netlink: 'syz.2.7501': attribute type 19 has an invalid length. [ 1493.775334][T29044] netlink: 156 bytes leftover after parsing attributes in process `syz.2.7501'. [ 1494.304832][T29048] netlink: 'syz.1.7502': attribute type 33 has an invalid length. [ 1494.314939][T29048] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7502'. [ 1496.067055][T29057] netlink: 'syz.0.7504': attribute type 39 has an invalid length. [ 1496.533722][T29080] netlink: 'syz.2.7513': attribute type 21 has an invalid length. [ 1496.581795][T29080] FAULT_INJECTION: forcing a failure. [ 1496.581795][T29080] name failslab, interval 1, probability 0, space 0, times 0 [ 1496.613387][T29085] sctp: [Deprecated]: syz.4.7512 (pid 29085) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1496.613387][T29085] Use struct sctp_sack_info instead [ 1496.654390][T29080] CPU: 0 PID: 29080 Comm: syz.2.7513 Not tainted syzkaller #0 [ 1496.661905][T29080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1496.671978][T29080] Call Trace: [ 1496.675278][T29080] [ 1496.678236][T29080] dump_stack_lvl+0x188/0x24e [ 1496.682945][T29080] ? show_regs_print_info+0x12/0x12 [ 1496.688158][T29080] ? load_image+0x410/0x410 [ 1496.692684][T29080] ? __might_sleep+0xd0/0xd0 [ 1496.697288][T29080] ? __lock_acquire+0x7c40/0x7c40 [ 1496.702336][T29080] should_fail_ex+0x390/0x4c0 [ 1496.707041][T29080] should_failslab+0x5/0x20 [ 1496.711556][T29080] slab_pre_alloc_hook+0x59/0x300 [ 1496.716603][T29080] kmem_cache_alloc_node+0x5a/0x310 [ 1496.721817][T29080] ? __alloc_skb+0xf9/0x7d0 [ 1496.726336][T29080] __alloc_skb+0xf9/0x7d0 [ 1496.730685][T29080] netlink_ack+0x373/0x1160 [ 1496.735203][T29080] ? perf_trace_lock+0xf8/0x390 [ 1496.740054][T29080] ? netlink_dump+0xcd0/0xcd0 [ 1496.744726][T29080] ? __copy_skb_header+0x3ba/0x4f0 [ 1496.749831][T29080] ? __skb_clone+0x446/0x6c0 [ 1496.754412][T29080] netlink_rcv_skb+0x26d/0x440 [ 1496.759169][T29080] ? rtnetlink_bind+0x80/0x80 [ 1496.763836][T29080] ? netlink_ack+0x1160/0x1160 [ 1496.768593][T29080] ? netlink_deliver_tap+0x2e/0x1b0 [ 1496.773785][T29080] netlink_unicast+0x7ad/0x920 [ 1496.778547][T29080] netlink_sendmsg+0x8ad/0xbd0 [ 1496.783307][T29080] ? netlink_getsockopt+0x550/0x550 [ 1496.788497][T29080] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1496.794038][T29080] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1496.799314][T29080] ? security_socket_sendmsg+0x7c/0xa0 [ 1496.804766][T29080] ? netlink_getsockopt+0x550/0x550 [ 1496.809954][T29080] ____sys_sendmsg+0x5ed/0x9a0 [ 1496.814712][T29080] ? __sys_sendmsg_sock+0x30/0x30 [ 1496.819728][T29080] ? __import_iovec+0x306/0x510 [ 1496.824587][T29080] ? import_iovec+0x6f/0xa0 [ 1496.829089][T29080] ___sys_sendmsg+0x2a2/0x360 [ 1496.833763][T29080] ? __sys_sendmsg+0x2a0/0x2a0 [ 1496.838529][T29080] ? __lock_acquire+0x7c40/0x7c40 [ 1496.843562][T29080] __se_sys_sendmsg+0x1c3/0x2b0 [ 1496.848401][T29080] ? ct_nmi_exit+0x145/0x1c0 [ 1496.852986][T29080] ? __x64_sys_sendmsg+0x80/0x80 [ 1496.857920][T29080] ? lockdep_hardirqs_on+0x94/0x140 [ 1496.863110][T29080] do_syscall_64+0x4c/0xa0 [ 1496.867516][T29080] ? clear_bhb_loop+0x60/0xb0 [ 1496.872183][T29080] ? clear_bhb_loop+0x60/0xb0 [ 1496.876849][T29080] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1496.882738][T29080] RIP: 0033:0x7f0f6d99e159 [ 1496.887146][T29080] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1496.906743][T29080] RSP: 002b:00007f0f6e866028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1496.915159][T29080] RAX: ffffffffffffffda RBX: 00007f0f6dc25fa0 RCX: 00007f0f6d99e159 [ 1496.923128][T29080] RDX: 0000000000000800 RSI: 0000200000000000 RDI: 0000000000000003 [ 1496.931093][T29080] RBP: 00007f0f6e866090 R08: 0000000000000000 R09: 0000000000000000 [ 1496.939060][T29080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1496.947022][T29080] R13: 00007f0f6dc26038 R14: 00007f0f6dc25fa0 R15: 00007fff18267808 [ 1496.954999][T29080] [ 1497.553626][T29103] netlink: 'syz.0.7518': attribute type 19 has an invalid length. [ 1497.569572][T29103] netlink: 156 bytes leftover after parsing attributes in process `syz.0.7518'. [ 1497.735057][T29109] netlink: 'syz.4.7521': attribute type 19 has an invalid length. [ 1497.769571][T29109] netlink: 156 bytes leftover after parsing attributes in process `syz.4.7521'. [ 1497.894689][T29118] netlink: 'syz.0.7525': attribute type 39 has an invalid length. [ 1498.124126][T29125] netlink: 'syz.2.7537': attribute type 19 has an invalid length. [ 1498.155188][T29125] netlink: 156 bytes leftover after parsing attributes in process `syz.2.7537'. [ 1498.201778][T29127] netlink: 'syz.4.7527': attribute type 22 has an invalid length. [ 1498.234930][T29127] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7527'. [ 1498.686327][T29157] netlink: 'syz.1.7536': attribute type 19 has an invalid length. [ 1498.712680][T29157] netlink: 156 bytes leftover after parsing attributes in process `syz.1.7536'. [ 1498.964039][T29167] FAULT_INJECTION: forcing a failure. [ 1498.964039][T29167] name failslab, interval 1, probability 0, space 0, times 0 [ 1498.987544][T29169] netlink: 'syz.0.7541': attribute type 39 has an invalid length. [ 1499.011108][T29167] CPU: 1 PID: 29167 Comm: syz.1.7540 Not tainted syzkaller #0 [ 1499.018629][T29167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1499.028704][T29167] Call Trace: [ 1499.031993][T29167] [ 1499.034930][T29167] dump_stack_lvl+0x188/0x24e [ 1499.039627][T29167] ? show_regs_print_info+0x12/0x12 [ 1499.044832][T29167] ? load_image+0x410/0x410 [ 1499.049353][T29167] ? __lock_acquire+0x7c40/0x7c40 [ 1499.054401][T29167] should_fail_ex+0x390/0x4c0 [ 1499.059097][T29167] should_failslab+0x5/0x20 [ 1499.063608][T29167] slab_pre_alloc_hook+0x59/0x300 [ 1499.068638][T29167] ? security_sk_alloc+0x47/0x130 [ 1499.073683][T29167] __kmem_cache_alloc_node+0x4f/0x270 [ 1499.079071][T29167] ? security_sk_alloc+0x47/0x130 [ 1499.084120][T29167] __kmalloc+0xa3/0x240 [ 1499.088292][T29167] ? sk_prot_alloc+0xe7/0x210 [ 1499.092980][T29167] security_sk_alloc+0x47/0x130 [ 1499.097847][T29167] sk_prot_alloc+0x101/0x210 [ 1499.102449][T29167] ? sk_alloc+0x20/0x330 [ 1499.106699][T29167] sk_alloc+0x36/0x330 [ 1499.110776][T29167] ? bpf_ctx_init+0x154/0x190 [ 1499.115470][T29167] bpf_prog_test_run_skb+0x36d/0x18e0 [ 1499.120850][T29167] ? __fget_files+0x28/0x460 [ 1499.125453][T29167] ? __fget_files+0x3fc/0x460 [ 1499.130143][T29167] ? cpu_online+0xa0/0xa0 [ 1499.134480][T29167] bpf_prog_test_run+0x31c/0x390 [ 1499.139427][T29167] __sys_bpf+0x62b/0x780 [ 1499.143676][T29167] ? bpf_link_show_fdinfo+0x380/0x380 [ 1499.149068][T29167] ? lock_chain_count+0x20/0x20 [ 1499.153928][T29167] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1499.159923][T29167] __x64_sys_bpf+0x78/0x90 [ 1499.164351][T29167] do_syscall_64+0x4c/0xa0 [ 1499.168770][T29167] ? clear_bhb_loop+0x60/0xb0 [ 1499.173449][T29167] ? clear_bhb_loop+0x60/0xb0 [ 1499.178131][T29167] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1499.184039][T29167] RIP: 0033:0x7f4527d9e159 [ 1499.188457][T29167] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1499.208069][T29167] RSP: 002b:00007f4528d0a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1499.216489][T29167] RAX: ffffffffffffffda RBX: 00007f4528025fa0 RCX: 00007f4527d9e159 [ 1499.224461][T29167] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 1499.232437][T29167] RBP: 00007f4528d0a090 R08: 0000000000000000 R09: 0000000000000000 [ 1499.240412][T29167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1499.248384][T29167] R13: 00007f4528026038 R14: 00007f4528025fa0 R15: 00007ffd99c62068 [ 1499.256377][T29167] [ 1499.576287][T29173] netlink: 'syz.4.7542': attribute type 19 has an invalid length. [ 1499.589073][T29173] netlink: 156 bytes leftover after parsing attributes in process `syz.4.7542'. [ 1499.665132][T29176] netlink: 'syz.1.7543': attribute type 22 has an invalid length. [ 1499.691889][T29176] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7543'. [ 1499.797327][T29186] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7546'. [ 1499.936214][T29186] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7546'. [ 1499.971228][T29183] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7546'. [ 1500.097047][T29196] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.7552'. [ 1500.425628][T29213] netlink: 'syz.3.7556': attribute type 39 has an invalid length. [ 1500.478202][T29212] netlink: 'syz.0.7557': attribute type 19 has an invalid length. [ 1500.493497][T29212] netlink: 156 bytes leftover after parsing attributes in process `syz.0.7557'. [ 1500.521493][ T4283] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 1500.790382][T29222] netlink: 'syz.0.7558': attribute type 3 has an invalid length. [ 1501.307599][T29239] A link change request failed with some changes committed already. Interface Q6\bY4 may have been left with an inconsistent configuration, please check. [ 1501.494434][T29244] FAULT_INJECTION: forcing a failure. [ 1501.494434][T29244] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1501.558346][T29244] CPU: 1 PID: 29244 Comm: syz.4.7567 Not tainted syzkaller #0 [ 1501.565863][T29244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1501.575937][T29244] Call Trace: [ 1501.579223][T29244] [ 1501.582163][T29244] dump_stack_lvl+0x188/0x24e [ 1501.586568][T29246] bridge0: port 3(veth0_to_bond) entered blocking state [ 1501.586844][T29244] ? show_regs_print_info+0x12/0x12 [ 1501.598978][T29244] ? load_image+0x410/0x410 [ 1501.603500][T29244] ? __lock_acquire+0x7c40/0x7c40 [ 1501.608542][T29244] ? cap_capable+0x189/0x220 [ 1501.613248][T29244] should_fail_ex+0x390/0x4c0 [ 1501.617949][T29244] _copy_from_user+0x2c/0x170 [ 1501.622687][T29244] __sys_bpf+0x2ea/0x780 [ 1501.626951][T29244] ? bpf_link_show_fdinfo+0x380/0x380 [ 1501.632353][T29244] ? lock_chain_count+0x20/0x20 [ 1501.637223][T29244] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1501.643239][T29244] __x64_sys_bpf+0x78/0x90 [ 1501.647673][T29244] do_syscall_64+0x4c/0xa0 [ 1501.652135][T29244] ? clear_bhb_loop+0x60/0xb0 [ 1501.656833][T29244] ? clear_bhb_loop+0x60/0xb0 [ 1501.657046][T29246] bridge0: port 3(veth0_to_bond) entered disabled state [ 1501.661511][T29244] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1501.661541][T29244] RIP: 0033:0x7fdd97d9e159 [ 1501.661557][T29244] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1501.661571][T29244] RSP: 002b:00007fdd98c55028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1501.661589][T29244] RAX: ffffffffffffffda RBX: 00007fdd98025fa0 RCX: 00007fdd97d9e159 [ 1501.661601][T29244] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 1501.661612][T29244] RBP: 00007fdd98c55090 R08: 0000000000000000 R09: 0000000000000000 [ 1501.661621][T29244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1501.661631][T29244] R13: 00007fdd98026038 R14: 00007fdd98025fa0 R15: 00007fffb93c9698 [ 1501.661655][T29244] [ 1501.825995][T29246] device veth0_to_bond entered promiscuous mode [ 1501.834530][T29246] bridge0: port 3(veth0_to_bond) entered blocking state [ 1501.841668][T29246] bridge0: port 3(veth0_to_bond) entered forwarding state [ 1501.874869][T29247] netlink: 'syz.0.7568': attribute type 19 has an invalid length. [ 1502.040083][T29259] FAULT_INJECTION: forcing a failure. [ 1502.040083][T29259] name failslab, interval 1, probability 0, space 0, times 0 [ 1502.103402][T29259] CPU: 0 PID: 29259 Comm: syz.4.7570 Not tainted syzkaller #0 [ 1502.110924][T29259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1502.120997][T29259] Call Trace: [ 1502.124289][T29259] [ 1502.127227][T29259] dump_stack_lvl+0x188/0x24e [ 1502.131926][T29259] ? sctp_sendmsg+0x1686/0x2940 [ 1502.136797][T29259] ? ___sys_sendmsg+0x2a2/0x360 [ 1502.141663][T29259] ? show_regs_print_info+0x12/0x12 [ 1502.146881][T29259] ? load_image+0x410/0x410 [ 1502.151417][T29259] should_fail_ex+0x390/0x4c0 [ 1502.156120][T29259] should_failslab+0x5/0x20 [ 1502.160633][T29259] slab_pre_alloc_hook+0x59/0x300 [ 1502.165674][T29259] ? sctp_add_bind_addr+0x89/0x350 [ 1502.170802][T29259] __kmem_cache_alloc_node+0x4f/0x270 [ 1502.176194][T29259] ? sctp_add_bind_addr+0x89/0x350 [ 1502.181323][T29259] kmalloc_trace+0x26/0xe0 [ 1502.185760][T29259] sctp_add_bind_addr+0x89/0x350 [ 1502.190717][T29259] sctp_copy_local_addr_list+0x317/0x4d0 [ 1502.196373][T29259] ? sctp_copy_local_addr_list+0xa0/0x4d0 [ 1502.202106][T29259] ? sctp_do_8_2_transport_strike+0x900/0x900 [ 1502.208192][T29259] ? sctp_v4_is_any+0x31/0x50 [ 1502.212879][T29259] ? sctp_copy_one_addr+0x93/0x660 [ 1502.218004][T29259] sctp_bind_addr_copy+0xaf/0x3c0 [ 1502.223042][T29259] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 1502.229427][T29259] sctp_connect_new_asoc+0x2f5/0x6a0 [ 1502.234728][T29259] ? __sctp_connect+0xd80/0xd80 [ 1502.239592][T29259] ? __local_bh_enable_ip+0x136/0x1c0 [ 1502.244985][T29259] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 1502.250546][T29259] ? security_sctp_bind_connect+0x85/0xb0 [ 1502.256299][T29259] sctp_sendmsg+0x1686/0x2940 [ 1502.261013][T29259] ? sctp_getsockopt+0x8a0/0x8a0 [ 1502.265970][T29259] ? __might_fault+0xa6/0x120 [ 1502.270663][T29259] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 1502.277097][T29259] ? aa_sock_msg_perm+0x94/0x150 [ 1502.282060][T29259] ? inet_sendmsg+0xca/0x2a0 [ 1502.286677][T29259] ? inet_send_prepare+0x250/0x250 [ 1502.291808][T29259] ____sys_sendmsg+0x5ed/0x9a0 [ 1502.296597][T29259] ? __sys_sendmsg_sock+0x30/0x30 [ 1502.301634][T29259] ? __import_iovec+0x306/0x510 [ 1502.306511][T29259] ? import_iovec+0x6f/0xa0 [ 1502.311123][T29259] ___sys_sendmsg+0x2a2/0x360 [ 1502.315817][T29259] ? __sys_sendmsg+0x2a0/0x2a0 [ 1502.320614][T29259] ? __lock_acquire+0x7c40/0x7c40 [ 1502.325679][T29259] __se_sys_sendmsg+0x1c3/0x2b0 [ 1502.330552][T29259] ? ct_nmi_exit+0x145/0x1c0 [ 1502.335169][T29259] ? __x64_sys_sendmsg+0x80/0x80 [ 1502.340136][T29259] ? lockdep_hardirqs_on+0x94/0x140 [ 1502.345380][T29259] do_syscall_64+0x4c/0xa0 [ 1502.349814][T29259] ? clear_bhb_loop+0x60/0xb0 [ 1502.354508][T29259] ? clear_bhb_loop+0x60/0xb0 [ 1502.359206][T29259] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1502.365173][T29259] RIP: 0033:0x7fdd97d9e159 [ 1502.369603][T29259] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1502.389225][T29259] RSP: 002b:00007fdd98c55028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1502.397675][T29259] RAX: ffffffffffffffda RBX: 00007fdd98025fa0 RCX: 00007fdd97d9e159 [ 1502.405660][T29259] RDX: 00000000000003e8 RSI: 00002000000004c0 RDI: 0000000000000004 [ 1502.413642][T29259] RBP: 00007fdd98c55090 R08: 0000000000000000 R09: 0000000000000000 [ 1502.421624][T29259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1502.429608][T29259] R13: 00007fdd98026038 R14: 00007fdd98025fa0 R15: 00007fffb93c9698 [ 1502.437611][T29259] [ 1502.578626][T29275] netlink: 'syz.4.7576': attribute type 39 has an invalid length. [ 1502.713561][T29282] netlink: 'syz.0.7579': attribute type 46 has an invalid length. [ 1502.753757][T29283] netlink: 'syz.2.7578': attribute type 12 has an invalid length. [ 1502.818879][T29282] netlink: 'syz.0.7579': attribute type 27 has an invalid length. [ 1503.504915][T29292] __nla_validate_parse: 6 callbacks suppressed [ 1503.504955][T29292] netlink: 156 bytes leftover after parsing attributes in process `syz.0.7581'. [ 1503.646403][T29301] netlink: 164 bytes leftover after parsing attributes in process `syz.2.7584'. [ 1503.648760][T29300] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7583'. [ 1503.826067][T29307] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7585'. [ 1504.488435][T29307] bond0: (slave bond_slave_0): Releasing backup interface [ 1504.520559][T29307] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 1504.677899][T29321] netlink: 'syz.2.7589': attribute type 11 has an invalid length. [ 1504.711031][T29321] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.7589'. [ 1504.842377][T29320] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1505.111696][T29337] validate_nla: 4 callbacks suppressed [ 1505.111741][T29337] netlink: 'syz.2.7593': attribute type 39 has an invalid length. [ 1505.336503][T29342] netlink: 'syz.3.7594': attribute type 3 has an invalid length. [ 1505.343634][T29346] netlink: 'syz.0.7595': attribute type 27 has an invalid length. [ 1505.357867][T29342] netlink: 152 bytes leftover after parsing attributes in process `syz.3.7594'. [ 1505.380983][T29346] netlink: 164 bytes leftover after parsing attributes in process `syz.0.7595'. [ 1505.419174][T29344] netlink: 'syz.4.7596': attribute type 19 has an invalid length. [ 1505.464567][T29344] netlink: 156 bytes leftover after parsing attributes in process `syz.4.7596'. [ 1506.290485][T29370] bridge0: port 2(bridge_slave_1) entered disabled state [ 1506.455504][T29377] FAULT_INJECTION: forcing a failure. [ 1506.455504][T29377] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1506.486057][T29377] CPU: 1 PID: 29377 Comm: syz.1.7605 Not tainted syzkaller #0 [ 1506.493576][T29377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1506.503649][T29377] Call Trace: [ 1506.506937][T29377] [ 1506.509875][T29377] dump_stack_lvl+0x188/0x24e [ 1506.514578][T29377] ? show_regs_print_info+0x12/0x12 [ 1506.519788][T29377] ? load_image+0x410/0x410 [ 1506.524306][T29377] ? __lock_acquire+0x7c40/0x7c40 [ 1506.529345][T29377] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1506.535089][T29377] should_fail_ex+0x390/0x4c0 [ 1506.539795][T29377] strncpy_from_user+0x32/0x340 [ 1506.544664][T29377] bpf_prog_load+0x200/0x1530 [ 1506.549345][T29377] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1506.555489][T29377] ? map_freeze+0x390/0x390 [ 1506.559989][T29377] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1506.566143][T29377] ? __might_fault+0xc2/0x120 [ 1506.570811][T29377] ? __might_fault+0xa6/0x120 [ 1506.575479][T29377] ? bpf_lsm_bpf+0x5/0x10 [ 1506.579798][T29377] ? security_bpf+0x7a/0xa0 [ 1506.584299][T29377] __sys_bpf+0x5b8/0x780 [ 1506.588536][T29377] ? bpf_link_show_fdinfo+0x380/0x380 [ 1506.593911][T29377] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1506.600065][T29377] __x64_sys_bpf+0x78/0x90 [ 1506.604476][T29377] do_syscall_64+0x4c/0xa0 [ 1506.608889][T29377] ? clear_bhb_loop+0x60/0xb0 [ 1506.613556][T29377] ? clear_bhb_loop+0x60/0xb0 [ 1506.618223][T29377] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1506.624112][T29377] RIP: 0033:0x7f4527d9e159 [ 1506.628516][T29377] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1506.648197][T29377] RSP: 002b:00007f4528d0a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1506.656601][T29377] RAX: ffffffffffffffda RBX: 00007f4528025fa0 RCX: 00007f4527d9e159 [ 1506.664564][T29377] RDX: 0000000000000094 RSI: 000020000000e000 RDI: 0000000000000005 [ 1506.672526][T29377] RBP: 00007f4528d0a090 R08: 0000000000000000 R09: 0000000000000000 [ 1506.681093][T29377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1506.689048][T29377] R13: 00007f4528026038 R14: 00007f4528025fa0 R15: 00007ffd99c62068 [ 1506.697035][T29377] [ 1506.851526][T29385] sctp: [Deprecated]: syz.0.7607 (pid 29385) Use of int in maxseg socket option. [ 1506.851526][T29385] Use struct sctp_assoc_value instead [ 1507.014542][T29389] netlink: 'syz.2.7609': attribute type 39 has an invalid length. [ 1507.122810][T29390] netlink: 'syz.3.7610': attribute type 19 has an invalid length. [ 1507.148996][T29390] netlink: 156 bytes leftover after parsing attributes in process `syz.3.7610'. [ 1507.358373][T29403] netlink: 'syz.4.7614': attribute type 12 has an invalid length. [ 1507.381141][T29403] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7614'. [ 1507.556472][T29412] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 1508.353238][T29430] netlink: 'syz.0.7620': attribute type 2 has an invalid length. [ 1508.595657][T29438] netlink: 'syz.4.7626': attribute type 39 has an invalid length. [ 1508.648545][T29435] netlink: 'syz.1.7625': attribute type 19 has an invalid length. [ 1508.670908][T29435] __nla_validate_parse: 2 callbacks suppressed [ 1508.670926][T29435] netlink: 156 bytes leftover after parsing attributes in process `syz.1.7625'. [ 1509.665844][T29443] netlink: 14719 bytes leftover after parsing attributes in process `syz.1.7627'. [ 1509.820898][T29446] delete_channel: no stack [ 1510.061686][T29463] netlink: 168 bytes leftover after parsing attributes in process `syz.0.7630'. [ 1510.869779][T29476] validate_nla: 1 callbacks suppressed [ 1510.869818][T29476] netlink: 'syz.4.7639': attribute type 39 has an invalid length. [ 1511.547583][T29495] netlink: 'syz.2.7645': attribute type 10 has an invalid length. [ 1511.638046][T29495] netlink: 2 bytes leftover after parsing attributes in process `syz.2.7645'. [ 1511.929107][T29495] bridge0: port 2(bridge_slave_1) entered disabled state [ 1512.128066][T29513] device left promiscuous mode [ 1512.135347][T29513] bridge0: port 1() entered disabled state [ 1512.690219][T29535] netlink: 'syz.3.7657': attribute type 10 has an invalid length. [ 1512.728893][T29535] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.7657'. [ 1512.757361][T29537] netlink: 'syz.0.7658': attribute type 39 has an invalid length. [ 1513.166524][T29548] Q6\bY4: renamed from lo [ 1513.193222][T29545] netlink: 144 bytes leftover after parsing attributes in process `syz.2.7662'. [ 1513.211739][T29545] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1513.395103][T29554] FAULT_INJECTION: forcing a failure. [ 1513.395103][T29554] name failslab, interval 1, probability 0, space 0, times 0 [ 1513.410887][T29554] CPU: 1 PID: 29554 Comm: syz.0.7665 Not tainted syzkaller #0 [ 1513.418387][T29554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1513.428465][T29554] Call Trace: [ 1513.431769][T29554] [ 1513.434720][T29554] dump_stack_lvl+0x188/0x24e [ 1513.439433][T29554] ? verify_lock_unused+0x140/0x140 [ 1513.444662][T29554] ? show_regs_print_info+0x12/0x12 [ 1513.449893][T29554] ? load_image+0x410/0x410 [ 1513.454435][T29554] ? trace_event_raw_event_lock+0x230/0x230 [ 1513.460373][T29554] should_fail_ex+0x390/0x4c0 [ 1513.465092][T29554] should_failslab+0x5/0x20 [ 1513.469613][T29554] slab_pre_alloc_hook+0x59/0x300 [ 1513.474674][T29554] kmem_cache_alloc+0x56/0x2f0 [ 1513.479466][T29554] ? skb_clone+0x1e7/0x370 [ 1513.483918][T29554] skb_clone+0x1e7/0x370 [ 1513.488181][T29554] ? pfkey_broadcast_one+0x7d/0x340 [ 1513.493411][T29554] pfkey_broadcast_one+0x9b/0x340 [ 1513.498463][T29554] ? pfkey_broadcast+0x1b7/0x3e0 [ 1513.503439][T29554] pfkey_broadcast+0x1c7/0x3e0 [ 1513.508237][T29554] ? pfkey_broadcast+0x48/0x3e0 [ 1513.513122][T29554] pfkey_sendmsg+0xe8a/0x1140 [ 1513.517857][T29554] ? pfkey_release+0x340/0x340 [ 1513.522657][T29554] ? aa_sk_perm+0x81f/0x950 [ 1513.527224][T29554] ? aa_sock_msg_perm+0x94/0x150 [ 1513.532202][T29554] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1513.537782][T29554] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1513.543089][T29554] ? security_socket_sendmsg+0x7c/0xa0 [ 1513.548574][T29554] ? pfkey_release+0x340/0x340 [ 1513.553372][T29554] ____sys_sendmsg+0x5ed/0x9a0 [ 1513.558177][T29554] ? __sys_sendmsg_sock+0x30/0x30 [ 1513.563218][T29554] ? __import_iovec+0x306/0x510 [ 1513.568116][T29554] ? import_iovec+0x6f/0xa0 [ 1513.572656][T29554] ___sys_sendmsg+0x2a2/0x360 [ 1513.577368][T29554] ? __sys_sendmsg+0x2a0/0x2a0 [ 1513.582199][T29554] ? __lock_acquire+0x7c40/0x7c40 [ 1513.587299][T29554] __se_sys_sendmsg+0x1c3/0x2b0 [ 1513.592167][T29554] ? ct_nmi_exit+0x145/0x1c0 [ 1513.596787][T29554] ? __x64_sys_sendmsg+0x80/0x80 [ 1513.601783][T29554] ? lockdep_hardirqs_on+0x94/0x140 [ 1513.607018][T29554] do_syscall_64+0x4c/0xa0 [ 1513.611455][T29554] ? clear_bhb_loop+0x60/0xb0 [ 1513.616151][T29554] ? clear_bhb_loop+0x60/0xb0 [ 1513.620858][T29554] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1513.626777][T29554] RIP: 0033:0x7ff49139e159 [ 1513.631216][T29554] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1513.650844][T29554] RSP: 002b:00007ff49235a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1513.659288][T29554] RAX: ffffffffffffffda RBX: 00007ff491625fa0 RCX: 00007ff49139e159 [ 1513.667278][T29554] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 1513.675275][T29554] RBP: 00007ff49235a090 R08: 0000000000000000 R09: 0000000000000000 [ 1513.683266][T29554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1513.691258][T29554] R13: 00007ff491626038 R14: 00007ff491625fa0 R15: 00007ffcb9c3dae8 [ 1513.699279][T29554] [ 1513.807016][T29540] delete_channel: no stack [ 1513.914813][T29564] netlink: 'syz.0.7666': attribute type 12 has an invalid length. [ 1513.960930][T29564] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7666'. [ 1514.965005][T29588] A link change request failed with some changes committed already. Interface Q6\bY4 may have been left with an inconsistent configuration, please check. [ 1515.006936][T29590] netlink: 'syz.2.7675': attribute type 39 has an invalid length. [ 1515.092743][T29586] netlink: 'syz.3.7674': attribute type 19 has an invalid length. [ 1515.101038][T29586] netlink: 156 bytes leftover after parsing attributes in process `syz.3.7674'. [ 1516.256205][T29627] netlink: 'syz.4.7689': attribute type 46 has an invalid length. [ 1516.264322][T29627] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7689'. [ 1516.751349][T29641] netlink: 'syz.1.7690': attribute type 6 has an invalid length. [ 1516.790444][T29641] netlink: 168 bytes leftover after parsing attributes in process `syz.1.7690'. [ 1516.827857][T29644] netlink: 'syz.0.7691': attribute type 4 has an invalid length. [ 1517.197351][T29646] netlink: 'syz.4.7692': attribute type 19 has an invalid length. [ 1517.228595][T29646] netlink: 156 bytes leftover after parsing attributes in process `syz.4.7692'. [ 1517.297011][T29652] netlink: 'syz.3.7694': attribute type 39 has an invalid length. [ 1517.812517][T29660] netlink: 'syz.4.7696': attribute type 3 has an invalid length. [ 1517.842188][T29660] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.7696'. [ 1518.265222][T29677] : port 1(syz_tun) entered blocking state [ 1518.280910][T29677] : port 1(syz_tun) entered disabled state [ 1518.295423][T29677] device syz_tun entered promiscuous mode [ 1518.689181][T29688] netlink: 'syz.1.7708': attribute type 39 has an invalid length. [ 1518.835989][T29692] netlink: 'syz.4.7709': attribute type 8 has an invalid length. [ 1518.922591][T29692] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.7709'. [ 1519.346160][T29711] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.7726'. [ 1519.400844][T29713] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 1519.680401][T29721] netlink: 'syz.4.7716': attribute type 19 has an invalid length. [ 1519.700388][T29721] netlink: 156 bytes leftover after parsing attributes in process `syz.4.7716'. [ 1519.710878][T29729] netlink: 14 bytes leftover after parsing attributes in process `syz.2.7720'. [ 1520.461454][T29759] A link change request failed with some changes committed already. Interface Q6\bY4 may have been left with an inconsistent configuration, please check. [ 1520.637091][T29763] netlink: 'syz.0.7734': attribute type 3 has an invalid length. [ 1520.669235][T29763] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.7734'. [ 1520.918356][T29766] netlink: 156 bytes leftover after parsing attributes in process `syz.1.7735'. [ 1520.938812][T29769] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.7737'. [ 1520.945165][T29773] FAULT_INJECTION: forcing a failure. [ 1520.945165][T29773] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1520.975960][T29769] netlink: 6955 bytes leftover after parsing attributes in process `syz.2.7737'. [ 1520.977264][T29773] CPU: 1 PID: 29773 Comm: syz.0.7738 Not tainted syzkaller #0 [ 1520.992597][T29773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1521.002692][T29773] Call Trace: [ 1521.005997][T29773] [ 1521.008968][T29773] dump_stack_lvl+0x188/0x24e [ 1521.013694][T29773] ? show_regs_print_info+0x12/0x12 [ 1521.018933][T29773] ? load_image+0x410/0x410 [ 1521.023482][T29773] ? __lock_acquire+0x7c40/0x7c40 [ 1521.028549][T29773] ? snprintf+0xe5/0x140 [ 1521.032846][T29773] should_fail_ex+0x390/0x4c0 [ 1521.037580][T29773] _copy_to_user+0x2c/0x130 [ 1521.042130][T29773] simple_read_from_buffer+0xe3/0x150 [ 1521.047553][T29773] proc_fail_nth_read+0x1a6/0x220 [ 1521.052624][T29773] ? proc_fault_inject_write+0x310/0x310 [ 1521.058302][T29773] ? fsnotify_perm+0x248/0x550 [ 1521.063105][T29773] ? proc_fault_inject_write+0x310/0x310 [ 1521.068787][T29773] vfs_read+0x2db/0x960 [ 1521.073002][T29773] ? kernel_read+0x1e0/0x1e0 [ 1521.077637][T29773] ? __fget_files+0x28/0x460 [ 1521.082537][T29773] ? __fget_files+0x3fc/0x460 [ 1521.087288][T29773] ? __fdget_pos+0x2ae/0x360 [ 1521.091915][T29773] ? ksys_read+0x70/0x260 [ 1521.096299][T29773] ksys_read+0x14d/0x260 [ 1521.100587][T29773] ? vfs_write+0x9a0/0x9a0 [ 1521.105058][T29773] ? lockdep_hardirqs_on+0x94/0x140 [ 1521.110308][T29773] do_syscall_64+0x4c/0xa0 [ 1521.114753][T29773] ? clear_bhb_loop+0x60/0xb0 [ 1521.119459][T29773] ? clear_bhb_loop+0x60/0xb0 [ 1521.124177][T29773] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1521.130104][T29773] RIP: 0033:0x7ff49135e98e [ 1521.134555][T29773] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1521.154198][T29773] RSP: 002b:00007ff492359fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1521.162654][T29773] RAX: ffffffffffffffda RBX: 00007ff49235a6c0 RCX: 00007ff49135e98e [ 1521.170659][T29773] RDX: 000000000000000f RSI: 00007ff49235a0a0 RDI: 0000000000000004 [ 1521.178663][T29773] RBP: 00007ff49235a090 R08: 0000000000000000 R09: 0000000000000000 [ 1521.186670][T29773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1521.194674][T29773] R13: 00007ff491626038 R14: 00007ff491625fa0 R15: 00007ffcb9c3dae8 [ 1521.202731][T29773] [ 1521.385808][T29781] validate_nla: 1 callbacks suppressed [ 1521.385825][T29781] netlink: 'syz.1.7740': attribute type 4 has an invalid length. [ 1521.418679][T29781] netlink: 'syz.1.7740': attribute type 26 has an invalid length. [ 1521.432458][T29781] netlink: 60519 bytes leftover after parsing attributes in process `syz.1.7740'. [ 1521.762075][T29797] netlink: 'syz.4.7745': attribute type 39 has an invalid length. [ 1521.859190][T29796] netlink: 'syz.0.7746': attribute type 2 has an invalid length. [ 1521.889317][T29796] netlink: 'syz.0.7746': attribute type 8 has an invalid length. [ 1521.923378][T29796] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7746'. [ 1522.043815][T29801] netlink: 'syz.3.7748': attribute type 3 has an invalid length. [ 1522.073820][T29801] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.7748'. [ 1522.206740][T29807] FAULT_INJECTION: forcing a failure. [ 1522.206740][T29807] name failslab, interval 1, probability 0, space 0, times 0 [ 1522.248031][T29807] CPU: 1 PID: 29807 Comm: syz.0.7749 Not tainted syzkaller #0 [ 1522.255553][T29807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1522.265634][T29807] Call Trace: [ 1522.268939][T29807] [ 1522.271891][T29807] dump_stack_lvl+0x188/0x24e [ 1522.276598][T29807] ? sctp_sendmsg+0x1686/0x2940 [ 1522.281485][T29807] ? ___sys_sendmsg+0x2a2/0x360 [ 1522.286367][T29807] ? show_regs_print_info+0x12/0x12 [ 1522.291598][T29807] ? load_image+0x410/0x410 [ 1522.296160][T29807] should_fail_ex+0x390/0x4c0 [ 1522.300878][T29807] should_failslab+0x5/0x20 [ 1522.305408][T29807] slab_pre_alloc_hook+0x59/0x300 [ 1522.310463][T29807] ? sctp_add_bind_addr+0x89/0x350 [ 1522.315604][T29807] __kmem_cache_alloc_node+0x4f/0x270 [ 1522.321032][T29807] ? sctp_add_bind_addr+0x89/0x350 [ 1522.326174][T29807] kmalloc_trace+0x26/0xe0 [ 1522.330618][T29807] sctp_add_bind_addr+0x89/0x350 [ 1522.335591][T29807] sctp_copy_local_addr_list+0x317/0x4d0 [ 1522.341282][T29807] ? sctp_copy_local_addr_list+0xa0/0x4d0 [ 1522.347029][T29807] ? sctp_do_8_2_transport_strike+0x900/0x900 [ 1522.353136][T29807] ? sctp_v4_is_any+0x31/0x50 [ 1522.357839][T29807] ? sctp_copy_one_addr+0x93/0x660 [ 1522.362986][T29807] sctp_bind_addr_copy+0xaf/0x3c0 [ 1522.368044][T29807] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 1522.374408][T29807] sctp_connect_new_asoc+0x2f5/0x6a0 [ 1522.379726][T29807] ? __sctp_connect+0xd80/0xd80 [ 1522.384600][T29807] ? __local_bh_enable_ip+0x136/0x1c0 [ 1522.390014][T29807] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 1522.395594][T29807] ? security_sctp_bind_connect+0x85/0xb0 [ 1522.401375][T29807] sctp_sendmsg+0x1686/0x2940 [ 1522.406109][T29807] ? sctp_getsockopt+0x8a0/0x8a0 [ 1522.411073][T29807] ? __might_fault+0xa6/0x120 [ 1522.415779][T29807] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 1522.422230][T29807] ? aa_sock_msg_perm+0x94/0x150 [ 1522.427216][T29807] ? inet_sendmsg+0xca/0x2a0 [ 1522.431848][T29807] ? inet_send_prepare+0x250/0x250 [ 1522.436993][T29807] ____sys_sendmsg+0x5ed/0x9a0 [ 1522.441804][T29807] ? __sys_sendmsg_sock+0x30/0x30 [ 1522.446849][T29807] ? __import_iovec+0x306/0x510 [ 1522.451747][T29807] ? import_iovec+0x6f/0xa0 [ 1522.456287][T29807] ___sys_sendmsg+0x2a2/0x360 [ 1522.461005][T29807] ? __sys_sendmsg+0x2a0/0x2a0 [ 1522.465832][T29807] ? __lock_acquire+0x7c40/0x7c40 [ 1522.470943][T29807] __se_sys_sendmsg+0x1c3/0x2b0 [ 1522.475813][T29807] ? ct_nmi_exit+0x145/0x1c0 [ 1522.480432][T29807] ? __x64_sys_sendmsg+0x80/0x80 [ 1522.485427][T29807] ? lockdep_hardirqs_on+0x94/0x140 [ 1522.490658][T29807] do_syscall_64+0x4c/0xa0 [ 1522.495097][T29807] ? clear_bhb_loop+0x60/0xb0 [ 1522.499795][T29807] ? clear_bhb_loop+0x60/0xb0 [ 1522.504495][T29807] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1522.510455][T29807] RIP: 0033:0x7ff49139e159 [ 1522.514886][T29807] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1522.534518][T29807] RSP: 002b:00007ff49235a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1522.542956][T29807] RAX: ffffffffffffffda RBX: 00007ff491625fa0 RCX: 00007ff49139e159 [ 1522.550951][T29807] RDX: 0000000000000000 RSI: 0000200000001700 RDI: 0000000000000004 [ 1522.558936][T29807] RBP: 00007ff49235a090 R08: 0000000000000000 R09: 0000000000000000 [ 1522.566925][T29807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1522.574905][T29807] R13: 00007ff491626038 R14: 00007ff491625fa0 R15: 00007ffcb9c3dae8 [ 1522.582919][T29807] [ 1522.726331][T29810] netlink: 'syz.4.7750': attribute type 19 has an invalid length. [ 1522.973163][T29825] netlink: 'syz.0.7755': attribute type 1 has an invalid length. [ 1523.005568][T29825] netlink: 'syz.0.7755': attribute type 29 has an invalid length. [ 1523.039277][T29825] netlink: 'syz.0.7755': attribute type 29 has an invalid length. [ 1523.278975][T29833] mac80211_hwsim hwsim34 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1524.633996][T29859] __nla_validate_parse: 5 callbacks suppressed [ 1524.634042][T29859] netlink: 152 bytes leftover after parsing attributes in process `syz.4.7768'. [ 1524.652326][T29869] netlink: 156 bytes leftover after parsing attributes in process `syz.0.7767'. [ 1524.765150][T29886] : port 1(team0) entered blocking state [ 1524.781391][T29886] : port 1(team0) entered disabled state [ 1524.788782][T29886] device team0 entered promiscuous mode [ 1524.794964][T29886] device team_slave_0 entered promiscuous mode [ 1524.801672][T29886] device team_slave_1 entered promiscuous mode [ 1524.808431][T29886] device bond0 entered promiscuous mode [ 1524.815017][T29886] device bond_slave_1 entered promiscuous mode [ 1524.821920][T29886] device batadv_slave_0 entered promiscuous mode [ 1524.834548][T29893] device team0 left promiscuous mode [ 1524.839918][T29893] device team_slave_0 left promiscuous mode [ 1524.847722][T29893] device team_slave_1 left promiscuous mode [ 1524.860965][T29893] device bond0 left promiscuous mode [ 1524.875615][T29893] device bond_slave_1 left promiscuous mode [ 1524.902409][T29893] device batadv_slave_0 left promiscuous mode [ 1524.935310][T29893] : port 1(team0) entered disabled state [ 1525.055692][T29897] netlink: 17861 bytes leftover after parsing attributes in process `syz.2.7776'. [ 1525.673858][T29891] netlink: 13 bytes leftover after parsing attributes in process `syz.4.7774'. [ 1525.744641][T29897] netlink: 17861 bytes leftover after parsing attributes in process `syz.2.7776'. [ 1526.087303][T29909] netlink: 194236 bytes leftover after parsing attributes in process `syz.4.7779'. [ 1526.168431][T29909] netlink: zone id is out of range [ 1526.206835][T29909] netlink: zone id is out of range [ 1526.242576][T29909] netlink: get zone limit has 8 unknown bytes [ 1526.659189][T29920] validate_nla: 3 callbacks suppressed [ 1526.659240][T29920] netlink: 'syz.0.7785': attribute type 19 has an invalid length. [ 1526.691417][T29920] netlink: 156 bytes leftover after parsing attributes in process `syz.0.7785'. [ 1526.821459][T29933] netlink: 194236 bytes leftover after parsing attributes in process `syz.4.7789'. [ 1526.848850][T29933] netlink: zone id is out of range [ 1526.864637][T29933] netlink: zone id is out of range [ 1526.874860][T29933] netlink: zone id is out of range [ 1526.880289][T29942] netlink: 'syz.0.7791': attribute type 10 has an invalid length. [ 1526.905857][T29933] netlink: zone id is out of range [ 1526.930712][T29933] netlink: zone id is out of range [ 1526.936498][T29933] netlink: zone id is out of range [ 1526.942181][T29933] netlink: zone id is out of range [ 1527.304968][T29944] netlink: 'syz.2.7792': attribute type 19 has an invalid length. [ 1527.360932][T29944] netlink: 156 bytes leftover after parsing attributes in process `syz.2.7792'. [ 1529.645844][T29974] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.7800'. [ 1529.771621][T29984] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7803'. [ 1529.818097][T29979] netlink: 'syz.4.7801': attribute type 19 has an invalid length. [ 1529.848530][T29979] netlink: 156 bytes leftover after parsing attributes in process `syz.4.7801'. [ 1529.975426][T29992] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.7804'. [ 1530.014178][T29995] netlink: 'syz.3.7805': attribute type 21 has an invalid length. [ 1530.061497][T29995] netlink: 128 bytes leftover after parsing attributes in process `syz.3.7805'. [ 1530.114340][T29995] netlink: 'syz.3.7805': attribute type 4 has an invalid length. [ 1530.182256][T29995] netlink: 3 bytes leftover after parsing attributes in process `syz.3.7805'. [ 1531.120208][T30015] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7810'. [ 1531.153812][T30018] FAULT_INJECTION: forcing a failure. [ 1531.153812][T30018] name failslab, interval 1, probability 0, space 0, times 0 [ 1531.189287][T30015] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7810'. [ 1531.200507][T30018] CPU: 1 PID: 30018 Comm: syz.4.7812 Not tainted syzkaller #0 [ 1531.208001][T30018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1531.218065][T30018] Call Trace: [ 1531.221359][T30018] [ 1531.224300][T30018] dump_stack_lvl+0x188/0x24e [ 1531.229006][T30018] ? show_regs_print_info+0x12/0x12 [ 1531.234229][T30018] ? load_image+0x410/0x410 [ 1531.238754][T30018] ? __might_sleep+0xd0/0xd0 [ 1531.243352][T30018] ? __lock_acquire+0x7c40/0x7c40 [ 1531.248377][T30018] should_fail_ex+0x390/0x4c0 [ 1531.253055][T30018] should_failslab+0x5/0x20 [ 1531.257548][T30018] slab_pre_alloc_hook+0x59/0x300 [ 1531.262568][T30018] ? __get_vm_area_node+0x122/0x330 [ 1531.267758][T30018] __kmem_cache_alloc_node+0x4f/0x270 [ 1531.273121][T30018] ? __get_vm_area_node+0x122/0x330 [ 1531.278308][T30018] kmalloc_node_trace+0x22/0xe0 [ 1531.283149][T30018] __get_vm_area_node+0x122/0x330 [ 1531.288168][T30018] ? __local_bh_enable_ip+0x136/0x1c0 [ 1531.293532][T30018] __vmalloc_node_range+0x357/0x1380 [ 1531.298811][T30018] ? netlink_sendmsg+0x5ec/0xbd0 [ 1531.303747][T30018] ? netlink_insert+0x28d/0x13b0 [ 1531.308677][T30018] ? free_vm_area+0x50/0x50 [ 1531.313183][T30018] ? netlink_sendmsg+0x5ec/0xbd0 [ 1531.318120][T30018] vmalloc+0x75/0x80 [ 1531.322011][T30018] ? netlink_sendmsg+0x5ec/0xbd0 [ 1531.326941][T30018] netlink_sendmsg+0x5ec/0xbd0 [ 1531.331701][T30018] ? netlink_getsockopt+0x550/0x550 [ 1531.336891][T30018] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1531.342433][T30018] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1531.347708][T30018] ? security_socket_sendmsg+0x7c/0xa0 [ 1531.353161][T30018] sock_write_iter+0x2d5/0x3e0 [ 1531.357918][T30018] ? sock_read_iter+0x3a0/0x3a0 [ 1531.362766][T30018] ? common_file_perm+0x171/0x1c0 [ 1531.367798][T30018] vfs_write+0x482/0x9a0 [ 1531.372043][T30018] ? file_end_write+0x250/0x250 [ 1531.376889][T30018] ? __fget_files+0x3fc/0x460 [ 1531.381564][T30018] ? __fdget_pos+0x1d4/0x360 [ 1531.386145][T30018] ? ksys_write+0x70/0x260 [ 1531.390560][T30018] ksys_write+0x14d/0x260 [ 1531.394890][T30018] ? __ia32_sys_read+0x80/0x80 [ 1531.399651][T30018] ? lockdep_hardirqs_on+0x94/0x140 [ 1531.404844][T30018] do_syscall_64+0x4c/0xa0 [ 1531.409252][T30018] ? clear_bhb_loop+0x60/0xb0 [ 1531.413916][T30018] ? clear_bhb_loop+0x60/0xb0 [ 1531.418582][T30018] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1531.424471][T30018] RIP: 0033:0x7fdd97d9e159 [ 1531.429224][T30018] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1531.448819][T30018] RSP: 002b:00007fdd98c55028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1531.457223][T30018] RAX: ffffffffffffffda RBX: 00007fdd98025fa0 RCX: 00007fdd97d9e159 [ 1531.465184][T30018] RDX: 000000000000fe33 RSI: 0000200000000040 RDI: 0000000000000003 [ 1531.473146][T30018] RBP: 00007fdd98c55090 R08: 0000000000000000 R09: 0000000000000000 [ 1531.481108][T30018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1531.489067][T30018] R13: 00007fdd98026038 R14: 00007fdd98025fa0 R15: 00007fffb93c9698 [ 1531.497038][T30018] [ 1531.710663][T30018] syz.4.7812: vmalloc error: size 65408, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 1531.753203][T30018] CPU: 0 PID: 30018 Comm: syz.4.7812 Not tainted syzkaller #0 [ 1531.760716][T30018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1531.770787][T30018] Call Trace: [ 1531.774078][T30018] [ 1531.777015][T30018] dump_stack_lvl+0x188/0x24e [ 1531.781708][T30018] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 1531.788149][T30018] ? show_regs_print_info+0x12/0x12 [ 1531.793378][T30018] ? load_image+0x410/0x410 [ 1531.797907][T30018] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 1531.804342][T30018] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 1531.810866][T30018] warn_alloc+0x242/0x330 [ 1531.815217][T30018] ? __get_vm_area_node+0x122/0x330 [ 1531.820429][T30018] ? zone_watermark_ok_safe+0x270/0x270 [ 1531.825991][T30018] ? rcu_is_watching+0x11/0xa0 [ 1531.830778][T30018] ? __get_vm_area_node+0x318/0x330 [ 1531.835988][T30018] ? __local_bh_enable_ip+0x136/0x1c0 [ 1531.841384][T30018] __vmalloc_node_range+0x37c/0x1380 [ 1531.846699][T30018] ? netlink_insert+0x28d/0x13b0 [ 1531.851663][T30018] ? free_vm_area+0x50/0x50 [ 1531.856190][T30018] ? netlink_sendmsg+0x5ec/0xbd0 [ 1531.861149][T30018] vmalloc+0x75/0x80 [ 1531.865063][T30018] ? netlink_sendmsg+0x5ec/0xbd0 [ 1531.870012][T30018] netlink_sendmsg+0x5ec/0xbd0 [ 1531.874799][T30018] ? netlink_getsockopt+0x550/0x550 [ 1531.880013][T30018] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1531.885579][T30018] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1531.890874][T30018] ? security_socket_sendmsg+0x7c/0xa0 [ 1531.896356][T30018] sock_write_iter+0x2d5/0x3e0 [ 1531.901182][T30018] ? sock_read_iter+0x3a0/0x3a0 [ 1531.906063][T30018] ? common_file_perm+0x171/0x1c0 [ 1531.911115][T30018] vfs_write+0x482/0x9a0 [ 1531.915399][T30018] ? file_end_write+0x250/0x250 [ 1531.920280][T30018] ? __fget_files+0x3fc/0x460 [ 1531.924986][T30018] ? __fdget_pos+0x1d4/0x360 [ 1531.929590][T30018] ? ksys_write+0x70/0x260 [ 1531.934025][T30018] ksys_write+0x14d/0x260 [ 1531.938371][T30018] ? __ia32_sys_read+0x80/0x80 [ 1531.943152][T30018] ? lockdep_hardirqs_on+0x94/0x140 [ 1531.948559][T30018] do_syscall_64+0x4c/0xa0 [ 1531.952986][T30018] ? clear_bhb_loop+0x60/0xb0 [ 1531.957680][T30018] ? clear_bhb_loop+0x60/0xb0 [ 1531.962372][T30018] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1531.968287][T30018] RIP: 0033:0x7fdd97d9e159 [ 1531.972711][T30018] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1531.992328][T30018] RSP: 002b:00007fdd98c55028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1532.000797][T30018] RAX: ffffffffffffffda RBX: 00007fdd98025fa0 RCX: 00007fdd97d9e159 [ 1532.008782][T30018] RDX: 000000000000fe33 RSI: 0000200000000040 RDI: 0000000000000003 [ 1532.016777][T30018] RBP: 00007fdd98c55090 R08: 0000000000000000 R09: 0000000000000000 [ 1532.024763][T30018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1532.032747][T30018] R13: 00007fdd98026038 R14: 00007fdd98025fa0 R15: 00007fffb93c9698 [ 1532.040752][T30018] [ 1532.332058][T30018] Mem-Info: [ 1532.335236][T30018] active_anon:10665 inactive_anon:0 isolated_anon:0 [ 1532.335236][T30018] active_file:21787 inactive_file:40532 isolated_file:0 [ 1532.335236][T30018] unevictable:768 dirty:184 writeback:0 [ 1532.335236][T30018] slab_reclaimable:21696 slab_unreclaimable:101444 [ 1532.335236][T30018] mapped:32363 shmem:6025 pagetables:623 [ 1532.335236][T30018] sec_pagetables:0 bounce:0 [ 1532.335236][T30018] kernel_misc_reclaimable:0 [ 1532.335236][T30018] free:1312212 free_pcp:2869 free_cma:0 [ 1532.655760][T30018] Node 0 active_anon:48960kB inactive_anon:0kB active_file:87148kB inactive_file:161928kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:131852kB dirty:736kB writeback:0kB shmem:28564kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10492kB pagetables:2592kB sec_pagetables:0kB all_unreclaimable? no [ 1532.938981][T30018] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1533.062396][T30018] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1533.139186][T30018] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 1533.157624][T30018] Node 0 DMA32 free:1310240kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:55968kB inactive_anon:0kB active_file:87148kB inactive_file:161928kB unevictable:1536kB writepending:736kB present:3129332kB managed:2592896kB mlocked:0kB bounce:0kB free_pcp:5672kB local_pcp:2384kB free_cma:0kB [ 1533.248446][T30018] lowmem_reserve[]: 0 0 1 1 1 [ 1533.260358][T30018] Node 0 Normal free:12kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 1533.353175][T30018] lowmem_reserve[]: 0 0 0 0 0 [ 1533.368123][T30018] Node 1 Normal free:3910152kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:4832kB local_pcp:4832kB free_cma:0kB [ 1533.440746][T30018] lowmem_reserve[]: 0 0 0 0 0 [ 1533.445564][T30018] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1533.515121][T30018] Node 0 DMA32: 1887*4kB (UE) 1401*8kB (UME) 1245*16kB (UME) 2054*32kB (UME) 449*64kB (UME) 264*128kB (UME) 293*256kB (UME) 137*512kB (UME) 72*1024kB (UM) 24*2048kB (UM) 212*4096kB (UM) = 1303316kB [ 1533.580627][T30018] Node 0 Normal: 2*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 1533.627981][T30018] Node 1 Normal: 210*4kB (UME) 46*8kB (UME) 27*16kB (UME) 177*32kB (UME) 66*64kB (UME) 28*128kB (UME) 7*256kB (UE) 4*512kB (UME) 0*1024kB 0*2048kB 950*4096kB (M) = 3910152kB [ 1533.666126][T30018] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1533.686385][T30018] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1533.700772][T30018] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1533.730666][T30018] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1533.753785][T30018] 74455 total pagecache pages [ 1533.758536][T30018] 0 pages in swap cache [ 1533.770268][T30018] Free swap = 124572kB [ 1533.775021][T30018] Total swap = 124996kB [ 1533.779213][T30018] 2097051 pages RAM [ 1533.793575][T30018] 0 pages HighMem/MovableOnly [ 1533.798468][T30018] 415226 pages reserved [ 1533.808617][T30018] 0 pages cma reserved [ 1534.073958][T30077] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.7832'. [ 1536.521541][T30138] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7853'. [ 1536.839405][T30148] netlink: 'syz.0.7857': attribute type 10 has an invalid length. [ 1537.475967][T30159] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7869'. [ 1537.561950][T30159] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7869'. [ 1537.661128][T30160] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7869'. [ 1537.805109][T30166] device syzkaller0 entered promiscuous mode [ 1537.855715][T30165] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7869'. [ 1538.138535][T30177] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7865'. [ 1540.794081][T30174] netlink: 'syz.3.7864': attribute type 19 has an invalid length. [ 1540.802971][T30174] netlink: 156 bytes leftover after parsing attributes in process `syz.3.7864'. [ 1540.823489][T30177] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7865'. [ 1540.998611][T30196] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7871'. [ 1541.354149][T30213] netlink: 65185 bytes leftover after parsing attributes in process `syz.3.7875'. [ 1541.574408][T30217] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.7877'. [ 1541.735822][T30224] netlink: 'syz.3.7879': attribute type 19 has an invalid length. [ 1541.758577][T30224] netlink: 156 bytes leftover after parsing attributes in process `syz.3.7879'. [ 1542.021133][T30237] netlink: 'syz.2.7883': attribute type 21 has an invalid length. [ 1542.030014][T30237] netlink: 100 bytes leftover after parsing attributes in process `syz.2.7883'. [ 1542.045816][T30240] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1542.053174][T30240] IPv6: NLM_F_CREATE should be set when creating new route [ 1542.060475][T30240] IPv6: NLM_F_CREATE should be set when creating new route [ 1542.067807][T30240] IPv6: NLM_F_CREATE should be set when creating new route [ 1542.867038][T30270] FAULT_INJECTION: forcing a failure. [ 1542.867038][T30270] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1542.916796][T30270] CPU: 0 PID: 30270 Comm: syz.1.7896 Not tainted syzkaller #0 [ 1542.924299][T30270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1542.934358][T30270] Call Trace: [ 1542.937640][T30270] [ 1542.940573][T30270] dump_stack_lvl+0x188/0x24e [ 1542.945266][T30270] ? show_regs_print_info+0x12/0x12 [ 1542.950464][T30270] ? load_image+0x410/0x410 [ 1542.954967][T30270] ? __lock_acquire+0x7c40/0x7c40 [ 1542.959994][T30270] ? snprintf+0xe5/0x140 [ 1542.964272][T30270] should_fail_ex+0x390/0x4c0 [ 1542.968955][T30270] _copy_to_user+0x2c/0x130 [ 1542.973457][T30270] simple_read_from_buffer+0xe3/0x150 [ 1542.978843][T30270] proc_fail_nth_read+0x1a6/0x220 [ 1542.983866][T30270] ? proc_fault_inject_write+0x310/0x310 [ 1542.989494][T30270] ? fsnotify_perm+0x248/0x550 [ 1542.994250][T30270] ? proc_fault_inject_write+0x310/0x310 [ 1542.999877][T30270] vfs_read+0x2db/0x960 [ 1543.004035][T30270] ? kernel_read+0x1e0/0x1e0 [ 1543.008634][T30270] ? __fget_files+0x28/0x460 [ 1543.013223][T30270] ? __fget_files+0x3fc/0x460 [ 1543.017902][T30270] ? __fdget_pos+0x2ae/0x360 [ 1543.022486][T30270] ? ksys_read+0x70/0x260 [ 1543.026815][T30270] ksys_read+0x14d/0x260 [ 1543.031059][T30270] ? vfs_write+0x9a0/0x9a0 [ 1543.035479][T30270] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1543.041376][T30270] do_syscall_64+0x4c/0xa0 [ 1543.045782][T30270] ? clear_bhb_loop+0x60/0xb0 [ 1543.050454][T30270] ? clear_bhb_loop+0x60/0xb0 [ 1543.055124][T30270] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1543.061014][T30270] RIP: 0033:0x7f4527d5e98e [ 1543.065426][T30270] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1543.085108][T30270] RSP: 002b:00007f4528d09fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1543.093528][T30270] RAX: ffffffffffffffda RBX: 00007f4528d0a6c0 RCX: 00007f4527d5e98e [ 1543.101491][T30270] RDX: 000000000000000f RSI: 00007f4528d0a0a0 RDI: 0000000000000008 [ 1543.109460][T30270] RBP: 00007f4528d0a090 R08: 0000000000000000 R09: 0000000000000000 [ 1543.117424][T30270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1543.125390][T30270] R13: 00007f4528026038 R14: 00007f4528025fa0 R15: 00007ffd99c62068 [ 1543.133371][T30270] [ 1543.510361][T30285] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.7901'. [ 1543.833821][T30300] netlink: 'syz.2.7904': attribute type 39 has an invalid length. [ 1545.237932][T30337] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7913'. [ 1545.278442][T30337] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7913'. [ 1545.414705][T30339] netlink: 'syz.0.7914': attribute type 19 has an invalid length. [ 1545.423576][T30339] netlink: 156 bytes leftover after parsing attributes in process `syz.0.7914'. [ 1545.779062][T30353] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7919'. [ 1545.842881][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.849222][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.004323][T30363] FAULT_INJECTION: forcing a failure. [ 1546.004323][T30363] name failslab, interval 1, probability 0, space 0, times 0 [ 1546.017431][T30363] CPU: 0 PID: 30363 Comm: syz.0.7924 Not tainted syzkaller #0 [ 1546.023138][T30364] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.7922'. [ 1546.024903][T30363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1546.024931][T30363] Call Trace: [ 1546.024940][T30363] [ 1546.050476][T30363] dump_stack_lvl+0x188/0x24e [ 1546.055370][T30363] ? show_regs_print_info+0x12/0x12 [ 1546.060603][T30363] ? load_image+0x410/0x410 [ 1546.065143][T30363] ? skb_network_protocol+0x52f/0x790 [ 1546.070542][T30363] should_fail_ex+0x390/0x4c0 [ 1546.075247][T30363] should_failslab+0x5/0x20 [ 1546.079756][T30363] slab_pre_alloc_hook+0x59/0x300 [ 1546.084829][T30363] ? netif_skb_features+0xafa/0x1630 [ 1546.090151][T30363] kmem_cache_alloc+0x56/0x2f0 [ 1546.094925][T30363] ? skb_clone+0x1e7/0x370 [ 1546.099375][T30363] skb_clone+0x1e7/0x370 [ 1546.103719][T30363] ? dev_queue_xmit_nit+0x43a/0xba0 [ 1546.108929][T30363] dev_queue_xmit_nit+0x23b/0xba0 [ 1546.113974][T30363] ? dev_queue_xmit_nit+0x29/0xba0 [ 1546.119106][T30363] ? validate_xmit_skb+0x7ca/0xe80 [ 1546.124239][T30363] dev_hard_start_xmit+0x158/0x8b0 [ 1546.129365][T30363] ? validate_xmit_skb_list+0x120/0x120 [ 1546.134932][T30363] __dev_queue_xmit+0x1b4b/0x3810 [ 1546.139966][T30363] ? copyin+0xe7/0x120 [ 1546.144065][T30363] ? __dev_queue_xmit+0x281/0x3810 [ 1546.149177][T30363] ? _copy_from_iter+0x5df/0x1130 [ 1546.154215][T30363] ? netdev_core_pick_tx+0x360/0x360 [ 1546.159504][T30363] ? packet_parse_headers+0x2f4/0xab0 [ 1546.164877][T30363] ? packet_parse_headers+0x8ba/0xab0 [ 1546.170248][T30363] ? __virt_addr_valid+0x188/0x540 [ 1546.175364][T30363] ? __virt_addr_valid+0x467/0x540 [ 1546.180482][T30363] ? __check_object_size+0x4f6/0xa70 [ 1546.185766][T30363] ? skb_setup_tx_timestamp+0x1f0/0x1f0 [ 1546.191317][T30363] ? dev_get_by_index+0x1e/0x2d0 [ 1546.196281][T30363] ? skb_put+0x10e/0x200 [ 1546.200526][T30363] packet_sendmsg+0x3a9e/0x4c30 [ 1546.205421][T30363] ? trace_event_raw_event_lock+0x230/0x230 [ 1546.211321][T30363] ? aa_sk_perm+0x81f/0x950 [ 1546.215838][T30363] ? aa_af_perm+0x340/0x340 [ 1546.220340][T30363] ? packet_getsockopt+0x980/0x980 [ 1546.225463][T30363] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1546.231020][T30363] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1546.236306][T30363] ? security_socket_sendmsg+0x7c/0xa0 [ 1546.241770][T30363] ? packet_getsockopt+0x980/0x980 [ 1546.246890][T30363] ____sys_sendmsg+0x5ed/0x9a0 [ 1546.251703][T30363] ? __sys_sendmsg_sock+0x30/0x30 [ 1546.256734][T30363] ? __import_iovec+0x306/0x510 [ 1546.261608][T30363] ? import_iovec+0x6f/0xa0 [ 1546.266126][T30363] ___sys_sendmsg+0x2a2/0x360 [ 1546.270814][T30363] ? __sys_sendmsg+0x2a0/0x2a0 [ 1546.275610][T30363] ? __lock_acquire+0x7c40/0x7c40 [ 1546.280678][T30363] __se_sys_sendmsg+0x1c3/0x2b0 [ 1546.285549][T30363] ? __x64_sys_sendmsg+0x80/0x80 [ 1546.290516][T30363] ? lockdep_hardirqs_on+0x94/0x140 [ 1546.295730][T30363] do_syscall_64+0x4c/0xa0 [ 1546.300157][T30363] ? clear_bhb_loop+0x60/0xb0 [ 1546.304856][T30363] ? clear_bhb_loop+0x60/0xb0 [ 1546.309555][T30363] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1546.315466][T30363] RIP: 0033:0x7ff49139e159 [ 1546.319884][T30363] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1546.339487][T30363] RSP: 002b:00007ff49235a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1546.347903][T30363] RAX: ffffffffffffffda RBX: 00007ff491625fa0 RCX: 00007ff49139e159 [ 1546.355876][T30363] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 1546.363845][T30363] RBP: 00007ff49235a090 R08: 0000000000000000 R09: 0000000000000000 [ 1546.371811][T30363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1546.379780][T30363] R13: 00007ff491626038 R14: 00007ff491625fa0 R15: 00007ffcb9c3dae8 [ 1546.387772][T30363] [ 1548.043673][T30375] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.7928'. [ 1548.146969][T30376] netlink: 'syz.0.7927': attribute type 19 has an invalid length. [ 1548.157628][T30376] netlink: 156 bytes leftover after parsing attributes in process `syz.0.7927'. [ 1548.675904][T30389] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.7932'. [ 1549.033956][T30397] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7933'. [ 1549.058519][T30397] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7933'. [ 1549.163960][T30393] netlink: 'syz.0.7943': attribute type 19 has an invalid length. [ 1549.187969][T30393] netlink: 156 bytes leftover after parsing attributes in process `syz.0.7943'. [ 1549.559103][T30412] netlink: 'syz.4.7938': attribute type 39 has an invalid length. [ 1549.708350][T30420] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.7940'. [ 1549.748834][T30422] netlink: 'syz.0.7944': attribute type 21 has an invalid length. [ 1550.445589][T30446] netlink: 180900 bytes leftover after parsing attributes in process `syz.4.7949'. [ 1550.463067][T30446] net_ratelimit: 18 callbacks suppressed [ 1550.463084][T30446] openvswitch: netlink: Flow actions attr not present in new flow. [ 1550.659270][T30448] netlink: 'syz.3.7950': attribute type 19 has an invalid length. [ 1550.689427][T30448] netlink: 156 bytes leftover after parsing attributes in process `syz.3.7950'. [ 1551.244078][T30468] delete_channel: no stack [ 1551.315492][T30476] netlink: 'syz.0.7961': attribute type 39 has an invalid length. [ 1551.493910][T30478] netlink: 'syz.2.7963': attribute type 19 has an invalid length. [ 1551.513070][T30478] netlink: 156 bytes leftover after parsing attributes in process `syz.2.7963'. [ 1552.455493][T30509] netlink: 'syz.3.7971': attribute type 7 has an invalid length. [ 1552.485900][T30509] netlink: 'syz.3.7971': attribute type 7 has an invalid length. [ 1553.012622][T30541] netlink: 'syz.0.7979': attribute type 39 has an invalid length. [ 1553.245955][T30547] validate_nla: 1 callbacks suppressed [ 1553.245994][T30547] netlink: 'syz.3.7981': attribute type 39 has an invalid length. [ 1553.313545][T30551] __nla_validate_parse: 3 callbacks suppressed [ 1553.313565][T30551] netlink: 463 bytes leftover after parsing attributes in process `syz.2.7983'. [ 1553.379246][T30555] netlink: 'syz.0.7984': attribute type 10 has an invalid length. [ 1553.387928][T30555] netlink: 2 bytes leftover after parsing attributes in process `syz.0.7984'. [ 1553.408370][T30555] bridge0: port 2(bridge_slave_1) entered blocking state [ 1553.415701][T30555] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1553.465698][T30555] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1554.032795][T30582] netlink: 'syz.3.7992': attribute type 4 has an invalid length. [ 1554.055695][T30582] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.7992'. [ 1554.092638][T30582] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7992'. [ 1554.131614][T30578] netlink: 'syz.2.7991': attribute type 19 has an invalid length. [ 1554.152077][T30578] netlink: 156 bytes leftover after parsing attributes in process `syz.2.7991'. [ 1554.172687][T30586] netlink: 'syz.4.7994': attribute type 39 has an invalid length. [ 1555.381047][T30619] netlink: 'syz.4.8003': attribute type 21 has an invalid length. [ 1555.779611][T30638] netlink: 'syz.2.8011': attribute type 27 has an invalid length. [ 1555.798966][T30638] netlink: 164 bytes leftover after parsing attributes in process `syz.2.8011'. [ 1555.852516][T30629] netlink: 'syz.1.8008': attribute type 19 has an invalid length. [ 1555.860383][T30629] netlink: 156 bytes leftover after parsing attributes in process `syz.1.8008'. [ 1555.941037][T30643] netlink: 'syz.3.8013': attribute type 39 has an invalid length. [ 1556.044055][T30641] netlink: 'syz.0.8012': attribute type 19 has an invalid length. [ 1556.098815][T30641] netlink: 156 bytes leftover after parsing attributes in process `syz.0.8012'. [ 1556.162566][T30650] FAULT_INJECTION: forcing a failure. [ 1556.162566][T30650] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1556.189751][T30650] CPU: 0 PID: 30650 Comm: syz.1.8016 Not tainted syzkaller #0 [ 1556.197272][T30650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1556.207345][T30650] Call Trace: [ 1556.210638][T30650] [ 1556.213583][T30650] dump_stack_lvl+0x188/0x24e [ 1556.218283][T30650] ? show_regs_print_info+0x12/0x12 [ 1556.223510][T30650] ? load_image+0x410/0x410 [ 1556.228035][T30650] ? __lock_acquire+0x7c40/0x7c40 [ 1556.233080][T30650] ? __might_fault+0x98/0x120 [ 1556.237775][T30650] should_fail_ex+0x390/0x4c0 [ 1556.242480][T30650] _copy_to_user+0x2c/0x130 [ 1556.247003][T30650] simple_read_from_buffer+0xe3/0x150 [ 1556.252400][T30650] proc_fail_nth_read+0x1a6/0x220 [ 1556.257447][T30650] ? proc_fault_inject_write+0x310/0x310 [ 1556.263106][T30650] ? fsnotify_perm+0x248/0x550 [ 1556.267891][T30650] ? proc_fault_inject_write+0x310/0x310 [ 1556.273549][T30650] vfs_read+0x2db/0x960 [ 1556.277738][T30650] ? kernel_read+0x1e0/0x1e0 [ 1556.282357][T30650] ? __fget_files+0x28/0x460 [ 1556.286968][T30650] ? __fget_files+0x3fc/0x460 [ 1556.291671][T30650] ? __fdget_pos+0x2ae/0x360 [ 1556.296282][T30650] ? ksys_read+0x70/0x260 [ 1556.300650][T30650] ksys_read+0x14d/0x260 [ 1556.304916][T30650] ? vfs_write+0x9a0/0x9a0 [ 1556.309358][T30650] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1556.315277][T30650] do_syscall_64+0x4c/0xa0 [ 1556.319719][T30650] ? clear_bhb_loop+0x60/0xb0 [ 1556.324417][T30650] ? clear_bhb_loop+0x60/0xb0 [ 1556.329111][T30650] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1556.335026][T30650] RIP: 0033:0x7f4527d5e98e [ 1556.339455][T30650] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1556.359080][T30650] RSP: 002b:00007f4528d09fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1556.367516][T30650] RAX: ffffffffffffffda RBX: 00007f4528d0a6c0 RCX: 00007f4527d5e98e [ 1556.375507][T30650] RDX: 000000000000000f RSI: 00007f4528d0a0a0 RDI: 0000000000000005 [ 1556.383502][T30650] RBP: 00007f4528d0a090 R08: 0000000000000000 R09: 0000000000000000 [ 1556.391485][T30650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1556.399471][T30650] R13: 00007f4528026038 R14: 00007f4528025fa0 R15: 00007ffd99c62068 [ 1556.407475][T30650] [ 1557.474575][T30681] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8025'. [ 1557.596512][T30686] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.8027'. [ 1558.347064][T30704] device syz_tun left promiscuous mode [ 1558.355213][T30704] : port 1(syz_tun) entered disabled state [ 1558.402758][T30711] validate_nla: 7 callbacks suppressed [ 1558.402772][T30711] netlink: 'syz.1.8036': attribute type 10 has an invalid length. [ 1558.480458][T30711] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1558.726001][T30721] netlink: 'syz.4.8039': attribute type 19 has an invalid length. [ 1558.745761][T30721] __nla_validate_parse: 4 callbacks suppressed [ 1558.745794][T30721] netlink: 156 bytes leftover after parsing attributes in process `syz.4.8039'. [ 1558.769188][T30725] netlink: 'syz.2.8038': attribute type 2 has an invalid length. [ 1558.792264][T30725] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8038'. [ 1559.004323][T30732] netlink: 'syz.4.8041': attribute type 4 has an invalid length. [ 1559.032693][T30732] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.8041'. [ 1559.075227][T30732] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8041'. [ 1559.120610][T30733] netlink: 'syz.3.8051': attribute type 19 has an invalid length. [ 1559.155706][T30733] netlink: 156 bytes leftover after parsing attributes in process `syz.3.8051'. [ 1559.198743][T30736] netlink: 'syz.1.8042': attribute type 1 has an invalid length. [ 1559.378877][T30737] delete_channel: no stack [ 1559.405390][T30740] netlink: 'syz.3.8044': attribute type 39 has an invalid length. [ 1559.807435][T30749] netlink: 'syz.2.8048': attribute type 19 has an invalid length. [ 1559.826379][T30749] netlink: 156 bytes leftover after parsing attributes in process `syz.2.8048'. [ 1560.399472][T30771] device wlan1 entered promiscuous mode [ 1560.469926][T30766] netlink: 'syz.4.8055': attribute type 19 has an invalid length. [ 1560.482924][T30766] netlink: 156 bytes leftover after parsing attributes in process `syz.4.8055'. [ 1560.671966][T30790] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8063'. [ 1560.695887][T30790] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8063'. [ 1560.728262][T30794] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8063'. [ 1560.957779][T30803] netlink: 'syz.4.8066': attribute type 19 has an invalid length. [ 1561.596388][T30833] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 1563.435051][T30907] validate_nla: 7 callbacks suppressed [ 1563.435069][T30907] netlink: 'syz.0.8097': attribute type 4 has an invalid length. [ 1563.985968][T30920] netlink: 'syz.4.8103': attribute type 19 has an invalid length. [ 1564.017990][T30920] __nla_validate_parse: 7 callbacks suppressed [ 1564.018005][T30920] netlink: 156 bytes leftover after parsing attributes in process `syz.4.8103'. [ 1564.134650][T30927] netlink: 'syz.1.8105': attribute type 19 has an invalid length. [ 1564.151388][T30927] netlink: 156 bytes leftover after parsing attributes in process `syz.1.8105'. [ 1564.212774][T30929] device syzkaller0 entered promiscuous mode [ 1564.944055][T30954] netlink: 'syz.3.8116': attribute type 29 has an invalid length. [ 1565.031245][T30959] netlink: 'syz.3.8116': attribute type 29 has an invalid length. [ 1565.320362][T30966] netlink: 68520 bytes leftover after parsing attributes in process `syz.1.8118'. [ 1569.663740][T30954] netlink: 'syz.3.8116': attribute type 29 has an invalid length. [ 1569.673350][T30968] netlink: 'syz.0.8119': attribute type 19 has an invalid length. [ 1569.673914][T30966] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1569.681390][T30968] netlink: 156 bytes leftover after parsing attributes in process `syz.0.8119'. [ 1569.711858][T30966] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1569.722674][T30966] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1570.029203][T30982] netlink: 'syz.1.8122': attribute type 2 has an invalid length. [ 1570.045196][T30982] netlink: 14 bytes leftover after parsing attributes in process `syz.1.8122'. [ 1570.258452][T30982] bond0: (slave dummy0): Releasing backup interface [ 1570.435476][T30997] netlink: 'syz.2.8127': attribute type 3 has an invalid length. [ 1570.443797][T30997] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.8127'. [ 1570.539963][T30978] netlink: 'syz.3.8121': attribute type 19 has an invalid length. [ 1570.549574][T30978] netlink: 156 bytes leftover after parsing attributes in process `syz.3.8121'. [ 1570.700490][T31001] netlink: 14 bytes leftover after parsing attributes in process `syz.3.8128'. [ 1571.327151][T31012] netlink: 'syz.2.8133': attribute type 19 has an invalid length. [ 1571.362835][T31012] netlink: 156 bytes leftover after parsing attributes in process `syz.2.8133'. [ 1571.489070][T31018] tap0: tun_chr_ioctl cmd 35111 [ 1571.629260][T31020] netlink: 128 bytes leftover after parsing attributes in process `syz.3.8135'. [ 1571.869667][T31020] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1572.262849][T31031] netlink: 128 bytes leftover after parsing attributes in process `syz.3.8139'. [ 1572.272794][T31031] A link change request failed with some changes committed already. Interface Q6\bY4 may have been left with an inconsistent configuration, please check. [ 1572.293714][T31027] netlink: 'syz.1.8138': attribute type 19 has an invalid length. [ 1572.323624][T31027] netlink: 156 bytes leftover after parsing attributes in process `syz.1.8138'. [ 1572.336624][T31035] netlink: 'syz.4.8140': attribute type 46 has an invalid length. [ 1572.352452][T31035] netlink: 2 bytes leftover after parsing attributes in process `syz.4.8140'. [ 1576.316125][T31052] : port 1(team0) entered blocking state [ 1576.340979][T31052] : port 1(team0) entered disabled state [ 1576.352441][T31052] device team0 entered promiscuous mode [ 1576.358045][T31052] device team_slave_0 entered promiscuous mode [ 1576.412250][T31052] device team_slave_1 entered promiscuous mode [ 1576.438353][T31052] device bond0 entered promiscuous mode [ 1576.444961][T31052] device bond_slave_1 entered promiscuous mode [ 1576.453073][T31052] device batadv_slave_0 entered promiscuous mode [ 1576.462511][T31053] device team0 left promiscuous mode [ 1576.469658][T31053] device team_slave_0 left promiscuous mode [ 1576.479847][T31053] device team_slave_1 left promiscuous mode [ 1576.487925][T31053] device bond0 left promiscuous mode [ 1576.494192][T31053] device bond_slave_1 left promiscuous mode [ 1576.500430][T31053] device batadv_slave_0 left promiscuous mode [ 1576.507392][T31053] : port 1(team0) entered disabled state [ 1576.558008][T31057] netlink: 'syz.3.8146': attribute type 19 has an invalid length. [ 1576.573258][T31057] netlink: 156 bytes leftover after parsing attributes in process `syz.3.8146'. [ 1576.590300][T31060] netlink: 14 bytes leftover after parsing attributes in process `syz.2.8147'. [ 1576.621779][T31060] device hsr_slave_0 left promiscuous mode [ 1576.638767][T31067] netlink: 194236 bytes leftover after parsing attributes in process `syz.0.8149'. [ 1576.651545][T31060] device hsr_slave_1 left promiscuous mode [ 1576.671865][T31067] netlink: zone id is out of range [ 1576.681220][T31067] netlink: zone id is out of range [ 1576.707590][T31067] netlink: get zone limit has 8 unknown bytes [ 1577.447283][T31099] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8162'. [ 1577.585406][T31101] netlink: 'syz.1.8161': attribute type 19 has an invalid length. [ 1577.599874][T31101] netlink: 156 bytes leftover after parsing attributes in process `syz.1.8161'. [ 1577.907248][T31117] netlink: 'syz.3.8166': attribute type 16 has an invalid length. [ 1577.940390][T31117] netlink: 164 bytes leftover after parsing attributes in process `syz.3.8166'. [ 1578.060195][T31124] netlink: 14 bytes leftover after parsing attributes in process `syz.1.8168'. [ 1578.159489][T31127] netlink: 'syz.4.8169': attribute type 16 has an invalid length. [ 1578.196134][T31127] netlink: 164 bytes leftover after parsing attributes in process `syz.4.8169'. [ 1578.740578][T31145] netlink: 'syz.2.8175': attribute type 19 has an invalid length. [ 1578.761051][T31145] netlink: 156 bytes leftover after parsing attributes in process `syz.2.8175'. [ 1579.177098][T31155] netlink: 2649 bytes leftover after parsing attributes in process `syz.1.8178'. [ 1581.062801][T31195] netlink: 'syz.3.8189': attribute type 19 has an invalid length. [ 1581.807522][T31217] __nla_validate_parse: 5 callbacks suppressed [ 1581.807540][T31217] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8199'. [ 1582.834396][T31232] netlink: 'syz.2.8205': attribute type 19 has an invalid length. [ 1582.860040][T31232] netlink: 156 bytes leftover after parsing attributes in process `syz.2.8205'. [ 1583.234882][T31254] netlink: 128 bytes leftover after parsing attributes in process `syz.0.8211'. [ 1583.248607][T31254] A link change request failed with some changes committed already. Interface Q6\bY4 may have been left with an inconsistent configuration, please check. [ 1583.479964][T31270] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8215'. [ 1583.512566][T31270] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8215'. [ 1583.527209][T31270] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8215'. [ 1583.556375][T31270] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8215'. [ 1584.148923][T31284] netlink: 'syz.4.8220': attribute type 19 has an invalid length. [ 1584.191349][T31284] netlink: 156 bytes leftover after parsing attributes in process `syz.4.8220'. [ 1584.518890][T31294] device syzkaller0 entered promiscuous mode [ 1584.807953][T31308] netlink: 'syz.1.8229': attribute type 3 has an invalid length. [ 1584.818768][T31308] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8229'. [ 1585.002647][T31312] netlink: 14 bytes leftover after parsing attributes in process `syz.0.8230'. [ 1585.029791][T31312] openvswitch: netlink: Flow key attr not present in new flow. [ 1586.633120][T31321] netlink: 'syz.1.8234': attribute type 19 has an invalid length. [ 1586.878594][T31328] netlink: 'syz.0.8245': attribute type 19 has an invalid length. [ 1586.917534][T31328] __nla_validate_parse: 1 callbacks suppressed [ 1586.917552][T31328] netlink: 156 bytes leftover after parsing attributes in process `syz.0.8245'. [ 1588.088428][T31358] netlink: 'syz.3.8244': attribute type 10 has an invalid length. [ 1588.099194][T31358] netlink: 'syz.3.8244': attribute type 19 has an invalid length. [ 1588.108410][T31358] netlink: 156 bytes leftover after parsing attributes in process `syz.3.8244'. [ 1588.229018][T31367] netlink: 'syz.4.8249': attribute type 19 has an invalid length. [ 1588.237732][T31367] netlink: 156 bytes leftover after parsing attributes in process `syz.4.8249'. [ 1588.639577][T31394] netlink: 212940 bytes leftover after parsing attributes in process `syz.4.8258'. [ 1591.784216][T31401] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.8260'. [ 1591.976331][T31403] netlink: 'syz.0.8262': attribute type 10 has an invalid length. [ 1592.011174][T31403] netlink: 'syz.0.8262': attribute type 19 has an invalid length. [ 1592.021641][T31403] netlink: 156 bytes leftover after parsing attributes in process `syz.0.8262'. [ 1592.081933][T31410] netlink: 'syz.2.8263': attribute type 19 has an invalid length. [ 1592.092924][T31410] netlink: 156 bytes leftover after parsing attributes in process `syz.2.8263'. [ 1592.148808][T31416] FAULT_INJECTION: forcing a failure. [ 1592.148808][T31416] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1592.178556][T31416] CPU: 0 PID: 31416 Comm: syz.3.8264 Not tainted syzkaller #0 [ 1592.186077][T31416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1592.196149][T31416] Call Trace: [ 1592.199438][T31416] [ 1592.202377][T31416] dump_stack_lvl+0x188/0x24e [ 1592.207082][T31416] ? show_regs_print_info+0x12/0x12 [ 1592.212297][T31416] ? load_image+0x410/0x410 [ 1592.216807][T31416] ? __might_fault+0xa6/0x120 [ 1592.221482][T31416] should_fail_ex+0x390/0x4c0 [ 1592.226157][T31416] copyin+0x1b/0x120 [ 1592.230057][T31416] _copy_from_iter+0x447/0x1130 [ 1592.234906][T31416] ? copyout_mc+0x110/0x110 [ 1592.239402][T31416] ? __virt_addr_valid+0x188/0x540 [ 1592.244514][T31416] ? __virt_addr_valid+0x188/0x540 [ 1592.249718][T31416] ? __virt_addr_valid+0x467/0x540 [ 1592.254826][T31416] ? __phys_addr_symbol+0x2b/0x70 [ 1592.259843][T31416] ? __check_object_size+0x4f6/0xa70 [ 1592.265124][T31416] netlink_sendmsg+0x755/0xbd0 [ 1592.269879][T31416] ? lockdep_hardirqs_on+0x94/0x140 [ 1592.275075][T31416] ? netlink_getsockopt+0x550/0x550 [ 1592.280265][T31416] ? security_socket_sendmsg+0x41/0xa0 [ 1592.285719][T31416] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1592.291004][T31416] ? security_socket_sendmsg+0x7c/0xa0 [ 1592.296454][T31416] ? netlink_getsockopt+0x550/0x550 [ 1592.301667][T31416] ____sys_sendmsg+0x5ed/0x9a0 [ 1592.306427][T31416] ? __sys_sendmsg_sock+0x30/0x30 [ 1592.311439][T31416] ? __import_iovec+0x306/0x510 [ 1592.316291][T31416] ? import_iovec+0x6f/0xa0 [ 1592.320789][T31416] ___sys_sendmsg+0x2a2/0x360 [ 1592.325473][T31416] ? __sys_sendmsg+0x2a0/0x2a0 [ 1592.330248][T31416] ? ktime_get+0x7b/0x270 [ 1592.334620][T31416] __se_sys_sendmsg+0x1c3/0x2b0 [ 1592.339475][T31416] ? perf_trace_preemptirq_template+0x268/0x320 [ 1592.345717][T31416] ? __x64_sys_sendmsg+0x80/0x80 [ 1592.350659][T31416] ? lockdep_hardirqs_on+0x94/0x140 [ 1592.355869][T31416] do_syscall_64+0x4c/0xa0 [ 1592.360280][T31416] ? clear_bhb_loop+0x60/0xb0 [ 1592.364952][T31416] ? clear_bhb_loop+0x60/0xb0 [ 1592.369619][T31416] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1592.375507][T31416] RIP: 0033:0x7f4f45b9e159 [ 1592.379910][T31416] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1592.399504][T31416] RSP: 002b:00007f4f4699a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1592.407908][T31416] RAX: ffffffffffffffda RBX: 00007f4f45e25fa0 RCX: 00007f4f45b9e159 [ 1592.415872][T31416] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000007 [ 1592.423832][T31416] RBP: 00007f4f4699a090 R08: 0000000000000000 R09: 0000000000000000 [ 1592.431794][T31416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1592.439752][T31416] R13: 00007f4f45e26038 R14: 00007f4f45e25fa0 R15: 00007ffd4b49b948 [ 1592.447724][T31416] [ 1593.300545][T31451] : port 1(team0) entered blocking state [ 1593.308544][T31451] : port 1(team0) entered disabled state [ 1593.322263][T31451] device team0 entered promiscuous mode [ 1593.327934][T31451] device team_slave_0 entered promiscuous mode [ 1593.337250][T31451] device team_slave_1 entered promiscuous mode [ 1593.345540][T31451] device bond0 entered promiscuous mode [ 1593.354667][T31451] device bond_slave_1 entered promiscuous mode [ 1593.363442][T31451] device batadv_slave_0 entered promiscuous mode [ 1593.427789][T31446] device team0 left promiscuous mode [ 1593.433869][T31446] device team_slave_0 left promiscuous mode [ 1593.450299][T31446] device team_slave_1 left promiscuous mode [ 1593.457419][T31446] device bond0 left promiscuous mode [ 1593.463175][T31446] device bond_slave_1 left promiscuous mode [ 1593.469349][T31446] device batadv_slave_0 left promiscuous mode [ 1593.478374][T31446] : port 1(team0) entered disabled state [ 1593.660471][T31460] netlink: 'syz.0.8278': attribute type 2 has an invalid length. [ 1593.697494][T31456] : port 1(team0) entered blocking state [ 1593.705227][T31456] : port 1(team0) entered disabled state [ 1593.726600][T31456] device team0 entered promiscuous mode [ 1593.732727][T31456] device team_slave_0 entered promiscuous mode [ 1593.739650][T31456] device team_slave_1 entered promiscuous mode [ 1593.746536][T31456] device bridge0 entered promiscuous mode [ 1593.800415][T31458] netlink: 'syz.3.8277': attribute type 19 has an invalid length. [ 1593.821014][T31458] netlink: 156 bytes leftover after parsing attributes in process `syz.3.8277'. [ 1593.833830][T31462] device team0 left promiscuous mode [ 1593.839258][T31462] device team_slave_0 left promiscuous mode [ 1593.850950][T31462] device team_slave_1 left promiscuous mode [ 1593.859425][T31462] device bridge0 left promiscuous mode [ 1593.866771][T31462] : port 1(team0) entered disabled state [ 1595.272396][T31505] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.8293'. [ 1595.284640][T31506] netlink: 172 bytes leftover after parsing attributes in process `syz.1.8290'. [ 1595.294133][T31508] netlink: 212940 bytes leftover after parsing attributes in process `syz.0.8292'. [ 1595.348353][T31503] netlink: 'syz.3.8291': attribute type 19 has an invalid length. [ 1595.377412][T31503] netlink: 156 bytes leftover after parsing attributes in process `syz.3.8291'. [ 1597.326034][T31519] netlink: 'syz.2.8295': attribute type 21 has an invalid length. [ 1597.334781][T31519] FAULT_INJECTION: forcing a failure. [ 1597.334781][T31519] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1597.350407][T31519] CPU: 1 PID: 31519 Comm: syz.2.8295 Not tainted syzkaller #0 [ 1597.357904][T31519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1597.367977][T31519] Call Trace: [ 1597.371290][T31519] [ 1597.374233][T31519] dump_stack_lvl+0x188/0x24e [ 1597.378928][T31519] ? show_regs_print_info+0x12/0x12 [ 1597.384142][T31519] ? load_image+0x410/0x410 [ 1597.388673][T31519] ? __lock_acquire+0x7c40/0x7c40 [ 1597.393722][T31519] ? snprintf+0xe5/0x140 [ 1597.397991][T31519] should_fail_ex+0x390/0x4c0 [ 1597.402692][T31519] _copy_to_user+0x2c/0x130 [ 1597.407214][T31519] simple_read_from_buffer+0xe3/0x150 [ 1597.412617][T31519] proc_fail_nth_read+0x1a6/0x220 [ 1597.417668][T31519] ? proc_fault_inject_write+0x310/0x310 [ 1597.423323][T31519] ? fsnotify_perm+0x248/0x550 [ 1597.428104][T31519] ? proc_fault_inject_write+0x310/0x310 [ 1597.433758][T31519] vfs_read+0x2db/0x960 [ 1597.437947][T31519] ? kernel_read+0x1e0/0x1e0 [ 1597.442558][T31519] ? __fget_files+0x28/0x460 [ 1597.447168][T31519] ? __fget_files+0x3fc/0x460 [ 1597.451872][T31519] ? __fdget_pos+0x2ae/0x360 [ 1597.456486][T31519] ? ksys_read+0x70/0x260 [ 1597.460841][T31519] ksys_read+0x14d/0x260 [ 1597.465118][T31519] ? vfs_write+0x9a0/0x9a0 [ 1597.469559][T31519] ? lockdep_hardirqs_on+0x94/0x140 [ 1597.474779][T31519] do_syscall_64+0x4c/0xa0 [ 1597.479208][T31519] ? clear_bhb_loop+0x60/0xb0 [ 1597.483897][T31519] ? clear_bhb_loop+0x60/0xb0 [ 1597.488591][T31519] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1597.494514][T31519] RIP: 0033:0x7f0f6d95e98e [ 1597.498950][T31519] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1597.518580][T31519] RSP: 002b:00007f0f6e865fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1597.527024][T31519] RAX: ffffffffffffffda RBX: 00007f0f6e8666c0 RCX: 00007f0f6d95e98e [ 1597.535011][T31519] RDX: 000000000000000f RSI: 00007f0f6e8660a0 RDI: 0000000000000004 [ 1597.542999][T31519] RBP: 00007f0f6e866090 R08: 0000000000000000 R09: 0000000000000000 [ 1597.550982][T31519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1597.558954][T31519] R13: 00007f0f6dc26038 R14: 00007f0f6dc25fa0 R15: 00007fff18267808 [ 1597.566941][T31519] [ 1597.714093][T31532] netlink: 'syz.2.8299': attribute type 21 has an invalid length. [ 1597.736868][T31532] netlink: 'syz.2.8299': attribute type 6 has an invalid length. [ 1597.782248][T31532] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8299'. [ 1598.066438][T31536] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.8301'. [ 1598.118582][T31536] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 1598.149671][T31536] CPU: 0 PID: 31536 Comm: syz.4.8301 Not tainted syzkaller #0 [ 1598.157205][T31536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1598.167290][T31536] Call Trace: [ 1598.170587][T31536] [ 1598.173538][T31536] dump_stack_lvl+0x188/0x24e [ 1598.178239][T31536] ? show_regs_print_info+0x12/0x12 [ 1598.183554][T31536] ? load_image+0x410/0x410 [ 1598.188095][T31536] sysfs_warn_dup+0x8a/0xa0 [ 1598.192715][T31536] sysfs_do_create_link_sd+0xc0/0x110 [ 1598.198112][T31536] device_add+0x83b/0x1050 [ 1598.202622][T31536] wiphy_register+0x1d8b/0x2aa0 [ 1598.207545][T31536] ? cfg80211_event_work+0x40/0x40 [ 1598.212654][T31536] ? minstrel_ht_alloc+0x894/0xa20 [ 1598.217843][T31536] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1598.224016][T31536] ieee80211_register_hw+0x2d48/0x39f0 [ 1598.229529][T31536] ? ieee80211_register_hw+0xf41/0x39f0 [ 1598.235077][T31536] ? ieee80211_register_hw+0xf41/0x39f0 [ 1598.240636][T31536] ? ieee80211_tasklet_handler+0x20/0x20 [ 1598.246292][T31536] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1598.252208][T31536] ? __debug_object_init+0xed/0x440 [ 1598.257487][T31536] ? memset+0x1e/0x40 [ 1598.261469][T31536] ? __hrtimer_init+0x189/0x270 [ 1598.266324][T31536] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1598.272164][T31536] ? memcpy+0x3c/0x60 [ 1598.276148][T31536] hwsim_new_radio_nl+0xab7/0xc90 [ 1598.281188][T31536] genl_family_rcv_msg_doit+0x22f/0x350 [ 1598.286729][T31536] ? end_current_label_crit_section+0x170/0x170 [ 1598.292974][T31536] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1598.298870][T31536] ? bpf_lsm_capable+0x5/0x10 [ 1598.303547][T31536] ? security_capable+0x85/0xb0 [ 1598.308400][T31536] genl_rcv_msg+0x601/0x790 [ 1598.312910][T31536] ? genl_bind+0x360/0x360 [ 1598.317329][T31536] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1598.323670][T31536] netlink_rcv_skb+0x1ef/0x440 [ 1598.328432][T31536] ? genl_bind+0x360/0x360 [ 1598.332845][T31536] ? netlink_ack+0x1160/0x1160 [ 1598.337610][T31536] ? down_read+0x1a8/0x2d0 [ 1598.342045][T31536] genl_rcv+0x24/0x40 [ 1598.346042][T31536] netlink_unicast+0x7ad/0x920 [ 1598.350844][T31536] netlink_sendmsg+0x8ad/0xbd0 [ 1598.355624][T31536] ? netlink_getsockopt+0x550/0x550 [ 1598.360836][T31536] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1598.366407][T31536] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1598.371699][T31536] ? security_socket_sendmsg+0x7c/0xa0 [ 1598.377165][T31536] ? netlink_getsockopt+0x550/0x550 [ 1598.382367][T31536] ____sys_sendmsg+0x5ed/0x9a0 [ 1598.387139][T31536] ? __sys_sendmsg_sock+0x30/0x30 [ 1598.392160][T31536] ? __import_iovec+0x306/0x510 [ 1598.397019][T31536] ? import_iovec+0x6f/0xa0 [ 1598.401530][T31536] ___sys_sendmsg+0x2a2/0x360 [ 1598.406208][T31536] ? __sys_sendmsg+0x2a0/0x2a0 [ 1598.411006][T31536] __se_sys_sendmsg+0x1c3/0x2b0 [ 1598.415849][T31536] ? ct_nmi_exit+0x145/0x1c0 [ 1598.420435][T31536] ? __x64_sys_sendmsg+0x80/0x80 [ 1598.425378][T31536] ? lockdep_hardirqs_on+0x94/0x140 [ 1598.430576][T31536] do_syscall_64+0x4c/0xa0 [ 1598.434999][T31536] ? clear_bhb_loop+0x60/0xb0 [ 1598.439672][T31536] ? clear_bhb_loop+0x60/0xb0 [ 1598.444341][T31536] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1598.450232][T31536] RIP: 0033:0x7fdd97d9e159 [ 1598.454662][T31536] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1598.474263][T31536] RSP: 002b:00007fdd98c55028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1598.482671][T31536] RAX: ffffffffffffffda RBX: 00007fdd98025fa0 RCX: 00007fdd97d9e159 [ 1598.490637][T31536] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 1598.498599][T31536] RBP: 00007fdd97e3506b R08: 0000000000000000 R09: 0000000000000000 [ 1598.506563][T31536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1598.514526][T31536] R13: 00007fdd98026038 R14: 00007fdd98025fa0 R15: 00007fffb93c9698 [ 1598.522504][T31536] [ 1598.557240][ T4283] Bluetooth: hci0: unexpected event 0x18 length: 15 < 23 [ 1599.014841][T31558] netlink: 'syz.1.8305': attribute type 6 has an invalid length. [ 1599.065770][T31558] netlink: 1034 bytes leftover after parsing attributes in process `syz.1.8305'. [ 1599.085914][T31557] netlink: 'syz.4.8307': attribute type 19 has an invalid length. [ 1599.108153][T31557] netlink: 156 bytes leftover after parsing attributes in process `syz.4.8307'. [ 1600.935390][T31598] netlink: 'syz.3.8321': attribute type 19 has an invalid length. [ 1600.960112][T31598] netlink: 156 bytes leftover after parsing attributes in process `syz.3.8321'. [ 1601.229999][T31609] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1601.265304][T31609] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1601.364647][T31609] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1601.408527][T31609] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1602.180971][T31608] delete_channel: no stack [ 1602.539059][T31635] netlink: 'syz.3.8333': attribute type 19 has an invalid length. [ 1602.582609][T31635] netlink: 156 bytes leftover after parsing attributes in process `syz.3.8333'. [ 1603.581506][T31671] FAULT_INJECTION: forcing a failure. [ 1603.581506][T31671] name failslab, interval 1, probability 0, space 0, times 0 [ 1603.632753][T31671] CPU: 1 PID: 31671 Comm: syz.1.8346 Not tainted syzkaller #0 [ 1603.640270][T31671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1603.650335][T31671] Call Trace: [ 1603.653621][T31671] [ 1603.656560][T31671] dump_stack_lvl+0x188/0x24e [ 1603.661256][T31671] ? show_regs_print_info+0x12/0x12 [ 1603.666457][T31671] ? load_image+0x410/0x410 [ 1603.670961][T31671] ? __lock_acquire+0x7c40/0x7c40 [ 1603.675982][T31671] ? sctp_hash_transport+0x167/0x1900 [ 1603.681453][T31671] should_fail_ex+0x390/0x4c0 [ 1603.686134][T31671] should_failslab+0x5/0x20 [ 1603.690631][T31671] slab_pre_alloc_hook+0x59/0x300 [ 1603.695657][T31671] ? sctp_stream_init_ext+0x53/0x160 [ 1603.700934][T31671] __kmem_cache_alloc_node+0x4f/0x270 [ 1603.706330][T31671] ? sctp_stream_init_ext+0x53/0x160 [ 1603.711608][T31671] kmalloc_trace+0x26/0xe0 [ 1603.716023][T31671] sctp_stream_init_ext+0x53/0x160 [ 1603.721199][T31671] sctp_sendmsg_to_asoc+0x12c8/0x17e0 [ 1603.726605][T31671] ? sctp_assoc_add_peer+0xf47/0x1710 [ 1603.731998][T31671] ? sctp_connect_new_asoc+0x400/0x6a0 [ 1603.737465][T31671] ? sctp_sendmsg_check_sflags+0x2d0/0x2d0 [ 1603.743276][T31671] ? __sctp_connect+0xd80/0xd80 [ 1603.748122][T31671] ? __local_bh_enable_ip+0x136/0x1c0 [ 1603.753503][T31671] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 1603.759050][T31671] ? security_sctp_bind_connect+0x85/0xb0 [ 1603.764779][T31671] sctp_sendmsg+0x1b8a/0x2940 [ 1603.769469][T31671] ? sctp_getsockopt+0x8a0/0x8a0 [ 1603.774402][T31671] ? __might_fault+0xa6/0x120 [ 1603.779072][T31671] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 1603.785485][T31671] ? aa_sock_msg_perm+0x94/0x150 [ 1603.790432][T31671] ? inet_sendmsg+0xca/0x2a0 [ 1603.795016][T31671] ? inet_send_prepare+0x250/0x250 [ 1603.800121][T31671] ____sys_sendmsg+0x5ed/0x9a0 [ 1603.804894][T31671] ? __sys_sendmsg_sock+0x30/0x30 [ 1603.809912][T31671] ? __import_iovec+0x306/0x510 [ 1603.814771][T31671] ? import_iovec+0x6f/0xa0 [ 1603.819297][T31671] ___sys_sendmsg+0x2a2/0x360 [ 1603.823976][T31671] ? __sys_sendmsg+0x2a0/0x2a0 [ 1603.828755][T31671] ? __lock_acquire+0x7c40/0x7c40 [ 1603.833813][T31671] __se_sys_sendmsg+0x1c3/0x2b0 [ 1603.838657][T31671] ? ct_nmi_exit+0x145/0x1c0 [ 1603.843247][T31671] ? __x64_sys_sendmsg+0x80/0x80 [ 1603.848195][T31671] ? lockdep_hardirqs_on+0x94/0x140 [ 1603.853392][T31671] do_syscall_64+0x4c/0xa0 [ 1603.857800][T31671] ? clear_bhb_loop+0x60/0xb0 [ 1603.862470][T31671] ? clear_bhb_loop+0x60/0xb0 [ 1603.867139][T31671] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1603.873026][T31671] RIP: 0033:0x7f4527d9e159 [ 1603.877436][T31671] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1603.897038][T31671] RSP: 002b:00007f4528d0a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1603.905451][T31671] RAX: ffffffffffffffda RBX: 00007f4528025fa0 RCX: 00007f4527d9e159 [ 1603.913425][T31671] RDX: 00000000000003e8 RSI: 00002000000004c0 RDI: 0000000000000004 [ 1603.921392][T31671] RBP: 00007f4528d0a090 R08: 0000000000000000 R09: 0000000000000000 [ 1603.929379][T31671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1603.937349][T31671] R13: 00007f4528026038 R14: 00007f4528025fa0 R15: 00007ffd99c62068 [ 1603.945333][T31671] [ 1604.255898][T31674] netlink: 'syz.4.8347': attribute type 19 has an invalid length. [ 1604.290776][T31674] netlink: 156 bytes leftover after parsing attributes in process `syz.4.8347'. [ 1604.737297][T31696] netlink: 'syz.1.8362': attribute type 19 has an invalid length. [ 1604.750714][T31696] netlink: 156 bytes leftover after parsing attributes in process `syz.1.8362'. [ 1604.855931][T31705] netlink: 'syz.2.8353': attribute type 6 has an invalid length. [ 1604.924029][T31705] netlink: 1034 bytes leftover after parsing attributes in process `syz.2.8353'. [ 1605.038936][T31699] ------------[ cut here ]------------ [ 1605.044614][T31699] WARNING: CPU: 1 PID: 31699 at kernel/events/core.c:6602 perf_pending_task+0x353/0x480 [ 1605.054466][T31699] Modules linked in: [ 1605.058379][T31699] CPU: 1 PID: 31699 Comm: syz.2.8353 Not tainted syzkaller #0 [ 1605.066112][T31699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1605.076281][T31699] RIP: 0010:perf_pending_task+0x353/0x480 [ 1605.082090][T31699] Code: e8 a2 72 da ff 84 db 75 10 e8 39 70 da ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 29 70 da ff e8 bc c0 58 ff eb e9 e8 1d 70 da ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 43 80 3c 2f 00 0f 85 0a ff ff [ 1605.101788][T31699] RSP: 0018:ffffc9000dbcf8e8 EFLAGS: 00010293 [ 1605.107878][T31699] RAX: ffffffff81a7c2c3 RBX: ffff88805fbc7058 RCX: ffff888027650000 [ 1605.116092][T31699] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1605.124158][T31699] RBP: ffff88805fbc6e20 R08: ffff888027650a03 R09: 1ffff11004eca140 [ 1605.132192][T31699] R10: dffffc0000000000 R11: ffffed1004eca141 R12: ffff888027650000 [ 1605.140190][T31699] R13: ffff888057d3d560 R14: 0000000000000000 R15: 1ffff1100bf78dc4 [ 1605.148281][T31699] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1605.157287][T31699] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1605.164056][T31699] CR2: 00007f0f6e845990 CR3: 000000007c7e3000 CR4: 00000000003506e0 [ 1605.172105][T31699] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1605.180095][T31699] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1605.188160][T31699] Call Trace: [ 1605.191510][T31699] [ 1605.194462][T31699] task_work_run+0x1d0/0x260 [ 1605.199083][T31699] ? task_work_cancel+0x220/0x220 [ 1605.204250][T31699] ? do_raw_spin_unlock+0x11d/0x230 [ 1605.209476][T31699] do_exit+0x9d5/0x2570 [ 1605.213701][T31699] ? put_task_struct+0x80/0x80 [ 1605.218505][T31699] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1605.224582][T31699] ? _raw_spin_lock_irq+0x86/0xf0 [ 1605.229633][T31699] ? lock_chain_count+0x20/0x20 [ 1605.234576][T31699] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1605.239631][T31699] do_group_exit+0x229/0x2e0 [ 1605.244311][T31699] ? lockdep_hardirqs_on+0x94/0x140 [ 1605.249532][T31699] get_signal+0x1259/0x1340 [ 1605.254212][T31699] arch_do_signal_or_restart+0xc4/0x1310 [ 1605.259891][T31699] ? __lock_acquire+0x7c40/0x7c40 [ 1605.265153][T31699] ? do_futex+0x310/0x320 [ 1605.269576][T31699] ? get_sigframe_size+0x10/0x10 [ 1605.274571][T31699] ? __ia32_sys_get_robust_list+0x100/0x100 [ 1605.280507][T31699] ? exit_to_user_mode_loop+0x3b/0x110 [ 1605.286277][T31699] exit_to_user_mode_loop+0x70/0x110 [ 1605.291630][T31699] exit_to_user_mode_prepare+0xee/0x180 [ 1605.297197][T31699] syscall_exit_to_user_mode+0x16/0x40 [ 1605.302720][T31699] do_syscall_64+0x58/0xa0 [ 1605.307151][T31699] ? clear_bhb_loop+0x60/0xb0 [ 1605.311909][T31699] ? clear_bhb_loop+0x60/0xb0 [ 1605.316606][T31699] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1605.322560][T31699] RIP: 0033:0x7f0f6d99e159 [ 1605.326988][T31699] Code: Unable to access opcode bytes at 0x7f0f6d99e12f. [ 1605.334061][T31699] RSP: 002b:00007f0f6e8660e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1605.342550][T31699] RAX: fffffffffffffe00 RBX: 00007f0f6dc25fa8 RCX: 00007f0f6d99e159 [ 1605.350555][T31699] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f0f6dc25fa8 [ 1605.358628][T31699] RBP: 00007f0f6dc25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1605.366672][T31699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1605.374703][T31699] R13: 00007f0f6dc26038 R14: 00007fff18267720 R15: 00007fff18267808 [ 1605.382746][T31699] [ 1605.385798][T31699] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1605.393091][T31699] CPU: 1 PID: 31699 Comm: syz.2.8353 Not tainted syzkaller #0 [ 1605.400561][T31699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1605.410621][T31699] Call Trace: [ 1605.413904][T31699] [ 1605.416845][T31699] dump_stack_lvl+0x188/0x24e [ 1605.421537][T31699] ? memcpy+0x3c/0x60 [ 1605.425529][T31699] ? show_regs_print_info+0x12/0x12 [ 1605.430824][T31699] ? load_image+0x410/0x410 [ 1605.435355][T31699] panic+0x2d3/0x710 [ 1605.439268][T31699] ? bpf_jit_dump+0xd0/0xd0 [ 1605.443806][T31699] __warn+0x2f8/0x4f0 [ 1605.447806][T31699] ? perf_pending_task+0x353/0x480 [ 1605.452935][T31699] ? perf_pending_task+0x353/0x480 [ 1605.458055][T31699] report_bug+0x2ba/0x4f0 [ 1605.462391][T31699] ? perf_pending_task+0x353/0x480 [ 1605.467520][T31699] handle_bug+0x3a/0x70 [ 1605.471689][T31699] exc_invalid_op+0x16/0x40 [ 1605.476205][T31699] asm_exc_invalid_op+0x16/0x20 [ 1605.481074][T31699] RIP: 0010:perf_pending_task+0x353/0x480 [ 1605.486804][T31699] Code: e8 a2 72 da ff 84 db 75 10 e8 39 70 da ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 29 70 da ff e8 bc c0 58 ff eb e9 e8 1d 70 da ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 43 80 3c 2f 00 0f 85 0a ff ff [ 1605.506426][T31699] RSP: 0018:ffffc9000dbcf8e8 EFLAGS: 00010293 [ 1605.512507][T31699] RAX: ffffffff81a7c2c3 RBX: ffff88805fbc7058 RCX: ffff888027650000 [ 1605.520486][T31699] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1605.528463][T31699] RBP: ffff88805fbc6e20 R08: ffff888027650a03 R09: 1ffff11004eca140 [ 1605.536445][T31699] R10: dffffc0000000000 R11: ffffed1004eca141 R12: ffff888027650000 [ 1605.544422][T31699] R13: ffff888057d3d560 R14: 0000000000000000 R15: 1ffff1100bf78dc4 [ 1605.552415][T31699] ? perf_pending_task+0x353/0x480 [ 1605.557553][T31699] ? perf_pending_task+0x353/0x480 [ 1605.562677][T31699] task_work_run+0x1d0/0x260 [ 1605.567279][T31699] ? task_work_cancel+0x220/0x220 [ 1605.572321][T31699] ? do_raw_spin_unlock+0x11d/0x230 [ 1605.577539][T31699] do_exit+0x9d5/0x2570 [ 1605.581720][T31699] ? put_task_struct+0x80/0x80 [ 1605.586502][T31699] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1605.592501][T31699] ? _raw_spin_lock_irq+0x86/0xf0 [ 1605.597542][T31699] ? lock_chain_count+0x20/0x20 [ 1605.602409][T31699] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1605.607450][T31699] do_group_exit+0x229/0x2e0 [ 1605.612056][T31699] ? lockdep_hardirqs_on+0x94/0x140 [ 1605.617268][T31699] get_signal+0x1259/0x1340 [ 1605.621805][T31699] arch_do_signal_or_restart+0xc4/0x1310 [ 1605.627458][T31699] ? __lock_acquire+0x7c40/0x7c40 [ 1605.632500][T31699] ? do_futex+0x310/0x320 [ 1605.636847][T31699] ? get_sigframe_size+0x10/0x10 [ 1605.641803][T31699] ? __ia32_sys_get_robust_list+0x100/0x100 [ 1605.647733][T31699] ? exit_to_user_mode_loop+0x3b/0x110 [ 1605.653216][T31699] exit_to_user_mode_loop+0x70/0x110 [ 1605.658524][T31699] exit_to_user_mode_prepare+0xee/0x180 [ 1605.664090][T31699] syscall_exit_to_user_mode+0x16/0x40 [ 1605.669562][T31699] do_syscall_64+0x58/0xa0 [ 1605.673986][T31699] ? clear_bhb_loop+0x60/0xb0 [ 1605.678709][T31699] ? clear_bhb_loop+0x60/0xb0 [ 1605.683402][T31699] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1605.689312][T31699] RIP: 0033:0x7f0f6d99e159 [ 1605.693735][T31699] Code: Unable to access opcode bytes at 0x7f0f6d99e12f. [ 1605.700754][T31699] RSP: 002b:00007f0f6e8660e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1605.709181][T31699] RAX: fffffffffffffe00 RBX: 00007f0f6dc25fa8 RCX: 00007f0f6d99e159 [ 1605.717166][T31699] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f0f6dc25fa8 [ 1605.725146][T31699] RBP: 00007f0f6dc25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1605.733134][T31699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1605.741113][T31699] R13: 00007f0f6dc26038 R14: 00007fff18267720 R15: 00007fff18267808 [ 1605.749109][T31699] [ 1605.752407][T31699] Kernel Offset: disabled [ 1605.756740][T31699] Rebooting in 86400 seconds..