last executing test programs: 54m50.45810926s ago: executing program 0 (id=127): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000300009116144f782db44b90402", 0x11}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1000000004000000080000000500000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000ffff", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x88e}, 0x0, 0x1, 0xffffffffffffffff, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000004"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)=r3}, 0x20) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a"], 0x82d7) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)=""/219, 0xdb}], 0x1}, 0x0) recvmsg(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000000c0)={r0}) r6 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r6, &(0x7f0000000040)='syz1\x00', 0x1ff) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x0) r7 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000140)='tasks\x00', 0x2, 0x0) r10 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r11) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{0x1}, &(0x7f0000000440), &(0x7f0000000480)=r11}, 0x20) r12 = gettid() write$cgroup_pid(r9, &(0x7f00000001c0)=r12, 0x12) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x48, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x1, 0x1, 0x0, 0x12, 0x0, 0x0, 0xfffd, 0x0, 0x2}, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r8) sendmsg$inet(r7, &(0x7f00000007c0)={&(0x7f0000000040)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000240)="cc", 0x1}], 0x1}, 0x24044851) 54m49.730978662s ago: executing program 0 (id=130): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8992, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@typedef={0x7}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x2d}, 0x12) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r5 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f00000002c0)=r4, 0x161) sendmsg$inet(r5, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, 0x0, 0x0, &(0x7f0000007880)}, 0x0) socket$kcm(0x29, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000003d000000000000000000158500000029"], 0x0}, 0x94) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e00"], 0xfe33) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x0, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$unix(r1, &(0x7f0000001640)={&(0x7f0000000040)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000001580)=[{&(0x7f0000000100)="90a58fb91fb7fe7bd16b7b61710a35871fd64418db6028e9a106e2624b276496eca803badb227c82fd12b8d9436c7c4c38294eb332c3a2ddacc804437a7cf716a5bb9887a04db0fc5a24a9d2b8461b87a01418c4c09ac8bbc5d6de10e1b61a5ffdee9536eeb1fcfd567cbc60f06e959e9627f457a6f023ae3b09c827db2b47cccbf9f3fe874c", 0x86}, {&(0x7f00000001c0)="a0ed05646d8c26f92c1723cb6213cb351255bfcdc906c5971a8c77774f5744383df019d87eed34652e5e21c605d2", 0x2e}, {&(0x7f0000000200)="0d4311032ab19bf51b626d92cbbcdf996013e86958bb21cfbdf267745d00139569cb27ca48842cfea455230f431b10e81a208c5688ebd1e3d1bc2b2dedea62530c25aa02896a7c86a82dc8792b18f751751cb228104aa6f98a7e021d12cef9f27b18a96d8898fe594b1087db60db4f0f", 0x70}, {&(0x7f00000002c0)="009913", 0x3}, {&(0x7f0000000300)="3769fa172d9a4d0a55df1aba04fd5bf9883003569f93b3bbf771f0e2cf8a2a7af0701f598740458fe866e6b9e452ee4dd9d0c1fa6e81a373af067f151630088e8aec48b1fc0272dfccf6e7b877777e718eee713975b4d19608a03715011e29b12223e9feb192a7e36192395e31fcf7ed41863bb6c6712a2fe5c623b89467d576ff5f05947f04322df83ab80083932e36b2a0a2596c8e903a", 0x98}, {&(0x7f00000003c0)="4eec343c463ee9f26154d6f06eda39d65ccb0753b56887f611343f178345f5bfdeac3737d5969df1ffcd93d49a53cb4d2016ed3164a1d131bc6bb9a0c555516d5e3d90dfe13321c89bbab5f3d188727a05ea1ae0f94494a8b97b531c2995b1300f451ca3b6816bf242932f6c81f2d04dbbb635aef8c725522fb39d06b0017e60836f8829aa1c1561d40b282921b824c876727519e399a86e9b2af3bba700f29b6ed8bb9706283af9ab9c756405bfd66a1502bf34c269ac68cbaf0fba4b23397333f0a0c631a452904fe53db8151184984dbbbdb7b1526fd4e559d53b7a", 0xdd}, {&(0x7f00000004c0)="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", 0x800}, {0x0}], 0x8, &(0x7f0000001600)=[@cred={{0x1c}}], 0x20, 0x845}, 0x20040000) r6 = socket$kcm(0xf, 0x3, 0x2) bpf$MAP_LOOKUP_ELEM(0x3, 0x0, 0x0) sendmsg$inet(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)="0209000202000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) 54m47.977189655s ago: executing program 0 (id=133): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8992, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@typedef={0x7}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x2d}, 0x12) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r5 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f00000002c0)=r4, 0x161) sendmsg$inet(r5, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, 0x0, 0x0, &(0x7f0000007880)}, 0x0) socket$kcm(0x29, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000003d000000000000000000158500000029"], 0x0}, 0x94) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e00"], 0xfe33) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x0, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$unix(r1, &(0x7f0000001640)={&(0x7f0000000040)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000001580)=[{&(0x7f0000000100)="90a58fb91fb7fe7bd16b7b61710a35871fd64418db6028e9a106e2624b276496eca803badb227c82fd12b8d9436c7c4c38294eb332c3a2ddacc804437a7cf716a5bb9887a04db0fc5a24a9d2b8461b87a01418c4c09ac8bbc5d6de10e1b61a5ffdee9536eeb1fcfd567cbc60f06e959e9627f457a6f023ae3b09c827db2b47cccbf9f3fe874c", 0x86}, {&(0x7f00000001c0)="a0ed05646d8c26f92c1723cb6213cb351255bfcdc906c5971a8c77774f5744383df019d87eed34652e5e21c605d2", 0x2e}, {&(0x7f0000000200)="0d4311032ab19bf51b626d92cbbcdf996013e86958bb21cfbdf267745d00139569cb27ca48842cfea455230f431b10e81a208c5688ebd1e3d1bc2b2dedea62530c25aa02896a7c86a82dc8792b18f751751cb228104aa6f98a7e021d12cef9f27b18a96d8898fe594b1087db60db4f0f", 0x70}, {&(0x7f00000002c0)="009913", 0x3}, {&(0x7f0000000300)="3769fa172d9a4d0a55df1aba04fd5bf9883003569f93b3bbf771f0e2cf8a2a7af0701f598740458fe866e6b9e452ee4dd9d0c1fa6e81a373af067f151630088e8aec48b1fc0272dfccf6e7b877777e718eee713975b4d19608a03715011e29b12223e9feb192a7e36192395e31fcf7ed41863bb6c6712a2fe5c623b89467d576ff5f05947f04322df83ab80083932e36b2a0a2596c8e903a", 0x98}, {&(0x7f00000003c0)="4eec343c463ee9f26154d6f06eda39d65ccb0753b56887f611343f178345f5bfdeac3737d5969df1ffcd93d49a53cb4d2016ed3164a1d131bc6bb9a0c555516d5e3d90dfe13321c89bbab5f3d188727a05ea1ae0f94494a8b97b531c2995b1300f451ca3b6816bf242932f6c81f2d04dbbb635aef8c725522fb39d06b0017e60836f8829aa1c1561d40b282921b824c876727519e399a86e9b2af3bba700f29b6ed8bb9706283af9ab9c756405bfd66a1502bf34c269ac68cbaf0fba4b23397333f0a0c631a452904fe53db8151184984dbbbdb7b1526fd4e559d53b7a", 0xdd}, {&(0x7f00000004c0)="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", 0x1000}], 0x7, &(0x7f0000001600)=[@cred={{0x1c}}], 0x20, 0x845}, 0x20040000) r6 = socket$kcm(0xf, 0x3, 0x2) bpf$MAP_LOOKUP_ELEM(0x3, 0x0, 0x0) sendmsg$inet(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)="0209000202000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) 54m46.846785001s ago: executing program 0 (id=139): r0 = socket$kcm(0x1e, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="12000000040000"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0xe, 0x0, &(0x7f0000000200)='GPL\x00', 0xa}, 0x94) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401c5820, &(0x7f0000000000)=0x818) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100020, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x28}, 0xfc40) r4 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00) r5 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, r5, 0x0, 0x3}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x40000180) r7 = socket$kcm(0x1e, 0x4, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r8 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0xd, 0x3, 0x9, 0x47, 0x0, 0x1, 0x4000, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x7, 0x3}, 0x880, 0x9, 0x6, 0x3, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x5, 0x0, 0x7}, 0xffffffffffffffff, 0x7, r2, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r6) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f00000008c0), 0x43) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c40)={0x3, 0x3, &(0x7f0000000c00)=ANY=[@ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x64, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x1, 0x7}}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1, 0x3}}, @int={0xa, 0x0, 0x0, 0x1, 0x0, 0x37, 0x0, 0x61, 0x2}, @fwd={0x7}, @typedef={0x4, 0x0, 0x0, 0x8, 0x3}, @typedef={0x6, 0x0, 0x0, 0x8, 0x4}]}}, 0x0, 0x7e}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r9, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300), 0x0, 0xd9, &(0x7f00000003c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0xbe, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000004000000000000", @ANYRES32=0x1, @ANYBLOB='\x00\b\x00'/20, @ANYRES32=r11, @ANYRES32=r10, @ANYBLOB="02000000020000000400000000000000000080000000000000000001"], 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x3, '\x00', r11, 0xffffffffffffffff, 0x3, 0x2, 0x2}, 0x50) write$cgroup_subtree(r7, &(0x7f00000001c0)=ANY=[], 0xfdef) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000002c0)=r6, 0x4) 54m46.485187862s ago: executing program 0 (id=142): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8992, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@typedef={0x7}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x2d}, 0x12) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r5 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f00000002c0)=r4, 0x161) sendmsg$inet(r5, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, 0x0, 0x0, &(0x7f0000007880)}, 0x0) socket$kcm(0x29, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000003d000000000000000000158500000029"], 0x0}, 0x94) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e00"], 0xfe33) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x0, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$unix(r1, &(0x7f0000001640)={&(0x7f0000000040)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000001580)=[{&(0x7f0000000100)="90a58fb91fb7fe7bd16b7b61710a35871fd64418db6028e9a106e2624b276496eca803badb227c82fd12b8d9436c7c4c38294eb332c3a2ddacc804437a7cf716a5bb9887a04db0fc5a24a9d2b8461b87a01418c4c09ac8bbc5d6de10e1b61a5ffdee9536eeb1fcfd567cbc60f06e959e9627f457a6f023ae3b09c827db2b47cccbf9f3fe874c", 0x86}, {&(0x7f00000001c0)="a0ed05646d8c26f92c1723cb6213cb351255bfcdc906c5971a8c77774f5744383df019d87eed34652e5e21c605d2", 0x2e}, {&(0x7f0000000200)="0d4311032ab19bf51b626d92cbbcdf996013e86958bb21cfbdf267745d00139569cb27ca48842cfea455230f431b10e81a208c5688ebd1e3d1bc2b2dedea62530c25aa02896a7c86a82dc8792b18f751751cb228104aa6f98a7e021d12cef9f27b18a96d8898fe594b1087db60db4f0f", 0x70}, {&(0x7f00000002c0)="009913", 0x3}, {&(0x7f0000000300)="3769fa172d9a4d0a55df1aba04fd5bf9883003569f93b3bbf771f0e2cf8a2a7af0701f598740458fe866e6b9e452ee4dd9d0c1fa6e81a373af067f151630088e8aec48b1fc0272dfccf6e7b877777e718eee713975b4d19608a03715011e29b12223e9feb192a7e36192395e31fcf7ed41863bb6c6712a2fe5c623b89467d576ff5f05947f04322df83ab80083932e36b2a0a2596c8e903a", 0x98}, {&(0x7f00000003c0)="4eec343c463ee9f26154d6f06eda39d65ccb0753b56887f611343f178345f5bfdeac3737d5969df1ffcd93d49a53cb4d2016ed3164a1d131bc6bb9a0c555516d5e3d90dfe13321c89bbab5f3d188727a05ea1ae0f94494a8b97b531c2995b1300f451ca3b6816bf242932f6c81f2d04dbbb635aef8c725522fb39d06b0017e60836f8829aa1c1561d40b282921b824c876727519e399a86e9b2af3bba700f29b6ed8bb9706283af9ab9c756405bfd66a1502bf34c269ac68cbaf0fba4b23397333f0a0c631a452904fe53db8151184984dbbbdb7b1526fd4e559d53b7a", 0xdd}, {&(0x7f00000004c0)="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", 0x800}, {0x0}], 0x8, &(0x7f0000001600)=[@cred={{0x1c}}], 0x20, 0x845}, 0x20040000) r6 = socket$kcm(0xf, 0x3, 0x2) bpf$MAP_LOOKUP_ELEM(0x3, 0x0, 0x0) sendmsg$inet(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)="0209000202000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) 54m45.717725027s ago: executing program 0 (id=145): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001780)=""/4096, 0x1000}], 0x1}, 0x10020) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000440)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @remote}, 0x2, 0x4, 0x0, 0x2}}, 0x80, 0x0}, 0x20044010) recvmsg$unix(r0, &(0x7f0000000480)={0x0, 0xfffffd88, &(0x7f0000000440), 0x1}, 0x2002) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close(r3) socket$kcm(0x2, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e488a863726558"], 0x140) write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[], 0x16) 54m30.396534301s ago: executing program 32 (id=145): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001780)=""/4096, 0x1000}], 0x1}, 0x10020) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000440)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @remote}, 0x2, 0x4, 0x0, 0x2}}, 0x80, 0x0}, 0x20044010) recvmsg$unix(r0, &(0x7f0000000480)={0x0, 0xfffffd88, &(0x7f0000000440), 0x1}, 0x2002) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close(r3) socket$kcm(0x2, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e488a863726558"], 0x140) write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[], 0x16) 33m48.740077316s ago: executing program 4 (id=8284): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0x8, 0x0, 0x0) sendmsg(r0, &(0x7f0000001800)={&(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e24, @multicast2}, 0x3, 0x1, 0x3, 0x1}}, 0x80, &(0x7f0000001980)=[{&(0x7f00000001c0)="004ff2e02a4f9eb09b2678b70bbc467dd9343917bd6765866a2dfa3ac13ec80e7b3cfd52fbf56da8d6262e385d267ed5e0948c29c146c6f1c07427cc4e06997be12e3a71acca55c9b884addc0c7c3266880884b9a17d873934f4b57d28790b69d1c0d82947478bab217bb16cad2061b402b35452d4a2ecc581423cba1f3c26a45f5ad63dead62fd456e0ae3012", 0x8d}, {&(0x7f0000000140)="2a2e4ef08b337256e0b40c74abd6905416da0600138dbb8371d51cfbab6082dd986f0fa1f4f75a8adb9df4c3e9160e6f8de3eab06066d169a68e37db2e73537f", 0x40}, {&(0x7f00000002c0)="39fc3b7bfae3af5a8d013616b018360baaa46291abbc4be6829a15bc6628f1c55e5a3b55683c46bf592e7c753b5e7146816ca5dd806adb70c670f052e3061f4b59d1cd1969bd0182f44375e9c42b9f3b191eb954d6d19883659d36cbef0c8cc85ec964c2b44bfa456073d9b01e810bffb311fd3644a96b6e4939dadd1f2ecb9568180d73c90870e77b5cc48094835daf421f52acc0ab9489c6ba472aa4fcf037769a79a7dcd877c683d55377a90b3fcd80fb8fe94c8e7eceecfaa13f7794c9fed2213a18ddf79341184b002eb3a421ee76e85092", 0xd4}, {&(0x7f00000003c0)="03e199bc07f06569ed54ee80d9c1", 0xe}, {&(0x7f0000000400)="534d076891e0c3bd297445b157af7695ace1b6ff852f21c9e20f250acf36c440a2279c3ca29aee04b0943bcaf1043de3681ce311a3a4e02481ad5c2b1c1911f688c1db", 0x43}, {&(0x7f0000000600)="15adb67f3b02a5d6d376fe708afaf5b91056153d7e0551d68685f27be3e3d39b91cc3bce3ab30c0f2860c6045e2c178fa7644ff60c3b91bdfa0b5f8bf0912d54f4e3d3c7e6ae3aaf47ea3edd69e52e4b6b55f62ff977afcaf2bd348368dd6f20abc0b8b6bd0ff08127f338a24159c9bc756caa85d916eda5cf4b048356a6e0f943326c07217e0306af23a95328583e98688ec7c181aac0b64b1df2941c20a5cf3baa9d7704d061a46f4e957e67b7bc28da8ff47089c67f78a0377ced038dc8c88eb135e09aa25572db0e64b402091be532975f1539c6f3946995d1d286165a5b6c0ca011e37bea7e66d6bc9367c66af18b793822eb1c7ffd78e8b9f970faeca9a4f3b13c30cd003814bc560a9f74b2c2ba09a51109169f9999bc8c0de018dedf6971bde7a6249489b1b5f845fa358fa8d48d08b6c91e63679c2997dcb4766322394cc6e1a1c887774095201bf11983f2b24f1f292f23f4f9097667b318c75774cdd7fad4af6353209162ad87666efcbb797d8dd11f7a1173766b6821676df905d69325ff5baaaf710b6c81d0726232a9570c962fbc6c78486722fd5a72aa633e4b7a8cfd062a152fff85f7cfb44aeb3b3753b811410d414920cb121513eb146b6bfae1a030345b083e5b7ea791ff7eff3f292adcbc73191bf6b161db5e0e49e9652d274962c845c280643711491bdf582e8e47b8efdb0e2b97b2d7ea460be8586874c9caadae3f8d005a82750060605597f9e23216f23d617c670a5e733054767fe47eeac261c6162f469e430c654800a94b80e2f1765a58ca54dc94819dd07ead85224481ba22a04b04457aed571b4347bbf9230cbde2986ec856fc5fa43298a069ce5a2bd5f9c86f07e6f2ae0e8167cae31478da0139d9a583de916b3a098e88b44cc8852c8939d43c6fc64e7efca169258a313aed68aa7c6bf87261a0b6278d2bd37dddf61bc033a500663fa0f5ce9342a98575b6f507ec34095fad236b97fbef0a7520328e693c586e536fdca88ad8157fbab71eda2b5442ded44d71f8c131ab314b5abf7ac83f9f048a339ca6b1772cefa9f3237e91df73f95332eeea1b03cc064b8950807e792c303ea20334c2e75ce553912c26dfc47d488603c829ef07ccd97cd46c65186fe01b0d678f15870edffab7b1b5f630ac0018245966c1b40c495d645edcf4c12f86e8445beb8f5cf7e5a70d6001b79b8805fdb674da01bf37f9f82af10df6f655c5d3f5711266eda2457bd870ca6e9384fc14c60b8ceeead888cabb9d6f8aeb8e9ec8d9c7fae3de1b906b15e6e89426636b18243db1a136ee30062bfac164a93f9d87e98be5926976ac5403a0d2f025369b59182e9714c3a58e1758e8c8d6866a9abc6fceaadfe51589c029f031a604d4a57ad5c169e17e1efd14db656790e697d61250367f1b50cdc8dbedb7d308e1eb3cf9773497daf22c0429f5d409527e17d642ad9e1e2a216ebbde4759cb9aa04a8b414329b76e9fbdc9fd1588ed35643b4324d98582c7681831a995efed875bc9d1bb791bb0787bb436285c80f7787695e312613f39bff04353024c406d088b7406712e504343f7d0c1b055bba08eb8f60b7bfe16d42f98b9192b0e1c2e6e725e5f244725c588e5d1202f3d3a36e09dd9223f212c538d9736596bbc31f8c754406b324977977890633dd4edcf0988df2aa8e5067b58f5e8f1e85413e9dd59d371959ae68dbe7d32d3450680d89a9a602c1d8d0727afffdfa6ba07f15a22a17c09492b27aad738679a615145567a6b7a40436bc854be0b4ba4a82f4ec8ce110d528f4874f0eda6a87ca146b9e4d3933b86eca239172a656e34d5899fabc9103eb32036f0d109b525107831fe7ae734d6f9b8dfb11fd14146b43d84b43463188aa71917714b7e43f914497c035569b6c6fbce5bef16c162f0a8a3df1c80fe8957e98e3644502954c2bc499f8b9dc0eb82b7a444133284062b54b5144182e18053353e917fc63fc336659396007a8247dd527a6d8bd63b4c97c5cbd8e1f330668c9ef1479988ee0799e094bec99826b9f7da28b08e3406f470760b4b35ee87a411e4285e5ae07d182de2e9134620dfd4af99458a0bf8f4ab1f784e1e774a472d1f5c41e49894159ad7677176a460e40d301ad122f2228eb653f80576372eeaa0cee55967a97af5f4f97cabd32a102d7750abd979d35983561d54d0a5e68bd5f8cad7df04d1d02cee0bfc4c2e7267824f7bd86f90049ab0efcbaed1a2213020ec087b738da11b01505f44c918ea1bc549b060ba6a4ef166cf11c2ef3734d75d4aa203f5459086f0b38ef4d299b325d27da02d2c3cd5627a4bc27e9a91f8563761350ef9e76dcaa024c3f551cb9d2fb746bb96591817018ea8dc680e2985ee02dd11ae0ef4883c4fb601cdee2858d86ba7fb70b05386d247de4aede2e1fe36a1b12dfd4b5700d178fec432266007d67d3f9b1d6026752f1016d2460ef82f748e51320fbd8db0d181d97c40a78c58ae2be506419c6210eb21acd131d22da79c28394e9c4d1b998a9b1e1991ccf34640b6cacb77cb60e30270dee5e2d0bebc086a01e9e545c00791d7b62a625b517d81263525e764e72c81cf0b94c6043e899509fe59c404973adcd318892dff17f99b9c9a2d4ce73be15f264cf4077418e1b82cd29c40a82f5a3b980e4bb308a81b086a99d18ea52e5dbaec5ee8647e71457c361030c0641d0dde18a05c3baf990be08a0e5aeeeeab073f0be7d900790500004741edd4aecb63954487bc25e4127eefa5c9d8df0afd0a4a9e405ea5ac0aa85761c2918aa6f5a4b0260a9b948c6e7fbe212369d2415f8985d7a3527a4668e2e856d174daaedfedb5f2477b65dc0e73b2bc6ca4ad7c4964eb1e189f4818887f8915b884f88935eafff3bb8d65ef9cc6ce561f14764cdb4fa07e0b9525dd02e1cde5c8aff3d62540601b9dc0cef517de9cdc199a2f7051b9fb3df72e7880d29cc5ae459167ccfd7b411ba773063ca89f6da33a192be6f7b9c89227108ea33745e43b6a8087b391b6d75320c99fdb9f290e307c7d75b97c88de92b5631c58ee34f0003570b09377ff89a9f75b3593f0d8c7ccb1e99f5169b7becde34f2eded0ca2ccd938acd7b8fc6088f6a2ba2186321c54af8a1a73efdbcca645649ac5c19e9dc3a48ccce259a84fafd2d34313e5f307bd402f0bec67b571ffce988362585c5b71f573163baaf2929a99a98a446e3989a2e1268cef2c6e07b5dcfaf8a8e62fd758fcd1ab3a10485b3a21fe68d717061eb301129354c0f0732dd3ea87046eed2677f841d60cd4dacc79f433dbc85e4d95f0d81e50f1a4c545177ede3cfc7258c6ded0f2858bc20223ad5b937d505d981c7abb5872ec9dde99dededd94634e445c7a7f1d66646808154e7acb8dd81ea78fcae07e24be7979326b539029a5d98a793101962c335c10e6094bd18be6dd66f5a25261dd597bff8cf953dbe5f731c86e1c62675ed368c458ad757114f45d76c67c7fbdf72095defed558372a0bbfa1c4d98e6384ad6993854d8b0095255782154750cd672fd82557059e691b2a284dc668c04c355dbd45a70c0582437d0316550c57a451f0ec1ef3511839b12a947e4e0dc1ce7169a565b25031af4949c0c52a23f68ad25b1ab4e24f301c493971ac7c3aec29bcf2af0c02e3c79d335dec6adf48be9565fbf56d2846bf1be842468cd3030825b93ee07014799f253c0de3ad748d992bca5a1200c40537402505e846296802fad1064b4dcdd587b52c9e3fbb29be7bb672342962000607dd296e063b85dc45efab87128f8afc37607f8b13c3483adaa48d214eebc4b58c2359991099b1ea0b78de9d3130114770944fa081289291bdf515ce4f055d8b1e7e5b5868bbba8d247829303bf34420d1e234d3fe4084cca165cf2c65f77cb0a3bcc61418a682289e6bc6ae9fc0cfe68b41b24a37a4ba91775a314be939328540f8603089b5d33e35047c1aed4ca7e9f3d26b476ca0d2ed87dc425135720c07b4dc751ad85e88dea0c36d3c035a64c52283203f2c8959cc59f80624b820fbc17c5b0f8baa47dcc4cbc4c110fe8807c1f04960468bc02fc4298504e59cf835f16487de122dbaf6616f4455da927d4ae5f390173c1c07093a7a964f9206ce7ba1b01eb99b7b5633220051b3470ef5ec0439d39577ab9c2c5dea96d1405c67a6f9ca745ce1d3da92192d60305f3362992048f983a7212d147d328e657c6bcb0ee01515078de4dda311af24698dc66443c856ac4679ffe886aafb4936a2a97e5ea7b10b881e5e67719662cda91b3d4c00c8822fa3938b1e58e48a7bc542ae2cca23c26148e412a5c12cf8d63daa0041e6a7f655eccda7502242ec3c3501e9ec2200212dde1ae9218a51410c89abf4cabf971859f1dc9cfda5e99c17e335515a5ff33e4dbd588cf2e21a088f45b37a6f2cf153cfd802a20f4424791db5ad2fe1d9100ba163f4b4c9cde1829afeba4b5f4867a0bdd19ee747defcfc419f609f84cc8b024cc998d89831f5543798eeae19a2433ee36c95f64aaee1b7764db8b4373c9b102215dc047e9f2473a3d5c1c060d1362ef672309f48583b44f7ba525ff777d0607e0f7bfd5a9527680394a0ca3990969531a337490e9c1ec8215882efd66a4ba5701a5cb575c4cc8aa6d04932346a86083086abd196925c3affeee80702018cfbebb8c43d4cf8546d6908f672bf644ab81201ca0cb5378f220e948cbf5dcd051651ae458951dd46cb157c61053e0cf3e265f1cc5b7dfe2bc70038efa3718b6353de7e0a732f16345562b683062140db44e097f4fd4784697449cb2efcace46df9c3f061c8754d8938e538a2f9d7dbdcf266e8c0a597a755cdc4fc342c57670d3415c8a9fd70268fb0697da2baf459ff0e228bf62232549bed6a6c510fa9eb2e9e4e7f16edc31f6aa688873c30cc093ce48068a1ac2432b8b9888972c9f66245cdfd189ffb95b9c78faac25cdfaaed7b6087aa1b8306851fcdb7a59b6f35db50a55edd2e9d7c309c708b786778dbdaa42f3af7b5e8e1c3af636bf72ca0d93e34fa65226a7673bfcfbc7b4f125aa0225a867f92e9e141ba2ad2c2d574c171af796fcf9ff697bfc6e6a38b8c5ae0f32613b16cdb9e3e0ffcc88ff1b825ef53d5ce0f7a745023cd0460e9602b763ba43a1d82f771f918cc13a0b01aa564afd045133c8dd4aa9ace647d4fa1e3db60d354eab3d681a7b1eac829c56df7129f1bd80cfac071d1f23fe8f8624770e0feebee7f6735f265a79369b297a39edefd1ae7883cbb7b08f9044c5d1b232dd6b03cab4efe7651112621f788886c25b71e19dc04de48752d6b7a15c553a832d4d2026e02f39f9c0fe7da82b6092f0b51e19c25efc83a2082b3b4fbe95756a643b501791a4411e4d3794c5de802be342c9eb576fac64516fc3478164753393db79d820f5d3b6ca5c1b2cebf04c776cdaf19c27092c885fb90348669123e6773afae621844bb1306d90533de8f07fc1e7c315b4ecb83cbb99113f2cc876f604aea5a49e9ee0e961645e6c6294f50d84832783d2125f94bbbaf3601208109b9112814042b0d254e47e15fc24d868bd42e93393dd87b4c522c1af98f21933f31defc509c1fca62fc8ccd4ff05bb0089b3714528a4f325dd5306594bdd7bf155e26a4f04df63c78c4a078407d7dc096e6521a83a49a9502eed8199663bb307dc11f2f8ef9f6de6bc7192ab512cfe38a4fdc5f2c391fa228cc4989700e5a431f76c1c6564b9b2412443042c50840d943b3a7a5ed90301758c338d29698b7047099ea74e897e25b7b3ee", 0x1000}, {&(0x7f0000001600)="730cfcfecbbf7b", 0x7}, {&(0x7f0000001640)="d5a440ca1577c963eaf89c3ad49f73de12a72a17e96b99626d9e402d2d579c2bd938831945535d04f1a706397480c0f7df67b71a272e7a23fe3568cebc3888ee45330f09cc9a695d5baaffaa2d2aa87a7a59c25acf0e03bf353ef3de2a9b37d8adcc534ef9116a8e112183f1f965f4199d827f05a1af657b184f757be5", 0x7d}, {&(0x7f00000016c0)="f44d74cb09a44614510240172b89c97d239cfce5931b85e87d9cab2c685455132ba4d6f3b46b4facd628ab1c2fdd89f5e6b948689f46e9d709e74e3ae4b66f6f19edd991b6aae1b323b0b30db3b0ab876d81b31e11ce9c0f1e6be45bee14dd3c7ef9d5d295711556c0c618a67d298df2e8da9d45f049e114f709641089ec49cc0a3f06c523d363c9477f2b18e0a1c02cb6ce653f47bda229f5daaebb5496fe6f62", 0xa1}, {&(0x7f0000001780)="5339292ed8d7037b7e45e9416cf885bbad0a32de2fd4e9cf24cbf06d5b31d77b62a892ef569111e1a7dc2e5ba5108f2a36b78ab5d4c884f0465534d402d912c5a235a027a6ac78edc54b1f8289dd39e3a236fa5b0e", 0x55}], 0xa, &(0x7f0000001a40)=[{0x30, 0x109, 0xf0000000, "fe1a2083a0478b56b2d3386b383b22d685689bfe9c2812de57f046a523"}, {0x38, 0x116, 0xd3, "ecf0d844b86a1912dfaf0c643dbb097af801925f1dca27d61344a6b2159fe2b9ad91"}, {0xb8, 0x10e, 0x0, "d064c1880c69ee498e6500d53460cd77a4c9c9015ada6d4d1fc425e7c1e0c7d2de21d55b36ac2bfce9f009fc5cff285930887bd2b21750d19c6d45451edb719ce2b87a66fc402c61d32061f7141f0d493f94a5b8dca5d746bd6a1351625581465fcd9f85af24387b79e7ce7b3859a2f0a7214a9d0982d6b48eed21518dc1a3590300e5daa4a1ff1b74ae7102598fba33467c2df1fc313c980dc5e7daa6456176f8bb0df6"}], 0x120}, 0x1) r4 = socket$kcm(0x10, 0x3, 0x10) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x2) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed2, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b03d25a806c8c6f94f90624fc601000127a0a000600093582c137153e37080c188001ac0f000300", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x1f00, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef436000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) 33m48.381818217s ago: executing program 4 (id=8288): socket$kcm(0x29, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="b40000000000000061147000000000009400000000000000e4f300568ca0c913f1cb7195a69f3f8e613ab50ff99999eab40d167afbe6958d80135fe71e6afce4c91b791163e14fa694478a5367a75713336c277d1d9cb2d543a76c83b865c49771bd9e262d50d2bc8d946e2702ac5492ccb3d6e12bb460a66d0688d1b3bf8062a1dadd431c73baabcf9d0a442c4f4223a796b30aef5ee8b69f882878a9ff66643d67999ccf35cef29397f26398a1da28c168630c34ff974cd673367a42ef2bb7810c851d"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffff8}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000000) r3 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r3, 0x29, 0x31, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x878d}, 0x8) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r10, &(0x7f0000000000)={0x0, 0x36, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff64}, 0x40000040) r12 = perf_event_open$cgroup(&(0x7f0000000240)={0x5, 0x80, 0x8e, 0x81, 0x2, 0xcd, 0x0, 0x100000000, 0x15001, 0xd, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x98, 0x2, @perf_config_ext={0x9bb2, 0xa7ea}, 0x8110, 0x9b08, 0xcabb, 0x0, 0x4, 0x5, 0xc, 0x0, 0xb01b, 0x0, 0x400}, r0, 0x5, r5, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r12, 0x40042408, r0) 33m48.129396012s ago: executing program 4 (id=8291): perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00fff300000071106b000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020700f804000000060004000500000000100000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2}, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x20e, 0xda, 0x0, &(0x7f00000004c0)="b9180bb76003070c009e40f086dd1fff310000003c0020010010ac14142ee0080001c699da153f0ae0e6e380f60115f683317585d74733e0ab4439f0f570ff155bc5f73ba3f8bb99a6e8ded1ce485cf058105cd981b42493481cd659416a2e10c9119664f36eb00b333c20c9ec0c222d644bdcb178c1cc53d6960fbb842d6a33dfcde3a1e1848135214baf139753866cadcbe3ce52505e992818cc452bee339d9ab076f484020eaa348a21d7911e4c44905256ec2cc54cca47a198b00c10aff62a4bed43a2ebcad92743fb22c593f28fd4bb7c703cde9cae0569", 0x0, 0x31, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="364000001a00913a09b51bcb3cc5a05f0a"], 0xfe33) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x2a}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x13, 0x0, 0x0, 0x9, 0x64891, 0xa396e2961d835ad9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x6}, 0x0, 0x35, 0x8, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5}, &(0x7f0000000040), &(0x7f0000000140)=r4}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r5, &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x3, 0x4, 0x8}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r6, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa, &(0x7f0000000380)=[0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x98, &(0x7f0000000400)=[{}], 0x8, 0x10, &(0x7f00000006c0), &(0x7f0000000700), 0x8, 0xd6, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_pid(r6, &(0x7f0000000000), 0x2a979d) 33m47.800413441s ago: executing program 4 (id=8293): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x20, &(0x7f00000002c0)={&(0x7f00000001c0)=""/182, 0xb6, 0x0, &(0x7f0000000280)=""/64, 0x40}}, 0x10) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x188, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = socket$kcm(0x2, 0x5, 0x84) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/time\x00') setsockopt$sock_attach_bpf(r0, 0x84, 0x2, &(0x7f0000000000), 0x8) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x4bde, r1}, 0x38) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00af, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="130300007600"], 0xfe33) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) 33m47.518804737s ago: executing program 4 (id=8297): socket$kcm(0x10, 0x2, 0x0) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="13000000100000000200"/20, @ANYRES32, @ANYRESHEX, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000e55d7d46da05000000004c6c00"/32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x4000}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000300000000000000b9b30000850000008600000087920400ffffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000086000000850000008a000000851000000800000018190000", @ANYRES32=r1, @ANYBLOB="00000000000000005a2000011000000095000000000000009500000000000000638482cb3b35bc8b5e458cea755f65cd2e2fb739d32ca5091eb017c051b364b097865ce6bb3090d0a454f6fb669bfc05a6a48779104c9ada2ff820bf84e08ba8760286553bf468c84a3c1e9821617e754e841873fb734179be020cbd46184c5f767e5e1eaef0844ff7ea"], &(0x7f0000000200)='GPL\x00', 0x3, 0x2, &(0x7f0000000340)=""/2, 0x40f00, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x5, 0x0, 0x2, 0x3eec4b6}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000400), &(0x7f00000005c0)=[{0x5, 0x3, 0x9, 0xb}, {0x2, 0x4, 0x4, 0xb}, {0x5, 0x1, 0xa, 0x1}, {0x1, 0x4, 0x7, 0x6}, {0x4, 0x2, 0x0, 0x3}, {0x5, 0x3, 0x9, 0xc}, {0x1, 0x2, 0x5, 0xc}, {0x1, 0x3, 0x10, 0x7}, {0x5, 0x2, 0x2, 0x1}], 0x10, 0x3b}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000bc0)="d80000001a0081044e81f782db4cb9041c1d0800fe007c05e8fe55a1080001000002000000000000080005007a010401a80016002000034004020000035c0461c9d67f4f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee501534eedba07d6e239b7a1ca16854695d1f79064485e75106300fa125f3d4ece1a0fa80983a3f1fdb3fefe626503fd22d1cc58463d0346a61fde641561ee9c851dc0c1cd706ff2f41398d8e7429039e7ff837d3150d78569e4243b96f7e5080199891344de62a210156a7b0a", 0xd8}], 0x1}, 0x4) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000280)={'wlan0\x00', @multicast}) perf_event_open(0x0, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffffff8, 0x3}, 0x0, 0x0, 0x2, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x746f2f51, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001c00810ce00f80ecdb4cb9f207c804a01f000000030006fb0a0002000a0ada1b40d80300000000000000", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 33m46.973439619s ago: executing program 4 (id=8301): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r2, &(0x7f0000000180)=r3, 0x12) 33m31.828112374s ago: executing program 33 (id=8301): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r2, &(0x7f0000000180)=r3, 0x12) 31m36.227182196s ago: executing program 1 (id=9224): socket$kcm(0x10, 0x2, 0x0) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="13000000100000000200"/20, @ANYRES32, @ANYRESHEX, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000e55d7d46da05000000004c6c00"/32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x4000}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000300000000000000b9b30000850000008600000087920400ffffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000086000000850000008a000000851000000800000018190000", @ANYRES32=r1, @ANYBLOB="00000000000000005a2000011000000095000000000000009500000000000000638482cb3b35bc8b5e458cea755f65cd2e2fb739d32ca5091eb017c051b364b097865ce6bb3090d0a454f6fb669bfc05a6a48779104c9ada2ff820bf84e08ba8760286553bf468c84a3c1e9821617e754e841873fb734179be020cbd46184c5f767e5e1eaef0844ff7ea05a14d206c8212375e0c36118c12ac6727d6bf"], &(0x7f0000000200)='GPL\x00', 0x3, 0x2, &(0x7f0000000340)=""/2, 0x40f00, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x5, 0x0, 0x2, 0x3eec4b6}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000400), &(0x7f00000005c0)=[{0x5, 0x3, 0x9, 0xb}, {0x2, 0x4, 0x4, 0xb}, {0x5, 0x1, 0xa, 0x1}, {0x4, 0x2, 0x0, 0x3}, {0x5, 0x3, 0x9, 0xc}, {0x1, 0x2, 0x5, 0xc}, {0x1, 0x3, 0x10, 0x7}, {0x5, 0x2, 0x2, 0x1}], 0x10, 0x3b}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000bc0)="d80000001a0081044e81f782db4cb9041c1d0800fe007c05e8fe55a1080001000002000000000000080005007a010401a80016002000034004020000035c0461c9d67f4f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee501534eedba07d6e239b7a1ca16854695d1f79064485e75106300fa125f3d4ece1a0fa80983a3f1fdb3fefe626503fd22d1cc58463d0346a61fde641561ee9c851dc0c1cd706ff2f41398d8e7429039e7ff837d3150d78569e4243b96f7e5080199891344de62a210156a7b0a", 0xd8}], 0x1}, 0x4) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000280)={'wlan0\x00', @multicast}) perf_event_open(0x0, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffffff8, 0x3}, 0x0, 0x0, 0x2, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x746f2f51, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001c00810ce00f80ecdb4cb9f207c804a01f000000030006fb0a0002000a0ada1b40d80300000000000000", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 31m35.65457909s ago: executing program 1 (id=9228): r0 = socket$kcm(0x2, 0x3, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="15000000060000000f0000000800000041000000", @ANYBLOB="b05e9fd0097dbd8c0150dccce18128bf920700b0bcdde54ea0d56e5e63c433b3fa12dcb42987516f930dce9c05be3da5a69f8331a59a831d42a1e3cf06e7fca00fc5d15c88e03ba669717512bedc22c8f8303eed5377c04a71ea390530082fb594078de7beb6", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRESHEX=r0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000181100002e9b72ffd1744eb82dbd2278bc9c6da2395c45258632cc9e1f674e295ce21fe42c82190203af7dab948b1f51661ad54c3b67540d7e210d40afe0894c637ddd99b668505d49d5", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) close(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x11, &(0x7f0000000580)=ANY=[@ANYBLOB="180000004a00000000000000020b000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018510000040000000000000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0xa, 0x65b2}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x7, 0x3ff, 0x4}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000280), &(0x7f00000003c0)=[{0x2, 0x4, 0xb, 0xc}, {0x5, 0x4, 0x8, 0x1}, {0x5, 0x4, 0x2000008, 0x9}, {0x5, 0x4, 0xd, 0xa}, {0x3, 0x1, 0x6, 0xc}, {0x0, 0x3, 0xd, 0x2}, {0x5, 0x4, 0xe, 0x4}, {0x2, 0x3, 0xe, 0xa}], 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000049c0)=ANY=[@ANYBLOB="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"/2694], 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000001140)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffffff8, 0x3}, 0x0, 0x0, 0x2, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f00000000c0)="ad57877f678615cea5858470ef9a9ce63f4388845b68d100479307c5d3db3216b7807206e76d92cff1013bd30a2e69ed768a65bc12b293c353bfd1a7c490b96aa3b3ee5d2f8197de941b151d00e13907b094edaa74621c59ccb3f96c04cacc0a81e98e6c72427f5a9775c5e4f2c8d78f12cdff12ebf387c786566c3de8cbf582d7", &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 31m35.422445033s ago: executing program 1 (id=9230): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r2, &(0x7f0000000180)=r3, 0x12) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80100, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x100904, 0x401, 0x25, 0x0, 0x1, 0x200, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000810000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5) write$cgroup_freezer_state(r1, 0x0, 0x0) 31m35.191885547s ago: executing program 1 (id=9233): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0x8, 0x0, 0x0) sendmsg(r0, &(0x7f0000001800)={&(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e24, @multicast2}, 0x3, 0x1, 0x3, 0x1}}, 0x80, &(0x7f0000001980)=[{&(0x7f00000001c0)="004ff2e02a4f9eb09b2678b70bbc467dd9343917bd6765866a2dfa3ac13ec80e7b3cfd52fbf56da8d6262e385d267ed5e0948c29c146c6f1c07427cc4e06997be12e3a71acca55c9b884addc0c7c3266880884b9a17d873934f4b57d28790b69d1c0d82947478bab217bb16cad2061b402b35452d4a2ecc581423cba1f3c26a45f5ad63dead62fd456e0ae3012", 0x8d}, {&(0x7f0000000140)="2a2e4ef08b337256e0b40c74abd6905416da0600138dbb8371d51cfbab6082dd986f0fa1f4f75a8adb9df4c3e9160e6f8de3eab06066d169a68e37db2e73537f", 0x40}, {&(0x7f00000002c0)="39fc3b7bfae3af5a8d013616b018360baaa46291abbc4be6829a15bc6628f1c55e5a3b55683c46bf592e7c753b5e7146816ca5dd806adb70c670f052e3061f4b59d1cd1969bd0182f44375e9c42b9f3b191eb954d6d19883659d36cbef0c8cc85ec964c2b44bfa456073d9b01e810bffb311fd3644a96b6e4939dadd1f2ecb9568180d73c90870e77b5cc48094835daf421f52acc0ab9489c6ba472aa4fcf037769a79a7dcd877c683d55377a90b3fcd80fb8fe94c8e7eceecfaa13f7794c9fed2213a18ddf79341184b002eb3a421ee76e850928a", 0xd5}, {&(0x7f00000003c0)="03e199bc07f06569ed54ee80d9c1", 0xe}, {&(0x7f0000000400)="534d076891e0c3bd297445b157af7695ace1b6ff852f21c9e20f250acf36c440a2279c3ca29aee04b0943bcaf1043de3681ce311a3a4e02481ad5c2b1c1911f688c1db", 0x43}, {&(0x7f0000000600)="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", 0x1000}, {&(0x7f0000001600)="730cfcfecbbf7b", 0x7}, {&(0x7f0000001640)="d5a440ca1577c963eaf89c3ad49f73de12a72a17e96b99626d9e402d2d579c2bd938831945535d04f1a706397480c0f7df67b71a272e7a23fe3568cebc3888ee45330f09cc9a695d5baaffaa2d2aa87a7a59c25acf0e03bf353ef3de2a9b37d8adcc534ef9116a8e112183f1f965f4199d827f05a1af657b184f757be5", 0x7d}, {&(0x7f00000016c0)="f44d74cb09a44614510240172b89c97d239cfce5931b85e87d9cab2c685455132ba4d6f3b46b4facd628ab1c2fdd89f5e6b948689f46e9d709e74e3ae4b66f6f19edd991b6aae1b323b0b30db3b0ab876d81b31e11ce9c0f1e6be45bee14dd3c7ef9d5d295711556c0c618a67d298df2e8da9d45f049e114f709641089ec49cc0a3f06c523d363c9477f2b18e0a1c02cb6ce653f47bda229f5daaebb5496fe6f62", 0xa1}, {&(0x7f0000001780)="5339292ed8d7037b7e45e9416cf885bbad0a32de2fd4e9cf24cbf06d5b31d77b62a892ef569111e1a7dc2e5ba5108f2a36b78ab5d4c884f0465534d402d912c5a235a027a6ac78edc54b1f8289dd39e3a236fa5b0e", 0x55}], 0xa, &(0x7f0000001a40)=[{0x30, 0x109, 0xf0000000, "fe1a2083a0478b56b2d3386b383b22d685689bfe9c2812de57f046a523"}, {0x38, 0x116, 0xd3, "ecf0d844b86a1912dfaf0c643dbb097af801925f1dca27d61344a6b2159fe2b9ad91"}, {0xb8, 0x10e, 0x0, "d064c1880c69ee498e6500d53460cd77a4c9c9015ada6d4d1fc425e7c1e0c7d2de21d55b36ac2bfce9f009fc5cff285930887bd2b21750d19c6d45451edb719ce2b87a66fc402c61d32061f7141f0d493f94a5b8dca5d746bd6a1351625581465fcd9f85af24387b79e7ce7b3859a2f0a7214a9d0982d6b48eed21518dc1a3590300e5daa4a1ff1b74ae7102598fba33467c2df1fc313c980dc5e7daa6456176f8bb0d"}], 0x120}, 0x1) r4 = socket$kcm(0x10, 0x3, 0x10) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x2) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed2, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b03d25a806c8c6f94f90624fc601000127a0a000600093582c137153e37080c188001ac0f000300", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x1f00, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef436000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) 31m34.876003995s ago: executing program 1 (id=9237): socket$kcm(0x10, 0x2, 0x0) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="13000000100000000200"/20, @ANYRES32, @ANYRESHEX, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000e55d7d46da05000000004c6c00"/32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x4000}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000300000000000000b9b30000850000008600000087920400ffffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000086000000850000008a000000851000000800000018190000", @ANYRES32=r1, @ANYBLOB="00000000000000005a2000011000000095000000000000009500000000000000638482cb3b35bc8b5e458cea755f65cd2e2fb739d32ca5091eb017c051b364b097865ce6bb3090d0a454f6fb669bfc05a6a48779104c9ada2ff820bf84e08ba8760286553bf468c84a3c1e9821617e754e841873fb734179be020cbd46184c5f767e5e1eaef0844ff7ea05a14d206c8212375e0c36118c12ac6727d6bf"], &(0x7f0000000200)='GPL\x00', 0x3, 0x2, &(0x7f0000000340)=""/2, 0x40f00, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x5, 0x0, 0x2, 0x3eec4b6}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000400), &(0x7f00000005c0)=[{0x5, 0x3, 0x9, 0xb}, {0x2, 0x4, 0x4, 0xb}, {0x1, 0x4, 0x7, 0x6}, {0x4, 0x2, 0x0, 0x3}, {0x5, 0x3, 0x9, 0xc}, {0x1, 0x2, 0x5, 0xc}, {0x1, 0x3, 0x10, 0x7}, {0x5, 0x2, 0x2, 0x1}], 0x10, 0x3b}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000bc0)="d80000001a0081044e81f782db4cb9041c1d0800fe007c05e8fe55a1080001000002000000000000080005007a010401a80016002000034004020000035c0461c9d67f4f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee501534eedba07d6e239b7a1ca16854695d1f79064485e75106300fa125f3d4ece1a0fa80983a3f1fdb3fefe626503fd22d1cc58463d0346a61fde641561ee9c851dc0c1cd706ff2f41398d8e7429039e7ff837d3150d78569e4243b96f7e5080199891344de62a210156a7b0a", 0xd8}], 0x1}, 0x4) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000280)={'wlan0\x00', @multicast}) perf_event_open(0x0, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffffff8, 0x3}, 0x0, 0x0, 0x2, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x746f2f51, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001c00810ce00f80ecdb4cb9f207c804a01f000000030006fb0a0002000a0ada1b40d80300000000000000", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 31m34.264358451s ago: executing program 1 (id=9241): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r2, &(0x7f0000000180)=r3, 0x12) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80100, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x100904, 0x401, 0x25, 0x0, 0x1, 0x200, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000810000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5) write$cgroup_freezer_state(r1, 0x0, 0x0) 31m19.154003204s ago: executing program 34 (id=9241): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r2, &(0x7f0000000180)=r3, 0x12) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80100, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x100904, 0x401, 0x25, 0x0, 0x1, 0x200, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000810000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5) write$cgroup_freezer_state(r1, 0x0, 0x0) 9.023871595s ago: executing program 3 (id=17342): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x8000, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x22, 0x2, 0x21) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x80044943, 0x0) r2 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="d5", 0x1}], 0x1}, 0x0) recvmsg(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000007c0)=""/239, 0xef}], 0x1, &(0x7f0000000640)=""/8, 0x8}, 0x61) sendmsg$kcm(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000700)}, {&(0x7f0000000880)="e99dc53580760a227a8e71f0f33600de3c86cd28bab2c9d0c7cf27129b381be0d79cd23cd25b553e9b666756a55ff59fbcd71c3f84f4c604d6340c60002b60f0c9352d0e43f968050d1c59750b04c5d4a600ffb4dc68bd0ca1510d10fe5fce1304c4f024cbf94485f3306e658b0f12fdbb27bc1da51f749d7cf4b7b87734f5e875018fdf44af10a3bba7fb73e1211a2210adb36277a4865287d1758f0eaea6a0051ad1470bad1ad3414588e4dbd5ced3e7ce8d7e0e5c77cf3410be06cc373f29c2b5a2d28c51", 0xc6}, {&(0x7f0000000980)="16f11fe4382831ab815426312315f882f2005de25716e721e94407748567aaae938c1c89cb388d1ddf43deca33f6eaea82bd08a8ae7161b45e6acc26c0f089603f7a2a6366ff63b9930bf44fa8f0978f05640c781541e4bc9a88f54cd0c4ea1a3777b825a6b059baa5000e09d213125cc318b0d788b65a7e43dd209418670397516e51229cb9541ef5de3e3b700a9e79e96ebcc579c91ca102062663672d33873c00ddfc0061141febffd30aa8fd14c69feb5b93e0893214196f5783d87efd69fa", 0xc1}, {&(0x7f0000000a80)="0babe01a9e9de6538e0dbab694e02de855a16ee9096d8384030c6d5eeb55ceb797936cc2a54a", 0x26}, {&(0x7f0000000ac0)="e2fda2fa3d623ebf2968bb21f41fd33f08a23d242d24778be72833442cf59b1e27b781a03195ade88e8ceabbc586486e2a0dded2fa22dbe6f7c527e6e05a28bbd44ceb5123eab84f4d383638ace1c3d7be436b50f1ad93ea6bcb1091de34b7bf1e5b25ed42499e411a4fb286449ba61dc367c5eac7b963a82654531a0b583e16b01ef1e3952565d2f5dfda82d8b13b227e0ee22175dcac5fe21233c8ad03bb1596a65b07f47c8d7a62", 0xa9}], 0x5, &(0x7f0000000c00)=[{0xf0, 0x117, 0x6011, "39b0f228d22e5fe6997b2ef590ba897f45093159f34b49dc5531765ae00786fb741647ade0e0bb941bd71009ec32ad2a476ee9be4aec4210aebf6bfb532e85ab9731b2c916d2412fd52e105fc87250bde590773f9a3f48dd8496f4dda4596c745c2ac32471a4acc1e35e7c1313b7c80b9e3a9d1e3c2bcfc0b2de546108d18186fce0f92dec08438e15917435ffc087223506c3b7bb3d3ba6f2542956bee5d3142e80b3636b858b9ee072160d2681c773c5d107ac75bfbc154659c547aa117990473e98227fdea6c05fb17e001ff09e6012bf1e60a2e4320c69919f2a1d8b1dc0"}, {0x68, 0x114, 0xc18, "e28ddd1c36fdd87a06a5dc238a90f7517734aa149f2a6577919d17522c79687442c6719bdeb10031a44271435c93decc1871e4fd88e751ed0cb34d73a6a0c77d7cc0da196af485e851ea5a0d0446cccf66fbc9cc49740f21"}], 0x158}, 0x20000001) r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x7, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8b34, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x7, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, r6}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x7, '\x00', r5, r6, 0x4, 0x0, 0x3}, 0x50) r7 = syz_clone(0x100000, &(0x7f0000000500)="4e72d8c9599afd6fe53afae25d5cd73a8a6e46680c2c9dd6dc541b095fcc49e0d8260d9378f4cf51e962b5029d7ff1bc1ccfe41af15422de009f5e39cdcdbc23f3d73c2a5bfebca4", 0x48, &(0x7f00000005c0), &(0x7f0000000640), &(0x7f0000000680)="7ea10e95d8b0a154328a3b23ceb7f739f50c624e03c412311d93a0357e1ae9dc87b21e183d590b237f18325df3ecd2e5acb568dcf2d0c7d37ba7e671667fafdaec551e6b379d6ca7695040342fc82127ab3fc76f16a0c4e06b11f25d1091ed9f") perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x9, 0xd, 0xfd, 0x6, 0x0, 0x40, 0x40200, 0xc, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_config_ext={0x47, 0x4}, 0x4, 0x0, 0xa7c2, 0x2, 0x2, 0x6, 0x8cec, 0x0, 0x5, 0x0, 0x7}, r7, 0x7, r0, 0xa) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0x600, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x84) write$cgroup_type(r9, &(0x7f0000000180), 0x40010) 7.641925195s ago: executing program 3 (id=17346): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2105, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x4, @perf_config_ext={0x3}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xa, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f00000001c0)="24fa7a4e837378dddc95f96464ae441feb7f42fee102dd21eda392c36a", &(0x7f0000000200)=""/13}, 0x20) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x7}, 0x108b84, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r2, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x10000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x22, 0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8110, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x400, 0x0, 0x0, 0x2, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x0, 0x1, 0x4}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x4, 0x10006}]}, 0x94) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030030000b12d25a80648c2594f90224fc60100c034002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x1d, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x19, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000016000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000b7e0f3435d781ab218f38455f7436191b8f989e728eeebd3351115ec775570110d50b7cd24d99faf989cf817a3871dca93a2d41bdac0bb92fb21c317b01e4213ee8f2b1e5a38b4b59675a571e969f0f71d3bb494fb636e6366bc8201487dc3f033f84a28c047d133ae6ee47192897c5850eb91c22cfe0336ebfa15afcec8aa58303c35dd488ad1f9d012ed", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000820000008500000005000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371600000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x23, 0xffffffffffffffff, 0x300) socketpair(0x22, 0x1, 0x5c30, &(0x7f0000000340)) 7.604473797s ago: executing program 2 (id=17348): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x20000006, 0x2, 0x0, 0x0, 0x0, 0x2007}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000002b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x200000076, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x0, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000200eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000) socket$kcm(0x10, 0x3, 0x10) r6 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r6, 0x29, 0x1a, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b000000ecd9968b4f3af4542e96a76b73fc51400000000000f1ffff040000000000", @ANYRES32=r5, @ANYRES64=r5, @ANYRES32=0x0, @ANYRESDEC=r2, @ANYBLOB="50000000010000000100000000000000e5306c07000000009479fd6822ad39fd2a3d76a6db1a5e31a8cbcd900471b45ff45c689888c99cee36410b263ccf5f147b37acb1946943f80d821fca7490e819c0af7502a7899a4faf3d1162f12d659fd087ddba01acbd600723e61f38e6974492a2dfdd4f551a83ac5373020350b3c7fd0d08087afdd8e00c855d1687e3e040ba7d20ef26919be4a5c8dfcc23365b1b5b4e736ca5"], 0x50) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)) socket$kcm(0xa, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000006400000064000000020000000000000000000003000000020300000001000000070000000000000000000003000000000200000001000000030000000a0000000000000100000000370061020700000000000007000000000400000000000008030000000600000000000008040000000000"], 0x0, 0x7e}, 0x28) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) close(0xffffffffffffffff) socket$kcm(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socket$kcm(0x10, 0x2, 0x0) 6.206406279s ago: executing program 5 (id=17349): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000fe6ce8ea600cc8fe8500000085000000550000009500000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80100, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x100904, 0x401, 0x25, 0x0, 0x1, 0x200, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x24, 0x800, 0x774, &(0x7f0000000380)) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000001340)=@hci={0x1f, 0x8e88, 0x47}, 0x80, 0x0}, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c012, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x101084, 0x10000, 0x0, 0x5, 0x7, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90324fc60100005000a000248053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="0600"}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0x5ae) r5 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x18410, 0x0, 0xfffffffe, 0x3, 0x100000}, 0x0, 0xffffffffffffffff, r5, 0x0) socketpair(0x15, 0x5, 0x0, &(0x7f0000000500)) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004025a9fff0000002e0000001126078f39b52d89f6fa0b83ff40c17ef57cec2d0f76a8c1829bec8355c379c44c32e54f8fe7ca6b82e3c3d34cd6daa3ebed0779fcb90acbb4199889ae9cda14dee23f5a698d09f0aa3a0d9a5e2423e77138f4b3bdd1c24d0cee4cdb9cbb6df138362de9f4774c461afb", @ANYRES32, @ANYBLOB="8700"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x2100, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r6}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_int(r8, &(0x7f0000000040), 0x1) 4.354410967s ago: executing program 5 (id=17350): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081", 0x7}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x33fe0) recvmsg(r0, &(0x7f0000000200)={&(0x7f0000000280)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000300)=""/195, 0xc3}], 0x1, &(0x7f0000000400)=""/112, 0x70}, 0xb797ba8dbc742ef1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x22029, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, @perf_bp={0x0}, 0x70, 0x0, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x5, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000007000000000000000000000001050000a2200000000000000001000085100000000000000002000000000000ff00000100da"], 0x0, 0x52}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000600000004000000000000070000000000000000000000010500000180"], 0x0, 0x52}, 0x28) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$kcm(0x29, 0x5, 0x0) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x80000000) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffffffffd8b, &(0x7f0000000180)=[{&(0x7f00000001c0)="2e00000010008188e6b62aa73f72cc9f0ba1f8480700000000000000000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x20000800) 4.353747406s ago: executing program 3 (id=17351): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x40000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)=r2}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r2, r3}, 0xc) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x17) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x1, r4}, 0x38) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@fallback=r4, 0x15, 0x1, 0x8, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x20, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x440, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x90}, 0x100) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x25}, 0x94) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8946, &(0x7f0000000080)) 4.309929159s ago: executing program 2 (id=17352): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="180bb2000000cd000000000000007fffff"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r0 = socket$kcm(0x2, 0x922000000001, 0x106) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x41, &(0x7f0000000040)=r3, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00f6e87b5040d44d1a735f9a75917df701000000000000"], &(0x7f0000001f80)=""/226, 0x18, 0x81, 0x2}, 0x20) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000800)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x6}, 0xffffffffffffffff, 0x0, r4, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x2, 0xbf22, 0x1}, 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={r3, 0x20, &(0x7f0000000180)={&(0x7f0000001a00)=""/216, 0xd8, 0x0, &(0x7f0000000600)=""/182, 0xb6}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=r6, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f2, &(0x7f0000000080)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r7, &(0x7f0000000140)={&(0x7f00000000c0)=@abs, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000200)=""/208, 0x100}, {&(0x7f0000000040)=""/27, 0x1b}, {&(0x7f0000000380)=""/101, 0x65}, {&(0x7f0000000880)=""/4083, 0x1000}, {&(0x7f0000000500)=""/213, 0xd5}, {&(0x7f0000001940)=""/132, 0x84}, {&(0x7f00000006c0)=""/154, 0x9a}], 0x7, &(0x7f0000001880)=[@cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}, 0x2022) 3.962503319s ago: executing program 5 (id=17353): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x8000, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x22, 0x2, 0x21) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x80044943, 0x0) r2 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="d5", 0x1}], 0x1}, 0x0) recvmsg(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000007c0)=""/239, 0xef}], 0x1, &(0x7f0000000640)=""/8, 0x8}, 0x61) sendmsg$kcm(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000700)}, {&(0x7f0000000880)="e99dc53580760a227a8e71f0f33600de3c86cd28bab2c9d0c7cf27129b381be0d79cd23cd25b553e9b666756a55ff59fbcd71c3f84f4c604d6340c60002b60f0c9352d0e43f968050d1c59750b04c5d4a600ffb4dc68bd0ca1510d10fe5fce1304c4f024cbf94485f3306e658b0f12fdbb27bc1da51f749d7cf4b7b87734f5e875018fdf44af10a3bba7fb73e1211a2210adb36277a4865287d1758f0eaea6a0051ad1470bad1ad3414588e4dbd5ced3e7ce8d7e0e5c77cf3410be06cc373f29c2b5a2d28c51", 0xc6}, {&(0x7f0000000980)="16f11fe4382831ab815426312315f882f2005de25716e721e94407748567aaae938c1c89cb388d1ddf43deca33f6eaea82bd08a8ae7161b45e6acc26c0f089603f7a2a6366ff63b9930bf44fa8f0978f05640c781541e4bc9a88f54cd0c4ea1a3777b825a6b059baa5000e09d213125cc318b0d788b65a7e43dd209418670397516e51229cb9541ef5de3e3b700a9e79e96ebcc579c91ca102062663672d33873c00ddfc0061141febffd30aa8fd14c69feb5b93e0893214196f5783d87efd69fa", 0xc1}, {&(0x7f0000000a80)="0babe01a9e9de6538e0dbab694e02de855a16ee9096d8384030c6d5eeb55ceb797936cc2a54a", 0x26}, {&(0x7f0000000ac0)="e2fda2fa3d623ebf2968bb21f41fd33f08a23d242d24778be72833442cf59b1e27b781a03195ade88e8ceabbc586486e2a0dded2fa22dbe6f7c527e6e05a28bbd44ceb5123eab84f4d383638ace1c3d7be436b50f1ad93ea6bcb1091de34b7bf1e5b25ed42499e411a4fb286449ba61dc367c5eac7b963a82654531a0b583e16b01ef1e3952565d2f5dfda82d8b13b227e0ee22175dcac5fe21233c8ad03bb1596a65b07f47c8d7a62", 0xa9}], 0x5, &(0x7f0000000c00)=[{0xf0, 0x117, 0x6011, "39b0f228d22e5fe6997b2ef590ba897f45093159f34b49dc5531765ae00786fb741647ade0e0bb941bd71009ec32ad2a476ee9be4aec4210aebf6bfb532e85ab9731b2c916d2412fd52e105fc87250bde590773f9a3f48dd8496f4dda4596c745c2ac32471a4acc1e35e7c1313b7c80b9e3a9d1e3c2bcfc0b2de546108d18186fce0f92dec08438e15917435ffc087223506c3b7bb3d3ba6f2542956bee5d3142e80b3636b858b9ee072160d2681c773c5d107ac75bfbc154659c547aa117990473e98227fdea6c05fb17e001ff09e6012bf1e60a2e4320c69919f2a1d8b1dc0"}, {0x68, 0x114, 0xc18, "e28ddd1c36fdd87a06a5dc238a90f7517734aa149f2a6577919d17522c79687442c6719bdeb10031a44271435c93decc1871e4fd88e751ed0cb34d73a6a0c77d7cc0da196af485e851ea5a0d0446cccf66fbc9cc49740f21"}], 0x158}, 0x20000001) r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x7, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8b34, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x7, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, r6}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x7, '\x00', r5, r6, 0x4, 0x0, 0x3}, 0x50) r7 = syz_clone(0x100000, &(0x7f0000000500)="4e72d8c9599afd6fe53afae25d5cd73a8a6e46680c2c9dd6dc541b095fcc49e0d8260d9378f4cf51e962b5029d7ff1bc1ccfe41af15422de009f5e39cdcdbc23f3d73c2a5bfebca4", 0x48, &(0x7f00000005c0), &(0x7f0000000640), &(0x7f0000000680)="7ea10e95d8b0a154328a3b23ceb7f739f50c624e03c412311d93a0357e1ae9dc87b21e183d590b237f18325df3ecd2e5acb568dcf2d0c7d37ba7e671667fafdaec551e6b379d6ca7695040342fc82127ab3fc76f16a0c4e06b11f25d1091ed9f") perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x9, 0xd, 0xfd, 0x6, 0x0, 0x40, 0x40200, 0xc, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_config_ext={0x47, 0x4}, 0x4, 0x0, 0xa7c2, 0x2, 0x2, 0x6, 0x8cec, 0x0, 0x5, 0x0, 0x7}, r7, 0x7, r0, 0xa) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0x600, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x84) write$cgroup_type(r9, &(0x7f0000000180), 0x40010) 3.95717206s ago: executing program 6 (id=17354): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 3.830685037s ago: executing program 2 (id=17355): socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000000)=@abs={0x1, 0x0, 0x40004e21}, 0x6e, 0x0, 0x0, 0x0, 0xd8, 0x8000000}, 0xaeaa7f3b92762c76) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'ipvlan1\x00', @random='\x00\x00\x00\x00\x00 '}) 3.666853996s ago: executing program 6 (id=17356): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x22}, [@ldst={0x6}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x22) socket$kcm(0x10, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffffff8, 0x3}, 0x0, 0x0, 0x2, 0xc}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0a00000003000000000000000c830000000000000000003b1fe9db0c94438b752109e48e9535468558fc2aeb18807008e7b064bafdf5443f5652dbc7fb5d391ae04a136423f5468cc810c2d6badd7e0f8d771e1fed296393bb0abbc80d022d6e1f34bf087a8f4259c81a678e137f31b89bfe330e19efc0ef4836e8e56e07c3eea28f1b36776c9b211a28cad0c9eb4ef5f824ce288aa9f5023d7c7623bd526763c64c7a0faabedceae9851a3d16406f512967274829ca7b714ea06831c5280093c45e0f96517c0cae214feb18ff84eb857bf9c4f077d824a7f62ab48a9038d9d9b286f6c1a2281b267a4c7a0faef35b71528af4", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000b80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000300000018000000", @ANYRES32, @ANYBLOB="0000000000000000950000000000000095"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x600}, 0x10}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x8000, '\x00', 0x0, r3, 0x4, 0x2, 0x1}, 0x50) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="8a0000000b000000040000000400000000000000afebfa9202b20946eec810b7e808bc", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00@\x00'/28], 0x50) socket$kcm(0x2, 0x3, 0x2) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="4c000000150097f07059ae08060c040002ff0f0300000000000001870182fa73a69d35a2cca8a308f7abca1b4e7d06a6bd7c493872f7d0375ed08a56041f000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r5, &(0x7f0000000500), &(0x7f0000000000)=""/7, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r2) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x40000000000, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x114301, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000330000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x840) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000019008111e0020f060d8107040a60090000bed7f95c0255a12a00090008000699e3ffffff14000500fe8081780c000567b8b7b940020000090a0016060000000000000000d67f6f9400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237ee4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b694138c9f1ac76efb42a9ecbee5de6ccd44242f4d643f6fd0f26187b51980dd6", 0xd8}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) 3.644342728s ago: executing program 2 (id=17357): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x2, 0x80, 0x5, 0xb, 0x99, 0x2, 0x0, 0x2, 0x84000, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000180), 0x4}, 0x10, 0x23, 0x1, 0x1, 0x8, 0x5, 0x4d2d, 0x0, 0xff, 0x0, 0x5}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0xf) r1 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x0, @dev, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_tracing={0x1a, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="2d700000fcffffff18540000030b00000000000000000000a402ba71941330940d1bfb535c9cbd0d352c6b3320b61f62f50379cbf639682d43d2fed187c8aeea1d1f135df2629ae13743134216fc13a7caa86d454f548f66ef9a8a5bbc3da536415f7d8e727a7a0d1cddae0fde3d2f5ca119ed22df182af7f49f0a7091241cb933743e65b7b877c2335f099c44963f19e957de0373af90560c24b224abe0a7582c8bf80a97dd5c6fcdc3"], &(0x7f0000000340)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x0, 0xf, 0x6a19, 0xfffffbff}, 0x10, 0x1bd23, 0xffffffffffffffff, 0x4, &(0x7f00000004c0)=[0x1], &(0x7f0000000500)=[{0x0, 0x2, 0x10, 0xc}, {0x5, 0x2, 0x0, 0x6}, {0x0, 0x2, 0x10, 0xa}, {0x2, 0x3, 0x1, 0x6}], 0x10, 0x7}, 0x94) socketpair(0x1, 0x1, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x26e1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000800000000005ad4", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x28) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000", @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000100008500000082"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000a80)={r6, 0x0, 0x0}, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000480)='syzkaller\x00'}, 0x94) r8 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x1, 0x2b4}, 0x0, 0x10000, 0x0, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000500eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(r8, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000700)={@fallback=r0, 0x36, 0x0, 0xa, &(0x7f0000000600)=[0x0], 0x1, 0x0, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0], 0x0}, 0x40) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080", @ANYRES32=r7], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000001040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000880)=ANY=[@ANYRES32=r0, @ANYRES32=r2, @ANYBLOB="1300000005000000", @ANYRES32, @ANYBLOB="2db184d79a9149d0e29b91a2fe016d72a5ddbd872685aceefd1d6d72c9df625414b2028f988cc67e055f81d5f0202a2d64940920c8cec094", @ANYRES32=r12, @ANYBLOB, @ANYRES64=r10], 0x20) r13 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000001004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 3.035054043s ago: executing program 6 (id=17358): r0 = socket$kcm(0x2, 0x3, 0x84) r1 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="15000000060000000f0000000800000041000000", @ANYBLOB="b05e9fd0097dbd8c0150dccce18128bf920700b0bcdde54ea0d56e5e63c433b3fa12dcb42987516f930dce9c05be3da5a69f8331a59a831d42a1e3cf06e7fca00fc5d15c88e03ba669717512bedc22c8f8303eed5377c04a71ea390530082fb594078de7beb67201fb9ec3297e2adc18f2e6ce44f298080f23927c1d599f6ffd2962a1c5c6", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000181100002e9b72ffd1744eb82dbd2278bc9c6da2395c45258632cc9e1f674e295ce21fe42c82190203af7dab948b1f51661ad54c3b67540d7e210d40afe0894c637ddd99b668505d49d5", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) socket$kcm(0x29, 0x5, 0x0) close(0x3) close(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x11, &(0x7f0000000580)=ANY=[@ANYBLOB="180000004a00000000000000020b000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018510000040000000000000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0xa, 0x65b2}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x7, 0x3ff, 0x4}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000280), &(0x7f00000003c0)=[{0x2, 0x4, 0xb, 0xc}, {0x5, 0x4, 0x8, 0x1}, {0x5, 0x4, 0x2000008, 0x9}, {0x5, 0x4, 0xd, 0xa}, {0x3, 0x1, 0x6, 0xc}, {0x0, 0x3, 0xd, 0x2}, {0x5, 0x4, 0xe, 0x4}, {0x2, 0x3, 0xe, 0xa}], 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000049c0)=ANY=[@ANYBLOB="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"/2694], 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000001140)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffffff8, 0x3}, 0x0, 0x0, 0x2, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0x1b, 0x16, 0x100b3, 0x7f, 0x0, 0xffffffffffffffff, 0x1}, 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100904, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r5}, &(0x7f00000001c0), &(0x7f0000000200)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r4, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 3.022085854s ago: executing program 3 (id=17359): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2105, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x4, @perf_config_ext={0x3}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xa, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f00000001c0)="24fa7a4e837378dddc95f96464ae441feb7f42fee102dd21eda392c36a", &(0x7f0000000200)=""/13}, 0x20) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x7}, 0x108b84, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r2, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x10000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x22, 0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8110, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x400, 0x0, 0x0, 0x2, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x0, 0x1, 0x4}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x4, 0x10006}]}, 0x94) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030030000b12d25a80648c2594f90224fc60100c034002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x1d, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x19, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000016000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000b7e0f3435d781ab218f38455f7436191b8f989e728eeebd3351115ec775570110d50b7cd24d99faf989cf817a3871dca93a2d41bdac0bb92fb21c317b01e4213ee8f2b1e5a38b4b59675a571e969f0f71d3bb494fb636e6366bc8201487dc3f033f84a28c047d133ae6ee47192897c5850eb91c22cfe0336ebfa15afcec8aa58303c35dd488ad1f9d012ed", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000820000008500000005000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371600000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x23, 0xffffffffffffffff, 0x300) socketpair(0x22, 0x1, 0x5c30, &(0x7f0000000340)) 2.940844929s ago: executing program 5 (id=17360): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x20000006, 0x2, 0x0, 0x0, 0x0, 0x2007}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000002b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x200000076, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x0, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000200eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000) r6 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r6, 0x29, 0x1a, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b000000ecd9968b4f3af4542e96a76b73fc51400000000000f1ffff040000000000", @ANYRES32=r5, @ANYRES64=r5, @ANYRES32=0x0, @ANYRESDEC=r2, @ANYBLOB="50000000010000000100000000000000e5306c07000000009479fd6822ad39fd2a3d76a6db1a5e31a8cbcd900471b45ff45c689888c99cee36410b263ccf5f147b37acb1946943f80d821fca7490e819c0af7502a7899a4faf3d1162f12d659fd087ddba01acbd600723e61f38e6974492a2dfdd4f551a83ac5373020350b3c7fd0d08087afdd8e00c855d1687e3e040ba7d20ef26919be4a5c8dfcc23365b1b5b4e736ca5"], 0x50) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)) socket$kcm(0xa, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000006400000064000000020000000000000000000003000000020300000001000000070000000000000000000003000000000200000001000000030000000a0000000000000100000000370061020700000000000007000000000400000000000008030000000600000000000008040000000000"], 0x0, 0x7e}, 0x28) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) close(0xffffffffffffffff) socket$kcm(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socket$kcm(0x10, 0x2, 0x0) 2.788342657s ago: executing program 6 (id=17361): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x2, 0x80, 0x5, 0xb, 0x99, 0x2, 0x0, 0x2, 0x84000, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000180), 0x4}, 0x10, 0x23, 0x1, 0x1, 0x8, 0x5, 0x4d2d, 0x0, 0xff, 0x0, 0x5}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0xf) r1 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x0, @dev, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_tracing={0x1a, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="2d700000fcffffff18540000030b00000000000000000000a402ba71941330940d1bfb535c9cbd0d352c6b3320b61f62f50379cbf639682d43d2fed187c8aeea1d1f135df2629ae13743134216fc13a7caa86d454f548f66ef9a8a5bbc3da536415f7d8e727a7a0d1cddae0fde3d2f5ca119ed22df182af7f49f0a7091241cb933743e65b7b877c2335f099c44963f19e957de0373af90560c24b224abe0a7582c8bf80a97dd5c6fcdc3"], &(0x7f0000000340)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x0, 0xf, 0x6a19, 0xfffffbff}, 0x10, 0x1bd23, 0xffffffffffffffff, 0x4, &(0x7f00000004c0)=[0x1], &(0x7f0000000500)=[{0x0, 0x2, 0x10, 0xc}, {0x5, 0x2, 0x0, 0x6}, {0x0, 0x2, 0x10, 0xa}, {0x2, 0x3, 0x1, 0x6}], 0x10, 0x7}, 0x94) socketpair(0x1, 0x1, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x26e1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000800000000005ad4", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x28) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000", @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000100008500000082"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000a80)={r6, 0x0, 0x0}, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000480)='syzkaller\x00'}, 0x94) r8 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x1, 0x2b4}, 0x0, 0x10000, 0x0, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000500eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(r8, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000700)={@fallback=r0, 0x36, 0x0, 0xa, &(0x7f0000000600)=[0x0], 0x1, 0x0, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0], 0x0}, 0x40) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080", @ANYRES32=r7], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000001040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000880)=ANY=[@ANYRES32=r0, @ANYRES32=r2, @ANYBLOB="1300000005000000", @ANYRES32, @ANYBLOB="2db184d79a9149d0e29b91a2fe016d72a5ddbd872685aceefd1d6d72c9df625414b2028f988cc67e055f81d5f0202a2d64940920c8cec094", @ANYRES32=r12, @ANYBLOB, @ANYRES64=r10], 0x20) r13 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000001004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 1.999198503s ago: executing program 2 (id=17362): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) (async) r1 = perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x80, 0x8, 0x80, 0x2, 0x2, 0x0, 0x7, 0x2000, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}, 0x400, 0x6, 0x6, 0x2, 0xfb7, 0xa, 0x3, 0x0, 0x7, 0x0, 0xb9}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x9) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x1, 0x9, 0x6, 0x0, 0x0, 0xc, 0x20230, 0xa, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3e5, 0x5, @perf_bp={&(0x7f0000000000), 0x2}, 0x8000, 0x101, 0x0, 0x2, 0x34fb, 0xfffffff7, 0xa, 0x0, 0x7, 0x0, 0x800000000000000}, r0, 0x0, r1, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x8, 0x4766, 0x1a3, 0x0, 0x48200, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x4}, 0x50) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001580)={0xffffffffffffffff, 0xe0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000012c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f0000001300)=[0x0], &(0x7f0000001340)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x57, &(0x7f0000001380)=[{}], 0x8, 0x10, &(0x7f00000013c0), &(0x7f0000001400), 0x8, 0xb1, 0x8, 0x8, &(0x7f0000001440)}}, 0x10) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001640)={0x3, 0x0}, 0x8) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001940)={0x1, 0x23, &(0x7f0000001680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x5}, {}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @map_idx={0x18, 0x2, 0x5, 0x0, 0xa}, @generic={0x8, 0x2, 0x0, 0x100, 0x2}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7}, @jmp={0x5, 0x1, 0xd, 0x3, 0xb, 0xfffffffffffffffc, 0x4}, @call={0x85, 0x0, 0x0, 0xbd}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000017c0)='GPL\x00', 0x6, 0x1a, &(0x7f0000001800)=""/26, 0x41100, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001840)={0x2, 0x8, 0x1, 0xfd6}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x9, 0x0, &(0x7f0000001880)=[{0x4, 0x5, 0x3, 0xc}, {0x5, 0x3, 0x10, 0x9}, {0x2, 0x2, 0x2, 0x3}, {0x1, 0x5, 0xb}, {0x4, 0x1, 0x10, 0xb}, {0x0, 0x5, 0x1, 0x8}, {0x5, 0x1}, {0x2, 0x1, 0xe, 0x2}, {0x1, 0x2, 0xc, 0x4}], 0x10, 0x1}, 0x94) (async) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001a00)={0x0, 0x6, 0x8}, 0xc) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001a40)={0x1b, 0x0, 0x0, 0x182b55d4, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x3}, 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001ac0)=@base={0x1e, 0x5ee57a03, 0x23fc, 0x1, 0x880, 0x1, 0x400, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x4}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001b80)={0xb, 0x8, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x1000, &(0x7f00000002c0)=""/4096, 0x41000, 0x1, '\x00', r3, @fallback=0x19, 0xffffffffffffffff, 0x8, &(0x7f00000015c0)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000001600)={0x2, 0x4, 0x5, 0x7fffffff}, 0x10, r4, r5, 0x0, &(0x7f0000001b40)=[r6, r7, 0xffffffffffffffff, r8], 0x0, 0x10, 0x3}, 0x94) (async) r10 = gettid() (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001d40)={@cgroup=r0, 0x36, 0x1, 0x5, &(0x7f0000001c40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000001c80)=[0x0], &(0x7f0000001cc0)=[0x0], &(0x7f0000001d00)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) (async) socketpair(0xf, 0x6, 0x7, &(0x7f0000001d80)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r11, 0x1, 0x32, &(0x7f0000001dc0)=r9, 0x4) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001f00)={r2, &(0x7f0000001e00)="7adaa3eb5f43ea24decdc185330c876f842675aae4b798fed6299eab506b92a4bc027ea973a8f4da87373d8239e88f", &(0x7f0000001e40)=""/132}, 0x20) openat$ppp(0xffffffffffffff9c, &(0x7f0000001f40), 0x400400, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000021c0)={0x18, 0xf, &(0x7f0000001f80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x3ba}, @ldst={0x0, 0x2, 0x4, 0x3, 0x9, 0xfffffffffffffffc, 0x10}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x1}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x1}]}, &(0x7f0000002000)='GPL\x00', 0x5, 0xe2, &(0x7f0000002040)=""/226, 0x41100, 0x48, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002140)={0x1, 0x1, 0x1000, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000002180)=[r7, r6, r8, r6, r7], 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000034c0)={r5, 0x0, 0xea, 0x1000, &(0x7f0000002280)="9ae3ee3beaad9102e6c11622ead3c0ad84fae689d617d5f7b2e16c645f86391d0a1cfb967416015ebe138d76951a7db1786dbc100bd3618efb5490764d1ac790536f489e526bd0222457328ef71afc4027f1c76c72f9621b6e5633e0428a3178363ee6a36e0c302e26012e84c57b826e4ee75a0c498c6a889e282686920215cc890277cdfc6a73e14c0961a406438ff63d620fd7e02052975d420a86c02299bdd6dea0d968fd1cc92703b2a6e03d9cf6526c854233de407d4846195714d72ad4ed9c01ee2a738065717ed5dfcfe07c54f287d4038a041dceb37f6fd700c87a029350d996f28b16bb1495", &(0x7f0000002380)=""/4096, 0x0, 0x0, 0x1d, 0xd3, &(0x7f0000003380)="e676a3b97b60c846f6ba77cc39704da032a16b76c3d67046de022ee710", &(0x7f00000033c0)="f383ab682b846c668e7c777cb002a45932cbf25c2ff063a64cef3d95a2036ae15f86c47321374a30ce7350acb1fb37fa2ff1a038cf4aa39f84a1e1144d100163237ed4e3dbf1335c4aed252e74083546bc945e432d01612ad49f78d0b6b9a693e70e064793f647adf493c31fe24e6049664f25106cd3a514c3230cf17e8e3598a4a48f50686f812ac4db65281b9086b889fb7d2e48ba0d256f73040ac1e9b5974229d6da1727100483c28853a162e760e1dc5b6505c716298c45e7fcfe0c9ef3ab1cd97603c811d722989853db70c5e130d485", 0x4}, 0x50) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000003540)=r4, 0x4) r12 = bpf$ITER_CREATE(0x21, &(0x7f0000003580), 0x8) write$cgroup_int(r12, &(0x7f00000035c0)=0x3, 0x12) (async) r13 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000003600), 0x4) r14 = bpf$ITER_CREATE(0x21, &(0x7f0000003640)={r13}, 0x8) syz_open_procfs$namespace(r10, &(0x7f0000003680)='ns/pid_for_children\x00') (async) r15 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003940)={0x11, 0xb, &(0x7f00000036c0)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7a}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_fd={0x18, 0x4, 0x1, 0x0, r8}], &(0x7f0000003740)='syzkaller\x00', 0x48b, 0x78, &(0x7f0000003780)=""/120, 0x41000, 0x77, '\x00', r3, 0x0, r12, 0x8, 0x0, 0x0, 0x10, &(0x7f0000003800)={0x1, 0x9, 0x401, 0x7}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000003840)=[r7], &(0x7f0000003880)=[{0x2, 0x2, 0x2, 0x1}, {0x0, 0x5, 0x0, 0x3}, {0x1, 0x4, 0x7, 0x9}, {0x5, 0x4, 0x0, 0x2}, {0x1, 0x4, 0x4, 0xc}, {0x5, 0x2, 0x8, 0x5}, {0x2, 0x1, 0x7, 0x3}, {0x5, 0x2, 0xf56, 0x9}, {0x5, 0x1, 0x7, 0xb}], 0x10, 0x6}, 0x94) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000003cc0)={r12, 0xe0, &(0x7f0000003bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000003a00)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000003a40)=[0x0, 0x0, 0x0], &(0x7f0000003a80)=[0x0, 0x0, 0x0], 0x0, 0x78, &(0x7f0000003ac0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000003b00), &(0x7f0000003b40), 0x8, 0xbf, 0x8, 0x8, &(0x7f0000003b80)}}, 0x10) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r12, 0x40082406, &(0x7f0000003d00)='(\x00') (async) ioctl$TUNSETIFF(r14, 0x400454ca, &(0x7f0000003d40)={'rose0\x00', 0x20}) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000003d80)=r15, 0x4) 1.189044121s ago: executing program 2 (id=17363): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x20000006, 0x2, 0x0, 0x0, 0x0, 0x2007}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000002b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x200000076, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x0, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000200eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000033000b1e87dad256094bc7c308920fd2", 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r7 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r7, 0x29, 0x1a, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b000000ecd9968b4f3af4542e96a76b73fc51400000000000f1ffff040000000000", @ANYRES32=r5, @ANYRES64=r5, @ANYRES32=0x0, @ANYRESDEC=r2, @ANYBLOB="50000000010000000100000000000000e5306c07000000009479fd6822ad39fd2a3d76a6db1a5e31a8cbcd900471b45ff45c689888c99cee36410b263ccf5f147b37acb1946943f80d821fca7490e819c0af7502a7899a4faf3d1162f12d659fd087ddba01acbd600723e61f38e6974492a2dfdd4f551a83ac5373020350b3c7fd0d08087afdd8e00c855d1687e3e040ba7d20ef26919be4a5c8dfcc23365b1b5b4e736ca5"], 0x50) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)) socket$kcm(0xa, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000006400000064000000020000000000000000000003000000020300000001000000070000000000000000000003000000000200000001000000030000000a0000000000000100000000370061020700000000000007000000000400000000000008030000000600000000000008040000000000"], 0x0, 0x7e}, 0x28) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) close(0xffffffffffffffff) socket$kcm(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socket$kcm(0x10, 0x2, 0x0) 1.177099182s ago: executing program 6 (id=17371): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x2, 0x80, 0x5, 0xb, 0x99, 0x2, 0x0, 0x2, 0x84000, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000180), 0x4}, 0x10, 0x23, 0x1, 0x1, 0x8, 0x5, 0x4d2d, 0x0, 0xff, 0x0, 0x5}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0xf) r1 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x0, @dev, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_tracing={0x1a, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="2d700000fcffffff18540000030b00000000000000000000a402ba71941330940d1bfb535c9cbd0d352c6b3320b61f62f50379cbf639682d43d2fed187c8aeea1d1f135df2629ae13743134216fc13a7caa86d454f548f66ef9a8a5bbc3da536415f7d8e727a7a0d1cddae0fde3d2f5ca119ed22df182af7f49f0a7091241cb933743e65b7b877c2335f099c44963f19e957de0373af90560c24b224abe0a7582c8bf80a97dd5c6fcdc3"], &(0x7f0000000340)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x0, 0xf, 0x6a19, 0xfffffbff}, 0x10, 0x1bd23, 0xffffffffffffffff, 0x4, &(0x7f00000004c0)=[0x1], &(0x7f0000000500)=[{0x0, 0x2, 0x10, 0xc}, {0x5, 0x2, 0x0, 0x6}, {0x0, 0x2, 0x10, 0xa}, {0x2, 0x3, 0x1, 0x6}], 0x10, 0x7}, 0x94) socketpair(0x1, 0x1, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x26e1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000800000000005ad4", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x28) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000", @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000100008500000082"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000a80)={r6, 0x0, 0x0}, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000480)='syzkaller\x00'}, 0x94) r8 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x1, 0x2b4}, 0x0, 0x10000, 0x0, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000500eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(r8, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000700)={@fallback=r0, 0x36, 0x0, 0xa, &(0x7f0000000600)=[0x0], 0x1, 0x0, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0], 0x0}, 0x40) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080", @ANYRES32=r7], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000001040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000880)=ANY=[@ANYRES32=r0, @ANYRES32=r2, @ANYBLOB="1300000005000000", @ANYRES32, @ANYBLOB="2db184d79a9149d0e29b91a2fe016d72a5ddbd872685aceefd1d6d72c9df625414b2028f988cc67e055f81d5f0202a2d64940920c8cec094", @ANYRES32=r12, @ANYBLOB, @ANYRES64=r10], 0x20) r13 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000001004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 882.906978ms ago: executing program 3 (id=17364): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 260.767395ms ago: executing program 5 (id=17365): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$unix(0xffffffffffffffff, 0x0, 0xaeaa7f3b92762c76) ioctl$SIOCSIFHWADDR(r0, 0x8946, &(0x7f0000000040)={'ipvlan1\x00', @random='\x00\x00\x00\x00\x00 '}) 37.017588ms ago: executing program 3 (id=17366): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x22}, [@ldst={0x6}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x22) socket$kcm(0x10, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffffff8, 0x3}, 0x0, 0x0, 0x2, 0xc}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0a00000003000000000000000c830000000000000000003b1fe9db0c94438b752109e48e9535468558fc2aeb18807008e7b064bafdf5443f5652dbc7fb5d391ae04a136423f5468cc810c2d6badd7e0f8d771e1fed296393bb0abbc80d022d6e1f34bf087a8f4259c81a678e137f31b89bfe330e19efc0ef4836e8e56e07c3eea28f1b36776c9b211a28cad0c9eb4ef5f824ce288aa9f5023d7c7623bd526763c64c7a0faabedceae9851a3d16406f512967274829ca7b714ea06831c5280093c45e0f96517c0cae214feb18ff84eb857bf9c4f077d824a7f62ab48a9038d9d9b286f6c1a2281b267a4c7a0faef35b71528af4", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000b80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000300000018000000", @ANYRES32, @ANYBLOB="0000000000000000950000000000000095"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x600}, 0x10}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x8000, '\x00', 0x0, r3, 0x4, 0x2, 0x1}, 0x50) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="8a0000000b000000040000000400000000000000afebfa9202b20946eec810b7e808bc", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00@\x00'/28], 0x50) socket$kcm(0x2, 0x3, 0x2) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="4c000000150097f07059ae08060c040002ff0f0300000000000001870182fa73a69d35a2cca8a308f7abca1b4e7d06a6bd7c493872f7d0375ed08a56041f000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r5, &(0x7f0000000500), &(0x7f0000000000)=""/7, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r2) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x40000000000, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x114301, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000330000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x840) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000019008111e0020f060d8107040a60090000bed7f95c0255a12a00090008000699e3ffffff14000500fe8081780c000567b8b7b940020000090a0016060000000000000000d67f6f9400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237ee4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b694138c9f1ac76efb42a9ecbee5de6ccd44242f4d643f6fd0f26187b51980dd6", 0xd8}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) 3.04357ms ago: executing program 6 (id=17367): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x40000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)=r2}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r2, r3}, 0xc) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x17) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x1, r4}, 0x38) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@fallback=r4, 0x15, 0x1, 0x8, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x20, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x440, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x90}, 0x100) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x25}, 0x94) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8946, &(0x7f0000000080)) 0s ago: executing program 5 (id=17368): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018030000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00000000000000000000000900000000000000000000000900000000000000000000000a02"], 0x0, 0x96}, 0x28) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0xa2532, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) getpid() perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f903", 0x11}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x51}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) kernel console output (not intermixed with test programs): 21035] ? ksys_write+0x1c4/0x260 [ 3153.961793][T21035] ? __fget_files+0x28/0x4b0 [ 3153.966442][T21035] ? __fget_files+0x28/0x4b0 [ 3153.971131][T21035] security_file_ioctl+0x70/0xa0 [ 3153.976143][T21035] __se_sys_ioctl+0x48/0x170 [ 3153.980805][T21035] do_syscall_64+0x55/0xa0 [ 3153.985298][T21035] ? clear_bhb_loop+0x40/0x90 [ 3153.990036][T21035] ? clear_bhb_loop+0x40/0x90 [ 3153.994766][T21035] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3154.000707][T21035] RIP: 0033:0x7fa436b9aeb9 [ 3154.005170][T21035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3154.024821][T21035] RSP: 002b:00007fa437a65028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3154.033302][T21035] RAX: ffffffffffffffda RBX: 00007fa436e15fa0 RCX: 00007fa436b9aeb9 [ 3154.041333][T21035] RDX: 0000200000000080 RSI: 0000000000008b06 RDI: 0000000000000006 [ 3154.049358][T21035] RBP: 00007fa437a65090 R08: 0000000000000000 R09: 0000000000000000 [ 3154.057407][T21035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3154.065432][T21035] R13: 00007fa436e16038 R14: 00007fa436e15fa0 R15: 00007ffdf1f780d8 [ 3154.073498][T21035] [ 3154.088888][T21035] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3154.358456][T21041] netlink: 'syz.2.16232': attribute type 10 has an invalid length. [ 3154.646080][T21041] team0: Device veth1_macvtap failed to register rx_handler [ 3154.879773][T21047] netlink: 'syz.5.16238': attribute type 10 has an invalid length. [ 3154.932460][T21047] netlink: 40 bytes leftover after parsing attributes in process `syz.5.16238'. [ 3154.962510][T21050] netlink: 144 bytes leftover after parsing attributes in process `syz.5.16238'. [ 3155.708579][T21065] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.16237'. [ 3156.139753][T21069] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.16240'. [ 3156.236764][T21069] netlink: 21068 bytes leftover after parsing attributes in process `syz.3.16240'. [ 3156.471502][T21076] netlink: 'syz.3.16243': attribute type 10 has an invalid length. [ 3156.594139][T21076] team0: Device veth1_macvtap failed to register rx_handler [ 3156.773442][T21081] netlink: 'syz.2.16245': attribute type 10 has an invalid length. [ 3156.815828][T21081] netlink: 40 bytes leftover after parsing attributes in process `syz.2.16245'. [ 3156.847059][T21085] netlink: 144 bytes leftover after parsing attributes in process `syz.2.16245'. [ 3156.969862][T21082] netlink: 'syz.5.16244': attribute type 10 has an invalid length. [ 3157.710514][T21105] netlink: 'syz.2.16256': attribute type 39 has an invalid length. [ 3158.257870][T21116] netlink: 'syz.6.16258': attribute type 10 has an invalid length. [ 3158.297521][T21116] __nla_validate_parse: 3 callbacks suppressed [ 3158.297539][T21116] netlink: 40 bytes leftover after parsing attributes in process `syz.6.16258'. [ 3158.377291][T21116] netlink: 144 bytes leftover after parsing attributes in process `syz.6.16258'. [ 3158.460213][T21013] delete_channel: no stack [ 3159.219734][T21130] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.16265'. [ 3159.268282][T21130] netlink: 21068 bytes leftover after parsing attributes in process `syz.3.16265'. [ 3159.960760][T21142] netlink: 'syz.2.16270': attribute type 10 has an invalid length. [ 3160.005254][T21142] netlink: 40 bytes leftover after parsing attributes in process `syz.2.16270'. [ 3160.045220][T21143] netlink: 144 bytes leftover after parsing attributes in process `syz.2.16270'. [ 3160.418342][T21147] netlink: 'syz.5.16272': attribute type 39 has an invalid length. [ 3161.119407][T21163] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.16277'. [ 3161.139469][T21162] netlink: 'syz.2.16276': attribute type 10 has an invalid length. [ 3161.176743][T21163] netlink: 21068 bytes leftover after parsing attributes in process `syz.3.16277'. [ 3161.693565][T21172] netlink: 'syz.3.16282': attribute type 10 has an invalid length. [ 3161.772300][T21172] netlink: 40 bytes leftover after parsing attributes in process `syz.3.16282'. [ 3161.860152][T21175] netlink: 144 bytes leftover after parsing attributes in process `syz.3.16282'. [ 3162.640134][T21087] delete_channel: no stack [ 3162.780767][T21192] netlink: 'syz.2.16289': attribute type 39 has an invalid length. [ 3163.313242][T21203] netlink: 'syz.6.16294': attribute type 10 has an invalid length. [ 3163.404587][T21205] netlink: 'syz.5.16295': attribute type 10 has an invalid length. [ 3163.467087][T21205] __nla_validate_parse: 2 callbacks suppressed [ 3163.467108][T21205] netlink: 40 bytes leftover after parsing attributes in process `syz.5.16295'. [ 3163.597559][T21205] netlink: 144 bytes leftover after parsing attributes in process `syz.5.16295'. [ 3164.412325][T21225] netlink: 121460 bytes leftover after parsing attributes in process `syz.6.16302'. [ 3164.453351][T21225] netlink: 21068 bytes leftover after parsing attributes in process `syz.6.16302'. [ 3164.568187][T21228] netlink: 'syz.2.16304': attribute type 39 has an invalid length. [ 3164.958290][T21232] netlink: 'syz.3.16305': attribute type 10 has an invalid length. [ 3165.111556][T21232] team0: Port device netdevsim0 added [ 3165.226885][T21239] netlink: 'syz.5.16307': attribute type 10 has an invalid length. [ 3165.281754][T21239] team0: Device veth1_macvtap failed to register rx_handler [ 3165.418034][T21243] netlink: 'syz.2.16308': attribute type 10 has an invalid length. [ 3165.465628][T21243] netlink: 40 bytes leftover after parsing attributes in process `syz.2.16308'. [ 3165.537601][T21243] netlink: 144 bytes leftover after parsing attributes in process `syz.2.16308'. [ 3165.830376][T21250] netlink: 'syz.3.16311': attribute type 10 has an invalid length. [ 3166.098521][T21250] team0: Device veth1_macvtap failed to register rx_handler [ 3166.700163][T21263] netlink: 121460 bytes leftover after parsing attributes in process `syz.6.16314'. [ 3166.747435][T21263] netlink: 21068 bytes leftover after parsing attributes in process `syz.6.16314'. [ 3166.879746][T21164] delete_channel: no stack [ 3167.135641][T21274] netlink: 'syz.6.16319': attribute type 7 has an invalid length. [ 3167.189345][T21271] netlink: 'syz.3.16318': attribute type 10 has an invalid length. [ 3167.423563][T21271] team0: Device veth1_macvtap failed to register rx_handler [ 3167.661619][T21274] netlink: 'syz.6.16319': attribute type 21 has an invalid length. [ 3167.715475][T21274] netlink: 156 bytes leftover after parsing attributes in process `syz.6.16319'. [ 3167.801758][T21281] netlink: 'syz.2.16321': attribute type 10 has an invalid length. [ 3167.822359][T21281] netlink: 40 bytes leftover after parsing attributes in process `syz.2.16321'. [ 3168.163308][T21290] FAULT_INJECTION: forcing a failure. [ 3168.163308][T21290] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3168.235501][T21290] CPU: 1 PID: 21290 Comm: syz.5.16323 Not tainted syzkaller #0 [ 3168.243125][T21290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 3168.253213][T21290] Call Trace: [ 3168.256530][T21290] [ 3168.259496][T21290] dump_stack_lvl+0x18c/0x250 [ 3168.264218][T21290] ? show_regs_print_info+0x20/0x20 [ 3168.269460][T21290] ? load_image+0x400/0x400 [ 3168.274076][T21290] ? __lock_acquire+0x7d40/0x7d40 [ 3168.279180][T21290] ? __virt_addr_valid+0x18c/0x540 [ 3168.284351][T21290] should_fail_ex+0x39d/0x4d0 [ 3168.289075][T21290] _copy_from_user+0x2f/0xe0 [ 3168.293707][T21290] bpf_test_init+0xde/0x140 [ 3168.298254][T21290] bpf_prog_test_run_xdp+0x4d1/0x10e0 [ 3168.303778][T21290] ? dev_put+0x80/0x80 [ 3168.307900][T21290] ? dev_put+0x80/0x80 [ 3168.312005][T21290] bpf_prog_test_run+0x321/0x390 [ 3168.316990][T21290] __sys_bpf+0x49d/0x890 [ 3168.321259][T21290] ? bpf_link_show_fdinfo+0x390/0x390 [ 3168.326695][T21290] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3168.332876][T21290] __x64_sys_bpf+0x7c/0x90 [ 3168.337316][T21290] do_syscall_64+0x55/0xa0 [ 3168.341750][T21290] ? clear_bhb_loop+0x40/0x90 [ 3168.346445][T21290] ? clear_bhb_loop+0x40/0x90 [ 3168.351171][T21290] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3168.357102][T21290] RIP: 0033:0x7f7938b9aeb9 [ 3168.361545][T21290] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3168.381264][T21290] RSP: 002b:00007f7939b24028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3168.389718][T21290] RAX: ffffffffffffffda RBX: 00007f7938e15fa0 RCX: 00007f7938b9aeb9 [ 3168.397708][T21290] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 3168.405708][T21290] RBP: 00007f7939b24090 R08: 0000000000000000 R09: 0000000000000000 [ 3168.413727][T21290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3168.421734][T21290] R13: 00007f7938e16038 R14: 00007f7938e15fa0 R15: 00007ffde6b63c28 [ 3168.429762][T21290] [ 3168.666684][T21296] netlink: 'syz.2.16325': attribute type 10 has an invalid length. [ 3168.783503][T21296] team0: Device veth1_macvtap failed to register rx_handler [ 3168.863635][T21303] __nla_validate_parse: 1 callbacks suppressed [ 3168.863653][T21303] netlink: 121460 bytes leftover after parsing attributes in process `syz.5.16327'. [ 3169.026792][T21305] netlink: 'syz.3.16328': attribute type 39 has an invalid length. [ 3169.075510][T21303] netlink: 21068 bytes leftover after parsing attributes in process `syz.5.16327'. [ 3169.526683][T21313] netlink: 'syz.5.16330': attribute type 39 has an invalid length. [ 3169.624466][T21317] team0: Device veth1_macvtap failed to register rx_handler [ 3169.671432][T21206] delete_channel: no stack [ 3170.493851][T21329] syz.6.16334 (21329) used obsolete PPPIOCDETACH ioctl [ 3171.352242][T15061] Bluetooth: hci5: command 0x0406 tx timeout [ 3171.544960][T21345] validate_nla: 1 callbacks suppressed [ 3171.544997][T21345] netlink: 'syz.3.16343': attribute type 10 has an invalid length. [ 3171.657027][T21345] team0: Device veth1_macvtap failed to register rx_handler [ 3171.817979][T21352] netlink: 'syz.5.16341': attribute type 10 has an invalid length. [ 3171.889947][T21352] team0: Device veth1_macvtap failed to register rx_handler [ 3172.200320][T21362] netlink: 'syz.3.16345': attribute type 10 has an invalid length. [ 3172.245620][T21362] netlink: 40 bytes leftover after parsing attributes in process `syz.3.16345'. [ 3172.282216][T21360] netlink: 144 bytes leftover after parsing attributes in process `syz.3.16345'. [ 3173.139546][T21380] netlink: 'syz.2.16353': attribute type 10 has an invalid length. [ 3173.271706][T21380] team0: Device veth1_macvtap failed to register rx_handler [ 3173.382989][T21375] netlink: 'syz.5.16349': attribute type 10 has an invalid length. [ 3173.666971][T21389] netlink: 'syz.2.16356': attribute type 39 has an invalid length. [ 3174.704774][T21408] netlink: 'syz.3.16364': attribute type 10 has an invalid length. [ 3174.756285][T21408] team0: Device veth1_macvtap failed to register rx_handler [ 3175.031618][T21416] FAULT_INJECTION: forcing a failure. [ 3175.031618][T21416] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3175.066470][T21416] CPU: 1 PID: 21416 Comm: syz.3.16367 Not tainted syzkaller #0 [ 3175.074099][T21416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 3175.084203][T21416] Call Trace: [ 3175.087527][T21416] [ 3175.090486][T21416] dump_stack_lvl+0x18c/0x250 [ 3175.095215][T21416] ? show_regs_print_info+0x20/0x20 [ 3175.100492][T21416] ? load_image+0x400/0x400 [ 3175.105036][T21416] ? __might_fault+0xaa/0x120 [ 3175.109751][T21416] ? __lock_acquire+0x7d40/0x7d40 [ 3175.114859][T21416] should_fail_ex+0x39d/0x4d0 [ 3175.119600][T21416] _copy_from_user+0x2f/0xe0 [ 3175.124234][T21416] ___sys_sendmsg+0x1c7/0x360 [ 3175.128945][T21416] ? lockdep_hardirqs_on+0x98/0x150 [ 3175.134187][T21416] ? __sys_sendmsg+0x2a0/0x2a0 [ 3175.139017][T21416] ? __lock_acquire+0x7d40/0x7d40 [ 3175.144098][T21416] __se_sys_sendmsg+0x1c2/0x2b0 [ 3175.148983][T21416] ? __x64_sys_sendmsg+0x80/0x80 [ 3175.153977][T21416] ? lockdep_hardirqs_on+0x98/0x150 [ 3175.159246][T21416] do_syscall_64+0x55/0xa0 [ 3175.163723][T21416] ? clear_bhb_loop+0x40/0x90 [ 3175.168445][T21416] ? clear_bhb_loop+0x40/0x90 [ 3175.173162][T21416] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3175.179086][T21416] RIP: 0033:0x7f900079aeb9 [ 3175.183531][T21416] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3175.203163][T21416] RSP: 002b:00007f9001579028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3175.211597][T21416] RAX: ffffffffffffffda RBX: 00007f9000a15fa0 RCX: 00007f900079aeb9 [ 3175.219598][T21416] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 3175.227597][T21416] RBP: 00007f9001579090 R08: 0000000000000000 R09: 0000000000000000 [ 3175.235590][T21416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3175.243579][T21416] R13: 00007f9000a16038 R14: 00007f9000a15fa0 R15: 00007fff8f4232d8 [ 3175.251583][T21416] [ 3175.468968][T21422] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.16370'. [ 3175.498596][T21422] netlink: 22856 bytes leftover after parsing attributes in process `syz.2.16370'. [ 3175.593812][T21427] netlink: 'syz.6.16369': attribute type 10 has an invalid length. [ 3176.090725][T21435] netlink: 'syz.5.16375': attribute type 10 has an invalid length. [ 3176.153608][T21435] team0: Device veth1_macvtap failed to register rx_handler [ 3176.887717][T21442] netlink: 'syz.6.16377': attribute type 10 has an invalid length. [ 3177.087071][T21450] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 3177.099072][T21450] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 3177.108848][T21450] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 3177.110606][T21442] team0: Device veth1_macvtap failed to register rx_handler [ 3177.148349][T21450] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 3177.163446][T21450] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 3177.171221][T21450] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 3177.587754][T21453] netlink: 'syz.5.16380': attribute type 39 has an invalid length. [ 3177.948882][ T7724] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3178.075736][T21456] netlink: 'syz.2.16381': attribute type 39 has an invalid length. [ 3178.158620][T21458] netlink: 121460 bytes leftover after parsing attributes in process `syz.6.16382'. [ 3178.513494][T21378] delete_channel: no stack [ 3178.598490][ T7724] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3178.629708][T21458] netlink: 22856 bytes leftover after parsing attributes in process `syz.6.16382'. [ 3178.920822][ T7724] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3179.223035][ T7724] team0: Port device netdevsim0 removed [ 3179.254696][ T7724] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3179.265455][T12362] Bluetooth: hci3: command tx timeout [ 3179.348406][T21472] netlink: 'syz.6.16387': attribute type 10 has an invalid length. [ 3179.390680][T21472] team0: Device veth1_macvtap failed to register rx_handler [ 3179.514670][T21471] netlink: 'syz.5.16386': attribute type 10 has an invalid length. [ 3179.591223][T21449] chnl_net:caif_netlink_parms(): no params data found [ 3179.931499][T21449] bridge0: port 1(bridge_slave_0) entered blocking state [ 3179.961679][T21449] bridge0: port 1(bridge_slave_0) entered disabled state [ 3179.989496][T21449] bridge_slave_0: entered allmulticast mode [ 3180.014585][T21449] bridge_slave_0: entered promiscuous mode [ 3180.036570][T21449] bridge0: port 2(bridge_slave_1) entered blocking state [ 3180.095347][T21449] bridge0: port 2(bridge_slave_1) entered disabled state [ 3180.102679][T21449] bridge_slave_1: entered allmulticast mode [ 3180.133605][T21449] bridge_slave_1: entered promiscuous mode [ 3180.211548][T21489] netlink: 'syz.2.16391': attribute type 39 has an invalid length. [ 3180.324923][T21449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3180.341664][T21426] delete_channel: no stack [ 3180.365607][T21493] pimreg0: tun_chr_ioctl cmd 1074025681 [ 3180.388875][T21449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3180.414450][T21495] pimreg0: tun_chr_ioctl cmd 1074025681 [ 3180.589298][T21449] team0: Port device team_slave_0 added [ 3180.612560][T21449] team0: Port device team_slave_1 added [ 3180.757054][T21449] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3180.795258][T21449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3180.915363][T21449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3180.965771][T21449] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3180.972828][T21449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3181.086419][T21449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3181.345649][T12362] Bluetooth: hci3: command tx timeout [ 3181.634033][T21449] hsr_slave_0: entered promiscuous mode [ 3181.680379][T21449] hsr_slave_1: entered promiscuous mode [ 3181.992674][ T7724] tipc: Left network mode [ 3182.205755][T21514] ÿ: renamed from bond_slave_0 (while UP) [ 3182.539126][T21518] netlink: 'syz.5.16401': attribute type 39 has an invalid length. [ 3183.425541][T12362] Bluetooth: hci3: command tx timeout [ 3183.583772][T21539] netlink: 'syz.2.16404': attribute type 10 has an invalid length. [ 3183.684994][T21539] team0: Device veth1_macvtap failed to register rx_handler [ 3184.037663][T21554] netlink: 121460 bytes leftover after parsing attributes in process `syz.5.16408'. [ 3184.264998][T21554] netlink: 22856 bytes leftover after parsing attributes in process `syz.5.16408'. [ 3184.346740][T21475] delete_channel: no stack [ 3184.905028][T21449] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 3185.040177][T21449] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 3185.061921][T21449] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 3185.082468][T21449] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 3185.313857][T21582] netlink: 'syz.2.16415': attribute type 10 has an invalid length. [ 3185.437062][T21582] team0: Device veth1_macvtap failed to register rx_handler [ 3185.505602][T12362] Bluetooth: hci3: command tx timeout [ 3185.616111][T21584] netlink: 'syz.6.16414': attribute type 39 has an invalid length. [ 3185.833950][T21592] netlink: 60 bytes leftover after parsing attributes in process `syz.2.16416'. [ 3186.110044][T21592] netlink: 60 bytes leftover after parsing attributes in process `syz.2.16416'. [ 3186.139274][T21593] netlink: 60 bytes leftover after parsing attributes in process `syz.2.16416'. [ 3186.225085][T21594] netlink: 60 bytes leftover after parsing attributes in process `syz.2.16416'. [ 3186.486839][T21600] netlink: 'syz.2.16418': attribute type 39 has an invalid length. [ 3186.651353][ T7724] hsr0: left allmulticast mode [ 3186.682401][ T7724] hsr_slave_0: left allmulticast mode [ 3186.705799][ T7724] hsr_slave_1: left allmulticast mode [ 3186.722604][ T7724] hsr0: left promiscuous mode [ 3186.737693][ T7724] nr0: port 1(hsr0) entered disabled state [ 3186.786801][ T7724] hsr_slave_0: left promiscuous mode [ 3186.816406][ T7724] hsr_slave_1: left promiscuous mode [ 3186.856015][ T7724] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3186.868041][ T7724] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3186.892237][ T7724] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3186.912844][ T7724] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3186.928516][ T7724] bridge0: port 3(batadv0) entered disabled state [ 3186.947149][ T7724] bridge_slave_1: left allmulticast mode [ 3186.952876][ T7724] bridge_slave_1: left promiscuous mode [ 3186.965536][ T7724] bridge0: port 2(bridge_slave_1) entered disabled state [ 3186.981573][ T7724] bridge_slave_0: left allmulticast mode [ 3186.988119][ T7724] bridge_slave_0: left promiscuous mode [ 3186.993931][ T7724] bridge0: port 1(bridge_slave_0) entered disabled state [ 3187.014740][T21619] netlink: 121460 bytes leftover after parsing attributes in process `syz.6.16422'. [ 3187.068604][ T7724] veth0_macvtap: left promiscuous mode [ 3187.074408][ T7724] veth1_vlan: left promiscuous mode [ 3187.093473][ T7724] veth0_vlan: left promiscuous mode [ 3188.568859][ T7724] team0 (unregistering): Port device team_slave_1 removed [ 3188.675012][ T7724] team0 (unregistering): Port device team_slave_0 removed [ 3188.744139][ T7724] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3188.808124][ T7724] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3189.170359][T21621] delete_channel: no stack [ 3189.274559][ T7724] team0 (unregistering): Port device bond0 removed [ 3189.308623][ T7724] bond0 (unregistering): Released all slaves [ 3189.425755][T21619] netlink: 22856 bytes leftover after parsing attributes in process `syz.6.16422'. [ 3189.447018][T21620] netlink: 'syz.2.16423': attribute type 10 has an invalid length. [ 3189.529054][T21449] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3189.620794][T21449] 8021q: adding VLAN 0 to HW filter on device team0 [ 3189.662154][ T7727] bridge0: port 1(bridge_slave_0) entered blocking state [ 3189.669429][ T7727] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3189.721930][ T7727] bridge0: port 2(bridge_slave_1) entered blocking state [ 3189.729204][ T7727] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3189.768055][T21642] netlink: 'syz.5.16424': attribute type 10 has an invalid length. [ 3189.870317][T21642] team0: Device veth1_macvtap failed to register rx_handler [ 3190.683916][T21449] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3190.817106][T21449] veth0_vlan: entered promiscuous mode [ 3190.860408][T21449] veth1_vlan: entered promiscuous mode [ 3190.939329][T21449] veth0_macvtap: entered promiscuous mode [ 3190.958380][T21449] veth1_macvtap: entered promiscuous mode [ 3190.989129][T21449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3191.005153][T21449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3191.015490][T21449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3191.041236][T21449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3191.055750][T21449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3191.075173][T21449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3191.085036][T21449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3191.100511][T21449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3191.110618][T21449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3191.135243][T21449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3191.156772][T21449] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3191.168602][T21449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3191.190566][T21449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3191.204586][T21449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3191.221797][T21449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3191.231803][T21449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3191.249867][T21449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3191.260962][T21449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3191.280121][T21449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3191.293540][T21449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3191.311599][T21449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3191.340254][T21449] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3191.374919][T21449] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3191.398734][T21449] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3191.418132][T21449] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3191.436539][T21449] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3191.560266][ T843] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3191.582940][ T843] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3191.621812][ T7728] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3191.639782][ T7728] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3192.117183][T21700] netlink: 'syz.5.16440': attribute type 39 has an invalid length. [ 3192.152565][T21701] netlink: 'syz.3.16430': attribute type 39 has an invalid length. [ 3192.428317][T21711] netlink: 121460 bytes leftover after parsing attributes in process `syz.5.16433'. [ 3192.532134][T21711] netlink: 22856 bytes leftover after parsing attributes in process `syz.5.16433'. [ 3192.788401][T21719] netlink: 'syz.6.16435': attribute type 39 has an invalid length. [ 3193.103106][T21722] netlink: 'syz.5.16439': attribute type 39 has an invalid length. [ 3193.573977][T21731] netlink: 'syz.5.16444': attribute type 3 has an invalid length. [ 3193.586448][T21731] netlink: 130984 bytes leftover after parsing attributes in process `syz.5.16444'. [ 3193.979222][T21743] netlink: 'syz.3.16447': attribute type 39 has an invalid length. [ 3194.351915][T21750] netlink: 'syz.6.16448': attribute type 10 has an invalid length. [ 3194.472671][T21758] netlink: 'syz.5.16450': attribute type 39 has an invalid length. [ 3194.521961][T21761] netlink: 'syz.3.16452': attribute type 39 has an invalid length. [ 3194.742472][T21765] netlink: 'syz.3.16453': attribute type 39 has an invalid length. [ 3195.035379][T21771] netlink: 'syz.2.16456': attribute type 10 has an invalid length. [ 3195.043654][T21771] netlink: 40 bytes leftover after parsing attributes in process `syz.2.16456'. [ 3195.058615][T21771] netlink: 144 bytes leftover after parsing attributes in process `syz.2.16456'. [ 3195.354431][T21777] netlink: 'syz.5.16459': attribute type 39 has an invalid length. [ 3195.718331][T21785] netlink: 'syz.2.16463': attribute type 39 has an invalid length. [ 3196.036137][T21794] netlink: 'syz.6.16466': attribute type 10 has an invalid length. [ 3196.044230][T21794] netlink: 40 bytes leftover after parsing attributes in process `syz.6.16466'. [ 3196.250569][T21799] netlink: 144 bytes leftover after parsing attributes in process `syz.6.16466'. [ 3196.563680][T21806] netlink: 121460 bytes leftover after parsing attributes in process `syz.5.16471'. [ 3196.633174][T21806] netlink: 21068 bytes leftover after parsing attributes in process `syz.5.16471'. [ 3196.806401][T21813] netlink: 'syz.2.16474': attribute type 39 has an invalid length. [ 3196.901979][T21815] netlink: 'syz.5.16475': attribute type 10 has an invalid length. [ 3196.923541][T21815] netlink: 40 bytes leftover after parsing attributes in process `syz.5.16475'. [ 3196.989788][T21815] netlink: 144 bytes leftover after parsing attributes in process `syz.5.16475'. [ 3197.662868][T21837] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.16484'. [ 3197.695830][T21837] netlink: 21068 bytes leftover after parsing attributes in process `syz.3.16484'. [ 3197.731171][T21837] tipc: Started in network mode [ 3197.741175][T21837] tipc: Node identity b, cluster identity 73 [ 3197.755357][T21837] tipc: Node number set to 11 [ 3197.997752][T21845] netlink: 'syz.3.16486': attribute type 10 has an invalid length. [ 3198.424953][T21845] team0: Device veth1_macvtap failed to register rx_handler [ 3199.664468][T21881] validate_nla: 2 callbacks suppressed [ 3199.664508][T21881] netlink: 'syz.3.16500': attribute type 10 has an invalid length. [ 3199.950683][T21881] team0: Device veth1_macvtap failed to register rx_handler [ 3200.171541][T21752] delete_channel: no stack [ 3200.371725][T21896] netlink: 'syz.5.16502': attribute type 21 has an invalid length. [ 3200.380209][T21896] __nla_validate_parse: 5 callbacks suppressed [ 3200.380230][T21896] netlink: 168 bytes leftover after parsing attributes in process `syz.5.16502'. [ 3200.631954][T21902] netlink: 121460 bytes leftover after parsing attributes in process `syz.5.16506'. [ 3200.682318][T21902] netlink: 21068 bytes leftover after parsing attributes in process `syz.5.16506'. [ 3201.119654][T21913] netlink: 'syz.5.16512': attribute type 10 has an invalid length. [ 3201.240644][T21913] team0: Device veth1_macvtap failed to register rx_handler [ 3201.440549][T21920] netlink: 'syz.6.16514': attribute type 39 has an invalid length. [ 3201.914069][T21931] netlink: 121460 bytes leftover after parsing attributes in process `syz.5.16520'. [ 3201.952295][T21931] netlink: 21068 bytes leftover after parsing attributes in process `syz.5.16520'. [ 3202.219469][T21940] netlink: 'syz.6.16524': attribute type 10 has an invalid length. [ 3202.316399][T21943] netlink: 'syz.5.16525': attribute type 10 has an invalid length. [ 3202.406698][T21943] team0: Device veth1_macvtap failed to register rx_handler [ 3202.815450][T21953] netlink: 'syz.5.16529': attribute type 39 has an invalid length. [ 3203.089818][T21961] netlink: 121460 bytes leftover after parsing attributes in process `syz.6.16533'. [ 3203.109011][T21961] netlink: 21068 bytes leftover after parsing attributes in process `syz.6.16533'. [ 3203.391454][T21968] netlink: 'syz.3.16536': attribute type 15 has an invalid length. [ 3203.438763][T21968] netlink: 176 bytes leftover after parsing attributes in process `syz.3.16536'. [ 3203.450676][T21970] netlink: 'syz.6.16537': attribute type 10 has an invalid length. [ 3203.510820][T21970] team0: Device veth1_macvtap failed to register rx_handler [ 3203.665877][T21975] netlink: 'syz.5.16538': attribute type 10 has an invalid length. [ 3203.684183][T21975] netlink: 40 bytes leftover after parsing attributes in process `syz.5.16538'. [ 3203.702799][T21975] netlink: 144 bytes leftover after parsing attributes in process `syz.5.16538'. [ 3203.812651][T21979] FAULT_INJECTION: forcing a failure. [ 3203.812651][T21979] name failslab, interval 1, probability 0, space 0, times 0 [ 3203.836811][T21979] CPU: 1 PID: 21979 Comm: syz.2.16540 Not tainted syzkaller #0 [ 3203.844436][T21979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 3203.854530][T21979] Call Trace: [ 3203.857845][T21979] [ 3203.860801][T21979] dump_stack_lvl+0x18c/0x250 [ 3203.865525][T21979] ? show_regs_print_info+0x20/0x20 [ 3203.870770][T21979] ? load_image+0x400/0x400 [ 3203.875364][T21979] should_fail_ex+0x39d/0x4d0 [ 3203.880098][T21979] should_failslab+0x9/0x20 [ 3203.884670][T21979] slab_pre_alloc_hook+0x59/0x310 [ 3203.889747][T21979] ? nf_ct_ext_add+0x1ab/0x440 [ 3203.894558][T21979] ? nf_ct_ext_add+0x1ab/0x440 [ 3203.899372][T21979] __kmem_cache_alloc_node+0x53/0x250 [ 3203.904792][T21979] ? nf_ct_ext_add+0x1ab/0x440 [ 3203.909585][T21979] __kmalloc_node_track_caller+0xa2/0x230 [ 3203.915364][T21979] krealloc+0x86/0x120 [ 3203.919512][T21979] nf_ct_ext_add+0x1ab/0x440 [ 3203.924128][T21979] init_conntrack+0x69c/0xf10 [ 3203.928823][T21979] ? early_drop+0x7f0/0x7f0 [ 3203.933353][T21979] ? nf_conntrack_find_get+0x650/0x650 [ 3203.938848][T21979] ? __local_bh_enable_ip+0x13a/0x1c0 [ 3203.944244][T21979] ? __siphash_unaligned+0x22e/0x3a0 [ 3203.949549][T21979] nf_conntrack_in+0xc06/0x15c0 [ 3203.954436][T21979] ? nf_ct_pernet+0x270/0x270 [ 3203.959226][T21979] ? ipt_do_table+0x2c1/0x15e0 [ 3203.964025][T21979] ? ipv4_conntrack_defrag+0x29d/0x5a0 [ 3203.969507][T21979] ? ipv4_conntrack_local+0x123/0x200 [ 3203.974900][T21979] ? ipv4_conntrack_in+0x20/0x20 [ 3203.979876][T21979] nf_hook_slow+0xbd/0x200 [ 3203.984319][T21979] ? nf_hook+0x390/0x390 [ 3203.988598][T21979] nf_hook+0x228/0x390 [ 3203.992700][T21979] ? nf_hook+0xa2/0x390 [ 3203.996882][T21979] ? __ip_local_out+0x5f0/0x5f0 [ 3204.001760][T21979] ? nf_hook+0x390/0x390 [ 3204.006037][T21979] ? ip_fast_csum+0x1ee/0x2b0 [ 3204.010751][T21979] __ip_local_out+0x4db/0x5f0 [ 3204.015461][T21979] ? nf_hook+0x390/0x390 [ 3204.019741][T21979] ip_send_skb+0x4c/0x1d0 [ 3204.024104][T21979] raw_sendmsg+0x163e/0x1c00 [ 3204.028721][T21979] ? compat_raw_ioctl+0x70/0x70 [ 3204.033590][T21979] ? __lock_acquire+0x1273/0x7d40 [ 3204.038645][T21979] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 3204.045087][T21979] ? sock_rps_record_flow+0x19/0x3f0 [ 3204.050406][T21979] ? inet_sendmsg+0x7c/0x2f0 [ 3204.055043][T21979] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 3204.060363][T21979] ? security_socket_sendmsg+0x80/0xa0 [ 3204.065848][T21979] ? inet_send_prepare+0x260/0x260 [ 3204.070987][T21979] ____sys_sendmsg+0x5ba/0x960 [ 3204.075791][T21979] ? __lock_acquire+0x7d40/0x7d40 [ 3204.080862][T21979] ? __asan_memset+0x22/0x40 [ 3204.085493][T21979] ? __sys_sendmsg_sock+0x30/0x30 [ 3204.090558][T21979] ? __import_iovec+0x5f2/0x850 [ 3204.095451][T21979] ? import_iovec+0x73/0xa0 [ 3204.099986][T21979] ___sys_sendmsg+0x2a6/0x360 [ 3204.104710][T21979] ? get_pid_task+0x20/0x1e0 [ 3204.109353][T21979] ? __sys_sendmsg+0x2a0/0x2a0 [ 3204.114185][T21979] ? __lock_acquire+0x7d40/0x7d40 [ 3204.119265][T21979] __se_sys_sendmsg+0x1c2/0x2b0 [ 3204.124150][T21979] ? __x64_sys_sendmsg+0x80/0x80 [ 3204.129127][T21979] ? lockdep_hardirqs_on+0x98/0x150 [ 3204.134341][T21979] do_syscall_64+0x55/0xa0 [ 3204.138795][T21979] ? clear_bhb_loop+0x40/0x90 [ 3204.143494][T21979] ? clear_bhb_loop+0x40/0x90 [ 3204.148195][T21979] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3204.154097][T21979] RIP: 0033:0x7f32c759aeb9 [ 3204.158527][T21979] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3204.178148][T21979] RSP: 002b:00007f32c84b5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3204.186576][T21979] RAX: ffffffffffffffda RBX: 00007f32c7815fa0 RCX: 00007f32c759aeb9 [ 3204.194559][T21979] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000003 [ 3204.202540][T21979] RBP: 00007f32c84b5090 R08: 0000000000000000 R09: 0000000000000000 [ 3204.210521][T21979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3204.218512][T21979] R13: 00007f32c7816038 R14: 00007f32c7815fa0 R15: 00007ffc57f6e0d8 [ 3204.226518][T21979] [ 3205.243164][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 3205.249820][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 3205.555764][T21977] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3205.627772][T21977] team0: Port device bond0 added [ 3205.753362][T21977] syz.3.16541 (21977) used greatest stack depth: 17672 bytes left [ 3206.003630][T22002] validate_nla: 2 callbacks suppressed [ 3206.003667][T22002] netlink: 'syz.3.16547': attribute type 10 has an invalid length. [ 3206.266583][T22002] team0: Device veth1_macvtap failed to register rx_handler [ 3206.683058][T22015] netlink: 'syz.5.16552': attribute type 39 has an invalid length. [ 3207.174957][T22022] netlink: 'syz.2.16556': attribute type 10 has an invalid length. [ 3207.232774][T21941] delete_channel: no stack [ 3207.508253][T22030] netlink: 10 bytes leftover after parsing attributes in process `syz.5.16559'. [ 3207.573626][T22037] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.16560'. [ 3207.587397][T22035] netlink: 60 bytes leftover after parsing attributes in process `syz.2.16561'. [ 3207.641076][T22037] netlink: 21068 bytes leftover after parsing attributes in process `syz.3.16560'. [ 3207.851249][T22042] netlink: 'syz.5.16563': attribute type 10 has an invalid length. [ 3207.904710][T22042] team0: Device veth1_macvtap failed to register rx_handler [ 3208.245246][T22052] netlink: 'syz.3.16565': attribute type 39 has an invalid length. [ 3208.551503][T22058] netlink: 'syz.5.16568': attribute type 39 has an invalid length. [ 3208.676917][T22061] netlink: 16222 bytes leftover after parsing attributes in process `syz.2.16567'. [ 3209.309672][T22071] netlink: 121460 bytes leftover after parsing attributes in process `syz.5.16573'. [ 3209.381098][T22071] netlink: 21068 bytes leftover after parsing attributes in process `syz.5.16573'. [ 3209.733623][T22067] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3209.807114][T22079] netlink: 'syz.6.16574': attribute type 10 has an invalid length. [ 3209.870458][T22079] team0: Device veth1_macvtap failed to register rx_handler [ 3210.218493][T22089] netlink: 'syz.6.16577': attribute type 10 has an invalid length. [ 3210.262409][T22089] netlink: 40 bytes leftover after parsing attributes in process `syz.6.16577'. [ 3210.299105][T22089] netlink: 144 bytes leftover after parsing attributes in process `syz.6.16577'. [ 3210.572089][T22092] netlink: 'syz.2.16579': attribute type 39 has an invalid length. [ 3210.871018][T22097] netlink: 'syz.3.16580': attribute type 39 has an invalid length. [ 3211.031232][T22101] netlink: 121460 bytes leftover after parsing attributes in process `syz.5.16583'. [ 3211.128129][T22104] netlink: 'syz.6.16585': attribute type 10 has an invalid length. [ 3211.191999][T22104] team0: Device veth1_macvtap failed to register rx_handler [ 3211.484847][T22113] netlink: 'syz.2.16584': attribute type 10 has an invalid length. [ 3211.621582][T22117] netlink: 'syz.5.16589': attribute type 10 has an invalid length. [ 3212.272356][T22131] netlink: 'syz.5.16596': attribute type 39 has an invalid length. [ 3212.307066][T21450] Bluetooth: hci1: command 0x0406 tx timeout [ 3212.475597][T21989] delete_channel: no stack [ 3213.704977][T22141] netlink: 'syz.3.16599': attribute type 10 has an invalid length. [ 3213.992598][T22153] netlink: 'syz.2.16602': attribute type 10 has an invalid length. [ 3214.085213][T22153] __nla_validate_parse: 5 callbacks suppressed [ 3214.085234][T22153] netlink: 40 bytes leftover after parsing attributes in process `syz.2.16602'. [ 3214.316554][T22155] netlink: 144 bytes leftover after parsing attributes in process `syz.2.16602'. [ 3214.346303][T22028] delete_channel: no stack [ 3215.219390][T21450] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 3215.232362][T21450] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 3215.241619][T21450] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 3215.265821][T21450] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 3215.275398][T21450] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 3215.285435][T21450] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 3215.785099][T22178] netlink: 'syz.2.16609': attribute type 39 has an invalid length. [ 3216.237878][T14036] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3216.675329][T14036] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3217.119191][T14036] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3217.227793][T22206] netlink: 'syz.2.16616': attribute type 10 has an invalid length. [ 3217.236971][T22206] netlink: 40 bytes leftover after parsing attributes in process `syz.2.16616'. [ 3217.260670][T22212] netlink: 144 bytes leftover after parsing attributes in process `syz.2.16616'. [ 3217.352540][T14036] team0: Port device netdevsim0 removed [ 3217.356485][T21450] Bluetooth: hci6: command tx timeout [ 3217.408291][T14036] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3217.617907][T22175] chnl_net:caif_netlink_parms(): no params data found [ 3217.849499][T22221] netlink: 'syz.2.16620': attribute type 39 has an invalid length. [ 3217.890457][T22175] bridge0: port 1(bridge_slave_0) entered blocking state [ 3217.931650][T22175] bridge0: port 1(bridge_slave_0) entered disabled state [ 3217.953023][T22175] bridge_slave_0: entered allmulticast mode [ 3217.963707][T22175] bridge_slave_0: entered promiscuous mode [ 3217.992110][T22175] bridge0: port 2(bridge_slave_1) entered blocking state [ 3218.007096][T22175] bridge0: port 2(bridge_slave_1) entered disabled state [ 3218.014388][T22175] bridge_slave_1: entered allmulticast mode [ 3218.026836][T22175] bridge_slave_1: entered promiscuous mode [ 3218.047609][T22068] delete_channel: no stack [ 3218.067250][T22227] netlink: 'syz.3.16621': attribute type 10 has an invalid length. [ 3218.168578][T22227] team0: Device veth1_macvtap failed to register rx_handler [ 3218.410679][T22175] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3218.456582][T22175] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3218.545079][T22175] team0: Port device team_slave_0 added [ 3218.578633][T22175] team0: Port device team_slave_1 added [ 3218.608601][T22175] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3218.615707][T22175] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3218.665278][T22175] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3218.710781][T22175] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3218.736632][T22175] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3218.780064][T22175] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3218.923401][T22175] hsr_slave_0: entered promiscuous mode [ 3218.960952][T22175] hsr_slave_1: entered promiscuous mode [ 3218.980830][T22175] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3218.996123][T22175] Cannot create hsr debugfs directory [ 3219.046362][T22241] netlink: 'syz.2.16625': attribute type 10 has an invalid length. [ 3219.078769][T22241] team0: Device veth1_macvtap failed to register rx_handler [ 3219.123819][T22114] delete_channel: no stack [ 3219.415407][T22248] netlink: 'syz.5.16629': attribute type 10 has an invalid length. [ 3219.425777][T21450] Bluetooth: hci6: command tx timeout [ 3219.434783][T22248] netlink: 40 bytes leftover after parsing attributes in process `syz.5.16629'. [ 3219.521770][T22248] netlink: 144 bytes leftover after parsing attributes in process `syz.5.16629'. [ 3219.933548][T22254] netlink: 'syz.5.16631': attribute type 39 has an invalid length. [ 3219.977362][T14036] tipc: Left network mode [ 3220.920675][T22277] netlink: 'syz.3.16635': attribute type 10 has an invalid length. [ 3221.104328][T22277] team0: Device veth1_macvtap failed to register rx_handler [ 3221.318825][T22280] netlink: 'syz.5.16636': attribute type 39 has an invalid length. [ 3221.448680][T22147] delete_channel: no stack [ 3221.505278][T21450] Bluetooth: hci6: command tx timeout [ 3222.313794][T22175] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 3222.378678][T22302] netlink: 'syz.2.16643': attribute type 10 has an invalid length. [ 3222.435831][T22302] netlink: 40 bytes leftover after parsing attributes in process `syz.2.16643'. [ 3222.593259][T22175] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 3222.632098][T22175] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 3222.700306][T22304] netlink: 144 bytes leftover after parsing attributes in process `syz.2.16643'. [ 3222.782972][T22175] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 3223.028810][T22311] netlink: 'syz.5.16645': attribute type 39 has an invalid length. [ 3223.329236][T22332] netlink: 'syz.2.16647': attribute type 10 has an invalid length. [ 3223.401709][T22332] team0: Device veth1_macvtap failed to register rx_handler [ 3223.524960][T14036] hsr0: left allmulticast mode [ 3223.540019][T14036] hsr_slave_0: left allmulticast mode [ 3223.546069][T14036] hsr_slave_1: left allmulticast mode [ 3223.551673][T14036] hsr0: left promiscuous mode [ 3223.559461][T14036] nr0: port 1(hsr0) entered disabled state [ 3223.585492][T21450] Bluetooth: hci6: command tx timeout [ 3223.596743][T14036] hsr_slave_0: left promiscuous mode [ 3223.606037][T14036] hsr_slave_1: left promiscuous mode [ 3223.623086][T14036] batman_adv: batadv0: Removing interface: team0 [ 3223.643091][T14036] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3223.656995][T14036] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3223.678863][T14036] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3223.695556][T14036] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3223.712814][T14036] bridge0: port 4(dummy0) entered disabled state [ 3223.729562][T14036] bridge0: port 3(batadv0) entered disabled state [ 3223.747093][T14036] bridge_slave_1: left allmulticast mode [ 3223.753072][T14036] bridge_slave_1: left promiscuous mode [ 3223.761584][T14036] bridge0: port 2(bridge_slave_1) entered disabled state [ 3223.779272][T14036] bridge_slave_0: left allmulticast mode [ 3223.785034][T14036] bridge_slave_0: left promiscuous mode [ 3223.798092][T14036] bridge0: port 1(bridge_slave_0) entered disabled state [ 3223.846202][T14036] veth0_macvtap: left promiscuous mode [ 3223.851885][T14036] veth1_vlan: left promiscuous mode [ 3223.859894][T14036] veth0_vlan: left promiscuous mode [ 3224.874893][T14036] team0 (unregistering): Port device team_slave_1 removed [ 3224.946409][T14036] team0 (unregistering): Port device team_slave_0 removed [ 3225.002601][T14036] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3225.062001][T14036] bond0 (unregistering): (slave c1ÿ): Releasing backup interface [ 3225.386841][T14036] team0 (unregistering): Port device bond0 removed [ 3225.419952][T14036] bond0 (unregistering): Released all slaves [ 3225.540059][T22346] netlink: 'syz.2.16653': attribute type 3 has an invalid length. [ 3225.556519][T22346] netlink: 16066 bytes leftover after parsing attributes in process `syz.2.16653'. [ 3225.591766][T22348] netlink: 'syz.2.16653': attribute type 21 has an invalid length. [ 3225.615767][T22348] netlink: 128 bytes leftover after parsing attributes in process `syz.2.16653'. [ 3225.653202][T22348] netlink: 'syz.2.16653': attribute type 4 has an invalid length. [ 3225.665267][T22348] netlink: 'syz.2.16653': attribute type 5 has an invalid length. [ 3225.673202][T22348] netlink: 3 bytes leftover after parsing attributes in process `syz.2.16653'. [ 3225.714022][T22351] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.16655'. [ 3225.809417][T22351] netlink: 'syz.3.16655': attribute type 3 has an invalid length. [ 3225.833308][T22351] netlink: 132 bytes leftover after parsing attributes in process `syz.3.16655'. [ 3225.864281][T22175] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3225.998220][T22175] 8021q: adding VLAN 0 to HW filter on device team0 [ 3226.023068][ T843] bridge0: port 1(bridge_slave_0) entered blocking state [ 3226.030312][ T843] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3226.067245][ T7728] bridge0: port 2(bridge_slave_1) entered blocking state [ 3226.074419][ T7728] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3226.142273][T22360] netlink: 'syz.5.16658': attribute type 39 has an invalid length. [ 3226.706338][T22175] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3226.754422][T22374] netlink: 'syz.5.16661': attribute type 10 has an invalid length. [ 3226.795698][T22362] netlink: 40 bytes leftover after parsing attributes in process `syz.2.16659'. [ 3226.827272][T22362] dummy0: entered promiscuous mode [ 3226.833980][T22362] dummy0: entered allmulticast mode [ 3226.858323][T22362] bridge0: port 4(dummy0) entered blocking state [ 3226.867815][T22362] bridge0: port 4(dummy0) entered disabled state [ 3226.918491][T22362] bridge0: port 4(dummy0) entered blocking state [ 3226.925960][T22362] bridge0: port 4(dummy0) entered forwarding state [ 3227.458527][T22175] veth0_vlan: entered promiscuous mode [ 3227.519124][T22175] veth1_vlan: entered promiscuous mode [ 3227.550775][T22391] macsec0: entered promiscuous mode [ 3227.570719][T22391] macsec0: entered allmulticast mode [ 3227.590322][T22391] veth1_macvtap: entered allmulticast mode [ 3227.706001][T22175] veth0_macvtap: entered promiscuous mode [ 3227.738946][T22175] veth1_macvtap: entered promiscuous mode [ 3227.801366][T22175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3227.845361][T22175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3227.887333][T22175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3227.925186][T22175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3227.955376][T22175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3227.992731][T22175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3228.023143][T22175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3228.054033][T22175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3228.075314][T22175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3228.105270][T22175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3228.136855][T22175] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3228.162335][T22398] netlink: 14601 bytes leftover after parsing attributes in process `syz.3.16668'. [ 3228.196114][T22399] validate_nla: 1 callbacks suppressed [ 3228.196131][T22399] netlink: 'syz.5.16667': attribute type 10 has an invalid length. [ 3228.258457][T22399] team0: Device veth1_macvtap failed to register rx_handler [ 3228.419827][T22403] netlink: 'syz.3.16669': attribute type 39 has an invalid length. [ 3228.433541][T22175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3228.446725][T22175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3228.461157][T22175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3228.525271][T22175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3228.545153][T22175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3228.565449][T22175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3228.585162][T22175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3228.605434][T22175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3228.625451][T22175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3228.645253][T22175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3228.666819][T22175] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3228.710513][T22175] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3228.735244][T22175] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3228.763571][T22175] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3228.781396][T22175] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3228.952132][T14036] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3228.971717][T14036] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3229.047134][ T843] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3229.055022][ T843] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3229.274263][T22422] netlink: 121460 bytes leftover after parsing attributes in process `syz.6.16605'. [ 3229.304867][T22422] netlink: 21068 bytes leftover after parsing attributes in process `syz.6.16605'. [ 3229.322721][T22422] tipc: Started in network mode [ 3229.336596][T22422] tipc: Node identity b, cluster identity 73 [ 3229.342701][T22422] tipc: Node number set to 11 [ 3229.372241][T22420] netlink: 'syz.2.16674': attribute type 10 has an invalid length. [ 3229.559938][T22429] netlink: 'syz.6.16676': attribute type 3 has an invalid length. [ 3229.576788][T22429] netlink: 16066 bytes leftover after parsing attributes in process `syz.6.16676'. [ 3229.615763][T22429] netlink: 'syz.6.16676': attribute type 21 has an invalid length. [ 3229.640591][T22429] netlink: 'syz.6.16676': attribute type 4 has an invalid length. [ 3229.662332][T22429] netlink: 'syz.6.16676': attribute type 5 has an invalid length. [ 3229.992983][T22432] syzkaller0: entered promiscuous mode [ 3230.007488][T22432] syzkaller0: entered allmulticast mode [ 3230.373531][T22438] netlink: 'syz.2.16679': attribute type 10 has an invalid length. [ 3230.704899][T22438] team0: Device veth1_macvtap failed to register rx_handler [ 3231.309294][T22441] netlink: 'syz.5.16680': attribute type 10 has an invalid length. [ 3231.337898][T22441] __nla_validate_parse: 3 callbacks suppressed [ 3231.337919][T22441] netlink: 40 bytes leftover after parsing attributes in process `syz.5.16680'. [ 3231.575292][T22444] netlink: 144 bytes leftover after parsing attributes in process `syz.5.16680'. [ 3231.792354][T22375] delete_channel: no stack [ 3232.193720][T22460] netlink: 'syz.6.16687': attribute type 10 has an invalid length. [ 3232.400299][T22460] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3232.423737][T22460] team0: Port device bond0 added [ 3233.793252][T22482] validate_nla: 2 callbacks suppressed [ 3233.793272][T22482] netlink: 'syz.2.16694': attribute type 10 has an invalid length. [ 3233.937138][T22482] netlink: 40 bytes leftover after parsing attributes in process `syz.2.16694'. [ 3233.985214][T22487] netlink: 144 bytes leftover after parsing attributes in process `syz.2.16694'. [ 3234.346059][T22491] FAULT_INJECTION: forcing a failure. [ 3234.346059][T22491] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3234.415331][T22491] CPU: 1 PID: 22491 Comm: syz.3.16696 Not tainted syzkaller #0 [ 3234.422990][T22491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 3234.433091][T22491] Call Trace: [ 3234.436411][T22491] [ 3234.439380][T22491] dump_stack_lvl+0x18c/0x250 [ 3234.444289][T22491] ? show_regs_print_info+0x20/0x20 [ 3234.449540][T22491] ? load_image+0x400/0x400 [ 3234.454095][T22491] ? __might_fault+0xaa/0x120 [ 3234.458822][T22491] should_fail_ex+0x39d/0x4d0 [ 3234.463547][T22491] copyin+0x1a/0x90 [ 3234.467406][T22491] _copy_from_iter+0x54f/0x12e0 [ 3234.472298][T22491] ? __virt_addr_valid+0x18c/0x540 [ 3234.477465][T22491] ? copyout_mc+0x70/0x70 [ 3234.481846][T22491] ? __virt_addr_valid+0x18c/0x540 [ 3234.487004][T22491] ? __virt_addr_valid+0x18c/0x540 [ 3234.492158][T22491] ? __virt_addr_valid+0x469/0x540 [ 3234.497329][T22491] ? __check_object_size+0x506/0xa20 [ 3234.502692][T22491] skb_copy_datagram_from_iter+0xf4/0x6e0 [ 3234.508456][T22491] ? dev_get_by_index+0x22/0x2d0 [ 3234.513432][T22491] ? skb_put+0x11b/0x210 [ 3234.517715][T22491] packet_sendmsg+0x3566/0x4d70 [ 3234.522630][T22491] ? verify_lock_unused+0x140/0x140 [ 3234.527849][T22491] ? perf_trace_lock_acquire+0x104/0x410 [ 3234.533604][T22491] ? aa_sk_perm+0x83c/0x970 [ 3234.538174][T22491] ? packet_getsockopt+0xad0/0xad0 [ 3234.543316][T22491] ? aa_sock_msg_perm+0x94/0x150 [ 3234.548272][T22491] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 3234.553578][T22491] ? security_socket_sendmsg+0x80/0xa0 [ 3234.559062][T22491] ? packet_getsockopt+0xad0/0xad0 [ 3234.564302][T22491] ____sys_sendmsg+0x5ba/0x960 [ 3234.569089][T22491] ? __lock_acquire+0x7d40/0x7d40 [ 3234.574132][T22491] ? __asan_memset+0x22/0x40 [ 3234.578741][T22491] ? __sys_sendmsg_sock+0x30/0x30 [ 3234.583795][T22491] ? __import_iovec+0x3fa/0x850 [ 3234.588688][T22491] ? import_iovec+0x73/0xa0 [ 3234.593216][T22491] ___sys_sendmsg+0x2a6/0x360 [ 3234.597919][T22491] ? __sys_sendmsg+0x2a0/0x2a0 [ 3234.602726][T22491] ? __lock_acquire+0x7d40/0x7d40 [ 3234.607792][T22491] __se_sys_sendmsg+0x1c2/0x2b0 [ 3234.612668][T22491] ? __x64_sys_sendmsg+0x80/0x80 [ 3234.617667][T22491] ? lockdep_hardirqs_on+0x98/0x150 [ 3234.622912][T22491] do_syscall_64+0x55/0xa0 [ 3234.627363][T22491] ? clear_bhb_loop+0x40/0x90 [ 3234.632079][T22491] ? clear_bhb_loop+0x40/0x90 [ 3234.636785][T22491] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3234.642717][T22491] RIP: 0033:0x7f687199aeb9 [ 3234.647157][T22491] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3234.666786][T22491] RSP: 002b:00007f68728bf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3234.675221][T22491] RAX: ffffffffffffffda RBX: 00007f6871c15fa0 RCX: 00007f687199aeb9 [ 3234.683209][T22491] RDX: 0000000000000000 RSI: 0000200000000b00 RDI: 0000000000000003 [ 3234.691214][T22491] RBP: 00007f68728bf090 R08: 0000000000000000 R09: 0000000000000000 [ 3234.699205][T22491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3234.707210][T22491] R13: 00007f6871c16038 R14: 00007f6871c15fa0 R15: 00007ffc546567b8 [ 3234.715227][T22491] [ 3235.053994][T22498] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.16697'. [ 3235.402463][T22503] netlink: 'syz.3.16700': attribute type 39 has an invalid length. [ 3235.746566][T22507] netlink: 'syz.3.16702': attribute type 39 has an invalid length. [ 3236.036924][T22508] netlink: 'syz.5.16701': attribute type 10 has an invalid length. [ 3236.972501][T22520] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.16707'. [ 3237.059738][T22520] netlink: 21068 bytes leftover after parsing attributes in process `syz.3.16707'. [ 3237.266211][T22522] netlink: 'syz.5.16706': attribute type 10 has an invalid length. [ 3237.274228][T22522] netlink: 40 bytes leftover after parsing attributes in process `syz.5.16706'. [ 3237.341714][T22523] netlink: 144 bytes leftover after parsing attributes in process `syz.5.16706'. [ 3238.200641][T22536] netlink: 'syz.5.16711': attribute type 39 has an invalid length. [ 3238.512194][T22542] netlink: 'syz.6.16713': attribute type 39 has an invalid length. [ 3239.085414][T22543] netlink: 'syz.3.16714': attribute type 10 has an invalid length. [ 3239.203346][T22550] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.16715'. [ 3239.267051][T22550] netlink: 'syz.5.16715': attribute type 25 has an invalid length. [ 3239.669215][T22557] netlink: 121460 bytes leftover after parsing attributes in process `syz.6.16717'. [ 3239.748343][T22557] netlink: 21068 bytes leftover after parsing attributes in process `syz.6.16717'. [ 3242.532301][T22547] delete_channel: no stack [ 3243.677396][T22582] netlink: 'syz.2.16726': attribute type 10 has an invalid length. [ 3244.502368][T22589] netlink: 'syz.6.16729': attribute type 10 has an invalid length. [ 3244.814702][T22589] team0: Device veth1_macvtap failed to register rx_handler [ 3244.950070][T22594] netlink: 'syz.5.16732': attribute type 39 has an invalid length. [ 3246.186666][T22623] netlink: 'syz.3.16743': attribute type 10 has an invalid length. [ 3246.269653][T22623] team0: Device veth1_macvtap failed to register rx_handler [ 3246.401496][T22629] netlink: 'syz.5.16744': attribute type 10 has an invalid length. [ 3246.600675][T22634] netlink: 'syz.2.16745': attribute type 39 has an invalid length. [ 3247.709900][T22656] netlink: 'syz.3.16755': attribute type 10 has an invalid length. [ 3247.992662][T22656] team0: Device veth1_macvtap failed to register rx_handler [ 3248.109859][T22659] netlink: 'syz.6.16756': attribute type 39 has an invalid length. [ 3248.472715][T22667] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.16759'. [ 3248.585284][T22667] netlink: 22856 bytes leftover after parsing attributes in process `syz.3.16759'. [ 3249.022769][T22583] delete_channel: no stack [ 3249.923414][T22630] delete_channel: no stack [ 3251.637240][T22676] netlink: 'syz.3.16761': attribute type 10 has an invalid length. [ 3252.101454][T22686] FAULT_INJECTION: forcing a failure. [ 3252.101454][T22686] name failslab, interval 1, probability 0, space 0, times 0 [ 3252.138803][T22686] CPU: 1 PID: 22686 Comm: syz.2.16767 Not tainted syzkaller #0 [ 3252.146451][T22686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 3252.156548][T22686] Call Trace: [ 3252.159872][T22686] [ 3252.162856][T22686] dump_stack_lvl+0x18c/0x250 [ 3252.167581][T22686] ? show_regs_print_info+0x20/0x20 [ 3252.172826][T22686] ? load_image+0x400/0x400 [ 3252.177386][T22686] ? lockdep_hardirqs_on+0x98/0x150 [ 3252.182635][T22686] ? __might_sleep+0xe0/0xe0 [ 3252.187258][T22686] should_fail_ex+0x39d/0x4d0 [ 3252.191964][T22686] should_failslab+0x9/0x20 [ 3252.196498][T22686] slab_pre_alloc_hook+0x59/0x310 [ 3252.201555][T22686] ? sctp_transport_new+0x7e/0x630 [ 3252.206700][T22686] __kmem_cache_alloc_node+0x53/0x250 [ 3252.212098][T22686] ? sctp_transport_new+0x7e/0x630 [ 3252.217231][T22686] kmalloc_trace+0x2a/0xe0 [ 3252.221676][T22686] sctp_transport_new+0x7e/0x630 [ 3252.226636][T22686] sctp_assoc_add_peer+0x259/0x1390 [ 3252.231852][T22686] ? sctp_bind_addr_copy+0x37b/0x3c0 [ 3252.237166][T22686] sctp_connect_new_asoc+0x323/0x6a0 [ 3252.242469][T22686] ? __sctp_connect+0xd80/0xd80 [ 3252.247344][T22686] ? _local_bh_enable+0xa0/0xa0 [ 3252.252208][T22686] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 3252.258027][T22686] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 3252.263847][T22686] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 3252.269420][T22686] ? security_sctp_bind_connect+0x89/0xb0 [ 3252.275183][T22686] sctp_sendmsg+0x1575/0x28c0 [ 3252.279897][T22686] ? sctp_getsockopt+0xb60/0xb60 [ 3252.284844][T22686] ? aa_sk_perm+0x83c/0x970 [ 3252.289381][T22686] ? aa_af_perm+0x330/0x330 [ 3252.293940][T22686] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 3252.300373][T22686] ? sock_rps_record_flow+0x19/0x3f0 [ 3252.305688][T22686] ? inet_sendmsg+0x7c/0x2f0 [ 3252.310297][T22686] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 3252.315613][T22686] ? security_socket_sendmsg+0x80/0xa0 [ 3252.321107][T22686] ? inet_send_prepare+0x260/0x260 [ 3252.326293][T22686] ____sys_sendmsg+0x5ba/0x960 [ 3252.331122][T22686] ? __lock_acquire+0x7d40/0x7d40 [ 3252.336185][T22686] ? __asan_memset+0x22/0x40 [ 3252.340806][T22686] ? __sys_sendmsg_sock+0x30/0x30 [ 3252.345890][T22686] ? __import_iovec+0x5f2/0x850 [ 3252.350884][T22686] ? import_iovec+0x73/0xa0 [ 3252.355429][T22686] ___sys_sendmsg+0x2a6/0x360 [ 3252.360154][T22686] ? __sys_sendmsg+0x2a0/0x2a0 [ 3252.364955][T22686] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 3252.371231][T22686] __se_sys_sendmsg+0x1c2/0x2b0 [ 3252.376108][T22686] ? __x64_sys_sendmsg+0x80/0x80 [ 3252.381086][T22686] ? lockdep_hardirqs_on+0x98/0x150 [ 3252.386314][T22686] do_syscall_64+0x55/0xa0 [ 3252.390764][T22686] ? clear_bhb_loop+0x40/0x90 [ 3252.395469][T22686] ? clear_bhb_loop+0x40/0x90 [ 3252.400178][T22686] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3252.406086][T22686] RIP: 0033:0x7f32c759aeb9 [ 3252.410533][T22686] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3252.430172][T22686] RSP: 002b:00007f32c84b5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3252.438621][T22686] RAX: ffffffffffffffda RBX: 00007f32c7815fa0 RCX: 00007f32c759aeb9 [ 3252.446633][T22686] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000008 [ 3252.454629][T22686] RBP: 00007f32c84b5090 R08: 0000000000000000 R09: 0000000000000000 [ 3252.462610][T22686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3252.470611][T22686] R13: 00007f32c7816038 R14: 00007f32c7815fa0 R15: 00007ffc57f6e0d8 [ 3252.478611][T22686] [ 3252.620826][T22694] netlink: 121460 bytes leftover after parsing attributes in process `syz.6.16769'. [ 3252.639515][T22694] netlink: 22856 bytes leftover after parsing attributes in process `syz.6.16769'. [ 3254.180054][T22718] netlink: 'syz.5.16777': attribute type 10 has an invalid length. [ 3254.200319][T22718] netlink: 40 bytes leftover after parsing attributes in process `syz.5.16777'. [ 3254.251074][T22718] netlink: 144 bytes leftover after parsing attributes in process `syz.5.16777'. [ 3254.283997][T22719] netlink: 'syz.2.16778': attribute type 10 has an invalid length. [ 3254.718999][T22729] netlink: 'syz.5.16780': attribute type 39 has an invalid length. [ 3255.032842][T22733] netlink: 121460 bytes leftover after parsing attributes in process `syz.6.16781'. [ 3255.080328][T22733] netlink: 22856 bytes leftover after parsing attributes in process `syz.6.16781'. [ 3255.269848][T22735] netlink: 'syz.3.16782': attribute type 39 has an invalid length. [ 3255.572735][T22739] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.16783'. [ 3255.651123][T22741] netlink: 'syz.2.16783': attribute type 39 has an invalid length. [ 3256.018210][T22742] FAULT_INJECTION: forcing a failure. [ 3256.018210][T22742] name failslab, interval 1, probability 0, space 0, times 0 [ 3256.031711][T22742] CPU: 1 PID: 22742 Comm: syz.5.16784 Not tainted syzkaller #0 [ 3256.039327][T22742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 3256.049442][T22742] Call Trace: [ 3256.052772][T22742] [ 3256.055758][T22742] dump_stack_lvl+0x18c/0x250 [ 3256.060517][T22742] ? show_regs_print_info+0x20/0x20 [ 3256.065787][T22742] ? load_image+0x400/0x400 [ 3256.070356][T22742] ? __might_sleep+0xe0/0xe0 [ 3256.074987][T22742] ? __lock_acquire+0x7d40/0x7d40 [ 3256.080072][T22742] should_fail_ex+0x39d/0x4d0 [ 3256.084807][T22742] should_failslab+0x9/0x20 [ 3256.089356][T22742] slab_pre_alloc_hook+0x59/0x310 [ 3256.094430][T22742] ? __request_module+0x2ed/0x600 [ 3256.099499][T22742] ? __request_module+0x2ed/0x600 [ 3256.104579][T22742] __kmem_cache_alloc_node+0x53/0x250 [ 3256.110001][T22742] ? __request_module+0x2ed/0x600 [ 3256.115055][T22742] __kmalloc_node_track_caller+0xa2/0x230 [ 3256.120842][T22742] kstrdup+0x3b/0x80 [ 3256.124781][T22742] __request_module+0x2ed/0x600 [ 3256.129687][T22742] ? module_enforce_rwx_sections+0x150/0x150 [ 3256.135740][T22742] ? bpf_lsm_capable+0x9/0x10 [ 3256.140459][T22742] ? security_capable+0x89/0xb0 [ 3256.145398][T22742] ? dev_load+0x21/0x1f0 [ 3256.149697][T22742] dev_load+0x18b/0x1f0 [ 3256.153903][T22742] wext_ioctl_dispatch+0x110/0x600 [ 3256.159100][T22742] ? wext_ioctl_dispatch+0x600/0x600 [ 3256.164442][T22742] ? iw_handler_get_private+0x1f0/0x1f0 [ 3256.170038][T22742] ? wext_handle_ioctl+0x1d0/0x1d0 [ 3256.175204][T22742] ? __might_fault+0xaa/0x120 [ 3256.179932][T22742] ? __might_fault+0xc6/0x120 [ 3256.184637][T22742] ? __might_fault+0xaa/0x120 [ 3256.189376][T22742] wext_handle_ioctl+0x117/0x1d0 [ 3256.194371][T22742] ? call_commit_handler+0xf0/0xf0 [ 3256.199565][T22742] sock_ioctl+0x15d/0x7e0 [ 3256.203940][T22742] ? sock_poll+0x3e0/0x3e0 [ 3256.208435][T22742] ? bpf_lsm_file_ioctl+0x9/0x10 [ 3256.213411][T22742] ? security_file_ioctl+0x80/0xa0 [ 3256.218610][T22742] ? sock_poll+0x3e0/0x3e0 [ 3256.223083][T22742] __se_sys_ioctl+0xfd/0x170 [ 3256.227733][T22742] do_syscall_64+0x55/0xa0 [ 3256.232212][T22742] ? clear_bhb_loop+0x40/0x90 [ 3256.236928][T22742] ? clear_bhb_loop+0x40/0x90 [ 3256.241645][T22742] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3256.247594][T22742] RIP: 0033:0x7f7938b9aeb9 [ 3256.252046][T22742] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3256.271695][T22742] RSP: 002b:00007f7939b24028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3256.280176][T22742] RAX: ffffffffffffffda RBX: 00007f7938e15fa0 RCX: 00007f7938b9aeb9 [ 3256.288216][T22742] RDX: 0000200000000040 RSI: 0000000000008b04 RDI: 000000000000000e [ 3256.296239][T22742] RBP: 00007f7939b24090 R08: 0000000000000000 R09: 0000000000000000 [ 3256.304260][T22742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3256.312294][T22742] R13: 00007f7938e16038 R14: 00007f7938e15fa0 R15: 00007ffde6b63c28 [ 3256.320372][T22742] [ 3257.596712][T22761] netlink: 'syz.2.16789': attribute type 10 has an invalid length. [ 3257.625320][T22761] netlink: 40 bytes leftover after parsing attributes in process `syz.2.16789'. [ 3257.666507][T22761] netlink: 144 bytes leftover after parsing attributes in process `syz.2.16789'. [ 3258.081073][T22771] netlink: 'syz.2.16792': attribute type 39 has an invalid length. [ 3258.098624][T22773] netlink: 121460 bytes leftover after parsing attributes in process `syz.6.16793'. [ 3258.143435][T22773] netlink: 22856 bytes leftover after parsing attributes in process `syz.6.16793'. [ 3258.260962][T22772] netlink: 'syz.3.16791': attribute type 10 has an invalid length. [ 3258.336044][T22775] netlink: 'syz.5.16794': attribute type 39 has an invalid length. [ 3258.645863][T22779] netlink: 'syz.2.16795': attribute type 39 has an invalid length. [ 3258.963690][T22677] delete_channel: no stack [ 3259.072179][T22790] netlink: 'syz.6.16800': attribute type 10 has an invalid length. [ 3259.152736][T22790] team0: Device veth1_macvtap failed to register rx_handler [ 3259.804302][T22802] netlink: 'syz.5.16804': attribute type 39 has an invalid length. [ 3259.881271][T22800] netlink: 'syz.2.16803': attribute type 39 has an invalid length. [ 3260.534929][T22814] netlink: 'syz.5.16807': attribute type 39 has an invalid length. [ 3260.576362][T22817] netlink: 'syz.6.16808': attribute type 10 has an invalid length. [ 3260.619511][T22819] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.16809'. [ 3260.733189][T22819] netlink: 22856 bytes leftover after parsing attributes in process `syz.2.16809'. [ 3261.057132][T22721] delete_channel: no stack [ 3262.136282][T22841] netlink: 40 bytes leftover after parsing attributes in process `syz.3.16814'. [ 3262.192394][T22841] batadv0: entered promiscuous mode [ 3262.265365][T22841] batadv0: entered allmulticast mode [ 3262.288633][T22841] bridge0: port 3(batadv0) entered blocking state [ 3262.491255][T22841] bridge0: port 3(batadv0) entered disabled state [ 3262.672339][T22841] bridge0: port 3(batadv0) entered blocking state [ 3262.679140][T22841] bridge0: port 3(batadv0) entered forwarding state [ 3262.891486][ T843] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 3262.901073][ T843] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 3262.993559][T22843] validate_nla: 3 callbacks suppressed [ 3262.993580][T22843] netlink: 'syz.2.16816': attribute type 39 has an invalid length. [ 3263.598364][T22863] netlink: 121460 bytes leftover after parsing attributes in process `syz.6.16821'. [ 3263.610342][T22862] netlink: 'syz.2.16822': attribute type 10 has an invalid length. [ 3263.667983][T22862] team0: Device veth1_macvtap failed to register rx_handler [ 3263.835430][T22863] netlink: 22856 bytes leftover after parsing attributes in process `syz.6.16821'. [ 3263.874874][T22866] netlink: 'syz.3.16820': attribute type 10 has an invalid length. [ 3264.534749][T22873] netlink: 121460 bytes leftover after parsing attributes in process `syz.5.16831'. [ 3264.557273][T22873] netlink: 22856 bytes leftover after parsing attributes in process `syz.5.16831'. [ 3264.718453][T22777] delete_channel: no stack [ 3265.590055][T22886] FAULT_INJECTION: forcing a failure. [ 3265.590055][T22886] name failslab, interval 1, probability 0, space 0, times 0 [ 3265.602460][T22888] netlink: 'syz.2.16830': attribute type 39 has an invalid length. [ 3265.635941][T22886] CPU: 1 PID: 22886 Comm: syz.5.16828 Not tainted syzkaller #0 [ 3265.643573][T22886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 3265.653842][T22886] Call Trace: [ 3265.657155][T22886] [ 3265.660126][T22886] dump_stack_lvl+0x18c/0x250 [ 3265.664860][T22886] ? show_regs_print_info+0x20/0x20 [ 3265.670132][T22886] ? load_image+0x400/0x400 [ 3265.674692][T22886] ? __might_sleep+0xe0/0xe0 [ 3265.679333][T22886] ? __lock_acquire+0x7d40/0x7d40 [ 3265.684419][T22886] should_fail_ex+0x39d/0x4d0 [ 3265.689159][T22886] should_failslab+0x9/0x20 [ 3265.693799][T22886] slab_pre_alloc_hook+0x59/0x310 [ 3265.698962][T22886] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 3265.704729][T22886] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 3265.710495][T22886] __kmem_cache_alloc_node+0x53/0x250 [ 3265.715928][T22886] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 3265.721690][T22886] __kmalloc+0xa4/0x230 [ 3265.725908][T22886] tomoyo_realpath_from_path+0xe3/0x5d0 [ 3265.731512][T22886] tomoyo_path_number_perm+0x248/0x620 [ 3265.737019][T22886] ? tomoyo_path_number_perm+0x217/0x620 [ 3265.742735][T22886] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 3265.748260][T22886] ? ksys_write+0x1c4/0x260 [ 3265.752897][T22886] ? __fget_files+0x28/0x4b0 [ 3265.757534][T22886] ? __fget_files+0x28/0x4b0 [ 3265.762172][T22886] security_file_ioctl+0x70/0xa0 [ 3265.767166][T22886] __se_sys_ioctl+0x48/0x170 [ 3265.771808][T22886] do_syscall_64+0x55/0xa0 [ 3265.776272][T22886] ? clear_bhb_loop+0x40/0x90 [ 3265.781003][T22886] ? clear_bhb_loop+0x40/0x90 [ 3265.785737][T22886] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3265.791680][T22886] RIP: 0033:0x7f7938b9aeb9 [ 3265.796137][T22886] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3265.815806][T22886] RSP: 002b:00007f7939b24028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3265.824268][T22886] RAX: ffffffffffffffda RBX: 00007f7938e15fa0 RCX: 00007f7938b9aeb9 [ 3265.832279][T22886] RDX: 000000110e22fff6 RSI: 00000000c004743e RDI: 000000000000000a [ 3265.840302][T22886] RBP: 00007f7939b24090 R08: 0000000000000000 R09: 0000000000000000 [ 3265.848313][T22886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3265.856333][T22886] R13: 00007f7938e16038 R14: 00007f7938e15fa0 R15: 00007ffde6b63c28 [ 3265.864365][T22886] [ 3265.895787][T22886] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3265.973385][T22818] delete_channel: no stack [ 3266.063605][T22895] netlink: 199824 bytes leftover after parsing attributes in process `syz.6.16832'. [ 3266.161378][T22897] netlink: 'syz.6.16832': attribute type 39 has an invalid length. [ 3266.563808][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 3266.570473][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 3267.048908][T22902] netlink: 'syz.3.16834': attribute type 10 has an invalid length. [ 3267.145481][T22902] netlink: 40 bytes leftover after parsing attributes in process `syz.3.16834'. [ 3267.177995][T22911] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.16837'. [ 3267.227853][T22906] netlink: 144 bytes leftover after parsing attributes in process `syz.3.16834'. [ 3267.293537][T22911] netlink: 22856 bytes leftover after parsing attributes in process `syz.2.16837'. [ 3271.193544][T22945] netlink: 'syz.6.16847': attribute type 10 has an invalid length. [ 3271.215299][T22945] netlink: 40 bytes leftover after parsing attributes in process `syz.6.16847'. [ 3271.245507][T22945] batadv0: entered promiscuous mode [ 3271.250986][T22945] batadv0: entered allmulticast mode [ 3271.271540][T22945] bridge0: port 3(batadv0) entered blocking state [ 3271.285557][T22945] bridge0: port 3(batadv0) entered disabled state [ 3271.294960][T22945] bridge0: port 3(batadv0) entered blocking state [ 3271.301660][T22945] bridge0: port 3(batadv0) entered forwarding state [ 3271.378944][T22947] netlink: 144 bytes leftover after parsing attributes in process `syz.6.16847'. [ 3271.410861][T22954] netlink: 121460 bytes leftover after parsing attributes in process `syz.5.16849'. [ 3271.485681][T22954] netlink: 22856 bytes leftover after parsing attributes in process `syz.5.16849'. [ 3271.508033][ T7727] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 3271.517478][ T7727] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 3271.783554][T22957] netlink: 'syz.6.16851': attribute type 39 has an invalid length. [ 3272.448078][T22867] delete_channel: no stack [ 3273.451458][T22987] netlink: 199824 bytes leftover after parsing attributes in process `syz.5.16859'. [ 3273.760465][T22987] netlink: 'syz.5.16859': attribute type 39 has an invalid length. [ 3274.062457][T22994] netlink: 'syz.2.16862': attribute type 10 has an invalid length. [ 3274.073417][T22994] netlink: 40 bytes leftover after parsing attributes in process `syz.2.16862'. [ 3274.123705][T22994] netlink: 144 bytes leftover after parsing attributes in process `syz.2.16862'. [ 3274.434233][T23001] netlink: 121460 bytes leftover after parsing attributes in process `syz.6.16865'. [ 3274.452260][T23001] netlink: 22856 bytes leftover after parsing attributes in process `syz.6.16865'. [ 3275.886773][T23017] netlink: 'syz.5.16870': attribute type 10 has an invalid length. [ 3275.999109][T23020] netlink: 'syz.6.16872': attribute type 39 has an invalid length. [ 3277.004985][T23039] netlink: 'syz.5.16876': attribute type 10 has an invalid length. [ 3277.038166][T23042] netlink: 121460 bytes leftover after parsing attributes in process `syz.6.16877'. [ 3277.055052][T23039] netlink: 40 bytes leftover after parsing attributes in process `syz.5.16876'. [ 3277.116350][T23042] netlink: 22856 bytes leftover after parsing attributes in process `syz.6.16877'. [ 3277.255555][T23043] netlink: 144 bytes leftover after parsing attributes in process `syz.5.16876'. [ 3277.281341][T23048] netlink: 'syz.2.16879': attribute type 39 has an invalid length. [ 3277.486919][T23051] netlink: 'syz.3.16881': attribute type 39 has an invalid length. [ 3277.661253][T23055] netlink: 'syz.5.16883': attribute type 39 has an invalid length. [ 3278.324344][T23070] netlink: 'syz.5.16895': attribute type 39 has an invalid length. [ 3278.612979][T23071] netlink: 'syz.3.16887': attribute type 10 has an invalid length. [ 3278.638076][T23075] netlink: 'syz.6.16889': attribute type 39 has an invalid length. [ 3278.706699][T23077] netlink: 'syz.2.16891': attribute type 10 has an invalid length. [ 3278.737360][T23077] netlink: 40 bytes leftover after parsing attributes in process `syz.2.16891'. [ 3278.771496][T23077] netlink: 144 bytes leftover after parsing attributes in process `syz.2.16891'. [ 3278.948153][T23083] netlink: 2 bytes leftover after parsing attributes in process `syz.5.16893'. [ 3279.000880][T23083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3279.013189][T23083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3279.026462][T23083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3279.038789][T23083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3279.057093][T23083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3279.074819][T23083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3279.105412][T23083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3279.140552][T23083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3279.161847][T23083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3279.177139][T23083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3279.197075][T23083] batadv_slave_1: entered promiscuous mode [ 3279.210773][T23087] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.16894'. [ 3279.231888][T23087] netlink: 22856 bytes leftover after parsing attributes in process `syz.2.16894'. [ 3279.550222][T23089] netlink: 'syz.3.16896': attribute type 39 has an invalid length. [ 3280.414502][T23101] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.16901'. [ 3280.612072][T23101] netlink: 'syz.3.16901': attribute type 39 has an invalid length. [ 3281.566842][T23118] FAULT_INJECTION: forcing a failure. [ 3281.566842][T23118] name failslab, interval 1, probability 0, space 0, times 0 [ 3281.611402][T23118] CPU: 0 PID: 23118 Comm: syz.6.16909 Not tainted syzkaller #0 [ 3281.619026][T23118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 3281.629134][T23118] Call Trace: [ 3281.632438][T23118] [ 3281.635398][T23118] dump_stack_lvl+0x18c/0x250 [ 3281.640129][T23118] ? show_regs_print_info+0x20/0x20 [ 3281.645390][T23118] ? load_image+0x400/0x400 [ 3281.649929][T23118] ? __might_sleep+0xe0/0xe0 [ 3281.654555][T23118] ? __lock_acquire+0x7d40/0x7d40 [ 3281.659625][T23118] should_fail_ex+0x39d/0x4d0 [ 3281.664357][T23118] should_failslab+0x9/0x20 [ 3281.668903][T23118] slab_pre_alloc_hook+0x59/0x310 [ 3281.673983][T23118] ? sk_prot_alloc+0xe7/0x210 [ 3281.678701][T23118] ? sk_prot_alloc+0xe7/0x210 [ 3281.683409][T23118] __kmem_cache_alloc_node+0x53/0x250 [ 3281.688820][T23118] ? sk_prot_alloc+0xe7/0x210 [ 3281.693533][T23118] __kmalloc+0xa4/0x230 [ 3281.697718][T23118] sk_prot_alloc+0xe7/0x210 [ 3281.702247][T23118] ? sk_alloc+0x24/0x360 [ 3281.706524][T23118] sk_alloc+0x3a/0x360 [ 3281.710637][T23118] ? bpf_ctx_init+0x163/0x1a0 [ 3281.715367][T23118] ? bpf_prog_test_run_skb+0x273/0x12b0 [ 3281.720945][T23118] bpf_prog_test_run_skb+0x3a5/0x12b0 [ 3281.726357][T23118] ? __fget_files+0x28/0x4b0 [ 3281.730989][T23118] ? __fget_files+0x28/0x4b0 [ 3281.735626][T23118] ? __fget_files+0x43d/0x4b0 [ 3281.740355][T23118] ? cpu_online+0x60/0x60 [ 3281.744713][T23118] bpf_prog_test_run+0x321/0x390 [ 3281.749697][T23118] __sys_bpf+0x49d/0x890 [ 3281.753965][T23118] ? bpf_link_show_fdinfo+0x390/0x390 [ 3281.759375][T23118] ? lock_chain_count+0x20/0x20 [ 3281.764265][T23118] __x64_sys_bpf+0x7c/0x90 [ 3281.768722][T23118] do_syscall_64+0x55/0xa0 [ 3281.773181][T23118] ? clear_bhb_loop+0x40/0x90 [ 3281.777897][T23118] ? clear_bhb_loop+0x40/0x90 [ 3281.782599][T23118] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3281.788510][T23118] RIP: 0033:0x7fcc0e59aeb9 [ 3281.792957][T23118] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3281.812598][T23118] RSP: 002b:00007fcc0f47e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3281.821051][T23118] RAX: ffffffffffffffda RBX: 00007fcc0e815fa0 RCX: 00007fcc0e59aeb9 [ 3281.829070][T23118] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 3281.837086][T23118] RBP: 00007fcc0f47e090 R08: 0000000000000000 R09: 0000000000000000 [ 3281.845099][T23118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3281.853096][T23118] R13: 00007fcc0e816038 R14: 00007fcc0e815fa0 R15: 00007ffe2b325878 [ 3281.861136][T23118] [ 3281.950104][T23018] delete_channel: no stack [ 3282.262363][T23128] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.16910'. [ 3282.346757][T23128] netlink: 22856 bytes leftover after parsing attributes in process `syz.3.16910'. [ 3283.572569][T23141] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.16914'. [ 3283.785572][T23141] netlink: 'syz.3.16914': attribute type 39 has an invalid length. [ 3285.782513][T23072] delete_channel: no stack [ 3287.166460][T23161] FAULT_INJECTION: forcing a failure. [ 3287.166460][T23161] name failslab, interval 1, probability 0, space 0, times 0 [ 3287.179653][T23161] CPU: 1 PID: 23161 Comm: syz.5.16923 Not tainted syzkaller #0 [ 3287.187235][T23161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 3287.197330][T23161] Call Trace: [ 3287.200696][T23161] [ 3287.203658][T23161] dump_stack_lvl+0x18c/0x250 [ 3287.208406][T23161] ? show_regs_print_info+0x20/0x20 [ 3287.213655][T23161] ? load_image+0x400/0x400 [ 3287.218202][T23161] ? skb_network_protocol+0x529/0x780 [ 3287.223619][T23161] should_fail_ex+0x39d/0x4d0 [ 3287.228435][T23161] should_failslab+0x9/0x20 [ 3287.232978][T23161] slab_pre_alloc_hook+0x59/0x310 [ 3287.238070][T23161] kmem_cache_alloc+0x5a/0x2d0 [ 3287.242884][T23161] ? skb_clone+0x1eb/0x370 [ 3287.247353][T23161] skb_clone+0x1eb/0x370 [ 3287.251636][T23161] ? dev_queue_xmit_nit+0x212/0xbb0 [ 3287.256878][T23161] dev_queue_xmit_nit+0x24d/0xbb0 [ 3287.261942][T23161] ? dev_queue_xmit_nit+0x2d/0xbb0 [ 3287.267100][T23161] ? validate_xmit_skb+0x949/0xf60 [ 3287.272262][T23161] dev_hard_start_xmit+0x148/0x740 [ 3287.277465][T23161] __dev_queue_xmit+0x1ac2/0x36b0 [ 3287.282532][T23161] ? __dev_queue_xmit+0x26b/0x36b0 [ 3287.287704][T23161] ? netdev_core_pick_tx+0x340/0x340 [ 3287.293033][T23161] ? skb_release_data+0x1cf/0x800 [ 3287.298149][T23161] ? pskb_expand_head+0xbfe/0x1230 [ 3287.303376][T23161] __bpf_tx_skb+0x189/0x250 [ 3287.307932][T23161] bpf_clone_redirect+0x30f/0x4a0 [ 3287.313022][T23161] bpf_prog_208b094576c80b22+0x5e/0x63 [ 3287.318532][T23161] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 3287.324652][T23161] ? lock_chain_count+0x20/0x20 [ 3287.329552][T23161] ? seqcount_lockdep_reader_access+0x12b/0x1d0 [ 3287.335849][T23161] ? lockdep_softirqs_on+0x580/0x580 [ 3287.341174][T23161] ? ktime_get+0x7f/0x280 [ 3287.345546][T23161] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 3287.351858][T23161] ? ktime_get_real_ts64+0x440/0x440 [ 3287.357181][T23161] ? __x64_sys_bpf+0x7c/0x90 [ 3287.361814][T23161] ? __local_bh_disable_ip+0x108/0x1a0 [ 3287.367320][T23161] ? __cant_sleep+0x220/0x220 [ 3287.372080][T23161] ? read_tsc+0x9/0x20 [ 3287.376184][T23161] ? ktime_get+0x24b/0x280 [ 3287.380657][T23161] ? bpf_test_run+0x174/0x870 [ 3287.385407][T23161] bpf_test_run+0x2df/0x870 [ 3287.389953][T23161] ? bpf_test_run+0x174/0x870 [ 3287.394662][T23161] ? convert___skb_to_skb+0x590/0x590 [ 3287.400062][T23161] ? eth_get_headlen+0x210/0x210 [ 3287.405030][T23161] ? slab_build_skb+0x25f/0x3f0 [ 3287.409909][T23161] ? convert___skb_to_skb+0x3d/0x590 [ 3287.415221][T23161] bpf_prog_test_run_skb+0xad2/0x12b0 [ 3287.420644][T23161] ? cpu_online+0x60/0x60 [ 3287.425002][T23161] bpf_prog_test_run+0x321/0x390 [ 3287.429966][T23161] __sys_bpf+0x49d/0x890 [ 3287.434234][T23161] ? bpf_link_show_fdinfo+0x390/0x390 [ 3287.439672][T23161] ? lock_chain_count+0x20/0x20 [ 3287.444564][T23161] __x64_sys_bpf+0x7c/0x90 [ 3287.449005][T23161] do_syscall_64+0x55/0xa0 [ 3287.453465][T23161] ? clear_bhb_loop+0x40/0x90 [ 3287.458157][T23161] ? clear_bhb_loop+0x40/0x90 [ 3287.462855][T23161] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3287.468765][T23161] RIP: 0033:0x7f7938b9aeb9 [ 3287.473201][T23161] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3287.492830][T23161] RSP: 002b:00007f7939b24028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3287.501284][T23161] RAX: ffffffffffffffda RBX: 00007f7938e15fa0 RCX: 00007f7938b9aeb9 [ 3287.509282][T23161] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 3287.517266][T23161] RBP: 00007f7939b24090 R08: 0000000000000000 R09: 0000000000000000 [ 3287.525246][T23161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3287.533277][T23161] R13: 00007f7938e16038 R14: 00007f7938e15fa0 R15: 00007ffde6b63c28 [ 3287.541297][T23161] [ 3287.603854][T23159] netlink: 'syz.2.16922': attribute type 10 has an invalid length. [ 3288.115725][T23172] netlink: 'syz.5.16928': attribute type 39 has an invalid length. [ 3289.577509][T23163] delete_channel: no stack [ 3291.596756][T23184] netlink: 'syz.6.16933': attribute type 10 has an invalid length. [ 3292.093714][T23204] netlink: 'syz.6.16939': attribute type 39 has an invalid length. [ 3293.133913][T23218] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.16945'. [ 3293.172522][T23218] netlink: 22856 bytes leftover after parsing attributes in process `syz.2.16945'. [ 3293.319134][T23220] netlink: 'syz.3.16946': attribute type 39 has an invalid length. [ 3294.470708][T23192] delete_channel: no stack [ 3296.101979][T23225] netlink: 'syz.3.16947': attribute type 10 has an invalid length. [ 3296.336519][T23238] netlink: 'syz.5.16951': attribute type 39 has an invalid length. [ 3296.642356][T23243] netlink: 'syz.2.16955': attribute type 39 has an invalid length. [ 3297.289773][T23254] netlink: 121460 bytes leftover after parsing attributes in process `syz.6.16957'. [ 3297.398267][T23254] netlink: 22856 bytes leftover after parsing attributes in process `syz.6.16957'. [ 3299.039609][T23274] netlink: 'syz.2.16965': attribute type 39 has an invalid length. [ 3299.345324][T21450] Bluetooth: hci3: command 0x0406 tx timeout [ 3300.224848][T23232] delete_channel: no stack [ 3300.548907][T23280] netlink: 'syz.2.16968': attribute type 39 has an invalid length. [ 3300.947829][T23292] netlink: 121460 bytes leftover after parsing attributes in process `syz.6.16971'. [ 3300.982242][T23292] netlink: 22856 bytes leftover after parsing attributes in process `syz.6.16971'. [ 3304.297475][T23303] netlink: 'syz.3.16976': attribute type 39 has an invalid length. [ 3305.145493][T23320] netlink: 'syz.5.16980': attribute type 39 has an invalid length. [ 3305.239681][T23305] netlink: 'syz.6.16977': attribute type 10 has an invalid length. [ 3305.861281][T23335] netlink: 121460 bytes leftover after parsing attributes in process `syz.6.16985'. [ 3305.915631][T23335] netlink: 22856 bytes leftover after parsing attributes in process `syz.6.16985'. [ 3306.214155][T23337] netlink: 'syz.2.16988': attribute type 39 has an invalid length. [ 3306.791551][T23348] netlink: 'syz.5.16993': attribute type 39 has an invalid length. [ 3308.552919][T23315] delete_channel: no stack [ 3309.939490][T23363] netlink: 'syz.2.16998': attribute type 10 has an invalid length. [ 3310.112642][T23374] netlink: 'syz.6.17001': attribute type 39 has an invalid length. [ 3310.246204][T23378] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.17002'. [ 3310.268538][T23378] netlink: 22856 bytes leftover after parsing attributes in process `syz.3.17002'. [ 3310.363371][T23382] netlink: 'syz.6.17004': attribute type 10 has an invalid length. [ 3310.377513][T23382] netlink: 40 bytes leftover after parsing attributes in process `syz.6.17004'. [ 3310.397987][T23382] netlink: 144 bytes leftover after parsing attributes in process `syz.6.17004'. [ 3310.816552][T23386] netlink: 'syz.5.17007': attribute type 39 has an invalid length. [ 3312.333563][T23370] delete_channel: no stack [ 3314.284487][T23399] netlink: 'syz.2.17012': attribute type 39 has an invalid length. [ 3314.384422][T23405] netlink: 'syz.5.17015': attribute type 39 has an invalid length. [ 3314.655678][T23404] netlink: 'syz.3.17014': attribute type 10 has an invalid length. [ 3315.647916][T23413] netlink: 'syz.6.17018': attribute type 10 has an invalid length. [ 3315.902832][T23411] netlink: 'syz.2.17017': attribute type 10 has an invalid length. [ 3316.286869][T23433] netlink: 121460 bytes leftover after parsing attributes in process `syz.5.17024'. [ 3316.335452][T23433] netlink: 22856 bytes leftover after parsing attributes in process `syz.5.17024'. [ 3316.519223][T23436] netlink: 'syz.6.17025': attribute type 39 has an invalid length. [ 3316.742453][T23439] netlink: 'syz.3.17027': attribute type 39 has an invalid length. [ 3318.967294][T23468] netlink: 'syz.3.17037': attribute type 39 has an invalid length. [ 3319.056817][T23459] netlink: 'syz.5.17034': attribute type 10 has an invalid length. [ 3319.398347][T23464] netlink: 'syz.6.17036': attribute type 10 has an invalid length. [ 3319.495610][T23472] netlink: 'syz.3.17038': attribute type 39 has an invalid length. [ 3319.705199][T23476] netlink: 121460 bytes leftover after parsing attributes in process `syz.5.17039'. [ 3319.775531][T23476] netlink: 22856 bytes leftover after parsing attributes in process `syz.5.17039'. [ 3321.454270][T23487] netlink: 'syz.6.17041': attribute type 10 has an invalid length. [ 3321.511046][T23497] FAULT_INJECTION: forcing a failure. [ 3321.511046][T23497] name failslab, interval 1, probability 0, space 0, times 0 [ 3321.578105][T23499] netlink: 'syz.3.17046': attribute type 39 has an invalid length. [ 3321.625626][T23497] CPU: 0 PID: 23497 Comm: syz.2.17045 Not tainted syzkaller #0 [ 3321.633275][T23497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 3321.643372][T23497] Call Trace: [ 3321.646685][T23497] [ 3321.649658][T23497] dump_stack_lvl+0x18c/0x250 [ 3321.654404][T23497] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3321.660603][T23497] ? show_regs_print_info+0x20/0x20 [ 3321.665855][T23497] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3321.672080][T23497] should_fail_ex+0x39d/0x4d0 [ 3321.676806][T23497] should_failslab+0x9/0x20 [ 3321.681341][T23497] slab_pre_alloc_hook+0x59/0x310 [ 3321.686395][T23497] ? sctp_transport_new+0x7e/0x630 [ 3321.691544][T23497] __kmem_cache_alloc_node+0x53/0x250 [ 3321.696955][T23497] ? sctp_transport_new+0x7e/0x630 [ 3321.702081][T23497] kmalloc_trace+0x2a/0xe0 [ 3321.706526][T23497] sctp_transport_new+0x7e/0x630 [ 3321.711487][T23497] sctp_assoc_add_peer+0x259/0x1390 [ 3321.716704][T23497] ? sctp_bind_addr_copy+0x37b/0x3c0 [ 3321.722029][T23497] sctp_connect_new_asoc+0x323/0x6a0 [ 3321.727336][T23497] ? __sctp_connect+0xd80/0xd80 [ 3321.732204][T23497] ? __local_bh_enable_ip+0x13a/0x1c0 [ 3321.737607][T23497] ? _local_bh_enable+0xa0/0xa0 [ 3321.742480][T23497] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 3321.748320][T23497] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 3321.754202][T23497] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 3321.759780][T23497] ? security_sctp_bind_connect+0x89/0xb0 [ 3321.765529][T23497] sctp_sendmsg+0x1575/0x28c0 [ 3321.770241][T23497] ? sctp_getsockopt+0xb60/0xb60 [ 3321.775202][T23497] ? aa_sk_perm+0x83c/0x970 [ 3321.779753][T23497] ? aa_af_perm+0x330/0x330 [ 3321.784283][T23497] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 3321.790721][T23497] ? sock_rps_record_flow+0x19/0x3f0 [ 3321.796039][T23497] ? inet_sendmsg+0x7c/0x2f0 [ 3321.800651][T23497] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 3321.805963][T23497] ? security_socket_sendmsg+0x80/0xa0 [ 3321.811445][T23497] ? inet_send_prepare+0x260/0x260 [ 3321.816580][T23497] ____sys_sendmsg+0x5ba/0x960 [ 3321.821384][T23497] ? __lock_acquire+0x7d40/0x7d40 [ 3321.826525][T23497] ? __asan_memset+0x22/0x40 [ 3321.831151][T23497] ? __sys_sendmsg_sock+0x30/0x30 [ 3321.836212][T23497] ? __import_iovec+0x5f2/0x850 [ 3321.841106][T23497] ? import_iovec+0x73/0xa0 [ 3321.845647][T23497] ___sys_sendmsg+0x2a6/0x360 [ 3321.850359][T23497] ? __sys_sendmsg+0x2a0/0x2a0 [ 3321.855200][T23497] __se_sys_sendmsg+0x1c2/0x2b0 [ 3321.860081][T23497] ? __x64_sys_sendmsg+0x80/0x80 [ 3321.865062][T23497] ? syscall_enter_from_user_mode+0x2e/0x80 [ 3321.870987][T23497] do_syscall_64+0x55/0xa0 [ 3321.875435][T23497] ? clear_bhb_loop+0x40/0x90 [ 3321.880135][T23497] ? clear_bhb_loop+0x40/0x90 [ 3321.884829][T23497] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3321.890753][T23497] RIP: 0033:0x7f32c759aeb9 [ 3321.895203][T23497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3321.914837][T23497] RSP: 002b:00007f32c84b5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3321.923276][T23497] RAX: ffffffffffffffda RBX: 00007f32c7815fa0 RCX: 00007f32c759aeb9 [ 3321.931266][T23497] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000009 [ 3321.939253][T23497] RBP: 00007f32c84b5090 R08: 0000000000000000 R09: 0000000000000000 [ 3321.947241][T23497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3321.955244][T23497] R13: 00007f32c7816038 R14: 00007f32c7815fa0 R15: 00007ffc57f6e0d8 [ 3321.963266][T23497] [ 3322.215929][T23409] delete_channel: no stack [ 3322.757215][T23423] delete_channel: no stack [ 3323.807112][T23418] delete_channel: no stack [ 3324.542623][T23522] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.17051'. [ 3324.575377][T23513] netlink: 'syz.2.17049': attribute type 10 has an invalid length. [ 3324.647487][T23522] netlink: 22856 bytes leftover after parsing attributes in process `syz.3.17051'. [ 3324.668010][T23523] netlink: 'syz.6.17050': attribute type 39 has an invalid length. [ 3325.031905][T23465] delete_channel: no stack [ 3325.746396][T23536] netlink: 'syz.3.17055': attribute type 10 has an invalid length. [ 3326.069438][T23542] netlink: 'syz.2.17058': attribute type 39 has an invalid length. [ 3326.857472][T23556] netlink: 'syz.2.17063': attribute type 39 has an invalid length. [ 3327.105741][T23558] netlink: 'syz.5.17064': attribute type 10 has an invalid length. [ 3327.113735][T23558] netlink: 40 bytes leftover after parsing attributes in process `syz.5.17064'. [ 3327.214219][T23560] netlink: 144 bytes leftover after parsing attributes in process `syz.5.17064'. [ 3327.994181][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 3328.000732][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 3328.658159][T23470] delete_channel: no stack [ 3328.847619][T23517] delete_channel: no stack [ 3329.094696][T23494] delete_channel: no stack [ 3329.699737][T23571] netlink: 212940 bytes leftover after parsing attributes in process `syz.3.17069'. [ 3329.812337][T23575] netlink: 'syz.5.17071': attribute type 39 has an invalid length. [ 3329.829212][T23571] pim6reg1: entered promiscuous mode [ 3329.844892][T23571] pim6reg1: entered allmulticast mode [ 3330.191962][T23577] netlink: 'syz.5.17072': attribute type 39 has an invalid length. [ 3330.403751][T23569] netlink: 'syz.6.17068': attribute type 10 has an invalid length. [ 3330.426846][T23538] delete_channel: no stack [ 3330.489848][T23583] netlink: 'syz.5.17075': attribute type 10 has an invalid length. [ 3330.500425][T23583] netlink: 40 bytes leftover after parsing attributes in process `syz.5.17075'. [ 3330.527891][T23586] netlink: 'syz.3.17074': attribute type 39 has an invalid length. [ 3330.568362][T23587] netlink: 144 bytes leftover after parsing attributes in process `syz.5.17075'. [ 3331.757643][T23601] netlink: 'syz.2.17080': attribute type 39 has an invalid length. [ 3332.044775][T23605] FAULT_INJECTION: forcing a failure. [ 3332.044775][T23605] name failslab, interval 1, probability 0, space 0, times 0 [ 3332.137784][T23605] CPU: 1 PID: 23605 Comm: syz.3.17082 Not tainted syzkaller #0 [ 3332.145508][T23605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 3332.155615][T23605] Call Trace: [ 3332.158940][T23605] [ 3332.161902][T23605] dump_stack_lvl+0x18c/0x250 [ 3332.166634][T23605] ? show_regs_print_info+0x20/0x20 [ 3332.171962][T23605] ? load_image+0x400/0x400 [ 3332.176521][T23605] ? __might_sleep+0xe0/0xe0 [ 3332.181156][T23605] ? __lock_acquire+0x7d40/0x7d40 [ 3332.186229][T23605] should_fail_ex+0x39d/0x4d0 [ 3332.191049][T23605] should_failslab+0x9/0x20 [ 3332.195602][T23605] slab_pre_alloc_hook+0x59/0x310 [ 3332.200704][T23605] ? kvmalloc_node+0x70/0x180 [ 3332.205453][T23605] ? kvmalloc_node+0x70/0x180 [ 3332.210181][T23605] __kmem_cache_alloc_node+0x53/0x250 [ 3332.215625][T23605] ? kvmalloc_node+0x70/0x180 [ 3332.220439][T23605] __kmalloc_node+0xa4/0x230 [ 3332.225085][T23605] kvmalloc_node+0x70/0x180 [ 3332.229640][T23605] bpf_test_run_xdp_live+0x1c2/0x1b20 [ 3332.235071][T23605] ? 0xffffffffa0004740 [ 3332.239264][T23605] ? 0xffffffffa0004740 [ 3332.243452][T23605] ? bpf_dispatcher_change_prog+0xcbf/0xf10 [ 3332.249403][T23605] ? 0xffffffffa0004740 [ 3332.253601][T23605] ? xdp_convert_md_to_buff+0x330/0x330 [ 3332.259230][T23605] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 3332.265517][T23605] ? _copy_from_user+0xa5/0xe0 [ 3332.270329][T23605] ? bpf_test_init+0x119/0x140 [ 3332.275130][T23605] ? xdp_convert_md_to_buff+0x5b/0x330 [ 3332.280627][T23605] bpf_prog_test_run_xdp+0x7ca/0x10e0 [ 3332.286066][T23605] ? dev_put+0x80/0x80 [ 3332.290196][T23605] ? dev_put+0x80/0x80 [ 3332.294341][T23605] bpf_prog_test_run+0x321/0x390 [ 3332.299321][T23605] __sys_bpf+0x49d/0x890 [ 3332.303610][T23605] ? bpf_link_show_fdinfo+0x390/0x390 [ 3332.309043][T23605] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3332.315260][T23605] __x64_sys_bpf+0x7c/0x90 [ 3332.319722][T23605] do_syscall_64+0x55/0xa0 [ 3332.324187][T23605] ? clear_bhb_loop+0x40/0x90 [ 3332.328912][T23605] ? clear_bhb_loop+0x40/0x90 [ 3332.333645][T23605] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3332.339559][T23605] RIP: 0033:0x7f687199aeb9 [ 3332.344001][T23605] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3332.363634][T23605] RSP: 002b:00007f68728bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3332.372068][T23605] RAX: ffffffffffffffda RBX: 00007f6871c15fa0 RCX: 00007f687199aeb9 [ 3332.380053][T23605] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 3332.388036][T23605] RBP: 00007f68728bf090 R08: 0000000000000000 R09: 0000000000000000 [ 3332.396028][T23605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3332.404022][T23605] R13: 00007f6871c16038 R14: 00007f6871c15fa0 R15: 00007ffc546567b8 [ 3332.412028][T23605] [ 3332.466423][T23609] netlink: 'syz.2.17084': attribute type 39 has an invalid length. [ 3332.669295][T23616] netlink: 'syz.3.17086': attribute type 10 has an invalid length. [ 3332.696507][T23616] netlink: 40 bytes leftover after parsing attributes in process `syz.3.17086'. [ 3332.722428][T23616] netlink: 144 bytes leftover after parsing attributes in process `syz.3.17086'. [ 3333.250450][T23624] netlink: 199824 bytes leftover after parsing attributes in process `syz.6.17087'. [ 3333.472183][T23628] netlink: 'syz.6.17087': attribute type 39 has an invalid length. [ 3334.353885][T23634] netlink: 'syz.2.17092': attribute type 39 has an invalid length. [ 3334.996203][T23656] netlink: 'syz.3.17099': attribute type 39 has an invalid length. [ 3335.312248][T23660] netlink: 'syz.6.17100': attribute type 10 has an invalid length. [ 3335.333117][T23660] netlink: 40 bytes leftover after parsing attributes in process `syz.6.17100'. [ 3335.391836][T23660] netlink: 144 bytes leftover after parsing attributes in process `syz.6.17100'. [ 3336.237167][T23581] delete_channel: no stack [ 3338.017449][T23668] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.17102'. [ 3338.107683][T23668] netlink: 'syz.3.17102': attribute type 39 has an invalid length. [ 3338.368002][T23672] netlink: 'syz.6.17104': attribute type 39 has an invalid length. [ 3339.098458][T23682] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.17108'. [ 3339.165420][T23682] netlink: 3064 bytes leftover after parsing attributes in process `syz.6.17108'. [ 3339.889534][T23686] netlink: 'syz.3.17109': attribute type 10 has an invalid length. [ 3340.307951][T12362] Bluetooth: hci6: command 0x0406 tx timeout [ 3342.419176][T23702] netlink: 'syz.2.17113': attribute type 39 has an invalid length. [ 3342.579237][T23708] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.17115'. [ 3342.612475][T23708] netlink: 22856 bytes leftover after parsing attributes in process `syz.3.17115'. [ 3342.971441][T23691] delete_channel: no stack [ 3345.405789][T23711] netlink: 'syz.6.17116': attribute type 39 has an invalid length. [ 3345.596789][T23719] netlink: 'syz.2.17117': attribute type 10 has an invalid length. [ 3345.651961][T23719] team0: Device veth1_macvtap failed to register rx_handler [ 3345.831429][T23723] netlink: 'syz.3.17120': attribute type 39 has an invalid length. [ 3346.365608][T23735] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.17123'. [ 3346.441567][T23735] netlink: 3064 bytes leftover after parsing attributes in process `syz.3.17123'. [ 3346.552941][T23739] netlink: 'syz.5.17124': attribute type 10 has an invalid length. [ 3346.662014][T23739] team0: Device veth1_macvtap failed to register rx_handler [ 3349.186644][T23738] delete_channel: no stack [ 3349.191456][T23734] netlink: 'syz.6.17122': attribute type 10 has an invalid length. [ 3349.447202][T23749] netlink: 'syz.3.17127': attribute type 39 has an invalid length. [ 3350.383223][T23759] netlink: 'syz.5.17131': attribute type 39 has an invalid length. [ 3350.383733][T23761] FAULT_INJECTION: forcing a failure. [ 3350.383733][T23761] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3350.418460][T23761] CPU: 0 PID: 23761 Comm: syz.3.17133 Not tainted syzkaller #0 [ 3350.426085][T23761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 3350.436185][T23761] Call Trace: [ 3350.439484][T23761] [ 3350.442425][T23761] dump_stack_lvl+0x18c/0x250 [ 3350.447133][T23761] ? show_regs_print_info+0x20/0x20 [ 3350.452404][T23761] ? load_image+0x400/0x400 [ 3350.456970][T23761] ? __might_fault+0xaa/0x120 [ 3350.461691][T23761] should_fail_ex+0x39d/0x4d0 [ 3350.466402][T23761] copyin+0x1a/0x90 [ 3350.470253][T23761] _copy_from_iter+0x54f/0x12e0 [ 3350.475135][T23761] ? slab_post_alloc_hook+0x8a/0x4b0 [ 3350.480454][T23761] ? __virt_addr_valid+0x18c/0x540 [ 3350.485629][T23761] ? copyout_mc+0x70/0x70 [ 3350.489995][T23761] ? __virt_addr_valid+0x18c/0x540 [ 3350.495146][T23761] ? __virt_addr_valid+0x18c/0x540 [ 3350.500291][T23761] ? __virt_addr_valid+0x469/0x540 [ 3350.505441][T23761] ? __check_object_size+0x506/0xa20 [ 3350.510760][T23761] netlink_sendmsg+0x76b/0xbf0 [ 3350.515559][T23761] ? netlink_getsockopt+0x590/0x590 [ 3350.520786][T23761] ? aa_sock_msg_perm+0x94/0x150 [ 3350.525747][T23761] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 3350.531058][T23761] ? security_socket_sendmsg+0x80/0xa0 [ 3350.536548][T23761] ? netlink_getsockopt+0x590/0x590 [ 3350.541791][T23761] ____sys_sendmsg+0x5ba/0x960 [ 3350.546592][T23761] ? __asan_memset+0x22/0x40 [ 3350.551209][T23761] ? __sys_sendmsg_sock+0x30/0x30 [ 3350.556260][T23761] ? __import_iovec+0x3fa/0x850 [ 3350.561140][T23761] ? import_iovec+0x73/0xa0 [ 3350.565675][T23761] ___sys_sendmsg+0x2a6/0x360 [ 3350.570380][T23761] ? __sys_sendmsg+0x2a0/0x2a0 [ 3350.575221][T23761] ? __lock_acquire+0x7d40/0x7d40 [ 3350.580300][T23761] __se_sys_sendmsg+0x1c2/0x2b0 [ 3350.585184][T23761] ? __x64_sys_sendmsg+0x80/0x80 [ 3350.590147][T23761] ? lockdep_hardirqs_on+0x98/0x150 [ 3350.595397][T23761] do_syscall_64+0x55/0xa0 [ 3350.599870][T23761] ? clear_bhb_loop+0x40/0x90 [ 3350.604560][T23761] ? clear_bhb_loop+0x40/0x90 [ 3350.609254][T23761] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3350.615170][T23761] RIP: 0033:0x7f687199aeb9 [ 3350.619596][T23761] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3350.639224][T23761] RSP: 002b:00007f68728bf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3350.647660][T23761] RAX: ffffffffffffffda RBX: 00007f6871c15fa0 RCX: 00007f687199aeb9 [ 3350.655650][T23761] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 3350.663641][T23761] RBP: 00007f68728bf090 R08: 0000000000000000 R09: 0000000000000000 [ 3350.671634][T23761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3350.679627][T23761] R13: 00007f6871c16038 R14: 00007f6871c15fa0 R15: 00007ffc546567b8 [ 3350.687639][T23761] [ 3350.960788][T23768] netlink: 121460 bytes leftover after parsing attributes in process `syz.6.17128'. [ 3350.970502][T23768] netlink: 22856 bytes leftover after parsing attributes in process `syz.6.17128'. [ 3351.341084][T23775] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.17136'. [ 3351.363842][T23775] netlink: 3064 bytes leftover after parsing attributes in process `syz.2.17136'. [ 3351.773045][T23789] netlink: 'syz.3.17139': attribute type 10 has an invalid length. [ 3351.802935][T23781] netlink: 'syz.5.17138': attribute type 10 has an invalid length. [ 3353.014403][T23803] netlink: 'syz.6.17143': attribute type 39 has an invalid length. [ 3353.088379][T23800] netlink: 'syz.3.17142': attribute type 10 has an invalid length. [ 3353.124684][T23805] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.17145'. [ 3353.268632][T23800] team0: Device veth1_macvtap failed to register rx_handler [ 3353.844983][T23805] netlink: 22856 bytes leftover after parsing attributes in process `syz.2.17145'. [ 3354.657548][T23824] netlink: 'syz.6.17151': attribute type 10 has an invalid length. [ 3355.017223][T23831] netlink: 'syz.3.17154': attribute type 39 has an invalid length. [ 3355.116945][T23832] netlink: 'syz.5.17153': attribute type 39 has an invalid length. [ 3356.059787][T23842] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.17158'. [ 3356.163946][T23842] netlink: 22856 bytes leftover after parsing attributes in process `syz.3.17158'. [ 3356.234604][T23843] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.17156'. [ 3356.296910][T23843] netlink: 3064 bytes leftover after parsing attributes in process `syz.5.17156'. [ 3356.641160][T23849] netlink: 'syz.6.17159': attribute type 10 has an invalid length. [ 3357.051997][T23849] team0: Device veth1_macvtap failed to register rx_handler [ 3357.178953][T23859] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.17162'. [ 3357.875712][T23863] netlink: 'syz.2.17165': attribute type 39 has an invalid length. [ 3358.467924][T23791] delete_channel: no stack [ 3358.738740][T23874] netlink: 121460 bytes leftover after parsing attributes in process `syz.5.17170'. [ 3358.830970][T23874] netlink: 22856 bytes leftover after parsing attributes in process `syz.5.17170'. [ 3359.360743][T23787] delete_channel: no stack [ 3359.875937][T23892] netlink: 'syz.2.17175': attribute type 10 has an invalid length. [ 3360.003132][T23826] delete_channel: no stack [ 3360.081363][T23897] netlink: 'syz.6.17177': attribute type 39 has an invalid length. [ 3360.872443][T23908] netlink: 199824 bytes leftover after parsing attributes in process `syz.5.17178'. [ 3361.097713][T23911] netlink: 'syz.5.17178': attribute type 39 has an invalid length. [ 3361.572975][T23914] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.17181'. [ 3361.615228][T23914] netlink: 22856 bytes leftover after parsing attributes in process `syz.3.17181'. [ 3362.163571][T23923] netlink: 'syz.3.17185': attribute type 10 has an invalid length. [ 3362.195438][T23923] netlink: 40 bytes leftover after parsing attributes in process `syz.3.17185'. [ 3362.290149][T23923] netlink: 144 bytes leftover after parsing attributes in process `syz.3.17185'. [ 3363.334586][T23930] netlink: 'syz.3.17187': attribute type 10 has an invalid length. [ 3363.346017][T23929] FAULT_INJECTION: forcing a failure. [ 3363.346017][T23929] name failslab, interval 1, probability 0, space 0, times 0 [ 3363.384992][T23929] CPU: 0 PID: 23929 Comm: syz.6.17188 Not tainted syzkaller #0 [ 3363.392633][T23929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 3363.402734][T23929] Call Trace: [ 3363.406065][T23929] [ 3363.409073][T23929] dump_stack_lvl+0x18c/0x250 [ 3363.413862][T23929] ? show_regs_print_info+0x20/0x20 [ 3363.419134][T23929] ? load_image+0x400/0x400 [ 3363.423710][T23929] should_fail_ex+0x39d/0x4d0 [ 3363.428441][T23929] should_failslab+0x9/0x20 [ 3363.433008][T23929] slab_pre_alloc_hook+0x59/0x310 [ 3363.438106][T23929] ? ___neigh_create+0x6d2/0x2440 [ 3363.443188][T23929] ? ___neigh_create+0x6d2/0x2440 [ 3363.448431][T23929] __kmem_cache_alloc_node+0x53/0x250 [ 3363.453857][T23929] ? ___neigh_create+0x6d2/0x2440 [ 3363.458931][T23929] __kmalloc+0xa4/0x230 [ 3363.463156][T23929] ___neigh_create+0x6d2/0x2440 [ 3363.468085][T23929] ? __ipv6_neigh_lookup_noref+0x5b9/0x7d0 [ 3363.473962][T23929] ip6_finish_output2+0x1581/0x1630 [ 3363.479210][T23929] ? ip6_finish_output2+0x645/0x1630 [ 3363.484539][T23929] ? ip6_mtu+0x7d/0x3f0 [ 3363.488751][T23929] ? nf_hook+0x390/0x390 [ 3363.493047][T23929] ? ip6_finish_output+0x57b/0x820 [ 3363.498215][T23929] rawv6_send_hdrinc+0xd9e/0x1640 [ 3363.503307][T23929] ? txopt_get+0x3f0/0x3f0 [ 3363.507767][T23929] ? txopt_get+0x344/0x3f0 [ 3363.512242][T23929] ? rawv6_push_pending_frames+0x8d0/0x8d0 [ 3363.518133][T23929] ? fl6_sock_lookup+0xc0/0xc0 [ 3363.522959][T23929] rawv6_sendmsg+0x12cc/0x1770 [ 3363.527777][T23929] ? compat_rawv6_ioctl+0x70/0x70 [ 3363.532860][T23929] ? aa_sk_perm+0x83c/0x970 [ 3363.537434][T23929] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 3363.543902][T23929] ? inet_sendmsg+0x7c/0x2f0 [ 3363.548544][T23929] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 3363.553886][T23929] ? security_socket_sendmsg+0x80/0xa0 [ 3363.559408][T23929] ? inet_send_prepare+0x260/0x260 [ 3363.564572][T23929] ____sys_sendmsg+0x5ba/0x960 [ 3363.569406][T23929] ? __lock_acquire+0x7d40/0x7d40 [ 3363.574491][T23929] ? __asan_memset+0x22/0x40 [ 3363.579139][T23929] ? __sys_sendmsg_sock+0x30/0x30 [ 3363.584228][T23929] ? __import_iovec+0x3fa/0x850 [ 3363.589165][T23929] ? import_iovec+0x73/0xa0 [ 3363.593735][T23929] ___sys_sendmsg+0x2a6/0x360 [ 3363.598464][T23929] ? __sys_sendmsg+0x2a0/0x2a0 [ 3363.603321][T23929] ? __lock_acquire+0x7d40/0x7d40 [ 3363.608449][T23929] __se_sys_sendmsg+0x1c2/0x2b0 [ 3363.613354][T23929] ? __x64_sys_sendmsg+0x80/0x80 [ 3363.618361][T23929] ? lockdep_hardirqs_on+0x98/0x150 [ 3363.623625][T23929] do_syscall_64+0x55/0xa0 [ 3363.628095][T23929] ? clear_bhb_loop+0x40/0x90 [ 3363.632811][T23929] ? clear_bhb_loop+0x40/0x90 [ 3363.637553][T23929] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3363.643506][T23929] RIP: 0033:0x7fcc0e59aeb9 [ 3363.647982][T23929] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3363.667666][T23929] RSP: 002b:00007fcc0f47e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3363.676153][T23929] RAX: ffffffffffffffda RBX: 00007fcc0e815fa0 RCX: 00007fcc0e59aeb9 [ 3363.684186][T23929] RDX: 0000000020000884 RSI: 0000200000000000 RDI: 0000000000000003 [ 3363.692218][T23929] RBP: 00007fcc0f47e090 R08: 0000000000000000 R09: 0000000000000000 [ 3363.700240][T23929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3363.708293][T23929] R13: 00007fcc0e816038 R14: 00007fcc0e815fa0 R15: 00007ffe2b325878 [ 3363.716355][T23929] [ 3363.798607][T23930] team0: Device veth1_macvtap failed to register rx_handler [ 3364.144150][T23932] netlink: 'syz.5.17189': attribute type 39 has an invalid length. [ 3364.522475][T23942] netlink: 121460 bytes leftover after parsing attributes in process `syz.5.17193'. [ 3364.574195][T23942] netlink: 22856 bytes leftover after parsing attributes in process `syz.5.17193'. [ 3365.166381][T23949] netlink: 'syz.6.17195': attribute type 39 has an invalid length. [ 3368.487951][T23893] delete_channel: no stack [ 3368.721120][T23963] netlink: 'syz.5.17200': attribute type 10 has an invalid length. [ 3368.783944][T23963] team0: Device veth1_macvtap failed to register rx_handler [ 3368.992089][T23968] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.17202'. [ 3369.066180][T23968] netlink: 22856 bytes leftover after parsing attributes in process `syz.2.17202'. [ 3369.574236][T23979] netlink: 'syz.5.17208': attribute type 51 has an invalid length. [ 3371.165693][T23993] netlink: 'syz.5.17212': attribute type 39 has an invalid length. [ 3373.420174][T24002] netlink: 121460 bytes leftover after parsing attributes in process `syz.6.17215'. [ 3373.455269][T24002] netlink: 22856 bytes leftover after parsing attributes in process `syz.6.17215'. [ 3373.516535][T24005] netlink: 'syz.2.17216': attribute type 10 has an invalid length. [ 3373.553918][T24005] team0: Device veth1_macvtap failed to register rx_handler [ 3373.647566][T24010] netlink: 'syz.3.17219': attribute type 51 has an invalid length. [ 3373.812272][T24011] netlink: 'syz.5.17218': attribute type 10 has an invalid length. [ 3374.045956][T24022] netlink: 'syz.6.17223': attribute type 10 has an invalid length. [ 3374.064274][T24022] netlink: 40 bytes leftover after parsing attributes in process `syz.6.17223'. [ 3374.088431][T24022] netlink: 144 bytes leftover after parsing attributes in process `syz.6.17223'. [ 3374.633564][T24032] netlink: 'syz.3.17226': attribute type 39 has an invalid length. [ 3376.653416][T24047] netlink: 'syz.3.17233': attribute type 10 has an invalid length. [ 3376.685713][T24047] netlink: 40 bytes leftover after parsing attributes in process `syz.3.17233'. [ 3376.727859][T24047] netlink: 144 bytes leftover after parsing attributes in process `syz.3.17233'. [ 3377.147546][T24060] netlink: 'syz.3.17236': attribute type 10 has an invalid length. [ 3377.452551][T24067] netlink: 'syz.2.17240': attribute type 39 has an invalid length. [ 3377.719703][T24073] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.17242'. [ 3377.746314][T24073] netlink: 22856 bytes leftover after parsing attributes in process `syz.2.17242'. [ 3378.646177][T24014] delete_channel: no stack [ 3379.613777][T24065] delete_channel: no stack [ 3380.816137][T24099] netlink: 'syz.6.17251': attribute type 39 has an invalid length. [ 3381.262559][T24106] netlink: 'syz.6.17253': attribute type 10 has an invalid length. [ 3381.562847][T24115] netlink: 'syz.2.17257': attribute type 10 has an invalid length. [ 3381.601867][T24115] netlink: 40 bytes leftover after parsing attributes in process `syz.2.17257'. [ 3381.647574][T24115] netlink: 144 bytes leftover after parsing attributes in process `syz.2.17257'. [ 3382.388637][T24130] netlink: 'syz.6.17262': attribute type 39 has an invalid length. [ 3382.454171][T24131] netlink: 'syz.2.17261': attribute type 39 has an invalid length. [ 3383.671816][T24108] delete_channel: no stack [ 3386.064959][T24165] netlink: 'syz.5.17273': attribute type 39 has an invalid length. [ 3386.083904][T24162] netlink: 'syz.6.17270': attribute type 10 has an invalid length. [ 3387.198114][T24178] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.17275'. [ 3387.237306][T24178] netlink: 'syz.6.17275': attribute type 39 has an invalid length. [ 3388.196872][T24167] delete_channel: no stack [ 3389.129453][T24184] FAULT_INJECTION: forcing a failure. [ 3389.129453][T24184] name failslab, interval 1, probability 0, space 0, times 0 [ 3389.143089][T24184] CPU: 1 PID: 24184 Comm: syz.2.17277 Not tainted syzkaller #0 [ 3389.150700][T24184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 3389.160806][T24184] Call Trace: [ 3389.164106][T24184] [ 3389.167057][T24184] dump_stack_lvl+0x18c/0x250 [ 3389.171771][T24184] ? show_regs_print_info+0x20/0x20 [ 3389.177005][T24184] ? load_image+0x400/0x400 [ 3389.181537][T24184] ? __might_sleep+0xe0/0xe0 [ 3389.186153][T24184] ? __lock_acquire+0x7d40/0x7d40 [ 3389.191206][T24184] should_fail_ex+0x39d/0x4d0 [ 3389.195917][T24184] should_failslab+0x9/0x20 [ 3389.200476][T24184] slab_pre_alloc_hook+0x59/0x310 [ 3389.205537][T24184] ? __inet_diag_dump_start+0x8b/0x9f0 [ 3389.211031][T24184] __kmem_cache_alloc_node+0x53/0x250 [ 3389.216436][T24184] ? __inet_diag_dump_start+0x8b/0x9f0 [ 3389.221925][T24184] kmalloc_trace+0x2a/0xe0 [ 3389.226373][T24184] __inet_diag_dump_start+0x8b/0x9f0 [ 3389.231688][T24184] ? netlink_lookup+0x30/0x200 [ 3389.236479][T24184] ? netlink_lookup+0x30/0x200 [ 3389.241286][T24184] __netlink_dump_start+0x4a9/0x810 [ 3389.246524][T24184] inet_diag_rcv_msg_compat+0x215/0x440 [ 3389.252116][T24184] ? __inet_diag_dump+0x380/0x380 [ 3389.257168][T24184] ? sock_diag_rcv_msg+0xd1/0x600 [ 3389.262218][T24184] ? inet_diag_rcv_msg_compat+0x440/0x440 [ 3389.267983][T24184] ? inet_diag_dump_start_compat+0x20/0x20 [ 3389.273810][T24184] ? inet_diag_dump+0x50/0x50 [ 3389.278530][T24184] ? __inet_diag_dump+0x380/0x380 [ 3389.283596][T24184] sock_diag_rcv_msg+0x3d8/0x600 [ 3389.288562][T24184] netlink_rcv_skb+0x241/0x4d0 [ 3389.293356][T24184] ? sock_diag_bind+0xb0/0xb0 [ 3389.298061][T24184] ? netlink_ack+0x1180/0x1180 [ 3389.302869][T24184] ? __lock_acquire+0x7d40/0x7d40 [ 3389.307933][T24184] ? netlink_deliver_tap+0x2e/0x1b0 [ 3389.313159][T24184] sock_diag_rcv+0x2a/0x40 [ 3389.317614][T24184] netlink_unicast+0x751/0x8d0 [ 3389.322428][T24184] netlink_sendmsg+0x8d0/0xbf0 [ 3389.327234][T24184] ? netlink_getsockopt+0x590/0x590 [ 3389.332470][T24184] ? aa_sock_msg_perm+0x94/0x150 [ 3389.337431][T24184] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 3389.342741][T24184] ? security_socket_sendmsg+0x80/0xa0 [ 3389.348219][T24184] ? netlink_getsockopt+0x590/0x590 [ 3389.353442][T24184] ____sys_sendmsg+0x5ba/0x960 [ 3389.358275][T24184] ? __asan_memset+0x22/0x40 [ 3389.362891][T24184] ? __sys_sendmsg_sock+0x30/0x30 [ 3389.367944][T24184] ? __import_iovec+0x5f2/0x850 [ 3389.372837][T24184] ? import_iovec+0x73/0xa0 [ 3389.377376][T24184] ___sys_sendmsg+0x2a6/0x360 [ 3389.382080][T24184] ? get_pid_task+0x20/0x1e0 [ 3389.386712][T24184] ? __sys_sendmsg+0x2a0/0x2a0 [ 3389.391523][T24184] ? __lock_acquire+0x7d40/0x7d40 [ 3389.396616][T24184] __se_sys_sendmsg+0x1c2/0x2b0 [ 3389.401484][T24184] ? __x64_sys_sendmsg+0x80/0x80 [ 3389.406456][T24184] ? lockdep_hardirqs_on+0x98/0x150 [ 3389.411692][T24184] do_syscall_64+0x55/0xa0 [ 3389.416140][T24184] ? clear_bhb_loop+0x40/0x90 [ 3389.420845][T24184] ? clear_bhb_loop+0x40/0x90 [ 3389.425562][T24184] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3389.431491][T24184] RIP: 0033:0x7f32c759aeb9 [ 3389.435944][T24184] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3389.455580][T24184] RSP: 002b:00007f32c84b5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3389.464055][T24184] RAX: ffffffffffffffda RBX: 00007f32c7815fa0 RCX: 00007f32c759aeb9 [ 3389.472050][T24184] RDX: 0000000000000044 RSI: 0000200000000240 RDI: 0000000000000003 [ 3389.480035][T24184] RBP: 00007f32c84b5090 R08: 0000000000000000 R09: 0000000000000000 [ 3389.488025][T24184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3389.496020][T24184] R13: 00007f32c7816038 R14: 00007f32c7815fa0 R15: 00007ffc57f6e0d8 [ 3389.504049][T24184] [ 3389.525791][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 3389.532151][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 3390.483050][T24206] netlink: 'syz.6.17285': attribute type 10 has an invalid length. [ 3390.509068][T24206] netlink: 40 bytes leftover after parsing attributes in process `syz.6.17285'. [ 3390.568149][T24208] netlink: 144 bytes leftover after parsing attributes in process `syz.6.17285'. [ 3391.371909][T24220] netlink: 'syz.3.17289': attribute type 10 has an invalid length. [ 3395.387344][T24268] netlink: 'syz.6.17302': attribute type 10 has an invalid length. [ 3395.456673][T24273] netlink: 'syz.2.17304': attribute type 21 has an invalid length. [ 3395.464832][T24273] IPv6: NLM_F_CREATE should be specified when creating new route [ 3396.880067][T24221] delete_channel: no stack [ 3397.119065][T24269] delete_channel: no stack [ 3398.316814][T24288] netlink: 'syz.5.17310': attribute type 10 has an invalid length. [ 3398.354984][T24288] netlink: 40 bytes leftover after parsing attributes in process `syz.5.17310'. [ 3398.409063][T24288] netlink: 144 bytes leftover after parsing attributes in process `syz.5.17310'. [ 3399.143336][T24308] netlink: 'syz.5.17317': attribute type 39 has an invalid length. [ 3399.221616][T24309] netlink: 'syz.6.17316': attribute type 10 has an invalid length. [ 3399.501562][T24315] netlink: 199824 bytes leftover after parsing attributes in process `syz.5.17318'. [ 3399.598174][T24315] netlink: 'syz.5.17318': attribute type 39 has an invalid length. [ 3400.190636][T24318] netlink: 'syz.2.17319': attribute type 10 has an invalid length. [ 3400.205741][T24318] team0: Device ip6_vti0 is up. Set it down before adding it as a team port [ 3400.713791][T24329] netlink: 14 bytes leftover after parsing attributes in process `syz.2.17323'. [ 3401.167239][T24336] netlink: 'syz.3.17327': attribute type 39 has an invalid length. [ 3401.492309][T24341] netlink: 'syz.2.17326': attribute type 10 has an invalid length. [ 3401.588660][T24351] netlink: 'syz.3.17328': attribute type 10 has an invalid length. [ 3402.249441][T24355] netlink: 199824 bytes leftover after parsing attributes in process `syz.6.17331'. [ 3402.446611][T24355] netlink: 'syz.6.17331': attribute type 39 has an invalid length. [ 3402.697524][T24364] netlink: 14 bytes leftover after parsing attributes in process `syz.3.17333'. [ 3403.740803][T24373] netlink: 'syz.2.17336': attribute type 39 has an invalid length. [ 3403.810622][T24376] netlink: 'syz.3.17338': attribute type 10 has an invalid length. [ 3403.844272][T24376] team0: Device ip6_vti0 is up. Set it down before adding it as a team port [ 3403.873130][T24379] netlink: 'syz.5.17339': attribute type 10 has an invalid length. [ 3403.922632][T24379] team0: Port device geneve1 added [ 3404.584100][T24387] netlink: 'syz.3.17342': attribute type 10 has an invalid length. [ 3405.502544][T24310] delete_channel: no stack [ 3405.642364][T24399] netlink: 14 bytes leftover after parsing attributes in process `syz.5.17347'. [ 3406.717409][T24407] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.17346'. [ 3407.027750][T24408] netlink: 'syz.3.17346': attribute type 39 has an invalid length. [ 3407.960139][T24410] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.17349'. [ 3408.897008][T24417] netlink: 'syz.5.17350': attribute type 10 has an invalid length. [ 3408.922598][T24417] team0: Device ip6_vti0 is up. Set it down before adding it as a team port [ 3409.366412][T24427] netlink: 'syz.5.17353': attribute type 10 has an invalid length. [ 3409.646326][T24434] netlink: 'syz.6.17356': attribute type 10 has an invalid length. [ 3409.654337][T24434] netlink: 40 bytes leftover after parsing attributes in process `syz.6.17356'. [ 3409.793245][T24437] netlink: 144 bytes leftover after parsing attributes in process `syz.6.17356'. [ 3410.157473][T24440] netlink: 'syz.6.17358': attribute type 39 has an invalid length. [ 3410.421142][T24344] delete_channel: no stack [ 3410.682223][T24447] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.17359'. [ 3411.306247][T24447] netlink: 'syz.3.17359': attribute type 39 has an invalid length. [ 3412.834034][T24350] delete_channel: no stack [ 3413.745785][T24477] netlink: 144 bytes leftover after parsing attributes in process `syz.3.17366'. [ 3416.921121][T24431] delete_channel: no stack [ 3417.024847][T24390] delete_channel: no stack [ 3470.844842][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 3470.851432][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 3518.404999][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 3518.411685][ C1] rcu: 1-....: (1 GPs behind) idle=c09c/1/0x4000000000000000 softirq=245375/245376 fqs=5238 [ 3518.423267][ C1] rcu: hardirqs softirqs csw/system [ 3518.429742][ C1] rcu: number: 1067237 0 0 [ 3518.436198][ C1] rcu: cputime: 20209 32270 70 ==> 52510(ms) [ 3518.444057][ C1] rcu: (t=10503 jiffies g=363177 q=1067 ncpus=2) [ 3518.450515][ C1] CPU: 1 PID: 24474 Comm: syz.5.17368 Not tainted syzkaller #0 [ 3518.458096][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 3518.468164][ C1] RIP: 0010:unwind_next_frame+0x184/0x2970 [ 3518.473985][ C1] Code: 85 64 21 00 00 45 0f b6 3e 48 8b 44 24 40 42 80 3c 28 00 74 08 48 89 df e8 09 06 a4 00 48 8b 1b 49 83 f7 01 48 89 df 4c 89 fe 17 df 4b 00 4c 29 fb 4c 89 24 24 4c 89 74 24 08 75 11 e8 f4 dc [ 3518.493595][ C1] RSP: 0018:ffffc900001f0218 EFLAGS: 00000202 [ 3518.499685][ C1] RAX: 1ffff9200003e066 RBX: ffffffff81769527 RCX: ffff888018f29e00 [ 3518.507662][ C1] RDX: 0000000000000100 RSI: 0000000000000001 RDI: ffffffff81769527 [ 3518.515638][ C1] RBP: ffffc900001f0338 R08: ffffc900001f03b0 R09: 0000000000000009 [ 3518.523625][ C1] R10: 0000000000000004 R11: 0000000000000100 R12: ffffc900001f02e8 [ 3518.531604][ C1] R13: dffffc0000000000 R14: ffffc900001f031d R15: 0000000000000001 [ 3518.539580][ C1] FS: 00007f7939b246c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 3518.549284][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3518.555863][ C1] CR2: 0000000100000000 CR3: 00000000838e5000 CR4: 00000000003506e0 [ 3518.563840][ C1] DR0: 0000000000000000 DR1: 0000200000000300 DR2: 0000200000000300 [ 3518.571822][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 3518.579792][ C1] Call Trace: [ 3518.583073][ C1] [ 3518.585930][ C1] ? run_timer_softirq+0x67/0xf0 [ 3518.590883][ C1] ? run_timer_softirq+0x67/0xf0 [ 3518.595822][ C1] ? stack_trace_save+0x100/0x100 [ 3518.600852][ C1] arch_stack_walk+0x144/0x190 [ 3518.605624][ C1] ? run_timer_softirq+0x67/0xf0 [ 3518.610571][ C1] stack_trace_save+0xaa/0x100 [ 3518.615341][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 3518.620469][ C1] kasan_set_track+0x4e/0x70 [ 3518.625066][ C1] ? kasan_set_track+0x4e/0x70 [ 3518.629836][ C1] ? __kasan_kmalloc+0x8f/0xa0 [ 3518.634604][ C1] ? __kmalloc+0xb4/0x230 [ 3518.638940][ C1] ? ___neigh_create+0x6d2/0x2440 [ 3518.643969][ C1] ? ip6_finish_output2+0x1581/0x1630 [ 3518.649344][ C1] ? ndisc_send_skb+0xc26/0x14f0 [ 3518.654280][ C1] ? addrconf_rs_timer+0x2d5/0x630 [ 3518.659409][ C1] ? call_timer_fn+0x189/0x540 [ 3518.664172][ C1] ? __run_timers+0x542/0x800 [ 3518.668851][ C1] ? run_timer_softirq+0x67/0xf0 [ 3518.673826][ C1] ? __kmem_cache_alloc_node+0x13a/0x250 [ 3518.679467][ C1] ? ___neigh_create+0x6d2/0x2440 [ 3518.684496][ C1] __kasan_kmalloc+0x8f/0xa0 [ 3518.689092][ C1] ? ___neigh_create+0x6d2/0x2440 [ 3518.694118][ C1] __kmalloc+0xb4/0x230 [ 3518.698285][ C1] ___neigh_create+0x6d2/0x2440 [ 3518.703154][ C1] ? __ipv6_neigh_lookup_noref+0x5b9/0x7d0 [ 3518.708976][ C1] ip6_finish_output2+0x1581/0x1630 [ 3518.714178][ C1] ? ip6_finish_output2+0x645/0x1630 [ 3518.719474][ C1] ? ip6_mtu+0x7d/0x3f0 [ 3518.723637][ C1] ? nf_hook+0x390/0x390 [ 3518.727893][ C1] ? ip6_finish_output+0x57b/0x820 [ 3518.733037][ C1] ndisc_send_skb+0xc26/0x14f0 [ 3518.737807][ C1] ? ndisc_send_skb+0x1f5/0x14f0 [ 3518.742749][ C1] ? ndisc_mc_map+0x680/0x680 [ 3518.747423][ C1] ? skb_dst+0xd0/0xd0 [ 3518.751512][ C1] addrconf_rs_timer+0x2d5/0x630 [ 3518.756479][ C1] ? addrconf_disable_policy_idev+0x480/0x480 [ 3518.762576][ C1] ? call_timer_fn+0x171/0x540 [ 3518.767349][ C1] call_timer_fn+0x189/0x540 [ 3518.771937][ C1] ? addrconf_disable_policy_idev+0x480/0x480 [ 3518.778011][ C1] ? call_timer_fn+0xd2/0x540 [ 3518.782704][ C1] ? __run_timers+0x800/0x800 [ 3518.787396][ C1] ? addrconf_disable_policy_idev+0x480/0x480 [ 3518.793473][ C1] __run_timers+0x542/0x800 [ 3518.797997][ C1] ? detach_timer+0x2b0/0x2b0 [ 3518.802688][ C1] run_timer_softirq+0x67/0xf0 [ 3518.807456][ C1] handle_softirqs+0x280/0x820 [ 3518.812228][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 3518.816995][ C1] ? do_softirq+0x1a0/0x1a0 [ 3518.821507][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 3518.826725][ C1] __irq_exit_rcu+0xd3/0x190 [ 3518.831338][ C1] ? irq_exit_rcu+0x20/0x20 [ 3518.835849][ C1] irq_exit_rcu+0x9/0x20 [ 3518.840092][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 3518.845747][ C1] [ 3518.848685][ C1] [ 3518.851615][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3518.857601][ C1] RIP: 0010:generic_exec_single+0x481/0x4f0 [ 3518.863514][ C1] Code: 75 11 e8 02 02 0b 00 48 85 db 75 16 e8 f8 01 0b 00 eb 15 e8 f1 01 0b 00 e8 bc 39 08 09 48 85 db 74 ea e8 e2 01 0b 00 fb 31 c0 <48> c7 44 24 20 0e 36 e0 45 4b c7 04 2c 00 00 00 00 43 c7 44 2c 08 [ 3518.883145][ C1] RSP: 0018:ffffc9000ca7fa00 EFLAGS: 00000246 [ 3518.889214][ C1] RAX: 0000000000000000 RBX: 0000000000000200 RCX: 0000000000080000 [ 3518.897191][ C1] RDX: ffffc90010dc1000 RSI: 0000000000001c02 RDI: 0000000000001c03 [ 3518.905163][ C1] RBP: ffffc9000ca7fad0 R08: ffffffff911bf5ff R09: 1ffffffff2237ebf [ 3518.913141][ C1] R10: dffffc0000000000 R11: fffffbfff2237ec0 R12: 1ffff9200194ff44 [ 3518.921118][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff9200194ff65 [ 3518.929122][ C1] ? event_function+0x300/0x300 [ 3518.933979][ C1] ? smp_call_function_single+0x5a0/0x5a0 [ 3518.939709][ C1] ? percpu_counter_add_batch+0x1f1/0x2a0 [ 3518.945458][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 3518.950661][ C1] ? smp_call_function_single+0xb0/0x5a0 [ 3518.956300][ C1] smp_call_function_single+0x36d/0x5a0 [ 3518.961850][ C1] ? event_function+0x300/0x300 [ 3518.966707][ C1] ? flush_smp_call_function_queue+0x250/0x250 [ 3518.972868][ C1] ? event_function+0x300/0x300 [ 3518.977728][ C1] perf_install_in_context+0x5be/0x920 [ 3518.983194][ C1] ? exclusive_event_installable+0x2c0/0x2c0 [ 3518.989182][ C1] ? add_event_to_ctx+0x1180/0x1180 [ 3518.994394][ C1] ? anon_inode_getfile+0x109/0x1a0 [ 3518.999601][ C1] ? perf_event__header_size+0x165/0x220 [ 3519.005254][ C1] __se_sys_perf_event_open+0x1836/0x1c50 [ 3519.010991][ C1] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 3519.016662][ C1] ? lock_chain_count+0x20/0x20 [ 3519.021528][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 3519.026740][ C1] ? __x64_sys_perf_event_open+0x20/0xc0 [ 3519.032395][ C1] do_syscall_64+0x55/0xa0 [ 3519.036820][ C1] ? clear_bhb_loop+0x40/0x90 [ 3519.041512][ C1] ? clear_bhb_loop+0x40/0x90 [ 3519.046200][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3519.052108][ C1] RIP: 0033:0x7f7938b9aeb9 [ 3519.056536][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3519.076150][ C1] RSP: 002b:00007f7939b24028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 3519.084570][ C1] RAX: ffffffffffffffda RBX: 00007f7938e15fa0 RCX: 00007f7938b9aeb9 [ 3519.092540][ C1] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000480 [ 3519.100515][ C1] RBP: 00007f7938c08c1f R08: 0000000000000000 R09: 0000000000000000 [ 3519.108504][ C1] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 3519.116500][ C1] R13: 00007f7938e16038 R14: 00007f7938e15fa0 R15: 00007ffde6b63c28 [ 3519.124515][ C1] [ 3519.917533][T24480] syz-executor: vmalloc error: size 4194304, failed to allocated page array size 8192, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 3520.065146][T24480] CPU: 0 PID: 24480 Comm: syz-executor Not tainted syzkaller #0 [ 3520.072881][T24480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 3520.082978][T24480] Call Trace: [ 3520.086289][T24480] [ 3520.089262][T24480] dump_stack_lvl+0x18c/0x250 [ 3520.094002][T24480] ? show_regs_print_info+0x20/0x20 [ 3520.099420][T24480] ? load_image+0x400/0x400 [ 3520.103990][T24480] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 3520.110457][T24480] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 3520.117011][T24480] warn_alloc+0x246/0x340 [ 3520.121414][T24480] ? zone_watermark_ok_safe+0x230/0x230 [ 3520.127013][T24480] ? _raw_spin_unlock+0x28/0x40 [ 3520.131924][T24480] __vmalloc_node_range+0x662/0x1330 [ 3520.137268][T24480] ? __asan_memset+0x22/0x40 [ 3520.141938][T24480] ? free_vm_area+0x50/0x50 [ 3520.146495][T24480] ? perf_trace_preemptirq_template+0xac/0x330 [ 3520.152728][T24480] ? kcov_remote_reset+0xc0/0xc0 [ 3520.157712][T24480] vmalloc_user+0x74/0x80 [ 3520.162098][T24480] ? kcov_ioctl+0x58/0x620 [ 3520.166588][T24480] kcov_ioctl+0x58/0x620 [ 3520.170894][T24480] ? bpf_lsm_file_ioctl+0x9/0x10 [ 3520.175873][T24480] ? security_file_ioctl+0x80/0xa0 [ 3520.181038][T24480] ? kcov_remote_reset+0xc0/0xc0 [ 3520.186023][T24480] __se_sys_ioctl+0xfd/0x170 [ 3520.190659][T24480] do_syscall_64+0x55/0xa0 [ 3520.195123][T24480] ? clear_bhb_loop+0x40/0x90 [ 3520.199855][T24480] ? clear_bhb_loop+0x40/0x90 [ 3520.204570][T24480] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3520.210505][T24480] RIP: 0033:0x7fe81d59ab4b [ 3520.214953][T24480] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 3520.234608][T24480] RSP: 002b:00007ffeb2074160 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3520.243062][T24480] RAX: ffffffffffffffda RBX: 0000000000080000 RCX: 00007fe81d59ab4b [ 3520.251074][T24480] RDX: 0000000000080000 RSI: ffffffff80086301 RDI: 00000000000000d8 [ 3520.259105][T24480] RBP: 00007fe81d816038 R08: 0000000000000000 R09: 0000000000000000 [ 3520.267127][T24480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3520.275157][T24480] R13: 0000000000000003 R14: 00007ffeb2074418 R15: 0000000000000000 [ 3520.283193][T24480] [ 3521.683134][T24480] Mem-Info: [ 3521.742390][T24480] active_anon:30290 inactive_anon:0 isolated_anon:0 [ 3521.742390][T24480] active_file:23134 inactive_file:41243 isolated_file:0 [ 3521.742390][T24480] unevictable:768 dirty:1 writeback:0 [ 3521.742390][T24480] slab_reclaimable:11276 slab_unreclaimable:103674 [ 3521.742390][T24480] mapped:34318 shmem:20501 pagetables:614 [ 3521.742390][T24480] sec_pagetables:0 bounce:0 [ 3521.742390][T24480] kernel_misc_reclaimable:0 [ 3521.742390][T24480] free:1249162 free_pcp:9687 free_cma:0 [ 3522.095079][T24480] Node 0 active_anon:111760kB inactive_anon:0kB active_file:92536kB inactive_file:164772kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:153572kB dirty:4kB writeback:0kB shmem:71068kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11688kB pagetables:2456kB sec_pagetables:0kB all_unreclaimable? no [ 3522.393551][T24480] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 3522.534870][T24498] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 3522.544591][T24498] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 3522.558834][T24500] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 3522.588239][T24500] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 3522.609374][T24500] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 3522.617166][T24500] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 3522.629315][T24498] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 3522.636571][T24500] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 3522.645845][T24500] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 3522.654687][T24500] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 3522.662784][T24500] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 3522.670743][T24500] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 3522.896658][T24480] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3523.115682][T21450] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 3523.144142][T21450] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 3523.156134][T21450] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 3523.164896][T21450] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 3523.173163][T21450] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 3523.182573][T21450] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 3523.300509][T24480] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 3523.315085][T24480] Node 0 DMA32 free:1106920kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:94504kB inactive_anon:0kB active_file:92536kB inactive_file:163944kB unevictable:1536kB writepending:4kB present:3129332kB managed:2586972kB mlocked:0kB bounce:0kB free_pcp:38076kB local_pcp:20892kB free_cma:0kB [ 3523.585471][T24480] lowmem_reserve[]: 0 0 0 0 0 [ 3523.615264][T24480] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 3523.803282][T24480] lowmem_reserve[]: 0 0 0 0 0 [ 3523.845040][T24480] Node 1 Normal free:3892240kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:20100kB local_pcp:8832kB free_cma:0kB [ 3524.075146][T24480] lowmem_reserve[]: 0 0 0 0 0 [ 3524.080019][T24480] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 3524.168075][T24480] Node 0 DMA32: 5381*4kB (UME) 2417*8kB (UME) 2085*16kB (UME) 1231*32kB (UME) 763*64kB (UME) 533*128kB (UME) 492*256kB (UME) 219*512kB (UME) 85*1024kB (UME) 53*2048kB (UM) 119*4096kB (UM) = 1151756kB [ 3524.258841][T24480] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3524.327739][T24480] Node 1 Normal: 210*4kB (UME) 53*8kB (UME) 34*16kB (UME) 52*32kB (UME) 22*64kB (UME) 8*128kB (UME) 1*256kB (M) 0*512kB 1*1024kB (E) 1*2048kB (E) 948*4096kB (M) = 3892240kB [ 3524.415359][T24480] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3524.443666][T24480] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 3524.485170][T24480] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3524.494807][T24480] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 3524.585265][T24480] 71451 total pagecache pages [ 3524.590066][T24480] 0 pages in swap cache [ 3524.594265][T24480] Free swap = 124388kB [ 3524.666582][T24480] Total swap = 124996kB [ 3524.670855][T24480] 2097051 pages RAM [ 3524.674735][T24480] 0 pages HighMem/MovableOnly [ 3524.726637][T24480] 416922 pages reserved [ 3524.730884][T24480] 0 pages cma reserved [ 3524.785412][T12362] Bluetooth: hci4: command tx timeout [ 3524.792184][T12362] Bluetooth: hci7: command tx timeout [ 3524.827797][T24494] chnl_net:caif_netlink_parms(): no params data found [ 3525.275232][T12362] Bluetooth: hci8: command tx timeout [ 3525.327305][T24503] chnl_net:caif_netlink_parms(): no params data found SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 3526.218617][T24503] bridge0: port 1(bridge_slave_0) entered blocking state [ 3526.312470][T24503] bridge0: port 1(bridge_slave_0) entered disabled state [ 3526.375548][T24503] bridge_slave_0: entered allmulticast mode [ 3526.411307][T24503] bridge_slave_0: entered promiscuous mode [ 3526.865244][T12362] Bluetooth: hci7: command tx timeout [ 3526.870739][T12362] Bluetooth: hci4: command tx timeout [ 3527.346496][T12362] Bluetooth: hci8: command tx timeout