last executing test programs: 23.98187706s ago: executing program 2 (id=2820): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x20040080) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703100000001f03000000006000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4014) 23.423721643s ago: executing program 2 (id=2825): socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="d800000018007bf6e00212ba0d8105040a600000000f040b067c55a1bc000900b80006990600000015000500fe", 0x2d}], 0x1, 0x0, 0x0, 0x2663}, 0x0) socket$kcm(0x21, 0x2, 0xa) r0 = socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000280)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0x2d, 0x0, 0x4, @dev}}, 0x80, 0x0}, 0xfc00) socket$kcm(0x23, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000005c0)={r1}, 0xc) socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x3a) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x90) close(r2) close(0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000006c0)=[{0xfffffffffffffffd}], 0x1}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r3, &(0x7f0000000ac0), 0x0}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x600, 0x4000000}, 0x28) syz_clone(0x40200000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x11, 0x20000000000000a, 0x300) 21.850686051s ago: executing program 2 (id=2833): r0 = perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x2e}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) r2 = socket$kcm(0x23, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4}, 0x48) r4 = perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x10040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6, 0x4, 0x1, 0x1, 0xfffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x2b8201, 0x0) ioctl$TUNSETOFFLOAD(r5, 0x40047440, 0xf0ff1f00000000) perf_event_open(&(0x7f00000006c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x8}, 0x8000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000400)={&(0x7f0000000280)={0x2, 0x4e20, @multicast2}, 0x10, 0x0}, 0x4804) r7 = socket$kcm(0x15, 0x5, 0x0) sendmsg$kcm(r7, &(0x7f0000001b00)={&(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}, 0x0) sendmsg$inet(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="000026d4f47f000000000000010000000000000000000000140000000000000000000000020000000000000000000000140000000000000000000000020000000000000000000000110000000000000000000000010000000000000000000000110000000000000002000000010000000000000000000000000000000000000000000000070000008300000000960000206a77bdd11d04129054e7704a000000"], 0xf}, 0x0) socket$kcm(0x10, 0x400000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r8, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB='b *'], 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r8) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000011008188040f46ec0800b9cca7480ef421000000e3bd6efb440013030e001b000d000008ba8000001201", 0x2e}], 0x1}, 0x4044) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89ee, &(0x7f0000000000)) 19.953078738s ago: executing program 2 (id=2840): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x10, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socket$kcm(0x21, 0x2, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000000000004000"/20, @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$kcm(0x23, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) close(r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="19000000040000000400000001"], 0x1d) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r3, 0x0, 0x0}, 0x20) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r4) ioctl$TUNGETVNETLE(r4, 0x8953, &(0x7f0000000040)) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003a00)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@typedef={0xf, 0x0, 0x0, 0x8, 0x1}]}, {0x0, [0x30]}}, &(0x7f0000002a00)=""/4096, 0x27, 0x1000, 0x1, 0xdc90e000}, 0x28) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003c00)={&(0x7f0000003ac0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x8}, {0x0, [0x1e, 0x61, 0x61, 0x30, 0x0, 0x30]}}, &(0x7f0000003b80)=""/90, 0x20, 0x5a, 0x1, 0x2}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000003a40)=@bloom_filter={0x1e, 0x8, 0x9, 0xca, 0x8000, r4, 0x7, '\x00', 0x0, r5, 0x2, 0x5, 0x4, 0xc, @value=r6}, 0x50) r7 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x100001, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff3, 0x0, @perf_config_ext={0x85, 0xffffffffffffffff}, 0x3212, 0x7, 0x2, 0x2, 0xc, 0x3, 0x2, 0x0, 0x0, 0x0, 0x800000000e48}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r8 = socket$kcm(0xa, 0x0, 0x11) sendmsg$sock(r8, &(0x7f0000000200)={&(0x7f0000000000)=@in6={0xa, 0x4e22, 0x3, @private2, 0xfffffffd}, 0x80, 0x0}, 0x8010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002540)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f00000005c0)='syzkaller\x00'}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0xfffffffd, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4861}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) close(r9) 18.881170013s ago: executing program 2 (id=2845): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x100010, 0x0, 0x8, 0x0, 0x4000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad94ed406f21caf5adcf920569c00cc1199684fa75814709fea019af247c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d59"], 0x0, 0x5}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80400, 0x0) ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f00000002c0)={'bond0\x00', 0x4000}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="bf16000000000000b7020000000000007b2af8ff000000007b2af0ff000000007b2ae8ff000000007b2ae0ff000000007b2ad8ff000000007b2ad0ff000000007b2ac8ff000000007b2ac0ff00000000b702000002000000732ac0ff00000000b702000001000000632ac4ff00000000180200000a0000010000000000000000632accff00000000180200000a0000020000000000000000632ac0ff00000000bf61000000000000bfa200000000000007020000c0ffffffb703000040000000b7040000000000008500000045000000b70000000200000095"], &(0x7f00000011c0)='GPL\x00', 0x1, 0x1000, &(0x7f0000001200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002200)={r2, 0x0, 0xe, 0x0, &(0x7f0000002280)="00f1aef59e1ec05ab201a5859511", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x91d3e03a57075ae9, 0x0, 0x41000}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)) r4 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200001, 0x1, @perf_bp={0x0, 0x3}, 0x10781, 0x10, 0x0, 0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r6, 0x0, 0x480, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848420000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1, 0x0, 0x0, 0x8000000}, 0x0) 15.69796881s ago: executing program 2 (id=2853): socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="d800000018007bf6e00212ba0d8105040a600000000f040b067c55a1bc000900b80006990600000015000500fe", 0x2d}], 0x1, 0x0, 0x0, 0x2663}, 0x0) socket$kcm(0x21, 0x2, 0xa) r0 = socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000280)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0x2d, 0x0, 0x4, @dev}}, 0x80, 0x0}, 0xfc00) socket$kcm(0x23, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000005c0)={r1}, 0xc) socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x3a) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x30, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe33, 0x0, 0x0, 0x0}, 0x40) close(0xffffffffffffffff) close(0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000006c0)=[{0xfffffffffffffffd}], 0x1}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r2, &(0x7f0000000ac0), 0x0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x600, 0x4000000}, 0x28) syz_clone(0x40200000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x11, 0x20000000000000a, 0x300) 12.853364049s ago: executing program 1 (id=2859): perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x76341, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0xf6}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) close(r0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="18000000000000000000000000000000180200", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfa019fe45d308098ee68888a8", 0x0, 0x8200aded, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 12.232853164s ago: executing program 1 (id=2860): perf_event_open(&(0x7f0000001700)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x1}, 0x8806, 0x3, 0x634e, 0x0, 0x0, 0x1, 0xfff6, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0x2a979d) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0x7, 0x0, &(0x7f0000000580)="b9ff0307680426", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 11.682604587s ago: executing program 1 (id=2861): socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="d800000018007bf6e00212ba0d8105040a600000000f040b067c55a1bc000900b80006990600000015000500fe", 0x2d}], 0x1, 0x0, 0x0, 0x2663}, 0x0) socket$kcm(0x21, 0x2, 0xa) r0 = socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000280)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0x2d, 0x0, 0x4, @dev}}, 0x80, 0x0}, 0xfc00) socket$kcm(0x23, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000005c0)={r1}, 0xc) socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x3a) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x90) close(r2) close(0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000006c0)=[{0xfffffffffffffffd}], 0x1}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r3, &(0x7f0000000ac0), 0x0}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x600, 0x4000000}, 0x28) syz_clone(0x40200000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x11, 0x20000000000000a, 0x300) 10.950948225s ago: executing program 3 (id=2863): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x100010, 0x0, 0x8, 0x0, 0x4000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad94ed406f21caf5adcf920569c00cc1199684fa75814709fea019af247c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d59"], 0x0, 0x5}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80400, 0x0) ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f00000002c0)={'bond0\x00', 0x4000}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="bf16000000000000b7020000000000007b2af8ff000000007b2af0ff000000007b2ae8ff000000007b2ae0ff000000007b2ad8ff000000007b2ad0ff000000007b2ac8ff000000007b2ac0ff00000000b702000002000000732ac0ff00000000b702000001000000632ac4ff00000000180200000a0000010000000000000000632accff00000000180200000a0000020000000000000000632ac0ff00000000bf61000000000000bfa200000000000007020000c0ffffffb703000040000000b7040000000000008500000045000000b70000000200000095"], &(0x7f00000011c0)='GPL\x00', 0x1, 0x1000, &(0x7f0000001200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002200)={r2, 0x0, 0xe, 0x0, &(0x7f0000002280)="00f1aef59e1ec05ab201a5859511", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x91d3e03a57075ae9, 0x0, 0x41000}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)) r4 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200001, 0x1, @perf_bp={0x0, 0x3}, 0x10781, 0x10, 0x0, 0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r6, 0x0, 0x480, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848420000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1, 0x0, 0x0, 0x8000000}, 0x0) 9.300247495s ago: executing program 3 (id=2867): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) sendmsg$inet(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000001c80)="a2", 0x1}], 0x1}, 0x1c8c4) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0) socket$kcm(0x2, 0xb95342b924aab163, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) r4 = socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x11b, 0x2, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES64=r1], 0x50) recvmsg$unix(r2, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r5, @ANYBLOB="dd0e09000000000000000000000000000000000084a52071bfae03cecde91a7416813fe0419893acc643e3881617f582488d77ad45ebb3d58c8d5d75bae1c665597bc1cc16b04d62fa9f831ae9efcd444bd8e5df61af0cee1e42a155eb606dec53844ee22a7c97c603f1644a64fa838b5382b416646487b8aab97e0e82bba2b8685cba6dc9654375ee58dc18cba0750855", @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="040000000400"/28], 0x50) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="020000000400000008000000010000c7e9c394ff", @ANYRES32=r7, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB="03000000000000000500"/28], 0x50) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000300)="d8000000180081034e81f783db4cb9040a1d020006007c09e8fc55a10a0015000400142603600e120800060000000441a800080004001040040000000c5c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/215, 0xd7}, {&(0x7f00000001c0)=']', 0x1}], 0x2}, 0x0) perf_event_open(&(0x7f0000000480)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x6010, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x400, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r10 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x7, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r11 = socket$kcm(0xf, 0x3, 0x2) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040), 0xcf) sendmsg$inet(r11, 0x0, 0x0) r12 = syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, r12, 0xfffffffffffffffb, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES16=r10, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000007000000000000000080000085000000750000009500000000000004"], 0x0}, 0x94) 8.025451716s ago: executing program 4 (id=2869): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x100010, 0x0, 0x8, 0x0, 0x4000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad94ed406f21caf5adcf920569c00cc1199684fa75814709fea019af247c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d59"], 0x0, 0x5}, 0x94) r0 = socket$kcm(0x10, 0x6, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000100)="5c00000015006b05c84e21000af32c6e0a7875f80e000000400002007a17d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000083cd000000000000fefffdff8500000017000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e09f547ed3f02dc1fd3d6487775b", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000380)=r3, 0x4) sendmsg$sock(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000280)="67f1", 0xfdef}], 0x1}, 0x40840) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r3, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000040)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x7, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x29, &(0x7f0000000340)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000003c0), &(0x7f0000000480), 0x8, 0xc4, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000008c0)=[{0x1, 0x3, 0x3, 0xc}], 0x10, 0xc6}, 0x94) r6 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x357}, 0x94) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r7) setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r9) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\v'], 0x48) setsockopt$sock_attach_bpf(r10, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r11 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r11, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r11, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 7.079652889s ago: executing program 4 (id=2872): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="05000000050000000200000007000000010000000f8fdaf81e11fe4a0d725bffffff7f00000000d5a46705adff05d26a4ce7b4b03345065e5b8fa1ea32d1df8ca1fb4211959f8b826481db016eba12647b812c557683", @ANYRES32=0x1, @ANYBLOB="00000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xe6503, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x1, 0x19}, 0x0, 0x80, 0x0, 0x0, 0x7}, 0x0, 0xfff0000000000000, 0xffffffffffffffff, 0x6) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext, 0x4869, 0x4, 0x0, 0x8, 0xfffffffffffff545, 0x0, 0x2000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x6c) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000640)=0x1, 0x12) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r2 = perf_event_open(&(0x7f0000000540)={0x3, 0x80, 0x90, 0x87, 0x4, 0x3, 0x0, 0x6, 0x20404, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x9, 0x4, @perf_config_ext={0x7fff, 0x3b0}, 0x100000, 0x3, 0x8, 0x6, 0x200, 0x6, 0x6, 0x0, 0x101, 0x0, 0x3}, 0x0, 0xd, 0xffffffffffffffff, 0x1) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) perf_event_open$cgroup(0x0, r1, 0x0, 0xffffffffffffffff, 0x6) bpf$MAP_LOOKUP_BATCH(0x19, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000009c0)=@generic={0x0}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x11, &(0x7f0000000dc0)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018350000010000000000000000000000bf91000000000000b7020000020000008500000084000000b70000000000000095000000000000"], &(0x7f0000000740)='syzkaller\x00', 0x6, 0x0, 0x0, 0x1e00, 0x6, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000900)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000940)={0x5, 0xb, 0x800, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a00), &(0x7f0000000a40), 0x10, 0x81}, 0x94) write$cgroup_int(r1, &(0x7f0000000080), 0x12) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x6, 0x8, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00', &(0x7f0000000340)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000100)=r4, 0x4) 6.825032155s ago: executing program 0 (id=2873): ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000002140)=@generic={&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x18}, 0x18) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000002180)={&(0x7f0000000000)="9881039e5386d824b331445157999e175f1d8a269024fedcee6a9583583d6be9381359abc05715df2b5ff8d0ac501e47e7a1355df9a0075b3d3ecbae7cafcc885de98cd1a4a28f49ed4dd4e035ea6dc488a13cfaea7ecf039dd039794131ecda57cc8381b9fcb481d905e26c811c771885bf1a5da9d1f3b481fef7f5eadd3d701b74766ac058143dca448c7d7e8f1ad7b05ac4d190cd72643eb700853eac024ffbbd9f8beae65f1598866fdeea2aeff3c4966df88c7cdd63bc8bad658c466ed961b0a3a787c00b", &(0x7f0000000100)=""/141, &(0x7f00000001c0)="f39a564d48c4db231d1d36991eb0281945a95dfc37cb6ad7755c1af3f92b7e38eb26e52fd9c82e69cc2c68487038df424542d674bc277ce4d970325078cc1f5e9b20227f6d28460f67018d3f6ac3a4c59bddc365df7f1735d7900a1b1670", &(0x7f0000000240)="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", 0x899, r0}, 0x38) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000021c0)={[{0x2d, 'cpuset'}, {0x2d, 'cpu'}, {0x2b, 'rlimit'}, {0x2d, 'hugetlb'}]}, 0x1e) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000002200), 0x8000, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000002240)={'syz_tun\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000002280)) r2 = perf_event_open(&(0x7f0000002300)={0x1, 0x80, 0x6, 0xf, 0x5, 0x0, 0x0, 0x8000, 0x0, 0xd, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x4, 0x2, @perf_bp={&(0x7f00000022c0), 0x7}, 0x2000, 0x7e, 0x7, 0x2, 0xc, 0x6a03, 0x540, 0x0, 0x4, 0x0, 0xe}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x9) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000002380)='syz1\x00', 0x1ff) r3 = getpid() perf_event_open(&(0x7f0000002400)={0x2, 0x80, 0x1, 0xfa, 0x6, 0x9, 0x0, 0x6, 0x4000, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f00000023c0), 0xc}, 0x80, 0xe, 0x4e, 0x6, 0x40, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8}, r3, 0xd, r2, 0xb) ioctl$TUNSETLINK(r1, 0x400454cd, 0x320) r4 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000002480), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f00000024c0)={[{0x2b, 'rdma'}, {0x2b, 'cpuacct'}, {0x2d, 'blkio'}, {0x2d, 'rlimit'}, {0x2d, 'net_prio'}, {0x2d, 'freezer'}, {0x2d, 'freezer'}, {0x2d, 'perf_event'}, {0x2b, 'cpu'}]}, 0x4b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000002580)={r3, r2, 0x0, 0x7, &(0x7f0000002540)='hugetlb'}, 0x30) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000002600)=@o_path={&(0x7f00000025c0)='./file0\x00', 0x0, 0x4000, r2}, 0x18) r6 = socket$kcm(0x29, 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002900)={r2, 0xe0, &(0x7f0000002800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000002640)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa, &(0x7f0000002680)=[0x0, 0x0], &(0x7f00000026c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x52, &(0x7f0000002700)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000002740), &(0x7f0000002780), 0x8, 0xb2, 0x8, 0x8, &(0x7f00000027c0)}}, 0x10) sendmsg$kcm(r6, &(0x7f00000042c0)={&(0x7f0000002940)=@xdp={0x2c, 0x1, r7, 0x7}, 0x80, &(0x7f0000003e80)=[{&(0x7f00000029c0)="3c1d5eda42865657d4eb6e58bf8f58d36929724dfa290fe9faa73a407e738fd60580a3ef030990ed7d1e5bd6f3eb73690443f49be116993e755b106e24e7df00305b473569c7ddb5d890e8e26f80e9e74247eccea9d6b5deb482fefa155a68", 0x5f}, {&(0x7f0000002a40)="a7eeb869332f25907445ac1cf7e9bc8ae8eb7ace329b64ca0ed15235c40cfb709938115c00a668a5", 0x28}, {&(0x7f0000002a80)="914261eac7fcb8f69ba01e89ae61694ae911fc2069c7ea9a32edd9fa2eee50e09bc4c4561604dc6e4691731673569b793c732af9995395680a68ced096c632507c30", 0x42}, {&(0x7f0000002b00)="24f01fef4e81e24b46595db0a7ac86fbb7e7261f332c5af71e6c6fb66caca14b5168d891dbb728d5bb5caae305e77123ae315bf5f62e96ca5aa7e48ff3fe117cb6022e136837f0d9483d318cdecbb53414cf9b67ae2306caf06c03e5e0924c2d1459b2245b67f1f572ef25210712434c55d9e5420830facbb84fd7ee3037ee14b57b67c044defa19c301", 0x8a}, {&(0x7f0000002bc0)="e2540d092056b877f780f6d1909982837b55b1486f3b07f438bc95306e9b7c4a2a07c0be0a6f96b812017a80a8c1ca048bb706855c158b8f041f77ab55fbc51e629d61b731ef062cc0a8fca9f58a9ed19009c24bb987946dc25244fdfbeab69fdbe33fdd3647feba25e801814d2cec992aaa529d3355818779", 0x79}, {&(0x7f0000002c40)="2c2f02d611f68e2e23a657c91c02963a78ac91c8c10e6f05e3149c96085d0171968ccb1dc76314e9b3c19c9c1d905267e296c3f5fbd4ab0dc9bf1f5edf7b3d343bfaf02d97476dc26ef4bf2fae45ee2af6d7cc974b69988c6f85616981173e12949cffd7014d3485b2459ba2506f506f81a20a873651e64211162514cf9bf0d8e6dc7b4e6c544ceef801be1719ca6871839191e4e30cc75a034966a2719fbb365004295889fcf9a04c79cbf47157176c", 0xb0}, {&(0x7f0000002d00)="e64e6efc5c9f2009d42e6d12e9a5", 0xe}, {&(0x7f0000002d40)="35e7ff3cef23f341689407591ad6e4ad61a989306107a5e4e043a6f6bf4ff26b50b8b1b00423bbc39353c689aa18e29f5b66cc2b5704799a1ff0f6d2d382f1f9959b448aae905628ef1f493cf2be7264c0d8f24725be477652cb64ff8562be8de82ad55aa016017691374b525131508f73de67f157fa5310b391e7eee01f0aeeef95274175d327ed2e76416f84b82a21e8226c5de25d424111f98c4888a67e781e47207fb38eb88ec37836aa824b08ac794c9e9d5d442053ca262aad1a64a7f1f95a00179d070c54ab99f6", 0xcb}, {&(0x7f0000002e40)="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", 0x1000}, {&(0x7f0000003e40)="447d8eb84cd5f2ede6a2d842c67dade71e635727547495ccd1d31fedd0e9caa284f60937630d", 0x26}], 0xa, &(0x7f0000003f40)=[{0xe0, 0x84, 0x9, "3a87afd783db62cc7c51d1863af7320c1075c850e9749865671df547c2c72a2d879d13137a132ee2345608ec41b5ac0102aee33ccb1e970983ec7db9643c6d2fdc9bb3c3bcdbe0a60a0abbb668464595d9d4bbf5057b3c29a1ed700e84d082af668d32d05e3b6d769eb1cfc6b20845b1d8f410c7a972a76d2dc3e6bda421af97b584606cfe97d916aa8d91b66be22a7a747c7c717c9d3a5e584fa0d2eadb3025bd561078c54df39ca863262edf88e26b01086233a8bc29aaf5854166ef1c3fa6fc1f3c9e832e5fffb63a6a017d"}, {0xc0, 0xff, 0x800, "a73bbb2073d1be6df0500551c48d5b87c804b339f76c1a523f3a8e6ca81463504a8d9e08c6b82ea8be46dc4e94e6ef30895c8f9f326a3cfa8a30d3a02fa838cf3cc2965f04a1fcddfbab4a7a7c8f17f9b0c046a846739bfb00d7b8dae71c76b7c60dfd7b2869db4c308c3f52a0965afb32e8ac559151d29e540dca34ba4512677083761eec6c2183b47068ef980ca95db22dfb688383cf8732279809b2357ee2af0ee260f39d9d3213a6dd03249f75"}, {0xc0, 0x3a, 0xe, "29359e927f179c6534b784084c55fd6f38a4189614a97ef47b6b3742134e52ab381f5fba49879c7cbc192eccbd85d5e2645c6100449bba15fc0d00335a0186d9d0c2bcb4bc8bf0c5cf5b110f32e924dfe2893371b85c1a6cb2763b4c6e1d9ace5b1a631faa07eb1e2806bdf298872f73036ea01f24c6ce49c18f9187a3a3e6f6a4cf935cafd4bc1cd1cf1972fad04c47a4170b9608d8f0e8dbdc935949b3ee99311c55d1dd765da8640c"}, {0x20, 0x111, 0x5, "46a091af827132a13e"}, {0x38, 0x111, 0x1, "90a5695e8b594d2b91a69686c16439f6bd6e50f87d964b045add87fd73c653faef"}, {0x80, 0x1, 0x7, "d4eb9c50970cf5a04b164f71fb9a2e226169b5c32fc4aa54f9d647e58609dca99d3ace04ab794c5ddd084b02eb75ceba8484b703c4fd1a9dcf451fb1e7a696fd6c194d4e8502cb06c1ce4c7f550cc98ec42a585e37aca5b6b7ba6d8470a9d867414d415ba7f9d5858bae"}, {0x20, 0x10a, 0x28b, "83d035cba60a72befafabb"}], 0x358}, 0x890) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000004300)='}:\xac\x00') ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000004340)={'pim6reg0\x00', 0x20}) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000004380)={0x0, 0x8, [@link_local, @local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x9}, @local, @link_local, @empty, @local, @local]}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000004680)={r5, 0xe0, &(0x7f0000004580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000043c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, &(0x7f0000004400)=[0x0, 0x0, 0x0], &(0x7f0000004440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe, &(0x7f0000004480)=[{}], 0x8, 0x10, &(0x7f00000044c0), &(0x7f0000004500), 0x8, 0xcb, 0x8, 0x8, &(0x7f0000004540)}}, 0x10) r9 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000046c0), 0x2, 0x0) write$cgroup_type(r9, &(0x7f0000004700), 0x9) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000004900)=r8, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000004a40)={0x6, 0x27, &(0x7f0000004740)=@raw=[@exit, @btf_id={0x18, 0x6, 0x3, 0x0, 0x4}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @exit, @ldst={0x2, 0x0, 0x1, 0x3, 0x6, 0x96105c4d39797cab, 0xffffffffffffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff3d44}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}], &(0x7f0000004880)='syzkaller\x00', 0x0, 0x1e, &(0x7f00000048c0)=""/30, 0x40f00, 0x43, '\x00', r7, 0x25, r10, 0x8, &(0x7f0000004940)={0x6, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000004980)=[r0], &(0x7f00000049c0)=[{0x2, 0x1, 0xc, 0x9}, {0x1, 0x2, 0xf, 0x5}, {0x5, 0x1, 0x6, 0x3}, {0x5, 0x3, 0x9, 0xa}, {0x3, 0x4, 0xc, 0x5}, {0x5, 0x5, 0x0, 0xa}, {0x3, 0x4, 0xf, 0xa}], 0x10, 0xc}, 0x94) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000004b00)) 6.63058063s ago: executing program 4 (id=2874): openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x3, 0x0, 0x35) close(0x3) socket$kcm(0x10, 0x2, 0x10) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_clone(0x1200, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xaa, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) close(r2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x4}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="5400020029000b05d25a806f8c6394f90424fc602f0011202e2f0100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 6.561405421s ago: executing program 0 (id=2875): perf_event_open(&(0x7f0000001700)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x1}, 0x8806, 0x3, 0x634e, 0x0, 0x0, 0x1, 0xfff6, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0x2a979d) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0xb, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 6.412395475s ago: executing program 0 (id=2876): syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x1, 0x0, 0xfffff034}, {0x6, 0x0, 0x0, 0x7}]}) ioctl$TUNGETVNETLE(r1, 0x40107446, &(0x7f0000000180)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x4004743d, 0x110e22fff6) write$cgroup_type(r3, &(0x7f0000000280), 0x9) socket$kcm(0x11, 0xa, 0x300) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400", 0x2}], 0x1, 0x0, 0x0, 0x74000000}, 0x10) 6.351444016s ago: executing program 3 (id=2877): r0 = socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x2001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x86bf2056334f3ae6, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)="d80000001e0081054e81f782db4cb9040a1d080006007c095dd2086518000a800d00000003600e1208000f0000000406a80016c0", 0x34}], 0x1}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001840)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000240)) ioctl$SIOCSIFHWADDR(r1, 0x8916, &(0x7f0000000040)={'ipvlan1\x00', @random="0200ac7f7e00"}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000001580)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0xfd, 0xc2ba, 0x0, 0x4000000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000f80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffff}}, 0x0, 0x6, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000000000, 0x2}, 0x0, 0x0, 0xc2ba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000011008188040f46ecdb00e3bd6efb4400080000000a000f00000aba8000001201", 0x24}, {&(0x7f0000000200)="cc182c338cba61617516", 0xa}], 0x2}, 0x0) r6 = socket$kcm(0x11, 0x2, 0x0) socketpair(0xb, 0xa, 0x8, &(0x7f00000001c0)) setsockopt$sock_attach_bpf(r6, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r6, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x0, 0x7, 0x0, &(0x7f0000000200)="63eced8e46dc3f", 0x0, 0x9ffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0x2, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x2161) 5.993392935s ago: executing program 0 (id=2878): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0x11, 0x2, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f0000000100), 0xffffffffffffffb6) close(r0) r1 = socket$kcm(0x11, 0x2, 0x0) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f00000000c0)=r1, 0x8) close(r2) socket$kcm(0x10, 0x400000002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xe, 0xf, &(0x7f0000000900)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000100bf91000000000000bf0200000000000085000000cc000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x104007, 0xac5d, 0x0, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYRES64=r3, @ANYBLOB="ac49d236420dc5369c23dfca99c0", @ANYRES64, @ANYRES16=r4], 0x32) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r6 = openat$cgroup_devices(r5, &(0x7f0000000400)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r6, &(0x7f0000000000)=ANY=[@ANYBLOB='b *:*\t\n', @ANYRESHEX], 0xa) 5.539578186s ago: executing program 1 (id=2879): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xf, 0x5}, 0x105a64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000"], 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe", 0x1a}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r1}, 0x0, 0x0}, 0x20) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 5.190473264s ago: executing program 4 (id=2880): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x2, 0x200000000000001, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) socket$kcm(0x2, 0x3, 0x84) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000001400)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe5}, 0x10c002, 0xac5b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x3, 0x0) write$cgroup_subtree(r1, 0x0, 0xfe33) sendmsg$unix(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f00000002c0)}, {0x0}], 0x2, 0x0, 0x0, 0x40000}, 0x4c891) r2 = socket$kcm(0x10, 0x400000002, 0x0) setsockopt$sock_attach_bpf(r2, 0x10e, 0xb, &(0x7f0000000080), 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000400142603600e12080009000b000401a8001600200008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a73536138f00001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb3adbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc00"/216, 0xd8}], 0x1}, 0x4880) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x6) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0xc7d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000ff000000000000002d5156"], 0x0, 0x1a}, 0x28) 5.094275717s ago: executing program 0 (id=2881): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6a4ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x1, @perf_bp={0x0, 0x2}, 0x21, 0x0, 0x2, 0x7, 0x0, 0xde, 0x88fa, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a000000020000"], 0x48) sendmsg$unix(r0, &(0x7f00000029c0)={&(0x7f0000000340)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000002980)=[{&(0x7f00000003c0)="47d287b70d282102ac42e1646ac117a052453d79350d89e783d0eb4207122efef919d7db44489c002af656c80fa6be07a67f0c", 0x33}, {&(0x7f0000000500)="15d8858a609abd133de65dfa99c3e7bc0916e96ecba7d58c1a6604bc2857f0a0cb7c12d7953f805d00cc988bd468ed7d12a891312e80bb974dd5d225d608eb324bbf900c3ef129a744e9684785b49d574d54d2eb5d90dbf30a4892a4de506fdeff51f32ee7402c68fc2b0e54f8aedf71a562bdefe89cbf42c99fd9e2d18b68bb979a5a3fa9897b679e99d5c1e75687eaa2a4b03c8e1ace0b11ea133fb6e01eaf9c4f2a3c59cddeb8e7febab7e7eeafa249c42b68166c3b7d66f541a0e07baf61e68f76a9de", 0xc5}, {&(0x7f0000000600)="3864105c07c978b5f170ba827409158946f70f45a4479a4fe115f137f302bbe579bbd30b055cf1e2dcb26fa698f5b9c4ad1c62191be02128a11673cea5a54cf2295094ea4b84fdd6cb473a076ad2035eab9b8a67d6e5f21f8454b9795a6e3b1b9a7eabd1d2e5d8fade6821ab0fcc572beca6463d0b0d85f34f591d5fa96ed58b14f7a8a430e952936aed9c2c9a463038a1439c72adf050568f34245ad26dee4851", 0xa1}], 0x3, 0x0, 0x0, 0x800}, 0x4040080) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000180081054e81f782db4cb904021d0800fd007c05e8fe55a10a0015000200142603600e12080005007f370401a8000700200006000400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={r1, r2}, 0xc) write$cgroup_subtree(r4, 0x0, 0xfe33) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200000, 0x1}, 0x712, 0x0, 0xc2ba, 0x8, 0x4000000, 0x800000, 0x0, 0x0, 0x0, 0x0, 0xdee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x20082, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x800000008001, 0x6}, 0x400, 0xc8, 0xffffffff, 0x0, 0x4, 0x401, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r9, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2212102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa00006558"], 0xcfa4) r10 = socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffe, 0x0, 0x9, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(r10, &(0x7f0000000f00)={&(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x64010102}, 0x10, &(0x7f0000000080)=[{0x0}], 0x1, &(0x7f0000000000)=ANY=[], 0x20}, 0x0) sendmsg$inet(r10, &(0x7f0000000f00)={&(0x7f0000000180)={0x2, 0x0, @dev}, 0x10, &(0x7f0000000140)=[{0x0}], 0x1, &(0x7f0000000000)=ANY=[], 0x20}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305829, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 4.96907031s ago: executing program 1 (id=2882): socket$kcm(0x21, 0x2, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x8, 0x2}, 0x80, 0x0}, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}}, 0x0, 0x835, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x3e, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x7, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x18239, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d80)={0x6, 0x2, &(0x7f0000000880)=@raw=[@map_val={0x18, 0x9, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x1}], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000c40)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000c80)={0x1, 0x0, 0x189, 0x1000}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000d40)=[{0x4, 0x3, 0x2, 0x2}], 0x10, 0x5}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0), 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'dvmrp0\x00', 0x2}) socket$kcm(0x11, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r2, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$sock_attach_bpf(r4, 0x1, 0x48, &(0x7f00000000c0)=r3, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={r2, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000600)=""/72, 0xb, 0x0, 0x0, 0x0, &(0x7f0000000680), 0x0, 0x3, 0x0, 0x4}, 0x50) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000001c0)={0x2, &(0x7f0000000040)=[{0x48, 0x83, 0x0, 0x2}, {0x6, 0x7}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x3, 0xd, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@btf_id={0x18, 0xa, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x53f, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xffffffffffffff18, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$kcm(0xa, 0x2, 0x3a) recvmsg(r7, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x2040) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) 4.933353121s ago: executing program 3 (id=2883): perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x76341, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0xf6}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) close(r0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfa019fe45d308098ee68888a8", 0x0, 0x8200aded, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 4.469820242s ago: executing program 0 (id=2884): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x1, 0x0, 0x0, 0xfffffe00, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0}, 0x8061, 0x3, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x40, 0x5}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) close(0xffffffffffffffff) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000010000006000000000000850000006c0000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedc0790701757df37538e486dd63"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x4, 0x0, 0xc46, 0x5, 0x0, 0x100000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000001040)={0x3, 0x0, [0x0, 0x0, 0x0]}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x44080) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001240)={0xffffffffffffffff, 0x20, &(0x7f0000001200)={&(0x7f0000001080)=""/148, 0x94, 0x0, &(0x7f0000001140)=""/137, 0x89}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001280)=r2, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x18, 0x8, 0x40, 0x42, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r3}, 0x38) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0x1, 0x58, &(0x7f00000001c0)}, 0x10) socket$kcm(0x2, 0x1, 0x84) bpf$TOKEN_CREATE(0x24, &(0x7f0000001000)={0x0, r1}, 0x8) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x3}, 0x30, 0x7, 0x8, 0x4, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x10}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10c) r5 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000000640)=[{0x10, 0x84, 0x8}, {0x18, 0x84, 0x0, 'b'}], 0x28}, 0x880) 4.397337574s ago: executing program 4 (id=2885): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}, 0x12986, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="1400000036000b63d25a80648c2594f90b24fc60", 0x14}], 0x1}, 0x0) r1 = socket$kcm(0x15, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3}, @const={0x0, 0x0, 0x0, 0x4}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x44}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="850000"], &(0x7f0000000180)='GPL\x00', 0x3, 0xe5, &(0x7f0000000240)=""/229, 0x0, 0x1c}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x3c, &(0x7f0000000380), 0x4) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x4}, 0x6000, 0x0, 0x4, 0x6, 0x0, 0x2001000a, 0xfffc, 0x0, 0x5}, 0x0, 0x1, 0xffffffffffffffff, 0xd) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x23, &(0x7f0000000040), 0xcf) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="3504000040000511d25a80648c63940d0324fc60040035400c0402000200002037153e370c04018087ca10004500", 0x2e}, {&(0x7f0000000580)="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", 0x407}], 0x2}, 0x48) r4 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r4, 0x0, 0x0) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) r6 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r6, 0x29, 0x1c, 0x0, 0x14) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000640)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8b06, &(0x7f0000000080)={'virt_wifi0\x00', @random="0600"}) perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0x4, 0x7, 0xb, 0x9, 0x0, 0xc3b, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0xc11d, 0x4, @perf_bp={0x0}, 0x220, 0xffff, 0x0, 0x4, 0x0, 0x6, 0x1, 0x0, 0x5, 0x0, 0xffffffffffffffc0}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x0) 4.329841776s ago: executing program 3 (id=2886): perf_event_open(&(0x7f0000001700)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x1}, 0x8806, 0x3, 0x634e, 0x0, 0x0, 0x1, 0xfff6, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0x2a979d) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0xb, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 4.086175871s ago: executing program 1 (id=2887): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) sendmsg$inet(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000001c80)="a2", 0x1}], 0x1}, 0x1c8c4) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0) socket$kcm(0x2, 0xb95342b924aab163, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) r4 = socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x11b, 0x2, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES64=r1], 0x50) recvmsg$unix(r2, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r5, @ANYBLOB="dd0e09000000000000000000000000000000000084a52071bfae03cecde91a7416813fe0419893acc643e3881617f582488d77ad45ebb3d58c8d5d75bae1c665597bc1cc16b04d62fa9f831ae9efcd444bd8e5df61af0cee1e42a155eb606dec53844ee22a7c97c603f1644a64fa838b5382b416646487b8aab97e0e82bba2b8685cba6dc9654375ee58dc18cba0750855", @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="040000000400"/28], 0x50) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="020000000400000008000000010000c7e9c394ff", @ANYRES32=r7, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB="03000000000000000500"/28], 0x50) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000300)="d8000000180081034e81f783db4cb9040a1d020006007c09e8fc55a10a0015000400142603600e120800060000000441a800080004001040040000000c5c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/215, 0xd7}, {&(0x7f00000001c0)=']', 0x1}], 0x2}, 0x0) perf_event_open(&(0x7f0000000480)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x6010, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x400, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r10 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x7, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r11 = socket$kcm(0xf, 0x3, 0x2) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040), 0xcf) sendmsg$inet(r11, 0x0, 0x0) r12 = syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, r12, 0xfffffffffffffffb, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES16=r10, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000007000000000000000080000085000000750000009500000000000004"], 0x0}, 0x94) 3.870707206s ago: executing program 4 (id=2888): socket$kcm(0xa, 0x5, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x21, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080), 0x2) socket$kcm(0x11, 0x200000000000002, 0x300) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x4030582b, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b26, &(0x7f0000000280)={'wlan1\x00', @random="6a50bae0b3e5"}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000900000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r6, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000001850000008600000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r7, &(0x7f0000000500)={&(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x9, &(0x7f0000000580)=[{&(0x7f0000000180)=""/217, 0xd9}, {&(0x7f0000000840)=""/189, 0xb9}, {&(0x7f00000005c0)}], 0x3}, 0x40) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000efffffff000000000000000085000000180000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) 396.070781ms ago: executing program 32 (id=2853): socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="d800000018007bf6e00212ba0d8105040a600000000f040b067c55a1bc000900b80006990600000015000500fe", 0x2d}], 0x1, 0x0, 0x0, 0x2663}, 0x0) socket$kcm(0x21, 0x2, 0xa) r0 = socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000280)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0x2d, 0x0, 0x4, @dev}}, 0x80, 0x0}, 0xfc00) socket$kcm(0x23, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000005c0)={r1}, 0xc) socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x3a) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x30, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe33, 0x0, 0x0, 0x0}, 0x40) close(0xffffffffffffffff) close(0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000006c0)=[{0xfffffffffffffffd}], 0x1}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r2, &(0x7f0000000ac0), 0x0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000dc0)=ANY=[@ANYBLOB="7a0af8ff7525757cbfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000b2595285faa6ead0169191d54f8196217fc563e2fc91f6da4dad4fdc2eb1b5986fc4a3f611a7c80000040000000000b1a297cfddd73f30f2382f6cda4bfdd45be583823c0f092248a57d48621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000800db583620ce7243d1ae9f2cfe401dbef6619358399aa9c2acd068c03efefd8bc77edf2d34b12cd48a1b20fb7dd853eb3f12225bfcca581f04f317c8301b43267e0331759f4ec6b5b0af58e604f494eff289026d5045ef08000000000000007718a09f4800b3c26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc70bb30d435aa8b5202db761014b1b999a12df6bee431a6681000000263b6233e1c0fe30e384c3cb07b74a72291a1a2b523dd81b6651b1ee48e999bb004823ebcd8c65743f31f84b263ab9b3426692f01ad194f302d7a658e90000000001000000b6b2f25ddb8c640ab321a402058c9221b6870814cf4ee23ddb79fff5eb156e0a000000000000f2bd1d4a178d86d6935eb8b75bc4eb680d10e8b6a54c6c8674caf63ff76622939a20d4aadf85db40179c2cf83ee07e30a279d8f9f3bc282deb43a03409f8e6972f3f720d045923702cede0f7e91411f3f1b16f065624f280a7dcce8db910f93c49b9e0aa390d0da6972ed719d7e0efb2bb713d1890e317c8de105c3933fd5d5bf38f6b9fc39fc829dcfe4af8ac5fbb7314a7a433e0182767d1376eda2b9c662003"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x600, 0x4000000}, 0x28) syz_clone(0x40200000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x11, 0x20000000000000a, 0x300) 0s ago: executing program 3 (id=2890): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) kernel console output (not intermixed with test programs): ribute type 10 has an invalid length. [ 334.477151][ T7881] team0: Device wg1 is of different type [ 334.889731][ T7908] netlink: 'syz.3.1041': attribute type 21 has an invalid length. [ 335.229118][ T7916] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.1044'. [ 335.342170][ T7916] netlink: zone id is out of range [ 335.350431][ T7916] netlink: zone id is out of range [ 335.364737][ T7916] netlink: zone id is out of range [ 335.396214][ T7916] netlink: zone id is out of range [ 335.415693][ T7916] netlink: zone id is out of range [ 335.426820][ T7916] netlink: zone id is out of range [ 335.434175][ T7916] netlink: zone id is out of range [ 335.439712][ T7916] netlink: zone id is out of range [ 335.447277][ T7916] netlink: zone id is out of range [ 335.452832][ T7916] netlink: zone id is out of range [ 335.679783][ T7927] netlink: 'syz.2.1048': attribute type 10 has an invalid length. [ 335.697958][ T7927] team0: Device dummy0 is up. Set it down before adding it as a team port [ 335.750289][ T7930] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1050'. [ 336.300104][ T7944] netlink: 'syz.3.1055': attribute type 3 has an invalid length. [ 336.324834][ T7944] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1055'. [ 336.766151][ T7938] netlink: 'syz.4.1050': attribute type 2 has an invalid length. [ 336.774394][ T7938] netlink: 'syz.4.1050': attribute type 4 has an invalid length. [ 336.782570][ T7938] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1050'. [ 339.662847][ T7937] team0: Device wg1 is of different type [ 339.861263][ T7964] validate_nla: 1 callbacks suppressed [ 339.861282][ T7964] netlink: 'syz.3.1061': attribute type 10 has an invalid length. [ 339.884752][ T7964] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1061'. [ 339.904591][ T7964] bridge0: port 3(team0) entered blocking state [ 339.919126][ T7964] bridge0: port 3(team0) entered disabled state [ 340.013646][ T7964] device team0 entered promiscuous mode [ 340.065600][ T7964] device team_slave_0 entered promiscuous mode [ 340.090921][ T7964] device team_slave_1 entered promiscuous mode [ 340.101153][ T7964] device bond0 entered promiscuous mode [ 340.107319][ T7963] netlink: 'syz.2.1059': attribute type 3 has an invalid length. [ 340.112469][ T7964] device bond_slave_0 entered promiscuous mode [ 340.122927][ T7964] device bond_slave_1 entered promiscuous mode [ 340.142566][ T7963] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1059'. [ 340.501413][ T7977] netlink: 'syz.1.1065': attribute type 29 has an invalid length. [ 340.522651][ T7977] netlink: 'syz.1.1065': attribute type 29 has an invalid length. [ 340.906430][ T7984] netlink: 'syz.1.1065': attribute type 2 has an invalid length. [ 340.948105][ T7984] netlink: 'syz.1.1065': attribute type 8 has an invalid length. [ 341.009149][ T7984] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1065'. [ 341.050110][ T7986] netlink: 'syz.1.1065': attribute type 2 has an invalid length. [ 341.059600][ T7986] netlink: 'syz.1.1065': attribute type 8 has an invalid length. [ 341.068764][ T7986] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1065'. [ 341.388285][ T7994] netlink: 'syz.1.1070': attribute type 10 has an invalid length. [ 341.487117][ T7994] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 341.730589][ T8004] netlink: 'syz.2.1072': attribute type 3 has an invalid length. [ 341.851253][ T8004] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1072'. [ 342.411340][ T9] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 344.861993][ T8036] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.1082'. [ 344.885815][ T8041] device veth1_macvtap left promiscuous mode [ 344.917623][ T8042] validate_nla: 2 callbacks suppressed [ 344.917708][ T8042] netlink: 'syz.2.1085': attribute type 3 has an invalid length. [ 344.942162][ T8042] netlink: 114680 bytes leftover after parsing attributes in process `syz.2.1085'. [ 345.160333][ T8054] netlink: 26 bytes leftover after parsing attributes in process `syz.3.1087'. [ 345.184942][ T8054] netlink: 26 bytes leftover after parsing attributes in process `syz.3.1087'. [ 345.228388][ T8054] netlink: 26 bytes leftover after parsing attributes in process `syz.3.1087'. [ 345.256078][ T8054] netlink: 26 bytes leftover after parsing attributes in process `syz.3.1087'. [ 345.272342][ T8054] netlink: 26 bytes leftover after parsing attributes in process `syz.3.1087'. [ 345.320106][ T8054] netlink: 26 bytes leftover after parsing attributes in process `syz.3.1087'. [ 345.377470][ T8054] netlink: 26 bytes leftover after parsing attributes in process `syz.3.1087'. [ 345.392837][ T8054] netlink: 26 bytes leftover after parsing attributes in process `syz.3.1087'. [ 345.407491][ T8054] netlink: 26 bytes leftover after parsing attributes in process `syz.3.1087'. [ 346.272045][ T8075] netlink: 'syz.3.1094': attribute type 25 has an invalid length. [ 346.288914][ T8075] netlink: 'syz.3.1094': attribute type 9 has an invalid length. [ 346.635707][ T8088] net_ratelimit: 173 callbacks suppressed [ 346.640640][ T8088] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 348.426208][ T8106] netlink: 'syz.3.1105': attribute type 3 has an invalid length. [ 350.113988][ T8130] __nla_validate_parse: 60 callbacks suppressed [ 350.114029][ T8130] netlink: 15743 bytes leftover after parsing attributes in process `syz.1.1113'. [ 350.477869][ T8133] netlink: 118800 bytes leftover after parsing attributes in process `syz.4.1114'. [ 351.167401][ T8153] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.1120'. [ 352.755711][ T8159] netlink: 'syz.1.1122': attribute type 10 has an invalid length. [ 354.008170][ T8184] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1126'. [ 354.956747][ T8191] netlink: 'syz.0.1131': attribute type 9 has an invalid length. [ 355.097355][ T8191] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.1131'. [ 356.456357][ T8215] netlink: 'syz.2.1134': attribute type 21 has an invalid length. [ 356.588525][ T8215] netlink: 'syz.2.1134': attribute type 1 has an invalid length. [ 356.696228][ T8221] netlink: 'syz.3.1138': attribute type 3 has an invalid length. [ 356.704806][ T8215] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.1134'. [ 356.799292][ T8221] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1138'. [ 357.200624][ T8231] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.1143'. [ 357.251379][ T8231] debugfs: Directory '.! 5‚Á7>7H€' with parent 'ieee80211' already present! [ 357.575706][ T8242] tun0: tun_chr_ioctl cmd 1074025675 [ 357.581305][ T8242] tun0: persist enabled [ 357.605786][ T8242] tun0: tun_chr_ioctl cmd 1074025675 [ 357.625180][ T8242] tun0: persist enabled [ 357.746032][ T8242] netlink: 'syz.2.1148': attribute type 1 has an invalid length. [ 357.770158][ T8242] netlink: 'syz.2.1148': attribute type 4 has an invalid length. [ 357.811560][ T8242] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.1148'. [ 358.471126][ T8261] netlink: 'syz.0.1155': attribute type 3 has an invalid length. [ 358.536223][ T8261] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1155'. [ 358.694484][ T8274] cgroup: fork rejected by pids controller in /syz2 [ 358.981978][ T8383] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.1161'. [ 359.169538][ T8388] FAULT_INJECTION: forcing a failure. [ 359.169538][ T8388] name failslab, interval 1, probability 0, space 0, times 0 [ 359.189312][ T8388] CPU: 1 PID: 8388 Comm: syz.0.1164 Not tainted syzkaller #0 [ 359.196741][ T8388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 359.206843][ T8388] Call Trace: [ 359.210177][ T8388] [ 359.213165][ T8388] dump_stack_lvl+0x188/0x24e [ 359.218015][ T8388] ? show_regs_print_info+0x12/0x12 [ 359.223250][ T8388] ? load_image+0x410/0x410 [ 359.227794][ T8388] ? __might_sleep+0xd0/0xd0 [ 359.232513][ T8388] ? __lock_acquire+0x7c40/0x7c40 [ 359.237582][ T8388] should_fail_ex+0x390/0x4c0 [ 359.242377][ T8388] should_failslab+0x5/0x20 [ 359.246976][ T8388] slab_pre_alloc_hook+0x59/0x300 [ 359.252028][ T8388] ? trace_contention_end+0x5f/0x170 [ 359.257345][ T8388] ? dev_exception_add+0x93/0x490 [ 359.262443][ T8388] __kmem_cache_alloc_node+0x4f/0x270 [ 359.267844][ T8388] ? dev_exception_add+0x93/0x490 [ 359.272995][ T8388] __kmalloc_node_track_caller+0xa0/0x240 [ 359.278738][ T8388] kmemdup+0x27/0x60 [ 359.282686][ T8388] dev_exception_add+0x93/0x490 [ 359.287541][ T8388] ? parent_has_perm+0x778/0x920 [ 359.292500][ T8388] devcgroup_access_write+0x10b1/0x1950 [ 359.298075][ T8388] ? dev_exceptions_copy+0x3a0/0x3a0 [ 359.303421][ T8388] ? dev_exceptions_copy+0x3a0/0x3a0 [ 359.308716][ T8388] cgroup_file_write+0x2c9/0x6a0 [ 359.313729][ T8388] ? kernfs_fop_write_iter+0x1d8/0x520 [ 359.319208][ T8388] ? cgroup_seqfile_stop+0xd0/0xd0 [ 359.324332][ T8388] ? __virt_addr_valid+0x188/0x540 [ 359.329490][ T8388] ? __virt_addr_valid+0x188/0x540 [ 359.334633][ T8388] ? cgroup_seqfile_stop+0xd0/0xd0 [ 359.339858][ T8388] kernfs_fop_write_iter+0x3a0/0x520 [ 359.345199][ T8388] vfs_write+0x482/0x9a0 [ 359.349530][ T8388] ? file_end_write+0x250/0x250 [ 359.354393][ T8388] ? __fget_files+0x3fc/0x460 [ 359.359110][ T8388] ? __fdget_pos+0x2ae/0x360 [ 359.363732][ T8388] ? ksys_write+0x70/0x260 [ 359.368189][ T8388] ksys_write+0x14d/0x260 [ 359.372597][ T8388] ? __ia32_sys_read+0x80/0x80 [ 359.377414][ T8388] ? lockdep_hardirqs_on+0x94/0x140 [ 359.382628][ T8388] do_syscall_64+0x4c/0xa0 [ 359.387172][ T8388] ? clear_bhb_loop+0x60/0xb0 [ 359.391942][ T8388] ? clear_bhb_loop+0x60/0xb0 [ 359.396827][ T8388] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 359.402815][ T8388] RIP: 0033:0x7f4e7fd9e0d9 [ 359.407297][ T8388] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 359.427004][ T8388] RSP: 002b:00007f4e80c26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 359.435467][ T8388] RAX: ffffffffffffffda RBX: 00007f4e80025fa0 RCX: 00007f4e7fd9e0d9 [ 359.443448][ T8388] RDX: 000000000000000a RSI: 00002000000000c0 RDI: 0000000000000004 [ 359.451510][ T8388] RBP: 00007f4e80c26090 R08: 0000000000000000 R09: 0000000000000000 [ 359.459491][ T8388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 359.467508][ T8388] R13: 00007f4e80026038 R14: 00007f4e80025fa0 R15: 00007ffdad049138 [ 359.475521][ T8388] [ 361.913736][ T8398] netlink: 'syz.0.1167': attribute type 21 has an invalid length. [ 361.922988][ T8383] debugfs: Directory '.! 5‚Á7>7H€' with parent 'ieee80211' already present! [ 362.175398][ T8410] netlink: 126324 bytes leftover after parsing attributes in process `syz.4.1172'. [ 362.208454][ T6349] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.260238][ T8404] netlink: 'syz.3.1168': attribute type 10 has an invalid length. [ 362.400260][ T8404] device wg1 entered promiscuous mode [ 362.424745][ T8404] team0: Device wg1 is of different type [ 362.727089][ T6349] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.809191][ T8425] netlink: 'syz.4.1177': attribute type 2 has an invalid length. [ 362.831690][ T8425] netlink: 'syz.4.1177': attribute type 8 has an invalid length. [ 362.924332][ T8425] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1177'. [ 362.999646][ T6349] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.124889][ T8431] netlink: 'syz.1.1179': attribute type 10 has an invalid length. [ 363.378972][ T4290] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 363.392963][ T4282] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 363.403580][ T4290] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 363.413109][ T4290] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 363.421034][ T4290] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 363.429825][ T4282] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 364.026414][ T8431] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.043620][ T8431] device bridge_slave_1 left promiscuous mode [ 364.052064][ T8431] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.127122][ T8431] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 364.140645][ T8439] netlink: 'syz.3.1180': attribute type 21 has an invalid length. [ 364.235039][ T6349] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.792039][ T8461] netlink: 'syz.4.1186': attribute type 10 has an invalid length. [ 364.827540][ T8461] team0: Device gre0 is up. Set it down before adding it as a team port [ 364.854381][ T8437] chnl_net:caif_netlink_parms(): no params data found [ 365.105775][ T8437] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.149734][ T8437] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.158857][ T8437] device bridge_slave_0 entered promiscuous mode [ 365.208575][ T8437] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.235407][ T8437] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.244245][ T8437] device bridge_slave_1 entered promiscuous mode [ 365.363176][ T8437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 365.416087][ T8437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 365.462381][ T4290] Bluetooth: hci4: command 0x0409 tx timeout [ 365.588610][ T8437] team0: Port device team_slave_0 added [ 365.612281][ T8437] team0: Port device team_slave_1 added [ 365.666718][ T8437] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 365.702169][ T8437] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.776699][ T8437] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 365.795904][ T8437] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 365.803205][ T8437] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.860615][ T8437] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 367.396651][ T8437] device hsr_slave_0 entered promiscuous mode [ 367.468372][ T8437] device hsr_slave_1 entered promiscuous mode [ 367.508870][ T8437] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 367.517470][ T8437] Cannot create hsr debugfs directory [ 367.558788][ T4290] Bluetooth: hci4: command 0x041b tx timeout [ 367.627196][ T6349] tipc: Left network mode [ 367.906628][ T8492] netlink: 15231 bytes leftover after parsing attributes in process `syz.0.1190'. [ 369.532237][ T8507] netlink: 'syz.0.1195': attribute type 21 has an invalid length. [ 369.624883][ T4290] Bluetooth: hci4: command 0x040f tx timeout [ 370.119277][ T8538] netlink: 'syz.3.1202': attribute type 11 has an invalid length. [ 370.180502][ T8538] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1202'. [ 371.702330][ T4290] Bluetooth: hci4: command 0x0419 tx timeout [ 373.204838][ T8537] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 373.469371][ T8437] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 373.758164][ T8437] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 373.773119][ T8568] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1206'. [ 373.787639][ T8573] netlink: 'syz.1.1207': attribute type 21 has an invalid length. [ 373.949612][ T8577] netlink: 822 bytes leftover after parsing attributes in process `syz.4.1208'. [ 373.972287][ T8577] bridge: RTM_DELNEIGH with unconfigured vlan 2 on bridge0 [ 373.996056][ T8437] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 374.074582][ T8582] netlink: 'syz.4.1208': attribute type 39 has an invalid length. [ 374.265706][ T8437] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 374.382398][ T6344] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 375.089274][ T6349] device hsr_slave_0 left promiscuous mode [ 375.124358][ T6349] device bridge_slave_0 left promiscuous mode [ 375.174834][ T6349] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.141248][ T6349] device veth1_macvtap left promiscuous mode [ 378.162691][ T6349] device veth0_macvtap left promiscuous mode [ 378.171112][ T6349] device veth1_vlan left promiscuous mode [ 378.185331][ T6349] device veth0_vlan left promiscuous mode [ 378.330133][ T6349] team0 (unregistering): Port device geneve1 removed [ 378.682282][ T6349] team0 (unregistering): Port device team_slave_1 removed [ 378.726204][ T6349] team0 (unregistering): Port device team_slave_0 removed [ 378.753980][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.760362][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.776021][ T6349] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 378.818202][ T6349] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 379.082362][ T6349] bond0 (unregistering): Released all slaves [ 379.167703][ T8612] netlink: 'syz.4.1214': attribute type 10 has an invalid length. [ 379.177563][ T8612] team0: Device wg1 is of different type [ 379.359235][ T8437] 8021q: adding VLAN 0 to HW filter on device bond0 [ 379.418647][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 379.430045][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 379.476282][ T8437] 8021q: adding VLAN 0 to HW filter on device team0 [ 379.523142][ T6342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 379.538684][ T6342] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 379.557877][ T6342] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.565115][ T6342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 379.608699][ T6342] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 379.618110][ T6342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 379.634641][ T6342] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 379.645775][ T6342] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.653827][ T6342] bridge0: port 2(bridge_slave_1) entered forwarding state [ 379.667044][ T6342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 379.797888][ T6342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 379.853180][ T6342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 379.904193][ T6342] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 379.945429][ T6342] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 380.026115][ T6344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 380.087526][ T6344] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 380.131066][ T8437] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 380.242593][ T8437] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 380.292221][ T6344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 380.310470][ T6344] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 380.328350][ T6344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 380.347833][ T6344] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 380.365305][ T6344] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 380.417182][ T8668] netlink: 'syz.3.1227': attribute type 21 has an invalid length. [ 381.020730][ T8685] netlink: 'syz.1.1231': attribute type 10 has an invalid length. [ 381.192731][ T8685] team0: Device wg1 is of different type [ 381.422396][ T6346] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 381.430725][ T6346] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 381.456266][ T8437] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 381.513259][ T6349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 381.527549][ T6349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 381.569926][ T6342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 381.585597][ T6342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 381.611261][ T8437] device veth0_vlan entered promiscuous mode [ 381.623629][ T6342] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 381.636012][ T6342] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 381.675492][ T8437] device veth1_vlan entered promiscuous mode [ 381.783834][ T6342] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 381.820690][ T6342] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 381.838145][ T6342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 381.854895][ T6342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 381.896451][ T8437] device veth0_macvtap entered promiscuous mode [ 382.014495][ T8437] device veth1_macvtap entered promiscuous mode [ 382.123975][ T8437] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 382.195730][ T6344] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 382.204833][ T6344] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 382.235483][ T6344] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 382.284305][ T6344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 382.316522][ T8437] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 382.347443][ T8716] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1240'. [ 382.395446][ T8729] syz.0.1246[8729] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 382.395567][ T8729] syz.0.1246[8729] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 382.486479][ T6344] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 382.541722][ T6344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 382.555094][ T8437] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.565829][ T8437] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.575004][ T8437] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.592250][ T8437] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.614568][ T8730] netlink: 'syz.1.1245': attribute type 21 has an invalid length. [ 384.363594][ T6342] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.371499][ T6342] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.414408][ T6349] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 384.470994][ T6349] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.488107][ T6349] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.524307][ T6342] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 384.848218][ T8772] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1260'. [ 384.873312][ T8770] netlink: 'syz.3.1259': attribute type 33 has an invalid length. [ 384.881249][ T8770] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1259'. [ 384.946076][ T8775] netlink: 'syz.3.1259': attribute type 10 has an invalid length. [ 384.976812][ T8777] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 384.994898][ T8777] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 385.059379][ T8777] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 385.070738][ T8777] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 385.360734][ T8779] netlink: 'syz.2.1261': attribute type 21 has an invalid length. [ 385.396236][ T8779] IPv6: NLM_F_CREATE should be specified when creating new route [ 386.319515][ T8807] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1271'. [ 386.370257][ T8810] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1271'. [ 386.417251][ T8810] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 386.544849][ T8807] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1271'. [ 386.615325][ T8807] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 386.741974][ T8807] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 386.813654][ T8819] netlink: 'syz.3.1278': attribute type 10 has an invalid length. [ 386.832579][ T8819] FAULT_INJECTION: forcing a failure. [ 386.832579][ T8819] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 386.876523][ T8819] CPU: 0 PID: 8819 Comm: syz.3.1278 Not tainted syzkaller #0 [ 386.884003][ T8819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 386.894095][ T8819] Call Trace: [ 386.897385][ T8819] [ 386.900325][ T8819] dump_stack_lvl+0x188/0x24e [ 386.905028][ T8819] ? show_regs_print_info+0x12/0x12 [ 386.910242][ T8819] ? load_image+0x410/0x410 [ 386.914758][ T8819] ? __lock_acquire+0x7c40/0x7c40 [ 386.919809][ T8819] ? snprintf+0xe5/0x140 [ 386.924093][ T8819] should_fail_ex+0x390/0x4c0 [ 386.928789][ T8819] _copy_to_user+0x2c/0x130 [ 386.933381][ T8819] simple_read_from_buffer+0xe3/0x150 [ 386.938887][ T8819] proc_fail_nth_read+0x1a6/0x220 [ 386.943975][ T8819] ? proc_fault_inject_write+0x310/0x310 [ 386.949632][ T8819] ? fsnotify_perm+0x248/0x550 [ 386.954468][ T8819] ? proc_fault_inject_write+0x310/0x310 [ 386.960117][ T8819] vfs_read+0x2db/0x960 [ 386.964295][ T8819] ? kernel_read+0x1e0/0x1e0 [ 386.968900][ T8819] ? __fget_files+0x28/0x460 [ 386.973505][ T8819] ? __fget_files+0x3fc/0x460 [ 386.978210][ T8819] ? __fdget_pos+0x2ae/0x360 [ 386.982813][ T8819] ? ksys_read+0x70/0x260 [ 386.987156][ T8819] ksys_read+0x14d/0x260 [ 386.991523][ T8819] ? vfs_write+0x9a0/0x9a0 [ 386.995962][ T8819] ? lockdep_hardirqs_on+0x94/0x140 [ 387.001173][ T8819] do_syscall_64+0x4c/0xa0 [ 387.005603][ T8819] ? clear_bhb_loop+0x60/0xb0 [ 387.010292][ T8819] ? clear_bhb_loop+0x60/0xb0 [ 387.015003][ T8819] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 387.020915][ T8819] RIP: 0033:0x7fab4835e90e [ 387.025340][ T8819] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 387.044959][ T8819] RSP: 002b:00007fab491c6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 387.053383][ T8819] RAX: ffffffffffffffda RBX: 00007fab491c76c0 RCX: 00007fab4835e90e [ 387.061361][ T8819] RDX: 000000000000000f RSI: 00007fab491c70a0 RDI: 0000000000000004 [ 387.069341][ T8819] RBP: 00007fab491c7090 R08: 0000000000000000 R09: 0000000000000000 [ 387.077340][ T8819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 387.085319][ T8819] R13: 00007fab48626038 R14: 00007fab48625fa0 R15: 00007ffca1477838 [ 387.093320][ T8819] [ 387.276276][ T8831] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.1283'. [ 387.324140][ T8831] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 387.408047][ T8841] netlink: 'syz.1.1287': attribute type 29 has an invalid length. [ 387.433000][ T8841] netlink: 'syz.1.1287': attribute type 29 has an invalid length. [ 387.451516][ T8840] netlink: 'syz.1.1287': attribute type 29 has an invalid length. [ 387.673809][ T8850] netlink: 'syz.4.1288': attribute type 21 has an invalid length. [ 388.157255][ T8866] netlink: 'syz.3.1291': attribute type 3 has an invalid length. [ 388.165755][ T8866] netlink: 114680 bytes leftover after parsing attributes in process `syz.3.1291'. [ 388.474335][ T8870] netlink: 'syz.0.1295': attribute type 21 has an invalid length. [ 393.632940][ T8922] sctp: [Deprecated]: syz.3.1315 (pid 8922) Use of struct sctp_assoc_value in delayed_ack socket option. [ 393.632940][ T8922] Use struct sctp_sack_info instead [ 397.208283][ T8945] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.1323'. [ 398.854144][ T8927] netlink: 'syz.2.1317': attribute type 21 has an invalid length. [ 398.879552][ T8938] netlink: 'syz.3.1321': attribute type 22 has an invalid length. [ 398.910699][ T8938] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1321'. [ 399.683116][ T8965] netlink: 'syz.1.1326': attribute type 10 has an invalid length. [ 400.147092][ T8965] team0: Device wg1 is of different type [ 403.600515][ T9000] netlink: 'syz.1.1339': attribute type 21 has an invalid length. [ 403.804141][ T8995] netlink: 'syz.0.1341': attribute type 10 has an invalid length. [ 404.169318][ T8995] team0: Port device macvlan0 added [ 404.276643][ T8994] delete_channel: no stack [ 404.342432][ T9014] netlink: 'syz.3.1347': attribute type 10 has an invalid length. [ 404.591063][ T9014] team0: Device wg1 is of different type [ 404.937228][ T9017] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1348'. [ 404.992597][ T9022] netlink: 'syz.0.1349': attribute type 10 has an invalid length. [ 405.245112][ T9022] team0: Device wg1 is of different type [ 405.733362][ T9043] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.1355'. [ 408.138335][ T6349] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 408.760113][ T9067] netlink: 'syz.0.1363': attribute type 10 has an invalid length. [ 408.875074][ T9067] team0: Device wg1 is of different type [ 409.655258][ T9091] netlink: 'syz.4.1370': attribute type 10 has an invalid length. [ 409.751092][ T9091] team0: Device wg1 is of different type [ 410.071899][ T9100] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1372'. [ 412.238460][ T9141] netlink: 'syz.4.1384': attribute type 3 has an invalid length. [ 412.322510][ T9141] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1384'. [ 412.523073][ T9145] netlink: 'syz.2.1388': attribute type 10 has an invalid length. [ 413.210532][ T9145] team0: Device wg1 is of different type [ 413.786410][ T9172] netlink: 'syz.2.1397': attribute type 11 has an invalid length. [ 413.798153][ T9172] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1397'. [ 413.814534][ T9171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 413.923391][ T9181] FAULT_INJECTION: forcing a failure. [ 413.923391][ T9181] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 413.937137][ T9181] CPU: 1 PID: 9181 Comm: syz.0.1400 Not tainted syzkaller #0 [ 413.944563][ T9181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 413.954672][ T9181] Call Trace: [ 413.957996][ T9181] [ 413.960970][ T9181] dump_stack_lvl+0x188/0x24e [ 413.965710][ T9181] ? show_regs_print_info+0x12/0x12 [ 413.970973][ T9181] ? load_image+0x410/0x410 [ 413.975537][ T9181] ? __might_fault+0xa6/0x120 [ 413.980346][ T9181] should_fail_ex+0x390/0x4c0 [ 413.985092][ T9181] copyin+0x1b/0x120 [ 413.989085][ T9181] _copy_from_iter+0x447/0x1130 [ 413.994014][ T9181] ? copyout_mc+0x110/0x110 [ 413.998567][ T9181] ? __virt_addr_valid+0x188/0x540 [ 414.003734][ T9181] ? __virt_addr_valid+0x188/0x540 [ 414.009075][ T9181] ? __virt_addr_valid+0x467/0x540 [ 414.014239][ T9181] ? __phys_addr_symbol+0x2b/0x70 [ 414.019312][ T9181] ? __check_object_size+0x4f6/0xa70 [ 414.024649][ T9181] netlink_sendmsg+0x755/0xbd0 [ 414.029563][ T9181] ? netlink_getsockopt+0x550/0x550 [ 414.034830][ T9181] ? apparmor_socket_sendmsg+0x16c/0x330 [ 414.040556][ T9181] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 414.045938][ T9181] ? security_socket_sendmsg+0x7c/0xa0 [ 414.051449][ T9181] ? netlink_getsockopt+0x550/0x550 [ 414.056803][ T9181] ____sys_sendmsg+0x5ed/0x9a0 [ 414.061733][ T9181] ? __sys_sendmsg_sock+0x30/0x30 [ 414.066813][ T9181] ? __import_iovec+0x306/0x510 [ 414.071740][ T9181] ? import_iovec+0x6f/0xa0 [ 414.076316][ T9181] ___sys_sendmsg+0x2a2/0x360 [ 414.081055][ T9181] ? __sys_sendmsg+0x2a0/0x2a0 [ 414.085924][ T9181] ? __lock_acquire+0x7c40/0x7c40 [ 414.091056][ T9181] __se_sys_sendmsg+0x1c3/0x2b0 [ 414.095961][ T9181] ? ct_nmi_exit+0x145/0x1c0 [ 414.100603][ T9181] ? __x64_sys_sendmsg+0x80/0x80 [ 414.105631][ T9181] ? lockdep_hardirqs_on+0x94/0x140 [ 414.110886][ T9181] do_syscall_64+0x4c/0xa0 [ 414.115346][ T9181] ? clear_bhb_loop+0x60/0xb0 [ 414.120246][ T9181] ? clear_bhb_loop+0x60/0xb0 [ 414.124975][ T9181] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 414.130923][ T9181] RIP: 0033:0x7f4e7fd9e0d9 [ 414.135388][ T9181] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 414.155135][ T9181] RSP: 002b:00007f4e80c26028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 414.163604][ T9181] RAX: ffffffffffffffda RBX: 00007f4e80025fa0 RCX: 00007f4e7fd9e0d9 [ 414.171624][ T9181] RDX: 0000000020040900 RSI: 0000200000000600 RDI: 0000000000000016 [ 414.179641][ T9181] RBP: 00007f4e80c26090 R08: 0000000000000000 R09: 0000000000000000 [ 414.187678][ T9181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 414.195854][ T9181] R13: 00007f4e80026038 R14: 00007f4e80025fa0 R15: 00007ffdad049138 [ 414.203922][ T9181] [ 414.570109][ T9194] netlink: 'syz.1.1403': attribute type 10 has an invalid length. [ 414.614001][ T9194] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port [ 418.176417][ T9216] netlink: 'syz.2.1411': attribute type 13 has an invalid length. [ 418.190891][ T9216] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1411'. [ 418.233337][ T9216] erspan0: refused to change device tx_queue_len [ 418.303672][ T9215] netlink: 'syz.2.1411': attribute type 3 has an invalid length. [ 418.321173][ T9215] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1411'. [ 418.332471][ T9223] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1415'. [ 419.187331][ T9254] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1424'. [ 420.431854][ T9268] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.1431'. [ 421.895681][ T9272] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1429'. [ 421.922024][ T9272] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 421.949791][ T9282] netlink: 'syz.3.1435': attribute type 10 has an invalid length. [ 422.093970][ T9282] team0: Device wg1 is of different type [ 425.451795][ T9306] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 425.482349][ T9306] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 425.498479][ T9307] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1443'. [ 425.508982][ T9306] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 426.785275][ T9341] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1453'. [ 426.856943][ T9341] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 427.412177][ T9362] netlink: 49920 bytes leftover after parsing attributes in process `syz.3.1460'. [ 427.989335][ T9377] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1461'. [ 430.251759][ T9398] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1471'. [ 430.272476][ T9398] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 432.107721][ T9441] netlink: 'syz.1.1482': attribute type 29 has an invalid length. [ 433.875864][ T9466] can: request_module (can-proto-0) failed. [ 433.939300][ T9468] netlink: 'syz.0.1490': attribute type 29 has an invalid length. [ 434.619812][ T9435] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1481'. [ 434.632344][ T9441] netlink: 'syz.1.1482': attribute type 29 has an invalid length. [ 434.640333][ T9443] netlink: 'syz.1.1482': attribute type 2 has an invalid length. [ 434.648287][ T9443] netlink: 'syz.1.1482': attribute type 8 has an invalid length. [ 434.656366][ T9443] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1482'. [ 434.666197][ T9447] netlink: 'syz.1.1482': attribute type 2 has an invalid length. [ 434.674641][ T9447] netlink: 'syz.1.1482': attribute type 8 has an invalid length. [ 434.682566][ T9447] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1482'. [ 434.692056][ T9468] netlink: 'syz.0.1490': attribute type 29 has an invalid length. [ 434.808460][ T9473] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1491'. [ 435.338700][ T9488] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1496'. [ 435.349710][ T9488] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 438.295432][ T9521] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1506'. [ 439.310755][ T9543] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1513'. [ 439.373243][ T9543] netlink: 'syz.3.1513': attribute type 2 has an invalid length. [ 439.427344][ T9543] netlink: 'syz.3.1513': attribute type 4 has an invalid length. [ 439.459192][ T9543] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1513'. [ 440.186863][ T9559] netlink: 'syz.1.1520': attribute type 10 has an invalid length. [ 440.187090][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.201129][ T9559] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1520'. [ 440.201496][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.222763][ T9559] bridge0: port 2(team0) entered blocking state [ 440.229124][ T9559] bridge0: port 2(team0) entered disabled state [ 440.238206][ T9559] device team0 entered promiscuous mode [ 440.244363][ T9559] device team_slave_0 entered promiscuous mode [ 440.251547][ T9559] device team_slave_1 entered promiscuous mode [ 440.264020][ T9559] device bond0 entered promiscuous mode [ 440.281073][ T9559] device bond_slave_0 entered promiscuous mode [ 440.288138][ T9559] device bond_slave_1 entered promiscuous mode [ 440.312840][ T9559] device batadv_slave_0 entered promiscuous mode [ 440.363732][ T9559] device bridge_slave_1 entered promiscuous mode [ 440.376265][ T9559] device geneve1 entered promiscuous mode [ 440.814071][ T9572] netlink: 'syz.1.1522': attribute type 3 has an invalid length. [ 440.853192][ T9572] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1522'. [ 442.337802][ T9605] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1531'. [ 443.861081][ T9632] netlink: 'syz.2.1538': attribute type 11 has an invalid length. [ 443.876380][ T9632] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1538'. [ 443.989272][ T9631] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 447.627665][ T9693] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1552'. [ 447.749743][ T9693] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1552'. [ 448.826715][ T9698] netlink: 'syz.2.1558': attribute type 3 has an invalid length. [ 448.836651][ T9706] netlink: 'syz.3.1561': attribute type 29 has an invalid length. [ 448.842920][ T9698] netlink: 114680 bytes leftover after parsing attributes in process `syz.2.1558'. [ 448.862472][ T9706] netlink: 'syz.3.1561': attribute type 29 has an invalid length. [ 448.894304][ T9714] netlink: 'syz.3.1561': attribute type 29 has an invalid length. [ 449.772873][ T9734] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1567'. [ 449.855375][ T9734] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 452.331039][ T9785] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1585'. [ 454.446537][ T9829] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.581883][ T9832] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1601'. [ 454.852279][ T9839] mac80211_hwsim hwsim4 ªªªªªª: renamed from wlan0 [ 456.423258][ T9862] netlink: 'syz.1.1613': attribute type 10 has an invalid length. [ 457.653395][ T9890] netlink: 114960 bytes leftover after parsing attributes in process `syz.1.1620'. [ 457.765274][ T9890] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 459.549311][ T9916] netlink: 'syz.0.1630': attribute type 10 has an invalid length. [ 459.792491][ T9916] team0: Port device geneve1 added [ 460.114700][ T9934] netlink: 126324 bytes leftover after parsing attributes in process `syz.4.1634'. [ 461.523969][ T9964] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1644'. [ 461.606255][ T9962] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1644'. [ 462.756195][ T9974] netlink: 'syz.3.1648': attribute type 10 has an invalid length. [ 462.952513][ T9974] device geneve1 entered promiscuous mode [ 463.005557][ T9974] team0: Port device geneve1 added [ 463.216228][ T9991] netlink: 'syz.1.1654': attribute type 10 has an invalid length. [ 463.352817][ T9994] netlink: 'syz.0.1653': attribute type 21 has an invalid length. [ 463.719695][T10009] netlink: 'syz.0.1670': attribute type 10 has an invalid length. [ 465.372951][T10043] netlink: 'syz.2.1674': attribute type 10 has an invalid length. [ 465.503878][T10043] team0: Port device geneve1 added [ 467.447649][T10073] netlink: 'syz.0.1686': attribute type 2 has an invalid length. [ 468.303325][T10081] FAULT_INJECTION: forcing a failure. [ 468.303325][T10081] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 468.328935][T10073] device 1 entered promiscuous mode [ 468.354367][T10081] CPU: 0 PID: 10081 Comm: syz.4.1687 Not tainted syzkaller #0 [ 468.361898][T10081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 468.371993][T10081] Call Trace: [ 468.375312][T10081] [ 468.378272][T10081] dump_stack_lvl+0x188/0x24e [ 468.383002][T10081] ? show_regs_print_info+0x12/0x12 [ 468.388226][T10081] ? load_image+0x410/0x410 [ 468.392745][T10081] ? __lock_acquire+0x7c40/0x7c40 [ 468.397785][T10081] ? snprintf+0xe5/0x140 [ 468.402075][T10081] should_fail_ex+0x390/0x4c0 [ 468.406775][T10081] _copy_to_user+0x2c/0x130 [ 468.411290][T10081] simple_read_from_buffer+0xe3/0x150 [ 468.416673][T10081] proc_fail_nth_read+0x1a6/0x220 [ 468.421710][T10081] ? proc_fault_inject_write+0x310/0x310 [ 468.427359][T10081] ? fsnotify_perm+0x248/0x550 [ 468.432224][T10081] ? proc_fault_inject_write+0x310/0x310 [ 468.437878][T10081] vfs_read+0x2db/0x960 [ 468.442062][T10081] ? kernel_read+0x1e0/0x1e0 [ 468.446677][T10081] ? __fget_files+0x28/0x460 [ 468.451286][T10081] ? __fget_files+0x3fc/0x460 [ 468.456017][T10081] ? __fdget_pos+0x2ae/0x360 [ 468.460642][T10081] ? ksys_read+0x70/0x260 [ 468.465002][T10081] ksys_read+0x14d/0x260 [ 468.469369][T10081] ? vfs_write+0x9a0/0x9a0 [ 468.473805][T10081] ? lockdep_hardirqs_on+0x94/0x140 [ 468.479115][T10081] do_syscall_64+0x4c/0xa0 [ 468.483551][T10081] ? clear_bhb_loop+0x60/0xb0 [ 468.488334][T10081] ? clear_bhb_loop+0x60/0xb0 [ 468.493028][T10081] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 468.498947][T10081] RIP: 0033:0x7fb2ff95e90e [ 468.503374][T10081] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 468.522992][T10081] RSP: 002b:00007fb300848fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 468.531417][T10081] RAX: ffffffffffffffda RBX: 00007fb3008496c0 RCX: 00007fb2ff95e90e [ 468.539418][T10081] RDX: 000000000000000f RSI: 00007fb3008490a0 RDI: 0000000000000005 [ 468.547425][T10081] RBP: 00007fb300849090 R08: 0000000000000000 R09: 0000000000000000 [ 468.555422][T10081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 468.563407][T10081] R13: 00007fb2ffc26038 R14: 00007fb2ffc25fa0 R15: 00007ffc88766da8 [ 468.571404][T10081] [ 469.081058][T10092] device syzkaller0 entered promiscuous mode [ 469.769360][T10119] netlink: 126324 bytes leftover after parsing attributes in process `syz.2.1698'. [ 473.726562][T10143] netlink: 'syz.2.1703': attribute type 2 has an invalid length. [ 473.976735][T10143] netlink: 'syz.2.1703': attribute type 8 has an invalid length. [ 474.074699][T10147] netlink: 143932 bytes leftover after parsing attributes in process `syz.3.1707'. [ 474.115916][T10143] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1703'. [ 474.208748][T10147] netlink: zone id is out of range [ 474.411580][T10147] netlink: zone id is out of range [ 474.448710][T10147] netlink: zone id is out of range [ 474.470550][T10147] netlink: zone id is out of range [ 474.520617][T10147] netlink: zone id is out of range [ 474.548159][T10147] netlink: zone id is out of range [ 474.553892][T10147] netlink: zone id is out of range [ 474.564657][T10147] netlink: zone id is out of range [ 474.579912][T10147] netlink: zone id is out of range [ 474.586258][T10147] netlink: zone id is out of range [ 475.179291][T10162] netlink: 'syz.3.1709': attribute type 10 has an invalid length. [ 475.188892][T10162] device bridge_slave_1 left promiscuous mode [ 475.214331][T10162] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.359503][T10192] netlink: 'syz.4.1721': attribute type 10 has an invalid length. [ 476.405424][T10192] team0: Device gre0 is up. Set it down before adding it as a team port [ 477.056385][T10204] netlink: 'syz.2.1725': attribute type 10 has an invalid length. [ 477.096378][T10204] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1725'. [ 477.123571][T10204] device vlan1 entered promiscuous mode [ 478.776471][T10241] FAULT_INJECTION: forcing a failure. [ 478.776471][T10241] name failslab, interval 1, probability 0, space 0, times 0 [ 478.822084][T10241] CPU: 0 PID: 10241 Comm: syz.3.1741 Not tainted syzkaller #0 [ 478.829634][T10241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 478.839750][T10241] Call Trace: [ 478.843069][T10241] [ 478.846033][T10241] dump_stack_lvl+0x188/0x24e [ 478.850772][T10241] ? show_regs_print_info+0x12/0x12 [ 478.856029][T10241] ? load_image+0x410/0x410 [ 478.860588][T10241] ? __might_sleep+0xd0/0xd0 [ 478.865223][T10241] ? __lock_acquire+0x7c40/0x7c40 [ 478.870285][T10241] should_fail_ex+0x390/0x4c0 [ 478.874997][T10241] should_failslab+0x5/0x20 [ 478.879523][T10241] slab_pre_alloc_hook+0x59/0x300 [ 478.884578][T10241] kmem_cache_alloc_node+0x5a/0x310 [ 478.889798][T10241] ? kmem_cache_free+0xf7/0x2a0 [ 478.894662][T10241] ? __alloc_skb+0xf9/0x7d0 [ 478.899189][T10241] __alloc_skb+0xf9/0x7d0 [ 478.903540][T10241] pfkey_sendmsg+0xd64/0x1140 [ 478.908321][T10241] ? pfkey_release+0x340/0x340 [ 478.913108][T10241] ? aa_sk_perm+0x81f/0x950 [ 478.917641][T10241] ? aa_sock_msg_perm+0x94/0x150 [ 478.922607][T10241] ? apparmor_socket_sendmsg+0x8a/0x330 [ 478.928171][T10241] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 478.933473][T10241] ? security_socket_sendmsg+0x7c/0xa0 [ 478.938952][T10241] ? pfkey_release+0x340/0x340 [ 478.943731][T10241] ____sys_sendmsg+0x5ed/0x9a0 [ 478.948524][T10241] ? __sys_sendmsg_sock+0x30/0x30 [ 478.953604][T10241] ? __import_iovec+0x306/0x510 [ 478.958482][T10241] ? import_iovec+0x6f/0xa0 [ 478.962998][T10241] ___sys_sendmsg+0x2a2/0x360 [ 478.967697][T10241] ? __sys_sendmsg+0x2a0/0x2a0 [ 478.972496][T10241] ? __lock_acquire+0x7c40/0x7c40 [ 478.977558][T10241] __se_sys_sendmsg+0x1c3/0x2b0 [ 478.982428][T10241] ? __x64_sys_sendmsg+0x80/0x80 [ 478.987399][T10241] ? lockdep_hardirqs_on+0x94/0x140 [ 478.992612][T10241] do_syscall_64+0x4c/0xa0 [ 478.997045][T10241] ? clear_bhb_loop+0x60/0xb0 [ 479.001737][T10241] ? clear_bhb_loop+0x60/0xb0 [ 479.006435][T10241] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 479.012346][T10241] RIP: 0033:0x7fab4839e0d9 [ 479.016785][T10241] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 479.036678][T10241] RSP: 002b:00007fab491c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 479.045116][T10241] RAX: ffffffffffffffda RBX: 00007fab48625fa0 RCX: 00007fab4839e0d9 [ 479.053106][T10241] RDX: 0000000000000000 RSI: 0000200000003780 RDI: 0000000000000003 [ 479.061088][T10241] RBP: 00007fab491c7090 R08: 0000000000000000 R09: 0000000000000000 [ 479.069078][T10241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 479.077409][T10241] R13: 00007fab48626038 R14: 00007fab48625fa0 R15: 00007ffca1477838 [ 479.085406][T10241] [ 479.254855][T10248] netlink: 'syz.3.1742': attribute type 3 has an invalid length. [ 479.274081][T10248] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1742'. [ 479.554558][T10251] netlink: 'syz.1.1743': attribute type 21 has an invalid length. [ 479.563790][T10251] netlink: 'syz.1.1743': attribute type 1 has an invalid length. [ 480.291007][T10273] netlink: 'syz.4.1748': attribute type 10 has an invalid length. [ 480.309306][T10271] netlink: 143932 bytes leftover after parsing attributes in process `syz.1.1752'. [ 480.331453][T10271] net_ratelimit: 3544 callbacks suppressed [ 480.331473][T10271] netlink: zone id is out of range [ 480.382687][T10271] netlink: zone id is out of range [ 480.389013][T10273] team0: Port device geneve1 added [ 480.396604][T10271] netlink: zone id is out of range [ 480.803697][T10271] netlink: zone id is out of range [ 480.808910][T10271] netlink: zone id is out of range [ 480.929063][T10271] netlink: zone id is out of range [ 481.091228][T10271] netlink: zone id is out of range [ 481.173557][T10271] netlink: zone id is out of range [ 481.209781][T10271] netlink: zone id is out of range [ 481.216224][T10271] netlink: zone id is out of range [ 481.252746][T10285] netlink: 'syz.3.1754': attribute type 21 has an invalid length. [ 481.312359][T10285] netlink: 'syz.3.1754': attribute type 12 has an invalid length. [ 481.397104][T10285] netlink: 'syz.3.1754': attribute type 13 has an invalid length. [ 481.457596][T10285] netlink: 'syz.3.1754': attribute type 14 has an invalid length. [ 481.502630][T10285] netlink: 'syz.3.1754': attribute type 15 has an invalid length. [ 481.510540][T10285] netlink: 'syz.3.1754': attribute type 16 has an invalid length. [ 481.578731][T10285] netlink: 12926 bytes leftover after parsing attributes in process `syz.3.1754'. [ 482.160016][T10312] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1763'. [ 483.390251][T10332] netlink: 143932 bytes leftover after parsing attributes in process `syz.0.1770'. [ 483.564155][T10341] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1773'. [ 483.593191][T10341] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1773'. [ 484.795167][T10374] validate_nla: 5 callbacks suppressed [ 484.795188][T10374] netlink: 'syz.4.1784': attribute type 10 has an invalid length. [ 484.935811][T10379] netlink: 'syz.2.1786': attribute type 10 has an invalid length. [ 484.959298][T10379] device veth0_macvtap left promiscuous mode [ 485.082223][T10378] netlink: 'syz.2.1786': attribute type 10 has an invalid length. [ 485.106730][T10382] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1787'. [ 485.162905][T10387] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1787'. [ 485.183190][T10388] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1787'. [ 485.185416][T10393] netlink: 'syz.3.1789': attribute type 1 has an invalid length. [ 485.200869][T10388] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 485.201295][T10393] netlink: 157116 bytes leftover after parsing attributes in process `syz.3.1789'. [ 485.233634][T10394] tap0: tun_chr_ioctl cmd 1074025673 [ 485.248021][T10393] tap0: tun_chr_ioctl cmd 35108 [ 486.008404][T10418] netlink: 'syz.1.1798': attribute type 10 has an invalid length. [ 486.040666][T10418] team0: Device bridge0 is already an upper device of the team interface [ 486.496326][T10425] netlink: 'syz.0.1800': attribute type 2 has an invalid length. [ 486.520272][T10425] netlink: 'syz.0.1800': attribute type 8 has an invalid length. [ 486.547277][T10425] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1800'. [ 486.837216][T10434] netlink: 'syz.4.1804': attribute type 10 has an invalid length. [ 486.903205][T10442] netlink: 'syz.3.1805': attribute type 29 has an invalid length. [ 486.911533][T10442] netlink: 'syz.3.1805': attribute type 29 has an invalid length. [ 487.066548][T10442] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1805'. [ 488.342280][ T4275] Bluetooth: hci4: command 0x0406 tx timeout [ 488.652721][T10479] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1819'. [ 490.175685][T10510] validate_nla: 2 callbacks suppressed [ 490.175723][T10510] netlink: 'syz.4.1829': attribute type 29 has an invalid length. [ 490.226894][T10510] netlink: 'syz.4.1829': attribute type 29 has an invalid length. [ 490.279479][T10512] netlink: 'syz.4.1829': attribute type 29 has an invalid length. [ 490.665852][T10524] netlink: 'syz.2.1832': attribute type 10 has an invalid length. [ 491.622715][T10524] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.649421][T10524] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.762815][T10524] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.770312][T10524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 491.779028][T10524] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.786237][T10524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 491.810897][T10524] team0: Port device bridge0 added [ 491.817628][T10523] netlink: 'syz.3.1833': attribute type 2 has an invalid length. [ 491.827168][T10523] netlink: 'syz.3.1833': attribute type 8 has an invalid length. [ 491.843031][T10523] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1833'. [ 492.223048][T10547] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1839'. [ 493.396964][T10577] net_ratelimit: 7099 callbacks suppressed [ 493.396986][T10577] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 493.401535][T10575] netlink: 'syz.3.1851': attribute type 10 has an invalid length. [ 494.187574][T10575] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.362912][T10575] team0: Device bridge0 is already an upper device of the team interface [ 494.734877][T10588] netlink: 'syz.3.1856': attribute type 2 has an invalid length. [ 494.777320][T10588] device 0 entered promiscuous mode [ 494.864492][T10595] FAULT_INJECTION: forcing a failure. [ 494.864492][T10595] name failslab, interval 1, probability 0, space 0, times 0 [ 494.929896][T10595] CPU: 0 PID: 10595 Comm: syz.4.1859 Not tainted syzkaller #0 [ 494.937452][T10595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 494.947556][T10595] Call Trace: [ 494.950866][T10595] [ 494.953833][T10595] dump_stack_lvl+0x188/0x24e [ 494.958558][T10595] ? show_regs_print_info+0x12/0x12 [ 494.963892][T10595] ? load_image+0x410/0x410 [ 494.968466][T10595] ? __might_sleep+0xd0/0xd0 [ 494.973131][T10595] ? __lock_acquire+0x7c40/0x7c40 [ 494.978634][T10595] should_fail_ex+0x390/0x4c0 [ 494.983360][T10595] should_failslab+0x5/0x20 [ 494.987903][T10595] slab_pre_alloc_hook+0x59/0x300 [ 494.992978][T10595] ? sk_prot_alloc+0xe7/0x210 [ 494.997709][T10595] __kmem_cache_alloc_node+0x4f/0x270 [ 495.003223][T10595] ? sk_prot_alloc+0xe7/0x210 [ 495.007938][T10595] __kmalloc+0xa3/0x240 [ 495.012142][T10595] sk_prot_alloc+0xe7/0x210 [ 495.016689][T10595] ? sk_alloc+0x20/0x330 [ 495.020978][T10595] sk_alloc+0x36/0x330 [ 495.025098][T10595] ? bpf_ctx_init+0x154/0x190 [ 495.029839][T10595] bpf_prog_test_run_skb+0x36d/0x18e0 [ 495.035261][T10595] ? __fget_files+0x28/0x460 [ 495.039903][T10595] ? __fget_files+0x3fc/0x460 [ 495.044644][T10595] ? cpu_online+0xa0/0xa0 [ 495.049024][T10595] bpf_prog_test_run+0x31c/0x390 [ 495.054100][T10595] __sys_bpf+0x62b/0x780 [ 495.058396][T10595] ? bpf_link_show_fdinfo+0x380/0x380 [ 495.063838][T10595] ? lock_chain_count+0x20/0x20 [ 495.068748][T10595] __x64_sys_bpf+0x78/0x90 [ 495.073221][T10595] do_syscall_64+0x4c/0xa0 [ 495.077689][T10595] ? clear_bhb_loop+0x60/0xb0 [ 495.082407][T10595] ? clear_bhb_loop+0x60/0xb0 [ 495.087117][T10595] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 495.093131][T10595] RIP: 0033:0x7fb2ff99e0d9 [ 495.097571][T10595] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 495.117248][T10595] RSP: 002b:00007fb300849028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 495.125699][T10595] RAX: ffffffffffffffda RBX: 00007fb2ffc25fa0 RCX: 00007fb2ff99e0d9 [ 495.133703][T10595] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 000000000000000a [ 495.141694][T10595] RBP: 00007fb300849090 R08: 0000000000000000 R09: 0000000000000000 [ 495.149688][T10595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 495.157679][T10595] R13: 00007fb2ffc26038 R14: 00007fb2ffc25fa0 R15: 00007ffc88766da8 [ 495.165690][T10595] [ 495.220877][T10603] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.1862'. [ 495.837914][T10616] netlink: 'syz.4.1867': attribute type 10 has an invalid length. [ 496.151690][T10616] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.161997][T10616] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.380516][T10616] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.394575][T10616] bridge0: port 2(bridge_slave_1) entered forwarding state [ 496.410258][T10616] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.419526][T10616] bridge0: port 1(bridge_slave_0) entered forwarding state [ 496.631880][T10616] team0: Port device bridge0 added [ 496.744316][T10621] netlink: 'syz.1.1868': attribute type 4 has an invalid length. [ 496.752639][T10621] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1868'. [ 498.305817][T10654] netlink: 'syz.1.1877': attribute type 10 has an invalid length. [ 498.319519][T10654] device wg1 entered promiscuous mode [ 498.325660][T10654] team0: Device wg1 is of different type [ 499.507088][T10671] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1882'. [ 499.619069][T10666] netlink: 'syz.1.1881': attribute type 10 has an invalid length. [ 501.267881][T10688] netlink: 'syz.2.1888': attribute type 9 has an invalid length. [ 501.275759][T10688] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.1888'. [ 501.624964][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.631476][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.723360][T10700] netlink: 'syz.3.1892': attribute type 10 has an invalid length. [ 502.742513][T10700] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1892'. [ 502.776059][T10700] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 503.271486][T10709] netlink: 'syz.1.1896': attribute type 10 has an invalid length. [ 503.888045][T10731] netlink: 'syz.4.1904': attribute type 10 has an invalid length. [ 504.310793][T10738] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1906'. [ 504.746231][T10740] can: request_module (can-proto-0) failed. [ 505.372401][T10756] netlink: 'syz.4.1912': attribute type 10 has an invalid length. [ 505.728377][T10768] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1917'. [ 505.750509][T10768] device hsr_slave_0 left promiscuous mode [ 505.760652][T10768] device hsr_slave_1 left promiscuous mode [ 507.266588][T10798] netlink: 'syz.0.1934': attribute type 10 has an invalid length. [ 507.516897][T10810] netlink: 'syz.1.1929': attribute type 1 has an invalid length. [ 507.549756][T10810] netlink: 'syz.1.1929': attribute type 3 has an invalid length. [ 507.583051][T10810] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1929'. [ 507.970077][T10827] netlink: 'syz.4.1936': attribute type 11 has an invalid length. [ 508.009068][T10827] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1936'. [ 508.080197][T10826] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 511.701066][T10862] netlink: 'syz.1.1943': attribute type 10 has an invalid length. [ 511.945374][ T6338] tipc: Subscription rejected, illegal request [ 512.261434][T10878] netlink: 'syz.4.1951': attribute type 2 has an invalid length. [ 512.317832][T10878] device 0 entered promiscuous mode [ 512.326400][T10880] netlink: 'syz.4.1951': attribute type 39 has an invalid length. [ 512.763303][T10891] netlink: 'syz.2.1955': attribute type 21 has an invalid length. [ 512.785418][T10891] netlink: 'syz.2.1955': attribute type 6 has an invalid length. [ 512.810472][T10891] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1955'. [ 514.578320][T10912] netlink: 'syz.1.1962': attribute type 10 has an invalid length. [ 515.956988][T10961] FAULT_INJECTION: forcing a failure. [ 515.956988][T10961] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 515.973138][T10961] CPU: 1 PID: 10961 Comm: syz.1.1976 Not tainted syzkaller #0 [ 515.980648][T10961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 515.990733][T10961] Call Trace: [ 515.994039][T10961] [ 515.996996][T10961] dump_stack_lvl+0x188/0x24e [ 516.001716][T10961] ? show_regs_print_info+0x12/0x12 [ 516.006955][T10961] ? load_image+0x410/0x410 [ 516.011494][T10961] ? __lock_acquire+0x7c40/0x7c40 [ 516.016556][T10961] ? __kasan_kmalloc_large+0x8b/0xd0 [ 516.021898][T10961] should_fail_ex+0x390/0x4c0 [ 516.026712][T10961] _copy_from_user+0x2c/0x170 [ 516.031426][T10961] generic_map_delete_batch+0x2c1/0x6f0 [ 516.037018][T10961] ? bpf_map_inc_not_zero+0x100/0x100 [ 516.042429][T10961] ? __fdget+0x17c/0x200 [ 516.046706][T10961] ? bpf_map_inc_not_zero+0x100/0x100 [ 516.052107][T10961] bpf_map_do_batch+0x475/0x5f0 [ 516.056985][T10961] ? bpf_lsm_xfrm_state_delete_security+0x10/0x10 [ 516.063503][T10961] __sys_bpf+0x6f7/0x780 [ 516.067781][T10961] ? bpf_link_show_fdinfo+0x380/0x380 [ 516.073198][T10961] ? lock_chain_count+0x20/0x20 [ 516.078100][T10961] __x64_sys_bpf+0x78/0x90 [ 516.082560][T10961] do_syscall_64+0x4c/0xa0 [ 516.087017][T10961] ? clear_bhb_loop+0x60/0xb0 [ 516.092072][T10961] ? clear_bhb_loop+0x60/0xb0 [ 516.096787][T10961] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 516.102709][T10961] RIP: 0033:0x7f367299e0d9 [ 516.107153][T10961] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 516.126799][T10961] RSP: 002b:00007f36738a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 516.135345][T10961] RAX: ffffffffffffffda RBX: 00007f3672c26090 RCX: 00007f367299e0d9 [ 516.143369][T10961] RDX: 0000000000000038 RSI: 0000200000000080 RDI: 000000000000001b [ 516.151473][T10961] RBP: 00007f36738a4090 R08: 0000000000000000 R09: 0000000000000000 [ 516.159480][T10961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 516.167493][T10961] R13: 00007f3672c26128 R14: 00007f3672c26090 R15: 00007fffca2de9c8 [ 516.175549][T10961] [ 518.784901][T10981] netlink: 'syz.2.1981': attribute type 10 has an invalid length. [ 523.216851][T11025] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 523.224603][T11025] IPv6: NLM_F_CREATE should be set when creating new route [ 523.231983][T11025] IPv6: NLM_F_CREATE should be set when creating new route [ 523.239321][T11025] IPv6: NLM_F_CREATE should be set when creating new route [ 523.469733][T11034] device veth0_macvtap left promiscuous mode [ 523.669370][T11033] netlink: 'syz.4.2000': attribute type 10 has an invalid length. [ 527.256534][T11085] netlink: 'syz.3.2015': attribute type 2 has an invalid length. [ 527.352023][T11086] netlink: 'syz.4.2016': attribute type 29 has an invalid length. [ 527.402498][T11086] netlink: 'syz.4.2016': attribute type 29 has an invalid length. [ 527.604028][T11086] netlink: 'syz.4.2016': attribute type 2 has an invalid length. [ 527.622168][T11086] netlink: 'syz.4.2016': attribute type 8 has an invalid length. [ 527.630204][T11086] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2016'. [ 527.641120][T11086] netlink: 'syz.4.2016': attribute type 2 has an invalid length. [ 527.652105][T11086] netlink: 'syz.4.2016': attribute type 8 has an invalid length. [ 527.667236][T11086] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2016'. [ 528.387849][T11098] netlink: 'syz.4.2019': attribute type 10 has an invalid length. [ 531.471782][T11110] netlink: 'syz.3.2024': attribute type 2 has an invalid length. [ 531.480641][T11110] netlink: 'syz.3.2024': attribute type 8 has an invalid length. [ 531.498275][T11110] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2024'. [ 532.585754][T11127] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 532.593116][T11127] IPv6: NLM_F_CREATE should be set when creating new route [ 532.600382][T11127] IPv6: NLM_F_CREATE should be set when creating new route [ 532.607710][T11127] IPv6: NLM_F_CREATE should be set when creating new route [ 536.991118][T11161] netlink: 'syz.3.2041': attribute type 10 has an invalid length. [ 537.629748][T11174] device syzkaller0 entered promiscuous mode [ 541.267282][T11205] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2051'. [ 541.286218][T11209] netlink: 'syz.1.2053': attribute type 10 has an invalid length. [ 541.294425][T11209] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2053'. [ 541.461265][T11220] netlink: 194236 bytes leftover after parsing attributes in process `syz.4.2056'. [ 541.512364][T11220] netlink: zone id is out of range [ 541.517811][T11220] netlink: zone id is out of range [ 541.524746][T11220] netlink: zone id is out of range [ 541.531110][T11220] netlink: zone id is out of range [ 541.537986][T11220] netlink: get zone limit has 8 unknown bytes [ 541.579367][T11224] netlink: 'syz.1.2058': attribute type 10 has an invalid length. [ 541.666048][T11229] device syzkaller0 entered promiscuous mode [ 546.123995][T11267] netlink: 'syz.3.2068': attribute type 10 has an invalid length. [ 546.186306][T11267] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2068'. [ 546.269292][T11270] netlink: 'syz.4.2070': attribute type 10 has an invalid length. [ 546.333613][T11270] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2070'. [ 546.365627][T11272] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.2071'. [ 546.504249][T11270] netlink: 'syz.4.2070': attribute type 10 has an invalid length. [ 546.523344][T11270] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2070'. [ 546.552057][T11269] netlink: 'syz.4.2070': attribute type 10 has an invalid length. [ 546.583105][T11269] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2070'. [ 546.737180][T11280] netlink: 'syz.3.2073': attribute type 10 has an invalid length. [ 547.553822][T11300] device syzkaller0 entered promiscuous mode [ 548.726100][T11322] netlink: 'syz.1.2087': attribute type 3 has an invalid length. [ 548.735020][T11322] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2087'. [ 549.587122][T11305] netlink: 3529 bytes leftover after parsing attributes in process `syz.3.2082'. [ 549.597053][T11305] netlink: 52477 bytes leftover after parsing attributes in process `syz.3.2082'. [ 549.607635][T11305] netlink: 71676 bytes leftover after parsing attributes in process `syz.3.2082'. [ 549.623507][T11315] netlink: 'syz.2.2084': attribute type 10 has an invalid length. [ 549.633211][T11315] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2084'. [ 549.642882][T11315] bridge0: port 3(team0) entered blocking state [ 549.649759][T11315] bridge0: port 3(team0) entered disabled state [ 549.683094][T11315] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 549.809748][T11325] netlink: 'syz.0.2088': attribute type 10 has an invalid length. [ 552.088222][T11354] device syzkaller0 entered promiscuous mode [ 552.101151][T11367] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2102'. [ 552.115997][T11367] bond0: (slave bond_slave_0): Releasing backup interface [ 552.130683][T11367] device bond_slave_0 left promiscuous mode [ 552.172464][T11367] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 552.221262][T11360] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2101'. [ 552.241608][T11372] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2103'. [ 557.542403][T11377] netlink: 'syz.1.2104': attribute type 3 has an invalid length. [ 557.550448][T11377] netlink: 114680 bytes leftover after parsing attributes in process `syz.1.2104'. [ 557.591546][T11407] platform regulatory.0: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 557.618416][T11407] platform regulatory.0: Direct firmware load for regulatory.db.p7s failed with error -4 [ 557.646819][T11407] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db.p7s [ 557.907968][T11421] netlink: 'syz.1.2118': attribute type 29 has an invalid length. [ 557.934125][T11421] netlink: 'syz.1.2118': attribute type 29 has an invalid length. [ 558.025312][T11421] netlink: 126324 bytes leftover after parsing attributes in process `syz.1.2118'. [ 558.081553][T11426] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2121'. [ 559.010507][T11432] netlink: 92432 bytes leftover after parsing attributes in process `syz.4.2122'. [ 559.054883][T11432] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 559.063383][T11432] CPU: 1 PID: 11432 Comm: syz.4.2122 Not tainted syzkaller #0 [ 559.070905][T11432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 559.081011][T11432] Call Trace: [ 559.084331][T11432] [ 559.087300][T11432] dump_stack_lvl+0x188/0x24e [ 559.092043][T11432] ? show_regs_print_info+0x12/0x12 [ 559.097293][T11432] ? load_image+0x410/0x410 [ 559.101880][T11432] sysfs_warn_dup+0x8a/0xa0 [ 559.106438][T11432] sysfs_do_create_link_sd+0xc0/0x110 [ 559.111932][T11432] device_add+0x83b/0x1050 [ 559.116637][T11432] wiphy_register+0x1d8b/0x2aa0 [ 559.121654][T11432] ? cfg80211_event_work+0x40/0x40 [ 559.126825][T11432] ? minstrel_ht_alloc+0x894/0xa20 [ 559.131970][T11432] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 559.138194][T11432] ieee80211_register_hw+0x2d48/0x39f0 [ 559.143739][T11432] ? ieee80211_register_hw+0xee1/0x39f0 [ 559.149307][T11432] ? ieee80211_register_hw+0xee1/0x39f0 [ 559.154876][T11432] ? ieee80211_tasklet_handler+0x20/0x20 [ 559.160527][T11432] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 559.166439][T11432] ? __debug_object_init+0xed/0x440 [ 559.171719][T11432] ? memset+0x1e/0x40 [ 559.175749][T11432] ? __hrtimer_init+0x189/0x270 [ 559.180647][T11432] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 559.186435][T11432] ? memcpy+0x3c/0x60 [ 559.190430][T11432] hwsim_new_radio_nl+0xab7/0xc90 [ 559.195483][T11432] genl_family_rcv_msg_doit+0x22f/0x350 [ 559.201042][T11432] ? end_current_label_crit_section+0x170/0x170 [ 559.207302][T11432] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 559.213215][T11432] ? bpf_lsm_capable+0x5/0x10 [ 559.217949][T11432] ? security_capable+0x85/0xb0 [ 559.222853][T11432] genl_rcv_msg+0x601/0x790 [ 559.227383][T11432] ? genl_bind+0x360/0x360 [ 559.231895][T11432] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 559.238262][T11432] netlink_rcv_skb+0x1ef/0x440 [ 559.243049][T11432] ? genl_bind+0x360/0x360 [ 559.247476][T11432] ? netlink_ack+0x1160/0x1160 [ 559.252299][T11432] ? down_read+0x1a8/0x2d0 [ 559.256728][T11432] genl_rcv+0x24/0x40 [ 559.260725][T11432] netlink_unicast+0x7ad/0x920 [ 559.265528][T11432] netlink_sendmsg+0x8ad/0xbd0 [ 559.270346][T11432] ? netlink_getsockopt+0x550/0x550 [ 559.275592][T11432] ? apparmor_socket_sendmsg+0x8a/0x330 [ 559.281259][T11432] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 559.286569][T11432] ? security_socket_sendmsg+0x7c/0xa0 [ 559.292133][T11432] ? netlink_getsockopt+0x550/0x550 [ 559.297354][T11432] ____sys_sendmsg+0x5ed/0x9a0 [ 559.302146][T11432] ? __sys_sendmsg_sock+0x30/0x30 [ 559.307183][T11432] ? __import_iovec+0x306/0x510 [ 559.312145][T11432] ? import_iovec+0x6f/0xa0 [ 559.316672][T11432] ___sys_sendmsg+0x2a2/0x360 [ 559.321460][T11432] ? __sys_sendmsg+0x2a0/0x2a0 [ 559.326302][T11432] __se_sys_sendmsg+0x1c3/0x2b0 [ 559.331196][T11432] ? __x64_sys_sendmsg+0x80/0x80 [ 559.336167][T11432] ? lockdep_hardirqs_on+0x94/0x140 [ 559.341378][T11432] do_syscall_64+0x4c/0xa0 [ 559.345832][T11432] ? clear_bhb_loop+0x60/0xb0 [ 559.350526][T11432] ? clear_bhb_loop+0x60/0xb0 [ 559.355221][T11432] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 559.361128][T11432] RIP: 0033:0x7fb2ff99e0d9 [ 559.365581][T11432] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 559.385203][T11432] RSP: 002b:00007fb300849028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 559.393739][T11432] RAX: ffffffffffffffda RBX: 00007fb2ffc25fa0 RCX: 00007fb2ff99e0d9 [ 559.401720][T11432] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000c [ 559.409701][T11432] RBP: 00007fb2ffa35024 R08: 0000000000000000 R09: 0000000000000000 [ 559.417679][T11432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 559.425665][T11432] R13: 00007fb2ffc26038 R14: 00007fb2ffc25fa0 R15: 00007ffc88766da8 [ 559.433668][T11432] [ 559.468600][T11445] netlink: 'syz.2.2126': attribute type 21 has an invalid length. [ 562.728555][T11456] netlink: 'syz.2.2130': attribute type 21 has an invalid length. [ 562.757593][T11456] netlink: 'syz.2.2130': attribute type 7 has an invalid length. [ 562.766186][T11457] netlink: 'syz.3.2129': attribute type 3 has an invalid length. [ 562.782995][T11457] netlink: 114680 bytes leftover after parsing attributes in process `syz.3.2129'. [ 563.064417][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.071069][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.474910][T11488] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.2139'. [ 563.559150][T11488] device syzkaller0 entered promiscuous mode [ 563.567042][T11490] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2138'. [ 566.509499][T11499] netlink: 'syz.0.2140': attribute type 10 has an invalid length. [ 566.518042][T11499] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.525336][T11499] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.957111][T11527] netlink: 'syz.0.2148': attribute type 3 has an invalid length. [ 566.967180][T11527] netlink: 114680 bytes leftover after parsing attributes in process `syz.0.2148'. [ 567.055258][T11529] netlink: 47283 bytes leftover after parsing attributes in process `syz.2.2162'. [ 568.151000][T11542] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2154'. [ 568.322983][T11553] netlink: 64535 bytes leftover after parsing attributes in process `syz.4.2158'. [ 569.593662][T11579] FAULT_INJECTION: forcing a failure. [ 569.593662][T11579] name failslab, interval 1, probability 0, space 0, times 0 [ 569.654678][T11579] CPU: 0 PID: 11579 Comm: syz.3.2166 Not tainted syzkaller #0 [ 569.662239][T11579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 569.672342][T11579] Call Trace: [ 569.675649][T11579] [ 569.678610][T11579] dump_stack_lvl+0x188/0x24e [ 569.683332][T11579] ? show_regs_print_info+0x12/0x12 [ 569.688552][T11579] ? load_image+0x410/0x410 [ 569.693073][T11579] ? __might_sleep+0xd0/0xd0 [ 569.697670][T11579] ? __lock_acquire+0x7c40/0x7c40 [ 569.702731][T11579] should_fail_ex+0x390/0x4c0 [ 569.707429][T11579] should_failslab+0x5/0x20 [ 569.711946][T11579] slab_pre_alloc_hook+0x59/0x300 [ 569.716983][T11579] ? tomoyo_encode+0x28a/0x550 [ 569.721770][T11579] __kmem_cache_alloc_node+0x4f/0x270 [ 569.727160][T11579] ? tomoyo_encode+0x28a/0x550 [ 569.731940][T11579] __kmalloc+0xa3/0x240 [ 569.736113][T11579] tomoyo_encode+0x28a/0x550 [ 569.740727][T11579] tomoyo_realpath_from_path+0x578/0x5c0 [ 569.746383][T11579] ? tomoyo_domain+0xd2/0x120 [ 569.751076][T11579] ? tomoyo_path_number_perm+0x205/0x650 [ 569.756737][T11579] tomoyo_path_number_perm+0x22f/0x650 [ 569.762209][T11579] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 569.767679][T11579] ? common_file_perm+0x171/0x1c0 [ 569.772756][T11579] ? __fget_files+0x28/0x460 [ 569.777371][T11579] security_file_ioctl+0x6c/0xa0 [ 569.782324][T11579] __se_sys_ioctl+0x48/0x170 [ 569.787002][T11579] do_syscall_64+0x4c/0xa0 [ 569.791429][T11579] ? clear_bhb_loop+0x60/0xb0 [ 569.796118][T11579] ? clear_bhb_loop+0x60/0xb0 [ 569.800823][T11579] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 569.806738][T11579] RIP: 0033:0x7fab4839e0d9 [ 569.811163][T11579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 569.830781][T11579] RSP: 002b:00007fab491c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 569.839206][T11579] RAX: ffffffffffffffda RBX: 00007fab48625fa0 RCX: 00007fab4839e0d9 [ 569.847187][T11579] RDX: 0000200000000000 RSI: 0000000000008b14 RDI: 000000000000000c [ 569.855168][T11579] RBP: 00007fab491c7090 R08: 0000000000000000 R09: 0000000000000000 [ 569.863148][T11579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 569.871126][T11579] R13: 00007fab48626038 R14: 00007fab48625fa0 R15: 00007ffca1477838 [ 569.879118][T11579] [ 569.982149][T11579] ERROR: Out of memory at tomoyo_realpath_from_path. [ 570.700486][T11602] netlink: 'syz.1.2180': attribute type 3 has an invalid length. [ 570.734823][T11602] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2180'. [ 570.831804][T11609] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2172'. [ 571.171596][T11617] netlink: 15179 bytes leftover after parsing attributes in process `syz.1.2174'. [ 571.452381][T11623] netlink: 126612 bytes leftover after parsing attributes in process `syz.2.2176'. [ 571.504459][T11623] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2176'. [ 571.601067][T11622] device syzkaller0 entered promiscuous mode [ 571.704652][T11630] netlink: 'syz.4.2178': attribute type 2 has an invalid length. [ 571.738246][T11630] netlink: 'syz.4.2178': attribute type 8 has an invalid length. [ 571.768119][T11630] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2178'. [ 573.963217][T11646] netlink: 'syz.4.2186': attribute type 10 has an invalid length. [ 573.971515][T11646] team0: Device hsr_slave_0 failed to register rx_handler [ 573.992134][T11655] netlink: 'syz.3.2188': attribute type 10 has an invalid length. [ 575.188132][T11668] netlink: 'syz.2.2191': attribute type 10 has an invalid length. [ 575.800180][T11685] netlink: 'syz.0.2200': attribute type 10 has an invalid length. [ 575.853532][T11685] team0: Port device hsr_slave_0 added [ 576.243826][T11694] netlink: 5427 bytes leftover after parsing attributes in process `syz.1.2202'. [ 576.254631][T11694] netlink: 52477 bytes leftover after parsing attributes in process `syz.1.2202'. [ 576.264919][T11694] netlink: 71676 bytes leftover after parsing attributes in process `syz.1.2202'. [ 576.753120][T11714] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2211'. [ 576.868686][T11710] netlink: 'syz.0.2209': attribute type 10 has an invalid length. [ 577.732189][T11731] syz.4.2217[11731] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 577.732302][T11731] syz.4.2217[11731] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 579.415774][T11759] netlink: 'syz.0.2226': attribute type 10 has an invalid length. [ 580.093697][T11778] FAULT_INJECTION: forcing a failure. [ 580.093697][T11778] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 580.109633][T11778] CPU: 1 PID: 11778 Comm: syz.0.2234 Not tainted syzkaller #0 [ 580.117153][T11778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 580.127252][T11778] Call Trace: [ 580.130571][T11778] [ 580.133534][T11778] dump_stack_lvl+0x188/0x24e [ 580.134216][T11774] netlink: 'syz.4.2233': attribute type 3 has an invalid length. [ 580.138245][T11778] ? show_regs_print_info+0x12/0x12 [ 580.138277][T11778] ? load_image+0x410/0x410 [ 580.138301][T11778] ? __lock_acquire+0x7c40/0x7c40 [ 580.138326][T11778] ? lockdep_hardirqs_on+0x94/0x140 [ 580.138352][T11778] should_fail_ex+0x390/0x4c0 [ 580.138382][T11778] _copy_from_user+0x2c/0x170 [ 580.138405][T11778] ___sys_sendmsg+0x1c3/0x360 [ 580.138438][T11778] ? __sys_sendmsg+0x2a0/0x2a0 [ 580.138482][T11778] ? __lock_acquire+0x7c40/0x7c40 [ 580.138532][T11778] __se_sys_sendmsg+0x1c3/0x2b0 [ 580.138557][T11778] ? ct_nmi_exit+0x145/0x1c0 [ 580.138578][T11778] ? __x64_sys_sendmsg+0x80/0x80 [ 580.138619][T11778] ? lockdep_hardirqs_on+0x94/0x140 [ 580.138642][T11778] do_syscall_64+0x4c/0xa0 [ 580.138664][T11778] ? clear_bhb_loop+0x60/0xb0 [ 580.138687][T11778] ? clear_bhb_loop+0x60/0xb0 [ 580.138712][T11778] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 580.138734][T11778] RIP: 0033:0x7f4e7fd9e0d9 [ 580.138754][T11778] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 580.138771][T11778] RSP: 002b:00007f4e80c26028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 580.138795][T11778] RAX: ffffffffffffffda RBX: 00007f4e80025fa0 RCX: 00007f4e7fd9e0d9 [ 580.138809][T11778] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 580.138822][T11778] RBP: 00007f4e80c26090 R08: 0000000000000000 R09: 0000000000000000 [ 580.138834][T11778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 580.138847][T11778] R13: 00007f4e80026038 R14: 00007f4e80025fa0 R15: 00007ffdad049138 [ 580.138876][T11778] [ 580.159579][T11783] netlink: 'syz.2.2235': attribute type 21 has an invalid length. [ 580.486409][T11774] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2233'. [ 581.304512][T11806] netlink: 'syz.0.2241': attribute type 29 has an invalid length. [ 581.433481][T11806] netlink: 'syz.0.2241': attribute type 29 has an invalid length. [ 581.453060][T11809] netlink: 'syz.0.2241': attribute type 29 has an invalid length. [ 581.461289][T11813] netlink: 'syz.0.2241': attribute type 29 has an invalid length. [ 581.487631][T11803] netlink: 'syz.0.2241': attribute type 29 has an invalid length. [ 581.628571][T11816] netlink: 'syz.2.2244': attribute type 10 has an invalid length. [ 581.879233][T11828] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2248'. [ 582.190395][T11832] netlink: 'syz.1.2259': attribute type 10 has an invalid length. [ 582.349037][T11843] netlink: 'syz.4.2252': attribute type 21 has an invalid length. [ 583.123203][T11851] __sock_release: fasync list not empty! [ 583.268982][T11851] netlink: 'syz.1.2254': attribute type 3 has an invalid length. [ 583.312308][T11851] netlink: 114680 bytes leftover after parsing attributes in process `syz.1.2254'. [ 583.827090][T11877] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2262'. [ 584.025473][T11877] device bond0 left promiscuous mode [ 584.034848][T11877] device bond_slave_0 left promiscuous mode [ 584.041194][T11877] device bond_slave_1 left promiscuous mode [ 584.047849][T11877] device batadv_slave_0 left promiscuous mode [ 584.054969][T11877] device bridge_slave_1 left promiscuous mode [ 584.070358][T11877] team0: Port device bond0 removed [ 584.080138][T11877] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 584.110006][T11877] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 584.130889][T11877] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 584.145407][T11877] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 584.176380][T11877] bond0 (unregistering): Released all slaves [ 584.186905][T11879] netlink: 'syz.2.2263': attribute type 21 has an invalid length. [ 584.477151][T11892] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2265'. [ 584.567291][T11892] netlink: 15007 bytes leftover after parsing attributes in process `syz.1.2265'. [ 586.417778][T11928] validate_nla: 3 callbacks suppressed [ 586.417801][T11928] netlink: 'syz.3.2277': attribute type 10 has an invalid length. [ 588.091016][T11967] netlink: 'syz.2.2289': attribute type 21 has an invalid length. [ 588.519382][T11980] netlink: 'syz.1.2293': attribute type 10 has an invalid length. [ 589.560358][T11997] netlink: 'syz.4.2297': attribute type 1 has an invalid length. [ 589.636911][T11997] netlink: 116376 bytes leftover after parsing attributes in process `syz.4.2297'. [ 589.864455][T11992] netlink: 'syz.3.2295': attribute type 3 has an invalid length. [ 589.884777][T11992] netlink: 114680 bytes leftover after parsing attributes in process `syz.3.2295'. [ 591.357377][T12040] netlink: 'syz.0.2306': attribute type 10 has an invalid length. [ 592.054407][T12055] netlink: 'syz.4.2312': attribute type 21 has an invalid length. [ 594.443250][T12099] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2325'. [ 594.469273][T12101] netlink: 'syz.2.2327': attribute type 2 has an invalid length. [ 594.505194][T12105] netlink: 'syz.3.2328': attribute type 10 has an invalid length. [ 594.552635][T12101] device 0 entered promiscuous mode [ 594.880021][T12116] netlink: 'syz.1.2330': attribute type 21 has an invalid length. [ 595.757355][T12132] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2337'. [ 595.829989][T12132] netlink: 'syz.2.2337': attribute type 12 has an invalid length. [ 595.862155][T12132] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2337'. [ 595.963081][T12132] netlink: 'syz.2.2337': attribute type 3 has an invalid length. [ 596.023701][T12132] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2337'. [ 596.744939][T12156] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2345'. [ 597.651125][T12172] netlink: 'syz.2.2351': attribute type 21 has an invalid length. [ 598.419433][T12180] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.2354'. [ 598.878759][T12174] netlink: 'syz.1.2352': attribute type 21 has an invalid length. [ 598.887170][T12174] netlink: 'syz.1.2352': attribute type 6 has an invalid length. [ 598.895480][T12174] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2352'. [ 599.330594][T12199] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2357'. [ 599.948854][ T4275] Bluetooth: hci0: unexpected event 0x08 length: 151 > 4 [ 600.981145][T12233] netlink: 'syz.1.2367': attribute type 21 has an invalid length. [ 601.163877][T12240] FAULT_INJECTION: forcing a failure. [ 601.163877][T12240] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 601.262076][T12240] CPU: 1 PID: 12240 Comm: syz.3.2370 Not tainted syzkaller #0 [ 601.269621][T12240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 601.279768][T12240] Call Trace: [ 601.283076][T12240] [ 601.286050][T12240] dump_stack_lvl+0x188/0x24e [ 601.290771][T12240] ? show_regs_print_info+0x12/0x12 [ 601.296001][T12240] ? load_image+0x410/0x410 [ 601.300537][T12240] ? __lock_acquire+0x7c40/0x7c40 [ 601.305602][T12240] ? raw_spin_rq_lock_nested+0x25/0x130 [ 601.311257][T12240] ? __might_sleep+0xd0/0xd0 [ 601.315889][T12240] should_fail_ex+0x390/0x4c0 [ 601.320611][T12240] _copy_from_user+0x2c/0x170 [ 601.325324][T12240] generic_map_delete_batch+0x2c1/0x6f0 [ 601.330917][T12240] ? bpf_map_inc_not_zero+0x100/0x100 [ 601.336334][T12240] ? __fdget+0x17c/0x200 [ 601.340624][T12240] ? bpf_map_inc_not_zero+0x100/0x100 [ 601.346039][T12240] bpf_map_do_batch+0x475/0x5f0 [ 601.350935][T12240] ? bpf_lsm_xfrm_state_delete_security+0x10/0x10 [ 601.357394][T12240] __sys_bpf+0x6f7/0x780 [ 601.361675][T12240] ? bpf_link_show_fdinfo+0x380/0x380 [ 601.367110][T12240] ? lock_chain_count+0x20/0x20 [ 601.372006][T12240] __x64_sys_bpf+0x78/0x90 [ 601.376466][T12240] do_syscall_64+0x4c/0xa0 [ 601.380921][T12240] ? clear_bhb_loop+0x60/0xb0 [ 601.385638][T12240] ? clear_bhb_loop+0x60/0xb0 [ 601.390357][T12240] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 601.396373][T12240] RIP: 0033:0x7fab4839e0d9 [ 601.401108][T12240] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 601.420847][T12240] RSP: 002b:00007fab491a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 601.429324][T12240] RAX: ffffffffffffffda RBX: 00007fab48626090 RCX: 00007fab4839e0d9 [ 601.437338][T12240] RDX: 0000000000000038 RSI: 0000200000000080 RDI: 000000000000001b [ 601.445367][T12240] RBP: 00007fab491a6090 R08: 0000000000000000 R09: 0000000000000000 [ 601.453379][T12240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 601.461390][T12240] R13: 00007fab48626128 R14: 00007fab48626090 R15: 00007ffca1477838 [ 601.469420][T12240] [ 601.506604][T12235] netlink: 'syz.2.2371': attribute type 10 has an invalid length. [ 601.902774][T12260] FAULT_INJECTION: forcing a failure. [ 601.902774][T12260] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 601.952164][T12260] CPU: 0 PID: 12260 Comm: syz.3.2375 Not tainted syzkaller #0 [ 601.959715][T12260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 601.969810][T12260] Call Trace: [ 601.973137][T12260] [ 601.976080][T12260] dump_stack_lvl+0x188/0x24e [ 601.980781][T12260] ? show_regs_print_info+0x12/0x12 [ 601.986000][T12260] ? load_image+0x410/0x410 [ 601.990516][T12260] ? __lock_acquire+0x7c40/0x7c40 [ 601.995559][T12260] should_fail_ex+0x390/0x4c0 [ 602.000251][T12260] _copy_from_user+0x2c/0x170 [ 602.004952][T12260] vmemdup_user+0xa8/0x1d0 [ 602.009390][T12260] map_get_next_key+0x21d/0x620 [ 602.014259][T12260] ? bpf_lsm_bpf+0x5/0x10 [ 602.018606][T12260] __sys_bpf+0x466/0x780 [ 602.022861][T12260] ? bpf_link_show_fdinfo+0x380/0x380 [ 602.028261][T12260] ? lock_chain_count+0x20/0x20 [ 602.033133][T12260] __x64_sys_bpf+0x78/0x90 [ 602.037562][T12260] do_syscall_64+0x4c/0xa0 [ 602.041991][T12260] ? clear_bhb_loop+0x60/0xb0 [ 602.046678][T12260] ? clear_bhb_loop+0x60/0xb0 [ 602.051365][T12260] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 602.057268][T12260] RIP: 0033:0x7fab4839e0d9 [ 602.061693][T12260] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 602.081307][T12260] RSP: 002b:00007fab491a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 602.089754][T12260] RAX: ffffffffffffffda RBX: 00007fab48626090 RCX: 00007fab4839e0d9 [ 602.097742][T12260] RDX: 0000000000000020 RSI: 0000200000000b80 RDI: 0000000000000004 [ 602.105730][T12260] RBP: 00007fab491a6090 R08: 0000000000000000 R09: 0000000000000000 [ 602.113706][T12260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 602.121687][T12260] R13: 00007fab48626128 R14: 00007fab48626090 R15: 00007ffca1477838 [ 602.129681][T12260] [ 603.203929][T12291] netlink: 'syz.4.2388': attribute type 21 has an invalid length. [ 604.000281][T12312] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2394'. [ 605.397980][T12340] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.2401'. [ 605.674773][T12345] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.2401'. [ 605.686691][T12339] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.2401'. [ 605.777913][T12340] sysfs: cannot create duplicate filename '/class/ieee80211/.! 5‚Á7>7H€' [ 605.789422][T12340] CPU: 1 PID: 12340 Comm: syz.4.2401 Not tainted syzkaller #0 [ 605.796969][T12340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 605.807082][T12340] Call Trace: [ 605.810412][T12340] [ 605.813396][T12340] dump_stack_lvl+0x188/0x24e [ 605.818166][T12340] ? show_regs_print_info+0x12/0x12 [ 605.823442][T12340] ? load_image+0x410/0x410 [ 605.828059][T12340] sysfs_warn_dup+0x8a/0xa0 [ 605.832632][T12340] sysfs_do_create_link_sd+0xc0/0x110 [ 605.838078][T12340] device_add+0x83b/0x1050 [ 605.842585][T12340] wiphy_register+0x1d8b/0x2aa0 [ 605.847582][T12340] ? cfg80211_event_work+0x40/0x40 [ 605.852767][T12340] ? minstrel_ht_alloc+0x894/0xa20 [ 605.857972][T12340] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 605.864106][T12340] ieee80211_register_hw+0x2d48/0x39f0 [ 605.869681][T12340] ? ieee80211_register_hw+0xee1/0x39f0 [ 605.875281][T12340] ? ieee80211_register_hw+0xee1/0x39f0 [ 605.880864][T12340] ? ieee80211_tasklet_handler+0x20/0x20 [ 605.886510][T12340] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 605.892446][T12340] ? __debug_object_init+0xed/0x440 [ 605.897737][T12340] ? memset+0x1e/0x40 [ 605.901789][T12340] ? __hrtimer_init+0x189/0x270 [ 605.906741][T12340] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 605.912578][T12340] ? memcpy+0x3c/0x60 [ 605.916645][T12340] hwsim_new_radio_nl+0xab7/0xc90 [ 605.921798][T12340] genl_family_rcv_msg_doit+0x22f/0x350 [ 605.927417][T12340] ? end_current_label_crit_section+0x170/0x170 [ 605.933738][T12340] ? __bpf_trace_bpf_trace_printk+0x20/0x20 [ 605.939797][T12340] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 605.945801][T12340] ? bpf_lsm_capable+0x5/0x10 [ 605.950554][T12340] ? security_capable+0x85/0xb0 [ 605.955509][T12340] genl_rcv_msg+0x601/0x790 [ 605.960116][T12340] ? genl_bind+0x360/0x360 [ 605.964584][T12340] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 605.971044][T12340] netlink_rcv_skb+0x1ef/0x440 [ 605.975905][T12340] ? genl_bind+0x360/0x360 [ 605.980419][T12340] ? netlink_ack+0x1160/0x1160 [ 605.985328][T12340] ? down_read+0x1a8/0x2d0 [ 605.989833][T12340] genl_rcv+0x24/0x40 [ 605.993889][T12340] netlink_unicast+0x7ad/0x920 [ 605.998765][T12340] netlink_sendmsg+0x8ad/0xbd0 [ 606.003635][T12340] ? netlink_getsockopt+0x550/0x550 [ 606.008912][T12340] ? apparmor_socket_sendmsg+0x8a/0x330 [ 606.014531][T12340] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 606.019870][T12340] ? security_socket_sendmsg+0x7c/0xa0 [ 606.025387][T12340] ? netlink_getsockopt+0x550/0x550 [ 606.030669][T12340] ____sys_sendmsg+0x5ed/0x9a0 [ 606.035548][T12340] ? __sys_sendmsg_sock+0x30/0x30 [ 606.040630][T12340] ? __import_iovec+0x306/0x510 [ 606.045597][T12340] ? import_iovec+0x6f/0xa0 [ 606.050186][T12340] ___sys_sendmsg+0x2a2/0x360 [ 606.054976][T12340] ? __sys_sendmsg+0x2a0/0x2a0 [ 606.059936][T12340] ? ktime_get+0x7b/0x270 [ 606.064450][T12340] __se_sys_sendmsg+0x1c3/0x2b0 [ 606.069395][T12340] ? __x64_sys_sendmsg+0x80/0x80 [ 606.074479][T12340] ? lockdep_hardirqs_on+0x94/0x140 [ 606.079755][T12340] do_syscall_64+0x4c/0xa0 [ 606.084238][T12340] ? clear_bhb_loop+0x60/0xb0 [ 606.088998][T12340] ? clear_bhb_loop+0x60/0xb0 [ 606.093759][T12340] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 606.099724][T12340] RIP: 0033:0x7fb2ff99e0d9 [ 606.104209][T12340] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 606.123893][T12340] RSP: 002b:00007fb300807028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 606.132379][T12340] RAX: ffffffffffffffda RBX: 00007fb2ffc26180 RCX: 00007fb2ff99e0d9 [ 606.140413][T12340] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 606.148444][T12340] RBP: 00007fb2ffa35024 R08: 0000000000000000 R09: 0000000000000000 [ 606.156481][T12340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 606.164511][T12340] R13: 00007fb2ffc26218 R14: 00007fb2ffc26180 R15: 00007ffc88766da8 [ 606.172601][T12340] [ 606.539780][T12358] device wlan1 entered promiscuous mode [ 606.892587][T12373] FAULT_INJECTION: forcing a failure. [ 606.892587][T12373] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 606.960969][T12373] CPU: 1 PID: 12373 Comm: syz.1.2411 Not tainted syzkaller #0 [ 606.968524][T12373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 606.978626][T12373] Call Trace: [ 606.981942][T12373] [ 606.984909][T12373] dump_stack_lvl+0x188/0x24e [ 606.989900][T12373] ? show_regs_print_info+0x12/0x12 [ 606.995147][T12373] ? load_image+0x410/0x410 [ 606.999695][T12373] ? __lock_acquire+0x7c40/0x7c40 [ 607.004772][T12373] ? read_lock_is_recursive+0x10/0x10 [ 607.010199][T12373] should_fail_ex+0x390/0x4c0 [ 607.014929][T12373] _copy_to_user+0x2c/0x130 [ 607.019487][T12373] bpf_prog_test_run_syscall+0x33b/0x4b0 [ 607.025168][T12373] ? sock_gen_cookie+0x60/0x60 [ 607.029985][T12373] ? sock_gen_cookie+0x60/0x60 [ 607.034797][T12373] bpf_prog_test_run+0x31c/0x390 [ 607.039783][T12373] __sys_bpf+0x62b/0x780 [ 607.044064][T12373] ? bpf_link_show_fdinfo+0x380/0x380 [ 607.049489][T12373] ? lock_chain_count+0x20/0x20 [ 607.054392][T12373] __x64_sys_bpf+0x78/0x90 [ 607.058850][T12373] do_syscall_64+0x4c/0xa0 [ 607.063307][T12373] ? clear_bhb_loop+0x60/0xb0 [ 607.068025][T12373] ? clear_bhb_loop+0x60/0xb0 [ 607.072750][T12373] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 607.078690][T12373] RIP: 0033:0x7f367299e0d9 [ 607.083182][T12373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 607.102974][T12373] RSP: 002b:00007f36738c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 607.111407][T12373] RAX: ffffffffffffffda RBX: 00007f3672c25fa0 RCX: 00007f367299e0d9 [ 607.119388][T12373] RDX: 0000000000000010 RSI: 0000200000000740 RDI: 000000000000000a [ 607.127460][T12373] RBP: 00007f36738c5090 R08: 0000000000000000 R09: 0000000000000000 [ 607.135441][T12373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 607.143422][T12373] R13: 00007f3672c26038 R14: 00007f3672c25fa0 R15: 00007fffca2de9c8 [ 607.151417][T12373] [ 607.424844][T12386] netlink: 'syz.0.2417': attribute type 29 has an invalid length. [ 607.436779][T12386] netlink: 'syz.0.2417': attribute type 29 has an invalid length. [ 607.477508][T12386] netlink: 'syz.0.2417': attribute type 2 has an invalid length. [ 607.494736][T12386] netlink: 'syz.0.2417': attribute type 8 has an invalid length. [ 607.531466][T12386] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2417'. [ 607.553440][T12387] netlink: 'syz.1.2416': attribute type 1 has an invalid length. [ 607.572230][T12387] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2416'. [ 608.207989][T12388] netlink: 'syz.0.2417': attribute type 2 has an invalid length. [ 608.217717][T12388] netlink: 'syz.0.2417': attribute type 8 has an invalid length. [ 608.226134][T12388] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2417'. [ 608.836949][T12419] netlink: 'syz.4.2426': attribute type 10 has an invalid length. [ 608.860821][T12419] team0: Device dummy0 is up. Set it down before adding it as a team port [ 609.647994][T12436] netlink: 'syz.4.2432': attribute type 2 has an invalid length. [ 609.670959][T12436] netlink: 'syz.4.2432': attribute type 4 has an invalid length. [ 609.680147][T12436] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2432'. [ 610.079199][T12450] netlink: 'syz.3.2439': attribute type 10 has an invalid length. [ 610.097880][T12450] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2439'. [ 610.328102][T12456] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2441'. [ 610.376068][T12456] netlink: 'syz.4.2441': attribute type 4 has an invalid length. [ 610.400018][T12455] netlink: 'syz.1.2440': attribute type 3 has an invalid length. [ 610.413329][T12456] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2441'. [ 610.429907][T12455] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2440'. [ 611.314221][T12482] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2449'. [ 611.815043][T12488] netlink: 'syz.3.2453': attribute type 2 has an invalid length. [ 611.832047][T12488] netlink: 198692 bytes leftover after parsing attributes in process `syz.3.2453'. [ 612.385724][T12495] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.2454'. [ 613.056968][ T4275] Bluetooth: hci4: ISO packet for unknown connection handle 300 [ 615.306328][T12557] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2473'. [ 616.101702][T12571] netlink: 'syz.1.2487': attribute type 21 has an invalid length. [ 617.342748][T12584] device lo entered promiscuous mode [ 617.414400][T12584] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 617.459270][T12585] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 620.080784][T12641] netlink: 'syz.4.2497': attribute type 21 has an invalid length. [ 621.488224][T12667] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2506'. [ 622.000898][T12675] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2509'. [ 623.483091][T12695] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2515'. [ 623.801766][T12695] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 623.878209][T12695] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 623.920539][T12695] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 623.937215][T12695] bond0 (unregistering): Released all slaves [ 624.047623][T12708] netlink: 'syz.1.2529': attribute type 21 has an invalid length. [ 624.062609][T12708] netlink: 'syz.1.2529': attribute type 7 has an invalid length. [ 624.089157][T12713] netlink: 'syz.3.2519': attribute type 21 has an invalid length. [ 624.550763][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.557354][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.641743][T12727] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2522'. [ 624.664602][T12727] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 624.699650][T12727] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 624.937169][T12737] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2525'. [ 624.954311][T12736] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2525'. [ 625.277678][T12746] tap1: tun_chr_ioctl cmd 35108 [ 626.243297][T12758] netlink: 'syz.1.2535': attribute type 10 has an invalid length. [ 626.537818][T12769] netlink: 'syz.3.2537': attribute type 21 has an invalid length. [ 627.473743][T12789] netlink: 'syz.4.2543': attribute type 10 has an invalid length. [ 628.293354][ T4275] Bluetooth: hci1: unexpected event 0x48 length: 15 > 3 [ 628.293390][ T4275] Bluetooth: hci1: Malformed Event: 0x48 [ 628.310205][T12806] netlink: 'syz.4.2548': attribute type 28 has an invalid length. [ 628.645240][T12822] netlink: 'syz.4.2554': attribute type 12 has an invalid length. [ 628.681457][T12822] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2554'. [ 628.708395][T12823] netlink: 'syz.4.2554': attribute type 12 has an invalid length. [ 628.752709][T12823] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2554'. [ 628.907698][T12833] netlink: 'syz.1.2555': attribute type 21 has an invalid length. [ 629.166382][T12834] netlink: 'syz.3.2556': attribute type 2 has an invalid length. [ 629.179786][T12834] netlink: 'syz.3.2556': attribute type 8 has an invalid length. [ 629.271857][T12834] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2556'. [ 629.339516][T12811] netlink: 'syz.0.2550': attribute type 10 has an invalid length. [ 629.765897][T12843] netlink: 'syz.3.2558': attribute type 10 has an invalid length. [ 630.077045][T12853] netlink: 'syz.4.2561': attribute type 13 has an invalid length. [ 630.085391][T12853] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2561'. [ 630.096410][T12853] erspan0: refused to change device tx_queue_len [ 630.103856][T12853] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 630.515541][T12866] sock: sock_set_timeout: `syz.1.2565' (pid 12866) tries to set negative timeout [ 630.686675][T12872] netlink: 'syz.2.2568': attribute type 41 has an invalid length. [ 630.723234][T12872] netlink: 'syz.2.2568': attribute type 41 has an invalid length. [ 630.846340][T12872] netlink: 'syz.2.2568': attribute type 12 has an invalid length. [ 630.917762][T12872] netlink: 172 bytes leftover after parsing attributes in process `syz.2.2568'. [ 630.991113][T12881] netlink: 'syz.3.2570': attribute type 21 has an invalid length. [ 631.426331][T12889] netlink: 'syz.0.2573': attribute type 10 has an invalid length. [ 633.113895][T12923] sock: sock_set_timeout: `syz.3.2583' (pid 12923) tries to set negative timeout [ 635.186309][T12987] validate_nla: 2 callbacks suppressed [ 635.186328][T12987] netlink: 'syz.0.2600': attribute type 39 has an invalid length. [ 635.217656][T12985] sock: sock_set_timeout: `syz.4.2601' (pid 12985) tries to set negative timeout [ 635.320770][T12987] team0: Port device macvlan0 removed [ 636.416381][T13009] FAULT_INJECTION: forcing a failure. [ 636.416381][T13009] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 636.421172][T13012] netlink: 'syz.0.2609': attribute type 10 has an invalid length. [ 636.453838][T13009] CPU: 1 PID: 13009 Comm: syz.1.2608 Not tainted syzkaller #0 [ 636.461389][T13009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 636.471487][T13009] Call Trace: [ 636.474800][T13009] [ 636.477761][T13009] dump_stack_lvl+0x188/0x24e [ 636.482483][T13009] ? show_regs_print_info+0x12/0x12 [ 636.487723][T13009] ? load_image+0x410/0x410 [ 636.492275][T13009] ? __lock_acquire+0x7c40/0x7c40 [ 636.497347][T13009] should_fail_ex+0x390/0x4c0 [ 636.502066][T13009] _copy_from_user+0x2c/0x170 [ 636.506784][T13009] iovec_from_user+0x143/0x360 [ 636.511596][T13009] __import_iovec+0x6c/0x510 [ 636.516242][T13009] import_iovec+0x6f/0xa0 [ 636.520633][T13009] ___sys_sendmsg+0x252/0x360 [ 636.525367][T13009] ? __sys_sendmsg+0x2a0/0x2a0 [ 636.530223][T13009] __se_sys_sendmsg+0x1c3/0x2b0 [ 636.535114][T13009] ? __x64_sys_sendmsg+0x80/0x80 [ 636.540105][T13009] ? syscall_enter_from_user_mode+0x2a/0x80 [ 636.546037][T13009] do_syscall_64+0x4c/0xa0 [ 636.550484][T13009] ? clear_bhb_loop+0x60/0xb0 [ 636.555195][T13009] ? clear_bhb_loop+0x60/0xb0 [ 636.559917][T13009] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 636.565862][T13009] RIP: 0033:0x7f367299e0d9 [ 636.570397][T13009] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 636.590052][T13009] RSP: 002b:00007f36738c5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 636.598603][T13009] RAX: ffffffffffffffda RBX: 00007f3672c25fa0 RCX: 00007f367299e0d9 [ 636.606626][T13009] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 636.614640][T13009] RBP: 00007f36738c5090 R08: 0000000000000000 R09: 0000000000000000 [ 636.622649][T13009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 636.630658][T13009] R13: 00007f3672c26038 R14: 00007f3672c25fa0 R15: 00007fffca2de9c8 [ 636.638691][T13009] [ 637.203848][T13021] netlink: 'syz.2.2612': attribute type 3 has an invalid length. [ 637.252639][T13021] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2612'. [ 638.726685][T13062] netlink: 'syz.1.2625': attribute type 28 has an invalid length. [ 639.630978][T13074] netlink: 'syz.0.2628': attribute type 10 has an invalid length. [ 640.784775][T13095] netlink: 'syz.0.2636': attribute type 3 has an invalid length. [ 640.834556][T13095] netlink: 114680 bytes leftover after parsing attributes in process `syz.0.2636'. [ 640.871557][T13097] netlink: 'syz.4.2637': attribute type 28 has an invalid length. [ 640.990871][T13102] netlink: 'syz.1.2639': attribute type 21 has an invalid length. [ 641.944393][T13118] netlink: 'syz.2.2642': attribute type 10 has an invalid length. [ 643.404854][T13141] netlink: 'syz.2.2652': attribute type 28 has an invalid length. [ 644.820750][T13165] netlink: 'syz.0.2666': attribute type 28 has an invalid length. [ 645.054429][T13178] netlink: 'syz.4.2658': attribute type 21 has an invalid length. [ 645.321102][T13177] netlink: 'syz.1.2659': attribute type 10 has an invalid length. [ 646.706399][T13213] netlink: 14546 bytes leftover after parsing attributes in process `syz.1.2672'. [ 646.804901][T13220] FAULT_INJECTION: forcing a failure. [ 646.804901][T13220] name failslab, interval 1, probability 0, space 0, times 0 [ 646.852210][T13220] CPU: 0 PID: 13220 Comm: syz.0.2673 Not tainted syzkaller #0 [ 646.860032][T13220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 646.870231][T13220] Call Trace: [ 646.873675][T13220] [ 646.876643][T13220] dump_stack_lvl+0x188/0x24e [ 646.881373][T13220] ? show_regs_print_info+0x12/0x12 [ 646.886634][T13220] ? load_image+0x410/0x410 [ 646.891191][T13220] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 646.897224][T13220] ? __lock_acquire+0x7c40/0x7c40 [ 646.902316][T13220] should_fail_ex+0x390/0x4c0 [ 646.907044][T13220] should_failslab+0x5/0x20 [ 646.911595][T13220] slab_pre_alloc_hook+0x59/0x300 [ 646.916670][T13220] kmem_cache_alloc+0x56/0x2f0 [ 646.921475][T13220] ? __build_skb+0x27/0x3b0 [ 646.926030][T13220] __build_skb+0x27/0x3b0 [ 646.930402][T13220] ? build_skb+0x14/0x230 [ 646.934780][T13220] build_skb+0x1e/0x230 [ 646.938991][T13220] bpf_prog_test_run_skb+0x38d/0x18e0 [ 646.944586][T13220] ? __fget_files+0x28/0x460 [ 646.949217][T13220] ? __fget_files+0x3fc/0x460 [ 646.953932][T13220] ? cpu_online+0xa0/0xa0 [ 646.958278][T13220] bpf_prog_test_run+0x31c/0x390 [ 646.963234][T13220] __sys_bpf+0x62b/0x780 [ 646.967498][T13220] ? bpf_link_show_fdinfo+0x380/0x380 [ 646.972902][T13220] ? lock_chain_count+0x20/0x20 [ 646.977777][T13220] __x64_sys_bpf+0x78/0x90 [ 646.982210][T13220] do_syscall_64+0x4c/0xa0 [ 646.986646][T13220] ? clear_bhb_loop+0x60/0xb0 [ 646.991334][T13220] ? clear_bhb_loop+0x60/0xb0 [ 646.996026][T13220] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 647.001942][T13220] RIP: 0033:0x7f4e7fd9e0d9 [ 647.006515][T13220] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 647.026217][T13220] RSP: 002b:00007f4e80c26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 647.034651][T13220] RAX: ffffffffffffffda RBX: 00007f4e80025fa0 RCX: 00007f4e7fd9e0d9 [ 647.042656][T13220] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 000000000000000a [ 647.050647][T13220] RBP: 00007f4e80c26090 R08: 0000000000000000 R09: 0000000000000000 [ 647.058625][T13220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 647.066604][T13220] R13: 00007f4e80026038 R14: 00007f4e80025fa0 R15: 00007ffdad049138 [ 647.074605][T13220] [ 647.415739][T13229] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.2677'. [ 647.538471][T13226] netlink: 'syz.2.2676': attribute type 10 has an invalid length. [ 647.553756][T13231] netlink: 12002 bytes leftover after parsing attributes in process `syz.3.2678'. [ 647.626667][T13229] netlink: 'syz.4.2677': attribute type 10 has an invalid length. [ 647.665318][T13229] device syz_tun entered promiscuous mode [ 647.790862][T13232] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2677'. [ 647.814392][T13237] netlink: 'syz.0.2679': attribute type 21 has an invalid length. [ 648.384998][T13247] ref_ctr_offset mismatch. inode: 0xada offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 648.500880][T13253] netlink: 'syz.3.2683': attribute type 1 has an invalid length. [ 648.511593][T13253] netlink: 116376 bytes leftover after parsing attributes in process `syz.3.2683'. [ 648.665519][T13263] IPv6: NLM_F_CREATE should be specified when creating new route [ 648.680145][T13263] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2686'. [ 648.691337][T13262] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2687'. [ 648.709422][T13265] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.2688'. [ 649.125844][T13275] netlink: 'syz.0.2691': attribute type 10 has an invalid length. [ 649.537883][T13285] netlink: 'syz.3.2695': attribute type 21 has an invalid length. [ 650.737208][T13291] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2696'. [ 651.141189][T13317] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2703'. [ 651.435402][T13321] FAULT_INJECTION: forcing a failure. [ 651.435402][T13321] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 651.516539][T13321] CPU: 1 PID: 13321 Comm: syz.0.2707 Not tainted syzkaller #0 [ 651.524179][T13321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 651.534256][T13321] Call Trace: [ 651.537541][T13321] [ 651.540477][T13321] dump_stack_lvl+0x188/0x24e [ 651.545174][T13321] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 651.551344][T13321] ? show_regs_print_info+0x12/0x12 [ 651.556654][T13321] ? load_image+0x410/0x410 [ 651.561173][T13321] ? should_fail_ex+0x315/0x4c0 [ 651.566043][T13321] should_fail_ex+0x390/0x4c0 [ 651.570759][T13321] _copy_from_user+0x2c/0x170 [ 651.575459][T13321] __sys_bpf+0x2ea/0x780 [ 651.579726][T13321] ? bpf_link_show_fdinfo+0x380/0x380 [ 651.585123][T13321] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 651.591435][T13321] __x64_sys_bpf+0x78/0x90 [ 651.595954][T13321] do_syscall_64+0x4c/0xa0 [ 651.600393][T13321] ? clear_bhb_loop+0x60/0xb0 [ 651.605081][T13321] ? clear_bhb_loop+0x60/0xb0 [ 651.609770][T13321] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 651.615691][T13321] RIP: 0033:0x7f4e7fd9e0d9 [ 651.620220][T13321] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 651.639934][T13321] RSP: 002b:00007f4e80c26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 651.648358][T13321] RAX: ffffffffffffffda RBX: 00007f4e80025fa0 RCX: 00007f4e7fd9e0d9 [ 651.656426][T13321] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 651.664410][T13321] RBP: 00007f4e80c26090 R08: 0000000000000000 R09: 0000000000000000 [ 651.672396][T13321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 651.680461][T13321] R13: 00007f4e80026038 R14: 00007f4e80025fa0 R15: 00007ffdad049138 [ 651.688456][T13321] [ 651.717334][T13325] netlink: 'syz.1.2706': attribute type 10 has an invalid length. [ 651.817287][T13323] netlink: 'syz.1.2706': attribute type 10 has an invalid length. [ 651.898117][T13329] netlink: 'syz.2.2704': attribute type 10 has an invalid length. [ 651.908046][T13329] __nla_validate_parse: 2 callbacks suppressed [ 651.908086][T13329] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2704'. [ 651.928469][T13329] device vlan1 left promiscuous mode [ 652.001827][T13329] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 652.768602][T13351] netlink: 'syz.2.2713': attribute type 21 has an invalid length. [ 653.278208][T13358] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2715'. [ 653.874628][T13372] netlink: 'syz.0.2718': attribute type 11 has an invalid length. [ 653.993370][T13372] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2718'. [ 654.137042][T13375] netlink: 'syz.4.2719': attribute type 10 has an invalid length. [ 654.422698][T13375] team0: Device hsr_slave_0 failed to register rx_handler [ 655.106851][T13386] netlink: 'syz.3.2723': attribute type 28 has an invalid length. [ 656.442731][T13401] device bridge_slave_1 left promiscuous mode [ 656.449074][T13401] bridge0: port 2(bridge_slave_1) entered disabled state [ 656.585281][T13401] device bridge_slave_0 left promiscuous mode [ 656.636453][T13401] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.179982][T13409] delete_channel: no stack [ 657.253631][T13404] netlink: 'syz.1.2729': attribute type 10 has an invalid length. [ 658.013820][T13420] netlink: 'syz.4.2732': attribute type 10 has an invalid length. [ 658.063808][T13420] team0: Device hsr_slave_0 failed to register rx_handler [ 659.205571][T13432] netlink: 'syz.3.2736': attribute type 28 has an invalid length. [ 661.675725][T13464] netlink: 'syz.2.2748': attribute type 10 has an invalid length. [ 662.212966][T13477] netlink: 'syz.0.2751': attribute type 21 has an invalid length. [ 662.555498][T13482] netlink: 'syz.4.2752': attribute type 28 has an invalid length. [ 663.376501][T13502] netlink: 'syz.1.2758': attribute type 1 has an invalid length. [ 663.640592][T13503] netlink: 'syz.2.2756': attribute type 11 has an invalid length. [ 663.672320][T13503] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2756'. [ 664.179606][T13524] FAULT_INJECTION: forcing a failure. [ 664.179606][T13524] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 664.243187][T13524] CPU: 0 PID: 13524 Comm: syz.4.2763 Not tainted syzkaller #0 [ 664.250740][T13524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 664.260852][T13524] Call Trace: [ 664.264189][T13524] [ 664.267159][T13524] dump_stack_lvl+0x188/0x24e [ 664.271895][T13524] ? show_regs_print_info+0x12/0x12 [ 664.277141][T13524] ? load_image+0x410/0x410 [ 664.281690][T13524] ? __lock_acquire+0x7c40/0x7c40 [ 664.286769][T13524] should_fail_ex+0x390/0x4c0 [ 664.291509][T13524] _copy_to_user+0x2c/0x130 [ 664.296050][T13524] generic_map_delete_batch+0x5cc/0x6f0 [ 664.301649][T13524] ? bpf_map_inc_not_zero+0x100/0x100 [ 664.307070][T13524] ? __fdget+0x17c/0x200 [ 664.311364][T13524] ? bpf_map_inc_not_zero+0x100/0x100 [ 664.316786][T13524] bpf_map_do_batch+0x475/0x5f0 [ 664.321682][T13524] ? bpf_lsm_xfrm_state_delete_security+0x10/0x10 [ 664.328315][T13524] __sys_bpf+0x6f7/0x780 [ 664.332601][T13524] ? bpf_link_show_fdinfo+0x380/0x380 [ 664.338035][T13524] ? lock_chain_count+0x20/0x20 [ 664.343374][T13524] __x64_sys_bpf+0x78/0x90 [ 664.347830][T13524] do_syscall_64+0x4c/0xa0 [ 664.352287][T13524] ? clear_bhb_loop+0x60/0xb0 [ 664.357006][T13524] ? clear_bhb_loop+0x60/0xb0 [ 664.361724][T13524] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 664.367663][T13524] RIP: 0033:0x7fb2ff99e0d9 [ 664.372114][T13524] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 664.391755][T13524] RSP: 002b:00007fb300828028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 664.400214][T13524] RAX: ffffffffffffffda RBX: 00007fb2ffc26090 RCX: 00007fb2ff99e0d9 [ 664.408220][T13524] RDX: 0000000000000038 RSI: 0000200000000080 RDI: 000000000000001b [ 664.416232][T13524] RBP: 00007fb300828090 R08: 0000000000000000 R09: 0000000000000000 [ 664.424336][T13524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 664.432340][T13524] R13: 00007fb2ffc26128 R14: 00007fb2ffc26090 R15: 00007ffc88766da8 [ 664.440359][T13524] [ 664.478861][T13531] netlink: 'syz.3.2765': attribute type 21 has an invalid length. [ 664.852998][T13536] netlink: 'syz.2.2766': attribute type 10 has an invalid length. [ 665.447017][T13538] delete_channel: no stack [ 666.378389][T13553] netlink: 'syz.0.2770': attribute type 28 has an invalid length. [ 667.356490][T13563] netlink: 'syz.3.2773': attribute type 10 has an invalid length. [ 667.996333][T13588] netlink: 'syz.3.2783': attribute type 21 has an invalid length. [ 669.694710][T13585] netlink: 'syz.4.2781': attribute type 10 has an invalid length. [ 672.095453][T13618] netlink: 'syz.1.2786': attribute type 28 has an invalid length. [ 672.310167][T13616] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.2787'. [ 673.316267][T13644] netlink: 'syz.4.2796': attribute type 21 has an invalid length. [ 673.642646][T13647] netlink: 'syz.0.2797': attribute type 3 has an invalid length. [ 673.671671][T13647] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2797'. [ 674.063980][T13655] netlink: 'syz.2.2799': attribute type 10 has an invalid length. [ 674.651473][T13665] netlink: 'syz.3.2801': attribute type 28 has an invalid length. [ 676.357708][T13673] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2803'. [ 678.043583][T13716] netlink: 'syz.3.2815': attribute type 28 has an invalid length. [ 678.079658][T13717] netlink: 'syz.1.2814': attribute type 21 has an invalid length. [ 679.414856][T13720] netlink: 'syz.2.2816': attribute type 10 has an invalid length. [ 680.196095][T13729] netlink: 'syz.3.2817': attribute type 27 has an invalid length. [ 680.412346][T13733] netlink: 'syz.2.2818': attribute type 2 has an invalid length. [ 680.432434][T13733] netlink: 'syz.2.2818': attribute type 4 has an invalid length. [ 680.450579][T13733] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2818'. [ 680.701734][T13740] netlink: 'syz.2.2820': attribute type 10 has an invalid length. [ 680.732358][T13740] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2820'. [ 680.742993][T13740] bridge0: port 3(team0) entered blocking state [ 680.762189][T13740] bridge0: port 3(team0) entered disabled state [ 680.868145][T13740] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 681.066416][T13742] netlink: 'syz.1.2822': attribute type 3 has an invalid length. [ 681.084368][T13742] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2822'. [ 681.850365][T13763] netlink: 'syz.1.2827': attribute type 28 has an invalid length. [ 681.912452][T13771] netlink: 'syz.3.2829': attribute type 21 has an invalid length. [ 683.335132][T13791] validate_nla: 1 callbacks suppressed [ 683.335151][T13791] netlink: 'syz.2.2833': attribute type 27 has an invalid length. [ 683.746310][T13791] bond0: (slave bond_slave_0): Releasing backup interface [ 685.694963][T13825] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2843'. [ 686.670257][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.676743][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.746558][T13828] netlink: 'syz.2.2845': attribute type 10 has an invalid length. [ 688.698449][T13844] netlink: 'syz.4.2850': attribute type 10 has an invalid length. [ 688.792728][T13842] netlink: 'syz.0.2849': attribute type 21 has an invalid length. [ 688.837975][T13841] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2848'. [ 689.036631][T13841] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2848'. [ 689.146053][T13858] netlink: 'syz.1.2851': attribute type 27 has an invalid length. [ 689.970936][T13846] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2848'. [ 690.028162][T13853] netlink: 'syz.4.2852': attribute type 10 has an invalid length. [ 694.649511][T13898] netlink: 'syz.3.2863': attribute type 10 has an invalid length. [ 695.190045][T13912] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2866'. [ 695.482869][T13912] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2866'. [ 696.439251][T13913] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2866'. [ 696.459774][T13918] netlink: 'syz.3.2867': attribute type 21 has an invalid length. [ 696.650361][T13922] netlink: 'syz.0.2868': attribute type 10 has an invalid length. [ 698.277366][T13941] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.2874'. [ 699.122143][T13952] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2877'. [ 699.646924][T13965] netlink: 'syz.0.2881': attribute type 21 has an invalid length. [ 699.684840][T13965] netlink: 'syz.0.2881': attribute type 7 has an invalid length. [ 699.706298][T13966] netlink: 'syz.4.2880': attribute type 21 has an invalid length. [ 700.802616][T13986] netlink: 'syz.1.2887': attribute type 21 has an invalid length. [ 728.822395][ T7] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 1-.... } 2668 jiffies s: 52221 root: 0x2/. [ 728.848700][ T7] rcu: blocking rcu_node structures (internal RCU debug): [ 728.863293][ T7] Sending NMI from CPU 0 to CPUs 1: [ 728.868596][ C1] NMI backtrace for cpu 1 [ 728.868609][ C1] CPU: 1 PID: 13990 Comm: syz.4.2888 Not tainted syzkaller #0 [ 728.868626][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 728.868633][ C1] RIP: 0010:__lock_acquire+0x8ea/0x7c40 [ 728.868663][ C1] Code: 00 48 c7 c0 40 71 c1 96 48 c1 e8 03 48 89 84 24 c0 00 00 00 48 c7 c0 a8 3f 21 8e 48 c1 e8 03 48 89 84 24 88 00 00 00 4d 89 ef <48> 83 fb 31 0f 83 94 01 00 00 4c 89 e8 48 c1 e8 03 42 0f b6 04 00 [ 728.868677][ C1] RSP: 0018:ffffc900001e0260 EFLAGS: 00000097 [ 728.868700][ C1] RAX: 0000000000000003 RBX: 0000000000000002 RCX: 0000000000000002 [ 728.868710][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff90b10240 [ 728.868720][ C1] RBP: ffffc900001e0490 R08: dffffc0000000000 R09: 1ffffffff2162048 [ 728.868731][ C1] R10: dffffc0000000000 R11: fffffbfff2162049 R12: ffff88803c1946d8 [ 728.868742][ C1] R13: ffff88803c194750 R14: ffffffff9049a37a R15: ffff88803c194750 [ 728.868753][ C1] FS: 00007fb3008496c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 728.868767][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 728.868778][ C1] CR2: 000000110c362832 CR3: 0000000027a96000 CR4: 00000000003506e0 [ 728.868793][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 728.868802][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 728.868812][ C1] Call Trace: [ 728.868818][ C1] [ 728.868838][ C1] ? verify_lock_unused+0x140/0x140 [ 728.868862][ C1] ? perf_trace_lock+0xf8/0x390 [ 728.868880][ C1] ? mark_lock+0x94/0x320 [ 728.868901][ C1] ? __lock_acquire+0x138a/0x7c40 [ 728.868923][ C1] lock_acquire+0x1bb/0x4a0 [ 728.868942][ C1] ? __virt_addr_valid+0x188/0x540 [ 728.868968][ C1] ? read_lock_is_recursive+0x10/0x10 [ 728.868987][ C1] ? verify_lock_unused+0x140/0x140 [ 728.869005][ C1] ? llist_add_batch+0x12b/0x180 [ 728.869028][ C1] ? perf_trace_lock+0xf8/0x390 [ 728.869045][ C1] ? __virt_addr_valid+0x188/0x540 [ 728.869064][ C1] __virt_addr_valid+0x1a5/0x540 [ 728.869082][ C1] ? __virt_addr_valid+0x188/0x540 [ 728.869102][ C1] kasan_addr_to_slab+0x9/0xc0 [ 728.869122][ C1] __kasan_record_aux_stack+0xf/0xc0 [ 728.869138][ C1] irq_work_queue_on+0x10f/0x260 [ 728.869161][ C1] rcu_read_unlock_special+0x3c9/0x510 [ 728.869248][ C1] ? __rcu_read_unlock+0xd0/0xd0 [ 728.869265][ C1] ? __cant_sleep+0x220/0x220 [ 728.869285][ C1] __rcu_read_unlock+0x78/0xd0 [ 728.869299][ C1] ? trace_call_bpf+0xbf/0x6b0 [ 728.869319][ C1] trace_call_bpf+0x5bb/0x6b0 [ 728.869338][ C1] ? trace_call_bpf+0xbf/0x6b0 [ 728.869361][ C1] ? __bpf_trace_bpf_trace_printk+0x20/0x20 [ 728.869382][ C1] ? kvm_sched_clock_read+0x14/0x40 [ 728.869396][ C1] ? sched_clock_cpu+0x6e/0x260 [ 728.869439][ C1] perf_trace_run_bpf_submit+0x79/0x1c0 [ 728.869463][ C1] perf_trace_preemptirq_template+0x268/0x320 [ 728.869484][ C1] ? asm_sysvec_irq_work+0x16/0x20 [ 728.869504][ C1] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 728.869524][ C1] ? __irq_exit_rcu+0x147/0x230 [ 728.869554][ C1] ? irq_exit_rcu+0x20/0x20 [ 728.869569][ C1] ? asm_sysvec_irq_work+0x16/0x20 [ 728.869586][ C1] trace_irq_enable_rcuidle+0xd3/0x140 [ 728.869605][ C1] trace_hardirqs_on+0x24/0x40 [ 728.869622][ C1] asm_sysvec_irq_work+0x16/0x20 [ 728.869638][ C1] RIP: 0010:rcu_read_unlock_special+0x7f/0x510 [ 728.869653][ C1] Code: eb 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 2b 42 c7 44 2b 08 f8 f3 f3 f3 65 44 8b 35 a2 7c 95 7e 41 f7 c6 00 00 f0 00 74 40 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 42 c7 44 2b 08 [ 728.869664][ C1] RSP: 0018:ffffc900001e0ae0 EFLAGS: 00000206 [ 728.869676][ C1] RAX: 9928ace8cef0e700 RBX: 1ffff9200003c164 RCX: 9928ace8cef0e700 [ 728.869693][ C1] RDX: dffffc0000000000 RSI: ffffffff8a8c17a0 RDI: ffffffff8adf5de0 [ 728.869703][ C1] RBP: ffffc900001e0bd0 R08: ffff8880b8f3580b R09: 1ffff110171e6b01 [ 728.869713][ C1] R10: dffffc0000000000 R11: ffffed10171e6b02 R12: 0000000000000246 [ 728.869723][ C1] R13: dffffc0000000000 R14: ffff8880b8f3bb00 R15: 0000000000000002 [ 728.869742][ C1] ? kmem_cache_free+0x70/0x2a0 [ 728.869759][ C1] ? __rcu_read_unlock+0xd0/0xd0 [ 728.869779][ C1] __rcu_read_unlock+0x78/0xd0 [ 728.869791][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170 [ 728.869829][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 728.869845][ C1] ieee80211_iterate_active_interfaces_atomic+0x156/0x170 [ 728.869865][ C1] mac80211_hwsim_beacon+0xb7/0x1b0 [ 728.869888][ C1] __hrtimer_run_queues+0x522/0xc90 [ 728.869907][ C1] ? hw_scan_work+0xf00/0xf00 [ 728.869930][ C1] ? hrtimer_interrupt+0x980/0x980 [ 728.869950][ C1] hrtimer_run_softirq+0x173/0x290 [ 728.869968][ C1] handle_softirqs+0x291/0x910 [ 728.869984][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 728.869999][ C1] ? do_softirq+0x210/0x210 [ 728.870011][ C1] ? hrtimer_interrupt+0x775/0x980 [ 728.870030][ C1] __irq_exit_rcu+0x13b/0x230 [ 728.870043][ C1] ? irq_exit_rcu+0x20/0x20 [ 728.870062][ C1] irq_exit_rcu+0x5/0x20 [ 728.870074][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 728.870089][ C1] [ 728.870093][ C1] [ 728.870099][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 728.870116][ C1] RIP: 0010:put_cpu_partial+0x1b0/0x250 [ 728.870132][ C1] Code: 3b 44 24 18 0f 85 b4 00 00 00 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 7c 37 5d 08 f7 c5 00 02 00 00 74 c0 fb 4d 85 e4 <75> bf eb c8 e8 47 b8 3f 02 85 c0 0f 84 e9 fe ff ff 83 3d c0 5e 4e [ 728.870143][ C1] RSP: 0018:ffffc900034c6f68 EFLAGS: 00000286 [ 728.870154][ C1] RAX: 9928ace8cef0e700 RBX: ffff888017442140 RCX: 9928ace8cef0e700 [ 728.870164][ C1] RDX: dffffc0000000000 RSI: ffffffff8a8c17a0 RDI: ffffffff8adf5de0 [ 728.870174][ C1] RBP: 0000000000000282 R08: ffff8880b8f3580b R09: 1ffff110171e6b01 [ 728.870183][ C1] R10: dffffc0000000000 R11: ffffed10171e6b02 R12: ffffea000100fe00 [ 728.870194][ C1] R13: 0000000000000001 R14: ffff88803c193c00 R15: ffff8880b8f3ea80 [ 728.870212][ C1] ? put_cpu_partial+0x6e/0x250 [ 728.870229][ C1] qlist_free_all+0x76/0xe0 [ 728.870245][ C1] kasan_quarantine_reduce+0x144/0x160 [ 728.870261][ C1] __kasan_slab_alloc+0x1e/0x80 [ 728.870280][ C1] slab_post_alloc_hook+0x4b/0x490 [ 728.870297][ C1] ? do_check_common+0x1f9/0xc560 [ 728.870314][ C1] __kmem_cache_alloc_node+0x19d/0x270 [ 728.870330][ C1] ? do_check_common+0x1f9/0xc560 [ 728.870345][ C1] kmalloc_trace+0x26/0xe0 [ 728.870366][ C1] do_check_common+0x1f9/0xc560 [ 728.870383][ C1] ? perf_trace_run_bpf_submit+0x124/0x1c0 [ 728.870406][ C1] ? ct_nmi_exit+0x145/0x1c0 [ 728.870420][ C1] ? ct_irq_exit_irqson+0x113/0x170 [ 728.870460][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 728.870480][ C1] ? lock_chain_count+0x20/0x20 [ 728.870500][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 728.870518][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 728.870532][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 728.870554][ C1] ? push_insn+0x670/0x670 [ 728.870568][ C1] ? do_check_subprogs+0x78/0x360 [ 728.870581][ C1] ? do_check_subprogs+0x313/0x360 [ 728.870595][ C1] ? do_check_subprogs+0x9/0x360 [ 728.870610][ C1] bpf_check+0x3ea7/0x11000 [ 728.870633][ C1] ? perf_trace_buf_update+0xa8/0x230 [ 728.870654][ C1] ? bpf_get_btf_vmlinux+0x10/0x10 [ 728.870667][ C1] ? perf_swevent_event+0x1c6/0x570 [ 728.870694][ C1] ? perf_trace_lock+0xf8/0x390 [ 728.870712][ C1] ? trace_event_raw_event_lock+0x230/0x230 [ 728.870730][ C1] ? perf_tp_event+0xa8e/0xc10 [ 728.870755][ C1] ? trace_call_bpf+0xbf/0x6b0 [ 728.870774][ C1] ? __lock_acquire+0x7c40/0x7c40 [ 728.870795][ C1] ? migrate_enable+0x148/0x220 [ 728.870812][ C1] ? trace_call_bpf+0xbf/0x6b0 [ 728.870829][ C1] ? trace_call_bpf+0xbf/0x6b0 [ 728.870846][ C1] ? trace_call_bpf+0x5d6/0x6b0 [ 728.870864][ C1] ? trace_call_bpf+0xbf/0x6b0 [ 728.870884][ C1] ? __bpf_trace_bpf_trace_printk+0x20/0x20 [ 728.870904][ C1] ? trace_event_raw_event_lock+0x230/0x230 [ 728.870923][ C1] ? perf_trace_run_bpf_submit+0x124/0x1c0 [ 728.870945][ C1] ? ct_nmi_exit+0x145/0x1c0 [ 728.870959][ C1] ? ct_irq_exit_irqson+0x113/0x170 [ 728.870975][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 728.870993][ C1] ? __lock_acquire+0x7c40/0x7c40 [ 728.871011][ C1] ? lock_chain_count+0x20/0x20 [ 728.871031][ C1] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 728.871047][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 728.871060][ C1] ? ktime_get_with_offset+0xff/0x320 [ 728.871076][ C1] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 728.871093][ C1] ? ktime_get_real_ts64+0x440/0x440 [ 728.871108][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 728.871131][ C1] ? memset+0x1e/0x40 [ 728.871144][ C1] ? bpf_obj_name_cpy+0x190/0x1d0 [ 728.871163][ C1] bpf_prog_load+0x100e/0x1530 [ 728.871188][ C1] ? map_freeze+0x390/0x390 [ 728.871215][ C1] ? __sys_bpf+0x5a4/0x780 [ 728.871235][ C1] __sys_bpf+0x5b8/0x780 [ 728.871254][ C1] ? bpf_link_show_fdinfo+0x380/0x380 [ 728.871285][ C1] __x64_sys_bpf+0x78/0x90 [ 728.871303][ C1] do_syscall_64+0x4c/0xa0 [ 728.871321][ C1] ? clear_bhb_loop+0x60/0xb0 [ 728.871337][ C1] ? clear_bhb_loop+0x60/0xb0 [ 728.871355][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 728.871372][ C1] RIP: 0033:0x7fb2ff99e0d9 [ 728.871384][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 728.871395][ C1] RSP: 002b:00007fb300849028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 728.871409][ C1] RAX: ffffffffffffffda RBX: 00007fb2ffc25fa0 RCX: 00007fb2ff99e0d9 [ 728.871418][ C1] RDX: 0000000000000080 RSI: 0000200000000340 RDI: 0000000000000005 [ 728.871427][ C1] RBP: 00007fb2ffa35024 R08: 0000000000000000 R09: 0000000000000000 [ 728.871436][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 728.871444][ C1] R13: 00007fb2ffc26038 R14: 00007fb2ffc25fa0 R15: 00007ffc88766da8 [ 728.871462][ C1]