last executing test programs: 5m47.90001416s ago: executing program 3 (id=3005): r0 = socket$kcm(0x11, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000000040000090000000100"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0xc618, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f07df33c9f7b986", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a40)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x49, &(0x7f0000000100), 0x4) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x1ff) sendmsg$sock(r0, &(0x7f0000000000)={&(0x7f0000000080)=@isdn={0x22, 0x8d, 0x4, 0x6, 0x80}, 0x80, 0x0}, 0x844) 5m47.103654505s ago: executing program 3 (id=3010): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="09000000080000000080000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone(0x80001000, 0x0, 0x0, 0x0, 0x0, 0x0) 5m46.727162476s ago: executing program 3 (id=3014): socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xe, 0x81}, 0x100c, 0x7, 0xffff, 0x7, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b00000009000000030000004f"], 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000240)=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0xfd60, &(0x7f0000000580)="b9ff03076804d773000000000800", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50) 5m46.322747939s ago: executing program 3 (id=3018): openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/15], 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10, 0x0, 0x0, 0x4}]}}, 0x0, 0x42}, 0x28) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa"], 0xcfa4) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 5m45.999617478s ago: executing program 3 (id=3021): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000740), 0x2}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r0 = socket$kcm(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x40, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x3, 0x2d1}, 0x3088, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x80368, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000010c0)={0x3, 0xc, &(0x7f0000000700)=ANY=[], 0x0, 0x5}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000040000000000000000000000850000000800000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r7) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="131000002c0091bcd8b8fa9f53812e4ca67e9aa648"], 0xfe33) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x2e0, 0x12c, 0x60000004, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c) 5m45.390638537s ago: executing program 3 (id=3026): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d487277b9b100b4ab50a", @ANYRES32=0xffffffffffffffff, @ANYRES8=r1], 0xfe33) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000001c0)={r0}) ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000280)={'wlan1\x00', @random="6a50bae0b3e5"}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYRES64=r1], 0xe) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x13, 0x10, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b728080000020000006b8a00fe00000000c7080000010000007b7ff0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb7020000080000fa1823000000d8c5edf79a53e6", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000440)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r8) r9 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r9, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x3ffe, @dev={0xac, 0x14, 0x14, 0x1}}, 0x10, 0x0}, 0x20004840) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r10}, &(0x7f0000000000), &(0x7f0000000080)=r8}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={r10, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB='\n\x00'/20, @ANYRES32=r11, @ANYRES32, @ANYBLOB="000066e45d2951f053446867520000010000000100"/39], 0x50) recvmsg$unix(r5, &(0x7f00000003c0)={0x0, 0xffffffffffffff04, &(0x7f0000002380)=[{&(0x7f0000002480)=""/195, 0xc3}], 0x1}, 0x2000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r7}, &(0x7f0000000280), &(0x7f0000000140)=r4}, 0x22) r12 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x7000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r13 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x4110, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0x0, r12, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x2400, 0xffffffffffffffff) sendmsg$inet(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0x1}], 0x1}, 0x0) socketpair(0x2c, 0x3, 0x82, &(0x7f0000000240)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={r3, 0x20, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000004c0)=""/106, 0x6a}}, 0xfffffd37) 5m30.223545481s ago: executing program 32 (id=3026): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d487277b9b100b4ab50a", @ANYRES32=0xffffffffffffffff, @ANYRES8=r1], 0xfe33) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000001c0)={r0}) ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000280)={'wlan1\x00', @random="6a50bae0b3e5"}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYRES64=r1], 0xe) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x13, 0x10, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b728080000020000006b8a00fe00000000c7080000010000007b7ff0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb7020000080000fa1823000000d8c5edf79a53e6", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000440)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r8) r9 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r9, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x3ffe, @dev={0xac, 0x14, 0x14, 0x1}}, 0x10, 0x0}, 0x20004840) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r10}, &(0x7f0000000000), &(0x7f0000000080)=r8}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={r10, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB='\n\x00'/20, @ANYRES32=r11, @ANYRES32, @ANYBLOB="000066e45d2951f053446867520000010000000100"/39], 0x50) recvmsg$unix(r5, &(0x7f00000003c0)={0x0, 0xffffffffffffff04, &(0x7f0000002380)=[{&(0x7f0000002480)=""/195, 0xc3}], 0x1}, 0x2000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r7}, &(0x7f0000000280), &(0x7f0000000140)=r4}, 0x22) r12 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x7000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r13 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x4110, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0x0, r12, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x2400, 0xffffffffffffffff) sendmsg$inet(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0x1}], 0x1}, 0x0) socketpair(0x2c, 0x3, 0x82, &(0x7f0000000240)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={r3, 0x20, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000004c0)=""/106, 0x6a}}, 0xfffffd37) 7.86347345s ago: executing program 2 (id=5220): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000070000000850000005000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000e00)={0x0, 0x2, 0x8}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000ec0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000e40), &(0x7f0000000e80)=r0}, 0x20) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x4030582a, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40305829, &(0x7f0000000040)=0x8000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000f00)={0x1, 0xffffffffffffffff}, 0x4) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000f40)={0x0, 0x62d, 0x10}, 0xc) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000f80)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x1}, 0x50) r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f00000008c0)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r7}, @generic={0x66, 0x0, 0x0, 0x0, 0x6f86}, @initr0, @map_fd={0x18, 0x5, 0x1, 0x0, r3}, @alu={0x4, 0x0, 0xb606c778e35bc3b6, 0x3, 0x0, 0x0, 0x8}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x17, 0x18, &(0x7f0000000680)=@raw=[@map_idx_val={0x18, 0x0, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x8001}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @tail_call, @map_idx={0x18, 0x6, 0x5, 0x0, 0x2}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x5}], &(0x7f0000000740)='syzkaller\x00', 0x2, 0x1b, &(0x7f0000000780)=""/27, 0x40f00, 0x12, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r0, 0x2, &(0x7f0000001000)=[0xffffffffffffffff, r0, r1, r2, r3, r4, r5, r6, r7], &(0x7f0000001040)=[{0x0, 0x3, 0x3, 0x2}, {0x5, 0x4, 0x6}], 0x10, 0x10001}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r8 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r8, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd}, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x2b}]}, &(0x7f0000000080)='GPL\x00', 0x5, 0x98, &(0x7f0000000380)=""/152}, 0x94) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f00160006000500a8000600200006400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdfb8951f215ce3bbce81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92782f9ffcdb020e6f3baf26d57a000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x2000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f0000000340)={r9}) ioctl$sock_kcm_SIOCKCMUNATTACH(r9, 0x89e1, &(0x7f0000000440)={r11}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x13, &(0x7f00000009c0)=@framed={{}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x0}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x7}, {0x6, 0x0, 0x2}, {}, {}, {0x85, 0x0, 0x0, 0x8}}, @printk={@p, {0x5, 0x3, 0x6, 0xa, 0x1, 0xfff5}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 7.343896015s ago: executing program 2 (id=5225): socket$kcm(0x11, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x71, 0x0, 0x0, 0x0, 0x0, 0x80720, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x109, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x50) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x830d}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x104) r0 = perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x1b, &(0x7f0000000000)='/proc/t/c+\x0fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee\x00\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x0, 0x40, 0x0, 0x9, 0x0, 0x2, 0x58221, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffdfffa, 0x2, @perf_config_ext={0x4, 0x2}, 0x106a4f, 0x1, 0x6, 0x8, 0x2, 0xffc, 0x4, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, r0, 0x9) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x48084) syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)=""/143, 0x8f}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0], 0x0, 0x86, &(0x7f0000000640)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0xde, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000880)=0xffffffffffffffff, 0x4) 6.925492568s ago: executing program 2 (id=5229): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x208, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x40047459, &(0x7f0000000180)) 6.55216528s ago: executing program 2 (id=5236): r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000240), 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@fallback=r0, 0x0, 0x0, 0x10000, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0]}, 0x40) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xbd}, 0x94) write$cgroup_subtree(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa000086dd"], 0xcfa4) 5.937697448s ago: executing program 1 (id=5241): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, 0x0, 0x0) 5.835944252s ago: executing program 0 (id=5242): bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) 5.787838013s ago: executing program 4 (id=5243): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x4, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00'/10], 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) socket$kcm(0xa, 0x922000000003, 0x11) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x5, 0x0, 0x0, 0x0, 0xe2b, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x9}, 0x10180}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x6, 0x4, 0x8, 0xf, 0x0, 0x1}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x2, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x1}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000380)={r2, &(0x7f0000000340), 0x0}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001f00)=@bloom_filter={0x1e, 0x0, 0xb, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000140)={r3, 0x0, &(0x7f0000000080)=""/144}, 0x20) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb01001800000000000000"], &(0x7f00000001c0)=""/257, 0x2a, 0x101, 0x6}, 0x28) r4 = socket$kcm(0x11, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = perf_event_open$cgroup(&(0x7f00000000c0)={0x1, 0x80, 0x7f, 0x8, 0x2, 0xc, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xf6, 0x5, @perf_config_ext={0x3, 0x10}, 0x0, 0x5840a26e, 0x8, 0x5, 0x8, 0x10001, 0x7ff, 0x0, 0x7, 0x0, 0x7ff}, r1, 0x4, r0, 0xa) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r5, 0x4008240b, &(0x7f0000001200)={0x3, 0x80, 0x1, 0x6, 0x0, 0xc, 0x0, 0x7, 0xb090, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x43f75d07c2d94bd, @perf_config_ext={0x5, 0xffffffffffffffff}, 0x8080, 0x2, 0x5, 0x7, 0x7, 0x400, 0x3, 0x0, 0x6, 0x0, 0x27d}) sendmsg$kcm(r4, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2c}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000000)='Gb', 0x1c}], 0x1}, 0x480c0) 5.743044005s ago: executing program 0 (id=5244): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18, 0x4}, 0x4008000) 5.542887581s ago: executing program 0 (id=5245): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x2, 0x0, 0x0, 0x0, 0x14120, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x2, 0x8, 0x3fe, 0x40, 0x0, 0x0, 0x200, 0x0, 0x4}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5d31, 0x60400, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x9, 0x5}, 0x4029, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffbf, 0xffffffffffffffff, 0xb) r1 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x1}, 0x201, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x2100, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x7}, 0x4110, 0xfffffffffffffffe, 0x0, 0x5, 0x0, 0x9}, 0x0, 0x100000000000000, 0xffffffffffffffff, 0x8) r4 = syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0xc) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f00000016c0)={'macvlan1\x00', @random="0100071e8145"}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000540)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYBLOB='\x00', @ANYRES32=0x0, @ANYRES64=0x0], 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) r7 = perf_event_open(&(0x7f0000000240)={0x4, 0x80, 0x6, 0x0, 0x6, 0x4, 0x0, 0xae, 0x412d0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x2, @perf_config_ext={0x8000000000000001, 0x7}, 0x81, 0xdcca, 0x4, 0xe, 0xffffffffffffffc0, 0x7, 0xfff7, 0x0, 0x7, 0x0, 0x4c2e}, r4, 0x1, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_QUERY_BPF(r7, 0xc008240a, &(0x7f0000000500)=ANY=[@ANYBLOB="0000000400"/16]) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000440)={r1, &(0x7f0000000340)="85a94a17e132159668977e7c9b7c550d1357b4c7d9a176ec02778a99f5e0a407ff1984cdab17db36d80caa085737193d7b49595e7e3d1e1f34adf5708ff04993c1c41d70389b8e1d7aa99de16aa4ee828e2ed0078d6e2db008279253af245ec4e1ebc166e4248dec8a59c729b1a77cbfbc54a70d81479e802064c50a901830894c4fbaa1e8b316a84f15038bc5cbc09ad8d636b065f209d004237438700bea9fa50ed1ce53c4dffdb819c35ec7246d55e6c577c7233059b6906586556d42958df494932e849c80b14be86390"}, 0x20) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x78}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r8, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r9, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x31, &(0x7f00000001c0), 0x4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x8946, &(0x7f0000000080)) 5.530064681s ago: executing program 5 (id=5255): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0, 0x5}, 0x94) socket$kcm(0xa, 0x3, 0x87) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0xfe, 0xbd, 0x0, 0x0, 0x0, 0x1, 0x4401, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0xc8, 0x6, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x4, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x8020) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a00000006000000080000000800000040000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000f9ba28c88b25453d0200"/28], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=ANY=[@ANYBLOB="84190000953272344bdc92b8064000047ae16dec00", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001580)={0xe, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="20004000000000009500000000000000"], &(0x7f0000000480)='GPL\x00', 0x4, 0x1000, &(0x7f00000004c0)=""/4096}, 0x21) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0/file0\x00', 0x42) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r3, &(0x7f00000003c0), 0x2, 0x0) r4 = socket$kcm(0x2, 0x5, 0x84) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) syz_open_procfs$namespace(0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x2, 0x200000000000001, 0x106) r5 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r5, 0x29, 0x1e, 0x0, 0xfcd8) setsockopt$sock_attach_bpf(r4, 0x84, 0x82, &(0x7f0000000000), 0x8) socket$kcm(0x10, 0x2, 0x0) r6 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="0218030002000000e4a17c45c8d360c9", 0x10}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x27}, 0x28) 2.814844614s ago: executing program 1 (id=5246): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x208, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x40047459, &(0x7f0000000180)) 2.814626424s ago: executing program 5 (id=5247): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20004, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000000c0)=r1, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x7000000}, 0x2c) 2.814128764s ago: executing program 4 (id=5248): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) socketpair(0x9, 0x80000, 0xf, &(0x7f00000000c0)) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) sendmsg$inet(r2, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4048884) sendmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18, 0x4}, 0x4008000) 2.702937617s ago: executing program 2 (id=5249): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001880)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x48) write$cgroup_devices(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="1e0308004d8c"], 0xffdd) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e1d, @local}, 0x10, 0x0}, 0x8850) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000001ed0a00bfa30000000000002503000028feffff6203f0fff8ffffff61a4f0ff000000001d04020000000000cf000000000000005504000017ffffff6604000017ffffff9c400000000000007b0300fe000000002c04000000000000c6000000000000009500000000000000023bc065b7a339d17cf9333379fc9e84af69912435f1b6a693002e7f3be361917adef6ee1c8a2b4f8ef1e50b91f32050e436fe275daf51efd601b6482a0800000098efefb202ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8df000d10e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf1dbf6d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040bef29b66e3858d051c096e37c4f46010400000000c3da29faf75ddd1aa96960bca97af13382cb881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f13792292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867bbacec439c163fcd7071b53ac29df826f8ae6d6e18c1eacf5bf870768d5217e809bb5a05d9e22ce67f1231bd236486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f8e3ce2a9414575833a9f05954cde298a35ea6d715ba80aee63300000000000000000000000000000000000040000000000000000386000000b854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885769754932609f19e2f615a01cb6d17fbf5cb539403cb0d72534050000004ad8269b2bdf2ca4958a62a6e7449316cc65b5d4796005c2f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc19488e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da350bcc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347932a4bac694c55fe9d145906d410f58f1951405d185afef5dbd617e87ddbd23834a50d7eb8e327fb5db12cbd6a9efe8e671c4f251fe3bf440cabdfe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb6c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa2c910fb8de24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f60afea80bb066aafb7517f787b090f419a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f8089322d84ac523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe91c921ac1476027772c87d1767e38ba49e3e57fafea83e00006a1d1a4ebf83434986091dd66ffe3ffe9067f565c6f86b5f596d9c828c02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007f00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d05db7f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece8d264a2b6adae02c821b6242894f33c81c0a6813497502aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cfe56557a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b530500d8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2ccb1decb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400098abb869921911480a876fbba698801937e8b4264eb6f5137bd9b075f1488d22230592a79000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462aa2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783fefb0a5ef0b41e14a6fe6ba306206670b84894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9f0284405e3127dde7e41285fbe0bdd37220e316f2297743dd4731614a50c16c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe9c350a5c554a387de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af7a3830e7092b01b119ea4e7e7f0e21527d622ca231e9e98720195368f8a9d3374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000000000009231feef3117197c7963c2ba910969f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a9201bc4b73b431df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21d24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a4ee271e35ed9eed636338f1835fc957729d63dc1bfc7b772cbe536c2d3aff27c22f9a2f876512616a5bdaf22a16e19d1b5f52abb40b433983d0cf50234de659c1a3997f1cfe8a87e08f87ce901000000caae1bcfdce33dae6adc260321702f239c25ab181390e7dc8c1e5b1cf3b4fef1cd5c44a89b5e5d8314e02f4673ded90bce9a4025b0232eec970f7aa17f175a14e8dc8de9bac0006b98a8283eee5665f3aede28228e0468dbcf8b776fe4c629d301183a7cba5adf77f23d31f9d5a183c08c3a86bbcd3705432ad3f96a7bbc4a13780cf9f4a5e3a9badca61367b377cc6f77e66febca94c8d9fe6fa1148a0b65c0f1b0d00aad352d7c7b5aea945185022f2c8cae549e77a290ebffb8c9dc99168e06461c7000"/2813], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) r2 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2}, {0x10000002, 0x0, 0xb, 0xc}]}, 0x94) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r2, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0x1fff8}], 0x1}, 0x80d1) 2.688176018s ago: executing program 0 (id=5250): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x10, 0x4, 0x4, 0x7}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001cc0)={r0, &(0x7f0000001c80)}, 0x20) r1 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x4000000) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(r3, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r4, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x9, 0x7c}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39c}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="18120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.558988322s ago: executing program 5 (id=5251): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0, 0x5}, 0x94) socket$kcm(0xa, 0x3, 0x87) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0xfe, 0xbd, 0x0, 0x0, 0x0, 0x1, 0x4401, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0xc8, 0x6, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x4, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x8020) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a00000006000000080000000800000040000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000f9ba28c88b25453d0200"/28], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=ANY=[@ANYBLOB="84190000953272344bdc92b8064000047ae16dec00", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001580)={0xe, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="20004000000000009500000000000000"], &(0x7f0000000480)='GPL\x00', 0x4, 0x1000, &(0x7f00000004c0)=""/4096}, 0x21) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0/file0\x00', 0x42) openat$cgroup_type(0xffffffffffffffff, &(0x7f00000003c0), 0x2, 0x0) r3 = socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) syz_open_procfs$namespace(0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$sock_attach_bpf(r3, 0x84, 0x82, &(0x7f0000000000), 0x8) 2.544459682s ago: executing program 4 (id=5252): r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}, 0x0, 0x0, 0x0, 0x0, 0x4e6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe80, 0x602f, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000021000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="18ed49fe42237b0e8195f2e000000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r8 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r8, 0x107, 0x12, &(0x7f00000008c0)=r7, 0x4) r9 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r9, 0x1, 0x3e, 0x0, 0x0) 2.478025584s ago: executing program 1 (id=5253): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000740), 0x2}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r0 = socket$kcm(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x40, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x3, 0x2d1}, 0x3088, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x80368, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000010c0)={0x3, 0xc, &(0x7f0000000700)=ANY=[], 0x0, 0x5}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000040000000000000000000000850000000800000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r7) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0xfe33) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x2e0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x30, 0x51, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x50) 2.336589019s ago: executing program 5 (id=5254): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000100000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2.182193033s ago: executing program 1 (id=5256): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18, 0x4}, 0x4008000) 2.152499454s ago: executing program 5 (id=5257): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, 0x0, 0x0) 2.104001396s ago: executing program 4 (id=5267): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000100000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.97642928s ago: executing program 1 (id=5258): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x21, 0x2, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d33, 0x8015, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x500, 0x1000000, 0x0, 0x0, 0x10, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="0600"}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x5ae) r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x7, r4, 0x0) socketpair(0x15, 0x5, 0x20, &(0x7f0000000500)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) socket$kcm(0x23, 0x5, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_int(r8, &(0x7f0000000040)=0x2d00, 0x1) 1.95972088s ago: executing program 4 (id=5259): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNATTACHFILTER(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="020000000400000008000000010000"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000040)={{r1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x10, &(0x7f0000000700)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.534629113s ago: executing program 0 (id=5260): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x21, 0x2, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d33, 0x8015, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x500, 0x1000000, 0x0, 0x0, 0x10, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="0600"}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x5ae) r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x7, r4, 0x0) socketpair(0x15, 0x5, 0x20, &(0x7f0000000500)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) r5 = socket$kcm(0x23, 0x5, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x10004000) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_int(r8, &(0x7f0000000040)=0x2d00, 0x1) 69.511838ms ago: executing program 4 (id=5261): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x2}, 0x8000, 0x0, 0x465e, 0x4, 0x3fe, 0x80000000, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000001900000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21bef5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e054"], &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000014000000140000000a00000007000000010000060400000000000001000000000061000000002e61"], 0x0, 0x36}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r1 = socket$kcm(0x23, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x113, 0x4, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffff9}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001cc0)={{r2}, &(0x7f0000001c40), &(0x7f0000001c80)=r3}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) r6 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r6, 0x6, 0x1f, 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000070000173f67fe0700"/32], &(0x7f0000000540)='GPL\x00', 0x1, 0xdd, &(0x7f0000000580)=""/221, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000680)={0x1, 0x2, 0x191, 0x401}, 0x10, 0x0, 0x0, 0x6, &(0x7f00000006c0)=[r2], &(0x7f0000000700)=[{0x2, 0x5, 0x5, 0x5}, {0x2, 0x3, 0x6, 0x8}, {0x0, 0x2, 0x7, 0x9}, {0x4, 0x4, 0xb, 0x6}, {0x0, 0x5, 0x3, 0xb}, {0x1, 0x4, 0xb, 0xb}]}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r7, 0x2000012, 0xe, 0x0, &(0x7f0000000300)="63eced8e46dc3faddf33c9e9b986", 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001d00)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8fff7ff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b70500000000e000720a23fe000000008500000012000000b70000000000000095000000000000004e6258941c823b7505608556ba4ababb42684e890d31ae450400373a0a5447a801b8c1c4f0c4bd97c6555e61345400f9bd42abeb9ade0105000000000000a21902ff07000094a2b51c21df74924f5436a6ed89b98f75e800230c49c90fe1336481f3b92a63336c36fcd745d61d7739c6554ca201000000bebbe8282f8b1e26407437a397bf8f50e87ed4d27adfd876bffc402887781979461c4363bc5c9b6202ea471428197ef88bc333fbcec0ea4334844d232279ae95a90fd41d528f58d305000000435883df6c10ce86188c92292b2d0226082960be682836bdff8b0971f2a5405e453228e7b1005bd73479358a90df3e481947de6453736aa572158af6ea63d6d418fbbd2bba050000001da000ef78df03000000d19913a5fb03c79dac2e489f68127892658115e7ffb588a71dffffff951b8535167ab8069a2c92a3aa18e22517000026637b4c34bf2d0aa304ed42bf70480e9e97203fd169411f37fddd1f7fbe16dbbc0f307bceb5064f388a0350c3dc928b0e638b1e2b2a9d25264233e5d45eb377f56b95241024dbe30f67191c2b56b70328d6d3215dfffe5d89af1d10599bd494d921d1fb2db99b6aba0fa978f41eb1d4c553e5a9326ed550c13f8dd36716a899a1e79234294707c5312b924d142c17b20bb80ee202222c03fa84ccc374e717f694018630366397266090a82343aedfbf7afe892390c2eb775b0d16073da2229958db05de7df6ab7600004000010000006d8081cb3bf251d906c00da0e23b50465f8394820be571e3592d0000c7ef10fdc462e7040e7074ec43aa461fc54401a76406db718d4efd6c1bd10ce1d087cf9bba461162555a95524c84df0952d32093082b7aa71304e0d2d9ec310d1b676b378a5879e47941de1a28c3a8f400000000000000000e032b7d2badd0bc6617a859b7ac273b6304555f664469cec152030f06cc0ca1765838eb5590264736fbccfc3a8f4e3b10daf6a275daf5db2dac7096fe8ac8876acaad043663b3b0fedb05e6d31408fa20140c9d2db1c59ac8a3ce28e489d67d87d3a107ccea3007f58f2c5017e8807107f79ac50cc1d4f546b4443d137eb706b71b1767a10cca7a7c82b76c96e874aff249f36329a6526b354b6e674b08f7ef492b804c4b08fb10de807d79fd782027318cd7632e22d2faa16209272b39b5ec8d239832ea02cc88e249a2e77753a58987547571fbc8de747faab724bebb6401412b496e078fcb6c78ab447e871b76a8b0506f49594aa1d610567e14d739a60ff3ce04d0d2e5681e787c7e1ad25467bb81f2f448128207fe07a83759ec30cf9e0a3fd3f2fcee97fe8d273f8e712a8a64eaf2d89a1fa44554357fcd7ab531ff7a41c27164fca430a62d015b477de61853f5ee2e25b00a63642ec32ece2ff3bb5883deb895f52a923b5c744d8dccdd6a09ded8b90f1eeda8e6e884a4f090edb6ab9fc8107846508d51f3735493d5860cf80200ce31b92eb3563d485b5a7d192092d7a9fd2bc67d305d1d4573aad5f6501d1cd27657ce17330402dacb78d72d776330711645eed7d4c292f4448733c0826c4eb950f3d40457f82d7f792d106518f6bde874aff9e2bea7d73f74bebeeacfc700000000000000000000d40d73be47803297db004264c8c70b7761b22a7114a078a87d63d63b0c9dcc263a5b773bfeba212abef4181ad9e4872e328c0f105d51e3d167a2b717051d7681ba04552eeba18a000000b22b50d76d85040c9000ea68a528049a60d5e26b20455194f4be3b8466fd66d0e6cefcff7891c485d61cb66f4076cd60a22733cb00cf7cc12ca7d9bb864c0e650236a79a5c85349a9b1e6bbc3bace197e72490c566431cd3a08e9d1b641c1ba1f661d01573b904c3fa1427370fa15cecd294ac21fefe3d161fdf58e8bc5957ef145839f4370176e1be88d2e3516a1998c1621a00b4438b85a4dfee6f61827a1e50e158038b037dfda3ffb35069e41fc740ae720800de53948f176c3c15f3a529c02434b920d87f12a6e3420a2fdcb3559e7a5b1ddbb06b7a5977f63bfac701e673bf626d126b213c92e7169a930beb8d76f9db34e8098bea301baa96916d6458c923866dc192928b320738d1b298fb55f2a64500000000000000000000000000509885a38d9d995a46817e7ff7acddcc5f9253c63f86baf33f92820c9ff497cf76b6482c3ab53fb6ecea6d220b91b99b2fb4279ab09ae0645ab92df309000000000000a4868411948f8e3e259b717d722a1eebd3f6860a17f1ae9e10a1178f6aef4951b192d13e9600c1f700ca7b1d127e451034469bf2a8f93dbae6ad8e932e431dc18323794156238625bb9c45c5a76a68a8646e701b29a71ffbd854f50f195823106a5625ff94221f1f04c72525b50aae69081de9626de9847bf53475d90642d9730101d80b1b0000000000000000822b0641698d60160d9157548302dd2636d12c431f96728ae4a45361e6d47a1c4a52d67c0f0a62585c09fcfd70d0f249f87c44b47283c1c6f2430d70c751e4ada9b646e6e7c1719faee476d88a2943c71a21db55b7497dd7ed385ac2e8cb916390a3a0ed52e7371e1a141e69afa07b46ac20f3521fb251b72c82ee1c7eb4f67c0deed5618d0db925ce7a7c50a99835544c540f5d528587d1a26e78df1bc9a8e4d90c57d0b8122eae7b23e4456624f5337c16c42648c7a3d0b799ad409befe0cbe2aa781ba826918df7aa80dff4f62258e54419629eb1d37de7f6a3512bd618781d1ad3a4d4b0da44df9f9a93f0487f79a9b16dfa6f68b06ce6a96ca344d194cded05702c2300d1a4f451b33830765f8131f6c28fada65701851bba089b8a8347900e72d68cea965feb6a06225dd3f0e135323a5bde3b43c9d242b73abf9e05336af040a4a6bb5918146393f1d50705c1d1e986bf2f690de51ee8727d37339df5391db535bb1e9bb3e5dadb6e5a2bb4faa2dcbc6ca9b40ac96e448b9dadeb08fc2cf3a960f22bf20b9e967b7a75687372b8e3edc543896c360674d901a7f56b07ba1479b46eea3d94026a9c7e670ab40bb2c1ca1a7c90299361239bef773140af974c7efc285a64633d21513481b3ac62dec9fa3e8ce6156d76b82baa145bc550b0ccbc0934ccfea45292caa2f0654fe18dc0669a4f2af9fa232a293ad94261f55675cc686db72783a6bacc0df6a1ea943ae266af112f35319980cd681811a369e0d03cf7d22bed7cbe1afe498b88942b1bf7edae441a0d0d88fce65cb4e848793a28cbd7373f6acd3b5a48c034e487750388929d37fa3165f205dab3be5f3e5781a84298687cbf02dcaf0e14a2b260293f349d076eb75a2ddc5382d106f0beea02aa45018fe36d1176cf7704383b6922d10dc80bc7feca3982ae232d4bb47c722c83a7cf6ee8832f038b072eb803a47cd7f753e80c9f6eedb8"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4008, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r8) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 65.131838ms ago: executing program 0 (id=5262): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x2, 0x0, 0x0, 0x0, 0x14120, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x2, 0x8, 0x3fe, 0x40, 0x0, 0x0, 0x200, 0x0, 0x4}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5d31, 0x60400, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x9, 0x5}, 0x4029, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffbf, 0xffffffffffffffff, 0xb) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x1}, 0x201, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x2100, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x7}, 0x4110, 0xfffffffffffffffe, 0x0, 0x5, 0x0, 0x9}, 0x0, 0x100000000000000, 0xffffffffffffffff, 0x8) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0xc) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000016c0)={'macvlan1\x00', @random="0100071e8145"}) 56.358168ms ago: executing program 5 (id=5263): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) socketpair(0x9, 0x80000, 0xf, &(0x7f00000000c0)) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) sendmsg$inet(r2, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4048884) sendmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18, 0x4}, 0x4008000) 55.628768ms ago: executing program 1 (id=5264): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) ioctl$TUNGETVNETLE(r0, 0x40047459, &(0x7f0000000180)) 0s ago: executing program 2 (id=5265): socket$kcm(0x21, 0x2, 0xa) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x540c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001}, 0x10c002, 0xac5d, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x3, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x6, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000860629c98500000015000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): T16602] RSP: 002b:00007f35b6045028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 715.137854][T16602] RAX: ffffffffffffffda RBX: 00007f35b5415fa0 RCX: 00007f35b519ce59 [ 715.145820][T16602] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 715.153780][T16602] RBP: 00007f35b6045090 R08: 0000000000000000 R09: 0000000000000000 [ 715.161740][T16602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 715.169699][T16602] R13: 00007f35b5416038 R14: 00007f35b5415fa0 R15: 00007ffd1e39c918 [ 715.177680][T16602] [ 715.460778][T16615] netlink: 'syz.1.4123': attribute type 10 has an invalid length. [ 715.476815][T16615] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4123'. [ 715.572111][T16618] netlink: 'syz.4.4128': attribute type 9 has an invalid length. [ 715.586559][T16618] netlink: 61951 bytes leftover after parsing attributes in process `syz.4.4128'. [ 715.645271][T16618] netlink: 'syz.4.4128': attribute type 10 has an invalid length. [ 715.664755][T16618] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4128'. [ 715.687569][T16618] device team0 entered promiscuous mode [ 715.693190][T16618] device team_slave_0 entered promiscuous mode [ 715.706108][T16618] device team_slave_1 entered promiscuous mode [ 715.724107][T16618] bond0: (slave team0): Releasing backup interface [ 715.752613][T16618] bridge0: port 3(team0) entered blocking state [ 715.766839][T16618] bridge0: port 3(team0) entered disabled state [ 716.085373][T16630] netlink: 'syz.5.4142': attribute type 3 has an invalid length. [ 716.414152][T16641] sctp: [Deprecated]: syz.4.4136 (pid 16641) Use of struct sctp_assoc_value in delayed_ack socket option. [ 716.414152][T16641] Use struct sctp_sack_info instead [ 716.813326][ T9] wlan1: Trigger new scan to find an IBSS to join [ 717.096759][T16670] FAULT_INJECTION: forcing a failure. [ 717.096759][T16670] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 717.101450][T16654] device syzkaller0 entered promiscuous mode [ 717.138192][T16663] netlink: 'syz.5.4144': attribute type 9 has an invalid length. [ 717.147528][T16663] __nla_validate_parse: 4 callbacks suppressed [ 717.147543][T16663] netlink: 61951 bytes leftover after parsing attributes in process `syz.5.4144'. [ 717.164873][T16670] CPU: 1 PID: 16670 Comm: syz.1.4146 Not tainted syzkaller #0 [ 717.172376][T16670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 717.182451][T16670] Call Trace: [ 717.185739][T16670] [ 717.188695][T16670] dump_stack_lvl+0x188/0x24e [ 717.193408][T16670] ? show_regs_print_info+0x12/0x12 [ 717.198625][T16670] ? load_image+0x410/0x410 [ 717.203153][T16670] ? __lock_acquire+0x7bd0/0x7bd0 [ 717.208188][T16670] ? snprintf+0xe5/0x140 [ 717.212442][T16670] should_fail_ex+0x390/0x4c0 [ 717.217129][T16670] _copy_to_user+0x2c/0x130 [ 717.221644][T16670] simple_read_from_buffer+0xe3/0x150 [ 717.227021][T16670] proc_fail_nth_read+0x1a6/0x220 [ 717.232051][T16670] ? proc_fault_inject_write+0x310/0x310 [ 717.237690][T16670] ? fsnotify_perm+0x248/0x550 [ 717.242454][T16670] ? proc_fault_inject_write+0x310/0x310 [ 717.248084][T16670] vfs_read+0x2db/0x960 [ 717.252249][T16670] ? kernel_read+0x1e0/0x1e0 [ 717.256841][T16670] ? __fget_files+0x28/0x460 [ 717.261431][T16670] ? __fget_files+0x3fc/0x460 [ 717.266117][T16670] ? __fdget_pos+0x2ae/0x360 [ 717.270708][T16670] ? ksys_read+0x70/0x260 [ 717.275042][T16670] ksys_read+0x14d/0x260 [ 717.279290][T16670] ? vfs_write+0x9a0/0x9a0 [ 717.283716][T16670] ? lockdep_hardirqs_on+0x94/0x140 [ 717.288916][T16670] do_syscall_64+0x4c/0xa0 [ 717.293330][T16670] ? clear_bhb_loop+0x60/0xb0 [ 717.298002][T16670] ? clear_bhb_loop+0x60/0xb0 [ 717.302676][T16670] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 717.308571][T16670] RIP: 0033:0x7f00b035d68e [ 717.312980][T16670] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 717.332581][T16670] RSP: 002b:00007f00b11c8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 717.340992][T16670] RAX: ffffffffffffffda RBX: 00007f00b11c96c0 RCX: 00007f00b035d68e [ 717.348959][T16670] RDX: 000000000000000f RSI: 00007f00b11c90a0 RDI: 0000000000000004 [ 717.356924][T16670] RBP: 00007f00b11c9090 R08: 0000000000000000 R09: 0000000000000000 [ 717.364890][T16670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 717.372858][T16670] R13: 00007f00b0616038 R14: 00007f00b0615fa0 R15: 00007ffc65f8a0a8 [ 717.380845][T16670] [ 717.563927][T16663] netlink: 'syz.5.4144': attribute type 10 has an invalid length. [ 717.573442][T16663] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4144'. [ 717.585042][T16663] device team0 entered promiscuous mode [ 717.593171][T16663] device team_slave_0 entered promiscuous mode [ 717.601160][T16663] device team_slave_1 entered promiscuous mode [ 717.609264][T16663] device bridge0 entered promiscuous mode [ 717.626144][T16663] 8021q: adding VLAN 0 to HW filter on device team0 [ 717.633623][T16663] bridge0: port 3(team0) entered blocking state [ 717.643293][T16663] bridge0: port 3(team0) entered disabled state [ 717.659150][T16677] netlink: 'syz.2.4147': attribute type 3 has an invalid length. [ 717.666834][T16663] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 717.694492][T16677] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.4147'. [ 717.986338][T11207] wlan1: Creating new IBSS network, BSSID 5a:e6:80:7c:22:02 [ 719.769972][T11182] wlan1: Trigger new scan to find an IBSS to join [ 720.069699][T16683] netlink: 184 bytes leftover after parsing attributes in process `syz.1.4148'. [ 720.094357][T11207] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 722.022717][T16743] device syzkaller0 entered promiscuous mode [ 722.058349][T16746] netlink: 'syz.2.4173': attribute type 9 has an invalid length. [ 722.083377][T16746] netlink: 61951 bytes leftover after parsing attributes in process `syz.2.4173'. [ 722.126591][T16754] netlink: 184 bytes leftover after parsing attributes in process `syz.4.4175'. [ 722.157924][T16753] netlink: 'syz.2.4173': attribute type 10 has an invalid length. [ 722.172659][T16753] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4173'. [ 722.184332][T16753] device team0 entered promiscuous mode [ 722.191779][T16753] device team_slave_0 entered promiscuous mode [ 722.208833][T16753] device team_slave_1 entered promiscuous mode [ 722.227734][T16753] bridge0: port 3(team0) entered blocking state [ 722.244036][T16753] bridge0: port 3(team0) entered disabled state [ 722.737150][T11207] wlan1: Trigger new scan to find an IBSS to join [ 724.261439][T16771] netlink: 'syz.4.4181': attribute type 41 has an invalid length. [ 725.088169][T16810] netlink: 'syz.1.4196': attribute type 21 has an invalid length. [ 725.145080][T16810] netlink: 'syz.1.4196': attribute type 15 has an invalid length. [ 725.321916][T16816] device syzkaller0 entered promiscuous mode [ 725.470246][T16822] netlink: 'syz.1.4201': attribute type 10 has an invalid length. [ 725.487987][T16822] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4201'. [ 725.767248][T11207] wlan1: Trigger new scan to find an IBSS to join [ 726.543477][T16851] FAULT_INJECTION: forcing a failure. [ 726.543477][T16851] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 726.598854][T16851] CPU: 1 PID: 16851 Comm: syz.2.4211 Not tainted syzkaller #0 [ 726.606383][T16851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 726.616453][T16851] Call Trace: [ 726.619748][T16851] [ 726.622691][T16851] dump_stack_lvl+0x188/0x24e [ 726.627398][T16851] ? show_regs_print_info+0x12/0x12 [ 726.632609][T16851] ? load_image+0x410/0x410 [ 726.637115][T16851] ? __lock_acquire+0x7bd0/0x7bd0 [ 726.642140][T16851] ? ktime_get+0x7b/0x270 [ 726.646472][T16851] should_fail_ex+0x390/0x4c0 [ 726.651154][T16851] _copy_from_user+0x2c/0x170 [ 726.655829][T16851] __sys_bpf+0x2ea/0x780 [ 726.660069][T16851] ? bpf_link_show_fdinfo+0x380/0x380 [ 726.665445][T16851] ? lock_chain_count+0x20/0x20 [ 726.670293][T16851] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 726.676274][T16851] __x64_sys_bpf+0x78/0x90 [ 726.680690][T16851] do_syscall_64+0x4c/0xa0 [ 726.685100][T16851] ? clear_bhb_loop+0x60/0xb0 [ 726.689769][T16851] ? clear_bhb_loop+0x60/0xb0 [ 726.694438][T16851] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 726.700329][T16851] RIP: 0033:0x7f3f83f9ce59 [ 726.704734][T16851] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 726.724420][T16851] RSP: 002b:00007f3f84e12028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 726.732828][T16851] RAX: ffffffffffffffda RBX: 00007f3f84215fa0 RCX: 00007f3f83f9ce59 [ 726.740792][T16851] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 726.748758][T16851] RBP: 00007f3f84e12090 R08: 0000000000000000 R09: 0000000000000000 [ 726.756723][T16851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 726.764688][T16851] R13: 00007f3f84216038 R14: 00007f3f84215fa0 R15: 00007ffe952cfb88 [ 726.772679][T16851] [ 726.867437][T11207] wlan1: Creating new IBSS network, BSSID 82:96:10:a3:d4:a2 [ 729.140299][T16857] netlink: 'syz.4.4212': attribute type 10 has an invalid length. [ 729.152522][T16857] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4212'. [ 729.172218][T16857] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 729.195728][T16875] FAULT_INJECTION: forcing a failure. [ 729.195728][T16875] name failslab, interval 1, probability 0, space 0, times 0 [ 729.235695][T16875] CPU: 0 PID: 16875 Comm: syz.2.4217 Not tainted syzkaller #0 [ 729.243227][T16875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 729.253303][T16875] Call Trace: [ 729.256595][T16875] [ 729.259532][T16875] dump_stack_lvl+0x188/0x24e [ 729.264230][T16875] ? show_regs_print_info+0x12/0x12 [ 729.269443][T16875] ? load_image+0x410/0x410 [ 729.273963][T16875] ? __might_sleep+0xd0/0xd0 [ 729.278562][T16875] ? __lock_acquire+0x7bd0/0x7bd0 [ 729.283608][T16875] should_fail_ex+0x390/0x4c0 [ 729.288304][T16875] should_failslab+0x5/0x20 [ 729.292819][T16875] slab_pre_alloc_hook+0x59/0x300 [ 729.297860][T16875] ? __lock_acquire+0x13e3/0x7bd0 [ 729.302905][T16875] ? kvmalloc_node+0x6c/0x180 [ 729.307689][T16875] __kmem_cache_alloc_node+0x4f/0x270 [ 729.313088][T16875] ? kvmalloc_node+0x6c/0x180 [ 729.317786][T16875] __kmalloc_node+0xa2/0x240 [ 729.322407][T16875] kvmalloc_node+0x6c/0x180 [ 729.326936][T16875] alloc_netdev_mqs+0x84/0xf10 [ 729.331725][T16875] ? udp_tunnel_nic_device_sync_work+0x820/0x820 [ 729.338166][T16875] __ip_tunnel_create+0x28d/0x450 [ 729.343223][T16875] ? ip_tunnel_init_net+0x7a0/0x7a0 [ 729.348447][T16875] ? bpf_lsm_capable+0x5/0x10 [ 729.353223][T16875] ? security_capable+0x85/0xb0 [ 729.358103][T16875] ip_tunnel_ctl+0x1006/0x18c0 [ 729.362901][T16875] vti_tunnel_ctl+0x1f5/0x380 [ 729.367598][T16875] ip_tunnel_siocdevprivate+0x134/0x1e0 [ 729.373171][T16875] ? ip_tunnel_update+0xc10/0xc10 [ 729.378227][T16875] ? full_name_hash+0x8e/0xe0 [ 729.382927][T16875] dev_ifsioc+0xa4a/0xd50 [ 729.387349][T16875] ? dev_ioctl+0xe80/0xe80 [ 729.391789][T16875] ? full_name_hash+0x8e/0xe0 [ 729.396485][T16875] ? dev_load+0x1d/0x1e0 [ 729.400748][T16875] ? dev_load+0x1d/0x1e0 [ 729.405005][T16875] dev_ioctl+0x5f8/0xe80 [ 729.409265][T16875] ? get_user_ifreq+0xc7/0x170 [ 729.414046][T16875] sock_ioctl+0x679/0x700 [ 729.418391][T16875] ? sock_poll+0x420/0x420 [ 729.422802][T16875] ? bpf_lsm_file_ioctl+0x5/0x10 [ 729.427728][T16875] ? security_file_ioctl+0x7c/0xa0 [ 729.432835][T16875] ? sock_poll+0x420/0x420 [ 729.437242][T16875] __se_sys_ioctl+0xfa/0x170 [ 729.441838][T16875] do_syscall_64+0x4c/0xa0 [ 729.446268][T16875] ? clear_bhb_loop+0x60/0xb0 [ 729.450952][T16875] ? clear_bhb_loop+0x60/0xb0 [ 729.455641][T16875] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 729.461560][T16875] RIP: 0033:0x7f3f83f9ce59 [ 729.465977][T16875] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 729.485578][T16875] RSP: 002b:00007f3f84e12028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 729.493997][T16875] RAX: ffffffffffffffda RBX: 00007f3f84215fa0 RCX: 00007f3f83f9ce59 [ 729.501970][T16875] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000004 [ 729.509934][T16875] RBP: 00007f3f84e12090 R08: 0000000000000000 R09: 0000000000000000 [ 729.517902][T16875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 729.525869][T16875] R13: 00007f3f84216038 R14: 00007f3f84215fa0 R15: 00007ffe952cfb88 [ 729.533847][T16875] [ 729.784259][T16895] netlink: 'syz.1.4221': attribute type 21 has an invalid length. [ 729.853748][T16895] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4221'. [ 730.194007][T16892] device syzkaller0 entered promiscuous mode [ 731.040757][T16931] netlink: 129384 bytes leftover after parsing attributes in process `syz.5.4234'. [ 733.711935][T16922] netlink: 'syz.1.4230': attribute type 10 has an invalid length. [ 733.722190][T16922] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4230'. [ 733.845935][ T4290] Bluetooth: hci2: command 0x0406 tx timeout [ 734.669243][T16996] sock: sock_set_timeout: `syz.1.4260' (pid 16996) tries to set negative timeout [ 734.779615][T16998] netlink: 'syz.0.4262': attribute type 10 has an invalid length. [ 734.808666][T16998] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4262'. [ 735.139465][T17011] FAULT_INJECTION: forcing a failure. [ 735.139465][T17011] name failslab, interval 1, probability 0, space 0, times 0 [ 735.234260][T17011] CPU: 1 PID: 17011 Comm: syz.0.4264 Not tainted syzkaller #0 [ 735.241797][T17011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 735.251867][T17011] Call Trace: [ 735.255159][T17011] [ 735.258101][T17011] dump_stack_lvl+0x188/0x24e [ 735.262806][T17011] ? show_regs_print_info+0x12/0x12 [ 735.268026][T17011] ? load_image+0x410/0x410 [ 735.272576][T17011] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 735.278579][T17011] ? lock_chain_count+0x20/0x20 [ 735.283450][T17011] should_fail_ex+0x390/0x4c0 [ 735.288161][T17011] should_failslab+0x5/0x20 [ 735.292678][T17011] slab_pre_alloc_hook+0x59/0x300 [ 735.297717][T17011] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 735.303898][T17011] kmem_cache_alloc+0x56/0x2f0 [ 735.308679][T17011] ? skb_clone+0x1e7/0x370 [ 735.313113][T17011] skb_clone+0x1e7/0x370 [ 735.317375][T17011] bpf_clone_redirect+0x169/0x4a0 [ 735.322436][T17011] bpf_prog_208b094576c80b22+0x56/0x5b [ 735.327925][T17011] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 735.333929][T17011] ? __lock_acquire+0x7bd0/0x7bd0 [ 735.338987][T17011] ? lock_chain_count+0x20/0x20 [ 735.343866][T17011] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 735.350120][T17011] ? lockdep_hardirqs_on+0x94/0x140 [ 735.355335][T17011] ? ktime_get+0x7b/0x270 [ 735.359690][T17011] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 735.365949][T17011] ? ktime_get_real_ts64+0x440/0x440 [ 735.371253][T17011] ? read_lock_is_recursive+0x10/0x10 [ 735.376657][T17011] ? __cant_sleep+0x220/0x220 [ 735.381355][T17011] ? ktime_get+0x247/0x270 [ 735.385798][T17011] bpf_test_run+0x2b6/0x830 [ 735.390343][T17011] ? dst_hold+0xb0/0xb0 [ 735.394525][T17011] ? bpf_prog_test_run_skb+0x766/0x18e0 [ 735.400095][T17011] bpf_prog_test_run_skb+0xdaf/0x18e0 [ 735.405508][T17011] ? cpu_online+0xa0/0xa0 [ 735.409853][T17011] bpf_prog_test_run+0x31c/0x390 [ 735.414815][T17011] __sys_bpf+0x62b/0x780 [ 735.419088][T17011] ? bpf_link_show_fdinfo+0x380/0x380 [ 735.424495][T17011] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 735.430713][T17011] __x64_sys_bpf+0x78/0x90 [ 735.435150][T17011] do_syscall_64+0x4c/0xa0 [ 735.439588][T17011] ? clear_bhb_loop+0x60/0xb0 [ 735.444288][T17011] ? clear_bhb_loop+0x60/0xb0 [ 735.448983][T17011] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 735.454897][T17011] RIP: 0033:0x7fc31ef9ce59 [ 735.459326][T17011] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 735.478943][T17011] RSP: 002b:00007fc31d1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 735.487373][T17011] RAX: ffffffffffffffda RBX: 00007fc31f215fa0 RCX: 00007fc31ef9ce59 [ 735.495358][T17011] RDX: 000000000000003d RSI: 0000200000000080 RDI: 000000000000000a [ 735.503337][T17011] RBP: 00007fc31d1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 735.511316][T17011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 735.519299][T17011] R13: 00007fc31f216038 R14: 00007fc31f215fa0 R15: 00007fffbb446558 [ 735.527302][T17011] [ 735.879746][T17003] device syzkaller0 entered promiscuous mode [ 736.508244][T17036] netlink: 'syz.1.4273': attribute type 29 has an invalid length. [ 738.076725][T17028] team0: Port device team_slave_0 removed [ 738.103081][T17036] netlink: 'syz.1.4273': attribute type 29 has an invalid length. [ 738.115231][T17042] netlink: 'syz.4.4275': attribute type 9 has an invalid length. [ 738.123380][T17042] netlink: 61951 bytes leftover after parsing attributes in process `syz.4.4275'. [ 738.135577][T17044] netlink: 'syz.2.4274': attribute type 10 has an invalid length. [ 738.155489][T17044] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4274'. [ 738.170695][T17044] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 738.230869][T17050] netlink: 'syz.4.4275': attribute type 10 has an invalid length. [ 738.250328][T17050] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4275'. [ 738.279713][T17050] bridge0: port 3(team0) entered blocking state [ 738.286297][T17050] bridge0: port 3(team0) entered forwarding state [ 738.306553][T17050] 8021q: adding VLAN 0 to HW filter on device team0 [ 738.492616][T17065] netlink: 'syz.1.4280': attribute type 16 has an invalid length. [ 738.511341][T17065] netlink: 'syz.1.4280': attribute type 3 has an invalid length. [ 738.528338][T17065] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4280'. [ 738.611774][T17068] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.4281'. [ 738.643300][T17068] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 738.659747][T17068] dvmrp1: linktype set to 768 [ 739.293079][T17089] netlink: 'syz.1.4287': attribute type 29 has an invalid length. [ 739.475043][T17087] device syzkaller0 entered promiscuous mode [ 739.498915][T17089] netlink: 'syz.1.4287': attribute type 29 has an invalid length. [ 739.515740][T17094] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4289'. [ 739.525307][T17094] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 742.218866][T17101] validate_nla: 2 callbacks suppressed [ 742.218883][T17101] netlink: 'syz.0.4291': attribute type 9 has an invalid length. [ 742.234796][T17101] netlink: 61951 bytes leftover after parsing attributes in process `syz.0.4291'. [ 742.245338][T17103] netlink: 'syz.1.4292': attribute type 29 has an invalid length. [ 742.259868][T17110] netlink: 'syz.0.4291': attribute type 10 has an invalid length. [ 742.269245][T17110] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4291'. [ 742.281101][T17110] device team0 entered promiscuous mode [ 742.296236][T17110] device team_slave_1 entered promiscuous mode [ 742.302585][T17110] device wlan1 entered promiscuous mode [ 742.329551][T17110] bridge0: port 4(team0) entered blocking state [ 742.362296][T17110] bridge0: port 4(team0) entered disabled state [ 742.381681][T17110] bridge0: port 4(team0) entered blocking state [ 742.388082][T17110] bridge0: port 4(team0) entered forwarding state [ 742.399421][T17120] netlink: 'syz.4.4296': attribute type 21 has an invalid length. [ 742.408560][T17120] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4296'. [ 742.610593][T17140] netlink: 'syz.2.4304': attribute type 10 has an invalid length. [ 742.641437][T17140] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4304'. [ 742.698960][T17140] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 742.934396][T17158] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4308'. [ 743.509082][T17172] device syzkaller0 entered promiscuous mode [ 743.524937][T17180] netlink: 'syz.1.4316': attribute type 9 has an invalid length. [ 743.571105][T17180] netlink: 61951 bytes leftover after parsing attributes in process `syz.1.4316'. [ 746.098781][T17180] netlink: 'syz.1.4316': attribute type 10 has an invalid length. [ 746.107965][T17180] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4316'. [ 746.122529][T17199] netlink: 'syz.4.4320': attribute type 10 has an invalid length. [ 746.131695][T17199] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4320'. [ 746.144376][T17199] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 747.149311][T17249] device syzkaller0 entered promiscuous mode [ 747.162849][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.169235][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.987547][ T9] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 749.020259][T17261] netlink: 'syz.0.4343': attribute type 25 has an invalid length. [ 749.032081][T17261] netlink: 'syz.0.4343': attribute type 9 has an invalid length. [ 749.040212][T17261] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4343'. [ 749.052016][T17262] netlink: 'syz.5.4344': attribute type 10 has an invalid length. [ 749.060342][T17262] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4344'. [ 749.076360][T17262] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 749.109241][T17265] netlink: 'syz.1.4345': attribute type 9 has an invalid length. [ 749.126031][T17265] netlink: 61951 bytes leftover after parsing attributes in process `syz.1.4345'. [ 749.151087][T17268] netlink: 'syz.1.4345': attribute type 10 has an invalid length. [ 749.162159][T17268] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4345'. [ 749.513756][T17295] netlink: 'syz.5.4363': attribute type 9 has an invalid length. [ 749.525506][T17295] netlink: 61951 bytes leftover after parsing attributes in process `syz.5.4363'. [ 749.575086][T17295] netlink: 'syz.5.4363': attribute type 10 has an invalid length. [ 749.593458][T17295] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4363'. [ 749.615793][T17295] bridge0: port 3(team0) entered blocking state [ 749.637802][T17295] bridge0: port 3(team0) entered disabled state [ 749.673981][T17295] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 750.068000][ T4290] Bluetooth: hci0: ISO packet for unknown connection handle 62 [ 750.120989][T17306] device syzkaller0 entered promiscuous mode [ 750.175917][T17314] netlink: 'syz.2.4358': attribute type 10 has an invalid length. [ 750.194027][T17314] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4358'. [ 750.217858][T17314] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 752.363422][T11197] tipc: Subscription rejected, illegal request [ 752.686401][T17329] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 752.692551][T17329] syzkaller1: linktype set to 0 [ 752.698538][T17327] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4366'. [ 753.250331][T17391] FAULT_INJECTION: forcing a failure. [ 753.250331][T17391] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 753.313479][T17391] CPU: 0 PID: 17391 Comm: syz.1.4389 Not tainted syzkaller #0 [ 753.321003][T17391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 753.331086][T17391] Call Trace: [ 753.334381][T17391] [ 753.337333][T17391] dump_stack_lvl+0x188/0x24e [ 753.342044][T17391] ? show_regs_print_info+0x12/0x12 [ 753.347271][T17391] ? load_image+0x410/0x410 [ 753.351802][T17391] ? __lock_acquire+0x7bd0/0x7bd0 [ 753.356853][T17391] ? snprintf+0xe5/0x140 [ 753.361123][T17391] should_fail_ex+0x390/0x4c0 [ 753.365831][T17391] _copy_to_user+0x2c/0x130 [ 753.370359][T17391] simple_read_from_buffer+0xe3/0x150 [ 753.375757][T17391] proc_fail_nth_read+0x1a6/0x220 [ 753.380803][T17391] ? proc_fault_inject_write+0x310/0x310 [ 753.386462][T17391] ? fsnotify_perm+0x248/0x550 [ 753.391248][T17391] ? proc_fault_inject_write+0x310/0x310 [ 753.396902][T17391] vfs_read+0x2db/0x960 [ 753.401088][T17391] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 753.407285][T17391] ? kernel_read+0x1e0/0x1e0 [ 753.411907][T17391] ? __fget_files+0x28/0x460 [ 753.416536][T17391] ? __fget_files+0x404/0x460 [ 753.421241][T17391] ? __fdget_pos+0x2ae/0x360 [ 753.425861][T17391] ? ksys_read+0x70/0x260 [ 753.430219][T17391] ksys_read+0x14d/0x260 [ 753.434492][T17391] ? vfs_write+0x9a0/0x9a0 [ 753.438938][T17391] ? lockdep_hardirqs_on+0x94/0x140 [ 753.444169][T17391] do_syscall_64+0x4c/0xa0 [ 753.448609][T17391] ? clear_bhb_loop+0x60/0xb0 [ 753.453312][T17391] ? clear_bhb_loop+0x60/0xb0 [ 753.458018][T17391] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 753.463943][T17391] RIP: 0033:0x7f00b035d68e [ 753.468381][T17391] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 753.488016][T17391] RSP: 002b:00007f00b11c8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 753.496465][T17391] RAX: ffffffffffffffda RBX: 00007f00b11c96c0 RCX: 00007f00b035d68e [ 753.504465][T17391] RDX: 000000000000000f RSI: 00007f00b11c90a0 RDI: 000000000000000d [ 753.512464][T17391] RBP: 00007f00b11c9090 R08: 0000000000000000 R09: 0000000000000000 [ 753.520461][T17391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 753.528456][T17391] R13: 00007f00b0616038 R14: 00007f00b0615fa0 R15: 00007ffc65f8a0a8 [ 753.536469][T17391] [ 753.615408][T17398] netlink: 'syz.2.4391': attribute type 9 has an invalid length. [ 753.626979][T17398] netlink: 61951 bytes leftover after parsing attributes in process `syz.2.4391'. [ 753.668794][T17398] netlink: 'syz.2.4391': attribute type 10 has an invalid length. [ 753.683207][T17398] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4391'. [ 754.201021][T17409] netlink: 'syz.1.4393': attribute type 29 has an invalid length. [ 754.266311][T17409] netlink: 'syz.1.4393': attribute type 29 has an invalid length. [ 754.274501][T17415] netlink: 'syz.1.4393': attribute type 29 has an invalid length. [ 754.679198][T17436] netlink: 'syz.2.4403': attribute type 10 has an invalid length. [ 754.696541][T17436] __nla_validate_parse: 1 callbacks suppressed [ 754.696574][T17436] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4403'. [ 754.731615][T17436] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 754.773979][T17439] netlink: 'syz.1.4405': attribute type 10 has an invalid length. [ 754.821397][T17439] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4405'. [ 754.870217][T17439] bridge0: port 4(veth0_vlan) entered blocking state [ 754.913455][T17439] bridge0: port 4(veth0_vlan) entered disabled state [ 754.927449][T17439] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 755.159704][T17450] netlink: 'syz.1.4407': attribute type 9 has an invalid length. [ 755.189825][T17450] netlink: 61951 bytes leftover after parsing attributes in process `syz.1.4407'. [ 755.283024][T17450] netlink: 'syz.1.4407': attribute type 10 has an invalid length. [ 755.311524][T17450] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4407'. [ 756.300533][T17477] netlink: 194236 bytes leftover after parsing attributes in process `syz.2.4416'. [ 756.403623][T17477] netlink: zone id is out of range [ 756.475408][T17477] netlink: zone id is out of range [ 756.506379][T17477] netlink: zone id is out of range [ 756.514200][T17477] netlink: zone id is out of range [ 756.549551][T17477] netlink: get zone limit has 8 unknown bytes [ 756.849769][T17496] FAULT_INJECTION: forcing a failure. [ 756.849769][T17496] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 756.891688][T17496] CPU: 0 PID: 17496 Comm: syz.2.4422 Not tainted syzkaller #0 [ 756.899222][T17496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 756.909309][T17496] Call Trace: [ 756.912607][T17496] [ 756.915560][T17496] dump_stack_lvl+0x188/0x24e [ 756.920280][T17496] ? show_regs_print_info+0x12/0x12 [ 756.925507][T17496] ? load_image+0x410/0x410 [ 756.930048][T17496] ? __lock_acquire+0x7bd0/0x7bd0 [ 756.935108][T17496] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 756.940869][T17496] should_fail_ex+0x390/0x4c0 [ 756.945586][T17496] _copy_from_user+0x2c/0x170 [ 756.950302][T17496] ___sys_sendmsg+0x1c3/0x360 [ 756.955014][T17496] ? __sys_sendmsg+0x2a0/0x2a0 [ 756.959848][T17496] ? __lock_acquire+0x7bd0/0x7bd0 [ 756.964954][T17496] __se_sys_sendmsg+0x1c3/0x2b0 [ 756.969836][T17496] ? __x64_sys_sendmsg+0x80/0x80 [ 756.974830][T17496] ? lockdep_hardirqs_on+0x94/0x140 [ 756.980067][T17496] do_syscall_64+0x4c/0xa0 [ 756.984508][T17496] ? clear_bhb_loop+0x60/0xb0 [ 756.989211][T17496] ? clear_bhb_loop+0x60/0xb0 [ 756.993927][T17496] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 756.999858][T17496] RIP: 0033:0x7f3f83f9ce59 [ 757.002577][T17499] netlink: 'syz.1.4421': attribute type 6 has an invalid length. [ 757.004279][T17496] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 757.004301][T17496] RSP: 002b:00007f3f84e12028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 757.004329][T17496] RAX: ffffffffffffffda RBX: 00007f3f84215fa0 RCX: 00007f3f83f9ce59 [ 757.048079][T17496] RDX: 0000000020004044 RSI: 0000200000000540 RDI: 0000000000000004 [ 757.056080][T17496] RBP: 00007f3f84e12090 R08: 0000000000000000 R09: 0000000000000000 [ 757.064080][T17496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 757.072082][T17496] R13: 00007f3f84216038 R14: 00007f3f84215fa0 R15: 00007ffe952cfb88 [ 757.080124][T17496] [ 757.101614][T11203] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 757.194668][T17502] netlink: 'syz.0.4423': attribute type 9 has an invalid length. [ 757.204951][T17502] netlink: 61951 bytes leftover after parsing attributes in process `syz.0.4423'. [ 757.274236][T17502] netlink: 'syz.0.4423': attribute type 10 has an invalid length. [ 757.286050][T17502] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4423'. [ 758.231456][T17517] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4429'. [ 758.350345][T17517] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 758.949527][T17536] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4435'. [ 759.127040][T17540] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4435'. [ 760.281172][T17559] FAULT_INJECTION: forcing a failure. [ 760.281172][T17559] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 760.303318][T17562] FAULT_INJECTION: forcing a failure. [ 760.303318][T17562] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 760.319922][T17559] CPU: 1 PID: 17559 Comm: syz.4.4444 Not tainted syzkaller #0 [ 760.327428][T17559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 760.337512][T17559] Call Trace: [ 760.340809][T17559] [ 760.343746][T17559] dump_stack_lvl+0x188/0x24e [ 760.348444][T17559] ? show_regs_print_info+0x12/0x12 [ 760.353660][T17559] ? load_image+0x410/0x410 [ 760.358182][T17559] ? __might_fault+0xa6/0x120 [ 760.362879][T17559] should_fail_ex+0x390/0x4c0 [ 760.367575][T17559] copyin+0x1b/0x120 [ 760.371501][T17559] _copy_from_iter+0x447/0x1130 [ 760.376373][T17559] ? copyout_mc+0x110/0x110 [ 760.380892][T17559] ? __virt_addr_valid+0x188/0x540 [ 760.386020][T17559] ? __virt_addr_valid+0x188/0x540 [ 760.391143][T17559] ? __virt_addr_valid+0x467/0x540 [ 760.396267][T17559] ? __phys_addr_symbol+0x2b/0x70 [ 760.401307][T17559] ? __check_object_size+0x4f6/0xa70 [ 760.406603][T17559] netlink_sendmsg+0x755/0xbd0 [ 760.411383][T17559] ? netlink_getsockopt+0x550/0x550 [ 760.416597][T17559] ? aa_sock_msg_perm+0x94/0x150 [ 760.421547][T17559] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 760.426836][T17559] ? security_socket_sendmsg+0x7c/0xa0 [ 760.432299][T17559] ? netlink_getsockopt+0x550/0x550 [ 760.437513][T17559] ____sys_sendmsg+0x5ed/0x9a0 [ 760.442294][T17559] ? __sys_sendmsg_sock+0x30/0x30 [ 760.447323][T17559] ? __import_iovec+0x306/0x510 [ 760.452189][T17559] ? import_iovec+0x6f/0xa0 [ 760.456704][T17559] ___sys_sendmsg+0x2a2/0x360 [ 760.461386][T17559] ? perf_trace_preemptirq_template+0x268/0x320 [ 760.467738][T17559] ? __sys_sendmsg+0x2a0/0x2a0 [ 760.472526][T17559] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 760.478718][T17559] __se_sys_sendmsg+0x1c3/0x2b0 [ 760.483580][T17559] ? perf_trace_preemptirq_template+0x268/0x320 [ 760.489839][T17559] ? __x64_sys_sendmsg+0x80/0x80 [ 760.494796][T17559] ? lockdep_hardirqs_on+0x94/0x140 [ 760.500009][T17559] do_syscall_64+0x4c/0xa0 [ 760.504432][T17559] ? clear_bhb_loop+0x60/0xb0 [ 760.509118][T17559] ? clear_bhb_loop+0x60/0xb0 [ 760.513804][T17559] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 760.519708][T17559] RIP: 0033:0x7f35b519ce59 [ 760.524129][T17559] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 760.543755][T17559] RSP: 002b:00007f35b6045028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 760.552178][T17559] RAX: ffffffffffffffda RBX: 00007f35b5415fa0 RCX: 00007f35b519ce59 [ 760.560158][T17559] RDX: 0200000000000000 RSI: 0000200000000000 RDI: 000000000000000d [ 760.568134][T17559] RBP: 00007f35b6045090 R08: 0000000000000000 R09: 0000000000000000 [ 760.576109][T17559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 760.584087][T17559] R13: 00007f35b5416038 R14: 00007f35b5415fa0 R15: 00007ffd1e39c918 [ 760.592079][T17559] [ 760.606366][T17562] CPU: 0 PID: 17562 Comm: syz.1.4445 Not tainted syzkaller #0 [ 760.613889][T17562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 760.623972][T17562] Call Trace: [ 760.627257][T17562] [ 760.630188][T17562] dump_stack_lvl+0x188/0x24e [ 760.634876][T17562] ? show_regs_print_info+0x12/0x12 [ 760.640084][T17562] ? load_image+0x410/0x410 [ 760.644612][T17562] ? __lock_acquire+0x7bd0/0x7bd0 [ 760.649651][T17562] should_fail_ex+0x390/0x4c0 [ 760.654342][T17562] _copy_to_user+0x2c/0x130 [ 760.658856][T17562] map_get_next_key+0x4f5/0x620 [ 760.663713][T17562] ? map_get_next_key+0x2cf/0x620 [ 760.668750][T17562] __sys_bpf+0x466/0x780 [ 760.673002][T17562] ? bpf_link_show_fdinfo+0x380/0x380 [ 760.678401][T17562] ? lock_chain_count+0x20/0x20 [ 760.683274][T17562] __x64_sys_bpf+0x78/0x90 [ 760.687698][T17562] do_syscall_64+0x4c/0xa0 [ 760.692112][T17562] ? clear_bhb_loop+0x60/0xb0 [ 760.696789][T17562] ? clear_bhb_loop+0x60/0xb0 [ 760.701467][T17562] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 760.707363][T17562] RIP: 0033:0x7f00b039ce59 [ 760.711778][T17562] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 760.731382][T17562] RSP: 002b:00007f00b11c9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 760.739803][T17562] RAX: ffffffffffffffda RBX: 00007f00b0615fa0 RCX: 00007f00b039ce59 [ 760.747771][T17562] RDX: 0000000000000020 RSI: 0000200000000300 RDI: 0000000000000004 [ 760.755742][T17562] RBP: 00007f00b11c9090 R08: 0000000000000000 R09: 0000000000000000 [ 760.763710][T17562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 760.771681][T17562] R13: 00007f00b0616038 R14: 00007f00b0615fa0 R15: 00007ffc65f8a0a8 [ 760.779672][T17562] [ 760.950146][T17566] validate_nla: 1 callbacks suppressed [ 760.950164][T17566] netlink: 'syz.0.4447': attribute type 10 has an invalid length. [ 760.995990][T17566] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4447'. [ 761.035570][T17574] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4450'. [ 761.295118][T17577] netlink: 'syz.5.4450': attribute type 29 has an invalid length. [ 761.321961][T17581] device syzkaller0 entered promiscuous mode [ 761.354826][T17577] netlink: 'syz.5.4450': attribute type 29 has an invalid length. [ 761.376159][T17580] netlink: 'syz.5.4450': attribute type 29 has an invalid length. [ 761.410063][T17581] netlink: 'syz.1.4451': attribute type 10 has an invalid length. [ 761.464058][T17581] team0: Device ipvlan1 failed to register rx_handler [ 761.935272][T17601] FAULT_INJECTION: forcing a failure. [ 761.935272][T17601] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 761.967714][T17601] CPU: 1 PID: 17601 Comm: syz.2.4458 Not tainted syzkaller #0 [ 761.975237][T17601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 761.985305][T17601] Call Trace: [ 761.988580][T17601] [ 761.991499][T17601] dump_stack_lvl+0x188/0x24e [ 761.996184][T17601] ? show_regs_print_info+0x12/0x12 [ 762.001407][T17601] ? load_image+0x410/0x410 [ 762.005941][T17601] ? __lock_acquire+0x7bd0/0x7bd0 [ 762.011002][T17601] should_fail_ex+0x390/0x4c0 [ 762.015714][T17601] _copy_from_user+0x2c/0x170 [ 762.020413][T17601] ___sys_sendmsg+0x1c3/0x360 [ 762.025088][T17601] ? __sys_sendmsg+0x2a0/0x2a0 [ 762.029857][T17601] ? __lock_acquire+0x7bd0/0x7bd0 [ 762.034909][T17601] __se_sys_sendmsg+0x1c3/0x2b0 [ 762.039777][T17601] ? ct_nmi_exit+0x145/0x1c0 [ 762.044363][T17601] ? __x64_sys_sendmsg+0x80/0x80 [ 762.049300][T17601] ? lockdep_hardirqs_on+0x94/0x140 [ 762.054498][T17601] do_syscall_64+0x4c/0xa0 [ 762.058910][T17601] ? clear_bhb_loop+0x60/0xb0 [ 762.063583][T17601] ? clear_bhb_loop+0x60/0xb0 [ 762.068254][T17601] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 762.074147][T17601] RIP: 0033:0x7f3f83f9ce59 [ 762.078556][T17601] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 762.098161][T17601] RSP: 002b:00007f3f84e12028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 762.106599][T17601] RAX: ffffffffffffffda RBX: 00007f3f84215fa0 RCX: 00007f3f83f9ce59 [ 762.114568][T17601] RDX: 000000000000c900 RSI: 0000200000001180 RDI: 0000000000000003 [ 762.122546][T17601] RBP: 00007f3f84e12090 R08: 0000000000000000 R09: 0000000000000000 [ 762.130525][T17601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 762.138496][T17601] R13: 00007f3f84216038 R14: 00007f3f84215fa0 R15: 00007ffe952cfb88 [ 762.146479][T17601] [ 764.033779][T17614] netlink: 'syz.0.4463': attribute type 10 has an invalid length. [ 764.053151][T17614] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4463'. [ 764.102041][T17619] netlink: 'syz.2.4462': attribute type 13 has an invalid length. [ 764.144582][T17619] netlink: 172 bytes leftover after parsing attributes in process `syz.2.4462'. [ 764.158397][T17622] FAULT_INJECTION: forcing a failure. [ 764.158397][T17622] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 764.186102][T17622] CPU: 0 PID: 17622 Comm: syz.0.4464 Not tainted syzkaller #0 [ 764.193624][T17622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 764.203709][T17622] Call Trace: [ 764.207000][T17622] [ 764.209945][T17622] dump_stack_lvl+0x188/0x24e [ 764.214648][T17622] ? show_regs_print_info+0x12/0x12 [ 764.219874][T17622] ? load_image+0x410/0x410 [ 764.224410][T17622] ? __lock_acquire+0x7bd0/0x7bd0 [ 764.229466][T17622] ? zone_statistics+0x170/0x170 [ 764.234441][T17622] should_fail_ex+0x390/0x4c0 [ 764.239147][T17622] _copy_from_user+0x2c/0x170 [ 764.243853][T17622] bpf_prog_test_run_xdp+0xc26/0xf80 [ 764.249161][T17622] ? __lock_acquire+0x7bd0/0x7bd0 [ 764.254202][T17622] ? dev_put+0x80/0x80 [ 764.258278][T17622] ? dev_put+0x80/0x80 [ 764.262341][T17622] bpf_prog_test_run+0x31c/0x390 [ 764.267281][T17622] __sys_bpf+0x62b/0x780 [ 764.271523][T17622] ? bpf_link_show_fdinfo+0x380/0x380 [ 764.276906][T17622] ? lock_chain_count+0x20/0x20 [ 764.281761][T17622] __x64_sys_bpf+0x78/0x90 [ 764.286174][T17622] do_syscall_64+0x4c/0xa0 [ 764.290585][T17622] ? clear_bhb_loop+0x60/0xb0 [ 764.295253][T17622] ? clear_bhb_loop+0x60/0xb0 [ 764.299925][T17622] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 764.305819][T17622] RIP: 0033:0x7fc31ef9ce59 [ 764.310227][T17622] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 764.329826][T17622] RSP: 002b:00007fc31d1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 764.338237][T17622] RAX: ffffffffffffffda RBX: 00007fc31f215fa0 RCX: 00007fc31ef9ce59 [ 764.346203][T17622] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 764.354168][T17622] RBP: 00007fc31d1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 764.362133][T17622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 764.370099][T17622] R13: 00007fc31f216038 R14: 00007fc31f215fa0 R15: 00007fffbb446558 [ 764.378078][T17622] [ 764.418583][T17619] erspan0: refused to change device tx_queue_len [ 764.807872][T17637] netlink: 'syz.5.4471': attribute type 9 has an invalid length. [ 764.833357][T17637] netlink: 61951 bytes leftover after parsing attributes in process `syz.5.4471'. [ 764.900670][T17637] netlink: 'syz.5.4471': attribute type 10 has an invalid length. [ 764.938494][T17637] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4471'. [ 764.985087][T17637] bridge0: port 3(team0) entered blocking state [ 765.015971][T17637] bridge0: port 3(team0) entered disabled state [ 765.027499][T17637] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 765.069612][T17642] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4472'. [ 765.090526][T17653] netlink: 'syz.4.4475': attribute type 10 has an invalid length. [ 765.108220][T17653] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4475'. [ 765.136457][T17653] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 765.156043][T17654] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4472'. [ 765.389734][T17660] FAULT_INJECTION: forcing a failure. [ 765.389734][T17660] name failslab, interval 1, probability 0, space 0, times 0 [ 765.458078][T17660] CPU: 0 PID: 17660 Comm: syz.4.4477 Not tainted syzkaller #0 [ 765.465606][T17660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 765.475684][T17660] Call Trace: [ 765.478977][T17660] [ 765.481916][T17660] dump_stack_lvl+0x188/0x24e [ 765.486621][T17660] ? show_regs_print_info+0x12/0x12 [ 765.491836][T17660] ? load_image+0x410/0x410 [ 765.496365][T17660] ? __might_sleep+0xd0/0xd0 [ 765.500972][T17660] ? __lock_acquire+0x7bd0/0x7bd0 [ 765.506023][T17660] should_fail_ex+0x390/0x4c0 [ 765.510726][T17660] should_failslab+0x5/0x20 [ 765.515254][T17660] slab_pre_alloc_hook+0x59/0x300 [ 765.520307][T17660] kmem_cache_alloc_node+0x5a/0x310 [ 765.525545][T17660] ? __alloc_skb+0xf9/0x7d0 [ 765.530086][T17660] __alloc_skb+0xf9/0x7d0 [ 765.534445][T17660] netlink_ack+0x373/0x1160 [ 765.538976][T17660] ? ref_tracker_free+0x682/0x830 [ 765.544028][T17660] ? refcount_inc+0x70/0x70 [ 765.548552][T17660] ? netlink_dump+0xcd0/0xcd0 [ 765.553240][T17660] ? __copy_skb_header+0x3ba/0x4f0 [ 765.558373][T17660] ? __skb_clone+0x446/0x6c0 [ 765.562992][T17660] netlink_rcv_skb+0x26d/0x440 [ 765.567776][T17660] ? rtnetlink_bind+0x80/0x80 [ 765.572478][T17660] ? netlink_ack+0x1160/0x1160 [ 765.577278][T17660] ? netlink_deliver_tap+0x2e/0x1b0 [ 765.582505][T17660] netlink_unicast+0x7ad/0x920 [ 765.587292][T17660] netlink_sendmsg+0x8ad/0xbd0 [ 765.592080][T17660] ? netlink_getsockopt+0x550/0x550 [ 765.597299][T17660] ? aa_sock_msg_perm+0x94/0x150 [ 765.602256][T17660] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 765.607559][T17660] ? security_socket_sendmsg+0x7c/0xa0 [ 765.613073][T17660] ? netlink_getsockopt+0x550/0x550 [ 765.618303][T17660] ____sys_sendmsg+0x5ed/0x9a0 [ 765.623096][T17660] ? __sys_sendmsg_sock+0x30/0x30 [ 765.628144][T17660] ? __import_iovec+0x306/0x510 [ 765.633030][T17660] ? import_iovec+0x6f/0xa0 [ 765.637568][T17660] ___sys_sendmsg+0x2a2/0x360 [ 765.642270][T17660] ? __sys_sendmsg+0x2a0/0x2a0 [ 765.647076][T17660] ? __lock_acquire+0x7bd0/0x7bd0 [ 765.652152][T17660] __se_sys_sendmsg+0x1c3/0x2b0 [ 765.657031][T17660] ? __x64_sys_sendmsg+0x80/0x80 [ 765.662007][T17660] ? lockdep_hardirqs_on+0x94/0x140 [ 765.667236][T17660] do_syscall_64+0x4c/0xa0 [ 765.671677][T17660] ? clear_bhb_loop+0x60/0xb0 [ 765.676375][T17660] ? clear_bhb_loop+0x60/0xb0 [ 765.681069][T17660] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 765.686988][T17660] RIP: 0033:0x7f35b519ce59 [ 765.691421][T17660] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 765.711049][T17660] RSP: 002b:00007f35b6045028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 765.719489][T17660] RAX: ffffffffffffffda RBX: 00007f35b5415fa0 RCX: 00007f35b519ce59 [ 765.727486][T17660] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000003 [ 765.735474][T17660] RBP: 00007f35b6045090 R08: 0000000000000000 R09: 0000000000000000 [ 765.743458][T17660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 765.751430][T17660] R13: 00007f35b5416038 R14: 00007f35b5415fa0 R15: 00007ffd1e39c918 [ 765.759414][T17660] [ 766.344408][T17692] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4489'. [ 766.368825][T17698] sock: sock_set_timeout: `syz.2.4493' (pid 17698) tries to set negative timeout [ 766.420685][T17692] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4489'. [ 766.475135][T17698] validate_nla: 1 callbacks suppressed [ 766.475166][T17698] netlink: 'syz.2.4493': attribute type 13 has an invalid length. [ 766.517456][T17698] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4493'. [ 766.553232][T17698] syz_tun: refused to change device tx_queue_len [ 766.577388][T17698] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 766.616613][T17704] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4493'. [ 766.642663][T17707] Dead loop on virtual device ip6_vti0, fix it urgently! [ 766.960004][T17719] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4499'. [ 766.980709][T17717] netlink: 'syz.5.4496': attribute type 28 has an invalid length. [ 766.992062][T17719] device hsr_slave_0 left promiscuous mode [ 767.024369][T17717] netlink: 'syz.5.4496': attribute type 4 has an invalid length. [ 767.051458][T17719] device hsr_slave_1 left promiscuous mode [ 767.088040][T17717] netlink: 136 bytes leftover after parsing attributes in process `syz.5.4496'. [ 767.388360][T17735] netlink: 'syz.2.4504': attribute type 29 has an invalid length. [ 767.444656][T17735] netlink: 'syz.2.4504': attribute type 29 has an invalid length. [ 767.500099][T17736] FAULT_INJECTION: forcing a failure. [ 767.500099][T17736] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 767.544204][T17736] CPU: 1 PID: 17736 Comm: syz.2.4504 Not tainted syzkaller #0 [ 767.551723][T17736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 767.561811][T17736] Call Trace: [ 767.565111][T17736] [ 767.568063][T17736] dump_stack_lvl+0x188/0x24e [ 767.572768][T17736] ? show_regs_print_info+0x12/0x12 [ 767.578000][T17736] ? load_image+0x410/0x410 [ 767.582540][T17736] ? __lock_acquire+0x7bd0/0x7bd0 [ 767.587594][T17736] should_fail_ex+0x390/0x4c0 [ 767.592276][T17736] prepare_alloc_pages+0x1e1/0x5b0 [ 767.597403][T17736] __alloc_pages+0x130/0x4f0 [ 767.601997][T17736] ? zone_statistics+0x170/0x170 [ 767.606938][T17736] ? mark_lock+0x94/0x320 [ 767.611275][T17736] ? perf_trace_lock+0xf8/0x390 [ 767.616130][T17736] ? trace_event_raw_event_lock+0x230/0x230 [ 767.622022][T17736] __folio_alloc+0xe/0x30 [ 767.626352][T17736] vma_alloc_folio+0x499/0x900 [ 767.631154][T17736] wp_page_copy+0x24b/0x1660 [ 767.635745][T17736] ? __lock_acquire+0x7bd0/0x7bd0 [ 767.640776][T17736] ? fault_dirty_shared_page+0x3c0/0x3c0 [ 767.646413][T17736] ? do_raw_spin_unlock+0x11d/0x230 [ 767.651606][T17736] ? _raw_spin_unlock+0x24/0x40 [ 767.656455][T17736] ? do_wp_page+0x678/0x16b0 [ 767.661046][T17736] handle_mm_fault+0x1b1b/0x3d40 [ 767.665982][T17736] ? mt_find+0x157/0x830 [ 767.670266][T17736] ? numa_migrate_prep+0x250/0x250 [ 767.675381][T17736] ? lock_chain_count+0x20/0x20 [ 767.680231][T17736] ? lock_mm_and_find_vma+0xae/0x2f0 [ 767.685511][T17736] do_user_addr_fault+0x58e/0xb20 [ 767.690545][T17736] exc_page_fault+0x60/0x100 [ 767.695139][T17736] asm_exc_page_fault+0x22/0x30 [ 767.699991][T17736] RIP: 0010:copy_user_enhanced_fast_string+0xa/0x40 [ 767.706585][T17736] Code: ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 8d 0c ca 89 ca eb 20 0f 01 cb 83 fa 40 72 38 89 d1 a4 31 c0 0f 01 ca c3 89 ca eb 0a 90 90 90 90 90 90 90 90 90 90 [ 767.726184][T17736] RSP: 0018:ffffc9000502f628 EFLAGS: 00050202 [ 767.732249][T17736] RAX: ffffffff840db201 RBX: 0000000000000b9b RCX: 0000000000000b9b [ 767.740214][T17736] RDX: 0000000000000b9b RSI: ffff88802cc0e115 RDI: 0000200000003a40 [ 767.748180][T17736] RBP: 0000000000000000 R08: ffff88802cc0ecaf R09: 1ffff11005981d95 [ 767.756144][T17736] R10: dffffc0000000000 R11: ffffed1005981d96 R12: 00007fffffffe465 [ 767.764108][T17736] R13: 0000000000000b9b R14: ffff88802cc0e115 R15: 0000200000003a40 [ 767.772080][T17736] ? copyout+0x61/0x120 [ 767.776326][T17736] copyout+0xe7/0x120 [ 767.780311][T17736] _copy_to_iter+0x482/0x1050 [ 767.784999][T17736] ? iov_iter_init+0x1f0/0x1f0 [ 767.789762][T17736] ? __virt_addr_valid+0x188/0x540 [ 767.794881][T17736] ? __virt_addr_valid+0x467/0x540 [ 767.799992][T17736] ? __phys_addr_symbol+0x2b/0x70 [ 767.805014][T17736] ? __check_object_size+0x4f6/0xa70 [ 767.810303][T17736] __skb_datagram_iter+0xde/0x740 [ 767.815325][T17736] ? sock_load_diag_module+0x130/0x130 [ 767.820785][T17736] ? skb_copy_datagram_iter+0x290/0x290 [ 767.826336][T17736] skb_copy_datagram_iter+0xd7/0x290 [ 767.831623][T17736] netlink_recvmsg+0x2d0/0xe00 [ 767.836391][T17736] ? netlink_sendmsg+0xbd0/0xbd0 [ 767.841326][T17736] ? aa_af_perm+0x340/0x340 [ 767.845829][T17736] ? __might_fault+0xa6/0x120 [ 767.850504][T17736] ? bpf_lsm_socket_recvmsg+0x5/0x10 [ 767.855786][T17736] ? security_socket_recvmsg+0x85/0xb0 [ 767.861241][T17736] ? netlink_sendmsg+0xbd0/0xbd0 [ 767.866175][T17736] ____sys_recvmsg+0x2c8/0x5b0 [ 767.870944][T17736] ? __sys_recvmsg_sock+0x40/0x40 [ 767.875974][T17736] ? import_iovec+0x6f/0xa0 [ 767.880479][T17736] ___sys_recvmsg+0x210/0x590 [ 767.885155][T17736] ? __sys_recvmsg+0x2a0/0x2a0 [ 767.889917][T17736] ? common_file_perm+0x171/0x1c0 [ 767.894945][T17736] ? __fget_files+0x3fc/0x460 [ 767.899633][T17736] __x64_sys_recvmsg+0x20d/0x2e0 [ 767.904567][T17736] ? ___sys_recvmsg+0x590/0x590 [ 767.909424][T17736] ? lockdep_hardirqs_on+0x94/0x140 [ 767.914624][T17736] do_syscall_64+0x4c/0xa0 [ 767.919035][T17736] ? clear_bhb_loop+0x60/0xb0 [ 767.923705][T17736] ? clear_bhb_loop+0x60/0xb0 [ 767.928376][T17736] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 767.934270][T17736] RIP: 0033:0x7f3f83f9ce59 [ 767.938681][T17736] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 767.958284][T17736] RSP: 002b:00007f3f84df1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 767.966694][T17736] RAX: ffffffffffffffda RBX: 00007f3f84216090 RCX: 00007f3f83f9ce59 [ 767.974657][T17736] RDX: 0000000040000020 RSI: 00002000000005c0 RDI: 0000000000000003 [ 767.982622][T17736] RBP: 00007f3f84df1090 R08: 0000000000000000 R09: 0000000000000000 [ 767.990586][T17736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 767.998548][T17736] R13: 00007f3f84216128 R14: 00007f3f84216090 R15: 00007ffe952cfb88 [ 768.006528][T17736] [ 768.036079][T17736] netlink: 'syz.2.4504': attribute type 29 has an invalid length. [ 768.478223][T17746] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4508'. [ 768.508198][T17746] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4508'. [ 770.289966][T17790] netlink: 'syz.5.4523': attribute type 9 has an invalid length. [ 770.359606][T17790] netlink: 61951 bytes leftover after parsing attributes in process `syz.5.4523'. [ 770.652374][T17790] netlink: 'syz.5.4523': attribute type 10 has an invalid length. [ 770.821445][T17790] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4523'. [ 770.832536][T17790] bridge0: port 3(team0) entered blocking state [ 770.956064][T17790] bridge0: port 3(team0) entered disabled state [ 771.010216][T17790] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 771.363483][T17812] FAULT_INJECTION: forcing a failure. [ 771.363483][T17812] name failslab, interval 1, probability 0, space 0, times 0 [ 771.397905][T17812] CPU: 1 PID: 17812 Comm: syz.2.4531 Not tainted syzkaller #0 [ 771.405431][T17812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 771.415506][T17812] Call Trace: [ 771.418801][T17812] [ 771.421743][T17812] dump_stack_lvl+0x188/0x24e [ 771.426439][T17812] ? sctp_sendmsg+0x1686/0x2940 [ 771.431312][T17812] ? ___sys_sendmsg+0x2a2/0x360 [ 771.436187][T17812] ? show_regs_print_info+0x12/0x12 [ 771.441407][T17812] ? load_image+0x410/0x410 [ 771.445948][T17812] should_fail_ex+0x390/0x4c0 [ 771.450654][T17812] should_failslab+0x5/0x20 [ 771.455171][T17812] slab_pre_alloc_hook+0x59/0x300 [ 771.460217][T17812] ? sctp_add_bind_addr+0x89/0x350 [ 771.465353][T17812] __kmem_cache_alloc_node+0x4f/0x270 [ 771.470759][T17812] ? sctp_add_bind_addr+0x89/0x350 [ 771.475891][T17812] kmalloc_trace+0x26/0xe0 [ 771.480343][T17812] sctp_add_bind_addr+0x89/0x350 [ 771.485311][T17812] sctp_copy_local_addr_list+0x317/0x4d0 [ 771.490970][T17812] ? sctp_copy_local_addr_list+0xa0/0x4d0 [ 771.496714][T17812] ? sctp_do_8_2_transport_strike+0x900/0x900 [ 771.502812][T17812] ? sctp_v4_is_any+0x31/0x50 [ 771.507513][T17812] ? sctp_copy_one_addr+0x93/0x660 [ 771.512654][T17812] sctp_bind_addr_copy+0xaf/0x3c0 [ 771.517706][T17812] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 771.524063][T17812] sctp_connect_new_asoc+0x2f5/0x6a0 [ 771.529386][T17812] ? __sctp_connect+0xd80/0xd80 [ 771.534260][T17812] ? __local_bh_enable_ip+0x136/0x1c0 [ 771.539657][T17812] ? _local_bh_enable+0xa0/0xa0 [ 771.544531][T17812] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 771.550393][T17812] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 771.556231][T17812] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 771.561799][T17812] ? security_sctp_bind_connect+0x85/0xb0 [ 771.567548][T17812] sctp_sendmsg+0x1686/0x2940 [ 771.572264][T17812] ? sctp_getsockopt+0x8a0/0x8a0 [ 771.577224][T17812] ? __might_fault+0xa6/0x120 [ 771.581925][T17812] ? aa_af_perm+0x340/0x340 [ 771.586454][T17812] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 771.592911][T17812] ? inet_sendmsg+0x7a/0x2a0 [ 771.597525][T17812] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 771.602826][T17812] ? inet_send_prepare+0x250/0x250 [ 771.607955][T17812] ____sys_sendmsg+0x5ed/0x9a0 [ 771.612744][T17812] ? __sys_sendmsg_sock+0x30/0x30 [ 771.617786][T17812] ? __import_iovec+0x306/0x510 [ 771.622663][T17812] ? import_iovec+0x6f/0xa0 [ 771.627192][T17812] ___sys_sendmsg+0x2a2/0x360 [ 771.631895][T17812] ? __sys_sendmsg+0x2a0/0x2a0 [ 771.636702][T17812] ? __lock_acquire+0x7bd0/0x7bd0 [ 771.641773][T17812] __se_sys_sendmsg+0x1c3/0x2b0 [ 771.646653][T17812] ? __x64_sys_sendmsg+0x80/0x80 [ 771.651632][T17812] ? lockdep_hardirqs_on+0x94/0x140 [ 771.656856][T17812] do_syscall_64+0x4c/0xa0 [ 771.661289][T17812] ? clear_bhb_loop+0x60/0xb0 [ 771.665974][T17812] ? clear_bhb_loop+0x60/0xb0 [ 771.670672][T17812] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 771.676591][T17812] RIP: 0033:0x7f3f83f9ce59 [ 771.681025][T17812] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 771.700653][T17812] RSP: 002b:00007f3f84e12028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 771.709100][T17812] RAX: ffffffffffffffda RBX: 00007f3f84215fa0 RCX: 00007f3f83f9ce59 [ 771.717096][T17812] RDX: 00000000000080d1 RSI: 00002000000000c0 RDI: 0000000000000003 [ 771.725081][T17812] RBP: 00007f3f84e12090 R08: 0000000000000000 R09: 0000000000000000 [ 771.733070][T17812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 771.741063][T17812] R13: 00007f3f84216038 R14: 00007f3f84215fa0 R15: 00007ffe952cfb88 [ 771.749076][T17812] [ 771.921451][T17818] netlink: 'syz.0.4530': attribute type 13 has an invalid length. [ 772.040411][T17818] netlink: 172 bytes leftover after parsing attributes in process `syz.0.4530'. [ 772.553254][T17818] erspan0: refused to change device tx_queue_len [ 772.620204][T17839] netlink: 'syz.4.4537': attribute type 10 has an invalid length. [ 772.642380][T17839] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4537'. [ 772.666508][T17839] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 773.562907][T17855] mac80211_hwsim hwsim15 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 773.666850][T17861] netlink: 'syz.5.4544': attribute type 9 has an invalid length. [ 773.706418][T17861] netlink: 61951 bytes leftover after parsing attributes in process `syz.5.4544'. [ 773.941233][T17861] netlink: 'syz.5.4544': attribute type 10 has an invalid length. [ 773.971783][T17861] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4544'. [ 774.038755][T17861] bridge0: port 3(team0) entered blocking state [ 774.054758][T17861] bridge0: port 3(team0) entered disabled state [ 774.103306][T17861] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 774.331299][T17880] netlink: 'syz.0.4549': attribute type 10 has an invalid length. [ 774.365757][T17880] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4549'. [ 774.529994][T17887] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.4551'. [ 775.216307][T17893] netlink: 'syz.5.4553': attribute type 13 has an invalid length. [ 775.235947][T17893] netlink: 172 bytes leftover after parsing attributes in process `syz.5.4553'. [ 775.349148][T17893] erspan0: refused to change device tx_queue_len [ 775.504550][T17922] netlink: 'syz.2.4566': attribute type 9 has an invalid length. [ 775.537913][T17922] netlink: 61951 bytes leftover after parsing attributes in process `syz.2.4566'. [ 775.609815][T17922] netlink: 'syz.2.4566': attribute type 10 has an invalid length. [ 775.621711][T17922] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4566'. [ 775.682100][T17926] netlink: 'syz.0.4567': attribute type 10 has an invalid length. [ 775.691219][T17926] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4567'. [ 775.765982][T11197] wlan1: Trigger new scan to find an IBSS to join [ 776.107354][T17940] syzkaller0: tun_chr_ioctl cmd 1074025692 [ 776.896838][T17953] device syzkaller0 entered promiscuous mode [ 777.340012][T17964] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.4578'. [ 778.911602][T11182] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 779.282220][T17966] netlink: 'syz.2.4581': attribute type 9 has an invalid length. [ 779.315729][T17966] netlink: 61951 bytes leftover after parsing attributes in process `syz.2.4581'. [ 779.350279][T17974] netlink: 'syz.2.4581': attribute type 10 has an invalid length. [ 779.365749][T17974] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4581'. [ 779.382111][T17979] netlink: 'syz.1.4580': attribute type 13 has an invalid length. [ 779.405912][T17979] netlink: 172 bytes leftover after parsing attributes in process `syz.1.4580'. [ 779.444841][T17979] erspan0: refused to change device tx_queue_len [ 779.473172][T17982] netlink: 'syz.0.4582': attribute type 10 has an invalid length. [ 779.486643][T17982] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4582'. [ 779.767708][T11207] wlan1: Trigger new scan to find an IBSS to join [ 780.778904][T11195] wlan1: Creating new IBSS network, BSSID 16:4e:84:ea:6d:6a [ 781.393781][T18023] netlink: 'syz.1.4598': attribute type 10 has an invalid length. [ 781.443850][T18023] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4598'. [ 781.617819][T18036] netlink: 'syz.2.4603': attribute type 29 has an invalid length. [ 781.677537][T18036] netlink: 'syz.2.4603': attribute type 29 has an invalid length. [ 781.696176][T18037] netlink: 'syz.2.4603': attribute type 29 has an invalid length. [ 781.720980][T18042] netlink: 'syz.2.4603': attribute type 29 has an invalid length. [ 782.670420][T18068] netlink: 'syz.4.4616': attribute type 10 has an invalid length. [ 782.688699][T18068] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4616'. [ 782.706703][T18068] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 784.502432][T18119] validate_nla: 3 callbacks suppressed [ 784.502451][T18119] netlink: 'syz.2.4632': attribute type 10 has an invalid length. [ 784.606014][T18119] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4632'. [ 784.636176][T18119] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 785.559406][T18157] netlink: 'syz.0.4647': attribute type 29 has an invalid length. [ 785.592545][T18157] netlink: 'syz.0.4647': attribute type 29 has an invalid length. [ 785.609620][T18157] netlink: 'syz.0.4647': attribute type 29 has an invalid length. [ 785.669046][T18163] netlink: 'syz.0.4647': attribute type 29 has an invalid length. [ 785.724139][T18157] netlink: 'syz.0.4647': attribute type 29 has an invalid length. [ 786.423628][T18183] FAULT_INJECTION: forcing a failure. [ 786.423628][T18183] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 786.460235][T18183] CPU: 1 PID: 18183 Comm: syz.4.4656 Not tainted syzkaller #0 [ 786.467780][T18183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 786.477868][T18183] Call Trace: [ 786.481165][T18183] [ 786.484108][T18183] dump_stack_lvl+0x188/0x24e [ 786.488812][T18183] ? show_regs_print_info+0x12/0x12 [ 786.494059][T18183] ? load_image+0x410/0x410 [ 786.498594][T18183] ? __lock_acquire+0x7bd0/0x7bd0 [ 786.503652][T18183] should_fail_ex+0x390/0x4c0 [ 786.508360][T18183] _copy_from_user+0x2c/0x170 [ 786.513075][T18183] __sys_bpf+0x2ea/0x780 [ 786.517345][T18183] ? bpf_link_show_fdinfo+0x380/0x380 [ 786.522764][T18183] ? lock_chain_count+0x20/0x20 [ 786.527737][T18183] __x64_sys_bpf+0x78/0x90 [ 786.532189][T18183] do_syscall_64+0x4c/0xa0 [ 786.536626][T18183] ? clear_bhb_loop+0x60/0xb0 [ 786.541319][T18183] ? clear_bhb_loop+0x60/0xb0 [ 786.546111][T18183] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 786.552023][T18183] RIP: 0033:0x7f35b519ce59 [ 786.556445][T18183] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 786.576063][T18183] RSP: 002b:00007f35b6045028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 786.584481][T18183] RAX: ffffffffffffffda RBX: 00007f35b5415fa0 RCX: 00007f35b519ce59 [ 786.592472][T18183] RDX: 0000000000000010 RSI: 00002000000007c0 RDI: 000000000000000f [ 786.600457][T18183] RBP: 00007f35b6045090 R08: 0000000000000000 R09: 0000000000000000 [ 786.608458][T18183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 786.616460][T18183] R13: 00007f35b5416038 R14: 00007f35b5415fa0 R15: 00007ffd1e39c918 [ 786.624465][T18183] [ 787.435161][T18221] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.4671'. [ 787.486873][T18218] device syzkaller0 entered promiscuous mode [ 788.411520][T18252] FAULT_INJECTION: forcing a failure. [ 788.411520][T18252] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 788.429694][T18252] CPU: 0 PID: 18252 Comm: syz.1.4684 Not tainted syzkaller #0 [ 788.437237][T18252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 788.447325][T18252] Call Trace: [ 788.450607][T18252] [ 788.453533][T18252] dump_stack_lvl+0x188/0x24e [ 788.458224][T18252] ? show_regs_print_info+0x12/0x12 [ 788.463430][T18252] ? load_image+0x410/0x410 [ 788.467946][T18252] ? __lock_acquire+0x7bd0/0x7bd0 [ 788.472987][T18252] should_fail_ex+0x390/0x4c0 [ 788.477723][T18252] _copy_from_user+0x2c/0x170 [ 788.482473][T18252] ___sys_recvmsg+0x170/0x590 [ 788.487203][T18252] ? __sys_recvmsg+0x2a0/0x2a0 [ 788.492043][T18252] ? common_file_perm+0x171/0x1c0 [ 788.497117][T18252] ? __fget_files+0x3fc/0x460 [ 788.501821][T18252] __x64_sys_recvmsg+0x20d/0x2e0 [ 788.506755][T18252] ? ct_nmi_exit+0x145/0x1c0 [ 788.511356][T18252] ? ___sys_recvmsg+0x590/0x590 [ 788.516242][T18252] ? lockdep_hardirqs_on+0x94/0x140 [ 788.521450][T18252] do_syscall_64+0x4c/0xa0 [ 788.525867][T18252] ? clear_bhb_loop+0x60/0xb0 [ 788.530539][T18252] ? clear_bhb_loop+0x60/0xb0 [ 788.535250][T18252] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 788.541199][T18252] RIP: 0033:0x7f00b039ce59 [ 788.545661][T18252] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 788.565297][T18252] RSP: 002b:00007f00b11c9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 788.573735][T18252] RAX: ffffffffffffffda RBX: 00007f00b0615fa0 RCX: 00007f00b039ce59 [ 788.581744][T18252] RDX: 0000000000000012 RSI: 00002000000004c0 RDI: 0000000000000006 [ 788.589775][T18252] RBP: 00007f00b11c9090 R08: 0000000000000000 R09: 0000000000000000 [ 788.597776][T18252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 788.605755][T18252] R13: 00007f00b0616038 R14: 00007f00b0615fa0 R15: 00007ffc65f8a0a8 [ 788.614037][T18252] [ 788.726757][T11182] wlan1: Trigger new scan to find an IBSS to join [ 790.439804][T18315] device syzkaller0 entered promiscuous mode [ 790.779254][T18327] FAULT_INJECTION: forcing a failure. [ 790.779254][T18327] name failslab, interval 1, probability 0, space 0, times 0 [ 790.806100][T18327] CPU: 0 PID: 18327 Comm: syz.5.4714 Not tainted syzkaller #0 [ 790.813618][T18327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 790.823840][T18327] Call Trace: [ 790.827121][T18327] [ 790.830043][T18327] dump_stack_lvl+0x188/0x24e [ 790.834718][T18327] ? show_regs_print_info+0x12/0x12 [ 790.839906][T18327] ? load_image+0x410/0x410 [ 790.844407][T18327] ? __might_sleep+0xd0/0xd0 [ 790.848995][T18327] ? __lock_acquire+0x7bd0/0x7bd0 [ 790.854039][T18327] ? verify_lock_unused+0x140/0x140 [ 790.859249][T18327] should_fail_ex+0x390/0x4c0 [ 790.863938][T18327] should_failslab+0x5/0x20 [ 790.868446][T18327] slab_pre_alloc_hook+0x59/0x300 [ 790.873464][T18327] ? __get_vm_area_node+0x122/0x330 [ 790.878650][T18327] __kmem_cache_alloc_node+0x4f/0x270 [ 790.884019][T18327] ? __get_vm_area_node+0x122/0x330 [ 790.889205][T18327] kmalloc_node_trace+0x22/0xe0 [ 790.894058][T18327] __get_vm_area_node+0x122/0x330 [ 790.899072][T18327] ? __local_bh_enable_ip+0x136/0x1c0 [ 790.904455][T18327] __vmalloc_node_range+0x357/0x1380 [ 790.909760][T18327] ? netlink_sendmsg+0x5ec/0xbd0 [ 790.914706][T18327] ? netlink_insert+0x28d/0x13b0 [ 790.919642][T18327] ? free_vm_area+0x50/0x50 [ 790.924146][T18327] ? netlink_sendmsg+0x5ec/0xbd0 [ 790.929081][T18327] vmalloc+0x75/0x80 [ 790.932973][T18327] ? netlink_sendmsg+0x5ec/0xbd0 [ 790.937901][T18327] netlink_sendmsg+0x5ec/0xbd0 [ 790.942664][T18327] ? netlink_getsockopt+0x550/0x550 [ 790.947853][T18327] ? aa_file_perm+0x3ea/0xf00 [ 790.952527][T18327] ? aa_file_perm+0x112/0xf00 [ 790.957196][T18327] ? aa_sock_msg_perm+0x94/0x150 [ 790.962127][T18327] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 790.967403][T18327] ? security_socket_sendmsg+0x7c/0xa0 [ 790.972859][T18327] sock_write_iter+0x2d5/0x3e0 [ 790.977623][T18327] ? sock_read_iter+0x3a0/0x3a0 [ 790.982478][T18327] ? common_file_perm+0x171/0x1c0 [ 790.987498][T18327] vfs_write+0x482/0x9a0 [ 790.991745][T18327] ? file_end_write+0x250/0x250 [ 790.996597][T18327] ? __fget_files+0x3fc/0x460 [ 791.001276][T18327] ? __fdget_pos+0x1d4/0x360 [ 791.005861][T18327] ? ksys_write+0x70/0x260 [ 791.010278][T18327] ksys_write+0x14d/0x260 [ 791.014606][T18327] ? __ia32_sys_read+0x80/0x80 [ 791.019368][T18327] ? lockdep_hardirqs_on+0x94/0x140 [ 791.024564][T18327] do_syscall_64+0x4c/0xa0 [ 791.028971][T18327] ? clear_bhb_loop+0x60/0xb0 [ 791.033639][T18327] ? clear_bhb_loop+0x60/0xb0 [ 791.038307][T18327] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 791.044197][T18327] RIP: 0033:0x7f597759ce59 [ 791.048605][T18327] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 791.068202][T18327] RSP: 002b:00007f597839c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 791.076611][T18327] RAX: ffffffffffffffda RBX: 00007f5977815fa0 RCX: 00007f597759ce59 [ 791.084574][T18327] RDX: 000000000000fe33 RSI: 0000200000000000 RDI: 0000000000000003 [ 791.092539][T18327] RBP: 00007f597839c090 R08: 0000000000000000 R09: 0000000000000000 [ 791.100502][T18327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 791.108464][T18327] R13: 00007f5977816038 R14: 00007f5977815fa0 R15: 00007fffabe01e08 [ 791.116440][T18327] [ 791.135115][T18327] syz.5.4714: vmalloc error: size 65408, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz5,mems_allowed=0-1 [ 791.155682][T18327] CPU: 1 PID: 18327 Comm: syz.5.4714 Not tainted syzkaller #0 [ 791.163207][T18327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 791.173291][T18327] Call Trace: [ 791.176592][T18327] [ 791.179545][T18327] dump_stack_lvl+0x188/0x24e [ 791.184254][T18327] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 791.190699][T18327] ? show_regs_print_info+0x12/0x12 [ 791.195929][T18327] ? load_image+0x410/0x410 [ 791.200479][T18327] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 791.207006][T18327] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 791.213509][T18327] warn_alloc+0x242/0x330 [ 791.217852][T18327] ? __get_vm_area_node+0x122/0x330 [ 791.223079][T18327] ? zone_watermark_ok_safe+0x270/0x270 [ 791.228653][T18327] ? rcu_is_watching+0x11/0xa0 [ 791.233450][T18327] ? __get_vm_area_node+0x318/0x330 [ 791.238676][T18327] ? __local_bh_enable_ip+0x136/0x1c0 [ 791.244065][T18327] __vmalloc_node_range+0x37c/0x1380 [ 791.249379][T18327] ? netlink_insert+0x28d/0x13b0 [ 791.254335][T18327] ? free_vm_area+0x50/0x50 [ 791.258852][T18327] ? netlink_sendmsg+0x5ec/0xbd0 [ 791.263788][T18327] vmalloc+0x75/0x80 [ 791.267681][T18327] ? netlink_sendmsg+0x5ec/0xbd0 [ 791.272612][T18327] netlink_sendmsg+0x5ec/0xbd0 [ 791.277377][T18327] ? netlink_getsockopt+0x550/0x550 [ 791.282568][T18327] ? aa_file_perm+0x3ea/0xf00 [ 791.287246][T18327] ? aa_file_perm+0x112/0xf00 [ 791.291917][T18327] ? aa_sock_msg_perm+0x94/0x150 [ 791.296856][T18327] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 791.302136][T18327] ? security_socket_sendmsg+0x7c/0xa0 [ 791.307592][T18327] sock_write_iter+0x2d5/0x3e0 [ 791.312355][T18327] ? sock_read_iter+0x3a0/0x3a0 [ 791.317208][T18327] ? common_file_perm+0x171/0x1c0 [ 791.322235][T18327] vfs_write+0x482/0x9a0 [ 791.326482][T18327] ? file_end_write+0x250/0x250 [ 791.331335][T18327] ? __fget_files+0x3fc/0x460 [ 791.336015][T18327] ? __fdget_pos+0x1d4/0x360 [ 791.340603][T18327] ? ksys_write+0x70/0x260 [ 791.345019][T18327] ksys_write+0x14d/0x260 [ 791.349349][T18327] ? __ia32_sys_read+0x80/0x80 [ 791.354114][T18327] ? lockdep_hardirqs_on+0x94/0x140 [ 791.359318][T18327] do_syscall_64+0x4c/0xa0 [ 791.363729][T18327] ? clear_bhb_loop+0x60/0xb0 [ 791.368398][T18327] ? clear_bhb_loop+0x60/0xb0 [ 791.373071][T18327] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 791.378966][T18327] RIP: 0033:0x7f597759ce59 [ 791.383375][T18327] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 791.402974][T18327] RSP: 002b:00007f597839c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 791.411384][T18327] RAX: ffffffffffffffda RBX: 00007f5977815fa0 RCX: 00007f597759ce59 [ 791.419353][T18327] RDX: 000000000000fe33 RSI: 0000200000000000 RDI: 0000000000000003 [ 791.427318][T18327] RBP: 00007f597839c090 R08: 0000000000000000 R09: 0000000000000000 [ 791.435285][T18327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 791.443249][T18327] R13: 00007f5977816038 R14: 00007f5977815fa0 R15: 00007fffabe01e08 [ 791.451229][T18327] [ 791.479627][T18327] Mem-Info: [ 791.483007][T18327] active_anon:8363 inactive_anon:0 isolated_anon:0 [ 791.483007][T18327] active_file:21867 inactive_file:40243 isolated_file:0 [ 791.483007][T18327] unevictable:768 dirty:223 writeback:0 [ 791.483007][T18327] slab_reclaimable:21196 slab_unreclaimable:97008 [ 791.483007][T18327] mapped:32163 shmem:1373 pagetables:788 [ 791.483007][T18327] sec_pagetables:0 bounce:0 [ 791.483007][T18327] kernel_misc_reclaimable:0 [ 791.483007][T18327] free:1311781 free_pcp:9257 free_cma:0 [ 791.535732][T18327] Node 0 active_anon:33552kB inactive_anon:0kB active_file:87468kB inactive_file:160768kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:128752kB dirty:892kB writeback:0kB shmem:3956kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10620kB pagetables:3152kB sec_pagetables:0kB all_unreclaimable? no [ 791.603321][T18327] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 791.659190][T18327] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 791.701206][T18327] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 791.708425][T18327] Node 0 DMA32 free:1331088kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:33652kB inactive_anon:0kB active_file:87468kB inactive_file:160768kB unevictable:1536kB writepending:792kB present:3129332kB managed:2592972kB mlocked:0kB bounce:0kB free_pcp:19080kB local_pcp:8612kB free_cma:0kB [ 791.741953][T18327] lowmem_reserve[]: 0 0 1 1 1 [ 791.746864][T18327] Node 0 Normal free:16kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:4kB free_cma:0kB [ 791.774315][T11197] wlan1: Trigger new scan to find an IBSS to join [ 791.780918][T18327] lowmem_reserve[]: 0 0 0 0 0 [ 791.785749][T18327] Node 1 Normal free:3900164kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:18976kB local_pcp:14304kB free_cma:0kB [ 791.819581][T18327] lowmem_reserve[]: 0 0 0 0 0 [ 791.824413][T18327] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 791.839362][T18327] Node 0 DMA32: 1534*4kB (UME) 2087*8kB (UME) 1422*16kB (UME) 1274*32kB (UME) 405*64kB (UME) 712*128kB (UME) 275*256kB (UM) 119*512kB (UME) 47*1024kB (UME) 15*2048kB (UME) 224*4096kB (UM) = 1331088kB [ 791.859265][T18327] Node 0 Normal: 4*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 791.871336][T18327] Node 1 Normal: 259*4kB (UME) 49*8kB (UME) 37*16kB (UE) 65*32kB (UME) 12*64kB (UME) 8*128kB (UME) 2*256kB (ME) 3*512kB (UME) 1*1024kB (E) 2*2048kB (UE) 949*4096kB (M) = 3900164kB [ 791.889418][T18327] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 791.899112][T18327] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 791.908535][T18327] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 791.918541][T18327] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 791.928232][T18327] 63483 total pagecache pages [ 791.932948][T18327] 0 pages in swap cache [ 791.937250][T18327] Free swap = 124996kB [ 791.941435][T18327] Total swap = 124996kB [ 791.945693][T18327] 2097051 pages RAM [ 791.949518][T18327] 0 pages HighMem/MovableOnly [ 791.954194][T18327] 415207 pages reserved [ 791.958421][T18327] 0 pages cma reserved [ 793.286513][T18334] device pim6reg1 entered promiscuous mode [ 794.000550][T18361] netlink: 'syz.1.4725': attribute type 3 has an invalid length. [ 794.026297][T18361] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4725'. [ 794.469014][T18365] netlink: 'syz.5.4726': attribute type 9 has an invalid length. [ 794.481171][T18365] netlink: 61951 bytes leftover after parsing attributes in process `syz.5.4726'. [ 794.564360][T18366] netlink: 'syz.5.4726': attribute type 10 has an invalid length. [ 794.574376][T18366] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4726'. [ 794.589252][T18366] bridge0: port 3(team0) entered blocking state [ 794.597855][T18366] bridge0: port 3(team0) entered disabled state [ 794.809672][ T4326] wlan1: Trigger new scan to find an IBSS to join [ 796.605508][T11195] wlan1: Creating new IBSS network, BSSID 00:00:00:08:00:00 [ 796.609766][T18366] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 796.869238][T18370] netlink: 'syz.4.4728': attribute type 9 has an invalid length. [ 796.925693][T18370] netlink: 61951 bytes leftover after parsing attributes in process `syz.4.4728'. [ 797.143622][T18377] FAULT_INJECTION: forcing a failure. [ 797.143622][T18377] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 797.157598][T18370] netlink: 'syz.4.4728': attribute type 10 has an invalid length. [ 797.165472][T18370] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4728'. [ 797.222040][T18377] CPU: 0 PID: 18377 Comm: syz.2.4731 Not tainted syzkaller #0 [ 797.229584][T18377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 797.239684][T18377] Call Trace: [ 797.242998][T18377] [ 797.245957][T18377] dump_stack_lvl+0x188/0x24e [ 797.250698][T18377] ? show_regs_print_info+0x12/0x12 [ 797.255939][T18377] ? load_image+0x410/0x410 [ 797.260506][T18377] ? __lock_acquire+0x7bd0/0x7bd0 [ 797.265593][T18377] should_fail_ex+0x390/0x4c0 [ 797.270319][T18377] _copy_from_user+0x2c/0x170 [ 797.275028][T18377] __sys_bpf+0x2ea/0x780 [ 797.279303][T18377] ? bpf_link_show_fdinfo+0x380/0x380 [ 797.284737][T18377] ? lock_chain_count+0x20/0x20 [ 797.289626][T18377] __x64_sys_bpf+0x78/0x90 [ 797.294060][T18377] do_syscall_64+0x4c/0xa0 [ 797.298487][T18377] ? clear_bhb_loop+0x60/0xb0 [ 797.303172][T18377] ? clear_bhb_loop+0x60/0xb0 [ 797.307862][T18377] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 797.313770][T18377] RIP: 0033:0x7f3f83f9ce59 [ 797.318197][T18377] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 797.337816][T18377] RSP: 002b:00007f3f84e12028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 797.346243][T18377] RAX: ffffffffffffffda RBX: 00007f3f84215fa0 RCX: 00007f3f83f9ce59 [ 797.354227][T18377] RDX: 0000000000000020 RSI: 00002000000004c0 RDI: 0000000000000004 [ 797.362206][T18377] RBP: 00007f3f84e12090 R08: 0000000000000000 R09: 0000000000000000 [ 797.370187][T18377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 797.378166][T18377] R13: 00007f3f84216038 R14: 00007f3f84215fa0 R15: 00007ffe952cfb88 [ 797.386187][T18377] [ 798.129416][T18399] netlink: 'syz.5.4740': attribute type 2 has an invalid length. [ 798.182478][T18401] netlink: 184 bytes leftover after parsing attributes in process `syz.2.4742'. [ 798.238967][T18403] device wlan1 entered promiscuous mode [ 798.788278][T18413] netlink: 'syz.1.4747': attribute type 9 has an invalid length. [ 798.844959][T18413] netlink: 61951 bytes leftover after parsing attributes in process `syz.1.4747'. [ 798.872335][T18414] netlink: 'syz.0.4746': attribute type 9 has an invalid length. [ 798.885517][T18414] netlink: 61951 bytes leftover after parsing attributes in process `syz.0.4746'. [ 798.926339][T18413] netlink: 'syz.1.4747': attribute type 10 has an invalid length. [ 798.934890][T18413] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4747'. [ 798.954835][T18414] netlink: 'syz.0.4746': attribute type 10 has an invalid length. [ 798.963655][T18414] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4746'. [ 799.002393][T18423] FAULT_INJECTION: forcing a failure. [ 799.002393][T18423] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 799.026213][T18423] CPU: 1 PID: 18423 Comm: syz.4.4749 Not tainted syzkaller #0 [ 799.033737][T18423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 799.043818][T18423] Call Trace: [ 799.047127][T18423] [ 799.050081][T18423] dump_stack_lvl+0x188/0x24e [ 799.054789][T18423] ? show_regs_print_info+0x12/0x12 [ 799.060095][T18423] ? load_image+0x410/0x410 [ 799.064637][T18423] ? __lock_acquire+0x7bd0/0x7bd0 [ 799.069699][T18423] should_fail_ex+0x390/0x4c0 [ 799.074408][T18423] _copy_from_user+0x2c/0x170 [ 799.079122][T18423] __sys_bpf+0x2ea/0x780 [ 799.083396][T18423] ? bpf_link_show_fdinfo+0x380/0x380 [ 799.088810][T18423] ? lock_chain_count+0x20/0x20 [ 799.093703][T18423] __x64_sys_bpf+0x78/0x90 [ 799.098154][T18423] do_syscall_64+0x4c/0xa0 [ 799.102588][T18423] ? clear_bhb_loop+0x60/0xb0 [ 799.107278][T18423] ? clear_bhb_loop+0x60/0xb0 [ 799.111978][T18423] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 799.117898][T18423] RIP: 0033:0x7f35b519ce59 [ 799.122322][T18423] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 799.141932][T18423] RSP: 002b:00007f35b6045028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 799.150363][T18423] RAX: ffffffffffffffda RBX: 00007f35b5415fa0 RCX: 00007f35b519ce59 [ 799.158331][T18423] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 799.166296][T18423] RBP: 00007f35b6045090 R08: 0000000000000000 R09: 0000000000000000 [ 799.174276][T18423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 799.182251][T18423] R13: 00007f35b5416038 R14: 00007f35b5415fa0 R15: 00007ffd1e39c918 [ 799.190243][T18423] [ 799.747093][T18451] netlink: 'syz.0.4759': attribute type 10 has an invalid length. [ 799.788944][T18451] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 799.874959][T18451] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 799.918598][T18451] device batadv_slave_0 entered promiscuous mode [ 799.938063][T18451] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 799.953009][T18452] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4758'. [ 799.968815][T18458] netlink: 'syz.4.4761': attribute type 10 has an invalid length. [ 799.986080][T18458] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4761'. [ 800.108846][T18462] device syzkaller0 entered promiscuous mode [ 804.510161][T18518] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.4777'. [ 804.510846][T18517] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.4777'. [ 804.521502][T18518] netlink: zone id is out of range [ 804.529960][T18517] netlink: zone id is out of range [ 804.537913][T18518] netlink: zone id is out of range [ 804.552740][T18518] netlink: del zone limit has 4 unknown bytes [ 804.555179][T18517] netlink: zone id is out of range [ 804.576050][T18517] netlink: del zone limit has 4 unknown bytes [ 805.696303][T18507] netlink: 'syz.2.4776': attribute type 27 has an invalid length. [ 805.705709][T18507] netlink: 'syz.2.4776': attribute type 4 has an invalid length. [ 805.713604][T18507] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4776'. [ 805.741892][T18510] netlink: 'syz.5.4775': attribute type 2 has an invalid length. [ 805.762562][T18510] netlink: 128 bytes leftover after parsing attributes in process `syz.5.4775'. [ 806.757817][T18553] FAULT_INJECTION: forcing a failure. [ 806.757817][T18553] name failslab, interval 1, probability 0, space 0, times 0 [ 806.779740][T18553] CPU: 0 PID: 18553 Comm: syz.2.4791 Not tainted syzkaller #0 [ 806.787264][T18553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 806.797341][T18553] Call Trace: [ 806.800632][T18553] [ 806.803572][T18553] dump_stack_lvl+0x188/0x24e [ 806.808266][T18553] ? show_regs_print_info+0x12/0x12 [ 806.813465][T18553] ? load_image+0x410/0x410 [ 806.817969][T18553] ? __might_sleep+0xd0/0xd0 [ 806.822553][T18553] ? __lock_acquire+0x7bd0/0x7bd0 [ 806.827582][T18553] should_fail_ex+0x390/0x4c0 [ 806.832260][T18553] should_failslab+0x5/0x20 [ 806.836759][T18553] slab_pre_alloc_hook+0x59/0x300 [ 806.841789][T18553] ? __lock_acquire+0x7bd0/0x7bd0 [ 806.846828][T18553] ? kvmalloc_node+0x6c/0x180 [ 806.851507][T18553] __kmem_cache_alloc_node+0x4f/0x270 [ 806.856877][T18553] ? schedule_delayed_monitor_work+0x160/0x160 [ 806.863039][T18553] ? kvmalloc_node+0x6c/0x180 [ 806.867715][T18553] __kmalloc_node+0xa2/0x240 [ 806.872312][T18553] kvmalloc_node+0x6c/0x180 [ 806.876818][T18553] bpf_test_run_xdp_live+0x1da/0x1a90 [ 806.882194][T18553] ? 0xffffffffa0004440 [ 806.886346][T18553] ? text_poke_copy+0x7b/0x90 [ 806.891105][T18553] ? 0xffffffffa0004440 [ 806.895257][T18553] ? bpf_dispatcher_change_prog+0xc90/0xf10 [ 806.901202][T18553] ? xdp_convert_md_to_buff+0x330/0x330 [ 806.906768][T18553] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 806.913027][T18553] ? bpf_test_init+0x119/0x140 [ 806.917791][T18553] ? xdp_convert_md_to_buff+0x5b/0x330 [ 806.923249][T18553] bpf_prog_test_run_xdp+0x757/0xf80 [ 806.928537][T18553] ? __lock_acquire+0x7bd0/0x7bd0 [ 806.933570][T18553] ? dev_put+0x80/0x80 [ 806.937644][T18553] ? dev_put+0x80/0x80 [ 806.941709][T18553] bpf_prog_test_run+0x31c/0x390 [ 806.946651][T18553] __sys_bpf+0x62b/0x780 [ 806.950896][T18553] ? bpf_link_show_fdinfo+0x380/0x380 [ 806.956284][T18553] ? lock_chain_count+0x20/0x20 [ 806.961140][T18553] __x64_sys_bpf+0x78/0x90 [ 806.965553][T18553] do_syscall_64+0x4c/0xa0 [ 806.969964][T18553] ? clear_bhb_loop+0x60/0xb0 [ 806.974633][T18553] ? clear_bhb_loop+0x60/0xb0 [ 806.979304][T18553] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 806.985197][T18553] RIP: 0033:0x7f3f83f9ce59 [ 806.989611][T18553] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 807.009211][T18553] RSP: 002b:00007f3f84e12028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 807.017619][T18553] RAX: ffffffffffffffda RBX: 00007f3f84215fa0 RCX: 00007f3f83f9ce59 [ 807.025587][T18553] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 807.033556][T18553] RBP: 00007f3f84e12090 R08: 0000000000000000 R09: 0000000000000000 [ 807.041520][T18553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 807.049483][T18553] R13: 00007f3f84216038 R14: 00007f3f84215fa0 R15: 00007ffe952cfb88 [ 807.057461][T18553] [ 808.569722][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.578668][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.785118][T18599] FAULT_INJECTION: forcing a failure. [ 808.785118][T18599] name failslab, interval 1, probability 0, space 0, times 0 [ 808.798104][T18599] CPU: 0 PID: 18599 Comm: syz.0.4810 Not tainted syzkaller #0 [ 808.805575][T18599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 808.815657][T18599] Call Trace: [ 808.818951][T18599] [ 808.821882][T18599] dump_stack_lvl+0x188/0x24e [ 808.826564][T18599] ? show_regs_print_info+0x12/0x12 [ 808.831789][T18599] ? load_image+0x410/0x410 [ 808.836297][T18599] should_fail_ex+0x390/0x4c0 [ 808.840975][T18599] should_failslab+0x5/0x20 [ 808.845467][T18599] slab_pre_alloc_hook+0x59/0x300 [ 808.850508][T18599] kmem_cache_alloc+0x56/0x2f0 [ 808.855270][T18599] ? inet_getpeer+0x82e/0x1040 [ 808.860140][T18599] inet_getpeer+0x82e/0x1040 [ 808.864736][T18599] ? verify_lock_unused+0x140/0x140 [ 808.869942][T18599] ? icmpv6_xrlim_allow+0x45e/0x640 [ 808.875147][T18599] ? inet_peer_base_init+0x100/0x100 [ 808.880435][T18599] ? verify_lock_unused+0x140/0x140 [ 808.885664][T18599] ? ip6_route_output_flags+0x27/0x330 [ 808.891120][T18599] ? ip6_route_output_flags+0x27/0x330 [ 808.896573][T18599] ? icmpv6_xrlim_allow+0x450/0x640 [ 808.901768][T18599] icmpv6_xrlim_allow+0x45e/0x640 [ 808.906789][T18599] ? icmpv6_xrlim_allow+0x32c/0x640 [ 808.911983][T18599] ? dev_put+0x70/0x70 [ 808.916049][T18599] ? dev_get_by_index+0x1e/0x2d0 [ 808.920987][T18599] ? dev_get_by_index+0x1e/0x2d0 [ 808.925923][T18599] ? bpf_lsm_xfrm_decode_session+0x5/0x10 [ 808.931647][T18599] icmp6_send+0xf13/0x1a60 [ 808.936077][T18599] ? icmp6_send+0xb7d/0x1a60 [ 808.940663][T18599] ? icmpv6_push_pending_frames+0x4b0/0x4b0 [ 808.946558][T18599] ? memset+0x1e/0x40 [ 808.950557][T18599] ? __xfrm_sk_clone_policy+0x8e0/0x8e0 [ 808.956109][T18599] ? ip6_negative_advice+0x310/0x310 [ 808.961391][T18599] ip6_link_failure+0x37/0x4c0 [ 808.966153][T18599] ? ip6_negative_advice+0x310/0x310 [ 808.971434][T18599] vti6_tnl_xmit+0x1184/0x1ab0 [ 808.976203][T18599] ? validate_xmit_xfrm+0xb4/0x11d0 [ 808.981407][T18599] ? vti6_dev_uninit+0x120/0x120 [ 808.986358][T18599] dev_hard_start_xmit+0x292/0x8b0 [ 808.991472][T18599] ? __rwlock_init+0x140/0x140 [ 808.996238][T18599] __dev_queue_xmit+0x1b4b/0x3810 [ 809.001265][T18599] ? __dev_queue_xmit+0x281/0x3810 [ 809.006375][T18599] ? read_seqbegin+0x122/0x250 [ 809.011136][T18599] ? lockdep_hardirqs_on+0x94/0x140 [ 809.016337][T18599] ? netdev_core_pick_tx+0x360/0x360 [ 809.021628][T18599] ? ___neigh_create+0x1dc5/0x2450 [ 809.026742][T18599] ? neigh_connected_output+0x3b3/0x450 [ 809.032300][T18599] ip6_finish_output2+0xdc6/0x15c0 [ 809.037415][T18599] ? ip6_finish_output2+0x58f/0x15c0 [ 809.042696][T18599] ? nf_hook+0x390/0x390 [ 809.046934][T18599] ? ip6_mtu+0x31a/0x3f0 [ 809.051175][T18599] ? ip6_finish_output+0x563/0x7f0 [ 809.056288][T18599] rawv6_send_hdrinc+0xd9f/0x16a0 [ 809.061312][T18599] ? rawv6_send_hdrinc+0xb17/0x16a0 [ 809.066509][T18599] ? rawv6_probe_proto_opt+0x300/0x300 [ 809.071961][T18599] ? txopt_get+0x340/0x3f0 [ 809.076374][T18599] ? rawv6_push_pending_frames+0x920/0x920 [ 809.082174][T18599] ? fl6_sock_lookup+0xc0/0xc0 [ 809.086941][T18599] rawv6_sendmsg+0x11a7/0x1710 [ 809.091711][T18599] ? compat_rawv6_ioctl+0x60/0x60 [ 809.096737][T18599] ? aa_sk_perm+0x81f/0x950 [ 809.101243][T18599] ? tomoyo_socket_sendmsg_permission+0x212/0x2f0 [ 809.107667][T18599] ? inet_sendmsg+0x7a/0x2a0 [ 809.112258][T18599] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 809.117539][T18599] ? inet_send_prepare+0x250/0x250 [ 809.122646][T18599] ____sys_sendmsg+0x5ed/0x9a0 [ 809.127414][T18599] ? __sys_sendmsg_sock+0x30/0x30 [ 809.132428][T18599] ? __import_iovec+0x306/0x510 [ 809.137278][T18599] ? import_iovec+0x6f/0xa0 [ 809.141778][T18599] ___sys_sendmsg+0x2a2/0x360 [ 809.146453][T18599] ? __sys_sendmsg+0x2a0/0x2a0 [ 809.151250][T18599] ? __lock_acquire+0x7bd0/0x7bd0 [ 809.156310][T18599] __se_sys_sendmsg+0x1c3/0x2b0 [ 809.161172][T18599] ? __x64_sys_sendmsg+0x80/0x80 [ 809.166127][T18599] ? lockdep_hardirqs_on+0x94/0x140 [ 809.171426][T18599] do_syscall_64+0x4c/0xa0 [ 809.175840][T18599] ? clear_bhb_loop+0x60/0xb0 [ 809.180511][T18599] ? clear_bhb_loop+0x60/0xb0 [ 809.185192][T18599] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 809.191085][T18599] RIP: 0033:0x7fc31ef9ce59 [ 809.195493][T18599] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 809.215096][T18599] RSP: 002b:00007fc31d1f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 809.223508][T18599] RAX: ffffffffffffffda RBX: 00007fc31f215fa0 RCX: 00007fc31ef9ce59 [ 809.231651][T18599] RDX: 000000000400800c RSI: 0000200000000000 RDI: 0000000000000003 [ 809.239616][T18599] RBP: 00007fc31d1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 809.247586][T18599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 809.255548][T18599] R13: 00007fc31f216038 R14: 00007fc31f215fa0 R15: 00007fffbb446558 [ 809.263530][T18599] [ 809.266946][T18599] Dead loop on virtual device ip6_vti0, fix it urgently! [ 809.845397][T11207] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 810.987475][T18581] netlink: 'syz.4.4801': attribute type 10 has an invalid length. [ 810.995345][T18581] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4801'. [ 811.086012][T18623] device syzkaller0 entered promiscuous mode [ 813.482284][T18648] netlink: 'syz.4.4825': attribute type 9 has an invalid length. [ 813.490126][T18648] netlink: 61951 bytes leftover after parsing attributes in process `syz.4.4825'. [ 814.470160][T18705] netlink: 'syz.2.4848': attribute type 9 has an invalid length. [ 814.521351][T18705] netlink: 61951 bytes leftover after parsing attributes in process `syz.2.4848'. [ 814.602926][T18705] netlink: 'syz.2.4848': attribute type 10 has an invalid length. [ 814.664141][T18705] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4848'. [ 815.222492][T18712] device syzkaller0 entered promiscuous mode [ 815.234656][T18715] netlink: 'syz.5.4851': attribute type 9 has an invalid length. [ 815.243126][T18715] netlink: 61951 bytes leftover after parsing attributes in process `syz.5.4851'. [ 817.939260][T18760] netlink: 'syz.1.4868': attribute type 9 has an invalid length. [ 817.947315][T18760] netlink: 61951 bytes leftover after parsing attributes in process `syz.1.4868'. [ 817.969850][T18771] netlink: 144 bytes leftover after parsing attributes in process `syz.2.4871'. [ 817.989536][T18771] device team_slave_0 left promiscuous mode [ 818.070728][T18771] team0: Port device team_slave_0 removed [ 818.087205][T18771] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 819.171588][T18807] netlink: 'syz.2.4886': attribute type 9 has an invalid length. [ 819.199887][T18807] netlink: 61951 bytes leftover after parsing attributes in process `syz.2.4886'. [ 819.352305][T18815] FAULT_INJECTION: forcing a failure. [ 819.352305][T18815] name failslab, interval 1, probability 0, space 0, times 0 [ 819.396539][T18815] CPU: 0 PID: 18815 Comm: syz.5.4890 Not tainted syzkaller #0 [ 819.404040][T18815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 819.414227][T18815] Call Trace: [ 819.417502][T18815] [ 819.420428][T18815] dump_stack_lvl+0x188/0x24e [ 819.425141][T18815] ? show_regs_print_info+0x12/0x12 [ 819.430333][T18815] ? load_image+0x410/0x410 [ 819.434846][T18815] ? __might_sleep+0xd0/0xd0 [ 819.439455][T18815] ? __lock_acquire+0x7bd0/0x7bd0 [ 819.441439][T18818] netlink: 'syz.0.4891': attribute type 29 has an invalid length. [ 819.444485][T18815] ? __lock_acquire+0x130c/0x7bd0 [ 819.444520][T18815] should_fail_ex+0x390/0x4c0 [ 819.444546][T18815] should_failslab+0x5/0x20 [ 819.459752][T18818] netlink: 'syz.0.4891': attribute type 29 has an invalid length. [ 819.461992][T18815] slab_pre_alloc_hook+0x59/0x300 [ 819.462024][T18815] kmem_cache_alloc_node+0x5a/0x310 [ 819.462043][T18815] ? __alloc_skb+0xf9/0x7d0 [ 819.462066][T18815] __alloc_skb+0xf9/0x7d0 [ 819.462088][T18815] alloc_skb_with_frags+0xa7/0x710 [ 819.462110][T18815] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 819.462138][T18815] ? mark_lock+0x94/0x320 [ 819.462164][T18815] sock_alloc_send_pskb+0x87f/0x9a0 [ 819.462208][T18815] ? sock_kzfree_s+0x50/0x50 [ 819.462238][T18815] ? __lock_acquire+0x13e3/0x7bd0 [ 819.462265][T18815] ? dev_get_by_index+0x1e/0x2d0 [ 819.462285][T18815] ? dev_get_by_index+0x1e/0x2d0 [ 819.462311][T18815] packet_sendmsg+0x327d/0x4de0 [ 819.462348][T18815] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 819.462369][T18815] ? __might_sleep+0xd0/0xd0 [ 819.462387][T18815] ? verify_lock_unused+0x140/0x140 [ 819.462423][T18815] ? aa_sk_perm+0x81f/0x950 [ 819.559826][T18815] ? packet_getsockopt+0x980/0x980 [ 819.564960][T18815] ? aa_sock_msg_perm+0x94/0x150 [ 819.569899][T18815] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 819.575177][T18815] ? security_socket_sendmsg+0x7c/0xa0 [ 819.580630][T18815] ? packet_getsockopt+0x980/0x980 [ 819.585742][T18815] ____sys_sendmsg+0x5ed/0x9a0 [ 819.590508][T18815] ? __sys_sendmsg_sock+0x30/0x30 [ 819.595523][T18815] ? __import_iovec+0x306/0x510 [ 819.600376][T18815] ? import_iovec+0x6f/0xa0 [ 819.604876][T18815] ___sys_sendmsg+0x2a2/0x360 [ 819.609554][T18815] ? __sys_sendmsg+0x2a0/0x2a0 [ 819.614326][T18815] ? __lock_acquire+0x7bd0/0x7bd0 [ 819.619365][T18815] __se_sys_sendmsg+0x1c3/0x2b0 [ 819.624212][T18815] ? __x64_sys_sendmsg+0x80/0x80 [ 819.629154][T18815] ? lockdep_hardirqs_on+0x94/0x140 [ 819.634354][T18815] do_syscall_64+0x4c/0xa0 [ 819.638765][T18815] ? clear_bhb_loop+0x60/0xb0 [ 819.643434][T18815] ? clear_bhb_loop+0x60/0xb0 [ 819.648105][T18815] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 819.653995][T18815] RIP: 0033:0x7f597759ce59 [ 819.658403][T18815] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 819.678003][T18815] RSP: 002b:00007f597839c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 819.686417][T18815] RAX: ffffffffffffffda RBX: 00007f5977815fa0 RCX: 00007f597759ce59 [ 819.694382][T18815] RDX: 0000000000000000 RSI: 0000200000001780 RDI: 0000000000000003 [ 819.702344][T18815] RBP: 00007f597839c090 R08: 0000000000000000 R09: 0000000000000000 [ 819.710307][T18815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 819.718273][T18815] R13: 00007f5977816038 R14: 00007f5977815fa0 R15: 00007fffabe01e08 [ 819.726250][T18815] [ 820.719857][T18854] netlink: 'syz.4.4903': attribute type 9 has an invalid length. [ 820.730756][T18854] netlink: 61951 bytes leftover after parsing attributes in process `syz.4.4903'. [ 820.751371][T18852] netlink: 'syz.0.4902': attribute type 21 has an invalid length. [ 821.552276][T18888] FAULT_INJECTION: forcing a failure. [ 821.552276][T18888] name failslab, interval 1, probability 0, space 0, times 0 [ 821.579983][T18890] netlink: 'syz.1.4916': attribute type 9 has an invalid length. [ 821.603911][T18890] netlink: 61951 bytes leftover after parsing attributes in process `syz.1.4916'. [ 821.646219][T18888] CPU: 1 PID: 18888 Comm: syz.2.4915 Not tainted syzkaller #0 [ 821.653743][T18888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 821.663815][T18888] Call Trace: [ 821.667106][T18888] [ 821.670040][T18888] dump_stack_lvl+0x188/0x24e [ 821.674729][T18888] ? show_regs_print_info+0x12/0x12 [ 821.679941][T18888] ? load_image+0x410/0x410 [ 821.684451][T18888] ? __lock_acquire+0x7bd0/0x7bd0 [ 821.689480][T18888] ? copy_user_enhanced_fast_string+0xa/0x40 [ 821.695469][T18888] should_fail_ex+0x390/0x4c0 [ 821.700151][T18888] should_failslab+0x5/0x20 [ 821.704648][T18888] slab_pre_alloc_hook+0x59/0x300 [ 821.709674][T18888] kmem_cache_alloc_node+0x5a/0x310 [ 821.714871][T18888] ? __alloc_skb+0xf9/0x7d0 [ 821.719379][T18888] __alloc_skb+0xf9/0x7d0 [ 821.723708][T18888] tipc_buf_acquire+0x27/0xd0 [ 821.728528][T18888] tipc_msg_build+0x84e/0xde0 [ 821.733222][T18888] __tipc_sendmsg+0x1b55/0x2c00 [ 821.738121][T18888] ? ima_match_policy+0x211c/0x21b0 [ 821.743359][T18888] ? rht_lock+0x150/0x150 [ 821.747695][T18888] ? mark_lock+0x94/0x320 [ 821.752029][T18888] ? wait_woken+0x1c0/0x1c0 [ 821.756576][T18888] ? register_lock_class+0xc0/0x870 [ 821.761776][T18888] ? register_lock_class+0xc0/0x870 [ 821.766974][T18888] ? is_dynamic_key+0x260/0x260 [ 821.771828][T18888] ? mark_lock+0x94/0x320 [ 821.776159][T18888] ? __lock_acquire+0x13e3/0x7bd0 [ 821.781194][T18888] ? aa_label_sk_perm+0x4cc/0x660 [ 821.786223][T18888] ? __lock_acquire+0x13e3/0x7bd0 [ 821.791248][T18888] ? verify_lock_unused+0x140/0x140 [ 821.796451][T18888] ? verify_lock_unused+0x140/0x140 [ 821.801650][T18888] __tipc_sendstream+0x10f6/0x1330 [ 821.806773][T18888] ? __might_sleep+0xd0/0xd0 [ 821.811359][T18888] ? mark_lock+0x94/0x320 [ 821.815690][T18888] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 821.821672][T18888] ? lock_chain_count+0x20/0x20 [ 821.826523][T18888] ? tipc_sendstream+0x43/0x70 [ 821.831290][T18888] ? tsk_advance_rx_queue+0x390/0x390 [ 821.836666][T18888] ? __local_bh_enable_ip+0x136/0x1c0 [ 821.842030][T18888] ? _local_bh_enable+0xa0/0xa0 [ 821.846884][T18888] tipc_sendstream+0x51/0x70 [ 821.851479][T18888] ? tipc_getsockopt+0x520/0x520 [ 821.856416][T18888] ____sys_sendmsg+0x5ed/0x9a0 [ 821.861182][T18888] ? __sys_sendmsg_sock+0x30/0x30 [ 821.866202][T18888] ? __import_iovec+0x306/0x510 [ 821.871056][T18888] ? import_iovec+0x6f/0xa0 [ 821.875557][T18888] ___sys_sendmsg+0x2a2/0x360 [ 821.880234][T18888] ? __sys_sendmsg+0x2a0/0x2a0 [ 821.885009][T18888] ? __lock_acquire+0x7bd0/0x7bd0 [ 821.890053][T18888] __se_sys_sendmsg+0x1c3/0x2b0 [ 821.894907][T18888] ? __x64_sys_sendmsg+0x80/0x80 [ 821.899857][T18888] ? lockdep_hardirqs_on+0x94/0x140 [ 821.905060][T18888] do_syscall_64+0x4c/0xa0 [ 821.909473][T18888] ? clear_bhb_loop+0x60/0xb0 [ 821.914143][T18888] ? clear_bhb_loop+0x60/0xb0 [ 821.918813][T18888] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 821.924702][T18888] RIP: 0033:0x7f3f83f9ce59 [ 821.929114][T18888] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 821.948717][T18888] RSP: 002b:00007f3f84e12028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 821.957134][T18888] RAX: ffffffffffffffda RBX: 00007f3f84215fa0 RCX: 00007f3f83f9ce59 [ 821.965099][T18888] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003 [ 821.973062][T18888] RBP: 00007f3f84e12090 R08: 0000000000000000 R09: 0000000000000000 [ 821.981026][T18888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 821.988991][T18888] R13: 00007f3f84216038 R14: 00007f3f84215fa0 R15: 00007ffe952cfb88 [ 821.996969][T18888] [ 822.027532][T18892] netlink: 'syz.4.4918': attribute type 9 has an invalid length. [ 822.045793][T18892] netlink: 61951 bytes leftover after parsing attributes in process `syz.4.4918'. [ 822.123149][T18892] netlink: 'syz.4.4918': attribute type 10 has an invalid length. [ 822.178357][T18892] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4918'. [ 822.821571][T18936] netlink: 'syz.0.4933': attribute type 9 has an invalid length. [ 822.842368][T18936] netlink: 61951 bytes leftover after parsing attributes in process `syz.0.4933'. [ 822.885073][T18938] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4932'. [ 822.946047][T18938] validate_nla: 1 callbacks suppressed [ 822.946064][T18938] netlink: 'syz.4.4932': attribute type 4 has an invalid length. [ 822.975146][T18938] netlink: 'syz.4.4932': attribute type 3 has an invalid length. [ 822.992225][T18938] netlink: 3 bytes leftover after parsing attributes in process `syz.4.4932'. [ 823.023711][T18942] netlink: 'syz.2.4934': attribute type 9 has an invalid length. [ 823.035373][T18942] netlink: 61951 bytes leftover after parsing attributes in process `syz.2.4934'. [ 823.121259][T18942] netlink: 'syz.2.4934': attribute type 10 has an invalid length. [ 823.135931][T18942] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4934'. [ 823.939872][T18967] FAULT_INJECTION: forcing a failure. [ 823.939872][T18967] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 823.963013][T18967] CPU: 0 PID: 18967 Comm: syz.5.4943 Not tainted syzkaller #0 [ 823.970541][T18967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 823.980623][T18967] Call Trace: [ 823.983918][T18967] [ 823.986866][T18967] dump_stack_lvl+0x188/0x24e [ 823.991583][T18967] ? show_regs_print_info+0x12/0x12 [ 823.996813][T18967] ? load_image+0x410/0x410 [ 824.001361][T18967] ? __lock_acquire+0x7bd0/0x7bd0 [ 824.006426][T18967] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 824.012192][T18967] should_fail_ex+0x390/0x4c0 [ 824.016911][T18967] _copy_from_user+0x2c/0x170 [ 824.021627][T18967] ___sys_sendmsg+0x1c3/0x360 [ 824.026343][T18967] ? __sys_sendmsg+0x2a0/0x2a0 [ 824.031173][T18967] ? __lock_acquire+0x7bd0/0x7bd0 [ 824.036272][T18967] __se_sys_sendmsg+0x1c3/0x2b0 [ 824.041157][T18967] ? __x64_sys_sendmsg+0x80/0x80 [ 824.046153][T18967] ? lockdep_hardirqs_on+0x94/0x140 [ 824.051391][T18967] do_syscall_64+0x4c/0xa0 [ 824.055833][T18967] ? clear_bhb_loop+0x60/0xb0 [ 824.060528][T18967] ? clear_bhb_loop+0x60/0xb0 [ 824.065235][T18967] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 824.071163][T18967] RIP: 0033:0x7f597759ce59 [ 824.075608][T18967] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 824.095247][T18967] RSP: 002b:00007f597839c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 824.103696][T18967] RAX: ffffffffffffffda RBX: 00007f5977815fa0 RCX: 00007f597759ce59 [ 824.111697][T18967] RDX: 0000000000000000 RSI: 0000200000001640 RDI: 0000000000000004 [ 824.119701][T18967] RBP: 00007f597839c090 R08: 0000000000000000 R09: 0000000000000000 [ 824.127703][T18967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 824.128440][T18968] netlink: 'syz.0.4945': attribute type 9 has an invalid length. [ 824.135681][T18967] R13: 00007f5977816038 R14: 00007f5977815fa0 R15: 00007fffabe01e08 [ 824.135728][T18967] [ 824.185215][T18968] netlink: 61951 bytes leftover after parsing attributes in process `syz.0.4945'. [ 824.251327][T18974] netlink: 'syz.2.4949': attribute type 9 has an invalid length. [ 824.260955][T18974] netlink: 61951 bytes leftover after parsing attributes in process `syz.2.4949'. [ 824.359651][T18974] netlink: 'syz.2.4949': attribute type 10 has an invalid length. [ 824.379878][T18974] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4949'. [ 824.480352][T18983] netlink: 'syz.5.4950': attribute type 21 has an invalid length. [ 824.504678][T18983] netlink: 'syz.5.4950': attribute type 6 has an invalid length. [ 824.533350][T18983] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4950'. [ 825.302128][T19010] netlink: 'syz.0.4960': attribute type 3 has an invalid length. [ 825.314173][T19010] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.4960'. [ 825.373651][T19014] netlink: 61951 bytes leftover after parsing attributes in process `syz.2.4961'. [ 825.633907][T19023] netlink: 61951 bytes leftover after parsing attributes in process `syz.2.4965'. [ 826.629961][T11205] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 827.349048][T19100] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 828.453438][T19128] validate_nla: 10 callbacks suppressed [ 828.453457][T19128] netlink: 'syz.5.5006': attribute type 9 has an invalid length. [ 828.473384][T19128] __nla_validate_parse: 10 callbacks suppressed [ 828.473400][T19128] netlink: 61951 bytes leftover after parsing attributes in process `syz.5.5006'. [ 829.717436][T19146] netlink: 'syz.1.5012': attribute type 9 has an invalid length. [ 829.812474][T19146] netlink: 61951 bytes leftover after parsing attributes in process `syz.1.5012'. [ 829.917155][T19146] netlink: 'syz.1.5012': attribute type 10 has an invalid length. [ 830.030703][T19146] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5012'. [ 832.077668][T19177] netlink: 14 bytes leftover after parsing attributes in process `syz.5.5024'. [ 832.671826][T19175] can: request_module (can-proto-0) failed. [ 832.998353][T19191] netlink: 55631 bytes leftover after parsing attributes in process `syz.5.5027'. [ 833.046323][T19191] netlink: 6324 bytes leftover after parsing attributes in process `syz.5.5027'. [ 833.168778][T19191] netlink: 2 bytes leftover after parsing attributes in process `syz.5.5027'. [ 833.339333][T19193] netlink: 'syz.5.5027': attribute type 41 has an invalid length. [ 833.379568][T19193] netlink: 'syz.5.5027': attribute type 4 has an invalid length. [ 833.488662][T19193] netlink: 152 bytes leftover after parsing attributes in process `syz.5.5027'. [ 834.175504][T19193] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 834.213386][T19201] netlink: 'syz.1.5030': attribute type 9 has an invalid length. [ 834.227205][T19201] netlink: 61951 bytes leftover after parsing attributes in process `syz.1.5030'. [ 834.239050][T19204] netlink: 'syz.1.5030': attribute type 10 has an invalid length. [ 834.248828][T19204] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5030'. [ 834.267017][T19207] netlink: 156 bytes leftover after parsing attributes in process `syz.4.5029'. [ 834.355048][T19202] device syzkaller0 entered promiscuous mode [ 834.520293][T19218] netlink: 'syz.5.5035': attribute type 4 has an invalid length. [ 835.644974][T19240] FAULT_INJECTION: forcing a failure. [ 835.644974][T19240] name failslab, interval 1, probability 0, space 0, times 0 [ 835.662718][T19240] CPU: 1 PID: 19240 Comm: syz.1.5039 Not tainted syzkaller #0 [ 835.670181][T19240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 835.680225][T19240] Call Trace: [ 835.683493][T19240] [ 835.686425][T19240] dump_stack_lvl+0x188/0x24e [ 835.691115][T19240] ? show_regs_print_info+0x12/0x12 [ 835.696314][T19240] ? load_image+0x410/0x410 [ 835.700834][T19240] should_fail_ex+0x390/0x4c0 [ 835.705502][T19240] should_failslab+0x5/0x20 [ 835.709997][T19240] slab_pre_alloc_hook+0x59/0x300 [ 835.715014][T19240] kmem_cache_alloc+0x56/0x2f0 [ 835.719768][T19240] ? dst_alloc+0x101/0x160 [ 835.724174][T19240] dst_alloc+0x101/0x160 [ 835.728414][T19240] ip_route_output_key_hash_rcu+0x14e4/0x23f0 [ 835.734487][T19240] ? ip_route_output_key_hash+0x139/0x330 [ 835.740204][T19240] ip_route_output_key_hash+0x1ef/0x330 [ 835.745754][T19240] ? ip_route_input_rcu+0x30a0/0x30a0 [ 835.751129][T19240] ? __siphash_unaligned+0x289/0x3d0 [ 835.756410][T19240] ? bpf_lsm_xfrm_decode_session+0x5/0x10 [ 835.762125][T19240] xfrmi_xmit+0x374/0x16a0 [ 835.766543][T19240] ? validate_xmit_xfrm+0xb4/0x11d0 [ 835.771741][T19240] ? __skb_get_hash+0x10d/0x270 [ 835.776590][T19240] ? xfrmi_dev_uninit+0x1f0/0x1f0 [ 835.781623][T19240] dev_hard_start_xmit+0x292/0x8b0 [ 835.786736][T19240] ? validate_xmit_skb_list+0x120/0x120 [ 835.792285][T19240] __dev_queue_xmit+0x1b4b/0x3810 [ 835.797313][T19240] ? copyin+0xe7/0x120 [ 835.801376][T19240] ? __dev_queue_xmit+0x281/0x3810 [ 835.806485][T19240] ? _copy_from_iter+0x5df/0x1130 [ 835.811506][T19240] ? netdev_core_pick_tx+0x360/0x360 [ 835.816791][T19240] ? packet_parse_headers+0x7ca/0xad0 [ 835.822158][T19240] ? packet_parse_headers+0x7db/0xad0 [ 835.827530][T19240] ? __virt_addr_valid+0x188/0x540 [ 835.832640][T19240] ? __virt_addr_valid+0x467/0x540 [ 835.837748][T19240] ? __check_object_size+0x4f6/0xa70 [ 835.843028][T19240] ? skb_setup_tx_timestamp+0x1f0/0x1f0 [ 835.848569][T19240] ? skb_copy_datagram_from_iter+0x5c7/0x6b0 [ 835.854543][T19240] ? dev_get_by_index+0x1e/0x2d0 [ 835.859474][T19240] ? skb_put+0x10e/0x200 [ 835.863710][T19240] packet_sendmsg+0x3b95/0x4de0 [ 835.868572][T19240] ? __might_sleep+0xd0/0xd0 [ 835.873153][T19240] ? verify_lock_unused+0x140/0x140 [ 835.878358][T19240] ? aa_sk_perm+0x81f/0x950 [ 835.882860][T19240] ? packet_getsockopt+0x980/0x980 [ 835.887974][T19240] ? aa_sock_msg_perm+0x94/0x150 [ 835.892909][T19240] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 835.898195][T19240] ? security_socket_sendmsg+0x7c/0xa0 [ 835.903646][T19240] ? packet_getsockopt+0x980/0x980 [ 835.908759][T19240] ____sys_sendmsg+0x5ed/0x9a0 [ 835.913526][T19240] ? __sys_sendmsg_sock+0x30/0x30 [ 835.918541][T19240] ? __import_iovec+0x306/0x510 [ 835.923390][T19240] ? import_iovec+0x6f/0xa0 [ 835.927887][T19240] ___sys_sendmsg+0x2a2/0x360 [ 835.932564][T19240] ? __sys_sendmsg+0x2a0/0x2a0 [ 835.937334][T19240] ? __lock_acquire+0x7bd0/0x7bd0 [ 835.942373][T19240] __se_sys_sendmsg+0x1c3/0x2b0 [ 835.947215][T19240] ? ct_nmi_exit+0x145/0x1c0 [ 835.951806][T19240] ? __x64_sys_sendmsg+0x80/0x80 [ 835.956750][T19240] ? lockdep_hardirqs_on+0x94/0x140 [ 835.962030][T19240] do_syscall_64+0x4c/0xa0 [ 835.966441][T19240] ? clear_bhb_loop+0x60/0xb0 [ 835.971109][T19240] ? clear_bhb_loop+0x60/0xb0 [ 835.975781][T19240] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 835.981669][T19240] RIP: 0033:0x7f00b039ce59 [ 835.986078][T19240] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 836.005675][T19240] RSP: 002b:00007f00b11c9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 836.014079][T19240] RAX: ffffffffffffffda RBX: 00007f00b0615fa0 RCX: 00007f00b039ce59 [ 836.022044][T19240] RDX: 00000000000480c0 RSI: 0000200000000200 RDI: 0000000000000004 [ 836.030011][T19240] RBP: 00007f00b11c9090 R08: 0000000000000000 R09: 0000000000000000 [ 836.037976][T19240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 836.045943][T19240] R13: 00007f00b0616038 R14: 00007f00b0615fa0 R15: 00007ffc65f8a0a8 [ 836.053932][T19240] [ 836.778457][T19249] can: request_module (can-proto-0) failed. [ 837.424548][T19253] netlink: 'syz.2.5044': attribute type 9 has an invalid length. [ 837.434459][T19253] netlink: 61951 bytes leftover after parsing attributes in process `syz.2.5044'. [ 837.525236][T19253] netlink: 'syz.2.5044': attribute type 10 has an invalid length. [ 837.552001][T19253] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5044'. [ 837.750180][T19260] device syzkaller0 entered promiscuous mode [ 840.772447][T19298] netlink: 'syz.0.5062': attribute type 9 has an invalid length. [ 840.786971][T19298] netlink: 61951 bytes leftover after parsing attributes in process `syz.0.5062'. [ 840.808278][T19299] netlink: 'syz.0.5062': attribute type 10 has an invalid length. [ 840.845999][T19299] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5062'. [ 841.646720][T19325] netlink: 'syz.2.5073': attribute type 10 has an invalid length. [ 841.686609][T19325] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5073'. [ 841.739769][T19325] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 842.150314][T19331] device syzkaller0 entered promiscuous mode [ 842.182970][T19333] netlink: 'syz.1.5076': attribute type 9 has an invalid length. [ 842.205671][T19333] netlink: 61951 bytes leftover after parsing attributes in process `syz.1.5076'. [ 845.805481][T19368] can: request_module (can-proto-0) failed. [ 846.124941][T19387] netlink: 'syz.1.5095': attribute type 9 has an invalid length. [ 846.143216][T19387] netlink: 61951 bytes leftover after parsing attributes in process `syz.1.5095'. [ 846.247685][T19377] device syzkaller0 entered promiscuous mode [ 848.613636][T19415] netlink: 'syz.0.5107': attribute type 9 has an invalid length. [ 848.629048][T19415] netlink: 61951 bytes leftover after parsing attributes in process `syz.0.5107'. [ 849.302170][T19444] device syzkaller0 entered promiscuous mode [ 850.999731][T19455] device syzkaller0 entered promiscuous mode [ 851.020184][T19462] netlink: 'syz.1.5127': attribute type 9 has an invalid length. [ 851.038031][T19462] netlink: 61951 bytes leftover after parsing attributes in process `syz.1.5127'. [ 851.077516][T19465] netlink: 'syz.1.5127': attribute type 10 has an invalid length. [ 851.103867][T19465] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5127'. [ 853.516859][T19489] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5137'. [ 853.527364][T19493] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5137'. [ 853.536824][T19493] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 853.566431][ T4326] bridge0: port 3(team0) entered disabled state [ 853.573733][T19507] netlink: 'syz.2.5142': attribute type 9 has an invalid length. [ 853.595997][T19507] netlink: 61951 bytes leftover after parsing attributes in process `syz.2.5142'. [ 853.625694][T19510] netlink: 'syz.2.5142': attribute type 10 has an invalid length. [ 853.669489][T19510] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5142'. [ 853.714472][T19514] FAULT_INJECTION: forcing a failure. [ 853.714472][T19514] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 853.788830][T19514] CPU: 1 PID: 19514 Comm: syz.4.5143 Not tainted syzkaller #0 [ 853.796353][T19514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 853.806432][T19514] Call Trace: [ 853.809729][T19514] [ 853.812674][T19514] dump_stack_lvl+0x188/0x24e [ 853.817374][T19514] ? show_regs_print_info+0x12/0x12 [ 853.822604][T19514] ? load_image+0x410/0x410 [ 853.827142][T19514] ? __lock_acquire+0x7bd0/0x7bd0 [ 853.832191][T19514] ? __kmem_cache_alloc_node+0x19d/0x270 [ 853.837850][T19514] should_fail_ex+0x390/0x4c0 [ 853.842531][T19514] _copy_from_user+0x2c/0x170 [ 853.847211][T19514] ____sys_sendmsg+0x31a/0x9a0 [ 853.851976][T19514] ? __lock_acquire+0x7bd0/0x7bd0 [ 853.857004][T19514] ? __sys_sendmsg_sock+0x30/0x30 [ 853.862020][T19514] ? __import_iovec+0x306/0x510 [ 853.866871][T19514] ? import_iovec+0x6f/0xa0 [ 853.871371][T19514] ___sys_sendmsg+0x2a2/0x360 [ 853.876049][T19514] ? __sys_sendmsg+0x2a0/0x2a0 [ 853.880827][T19514] ? __lock_acquire+0x7bd0/0x7bd0 [ 853.885870][T19514] __se_sys_sendmsg+0x1c3/0x2b0 [ 853.890722][T19514] ? __x64_sys_sendmsg+0x80/0x80 [ 853.895668][T19514] ? lockdep_hardirqs_on+0x94/0x140 [ 853.900868][T19514] do_syscall_64+0x4c/0xa0 [ 853.905282][T19514] ? clear_bhb_loop+0x60/0xb0 [ 853.909953][T19514] ? clear_bhb_loop+0x60/0xb0 [ 853.914621][T19514] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 853.920515][T19514] RIP: 0033:0x7f35b519ce59 [ 853.924925][T19514] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 853.944523][T19514] RSP: 002b:00007f35b6045028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 853.952931][T19514] RAX: ffffffffffffffda RBX: 00007f35b5415fa0 RCX: 00007f35b519ce59 [ 853.960900][T19514] RDX: 00000000200008c0 RSI: 0000200000000140 RDI: 0000000000000006 [ 853.968865][T19514] RBP: 00007f35b6045090 R08: 0000000000000000 R09: 0000000000000000 [ 853.976832][T19514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 853.984803][T19514] R13: 00007f35b5416038 R14: 00007f35b5415fa0 R15: 00007ffd1e39c918 [ 853.992783][T19514] [ 855.573187][T19551] device syzkaller0 entered promiscuous mode [ 855.638828][T19553] netlink: 'syz.0.5159': attribute type 9 has an invalid length. [ 855.665686][T19553] netlink: 61951 bytes leftover after parsing attributes in process `syz.0.5159'. [ 858.318649][T19565] netlink: 'syz.0.5159': attribute type 10 has an invalid length. [ 858.327000][T19565] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5159'. [ 858.339602][T19563] device syzkaller0 entered promiscuous mode [ 859.453014][T19614] netlink: 'syz.2.5181': attribute type 9 has an invalid length. [ 859.479152][T19614] netlink: 61951 bytes leftover after parsing attributes in process `syz.2.5181'. [ 859.563706][T19614] netlink: 'syz.2.5181': attribute type 10 has an invalid length. [ 859.585982][T19614] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5181'. [ 860.699049][T19653] netlink: 'syz.1.5195': attribute type 9 has an invalid length. [ 860.760745][T19653] netlink: 61951 bytes leftover after parsing attributes in process `syz.1.5195'. [ 860.774396][T19656] netlink: 2 bytes leftover after parsing attributes in process `syz.0.5197'. [ 860.803040][T19656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 860.835693][T19656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 860.866855][T19656] device batadv_slave_1 entered promiscuous mode [ 860.898987][T19662] netlink: 'syz.1.5195': attribute type 10 has an invalid length. [ 860.912553][T19662] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5195'. [ 861.064718][T19666] netlink: 15743 bytes leftover after parsing attributes in process `syz.4.5200'. [ 861.912629][T19687] sctp: [Deprecated]: syz.5.5210 (pid 19687) Use of struct sctp_assoc_value in delayed_ack socket option. [ 861.912629][T19687] Use struct sctp_sack_info instead [ 862.328487][T19706] netlink: 'syz.0.5214': attribute type 9 has an invalid length. [ 862.384166][T19706] netlink: 61951 bytes leftover after parsing attributes in process `syz.0.5214'. [ 862.501729][T19706] netlink: 'syz.0.5214': attribute type 10 has an invalid length. [ 862.537911][T19706] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5214'. [ 862.846647][T19722] netlink: 'syz.2.5220': attribute type 21 has an invalid length. [ 862.886026][T19722] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5220'. [ 862.932058][T19722] netlink: 'syz.2.5220': attribute type 5 has an invalid length. [ 862.973900][T19722] netlink: 'syz.2.5220': attribute type 6 has an invalid length. [ 863.010824][T19722] netlink: 3 bytes leftover after parsing attributes in process `syz.2.5220'. [ 863.137166][T19728] netlink: 'syz.0.5223': attribute type 21 has an invalid length. [ 864.309253][T19759] device syzkaller0 entered promiscuous mode [ 864.659853][T19772] netlink: 'syz.1.5241': attribute type 29 has an invalid length. [ 867.664323][T19772] netlink: 'syz.1.5241': attribute type 29 has an invalid length. [ 868.135271][T19799] device syzkaller0 entered promiscuous mode [ 868.467825][T19814] netlink: 'syz.5.5257': attribute type 29 has an invalid length. [ 870.010009][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.016393][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.383163][T19814] netlink: 'syz.5.5257': attribute type 29 has an invalid length. [ 870.613569][ C1] [ 870.613579][ C1] ================================ [ 870.613584][ C1] WARNING: inconsistent lock state [ 870.613602][ C1] syzkaller #0 Not tainted [ 870.613612][ C1] -------------------------------- [ 870.613616][ C1] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 870.613623][ C1] syz.2.5265/19837 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 870.613639][ C1] ffff8880248b9020 (&htab->lockdep_key){....}-{2:2}, at: htab_lock_bucket+0x179/0x2f0 [ 870.613760][ C1] {INITIAL USE} state was registered at: [ 870.613768][ C1] lock_acquire+0x1bb/0x4a0 [ 870.613788][ C1] _raw_spin_lock+0x2a/0x40 [ 870.613805][ C1] htab_lock_bucket+0x179/0x2f0 [ 870.613820][ C1] htab_lru_map_update_elem+0x2eb/0xe60 [ 870.613835][ C1] bpf_map_update_value+0x59d/0x670 [ 870.613852][ C1] generic_map_update_batch+0x52e/0x7f0 [ 870.613868][ C1] bpf_map_do_batch+0x475/0x5f0 [ 870.613885][ C1] __sys_bpf+0x6f7/0x780 [ 870.613902][ C1] __x64_sys_bpf+0x78/0x90 [ 870.613918][ C1] do_syscall_64+0x4c/0xa0 [ 870.613932][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 870.613956][ C1] irq event stamp: 2274 [ 870.613962][ C1] hardirqs last enabled at (2273): [] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 870.613989][ C1] hardirqs last disabled at (2274): [] exc_debug+0x6e/0x130 [ 870.614008][ C1] softirqs last enabled at (2208): [] bpf_map_alloc_id+0x87/0xd0 [ 870.614031][ C1] softirqs last disabled at (2206): [] bpf_map_alloc_id+0x21/0xd0 [ 870.614054][ C1] [ 870.614054][ C1] other info that might help us debug this: [ 870.614059][ C1] Possible unsafe locking scenario: [ 870.614059][ C1] [ 870.614063][ C1] CPU0 [ 870.614067][ C1] ---- [ 870.614070][ C1] lock(&htab->lockdep_key); [ 870.614079][ C1] [ 870.614082][ C1] lock(&htab->lockdep_key); [ 870.614092][ C1] [ 870.614092][ C1] *** DEADLOCK *** [ 870.614092][ C1] [ 870.614096][ C1] no locks held by syz.2.5265/19837. [ 870.614103][ C1] [ 870.614103][ C1] stack backtrace: [ 870.614108][ C1] CPU: 1 PID: 19837 Comm: syz.2.5265 Not tainted syzkaller #0 [ 870.614123][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 870.614132][ C1] Call Trace: [ 870.614138][ C1] <#DB> [ 870.614145][ C1] dump_stack_lvl+0x188/0x24e [ 870.614163][ C1] ? show_regs_print_info+0x12/0x12 [ 870.614188][ C1] ? print_usage_bug+0x42a/0x690 [ 870.614211][ C1] ? verify_lock_unused+0x15/0x140 [ 870.614236][ C1] lock_acquire+0x2df/0x4a0 [ 870.614261][ C1] ? htab_lock_bucket+0x179/0x2f0 [ 870.614282][ C1] ? read_lock_is_recursive+0x10/0x10 [ 870.614310][ C1] ? perf_trace_lock+0x301/0x390 [ 870.614328][ C1] ? perf_output_begin_forward+0xa7/0xa70 [ 870.614354][ C1] _raw_spin_lock+0x2a/0x40 [ 870.614372][ C1] ? htab_lock_bucket+0x179/0x2f0 [ 870.614389][ C1] htab_lock_bucket+0x179/0x2f0 [ 870.614410][ C1] ? htab_lru_map_delete_node+0x610/0x610 [ 870.614429][ C1] ? look_up_lock_class+0x75/0x140 [ 870.614452][ C1] ? verify_lock_unused+0x15/0x140 [ 870.614480][ C1] ? htab_map_hash+0x329/0x6d0 [ 870.614502][ C1] htab_lru_map_delete_elem+0x1a1/0x760 [ 870.614522][ C1] ? bpf_overflow_handler+0xd9/0x790 [ 870.614543][ C1] ? htab_lru_map_update_elem+0xe60/0xe60 [ 870.614572][ C1] bpf_prog_2c29ac5cdc6b1842+0x3a/0x3e [ 870.614593][ C1] bpf_overflow_handler+0x50b/0x790 [ 870.614611][ C1] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 870.614636][ C1] ? bpf_overflow_handler+0xd9/0x790 [ 870.614653][ C1] ? perf_swevent_overflow+0x230/0x230 [ 870.614680][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 870.614706][ C1] __perf_event_overflow+0x457/0x630 [ 870.614736][ C1] perf_swevent_event+0x315/0x570 [ 870.614761][ C1] ? perf_tp_event+0xc10/0xc10 [ 870.614797][ C1] perf_bp_event+0x311/0x3f0 [ 870.614825][ C1] ? perf_event_free_bpf_prog+0x120/0x120 [ 870.614882][ C1] ? atomic_notifier_call_chain+0x2c/0x2b0 [ 870.614945][ C1] ? read_lock_is_recursive+0x10/0x10 [ 870.614974][ C1] hw_breakpoint_exceptions_notify+0x14d/0x470 [ 870.615002][ C1] atomic_notifier_call_chain+0x17a/0x2b0 [ 870.615020][ C1] ? atomic_notifier_call_chain+0x2c/0x2b0 [ 870.615043][ C1] notify_die+0x141/0x1a0 [ 870.615064][ C1] ? srcu_init_notifier_head+0x90/0x90 [ 870.615101][ C1] notify_debug+0x20/0x30 [ 870.615128][ C1] exc_debug+0xd9/0x130 [ 870.615151][ C1] asm_exc_debug+0x1a/0x40 [ 870.615171][ C1] RIP: 0010:copy_user_enhanced_fast_string+0xc/0x40 [ 870.615190][ C1] Code: 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 8d 0c ca 89 ca eb 20 0f 01 cb 83 fa 40 72 38 89 d1 f3 a4 <31> c0 0f 01 ca c3 89 ca eb 0a 90 90 90 90 90 90 90 90 90 90 83 f8 [ 870.615204][ C1] RSP: 0018:ffffc9000d307b40 EFLAGS: 00040206 [ 870.615217][ C1] RAX: ffffffff840ff001 RBX: 00000000000000a0 RCX: 0000000000000000 [ 870.615229][ C1] RDX: 00000000000000a0 RSI: 0000200000000320 RDI: ffffc9000d7c70e8 [ 870.615240][ C1] RBP: 0000000000000000 R08: ffffc9000d7c70e7 R09: 1ffff92001af8e1c [ 870.615250][ C1] R10: dffffc0000000000 R11: fffff52001af8e1d R12: 00007fffffffef60 [ 870.615262][ C1] R13: 00000000000000a0 R14: ffffc9000d7c7048 R15: 0000200000000280 [ 870.615282][ C1] ? refcount_dec_and_lock_irqsave+0xe1/0xf0 [ 870.615311][ C1] [ 870.615316][ C1] [ 870.615321][ C1] _copy_from_user+0xf4/0x170 [ 870.615344][ C1] copy_from_bpfptr+0x67/0x80 [ 870.615366][ C1] bpf_prog_load+0xb40/0x1530 [ 870.615400][ C1] ? map_freeze+0x390/0x390 [ 870.615421][ C1] ? __might_fault+0xa6/0x120 [ 870.615460][ C1] ? __might_fault+0xa6/0x120 [ 870.615476][ C1] ? __might_fault+0xc2/0x120 [ 870.615490][ C1] ? __might_fault+0xa6/0x120 [ 870.615507][ C1] ? bpf_lsm_bpf+0x5/0x10 [ 870.615523][ C1] ? security_bpf+0x7a/0xa0 [ 870.615545][ C1] __sys_bpf+0x5b8/0x780 [ 870.615568][ C1] ? bpf_link_show_fdinfo+0x380/0x380 [ 870.615608][ C1] ? lock_chain_count+0x20/0x20 [ 870.615638][ C1] __x64_sys_bpf+0x78/0x90 [ 870.615659][ C1] do_syscall_64+0x4c/0xa0 [ 870.615673][ C1] ? clear_bhb_loop+0x60/0xb0 [ 870.615686][ C1] ? clear_bhb_loop+0x60/0xb0 [ 870.615702][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 870.615722][ C1] RIP: 0033:0x7f3f83f9ce59 [ 870.615737][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 870.615749][ C1] RSP: 002b:00007f3f84e12028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 870.615765][ C1] RAX: ffffffffffffffda RBX: 00007f3f84215fa0 RCX: 00007f3f83f9ce59 [ 870.615777][ C1] RDX: 0000000000000090 RSI: 00002000000000c0 RDI: 0000000000000005 [ 870.615787][ C1] RBP: 00007f3f84032e6f R08: 0000000000000000 R09: 0000000000000000 [ 870.615797][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 870.615806][ C1] R13: 00007f3f84216038 R14: 00007f3f84215fa0 R15: 00007ffe952cfb88 [ 870.615837][ C1]