last executing test programs: 7.544870117s ago: executing program 2 (id=1587): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1e, 0x0, 0x2, 0xff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000600)=ANY=[@ANYRES16], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000001340)=@hci={0x1f, 0x8e88, 0x47}, 0x80, 0x0}, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c012, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000000000000000"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x142f1bfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x10000a3f}, 0x50) r2 = perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="0600"}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x5ae) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x15, 0x5, 0x0, &(0x7f0000000500)) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="170000000000000004025a9fff0000002e0000001126078f39b52d89f6fa0b83ff40c17ef57cec2d0f76a8c1829bec8355c379c44c32e54f8fe7ca6b82e3c3d34cd6daa3ebed0779fcb90acbb4199889ae9cda14dee23f5a698d09f0aa3a0d9a5e2423e77138f4b3bdd1c24d0cee4cdb9cbb6df138362de9f4774c461afb8f5a973af29f1d822f86bab67762e8dc6229971f9fd9627bb26a0f0d8a1085", @ANYRES8=r4, @ANYBLOB="8700"/20, @ANYRESDEC=r1, @ANYBLOB='\x00'/28], 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000100)="5c00000015006b05c84e21000af32c6e0a7875f80e0000", 0x17}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300"], 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x2100, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5}, 0x0, &(0x7f00000002c0)}, 0x20) r6 = socket$kcm(0x23, 0x5, 0x0) sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x10004000) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89ed, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) r9 = openat$cgroup_procs(r7, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000000380), 0x12) write$cgroup_int(r8, &(0x7f0000000040), 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 5.808950205s ago: executing program 2 (id=1595): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x11, 0x6, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x9}, [@cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffffd}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000001480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x21, 0x2, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d33, 0x8015, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x500, 0x1000000, 0x0, 0x0, 0x10, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="0600"}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0x5ae) r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x7, r5, 0x0) socketpair(0x15, 0x5, 0x0, &(0x7f0000000500)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) r6 = socket$kcm(0x23, 0x5, 0x0) sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x10004000) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89ed, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) r9 = openat$cgroup_procs(r7, &(0x7f0000001a80)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000000380), 0x12) write$cgroup_int(r8, &(0x7f0000000040)=0x2d00, 0x1) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r0}, 0xc) 4.444140148s ago: executing program 2 (id=1605): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x11200, 0x2000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x8a, 0x7, 0x0, 0x3, 0x0, 0x10000000000, 0x8, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x4, @perf_config_ext={0x0, 0x4}, 0x20, 0x3, 0xfffffffc, 0x6, 0x7, 0x4, 0x0, 0x0, 0xb, 0x0, 0xdea}, 0x0, 0x0, 0xffffffffffffffff, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') r7 = perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, 0x0, &(0x7f0000000140)=r9}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, &(0x7f0000000280), &(0x7f0000000380)=r8}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r10 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r10, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0xc, "e8"}, {0x18, 0x110, 0x1, '\x00'}, {0x10, 0x116, 0x1}], 0x40}, 0x0) r11 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xd000000000000000}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r11, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000001040)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9, 0x2, @perf_bp={0x0, 0x1}, 0x1aa63, 0x0, 0x7fffffff, 0x1, 0x8, 0x3, 0x7, 0x0, 0x7fffffff, 0x0, 0xb}, 0xffffffffffffffff, 0x0, r7, 0x2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r12 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x110, 0xd, {0x0, @empty, @empty}}}], 0x20}, 0x0) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x4b, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) 4.140046202s ago: executing program 1 (id=1607): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@qipcrtr={0x2a, 0x3, 0x7ffe}, 0x80, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002182) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890c, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x11514, 0x0, 0x8, 0x2, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f70000000100e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d000200354001000400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r7 = perf_event_open(&(0x7f00000014c0)={0x5, 0x80, 0x0, 0xfe, 0xff, 0x5, 0x0, 0x1, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x1590, 0x0, 0x8, 0x3, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r3) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000070000000000000000000000850000004100000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x0, 0xe, 0x0, &(0x7f0000000000)="f64d10ba369286257f17ab895d92", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @fwd={0x2}, @struct={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}, {0x0, [0x0, 0x51]}}, &(0x7f00000005c0)=""/240, 0x40, 0xf0, 0x1}, 0x20) r10 = perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x4, 0xf9, 0x8, 0x13, 0x0, 0x1, 0x2000, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x6, 0x400}, 0x100000, 0x0, 0x8, 0x4, 0x4, 0x2, 0x3, 0x0, 0x2, 0x0, 0xb0f}, r0, 0x7, r7, 0x1) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={r2, 0x58, &(0x7f0000000480)}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x42082, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, r10, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x8601, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x4, 0x8, 0x2c, 0x5, 0x0, 0x1, 0x200, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={0x0, 0xb}, 0xc0, 0x9, 0x6, 0x9, 0x0, 0x0, 0xfff, 0x0, 0x7ff, 0x0, 0x9}, 0x0, 0x40003, 0xffffffffffffffff, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x400}) 3.794748488s ago: executing program 0 (id=1609): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x28, 0x1, 0x0, 0x3, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x2, 0x200000000000001, 0x106) socket$kcm(0xa, 0x922000000003, 0x11) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb0}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$kcm(0xa, 0x1, 0x106) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x161) sendmsg$inet(r3, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="20000000110000000000000007000000071006"], 0x20}, 0x0) 3.705843369s ago: executing program 4 (id=1610): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socket$kcm(0x10, 0x2, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002f000b08d25a80648c7494f90424fc600b0002", 0x17}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0xa, 0x3, 0x73) recvmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x40010001) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x10, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="934300005a"], 0xfe33) 3.579375922s ago: executing program 3 (id=1611): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b702000000070000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000be000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80008, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) (async) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f00000000c0)="279a004c6588d5d6dc03d5cc6000", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r0, 0x2000012, 0x700, 0xb8, &(0x7f00000004c0)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000001400180000001800000005000000000000000000000a040000000f00000000000008040000000000305f00"], &(0x7f0000000100)=""/162, 0x35, 0xa2, 0x1, 0xfff}, 0x28) 3.358577355s ago: executing program 0 (id=1612): r0 = socket$kcm(0x10, 0x400000002, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0xf, &(0x7f0000000900)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x104007, 0xac5d, 0x0, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x900, 0x0, 0x0, 0x2, 0x3}, @const={0x0, 0x0, 0x0, 0xb}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x3e}, 0x20) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000010c0)={r2, 0xfffffffffffffd62, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0}}, 0x10) sendmsg$inet(r1, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002400)={0xffffffffffffffff, 0x0, 0xc, 0x0, &(0x7f0000000200)="bb8875ab7143f621b339dd17", 0x0, 0x873, 0x0, 0x0, 0x0, &(0x7f00000022c0), &(0x7f0000002340), 0x3, 0x0, 0x8}, 0x50) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000140)="5c00000013006bcc9e3b6f5c441d0000007ea60864160af36514000cc00800020007000200060001c00300", 0x2b}, {&(0x7f0000000440)}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x4008052) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x3, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000085100000ffffffff"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f00}, 0x94) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r3}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x11, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002c000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2, 0x0, 0x0, 0x1000000}, 0x0) 3.324253256s ago: executing program 2 (id=1613): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}}]}, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@bloom_filter={0x1e, 0x0, 0x6f65, 0x5, 0x1, r2, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x3, 0x9}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000800)={&(0x7f00000002c0)="10541c80643f30d95c1360a408c9d581176ed308ce89019af3a4dcd3f3d80dcc0a6c82c62cac3373daee35175998c421cd4555b7ff38b2012679f9a47bcaabc38823e392d732e7191def4ad4dace32575082c20ece9aaae1d2193667ad2ccce8a5bc65c299e6d012990b4516f6f144cb8a033783f0e77313b57f302e691293dc8cf7d776f294988fd6bb3225ecadcc29dc0067b309468cc86abc6dbae89a171532ae3964d8636e5e21e6ad72", &(0x7f0000000680)=""/98, &(0x7f0000000700)="0d71105b32ecb38d51429c3c6f6eec7b0e647aee", &(0x7f0000000740)="1abaa05c44ee1b796dbd1a2415216d338c177cf91906c7b83d6294860e50094c459603efdf5c83f18d6bea0381e0c1b7a38900a3baa18da02c3e5a5278c20f1b", 0x3306, r5, 0x4}, 0x38) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) close(r1) perf_event_open(&(0x7f0000000140)={0x2, 0xa0, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfffffffffffffff8}, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x27, 0x5, 0x0, &(0x7f0000000180)="0005000000", 0x0, 0x405, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)="d8000000100067e56353a3aa7143a0b8c81d080b25000000e8fe55a19c9d8714060014000000000508001a0043000040a80012001200014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d765dd11683296b7947968c7c0b7a196e6f6", 0x6d}, {&(0x7f0000000240)="aa581ff83dac4a519b67538bfa897e210c31e1446808358248cf2d795634b1094ce81c3876aff89235b78ea0e5c5badfa122797d62d71abfd4b177496261c09ada7441b4f31c0900fc4b2a325fb5e811fead55530751e6f4bc4b40d94743ed5bd8ec1f7f7b0abcc6eaabeb", 0x6b}], 0x2}, 0x0) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r7, &(0x7f0000000180)=ANY=[@ANYRES8=r1, @ANYBLOB="3ee901"], 0x9a) 3.311275386s ago: executing program 3 (id=1614): r0 = socket$kcm(0x2, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x1f, 0xd, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000050000000000000082000000850000000500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000038000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181004000000004000000000000000e000a000d00000002800200121f", 0x2e}], 0x1}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8916, &(0x7f0000000000)={'bond_slave_0\x00', @random="02001400e008"}) r4 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r4, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000280)='cond_slav\xd4\xdd\x8c\a\xcdew\xb3\x00'}, 0xfffffd9e) 2.919152192s ago: executing program 0 (id=1615): r0 = socket$kcm(0x2, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x1f, 0xd, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000050000000000000082000000850000000500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000038000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181004000000004000000000000000e000a000d00000002800200121f", 0x2e}], 0x1}, 0x0) (fail_nth: 1) ioctl$SIOCSIFHWADDR(r0, 0x8916, &(0x7f0000000000)={'bond_slave_0\x00', @random="02001400e008"}) r4 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r4, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000280)='cond_slav\xd4\xdd\x8c\a\xcdew\xb3\x00'}, 0xfffffd9e) 2.913946423s ago: executing program 1 (id=1616): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x11, 0x6, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x9}, [@cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffffd}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000001480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x21, 0x2, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d33, 0x8015, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x500, 0x1000000, 0x0, 0x0, 0x10, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="0600"}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0x5ae) r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x7, r5, 0x0) socketpair(0x15, 0x5, 0x0, &(0x7f0000000500)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) r6 = socket$kcm(0x23, 0x5, 0x0) sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x10004000) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89ed, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) r9 = openat$cgroup_procs(r7, &(0x7f0000001a80)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000000380), 0x12) write$cgroup_int(r8, &(0x7f0000000040)=0x2d00, 0x1) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r0}, 0xc) 2.809257184s ago: executing program 3 (id=1617): r0 = socket$kcm(0x2, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x1f, 0xd, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000050000000000000082000000850000000500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000038000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000810000000000000099d51bd6434c8d63036c000000000000000000007e4fa51ba76ec6808456643139b0bd6f"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0x6}, 0x8100, 0xc8, 0xffffffff, 0x0, 0x0, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2212102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa00006558"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181004000000004000000000000000e000a000d00000002800200121f", 0x2e}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r8, 0x0, 0x0}, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8916, &(0x7f0000000000)={'bond_slave_0\x00', @random="02001400e008"}) r9 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r9, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000280)='cond_slav\xd4\xdd\x8c\a\xcdew\xb3\x00'}, 0xfffffd9e) 2.106183405s ago: executing program 4 (id=1618): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000003000085"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x11200, 0x2000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x8a, 0x7, 0x0, 0x3, 0x0, 0x10000000000, 0x8, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x4, @perf_config_ext={0x0, 0x4}, 0x20, 0x3, 0xfffffffc, 0x6, 0x7, 0x4, 0x0, 0x0, 0xb, 0x0, 0xdea}, 0x0, 0x0, 0xffffffffffffffff, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') r7 = perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, 0x0, &(0x7f0000000140)=r9}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, &(0x7f0000000280), &(0x7f0000000380)=r8}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r10 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r10, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0xc, "e8"}, {0x18, 0x110, 0x1, '\x00'}, {0x10, 0x116, 0x1}], 0x40}, 0x0) r11 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xd000000000000000}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r11, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000001040)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9, 0x2, @perf_bp={0x0, 0x1}, 0x1aa63, 0x0, 0x7fffffff, 0x1, 0x8, 0x3, 0x7, 0x0, 0x7fffffff, 0x0, 0xb}, 0xffffffffffffffff, 0x0, r7, 0x2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r12 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x110, 0xd, {0x0, @empty, @empty}}}], 0x20}, 0x0) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x4b, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) 1.981282718s ago: executing program 3 (id=1619): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socket$kcm(0xa, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x10, 0x2, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x86e) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400e9ffb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac59}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x810000a6, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888fb", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.904133229s ago: executing program 1 (id=1620): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000012000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xd, 0x0, 0x0, 0x0, 0x7e6b, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\v'], 0x48) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x3, {{0x40, 0xffffff0b}, 0x1}}, 0x80, 0x0}, 0x0) 1.84966706s ago: executing program 2 (id=1621): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x52, 0x14}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r1, 0x29, 0x4b, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x3, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x1e) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r3, &(0x7f0000000040)}, 0x20) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r4, 0x0, 0x4, 0x0, 0x28) 1.757498261s ago: executing program 0 (id=1622): r0 = socket$kcm(0x10, 0x2, 0x10) recvmsg$kcm(r0, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x10100) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="1400000020000b0fd25a806c8c6f94f90124fc60", 0x14}], 0x1}, 0x4000010) r3 = socket$kcm(0x10, 0x2, 0x10) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r5 = socket$kcm(0x1e, 0x4, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x900, 0x0) ioctl$TUNGETDEVNETNS(r6, 0x54e3, 0x0) r7 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r8 = socket$kcm(0x1e, 0x4, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000003640)={0x2, 0xe, &(0x7f0000000080)=@raw=[@map_fd={0x18, 0xb, 0x1, 0x0, 0x1}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x6}, @map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x8b}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xa}, @jmp={0x5, 0x1, 0x6, 0x6, 0x9, 0x2, 0x1}, @map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @alu={0x7, 0x0, 0x7, 0xa, 0x2, 0xfffffffffffffff0}], &(0x7f0000000100)='GPL\x00', 0x9, 0x1000, &(0x7f0000002540)=""/4096, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, &(0x7f0000003540)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000003580)={0x5, 0x8, 0x200, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f00000035c0)=[0xffffffffffffffff, 0x1], &(0x7f0000003600)=[{0x2, 0x5, 0xd, 0x7}, {0x4, 0x2, 0x10, 0xc}, {0x3, 0x2, 0x9, 0x5}, {0x2, 0x1, 0x9, 0x7}], 0x10, 0x8000}, 0x94) setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f00000008c0)=r9, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x200000000000, 0x80420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r10, 0x4008240b, &(0x7f0000000300)={0x0, 0x80, 0x5d, 0x6, 0x8, 0x7, 0x0, 0x2f, 0x20, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xaa5e, 0x0, @perf_bp={&(0x7f00000002c0), 0x5}, 0x8001, 0x0, 0xc, 0x3, 0x1000, 0x7, 0x8, 0x0, 0x4, 0x0, 0x9}) write$cgroup_subtree(r8, &(0x7f0000000040)=ANY=[], 0xfdef) recvmsg(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001500)=""/4098, 0x1002}, {&(0x7f0000000680)=""/240}], 0x221}, 0x1c1) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000b0000000401a80016000800014009001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0xfdef) recvmsg(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002a80)=""/4096, 0xfdef}], 0x1}, 0x10021) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b08d25a80648c7494f90224fc605800024004000400050082c137153e3719ac018015ac1720d1bd", 0x33fe0}], 0x1}, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000000c0), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x14}, 0x94) 1.629923493s ago: executing program 4 (id=1623): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x50) close(0x3) r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x4c, &(0x7f00000000c0), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="06000000040000000400000008"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x8000, 0x0, 0x8000}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x15, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000040000000000000000800000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000044671582850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000056210000a800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x39}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r1, @ANYBLOB="0000000000000000b70800000000fc007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000001a00)={r2, 0x1}, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r4, 0x0, 0xb, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000300)={r5, r3}, 0xc) 1.550260224s ago: executing program 3 (id=1624): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair(0x9, 0x1, 0x1, &(0x7f0000000240)={0x0, 0x0}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b05, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000850) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2826b47ad8ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b478abc5b196dd5308cb20c4e2a0bd702651bb39f10523102dcd8ece692159028f314e0d6bfa400475c6699fdc40efe0948e3cef7419a7f113134e5ee20fd87c4521ccfbd32d6f147f743d30866bdd86ca8bf0c7bcc475f4ed53517aaa51f1c151d859a7f0b53abd332c84bdad313e82ac3777a6f7f649ff8a25f6dfe09cb29213896b49a825257bf143e9fa3bbd47009e66fe5705b3ef2b40a182e408c680727d64e00e1ce508f8fd64ac6c84ccc28fc333067de63b9bb5daaa12ce60ee3779ded79651be69d2a413cd948a873dd7ad7017b150828cf100d3df8537f22aff58343c9ee966fceb594bbe10b911427f76a25a219be2f85287b7f83d323a30991067ad1369792166062085ff20c5fb9f6e4f78dd09c7d2d6ca3c8a5d0d26ccbe576f44a1bc94194817"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x108282, 0xac5d, 0x0, 0x9, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x0, 0x24, 0x0, 0x25) r2 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x6, 0x7, &(0x7f0000000040)=r0, 0x4) 1.507942705s ago: executing program 1 (id=1625): socket$kcm(0xa, 0x3, 0x73) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000001) close(0x3) r3 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, 0x0}, 0x41) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x1d, 0x1, 0xfc, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0, 0x8}, 0x21, 0x8000, 0xe, 0x0, 0x0, 0x17d, 0x0, 0x0, 0x400, 0x0, 0x6}, 0xffffffffffffffff, 0xfffffffffffffffe, r0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0x3, &(0x7f0000000100)=ANY=[@ANYRESDEC=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000900)=r4, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8d}, 0x48) r6 = socket$kcm(0xa, 0x2, 0x73) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, 0x0, 0x0) setsockopt$sock_attach_bpf(r6, 0x29, 0x11, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfe6d, 0x4}, 0x0, 0x5d5, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(r3, 0x84, 0x1e, 0x0, 0x0) socket$kcm(0x29, 0x7, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x1e, &(0x7f0000000040), 0x4) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0xfb, 0x0, 0x5d2e, 0x40, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0xfffffffffffffffe, 0x2000000000000005}, 0x51f5, 0x0, 0x7f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.155851771s ago: executing program 4 (id=1626): r0 = socket$kcm(0x10, 0x400000002, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0xf, &(0x7f0000000900)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x104007, 0xac5d, 0x0, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @const={0x0, 0x0, 0x0, 0xb}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x3e}, 0x20) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000010c0)={r2, 0xfffffffffffffd62, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0}}, 0x10) sendmsg$inet(r1, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002400)={0xffffffffffffffff, 0x0, 0xc, 0x0, &(0x7f0000000200)="bb8875ab7143f621b339dd17", 0x0, 0x873, 0x0, 0x0, 0x0, &(0x7f00000022c0), &(0x7f0000002340), 0x3, 0x0, 0x8}, 0x50) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000140)="5c00000013006bcc9e3b6f5c441d0000007ea60864160af36514000cc00800020007000200060001c00300", 0x2b}, {&(0x7f0000000440)}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x4008052) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x3, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000085100000ffffffff"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f00}, 0x94) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r3}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x11, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002c000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2, 0x0, 0x0, 0x1000000}, 0x0) 820.434816ms ago: executing program 2 (id=1627): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@qipcrtr={0x2a, 0x3, 0x7ffe}, 0x80, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002182) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890c, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x11514, 0x0, 0x8, 0x2, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f70000000100e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d000200354001000400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r7 = perf_event_open(&(0x7f00000014c0)={0x5, 0x80, 0x0, 0xfe, 0xff, 0x5, 0x0, 0x1, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x1590, 0x0, 0x8, 0x3, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r3) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000070000000000000000000000850000004100000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x0, 0xe, 0x0, &(0x7f0000000000)="f64d10ba369286257f17ab895d92", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @fwd={0x2}, @struct={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}, {0x0, [0x0, 0x51]}}, &(0x7f00000005c0)=""/240, 0x40, 0xf0, 0x1}, 0x20) r10 = perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x4, 0xf9, 0x8, 0x13, 0x0, 0x1, 0x2000, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x6, 0x400}, 0x100000, 0x0, 0x8, 0x4, 0x4, 0x2, 0x3, 0x0, 0x2, 0x0, 0xb0f}, r0, 0x7, r7, 0x1) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={r2, 0x58, &(0x7f0000000480)}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x42082, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, r10, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x8601, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x4, 0x8, 0x2c, 0x5, 0x0, 0x1, 0x200, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={0x0, 0xb}, 0xc0, 0x9, 0x6, 0x9, 0x0, 0x0, 0xfff, 0x0, 0x7ff, 0x0, 0x9}, 0x0, 0x40003, 0xffffffffffffffff, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x400}) 820.107836ms ago: executing program 3 (id=1628): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200000000}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f0000000080)={'batadv0\x00'}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000640)="25b2b3cbea40", 0x6}], 0x1, 0x0, 0x0, 0x900}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe5538250015000600149b0000001208000313eba96240a8002b", 0x33}], 0x1}, 0x80) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfe33) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x103442, 0x0) ioctl$TUNSETIFF(r3, 0x400454da, &(0x7f0000000140)={'batadv0\x00'}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x411}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000240)={'\x00', 0x52d35ce30131f272}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x19, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x75f}, @tail_call, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}, @exit], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000007c0)='GPL\x00', 0x8, 0x89, &(0x7f0000000880)=""/137, 0xbd0fcc6b68963e68, 0x40, '\x00', 0x0, 0x25, r3, 0x8, &(0x7f0000000ac0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000b00)={0x1, 0xd, 0x54, 0xa9}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000c80)=[{0x3, 0x2, 0x5, 0x8d5ab9e921189f16}, {0x2, 0x3, 0x1, 0x1}, {0x1, 0x2, 0x6, 0xc}, {0x1, 0x1, 0x2, 0x2}, {0x1, 0x3, 0xd, 0x9}, {0x5, 0x5, 0x8, 0x7}], 0x10, 0x9}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x8d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0x6f5f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000380), 0x12) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x17200, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d5d, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xb, 0xffffffffffffffff, 0x8) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007200000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r7}, 0xc) 649.403699ms ago: executing program 0 (id=1629): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000003000085"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x11200, 0x2000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x8a, 0x7, 0x0, 0x3, 0x0, 0x10000000000, 0x8, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x4, @perf_config_ext={0x0, 0x4}, 0x20, 0x3, 0xfffffffc, 0x6, 0x7, 0x4, 0x0, 0x0, 0xb, 0x0, 0xdea}, 0x0, 0x0, 0xffffffffffffffff, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') r7 = perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, 0x0, &(0x7f0000000140)=r9}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, &(0x7f0000000280), &(0x7f0000000380)=r8}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r10 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r10, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0xc, "e8"}, {0x18, 0x110, 0x1, '\x00'}, {0x10, 0x116, 0x1}], 0x40}, 0x0) r11 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xd000000000000000}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r11, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000001040)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9, 0x2, @perf_bp={0x0, 0x1}, 0x1aa63, 0x0, 0x7fffffff, 0x1, 0x8, 0x3, 0x7, 0x0, 0x7fffffff, 0x0, 0xb}, 0xffffffffffffffff, 0x0, r7, 0x2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r12 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x110, 0xd, {0x0, @empty, @empty}}}], 0x20}, 0x0) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x4b, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) 594.79835ms ago: executing program 4 (id=1630): r0 = socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000007f030010000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad01409bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33", 0x79}, {&(0x7f0000000000)='$2`\x00'/16, 0x10}], 0x2}, 0x80) 594.53187ms ago: executing program 1 (id=1631): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x572, @remote, 0x8700}, 0x80, &(0x7f0000001340)=[{&(0x7f0000000040)="f4001100022b3325a6d5b02f3af865fe8007000000007afefff50000090000000000000000", 0x25}, {&(0x7f0000000080)="e3da9b885d9405c5ba6488784d33b46fbe87454b6ce4bf00000000", 0x1b}, {&(0x7f0000000140)="9d7fa74553ce3f5d59516d02ede9999f3b073dd99175af73c8a3248a83807167484645540f8749acf5a7b3fe4fbe939939d14b68517342797d181af72c28b57d02234901e359e6a3807d9181abfbd8d9ad9bd93e89a528e4585e60fa3f837e7480f408a5b286c81a5103e240fc07e74b65ab810bee62242fe6893e41", 0x7c}, {&(0x7f0000000340)="12c39a00e0afe61bf7be1383722dc41b141b2e325c18bc7d1f9c2c0d4e8f7e8055e109410dbf093ac0342c3e9ca417cba49e00b2cf6f2bc1f61db74fdb8c4e5e8f714f2f8d23c88475d5aeae3ac10e941d563de1fe9444a84395911574c4a28d2172c585a5bf79232e4c901cae38ac974b8cd2b2d2066aab8669743043ebca311b81f25b2dd5df5af2085a117461cfc249bfc7837cb6d802f5db27dd5f3a5530e6d9f2fef425106e61817f428f46890dde4e0aaf39a899e97cac2cf8b13b12b4f013c8cf1718fce8882a1a6b3469beedc74cd098e8ca41cd0af438d44004437c7359386972149f5ab5b3a0e5", 0xec}], 0x4}, 0x0) 257.644636ms ago: executing program 4 (id=1632): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x301) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x4, 0x604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x5, 0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000100)='#+(\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000000c0)='\x00') ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x35, 0x1, 0x8, 0x80000000}, {0x860, 0x8}, {0x4000}]}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000040)=0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x4, 0xe2004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x131}, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) close(r2) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5c000000130025cc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800250007000200060019000064bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="18010000000000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000002c0000000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={r3, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000001380)}}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xa, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35f0"], 0xcfa4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x9}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c"], 0xfdef) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000000), 0x4) perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) 160.947057ms ago: executing program 1 (id=1633): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b7"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x11200, 0x2000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x8a, 0x7, 0x0, 0x3, 0x0, 0x10000000000, 0x8, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x4, @perf_config_ext={0x0, 0x4}, 0x20, 0x3, 0xfffffffc, 0x6, 0x7, 0x4, 0x0, 0x0, 0xb, 0x0, 0xdea}, 0x0, 0x0, 0xffffffffffffffff, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') r7 = perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, 0x0, &(0x7f0000000140)=r9}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, &(0x7f0000000280), &(0x7f0000000380)=r8}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r10 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r10, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0xc, "e8"}, {0x18, 0x110, 0x1, '\x00'}, {0x10, 0x116, 0x1}], 0x40}, 0x0) r11 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xd000000000000000}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r11, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000001040)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9, 0x2, @perf_bp={0x0, 0x1}, 0x1aa63, 0x0, 0x7fffffff, 0x1, 0x8, 0x3, 0x7, 0x0, 0x7fffffff, 0x0, 0xb}, 0xffffffffffffffff, 0x0, r7, 0x2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r12 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x110, 0xd, {0x0, @empty, @empty}}}], 0x20}, 0x0) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x4b, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) 0s ago: executing program 0 (id=1634): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socket$kcm(0xa, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x10, 0x2, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x86e) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400e9ffb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac59}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x810000a6, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888fb", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): IBSS network, BSSID 50:50:50:50:50:50 [ 85.899896][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.910004][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.021365][ T4301] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.096171][ T4301] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.112138][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.152257][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.177939][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.188020][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.339383][ T4369] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.362457][ T4369] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.438475][ T1097] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.772038][ T27] cfg80211: failed to load regulatory.db [ 89.938104][ T4398] netlink: 'syz.0.11': attribute type 10 has an invalid length. [ 90.002308][ T4397] netlink: 144 bytes leftover after parsing attributes in process `syz.2.12'. [ 90.011954][ T4398] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11'. [ 90.031893][ T4398] device team0 entered promiscuous mode [ 90.101215][ T4398] device team_slave_0 entered promiscuous mode [ 90.144264][ T4398] device team_slave_1 entered promiscuous mode [ 90.178827][ T4398] bridge0: port 3(team0) entered blocking state [ 90.185366][ T4398] bridge0: port 3(team0) entered disabled state [ 90.228521][ T4398] bridge0: port 3(team0) entered blocking state [ 90.235094][ T4398] bridge0: port 3(team0) entered forwarding state [ 91.054311][ T4416] netlink: 144 bytes leftover after parsing attributes in process `syz.4.15'. [ 93.795489][ T4431] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.19'. [ 93.970542][ T4441] netlink: 'syz.2.20': attribute type 2 has an invalid length. [ 93.986886][ T4441] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.20'. [ 96.215924][ T4280] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 96.224545][ T4280] Bluetooth: hci2: Injecting HCI hardware error event [ 96.241039][ T4290] Bluetooth: hci2: hardware error 0x00 [ 96.972389][ T4431] syz.3.19 (4431) used greatest stack depth: 15808 bytes left [ 98.934598][ T4290] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 100.534852][ T4472] netlink: 'syz.3.38': attribute type 22 has an invalid length. [ 100.593870][ T4472] netlink: 4 bytes leftover after parsing attributes in process `syz.3.38'. [ 101.340567][ T4481] netlink: 144 bytes leftover after parsing attributes in process `syz.2.32'. [ 101.591388][ T4483] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.34'. [ 101.829298][ T4491] netlink: 'syz.1.36': attribute type 2 has an invalid length. [ 101.862735][ T4491] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.36'. [ 104.930884][ T4290] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 104.939476][ T4290] Bluetooth: hci1: Injecting HCI hardware error event [ 104.951775][ T4280] Bluetooth: hci1: hardware error 0x00 [ 107.782986][ T4543] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.50'. [ 107.827480][ T4549] netlink: 'syz.3.51': attribute type 2 has an invalid length. [ 107.835722][ T4549] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.51'. [ 108.141251][ T4552] netlink: 'syz.2.52': attribute type 10 has an invalid length. [ 108.183582][ T4552] netlink: 40 bytes leftover after parsing attributes in process `syz.2.52'. [ 108.244739][ T4552] device team0 entered promiscuous mode [ 108.290806][ T4552] device team_slave_0 entered promiscuous mode [ 108.330222][ T4552] device team_slave_1 entered promiscuous mode [ 108.404325][ T4552] bridge0: port 3(team0) entered blocking state [ 108.462438][ T4552] bridge0: port 3(team0) entered disabled state [ 108.499812][ T4290] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 108.508436][ T4290] Bluetooth: hci3: Injecting HCI hardware error event [ 108.516129][ T4290] Bluetooth: hci3: hardware error 0x00 [ 108.564193][ T4552] bridge0: port 3(team0) entered blocking state [ 108.570685][ T4552] bridge0: port 3(team0) entered forwarding state [ 109.006731][ T4280] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 109.576621][ T4571] netlink: 'syz.3.58': attribute type 10 has an invalid length. [ 109.607390][ T4571] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 109.932134][ T4580] netlink: 'syz.3.66': attribute type 25 has an invalid length. [ 109.966740][ T4580] netlink: 'syz.3.66': attribute type 28 has an invalid length. [ 110.169470][ T4585] Zero length message leads to an empty skb [ 110.208024][ T4589] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.71'. [ 110.897235][ T4605] netlink: 'syz.4.75': attribute type 29 has an invalid length. [ 110.934081][ T4605] netlink: 'syz.4.75': attribute type 29 has an invalid length. [ 111.055025][ T4608] netlink: 'syz.4.75': attribute type 29 has an invalid length. [ 111.094424][ T4606] netlink: 'syz.4.75': attribute type 29 has an invalid length. [ 111.176794][ T4290] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 114.132243][ T4634] device syzkaller0 entered promiscuous mode [ 114.265796][ T4644] FAULT_INJECTION: forcing a failure. [ 114.265796][ T4644] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 114.374135][ T4644] CPU: 1 PID: 4644 Comm: syz.0.84 Not tainted syzkaller #0 [ 114.381416][ T4644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 114.391588][ T4644] Call Trace: [ 114.394891][ T4644] [ 114.397837][ T4644] dump_stack_lvl+0x188/0x24e [ 114.402620][ T4644] ? show_regs_print_info+0x12/0x12 [ 114.407838][ T4644] ? load_image+0x410/0x410 [ 114.412362][ T4644] ? __lock_acquire+0x7bd0/0x7bd0 [ 114.417406][ T4644] ? snprintf+0xe5/0x140 [ 114.421681][ T4644] should_fail_ex+0x390/0x4c0 [ 114.426391][ T4644] _copy_to_user+0x2c/0x130 [ 114.430923][ T4644] simple_read_from_buffer+0xe3/0x150 [ 114.436312][ T4644] proc_fail_nth_read+0x1a6/0x220 [ 114.441355][ T4644] ? proc_fault_inject_write+0x310/0x310 [ 114.447029][ T4644] ? fsnotify_perm+0x248/0x550 [ 114.451808][ T4644] ? proc_fault_inject_write+0x310/0x310 [ 114.457458][ T4644] vfs_read+0x2db/0x960 [ 114.461636][ T4644] ? kernel_read+0x1e0/0x1e0 [ 114.466256][ T4644] ? __fget_files+0x28/0x460 [ 114.470862][ T4644] ? __fget_files+0x3fc/0x460 [ 114.475588][ T4644] ? __fdget_pos+0x2ae/0x360 [ 114.480194][ T4644] ? ksys_read+0x70/0x260 [ 114.484544][ T4644] ksys_read+0x14d/0x260 [ 114.488806][ T4644] ? vfs_write+0x9a0/0x9a0 [ 114.493259][ T4644] ? lockdep_hardirqs_on+0x94/0x140 [ 114.498478][ T4644] do_syscall_64+0x4c/0xa0 [ 114.502906][ T4644] ? clear_bhb_loop+0x60/0xb0 [ 114.507594][ T4644] ? clear_bhb_loop+0x60/0xb0 [ 114.512284][ T4644] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 114.518214][ T4644] RIP: 0033:0x7f39a015d68e [ 114.522640][ T4644] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 114.542255][ T4644] RSP: 002b:00007f39a1027fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 114.550684][ T4644] RAX: ffffffffffffffda RBX: 00007f39a10286c0 RCX: 00007f39a015d68e [ 114.558665][ T4644] RDX: 000000000000000f RSI: 00007f39a10280a0 RDI: 0000000000000005 [ 114.566647][ T4644] RBP: 00007f39a1028090 R08: 0000000000000000 R09: 0000000000000000 [ 114.574626][ T4644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.582606][ T4644] R13: 00007f39a0416038 R14: 00007f39a0415fa0 R15: 00007ffc8173b808 [ 114.590637][ T4644] [ 118.761142][ T4683] netlink: 144 bytes leftover after parsing attributes in process `syz.4.97'. [ 120.740772][ T4679] netlink: 140 bytes leftover after parsing attributes in process `syz.2.95'. [ 120.750181][ T4679] netlink: 10 bytes leftover after parsing attributes in process `syz.2.95'. [ 120.761857][ T4679] bond0: (slave bond_slave_0): Releasing backup interface [ 120.783785][ T4679] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 121.599296][ T4714] netlink: 144 bytes leftover after parsing attributes in process `syz.2.109'. [ 121.628350][ T4718] FAULT_INJECTION: forcing a failure. [ 121.628350][ T4718] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 121.748334][ T4718] CPU: 1 PID: 4718 Comm: syz.0.111 Not tainted syzkaller #0 [ 121.755697][ T4718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 121.765778][ T4718] Call Trace: [ 121.769079][ T4718] [ 121.772033][ T4718] dump_stack_lvl+0x188/0x24e [ 121.776737][ T4718] ? show_regs_print_info+0x12/0x12 [ 121.781954][ T4718] ? load_image+0x410/0x410 [ 121.786481][ T4718] ? __lock_acquire+0x7bd0/0x7bd0 [ 121.791540][ T4718] ? snprintf+0xe5/0x140 [ 121.795830][ T4718] should_fail_ex+0x390/0x4c0 [ 121.800539][ T4718] _copy_to_user+0x2c/0x130 [ 121.805078][ T4718] simple_read_from_buffer+0xe3/0x150 [ 121.810478][ T4718] proc_fail_nth_read+0x1a6/0x220 [ 121.815524][ T4718] ? proc_fault_inject_write+0x310/0x310 [ 121.821189][ T4718] ? fsnotify_perm+0x248/0x550 [ 121.825975][ T4718] ? proc_fault_inject_write+0x310/0x310 [ 121.831622][ T4718] vfs_read+0x2db/0x960 [ 121.835807][ T4718] ? kernel_read+0x1e0/0x1e0 [ 121.840421][ T4718] ? __fget_files+0x28/0x460 [ 121.845031][ T4718] ? __fget_files+0x3fc/0x460 [ 121.849742][ T4718] ? __fdget_pos+0x2ae/0x360 [ 121.854361][ T4718] ? ksys_read+0x70/0x260 [ 121.858712][ T4718] ksys_read+0x14d/0x260 [ 121.862975][ T4718] ? vfs_write+0x9a0/0x9a0 [ 121.867420][ T4718] ? lockdep_hardirqs_on+0x94/0x140 [ 121.872637][ T4718] do_syscall_64+0x4c/0xa0 [ 121.877063][ T4718] ? clear_bhb_loop+0x60/0xb0 [ 121.881773][ T4718] ? clear_bhb_loop+0x60/0xb0 [ 121.886469][ T4718] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 121.892383][ T4718] RIP: 0033:0x7f39a015d68e [ 121.896816][ T4718] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 121.916431][ T4718] RSP: 002b:00007f39a1027fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 121.924893][ T4718] RAX: ffffffffffffffda RBX: 00007f39a10286c0 RCX: 00007f39a015d68e [ 121.932877][ T4718] RDX: 000000000000000f RSI: 00007f39a10280a0 RDI: 0000000000000004 [ 121.940858][ T4718] RBP: 00007f39a1028090 R08: 0000000000000000 R09: 0000000000000000 [ 121.948847][ T4718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.956828][ T4718] R13: 00007f39a0416038 R14: 00007f39a0415fa0 R15: 00007ffc8173b808 [ 121.964834][ T4718] [ 123.697699][ T4735] can: request_module (can-proto-0) failed. [ 124.189576][ T4747] FAULT_INJECTION: forcing a failure. [ 124.189576][ T4747] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 124.226748][ T4747] CPU: 0 PID: 4747 Comm: syz.3.118 Not tainted syzkaller #0 [ 124.234106][ T4747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 124.244189][ T4747] Call Trace: [ 124.247502][ T4747] [ 124.250462][ T4747] dump_stack_lvl+0x188/0x24e [ 124.255180][ T4747] ? show_regs_print_info+0x12/0x12 [ 124.260422][ T4747] ? load_image+0x410/0x410 [ 124.264975][ T4747] ? __lock_acquire+0x7bd0/0x7bd0 [ 124.270054][ T4747] should_fail_ex+0x390/0x4c0 [ 124.274771][ T4747] _copy_from_iter+0x1c0/0x1130 [ 124.279669][ T4747] ? copyout_mc+0x110/0x110 [ 124.284213][ T4747] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 124.290239][ T4747] ? __lock_acquire+0x7bd0/0x7bd0 [ 124.295486][ T4747] ? lock_chain_count+0x20/0x20 [ 124.300377][ T4747] ? _raw_spin_lock_irq+0xb7/0xf0 [ 124.305444][ T4747] ? _raw_spin_lock_irqsave+0x100/0x100 [ 124.311030][ T4747] ? page_copy_sane+0x4e/0x390 [ 124.315829][ T4747] copy_page_from_iter+0x77/0x100 [ 124.320893][ T4747] pipe_write+0x859/0x1ae0 [ 124.325378][ T4747] ? pipe_read+0x12d0/0x12d0 [ 124.330009][ T4747] ? end_current_label_crit_section+0x14b/0x170 [ 124.336292][ T4747] ? common_file_perm+0x171/0x1c0 [ 124.341358][ T4747] vfs_write+0x482/0x9a0 [ 124.345649][ T4747] ? file_end_write+0x250/0x250 [ 124.350543][ T4747] ? __fget_files+0x3fc/0x460 [ 124.355262][ T4747] ? __fdget_pos+0x1d4/0x360 [ 124.359888][ T4747] ? ksys_write+0x70/0x260 [ 124.364352][ T4747] ksys_write+0x14d/0x260 [ 124.368723][ T4747] ? __ia32_sys_read+0x80/0x80 [ 124.373529][ T4747] ? lockdep_hardirqs_on+0x94/0x140 [ 124.378766][ T4747] do_syscall_64+0x4c/0xa0 [ 124.383221][ T4747] ? clear_bhb_loop+0x60/0xb0 [ 124.387927][ T4747] ? clear_bhb_loop+0x60/0xb0 [ 124.392615][ T4747] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 124.398523][ T4747] RIP: 0033:0x7f70e839ce59 [ 124.402952][ T4747] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.422569][ T4747] RSP: 002b:00007f70e91c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 124.431003][ T4747] RAX: ffffffffffffffda RBX: 00007f70e8615fa0 RCX: 00007f70e839ce59 [ 124.438985][ T4747] RDX: 000000000000fdef RSI: 0000200000000200 RDI: 0000000000000000 [ 124.446969][ T4747] RBP: 00007f70e91c6090 R08: 0000000000000000 R09: 0000000000000000 [ 124.454948][ T4747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 124.462925][ T4747] R13: 00007f70e8616038 R14: 00007f70e8615fa0 R15: 00007fffd8afe5d8 [ 124.470921][ T4747] [ 125.444843][ T4768] netlink: 144 bytes leftover after parsing attributes in process `syz.1.127'. [ 125.663008][ T4767] netlink: 'syz.3.125': attribute type 2 has an invalid length. [ 126.463219][ T4767] device 0 entered promiscuous mode [ 127.845874][ T4801] Driver unsupported XDP return value 0 on prog (id 114) dev N/A, expect packet loss! [ 128.562735][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 128.686140][ T4810] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 128.756987][ T4817] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.141'. [ 128.942527][ T4827] netlink: 144 bytes leftover after parsing attributes in process `syz.3.144'. [ 130.755350][ T4858] netlink: 40 bytes leftover after parsing attributes in process `syz.2.155'. [ 130.980311][ T4858] netlink: 'syz.2.155': attribute type 29 has an invalid length. [ 131.137976][ T4858] netlink: 'syz.2.155': attribute type 29 has an invalid length. [ 132.588362][ T4884] netlink: 144 bytes leftover after parsing attributes in process `syz.1.163'. [ 132.882740][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.889526][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.904175][ T4887] netlink: 132 bytes leftover after parsing attributes in process `syz.4.164'. [ 133.132275][ T4893] netlink: 4 bytes leftover after parsing attributes in process `syz.3.165'. [ 134.022956][ T4910] netlink: 40 bytes leftover after parsing attributes in process `syz.3.172'. [ 134.078986][ T4910] netlink: 'syz.3.172': attribute type 29 has an invalid length. [ 134.109044][ T4910] netlink: 'syz.3.172': attribute type 29 has an invalid length. [ 138.214804][ T4944] netlink: 144 bytes leftover after parsing attributes in process `syz.0.184'. [ 138.524173][ T4953] netlink: 40 bytes leftover after parsing attributes in process `syz.1.187'. [ 138.973767][ T4953] netlink: 'syz.1.187': attribute type 29 has an invalid length. [ 138.985787][ T4954] netlink: 60 bytes leftover after parsing attributes in process `syz.2.186'. [ 139.003448][ T4953] netlink: 'syz.1.187': attribute type 29 has an invalid length. [ 139.923242][ T4962] netlink: 'syz.4.190': attribute type 10 has an invalid length. [ 139.982592][ T4962] device veth1_macvtap left promiscuous mode [ 140.252708][ T4975] netlink: 'syz.0.194': attribute type 2 has an invalid length. [ 140.299709][ T4975] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.194'. [ 142.667312][ T4988] netlink: 'syz.0.197': attribute type 10 has an invalid length. [ 142.675150][ T4988] netlink: 40 bytes leftover after parsing attributes in process `syz.0.197'. [ 142.734095][ T4988] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 143.017469][ T4996] netlink: 144 bytes leftover after parsing attributes in process `syz.4.199'. [ 143.056021][ T4999] netlink: 40 bytes leftover after parsing attributes in process `syz.0.201'. [ 143.074245][ T4999] netlink: 'syz.0.201': attribute type 29 has an invalid length. [ 143.085671][ T4999] netlink: 'syz.0.201': attribute type 29 has an invalid length. [ 144.329684][ T5012] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.215'. [ 144.406639][ T5012] netlink: zone id is out of range [ 144.436685][ T5012] netlink: zone id is out of range [ 144.443496][ T5012] netlink: zone id is out of range [ 144.471370][ T5012] netlink: zone id is out of range [ 144.492880][ T5012] netlink: zone id is out of range [ 144.517913][ T5012] netlink: zone id is out of range [ 144.531733][ T5012] netlink: zone id is out of range [ 144.547942][ T5012] netlink: zone id is out of range [ 144.556247][ T5012] netlink: zone id is out of range [ 157.390860][ T5033] netlink: 'syz.3.210': attribute type 10 has an invalid length. [ 157.418598][ T5033] device veth1_macvtap left promiscuous mode [ 157.682172][ T5047] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.212'. [ 158.690501][ T5071] netlink: 10 bytes leftover after parsing attributes in process `syz.4.220'. [ 158.712253][ T5074] netlink: 144 bytes leftover after parsing attributes in process `syz.2.221'. [ 159.952241][ T5093] netlink: 40 bytes leftover after parsing attributes in process `syz.1.227'. [ 159.979975][ T5085] netlink: 'syz.3.224': attribute type 10 has an invalid length. [ 160.035964][ T5085] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.038176][ T5093] netlink: 'syz.1.227': attribute type 29 has an invalid length. [ 160.097163][ T5085] device bridge_slave_1 left promiscuous mode [ 160.104271][ T5085] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.159229][ T5093] netlink: 'syz.1.227': attribute type 29 has an invalid length. [ 160.852077][ T5107] device syzkaller0 entered promiscuous mode [ 161.665911][ T5126] netlink: 144 bytes leftover after parsing attributes in process `syz.3.239'. [ 162.092833][ T5119] netlink: 'syz.1.237': attribute type 10 has an invalid length. [ 163.574131][ T5119] device veth1_macvtap left promiscuous mode [ 164.016225][ T5139] netlink: 40 bytes leftover after parsing attributes in process `syz.3.243'. [ 164.051611][ T5139] netlink: 'syz.3.243': attribute type 29 has an invalid length. [ 165.217907][ T5139] netlink: 'syz.3.243': attribute type 29 has an invalid length. [ 165.848476][ T5156] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.249'. [ 166.375877][ T5165] netlink: 144 bytes leftover after parsing attributes in process `syz.3.252'. [ 167.500837][ T5164] netlink: 10 bytes leftover after parsing attributes in process `syz.1.251'. [ 167.514200][ T5170] netlink: 'syz.4.245': attribute type 10 has an invalid length. [ 167.543833][ T5170] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.559185][ T5170] device bridge_slave_1 left promiscuous mode [ 167.573361][ T5170] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.769919][ T5178] netlink: 'syz.3.254': attribute type 39 has an invalid length. [ 168.063771][ T5190] netlink: 40 bytes leftover after parsing attributes in process `syz.2.259'. [ 168.104409][ T5190] netlink: 'syz.2.259': attribute type 29 has an invalid length. [ 170.937614][ T5188] netlink: 'syz.0.258': attribute type 10 has an invalid length. [ 170.945533][ T5190] netlink: 'syz.2.259': attribute type 29 has an invalid length. [ 171.202365][ T5202] netlink: 144 bytes leftover after parsing attributes in process `syz.0.264'. [ 171.567154][ T5208] FAULT_INJECTION: forcing a failure. [ 171.567154][ T5208] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 171.634509][ T5208] CPU: 1 PID: 5208 Comm: syz.2.266 Not tainted syzkaller #0 [ 171.641892][ T5208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 171.651995][ T5208] Call Trace: [ 171.655319][ T5208] [ 171.658284][ T5208] dump_stack_lvl+0x188/0x24e [ 171.663011][ T5208] ? show_regs_print_info+0x12/0x12 [ 171.668255][ T5208] ? load_image+0x410/0x410 [ 171.672819][ T5208] ? __lock_acquire+0x7bd0/0x7bd0 [ 171.677894][ T5208] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 171.683918][ T5208] ? __lock_acquire+0x7bd0/0x7bd0 [ 171.688996][ T5208] should_fail_ex+0x390/0x4c0 [ 171.693719][ T5208] _copy_from_user+0x2c/0x170 [ 171.698444][ T5208] __ia32_sys_rt_sigreturn+0x21c/0x750 [ 171.703953][ T5208] ? load_gs_index+0x130/0x130 [ 171.708785][ T5208] ? lock_chain_count+0x20/0x20 [ 171.713679][ T5208] ? exit_to_user_mode_loop+0xdc/0x110 [ 171.719193][ T5208] ? lockdep_hardirqs_on+0x94/0x140 [ 171.724436][ T5208] do_syscall_64+0x4c/0xa0 [ 171.728894][ T5208] ? clear_bhb_loop+0x60/0xb0 [ 171.733607][ T5208] ? clear_bhb_loop+0x60/0xb0 [ 171.738322][ T5208] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 171.744259][ T5208] RIP: 0033:0x7f515633e1d9 [ 171.748711][ T5208] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25 [ 171.768362][ T5208] RSP: 002b:00007f515730ca80 EFLAGS: 00000246 ORIG_RAX: 000000000000000f [ 171.776825][ T5208] RAX: ffffffffffffffda RBX: 00007f5156615fa0 RCX: 00007f515633e1d9 [ 171.784847][ T5208] RDX: 00007f515730ca80 RSI: 00007f515730cbb0 RDI: 0000000000000011 [ 171.792869][ T5208] RBP: 00007f515730d090 R08: 0000000000000000 R09: 0000000000000000 [ 171.800879][ T5208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.808893][ T5208] R13: 00007f5156616038 R14: 00007f5156615fa0 R15: 00007ffed587df08 [ 171.816921][ T5208] [ 172.857884][ T5229] netlink: 40 bytes leftover after parsing attributes in process `syz.3.273'. [ 172.934677][ T5229] netlink: 'syz.3.273': attribute type 29 has an invalid length. [ 173.034754][ T5229] netlink: 'syz.3.273': attribute type 29 has an invalid length. [ 173.323115][ T5244] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.280'. [ 173.378321][ T5244] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 173.552950][ T5247] netlink: 144 bytes leftover after parsing attributes in process `syz.1.283'. [ 173.638035][ T5245] netlink: 1010 bytes leftover after parsing attributes in process `syz.3.282'. [ 173.658116][ T5245] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 174.538435][ T5267] netlink: 144 bytes leftover after parsing attributes in process `syz.1.299'. [ 174.781949][ T5274] netlink: 'syz.0.292': attribute type 21 has an invalid length. [ 174.866988][ T5270] FAULT_INJECTION: forcing a failure. [ 174.866988][ T5270] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 174.906840][ T5270] CPU: 0 PID: 5270 Comm: syz.4.290 Not tainted syzkaller #0 [ 174.914208][ T5270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 174.924299][ T5270] Call Trace: [ 174.927607][ T5270] [ 174.930566][ T5270] dump_stack_lvl+0x188/0x24e [ 174.935290][ T5270] ? show_regs_print_info+0x12/0x12 [ 174.940533][ T5270] ? load_image+0x410/0x410 [ 174.945091][ T5270] ? __lock_acquire+0x7bd0/0x7bd0 [ 174.950170][ T5270] should_fail_ex+0x390/0x4c0 [ 174.954889][ T5270] _copy_from_user+0x2c/0x170 [ 174.959605][ T5270] iovec_from_user+0x143/0x360 [ 174.964411][ T5270] __import_iovec+0x6c/0x510 [ 174.969052][ T5270] import_iovec+0x6f/0xa0 [ 174.973425][ T5270] ___sys_sendmsg+0x252/0x360 [ 174.978170][ T5270] ? __sys_sendmsg+0x2a0/0x2a0 [ 174.983006][ T5270] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 174.988804][ T5270] __se_sys_sendmsg+0x1c3/0x2b0 [ 174.993699][ T5270] ? __x64_sys_sendmsg+0x80/0x80 [ 174.998699][ T5270] ? syscall_enter_from_user_mode+0x2a/0x80 [ 175.004640][ T5270] do_syscall_64+0x4c/0xa0 [ 175.009089][ T5270] ? clear_bhb_loop+0x60/0xb0 [ 175.013798][ T5270] ? clear_bhb_loop+0x60/0xb0 [ 175.018510][ T5270] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 175.024450][ T5270] RIP: 0033:0x7f891499ce59 [ 175.028899][ T5270] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.048553][ T5270] RSP: 002b:00007f891582c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 175.057003][ T5270] RAX: ffffffffffffffda RBX: 00007f8914c15fa0 RCX: 00007f891499ce59 [ 175.065012][ T5270] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 175.073004][ T5270] RBP: 00007f891582c090 R08: 0000000000000000 R09: 0000000000000000 [ 175.080986][ T5270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.088964][ T5270] R13: 00007f8914c16038 R14: 00007f8914c15fa0 R15: 00007ffeaa69fba8 [ 175.096965][ T5270] [ 175.243467][ T5280] netlink: 'syz.2.293': attribute type 29 has an invalid length. [ 175.348935][ T5280] netlink: 'syz.2.293': attribute type 29 has an invalid length. [ 175.944641][ T5295] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.297'. [ 177.569390][ T5317] netlink: 'syz.4.305': attribute type 39 has an invalid length. [ 180.704412][ T5326] netlink: 144 bytes leftover after parsing attributes in process `syz.1.306'. [ 181.004384][ T5334] netlink: 40 bytes leftover after parsing attributes in process `syz.4.310'. [ 181.126797][ T5334] netlink: 'syz.4.310': attribute type 29 has an invalid length. [ 181.198018][ T5334] netlink: 'syz.4.310': attribute type 29 has an invalid length. [ 181.450391][ T5341] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.311'. [ 181.504112][ T5341] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 182.068907][ T5352] netlink: 44 bytes leftover after parsing attributes in process `syz.0.315'. [ 182.210242][ T5352] netlink: 16054 bytes leftover after parsing attributes in process `syz.0.315'. [ 182.259921][ T5351] netlink: 14 bytes leftover after parsing attributes in process `syz.1.316'. [ 183.519785][ T5378] syz.4.323[5378] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 184.517026][ T5400] netlink: 60 bytes leftover after parsing attributes in process `syz.2.331'. [ 184.558590][ T5400] netlink: 60 bytes leftover after parsing attributes in process `syz.2.331'. [ 184.577002][ T5401] netlink: 60 bytes leftover after parsing attributes in process `syz.2.331'. [ 184.606447][ T5400] netlink: 60 bytes leftover after parsing attributes in process `syz.2.331'. [ 185.057600][ T5402] delete_channel: no stack [ 188.147157][ T5458] FAULT_INJECTION: forcing a failure. [ 188.147157][ T5458] name failslab, interval 1, probability 0, space 0, times 1 [ 188.201976][ T5466] netlink: 'syz.2.352': attribute type 10 has an invalid length. [ 188.227613][ T5458] CPU: 0 PID: 5458 Comm: syz.1.350 Not tainted syzkaller #0 [ 188.234998][ T5458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 188.245121][ T5458] Call Trace: [ 188.248451][ T5458] [ 188.251436][ T5458] dump_stack_lvl+0x188/0x24e [ 188.256191][ T5458] ? show_regs_print_info+0x12/0x12 [ 188.261454][ T5458] ? load_image+0x410/0x410 [ 188.266035][ T5458] ? __might_sleep+0xd0/0xd0 [ 188.270699][ T5458] ? __lock_acquire+0x7bd0/0x7bd0 [ 188.275826][ T5458] should_fail_ex+0x390/0x4c0 [ 188.278267][ T5466] __nla_validate_parse: 1 callbacks suppressed [ 188.278282][ T5466] netlink: 55 bytes leftover after parsing attributes in process `syz.2.352'. [ 188.280561][ T5458] should_failslab+0x5/0x20 [ 188.280590][ T5458] slab_pre_alloc_hook+0x59/0x300 [ 188.280629][ T5458] ? kvmalloc_node+0x6c/0x180 [ 188.310001][ T5458] __kmem_cache_alloc_node+0x4f/0x270 [ 188.315468][ T5458] ? kvmalloc_node+0x6c/0x180 [ 188.320215][ T5458] __kmalloc_node+0xa2/0x240 [ 188.324887][ T5458] kvmalloc_node+0x6c/0x180 [ 188.329467][ T5458] page_pool_create+0x1e7/0x5c0 [ 188.334403][ T5458] bpf_test_run_xdp_live+0x220/0x1a90 [ 188.339865][ T5458] ? bpf_dispatcher_xdp+0x800/0x1000 [ 188.345223][ T5458] ? text_poke_copy+0x7b/0x90 [ 188.349992][ T5458] ? bpf_dispatcher_xdp+0x800/0x1000 [ 188.355359][ T5458] ? bpf_dispatcher_change_prog+0xc90/0xf10 [ 188.361361][ T5458] ? xdp_convert_md_to_buff+0x330/0x330 [ 188.367134][ T5458] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 188.373478][ T5458] ? bpf_test_init+0x119/0x140 [ 188.378316][ T5458] ? xdp_convert_md_to_buff+0x5b/0x330 [ 188.383857][ T5458] bpf_prog_test_run_xdp+0x757/0xf80 [ 188.389214][ T5458] ? __lock_acquire+0x7bd0/0x7bd0 [ 188.394354][ T5458] ? dev_put+0x80/0x80 [ 188.398554][ T5458] ? dev_put+0x80/0x80 [ 188.402694][ T5458] bpf_prog_test_run+0x31c/0x390 [ 188.407724][ T5458] __sys_bpf+0x62b/0x780 [ 188.412056][ T5458] ? bpf_link_show_fdinfo+0x380/0x380 [ 188.417556][ T5458] ? lock_chain_count+0x20/0x20 [ 188.422519][ T5458] __x64_sys_bpf+0x78/0x90 [ 188.427013][ T5458] do_syscall_64+0x4c/0xa0 [ 188.431483][ T5458] ? clear_bhb_loop+0x60/0xb0 [ 188.436213][ T5458] ? clear_bhb_loop+0x60/0xb0 [ 188.440951][ T5458] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 188.446906][ T5458] RIP: 0033:0x7f24d6d9ce59 [ 188.451382][ T5458] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.465889][ T5464] can: request_module (can-proto-0) failed. [ 188.471023][ T5458] RSP: 002b:00007f24d7b88028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 188.471061][ T5458] RAX: ffffffffffffffda RBX: 00007f24d7015fa0 RCX: 00007f24d6d9ce59 [ 188.471081][ T5458] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 188.471099][ T5458] RBP: 00007f24d7b88090 R08: 0000000000000000 R09: 0000000000000000 [ 188.471117][ T5458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 188.471134][ T5458] R13: 00007f24d7016038 R14: 00007f24d7015fa0 R15: 00007ffe309f6308 [ 188.471210][ T5458] [ 188.728156][ T5464] netlink: 154020 bytes leftover after parsing attributes in process `syz.2.352'. [ 188.747402][ T5464] net_ratelimit: 721 callbacks suppressed [ 188.747418][ T5464] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 188.824914][ T5458] page_pool_create() gave up with errno -12 [ 189.621352][ T5486] netlink: 'syz.1.359': attribute type 1 has an invalid length. [ 189.758726][ T5486] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.359'. [ 190.081980][ T5480] delete_channel: no stack [ 192.252466][ T5537] FAULT_INJECTION: forcing a failure. [ 192.252466][ T5537] name failslab, interval 1, probability 0, space 0, times 0 [ 192.292610][ T5534] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.375'. [ 192.408759][ T5537] CPU: 0 PID: 5537 Comm: syz.0.374 Not tainted syzkaller #0 [ 192.416120][ T5537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 192.426204][ T5537] Call Trace: [ 192.429515][ T5537] [ 192.432473][ T5537] dump_stack_lvl+0x188/0x24e [ 192.437190][ T5537] ? show_regs_print_info+0x12/0x12 [ 192.442419][ T5537] ? load_image+0x410/0x410 [ 192.446976][ T5537] ? rt6_remove_exception+0x270/0x270 [ 192.452392][ T5537] should_fail_ex+0x390/0x4c0 [ 192.457109][ T5537] should_failslab+0x5/0x20 [ 192.461642][ T5537] slab_pre_alloc_hook+0x59/0x300 [ 192.466704][ T5537] kmem_cache_alloc+0x56/0x2f0 [ 192.471500][ T5537] ? dst_alloc+0x101/0x160 [ 192.475955][ T5537] ? ipv6_sysctl_rtcache_flush+0xf0/0xf0 [ 192.481624][ T5537] dst_alloc+0x101/0x160 [ 192.485908][ T5537] ip6_rt_cache_alloc+0x3a0/0xa30 [ 192.490971][ T5537] ? rt6_find_cached_rt+0x270/0x270 [ 192.496219][ T5537] ip6_pol_route+0x105f/0x12a0 [ 192.501021][ T5537] ? ip6_pol_route+0x16d/0x12a0 [ 192.505909][ T5537] ? trace_fib6_table_lookup+0x250/0x250 [ 192.511602][ T5537] fib6_rule_lookup+0x222/0x5e0 [ 192.516499][ T5537] ? ip6_route_output_flags_noref+0x390/0x390 [ 192.522592][ T5537] ? fib6_lookup+0x2d0/0x2d0 [ 192.527240][ T5537] ? dev_get_by_index_rcu+0xea/0x100 [ 192.532559][ T5537] ? __ipv6_addr_type+0xc8/0x2e0 [ 192.537537][ T5537] ? ip6_route_output_flags_noref+0x230/0x390 [ 192.543647][ T5537] ip6_route_output_flags+0xe3/0x330 [ 192.548964][ T5537] ? ip6_route_output_flags+0x27/0x330 [ 192.554455][ T5537] ip6_dst_lookup_tail+0x1a7/0x1600 [ 192.559693][ T5537] ? __lock_acquire+0x7bd0/0x7bd0 [ 192.564758][ T5537] ? ip6_dst_lookup+0x60/0x60 [ 192.569469][ T5537] ? txopt_get+0x76/0x3f0 [ 192.573825][ T5537] ? txopt_get+0x76/0x3f0 [ 192.578192][ T5537] ? txopt_get+0x340/0x3f0 [ 192.582656][ T5537] ? tomoyo_check_acl+0x378/0x3f0 [ 192.587718][ T5537] ? fl6_sock_lookup+0xc0/0xc0 [ 192.592519][ T5537] ip6_dst_lookup_flow+0x44/0xd0 [ 192.597502][ T5537] rawv6_sendmsg+0xcb2/0x1710 [ 192.602249][ T5537] ? compat_rawv6_ioctl+0x60/0x60 [ 192.607330][ T5537] ? aa_sk_perm+0x81f/0x950 [ 192.611886][ T5537] ? tomoyo_socket_sendmsg_permission+0x212/0x2f0 [ 192.618349][ T5537] ? inet_sendmsg+0x7a/0x2a0 [ 192.622966][ T5537] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 192.628279][ T5537] ? inet_send_prepare+0x250/0x250 [ 192.633424][ T5537] ____sys_sendmsg+0x5ed/0x9a0 [ 192.638232][ T5537] ? __sys_sendmsg_sock+0x30/0x30 [ 192.643285][ T5537] ? __import_iovec+0x306/0x510 [ 192.648178][ T5537] ? import_iovec+0x6f/0xa0 [ 192.652721][ T5537] ___sys_sendmsg+0x2a2/0x360 [ 192.657444][ T5537] ? __sys_sendmsg+0x2a0/0x2a0 [ 192.662283][ T5537] ? __lock_acquire+0x7bd0/0x7bd0 [ 192.667392][ T5537] __se_sys_sendmsg+0x1c3/0x2b0 [ 192.672294][ T5537] ? __x64_sys_sendmsg+0x80/0x80 [ 192.677298][ T5537] ? lockdep_hardirqs_on+0x94/0x140 [ 192.682544][ T5537] do_syscall_64+0x4c/0xa0 [ 192.686994][ T5537] ? clear_bhb_loop+0x60/0xb0 [ 192.691696][ T5537] ? clear_bhb_loop+0x60/0xb0 [ 192.696413][ T5537] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 192.702428][ T5537] RIP: 0033:0x7f39a019ce59 [ 192.706876][ T5537] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.726525][ T5537] RSP: 002b:00007f39a1028028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 192.734979][ T5537] RAX: ffffffffffffffda RBX: 00007f39a0415fa0 RCX: 00007f39a019ce59 [ 192.742979][ T5537] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 192.750981][ T5537] RBP: 00007f39a1028090 R08: 0000000000000000 R09: 0000000000000000 [ 192.758992][ T5537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.766996][ T5537] R13: 00007f39a0416038 R14: 00007f39a0415fa0 R15: 00007ffc8173b808 [ 192.775032][ T5537] [ 194.307146][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.313531][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.858397][ T5547] can: request_module (can-proto-0) failed. [ 195.117208][ T5560] sctp: [Deprecated]: syz.1.384 (pid 5560) Use of int in max_burst socket option deprecated. [ 195.117208][ T5560] Use struct sctp_assoc_value instead [ 195.260113][ T5565] netlink: 40 bytes leftover after parsing attributes in process `syz.2.387'. [ 195.377168][ T5565] netlink: 'syz.2.387': attribute type 29 has an invalid length. [ 195.409591][ T5565] netlink: 'syz.2.387': attribute type 29 has an invalid length. [ 196.361423][ T5581] FAULT_INJECTION: forcing a failure. [ 196.361423][ T5581] name failslab, interval 1, probability 0, space 0, times 0 [ 196.453125][ T5583] netlink: 'syz.3.390': attribute type 10 has an invalid length. [ 196.482970][ T5581] CPU: 0 PID: 5581 Comm: syz.4.391 Not tainted syzkaller #0 [ 196.490344][ T5581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 196.500440][ T5581] Call Trace: [ 196.503756][ T5581] [ 196.506721][ T5581] dump_stack_lvl+0x188/0x24e [ 196.511452][ T5581] ? show_regs_print_info+0x12/0x12 [ 196.516691][ T5581] ? load_image+0x410/0x410 [ 196.521248][ T5581] ? mark_lock+0x94/0x320 [ 196.525637][ T5581] should_fail_ex+0x390/0x4c0 [ 196.530363][ T5581] should_failslab+0x5/0x20 [ 196.534909][ T5581] slab_pre_alloc_hook+0x59/0x300 [ 196.539977][ T5581] ? sctp_add_bind_addr+0x89/0x350 [ 196.545140][ T5581] __kmem_cache_alloc_node+0x4f/0x270 [ 196.550566][ T5581] ? sctp_add_bind_addr+0x89/0x350 [ 196.555720][ T5581] kmalloc_trace+0x26/0xe0 [ 196.560188][ T5581] sctp_add_bind_addr+0x89/0x350 [ 196.565177][ T5581] sctp_copy_local_addr_list+0x317/0x4d0 [ 196.570858][ T5581] ? sctp_copy_local_addr_list+0xa0/0x4d0 [ 196.576619][ T5581] ? sctp_do_8_2_transport_strike+0x900/0x900 [ 196.582731][ T5581] ? sctp_v4_is_any+0x31/0x50 [ 196.587445][ T5581] ? sctp_copy_one_addr+0x93/0x660 [ 196.592599][ T5581] sctp_bind_addr_copy+0xaf/0x3c0 [ 196.597667][ T5581] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 196.604041][ T5581] sctp_connect_new_asoc+0x2f5/0x6a0 [ 196.609386][ T5581] ? __sctp_connect+0xd80/0xd80 [ 196.614298][ T5581] ? sctp_sendmsg+0x1868/0x2940 [ 196.619194][ T5581] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 196.624781][ T5581] ? security_sctp_bind_connect+0x85/0xb0 [ 196.630554][ T5581] sctp_sendmsg+0x1686/0x2940 [ 196.635301][ T5581] ? sctp_getsockopt+0x8a0/0x8a0 [ 196.640279][ T5581] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 196.646519][ T5581] ? inet_sendmsg+0x5c/0x2a0 [ 196.651155][ T5581] ? inet_sendmsg+0xca/0x2a0 [ 196.655786][ T5581] ? inet_send_prepare+0x250/0x250 [ 196.660943][ T5581] ____sys_sendmsg+0x5ed/0x9a0 [ 196.665761][ T5581] ? __sys_sendmsg_sock+0x30/0x30 [ 196.670822][ T5581] ? __import_iovec+0x306/0x510 [ 196.675728][ T5581] ? import_iovec+0x6f/0xa0 [ 196.680280][ T5581] ___sys_sendmsg+0x2a2/0x360 [ 196.685022][ T5581] ? __sys_sendmsg+0x2a0/0x2a0 [ 196.689861][ T5581] ? ktime_get+0x7b/0x270 [ 196.694266][ T5581] __se_sys_sendmsg+0x1c3/0x2b0 [ 196.699157][ T5581] ? __x64_sys_sendmsg+0x80/0x80 [ 196.704155][ T5581] ? syscall_enter_from_user_mode+0x2a/0x80 [ 196.710101][ T5581] do_syscall_64+0x4c/0xa0 [ 196.714550][ T5581] ? clear_bhb_loop+0x60/0xb0 [ 196.719261][ T5581] ? clear_bhb_loop+0x60/0xb0 [ 196.723974][ T5581] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 196.729908][ T5581] RIP: 0033:0x7f891499ce59 [ 196.734362][ T5581] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.754011][ T5581] RSP: 002b:00007f891582c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 196.754285][ T5587] netlink: 'syz.1.393': attribute type 4 has an invalid length. [ 196.762454][ T5581] RAX: ffffffffffffffda RBX: 00007f8914c15fa0 RCX: 00007f891499ce59 [ 196.762505][ T5581] RDX: 0000000000000040 RSI: 00002000000003c0 RDI: 0000000000000005 [ 196.762520][ T5581] RBP: 00007f891582c090 R08: 0000000000000000 R09: 0000000000000000 [ 196.762534][ T5581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 196.762547][ T5581] R13: 00007f8914c16038 R14: 00007f8914c15fa0 R15: 00007ffeaa69fba8 [ 196.762582][ T5581] [ 196.909946][ T5587] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.393'. [ 197.456258][ T5583] team0: Port device wlan1 added [ 197.684929][ T5599] netlink: 144 bytes leftover after parsing attributes in process `syz.1.396'. [ 198.106059][ T5606] netlink: 'syz.2.399': attribute type 3 has an invalid length. [ 198.182008][ T5606] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.399'. [ 200.277969][ T5636] netlink: 40 bytes leftover after parsing attributes in process `syz.0.407'. [ 200.483465][ T5636] netlink: 'syz.0.407': attribute type 29 has an invalid length. [ 200.552886][ T5636] netlink: 'syz.0.407': attribute type 29 has an invalid length. [ 200.742070][ T5647] netlink: 'syz.3.409': attribute type 3 has an invalid length. [ 200.802701][ T5647] netlink: 'syz.3.409': attribute type 7 has an invalid length. [ 200.835362][ T5647] netlink: 194740 bytes leftover after parsing attributes in process `syz.3.409'. [ 200.883889][ T5650] netlink: 144 bytes leftover after parsing attributes in process `syz.2.410'. [ 201.487013][ T4280] Bluetooth: hci0: command 0x0406 tx timeout [ 201.493166][ T4280] Bluetooth: hci4: command 0x0406 tx timeout [ 202.122714][ T5673] netlink: 144 bytes leftover after parsing attributes in process `syz.0.426'. [ 202.368931][ T5677] netlink: 128 bytes leftover after parsing attributes in process `syz.1.418'. [ 202.398526][ T5677] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 203.342276][ T5687] netlink: 'syz.1.421': attribute type 4 has an invalid length. [ 203.366039][ T5687] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.421'. [ 204.882062][ T5718] FAULT_INJECTION: forcing a failure. [ 204.882062][ T5718] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 205.027903][ T5718] CPU: 0 PID: 5718 Comm: syz.0.431 Not tainted syzkaller #0 [ 205.035274][ T5718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 205.045452][ T5718] Call Trace: [ 205.049814][ T5718] [ 205.052780][ T5718] dump_stack_lvl+0x188/0x24e [ 205.057515][ T5718] ? show_regs_print_info+0x12/0x12 [ 205.062770][ T5718] ? load_image+0x410/0x410 [ 205.067351][ T5718] ? __lock_acquire+0x7bd0/0x7bd0 [ 205.072431][ T5718] should_fail_ex+0x390/0x4c0 [ 205.077152][ T5718] _copy_from_user+0x2c/0x170 [ 205.081889][ T5718] dev_ethtool+0xc2/0x12f0 [ 205.086351][ T5718] ? ethtool_get_module_eeprom_call+0x170/0x170 [ 205.092620][ T5718] ? __lock_acquire+0x7bd0/0x7bd0 [ 205.097668][ T5718] ? __kmem_cache_free+0xb6/0x200 [ 205.102709][ T5718] ? full_name_hash+0x8e/0xe0 [ 205.107401][ T5718] ? dev_load+0x1d/0x1e0 [ 205.111657][ T5718] ? dev_load+0x1d/0x1e0 [ 205.115914][ T5718] dev_ioctl+0x474/0xe80 [ 205.120174][ T5718] sock_do_ioctl+0x245/0x320 [ 205.124779][ T5718] ? sock_show_fdinfo+0xb0/0xb0 [ 205.129666][ T5718] sock_ioctl+0x48a/0x700 [ 205.134012][ T5718] ? sock_poll+0x420/0x420 [ 205.138451][ T5718] ? bpf_lsm_file_ioctl+0x5/0x10 [ 205.143402][ T5718] ? security_file_ioctl+0x7c/0xa0 [ 205.148528][ T5718] ? sock_poll+0x420/0x420 [ 205.152953][ T5718] __se_sys_ioctl+0xfa/0x170 [ 205.157558][ T5718] do_syscall_64+0x4c/0xa0 [ 205.161981][ T5718] ? clear_bhb_loop+0x60/0xb0 [ 205.166663][ T5718] ? clear_bhb_loop+0x60/0xb0 [ 205.171349][ T5718] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 205.177256][ T5718] RIP: 0033:0x7f39a019ce59 [ 205.181678][ T5718] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.201288][ T5718] RSP: 002b:00007f39a1028028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 205.209712][ T5718] RAX: ffffffffffffffda RBX: 00007f39a0415fa0 RCX: 00007f39a019ce59 [ 205.217690][ T5718] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000004 [ 205.225668][ T5718] RBP: 00007f39a1028090 R08: 0000000000000000 R09: 0000000000000000 [ 205.233657][ T5718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.241642][ T5718] R13: 00007f39a0416038 R14: 00007f39a0415fa0 R15: 00007ffc8173b808 [ 205.249648][ T5718] [ 205.483486][ T5729] netlink: 144 bytes leftover after parsing attributes in process `syz.4.435'. [ 205.859784][ T5732] netlink: 44 bytes leftover after parsing attributes in process `syz.3.436'. [ 206.874493][ T5743] netlink: 'syz.1.440': attribute type 10 has an invalid length. [ 206.913990][ T5743] netlink: 40 bytes leftover after parsing attributes in process `syz.1.440'. [ 206.936832][ T5743] device team0 entered promiscuous mode [ 206.944975][ T5743] device team_slave_0 entered promiscuous mode [ 206.964416][ T5743] device team_slave_1 entered promiscuous mode [ 207.009253][ T5743] bridge0: port 3(team0) entered blocking state [ 207.016438][ T5743] bridge0: port 3(team0) entered disabled state [ 209.624997][ T5763] netlink: 1010 bytes leftover after parsing attributes in process `syz.1.446'. [ 209.676810][ T5763] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 209.772562][ T5767] FAULT_INJECTION: forcing a failure. [ 209.772562][ T5767] name failslab, interval 1, probability 0, space 0, times 0 [ 209.818765][ T5767] CPU: 1 PID: 5767 Comm: syz.3.448 Not tainted syzkaller #0 [ 209.826126][ T5767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 209.836216][ T5767] Call Trace: [ 209.839534][ T5767] [ 209.842491][ T5767] dump_stack_lvl+0x188/0x24e [ 209.847221][ T5767] ? show_regs_print_info+0x12/0x12 [ 209.852480][ T5767] ? load_image+0x410/0x410 [ 209.857024][ T5767] ? __might_sleep+0xd0/0xd0 [ 209.861647][ T5767] ? __lock_acquire+0x7bd0/0x7bd0 [ 209.866717][ T5767] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 209.872650][ T5767] ? is_dynamic_key+0x260/0x260 [ 209.877541][ T5767] should_fail_ex+0x390/0x4c0 [ 209.882256][ T5767] should_failslab+0x5/0x20 [ 209.886789][ T5767] slab_pre_alloc_hook+0x59/0x300 [ 209.891852][ T5767] kmem_cache_alloc_node+0x5a/0x310 [ 209.897077][ T5767] ? __alloc_skb+0xf9/0x7d0 [ 209.901614][ T5767] __alloc_skb+0xf9/0x7d0 [ 209.905976][ T5767] __ip_append_data+0x26d0/0x38d0 [ 209.911055][ T5767] ? ip_route_output_key_hash+0x139/0x330 [ 209.916830][ T5767] ? raw_send_hdrinc+0x1130/0x1130 [ 209.921984][ T5767] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 209.928012][ T5767] ? ip_setup_cork+0x850/0x850 [ 209.932814][ T5767] ? ipv4_mtu+0x30c/0x420 [ 209.937183][ T5767] ? ip_setup_cork+0x528/0x850 [ 209.941985][ T5767] ip_append_data+0x132/0x1a0 [ 209.946700][ T5767] ? raw_send_hdrinc+0x1130/0x1130 [ 209.951850][ T5767] raw_sendmsg+0x12c8/0x1940 [ 209.956498][ T5767] ? compat_raw_ioctl+0x60/0x60 [ 209.961384][ T5767] ? verify_lock_unused+0x140/0x140 [ 209.966642][ T5767] ? tomoyo_socket_sendmsg_permission+0x212/0x2f0 [ 209.973104][ T5767] ? sock_rps_record_flow+0x19/0x3f0 [ 209.978428][ T5767] ? inet_sendmsg+0x7a/0x2a0 [ 209.983052][ T5767] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 209.988367][ T5767] ? inet_send_prepare+0x250/0x250 [ 209.993514][ T5767] ____sys_sendmsg+0x5ed/0x9a0 [ 209.998316][ T5767] ? __lock_acquire+0x7bd0/0x7bd0 [ 210.003384][ T5767] ? __sys_sendmsg_sock+0x30/0x30 [ 210.008446][ T5767] ? __import_iovec+0x306/0x510 [ 210.013348][ T5767] ? import_iovec+0x6f/0xa0 [ 210.017889][ T5767] ___sys_sendmsg+0x2a2/0x360 [ 210.022604][ T5767] ? __sys_sendmsg+0x2a0/0x2a0 [ 210.027426][ T5767] ? __lock_acquire+0x7bd0/0x7bd0 [ 210.032527][ T5767] __se_sys_sendmsg+0x1c3/0x2b0 [ 210.037423][ T5767] ? __x64_sys_sendmsg+0x80/0x80 [ 210.042414][ T5767] ? lockdep_hardirqs_on+0x94/0x140 [ 210.047697][ T5767] do_syscall_64+0x4c/0xa0 [ 210.052175][ T5767] ? clear_bhb_loop+0x60/0xb0 [ 210.056891][ T5767] ? clear_bhb_loop+0x60/0xb0 [ 210.061606][ T5767] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 210.067540][ T5767] RIP: 0033:0x7f70e839ce59 [ 210.071998][ T5767] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 210.091640][ T5767] RSP: 002b:00007f70e91c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 210.100096][ T5767] RAX: ffffffffffffffda RBX: 00007f70e8615fa0 RCX: 00007f70e839ce59 [ 210.108109][ T5767] RDX: 0000000004008804 RSI: 0000200000003a80 RDI: 0000000000000003 [ 210.116114][ T5767] RBP: 00007f70e91c6090 R08: 0000000000000000 R09: 0000000000000000 [ 210.124124][ T5767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 210.132132][ T5767] R13: 00007f70e8616038 R14: 00007f70e8615fa0 R15: 00007fffd8afe5d8 [ 210.140163][ T5767] [ 210.162602][ T5766] netlink: 144 bytes leftover after parsing attributes in process `syz.2.449'. [ 210.246485][ T5776] netlink: 'syz.0.450': attribute type 3 has an invalid length. [ 210.288956][ T5776] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.450'. [ 210.426691][ T5780] netlink: 40 bytes leftover after parsing attributes in process `syz.4.452'. [ 210.505607][ T5780] netlink: 'syz.4.452': attribute type 29 has an invalid length. [ 210.549366][ T5780] netlink: 'syz.4.452': attribute type 29 has an invalid length. [ 210.812509][ T5784] netlink: 'syz.2.455': attribute type 3 has an invalid length. [ 210.826786][ T5784] netlink: 132 bytes leftover after parsing attributes in process `syz.2.455'. [ 211.658955][ T5796] netlink: 'syz.4.458': attribute type 2 has an invalid length. [ 214.645950][ T5810] netlink: 'syz.1.459': attribute type 13 has an invalid length. [ 214.676883][ T5810] netlink: 24643 bytes leftover after parsing attributes in process `syz.1.459'. [ 214.753347][ T5817] netlink: 144 bytes leftover after parsing attributes in process `syz.0.465'. [ 214.779663][ T5820] netlink: 'syz.2.466': attribute type 2 has an invalid length. [ 214.813210][ T5820] netlink: 132 bytes leftover after parsing attributes in process `syz.2.466'. [ 216.770040][ T5851] netlink: 'syz.1.476': attribute type 10 has an invalid length. [ 218.342727][ T5851] device wlan1 entered promiscuous mode [ 218.378730][ T5851] team0: Port device wlan1 added [ 218.767966][ T5860] netlink: 144 bytes leftover after parsing attributes in process `syz.1.481'. [ 219.008376][ T5858] netlink: 'syz.3.477': attribute type 7 has an invalid length. [ 219.352729][ T5875] netlink: 'syz.4.485': attribute type 2 has an invalid length. [ 219.389422][ T5875] netlink: 132 bytes leftover after parsing attributes in process `syz.4.485'. [ 219.598547][ T5878] netlink: 40 bytes leftover after parsing attributes in process `syz.2.487'. [ 219.861454][ T5883] netlink: 'syz.1.486': attribute type 10 has an invalid length. [ 219.882258][ T5878] netlink: 'syz.2.487': attribute type 29 has an invalid length. [ 219.963648][ T5883] netlink: 168 bytes leftover after parsing attributes in process `syz.1.486'. [ 220.087810][ T5878] netlink: 'syz.2.487': attribute type 29 has an invalid length. [ 221.387721][ T5912] netlink: 144 bytes leftover after parsing attributes in process `syz.4.496'. [ 221.396967][ T5919] netlink: 'syz.1.499': attribute type 21 has an invalid length. [ 222.170607][ T5934] netlink: 'syz.0.502': attribute type 2 has an invalid length. [ 222.206954][ T5934] netlink: 132 bytes leftover after parsing attributes in process `syz.0.502'. [ 223.478708][ T5964] netlink: 144 bytes leftover after parsing attributes in process `syz.3.513'. [ 224.920274][ T5984] netlink: 'syz.4.518': attribute type 2 has an invalid length. [ 224.945784][ T5984] netlink: 17 bytes leftover after parsing attributes in process `syz.4.518'. [ 227.793219][ T6000] netlink: 144 bytes leftover after parsing attributes in process `syz.1.528'. [ 227.848736][ T6006] netlink: 40 bytes leftover after parsing attributes in process `syz.3.529'. [ 227.956288][ T6006] netlink: 'syz.3.529': attribute type 29 has an invalid length. [ 228.097249][ T6006] netlink: 'syz.3.529': attribute type 29 has an invalid length. [ 228.417643][ T6004] netlink: 40 bytes leftover after parsing attributes in process `syz.0.527'. [ 228.624653][ T6015] netlink: 'syz.1.531': attribute type 17 has an invalid length. [ 228.659918][ T6015] syz.1.531 uses obsolete (PF_INET,SOCK_PACKET) [ 229.124364][ T6024] netlink: 154020 bytes leftover after parsing attributes in process `syz.0.533'. [ 229.164860][ T6024] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 230.044218][ T6043] netlink: 'syz.1.540': attribute type 2 has an invalid length. [ 230.077211][ T6042] netlink: 'syz.0.541': attribute type 1 has an invalid length. [ 230.139412][ T6042] netlink: 'syz.0.541': attribute type 4 has an invalid length. [ 230.154238][ T6043] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.540'. [ 230.232859][ T6042] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.541'. [ 231.166647][ T6066] netlink: 'syz.0.548': attribute type 25 has an invalid length. [ 231.206138][ T6066] netlink: 'syz.0.548': attribute type 28 has an invalid length. [ 231.630690][ T6075] raw_sendmsg: syz.1.550 forgot to set AF_INET. Fix it! [ 232.175407][ T6082] netlink: 'syz.3.555': attribute type 10 has an invalid length. [ 232.401484][ T6082] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 232.442858][ T6082] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 232.526348][ T6082] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 232.578974][ T6082] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 233.120316][ T6098] netlink: 'syz.2.561': attribute type 3 has an invalid length. [ 233.200243][ T6098] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.561'. [ 234.405516][ T6120] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.571'. [ 234.436339][ T6120] netlink: 6324 bytes leftover after parsing attributes in process `syz.2.571'. [ 234.461007][ T6120] netlink: 3 bytes leftover after parsing attributes in process `syz.2.571'. [ 234.913385][ T6132] netlink: 'syz.0.575': attribute type 10 has an invalid length. [ 235.126218][ T6132] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 235.160335][ T6132] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 235.252260][ T6132] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 235.364417][ T6132] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 235.457585][ T6136] netlink: 'syz.2.578': attribute type 2 has an invalid length. [ 235.468203][ T6136] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.578'. [ 235.635768][ T6144] netlink: 'syz.1.579': attribute type 3 has an invalid length. [ 235.696179][ T6144] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.579'. [ 236.124934][ T6162] netlink: 144 bytes leftover after parsing attributes in process `syz.2.584'. [ 238.141984][ T6195] netlink: 144 bytes leftover after parsing attributes in process `syz.1.596'. [ 238.177373][ T6191] netlink: 'syz.2.594': attribute type 10 has an invalid length. [ 238.399913][ T6191] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 238.473776][ T6191] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 238.501514][ T6203] netlink: 'syz.0.595': attribute type 2 has an invalid length. [ 238.581104][ T6206] netlink: 'syz.3.598': attribute type 29 has an invalid length. [ 238.582944][ T6191] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 238.604116][ T6203] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.595'. [ 238.655007][ T6191] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 238.963733][ T6206] netlink: 'syz.3.598': attribute type 29 has an invalid length. [ 239.145790][ T6202] netlink: 'syz.3.598': attribute type 10 has an invalid length. [ 239.165499][ T6202] netlink: 55 bytes leftover after parsing attributes in process `syz.3.598'. [ 239.681684][ T6219] netlink: 'syz.0.600': attribute type 3 has an invalid length. [ 239.716868][ T6219] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.600'. [ 240.487965][ T6206] netlink: 4 bytes leftover after parsing attributes in process `syz.3.598'. [ 240.569159][ T6207] netlink: 'syz.3.598': attribute type 29 has an invalid length. [ 240.650731][ T6242] netlink: 144 bytes leftover after parsing attributes in process `syz.4.609'. [ 241.754164][ T6270] netlink: 'syz.1.619': attribute type 10 has an invalid length. [ 242.257540][ T6282] netlink: 144 bytes leftover after parsing attributes in process `syz.0.624'. [ 242.730869][ T6288] netlink: 'syz.2.626': attribute type 3 has an invalid length. [ 242.751960][ T6288] netlink: 132 bytes leftover after parsing attributes in process `syz.2.626'. [ 242.783713][ T6290] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.626'. [ 242.826795][ T6290] netlink: 43 bytes leftover after parsing attributes in process `syz.2.626'. [ 243.371348][ T6300] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.630'. [ 243.398364][ T6301] netlink: 'syz.0.631': attribute type 10 has an invalid length. [ 243.445504][ T6301] device veth1_macvtap left promiscuous mode [ 244.346010][ T6309] netlink: 54695 bytes leftover after parsing attributes in process `syz.3.630'. [ 244.909383][ T6330] netlink: 144 bytes leftover after parsing attributes in process `syz.0.639'. [ 245.073506][ T6318] netlink: 'syz.2.637': attribute type 275 has an invalid length. [ 247.503061][ T6368] netlink: 'syz.2.653': attribute type 29 has an invalid length. [ 247.549424][ T6368] netlink: 'syz.2.653': attribute type 29 has an invalid length. [ 247.590167][ T6370] netlink: 144 bytes leftover after parsing attributes in process `syz.4.652'. [ 249.770504][ T6398] netlink: 4 bytes leftover after parsing attributes in process `syz.0.663'. [ 250.415742][ T6411] netlink: 144 bytes leftover after parsing attributes in process `syz.4.668'. [ 250.668282][ T6416] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.670'. [ 250.812124][ T6415] netlink: 'syz.1.670': attribute type 3 has an invalid length. [ 250.845779][ T6415] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.670'. [ 251.125555][ T6426] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.673'. [ 251.167646][ T6426] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 251.185000][ T6429] netlink: 132 bytes leftover after parsing attributes in process `syz.4.675'. [ 251.358061][ T6428] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.674'. [ 251.585319][ T6436] netlink: 'syz.2.678': attribute type 21 has an invalid length. [ 252.017544][ T6455] netlink: 144 bytes leftover after parsing attributes in process `syz.3.685'. [ 253.382691][ T4383] tipc: Subscription rejected, illegal request [ 256.464229][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.471231][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.233373][ T6466] netlink: 'syz.3.688': attribute type 2 has an invalid length. [ 258.256793][ T6466] netlink: 'syz.3.688': attribute type 8 has an invalid length. [ 258.264526][ T6466] netlink: 132 bytes leftover after parsing attributes in process `syz.3.688'. [ 259.105559][ T6484] netlink: 'syz.1.695': attribute type 2 has an invalid length. [ 259.421977][ T6484] device 0 entered promiscuous mode [ 259.476345][ T6488] netlink: 4 bytes leftover after parsing attributes in process `syz.1.695'. [ 259.652054][ T6501] netlink: 144 bytes leftover after parsing attributes in process `syz.4.698'. [ 259.718886][ T6503] netlink: 14 bytes leftover after parsing attributes in process `syz.3.699'. [ 259.806294][ T4280] Bluetooth: hci0: unexpected subevent 0x0e length: 150 > 15 [ 261.507129][ T6503] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 262.080437][ T6503] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 262.128538][ T6503] bond0 (unregistering): Released all slaves [ 262.406728][ T6522] netlink: 'syz.0.703': attribute type 29 has an invalid length. [ 263.396864][ T6522] netlink: 'syz.0.703': attribute type 29 has an invalid length. [ 263.434917][ T6524] netlink: 'syz.0.703': attribute type 10 has an invalid length. [ 263.456782][ T6524] netlink: 55 bytes leftover after parsing attributes in process `syz.0.703'. [ 264.196126][ T6551] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.715'. [ 264.347444][ T6529] netlink: 4 bytes leftover after parsing attributes in process `syz.0.703'. [ 264.348168][ T6526] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 264.384258][ T6526] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 264.427519][ T6526] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 264.485255][ T6534] netlink: 'syz.0.703': attribute type 29 has an invalid length. [ 264.490444][ T6557] netlink: 60 bytes leftover after parsing attributes in process `syz.2.717'. [ 264.506161][ T6558] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.715'. [ 264.518811][ T6551] netlink: 'syz.4.715': attribute type 20 has an invalid length. [ 264.648593][ T6554] IPv6: NLM_F_CREATE should be specified when creating new route [ 264.709113][ T6554] netlink: 1 bytes leftover after parsing attributes in process `syz.4.715'. [ 264.779109][ T6561] netlink: 'syz.4.715': attribute type 2 has an invalid length. [ 264.787245][ T6561] netlink: 'syz.4.715': attribute type 8 has an invalid length. [ 264.795078][ T6561] netlink: 132 bytes leftover after parsing attributes in process `syz.4.715'. [ 264.814919][ T6562] netlink: 'syz.3.718': attribute type 10 has an invalid length. [ 264.826912][ T6562] netlink: 40 bytes leftover after parsing attributes in process `syz.3.718'. [ 265.155215][ T6573] FAULT_INJECTION: forcing a failure. [ 265.155215][ T6573] name failslab, interval 1, probability 0, space 0, times 0 [ 265.251536][ T6573] CPU: 1 PID: 6573 Comm: syz.3.723 Not tainted syzkaller #0 [ 265.258907][ T6573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 265.269001][ T6573] Call Trace: [ 265.272316][ T6573] [ 265.275277][ T6573] dump_stack_lvl+0x188/0x24e [ 265.279998][ T6573] ? trace_event_raw_event_lock+0x230/0x230 [ 265.285933][ T6573] ? show_regs_print_info+0x12/0x12 [ 265.291170][ T6573] ? load_image+0x410/0x410 [ 265.295728][ T6573] ? verify_lock_unused+0x140/0x140 [ 265.300969][ T6573] should_fail_ex+0x390/0x4c0 [ 265.305687][ T6573] should_failslab+0x5/0x20 [ 265.310233][ T6573] slab_pre_alloc_hook+0x59/0x300 [ 265.315297][ T6573] ? ref_tracker_alloc+0x14f/0x490 [ 265.320460][ T6573] __kmem_cache_alloc_node+0x4f/0x270 [ 265.325874][ T6573] ? ref_tracker_alloc+0x14f/0x490 [ 265.331032][ T6573] kmalloc_trace+0x26/0xe0 [ 265.335508][ T6573] ref_tracker_alloc+0x14f/0x490 [ 265.340584][ T6573] ? ref_tracker_dir_print+0x150/0x150 [ 265.346094][ T6573] ? __lock_acquire+0x7bd0/0x7bd0 [ 265.351175][ T6573] ? rcu_is_watching+0x11/0xa0 [ 265.355990][ T6573] dst_init+0xb1/0x400 [ 265.360106][ T6573] ? ipv6_sysctl_rtcache_flush+0xf0/0xf0 [ 265.365782][ T6573] dst_alloc+0x12a/0x160 [ 265.370113][ T6573] ip6_rt_cache_alloc+0x3a0/0xa30 [ 265.375187][ T6573] ? rt6_find_cached_rt+0x270/0x270 [ 265.380437][ T6573] ip6_pol_route+0x105f/0x12a0 [ 265.385253][ T6573] ? ip6_pol_route+0x16d/0x12a0 [ 265.390164][ T6573] ? trace_fib6_table_lookup+0x250/0x250 [ 265.395907][ T6573] fib6_rule_lookup+0x222/0x5e0 [ 265.400811][ T6573] ? ip6_route_output_flags_noref+0x390/0x390 [ 265.406921][ T6573] ? fib6_lookup+0x2d0/0x2d0 [ 265.411573][ T6573] ? dev_get_by_index_rcu+0xea/0x100 [ 265.416900][ T6573] ? __ipv6_addr_type+0xc8/0x2e0 [ 265.421863][ T6573] ? ip6_route_output_flags_noref+0x230/0x390 [ 265.427949][ T6573] ip6_route_output_flags+0xe3/0x330 [ 265.433242][ T6573] ? ip6_route_output_flags+0x27/0x330 [ 265.438717][ T6573] ip6_dst_lookup_tail+0x1a7/0x1600 [ 265.443943][ T6573] ? __lock_acquire+0x7bd0/0x7bd0 [ 265.448989][ T6573] ? ip6_dst_lookup+0x60/0x60 [ 265.453683][ T6573] ? txopt_get+0x76/0x3f0 [ 265.458021][ T6573] ? txopt_get+0x76/0x3f0 [ 265.462373][ T6573] ? txopt_get+0x340/0x3f0 [ 265.466802][ T6573] ? tomoyo_check_acl+0x378/0x3f0 [ 265.471859][ T6573] ? fl6_sock_lookup+0xc0/0xc0 [ 265.476640][ T6573] ip6_dst_lookup_flow+0x44/0xd0 [ 265.481594][ T6573] rawv6_sendmsg+0xcb2/0x1710 [ 265.486296][ T6573] ? compat_rawv6_ioctl+0x60/0x60 [ 265.491342][ T6573] ? aa_sk_perm+0x81f/0x950 [ 265.495872][ T6573] ? tomoyo_socket_sendmsg_permission+0x212/0x2f0 [ 265.502315][ T6573] ? inet_sendmsg+0x7a/0x2a0 [ 265.506916][ T6573] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 265.512212][ T6573] ? inet_send_prepare+0x250/0x250 [ 265.517345][ T6573] ____sys_sendmsg+0x5ed/0x9a0 [ 265.522127][ T6573] ? __sys_sendmsg_sock+0x30/0x30 [ 265.527158][ T6573] ? __import_iovec+0x306/0x510 [ 265.532032][ T6573] ? import_iovec+0x6f/0xa0 [ 265.536558][ T6573] ___sys_sendmsg+0x2a2/0x360 [ 265.541255][ T6573] ? __sys_sendmsg+0x2a0/0x2a0 [ 265.546059][ T6573] ? __lock_acquire+0x7bd0/0x7bd0 [ 265.551127][ T6573] __se_sys_sendmsg+0x1c3/0x2b0 [ 265.555993][ T6573] ? __x64_sys_sendmsg+0x80/0x80 [ 265.560973][ T6573] ? lockdep_hardirqs_on+0x94/0x140 [ 265.566191][ T6573] do_syscall_64+0x4c/0xa0 [ 265.570615][ T6573] ? clear_bhb_loop+0x60/0xb0 [ 265.575302][ T6573] ? clear_bhb_loop+0x60/0xb0 [ 265.579988][ T6573] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 265.585906][ T6573] RIP: 0033:0x7f70e839ce59 [ 265.590358][ T6573] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 265.609973][ T6573] RSP: 002b:00007f70e91c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 265.618397][ T6573] RAX: ffffffffffffffda RBX: 00007f70e8615fa0 RCX: 00007f70e839ce59 [ 265.626384][ T6573] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 265.634362][ T6573] RBP: 00007f70e91c6090 R08: 0000000000000000 R09: 0000000000000000 [ 265.642340][ T6573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 265.650320][ T6573] R13: 00007f70e8616038 R14: 00007f70e8615fa0 R15: 00007fffd8afe5d8 [ 265.658404][ T6573] [ 265.666742][ T6573] memory allocation failure, unreliable refcount tracker. [ 265.980554][ T6588] netlink: 'syz.3.729': attribute type 2 has an invalid length. [ 265.994856][ T6588] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.729'. [ 266.121642][ T6591] netlink: 144 bytes leftover after parsing attributes in process `syz.2.733'. [ 266.235242][ T6594] netlink: 'syz.0.732': attribute type 2 has an invalid length. [ 267.263531][ T6611] FAULT_INJECTION: forcing a failure. [ 267.263531][ T6611] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 267.285182][ T6611] CPU: 0 PID: 6611 Comm: syz.4.737 Not tainted syzkaller #0 [ 267.292524][ T6611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 267.302604][ T6611] Call Trace: [ 267.305907][ T6611] [ 267.308863][ T6611] dump_stack_lvl+0x188/0x24e [ 267.313582][ T6611] ? show_regs_print_info+0x12/0x12 [ 267.318809][ T6611] ? load_image+0x410/0x410 [ 267.323353][ T6611] ? __lock_acquire+0x7bd0/0x7bd0 [ 267.328419][ T6611] ? ktime_get+0x7b/0x270 [ 267.332805][ T6611] should_fail_ex+0x390/0x4c0 [ 267.337519][ T6611] _copy_from_user+0x2c/0x170 [ 267.342231][ T6611] __sys_bpf+0x2ea/0x780 [ 267.346510][ T6611] ? bpf_link_show_fdinfo+0x380/0x380 [ 267.351935][ T6611] ? lock_chain_count+0x20/0x20 [ 267.356815][ T6611] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 267.362849][ T6611] __x64_sys_bpf+0x78/0x90 [ 267.367309][ T6611] do_syscall_64+0x4c/0xa0 [ 267.371756][ T6611] ? clear_bhb_loop+0x60/0xb0 [ 267.376473][ T6611] ? clear_bhb_loop+0x60/0xb0 [ 267.381182][ T6611] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 267.387110][ T6611] RIP: 0033:0x7f891499ce59 [ 267.391549][ T6611] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 267.411188][ T6611] RSP: 002b:00007f891582c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 267.419634][ T6611] RAX: ffffffffffffffda RBX: 00007f8914c15fa0 RCX: 00007f891499ce59 [ 267.427635][ T6611] RDX: 0000000000000069 RSI: 0000200000000500 RDI: 000000000000000a [ 267.435628][ T6611] RBP: 00007f891582c090 R08: 0000000000000000 R09: 0000000000000000 [ 267.443627][ T6611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 267.451624][ T6611] R13: 00007f8914c16038 R14: 00007f8914c15fa0 R15: 00007ffeaa69fba8 [ 267.459637][ T6611] [ 267.776385][ T6614] netlink: 'syz.4.738': attribute type 10 has an invalid length. [ 267.839660][ T6614] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 268.500307][ T6633] __nla_validate_parse: 1 callbacks suppressed [ 268.500345][ T6633] netlink: 60 bytes leftover after parsing attributes in process `syz.1.745'. [ 268.893170][ T6641] netlink: 144 bytes leftover after parsing attributes in process `syz.3.749'. [ 268.991266][ T6637] delete_channel: no stack [ 269.370601][ T6659] FAULT_INJECTION: forcing a failure. [ 269.370601][ T6659] name failslab, interval 1, probability 0, space 0, times 0 [ 269.395786][ T6659] CPU: 1 PID: 6659 Comm: syz.1.755 Not tainted syzkaller #0 [ 269.403138][ T6659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 269.413228][ T6659] Call Trace: [ 269.416535][ T6659] [ 269.419492][ T6659] dump_stack_lvl+0x188/0x24e [ 269.424212][ T6659] ? show_regs_print_info+0x12/0x12 [ 269.429449][ T6659] ? load_image+0x410/0x410 [ 269.433992][ T6659] ? __might_sleep+0xd0/0xd0 [ 269.438594][ T6659] ? __lock_acquire+0x7bd0/0x7bd0 [ 269.443644][ T6659] should_fail_ex+0x390/0x4c0 [ 269.448335][ T6659] should_failslab+0x5/0x20 [ 269.452847][ T6659] slab_pre_alloc_hook+0x59/0x300 [ 269.457888][ T6659] ? apparmor_sk_alloc_security+0x74/0x100 [ 269.463716][ T6659] __kmem_cache_alloc_node+0x4f/0x270 [ 269.469104][ T6659] ? apparmor_sk_alloc_security+0x74/0x100 [ 269.474921][ T6659] kmalloc_trace+0x26/0xe0 [ 269.479361][ T6659] apparmor_sk_alloc_security+0x74/0x100 [ 269.485001][ T6659] security_sk_alloc+0x6a/0xa0 [ 269.489778][ T6659] sk_prot_alloc+0x101/0x210 [ 269.494378][ T6659] ? sk_alloc+0x20/0x330 [ 269.498645][ T6659] sk_alloc+0x36/0x330 [ 269.502724][ T6659] ? bpf_ctx_init+0x154/0x190 [ 269.507422][ T6659] bpf_prog_test_run_skb+0x36d/0x18e0 [ 269.512807][ T6659] ? __fget_files+0x28/0x460 [ 269.517415][ T6659] ? __fget_files+0x3fc/0x460 [ 269.522115][ T6659] ? cpu_online+0xa0/0xa0 [ 269.526455][ T6659] bpf_prog_test_run+0x31c/0x390 [ 269.531417][ T6659] __sys_bpf+0x62b/0x780 [ 269.535674][ T6659] ? bpf_link_show_fdinfo+0x380/0x380 [ 269.541072][ T6659] ? lock_chain_count+0x20/0x20 [ 269.546133][ T6659] __x64_sys_bpf+0x78/0x90 [ 269.550577][ T6659] do_syscall_64+0x4c/0xa0 [ 269.555004][ T6659] ? clear_bhb_loop+0x60/0xb0 [ 269.559689][ T6659] ? clear_bhb_loop+0x60/0xb0 [ 269.564377][ T6659] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 269.570290][ T6659] RIP: 0033:0x7f24d6d9ce59 [ 269.574715][ T6659] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 269.594346][ T6659] RSP: 002b:00007f24d7b88028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 269.602773][ T6659] RAX: ffffffffffffffda RBX: 00007f24d7015fa0 RCX: 00007f24d6d9ce59 [ 269.610755][ T6659] RDX: 0000000000000050 RSI: 0000200000000580 RDI: 000000000000000a [ 269.618744][ T6659] RBP: 00007f24d7b88090 R08: 0000000000000000 R09: 0000000000000000 [ 269.626721][ T6659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 269.634695][ T6659] R13: 00007f24d7016038 R14: 00007f24d7015fa0 R15: 00007ffe309f6308 [ 269.642689][ T6659] [ 269.881765][ T6667] netlink: 60 bytes leftover after parsing attributes in process `syz.0.759'. [ 270.202924][ T6671] netlink: 'syz.2.761': attribute type 10 has an invalid length. [ 270.231642][ T6671] bridge0: port 3(team0) entered disabled state [ 270.458430][ T6677] netlink: 144 bytes leftover after parsing attributes in process `syz.1.764'. [ 270.481538][ T6673] delete_channel: no stack [ 270.665647][ T6684] FAULT_INJECTION: forcing a failure. [ 270.665647][ T6684] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 270.687555][ T6684] CPU: 0 PID: 6684 Comm: syz.2.767 Not tainted syzkaller #0 [ 270.694921][ T6684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 270.705018][ T6684] Call Trace: [ 270.708326][ T6684] [ 270.711270][ T6684] dump_stack_lvl+0x188/0x24e [ 270.715973][ T6684] ? show_regs_print_info+0x12/0x12 [ 270.721191][ T6684] ? load_image+0x410/0x410 [ 270.725721][ T6684] ? __lock_acquire+0x7bd0/0x7bd0 [ 270.730769][ T6684] ? snprintf+0xe5/0x140 [ 270.735031][ T6684] should_fail_ex+0x390/0x4c0 [ 270.739724][ T6684] _copy_to_user+0x2c/0x130 [ 270.744242][ T6684] simple_read_from_buffer+0xe3/0x150 [ 270.749637][ T6684] proc_fail_nth_read+0x1a6/0x220 [ 270.754677][ T6684] ? proc_fault_inject_write+0x310/0x310 [ 270.760322][ T6684] ? fsnotify_perm+0x248/0x550 [ 270.765099][ T6684] ? proc_fault_inject_write+0x310/0x310 [ 270.770747][ T6684] vfs_read+0x2db/0x960 [ 270.774928][ T6684] ? kernel_read+0x1e0/0x1e0 [ 270.779538][ T6684] ? __fget_files+0x28/0x460 [ 270.784145][ T6684] ? __fget_files+0x3fc/0x460 [ 270.788845][ T6684] ? __fdget_pos+0x2ae/0x360 [ 270.793462][ T6684] ? ksys_read+0x70/0x260 [ 270.797810][ T6684] ksys_read+0x14d/0x260 [ 270.802078][ T6684] ? vfs_write+0x9a0/0x9a0 [ 270.806518][ T6684] ? lockdep_hardirqs_on+0x94/0x140 [ 270.811739][ T6684] do_syscall_64+0x4c/0xa0 [ 270.816167][ T6684] ? clear_bhb_loop+0x60/0xb0 [ 270.820852][ T6684] ? clear_bhb_loop+0x60/0xb0 [ 270.825550][ T6684] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 270.831459][ T6684] RIP: 0033:0x7f515635d68e [ 270.835885][ T6684] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 270.857358][ T6684] RSP: 002b:00007f515730cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 270.865823][ T6684] RAX: ffffffffffffffda RBX: 00007f515730d6c0 RCX: 00007f515635d68e [ 270.873838][ T6684] RDX: 000000000000000f RSI: 00007f515730d0a0 RDI: 0000000000000006 [ 270.881836][ T6684] RBP: 00007f515730d090 R08: 0000000000000000 R09: 0000000000000000 [ 270.889818][ T6684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 270.897801][ T6684] R13: 00007f5156616038 R14: 00007f5156615fa0 R15: 00007ffed587df08 [ 270.905799][ T6684] [ 270.945249][ T6686] netlink: 'syz.4.768': attribute type 46 has an invalid length. [ 270.999659][ T6691] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.768'. [ 271.170719][ T6694] netlink: 'syz.2.771': attribute type 3 has an invalid length. [ 271.203490][ T6694] netlink: 'syz.2.771': attribute type 1 has an invalid length. [ 271.224749][ T6694] netlink: 132 bytes leftover after parsing attributes in process `syz.2.771'. [ 271.298176][ T6697] netlink: 14 bytes leftover after parsing attributes in process `syz.2.771'. [ 274.109988][ T6697] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 274.147015][ T6697] bond0 (unregistering): Released all slaves [ 275.122424][ T6736] netlink: 'syz.0.787': attribute type 21 has an invalid length. [ 275.191947][ T6736] netlink: 156 bytes leftover after parsing attributes in process `syz.0.787'. [ 275.350770][ T6736] netlink: 'syz.0.787': attribute type 10 has an invalid length. [ 277.554580][ T6736] device wlan1 entered promiscuous mode [ 277.593668][ T6736] team0: Port device wlan1 added [ 277.957450][ T6766] FAULT_INJECTION: forcing a failure. [ 277.957450][ T6766] name failslab, interval 1, probability 0, space 0, times 0 [ 278.007051][ T6766] CPU: 1 PID: 6766 Comm: syz.2.795 Not tainted syzkaller #0 [ 278.014441][ T6766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 278.024555][ T6766] Call Trace: [ 278.027880][ T6766] [ 278.030875][ T6766] dump_stack_lvl+0x188/0x24e [ 278.035630][ T6766] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 278.041838][ T6766] ? show_regs_print_info+0x12/0x12 [ 278.047083][ T6766] ? load_image+0x410/0x410 [ 278.051643][ T6766] should_fail_ex+0x390/0x4c0 [ 278.056359][ T6766] should_failslab+0x5/0x20 [ 278.060901][ T6766] slab_pre_alloc_hook+0x59/0x300 [ 278.065980][ T6766] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 278.071742][ T6766] __kmem_cache_alloc_node+0x4f/0x270 [ 278.077166][ T6766] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 278.082924][ T6766] __kmalloc+0xa3/0x240 [ 278.087114][ T6766] tomoyo_realpath_from_path+0xe2/0x5c0 [ 278.092687][ T6766] ? tomoyo_domain+0xd2/0x120 [ 278.097413][ T6766] ? tomoyo_path_number_perm+0x205/0x650 [ 278.103062][ T6766] tomoyo_path_number_perm+0x22f/0x650 [ 278.108543][ T6766] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 278.114053][ T6766] ? __fget_files+0x28/0x460 [ 278.118670][ T6766] security_file_ioctl+0x6c/0xa0 [ 278.123627][ T6766] __se_sys_ioctl+0x48/0x170 [ 278.128244][ T6766] do_syscall_64+0x4c/0xa0 [ 278.132692][ T6766] ? clear_bhb_loop+0x60/0xb0 [ 278.137388][ T6766] ? clear_bhb_loop+0x60/0xb0 [ 278.142077][ T6766] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 278.147987][ T6766] RIP: 0033:0x7f515639ce59 [ 278.152416][ T6766] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 278.172048][ T6766] RSP: 002b:00007f51572ec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 278.180474][ T6766] RAX: ffffffffffffffda RBX: 00007f5156616090 RCX: 00007f515639ce59 [ 278.188458][ T6766] RDX: 0000200000000000 RSI: 0000000000008b0b RDI: 000000000000000b [ 278.196450][ T6766] RBP: 00007f51572ec090 R08: 0000000000000000 R09: 0000000000000000 [ 278.204432][ T6766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 278.212411][ T6766] R13: 00007f5156616128 R14: 00007f5156616090 R15: 00007ffed587df08 [ 278.220411][ T6766] [ 278.308297][ T6766] ERROR: Out of memory at tomoyo_realpath_from_path. [ 278.769124][ T6785] netlink: 830 bytes leftover after parsing attributes in process `syz.2.802'. [ 279.802709][ T6805] netlink: 'syz.1.808': attribute type 21 has an invalid length. [ 279.843022][ T6805] netlink: 156 bytes leftover after parsing attributes in process `syz.1.808'. [ 280.012285][ T6805] netlink: 'syz.1.808': attribute type 10 has an invalid length. [ 280.339080][ T6814] netlink: 144 bytes leftover after parsing attributes in process `syz.3.810'. [ 280.418142][ T6817] netlink: 830 bytes leftover after parsing attributes in process `syz.2.811'. [ 280.483522][ T6819] netlink: 'syz.0.812': attribute type 39 has an invalid length. [ 281.368507][ T6834] netlink: 'syz.3.819': attribute type 21 has an invalid length. [ 281.426748][ T6834] netlink: 156 bytes leftover after parsing attributes in process `syz.3.819'. [ 281.597669][ T6845] netlink: 'syz.0.821': attribute type 3 has an invalid length. [ 281.632292][ T6845] netlink: 'syz.0.821': attribute type 1 has an invalid length. [ 281.709898][ T6845] netlink: 132 bytes leftover after parsing attributes in process `syz.0.821'. [ 281.789802][ T6845] netlink: 14 bytes leftover after parsing attributes in process `syz.0.821'. [ 284.727984][ T6845] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 284.775009][ T6845] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 284.813282][ T6845] bond0 (unregistering): Released all slaves [ 285.058839][ T6867] netlink: 830 bytes leftover after parsing attributes in process `syz.3.828'. [ 285.217867][ T6871] netlink: 144 bytes leftover after parsing attributes in process `syz.0.829'. [ 288.396572][ T6910] netlink: 10 bytes leftover after parsing attributes in process `syz.2.853'. [ 288.462243][ T6912] netlink: 830 bytes leftover after parsing attributes in process `syz.4.843'. [ 288.832108][ T6930] netlink: 144 bytes leftover after parsing attributes in process `syz.1.849'. [ 288.843978][ T6931] netlink: 132 bytes leftover after parsing attributes in process `syz.4.848'. [ 288.866093][ T6931] bridge0: port 2(gretap0) entered blocking state [ 288.893994][ T6931] bridge0: port 2(gretap0) entered disabled state [ 289.038448][ T6931] device gretap0 entered promiscuous mode [ 289.122320][ T6931] bridge0: port 2(gretap0) entered blocking state [ 289.129420][ T6931] bridge0: port 2(gretap0) entered forwarding state [ 291.214575][ T6958] ref_ctr_offset mismatch. inode: 0x364 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 291.314576][ T6961] netlink: 830 bytes leftover after parsing attributes in process `syz.1.860'. [ 291.894224][ T6980] netlink: 'syz.3.866': attribute type 10 has an invalid length. [ 291.902099][ T6980] netlink: 40 bytes leftover after parsing attributes in process `syz.3.866'. [ 292.140150][ T6982] netlink: 160 bytes leftover after parsing attributes in process `syz.1.867'. [ 292.270834][ T6993] netlink: 144 bytes leftover after parsing attributes in process `syz.3.870'. [ 293.513134][ T7000] netlink: 'syz.3.872': attribute type 4 has an invalid length. [ 293.524769][ T7000] netlink: 'syz.3.872': attribute type 8 has an invalid length. [ 293.551145][ T7000] netlink: 109560 bytes leftover after parsing attributes in process `syz.3.872'. [ 293.575625][ T7010] netlink: 830 bytes leftover after parsing attributes in process `syz.0.874'. [ 294.316969][ T7028] netlink: 144 bytes leftover after parsing attributes in process `syz.3.882'. [ 295.683376][ T7044] netlink: 160 bytes leftover after parsing attributes in process `syz.2.886'. [ 296.960282][ T7077] netlink: 60 bytes leftover after parsing attributes in process `syz.2.897'. [ 297.006875][ T7077] netlink: 60 bytes leftover after parsing attributes in process `syz.2.897'. [ 297.059439][ T7078] netlink: 60 bytes leftover after parsing attributes in process `syz.2.897'. [ 297.103855][ T7077] netlink: 60 bytes leftover after parsing attributes in process `syz.2.897'. [ 297.387393][ T7085] netlink: 144 bytes leftover after parsing attributes in process `syz.2.899'. [ 299.606539][ T7093] netlink: 160 bytes leftover after parsing attributes in process `syz.0.902'. [ 299.681085][ T7091] netlink: 'syz.4.901': attribute type 4 has an invalid length. [ 299.824711][ T7091] netlink: 'syz.4.901': attribute type 8 has an invalid length. [ 299.847089][ T7091] netlink: 109560 bytes leftover after parsing attributes in process `syz.4.901'. [ 301.015403][ T7113] netlink: 128 bytes leftover after parsing attributes in process `syz.1.907'. [ 301.038819][ T7113] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 301.228783][ T7121] netlink: 144 bytes leftover after parsing attributes in process `syz.3.914'. [ 301.453422][ T7114] netlink: 144 bytes leftover after parsing attributes in process `syz.2.910'. [ 301.558165][ T7125] netlink: 184 bytes leftover after parsing attributes in process `syz.2.910'. [ 304.969926][ T7150] netlink: 'syz.4.921': attribute type 10 has an invalid length. [ 305.042569][ T7150] netlink: 40 bytes leftover after parsing attributes in process `syz.4.921'. [ 305.117159][ T7150] device ipvlan1 entered promiscuous mode [ 305.161278][ T7150] bridge0: port 3(ipvlan1) entered blocking state [ 305.195097][ T7150] bridge0: port 3(ipvlan1) entered disabled state [ 305.222662][ T7150] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 305.896095][ T7163] netlink: 144 bytes leftover after parsing attributes in process `syz.0.926'. [ 306.513174][ T7173] netlink: 'syz.1.929': attribute type 21 has an invalid length. [ 306.541716][ T7173] netlink: 132 bytes leftover after parsing attributes in process `syz.1.929'. [ 307.246291][ T7189] netlink: 'syz.3.942': attribute type 1 has an invalid length. [ 307.754966][ T7193] IPv6: Can't replace route, no match found [ 308.042435][ T7200] can: request_module (can-proto-0) failed. [ 308.727161][ T7220] netlink: 144 bytes leftover after parsing attributes in process `syz.1.943'. [ 309.960713][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 310.697532][ T7247] netlink: 'syz.0.952': attribute type 10 has an invalid length. [ 310.869347][ T7254] netlink: 103 bytes leftover after parsing attributes in process `syz.2.954'. [ 311.225745][ T7267] netlink: 144 bytes leftover after parsing attributes in process `syz.0.959'. [ 313.703359][ T7295] netlink: 180 bytes leftover after parsing attributes in process `syz.2.971'. [ 313.795998][ T7295] netlink: 'syz.2.971': attribute type 29 has an invalid length. [ 313.841762][ T7295] netlink: 'syz.2.971': attribute type 29 has an invalid length. [ 313.889504][ T7301] netlink: 'syz.2.971': attribute type 29 has an invalid length. [ 314.031763][ T7295] netlink: 'syz.2.971': attribute type 29 has an invalid length. [ 315.523025][ T7316] netlink: 144 bytes leftover after parsing attributes in process `syz.1.977'. [ 317.171904][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.178345][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.393938][ T7373] netlink: 'syz.4.998': attribute type 27 has an invalid length. [ 319.667693][ T7409] FAULT_INJECTION: forcing a failure. [ 319.667693][ T7409] name failslab, interval 1, probability 0, space 0, times 0 [ 319.770086][ T7409] CPU: 0 PID: 7409 Comm: syz.2.1012 Not tainted syzkaller #0 [ 319.777543][ T7409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 319.787639][ T7409] Call Trace: [ 319.790931][ T7409] [ 319.793885][ T7409] dump_stack_lvl+0x188/0x24e [ 319.798586][ T7409] ? show_regs_print_info+0x12/0x12 [ 319.803824][ T7409] ? load_image+0x410/0x410 [ 319.808347][ T7409] ? __might_sleep+0xd0/0xd0 [ 319.812950][ T7409] ? __lock_acquire+0x7bd0/0x7bd0 [ 319.817993][ T7409] should_fail_ex+0x390/0x4c0 [ 319.822686][ T7409] should_failslab+0x5/0x20 [ 319.827196][ T7409] slab_pre_alloc_hook+0x59/0x300 [ 319.832230][ T7409] ? sk_prot_alloc+0xe7/0x210 [ 319.836921][ T7409] __kmem_cache_alloc_node+0x4f/0x270 [ 319.842323][ T7409] ? sk_prot_alloc+0xe7/0x210 [ 319.847012][ T7409] __kmalloc+0xa3/0x240 [ 319.851188][ T7409] sk_prot_alloc+0xe7/0x210 [ 319.855704][ T7409] ? sk_alloc+0x20/0x330 [ 319.859960][ T7409] sk_alloc+0x36/0x330 [ 319.864040][ T7409] ? bpf_ctx_init+0x154/0x190 [ 319.868734][ T7409] bpf_prog_test_run_skb+0x36d/0x18e0 [ 319.874125][ T7409] ? __fget_files+0x28/0x460 [ 319.878733][ T7409] ? __fget_files+0x3fc/0x460 [ 319.883454][ T7409] ? cpu_online+0xa0/0xa0 [ 319.887797][ T7409] bpf_prog_test_run+0x31c/0x390 [ 319.892751][ T7409] __sys_bpf+0x62b/0x780 [ 319.897012][ T7409] ? bpf_link_show_fdinfo+0x380/0x380 [ 319.902407][ T7409] ? lock_chain_count+0x20/0x20 [ 319.907278][ T7409] __x64_sys_bpf+0x78/0x90 [ 319.911706][ T7409] do_syscall_64+0x4c/0xa0 [ 319.916128][ T7409] ? clear_bhb_loop+0x60/0xb0 [ 319.920812][ T7409] ? clear_bhb_loop+0x60/0xb0 [ 319.925499][ T7409] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 319.931410][ T7409] RIP: 0033:0x7f515639ce59 [ 319.935837][ T7409] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 319.955463][ T7409] RSP: 002b:00007f515730d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 319.963887][ T7409] RAX: ffffffffffffffda RBX: 00007f5156615fa0 RCX: 00007f515639ce59 [ 319.971876][ T7409] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 000000000000000a [ 319.979874][ T7409] RBP: 00007f515730d090 R08: 0000000000000000 R09: 0000000000000000 [ 319.987869][ T7409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 319.995862][ T7409] R13: 00007f5156616038 R14: 00007f5156615fa0 R15: 00007ffed587df08 [ 320.003866][ T7409] [ 320.158673][ T7422] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1015'. [ 322.709624][ T7452] FAULT_INJECTION: forcing a failure. [ 322.709624][ T7452] name failslab, interval 1, probability 0, space 0, times 0 [ 322.735957][ T7452] CPU: 0 PID: 7452 Comm: syz.0.1026 Not tainted syzkaller #0 [ 322.743433][ T7452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 322.753532][ T7452] Call Trace: [ 322.756851][ T7452] [ 322.759818][ T7452] dump_stack_lvl+0x188/0x24e [ 322.764542][ T7452] ? show_regs_print_info+0x12/0x12 [ 322.769795][ T7452] ? load_image+0x410/0x410 [ 322.774343][ T7452] ? __might_sleep+0xd0/0xd0 [ 322.778969][ T7452] ? __lock_acquire+0x7bd0/0x7bd0 [ 322.784047][ T7452] should_fail_ex+0x390/0x4c0 [ 322.788769][ T7452] should_failslab+0x5/0x20 [ 322.793293][ T7452] slab_pre_alloc_hook+0x59/0x300 [ 322.798331][ T7452] ? rcu_is_watching+0x11/0xa0 [ 322.803116][ T7452] ? sk_prot_alloc+0xe7/0x210 [ 322.807816][ T7452] __kmem_cache_alloc_node+0x4f/0x270 [ 322.813396][ T7452] ? lockdep_hardirqs_on+0x94/0x140 [ 322.818629][ T7452] ? sk_prot_alloc+0xe7/0x210 [ 322.823332][ T7452] __kmalloc+0xa3/0x240 [ 322.827514][ T7452] sk_prot_alloc+0xe7/0x210 [ 322.832035][ T7452] ? sk_alloc+0x20/0x330 [ 322.836301][ T7452] sk_alloc+0x36/0x330 [ 322.840382][ T7452] ? bpf_ctx_init+0x154/0x190 [ 322.845076][ T7452] bpf_prog_test_run_skb+0x36d/0x18e0 [ 322.850468][ T7452] ? __fget_files+0x28/0x460 [ 322.855077][ T7452] ? __fget_files+0x3fc/0x460 [ 322.859780][ T7452] ? cpu_online+0xa0/0xa0 [ 322.864124][ T7452] bpf_prog_test_run+0x31c/0x390 [ 322.869097][ T7452] __sys_bpf+0x62b/0x780 [ 322.873355][ T7452] ? bpf_link_show_fdinfo+0x380/0x380 [ 322.878756][ T7452] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 322.884938][ T7452] __x64_sys_bpf+0x78/0x90 [ 322.889369][ T7452] do_syscall_64+0x4c/0xa0 [ 322.893794][ T7452] ? clear_bhb_loop+0x60/0xb0 [ 322.898476][ T7452] ? clear_bhb_loop+0x60/0xb0 [ 322.903160][ T7452] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 322.909073][ T7452] RIP: 0033:0x7f39a019ce59 [ 322.913503][ T7452] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 322.933122][ T7452] RSP: 002b:00007f39a1028028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 322.941552][ T7452] RAX: ffffffffffffffda RBX: 00007f39a0415fa0 RCX: 00007f39a019ce59 [ 322.949550][ T7452] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 000000000000000a [ 322.957550][ T7452] RBP: 00007f39a1028090 R08: 0000000000000000 R09: 0000000000000000 [ 322.965617][ T7452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 322.973624][ T7452] R13: 00007f39a0416038 R14: 00007f39a0415fa0 R15: 00007ffc8173b808 [ 322.981755][ T7452] [ 323.215551][ T7461] netlink: 'syz.3.1029': attribute type 10 has an invalid length. [ 323.291772][ T7461] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.452947][ T7469] can: request_module (can-proto-0) failed. [ 323.473663][ T7467] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1029'. [ 323.743357][ T7480] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1034'. [ 323.787605][ T7481] netlink: 'syz.0.1030': attribute type 10 has an invalid length. [ 324.261575][ T7490] netlink: 'syz.4.1035': attribute type 1 has an invalid length. [ 324.351035][ T7490] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1035'. [ 325.177994][ T7504] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 325.184041][ T7504] syzkaller1: linktype set to 825 [ 325.486186][ T7512] syzkaller1: tun_chr_ioctl cmd 1074025692 [ 326.765080][ T7549] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1062'. [ 326.782437][ T7545] tun0: tun_chr_ioctl cmd 1074025675 [ 326.807883][ T7545] tun0: persist disabled [ 327.303066][ T7564] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1070'. [ 328.206617][ T7582] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1079'. [ 328.831396][ T7601] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1084'. [ 329.289607][ T7614] netlink: 'syz.3.1089': attribute type 2 has an invalid length. [ 329.305091][ T7614] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.1089'. [ 329.484279][ T7617] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1090'. [ 329.545157][ T7618] netlink: 'syz.4.1090': attribute type 25 has an invalid length. [ 329.655592][ T7618] netlink: 'syz.4.1090': attribute type 6 has an invalid length. [ 330.152595][ T7625] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1091'. [ 330.398789][ T7622] netlink: 'syz.2.1091': attribute type 10 has an invalid length. [ 330.476993][ T7622] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1091'. [ 331.572924][ T7637] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1096'. [ 331.748727][ T7648] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1100'. [ 331.941828][ T7650] netlink: 'syz.3.1101': attribute type 1 has an invalid length. [ 331.977268][ T7650] netlink: 'syz.3.1101': attribute type 4 has an invalid length. [ 332.009656][ T7650] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1101'. [ 332.849975][ T7663] netlink: 'syz.0.1105': attribute type 29 has an invalid length. [ 332.912491][ T7663] netlink: 'syz.0.1105': attribute type 29 has an invalid length. [ 333.026951][ T7669] netlink: 'syz.0.1105': attribute type 29 has an invalid length. [ 333.106749][ T7663] netlink: 'syz.0.1105': attribute type 29 has an invalid length. [ 333.580448][ T7673] device geneve1 entered promiscuous mode [ 333.610705][ T7673] team0: Port device geneve1 added [ 333.852880][ T7686] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1113'. [ 334.495496][ T7704] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1121'. [ 335.002888][ T7715] validate_nla: 2 callbacks suppressed [ 335.002909][ T7715] netlink: 'syz.4.1123': attribute type 25 has an invalid length. [ 335.084004][ T7715] netlink: 'syz.4.1123': attribute type 28 has an invalid length. [ 335.420410][ T7725] netlink: 'syz.4.1128': attribute type 29 has an invalid length. [ 335.433201][ T7725] netlink: 'syz.4.1128': attribute type 29 has an invalid length. [ 335.443311][ T7725] netlink: 'syz.4.1128': attribute type 29 has an invalid length. [ 335.452520][ T7725] netlink: 'syz.4.1128': attribute type 29 has an invalid length. [ 336.234772][ T7743] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1135'. [ 336.923836][ T7754] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1140'. [ 337.904855][ T7781] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1148'. [ 338.467269][ T7795] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 338.494174][ T7795] syzkaller1: linktype set to 825 [ 338.892497][ T7796] syzkaller1: tun_chr_ioctl cmd 1074025692 [ 339.568798][ T7819] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1163'. [ 340.805054][ T7835] device pim6reg1 entered promiscuous mode [ 340.979629][ T7847] can: request_module (can-proto-0) failed. [ 341.875374][ T7862] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1176'. [ 341.896926][ T7860] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.1175'. [ 342.901463][ T7880] netlink: 'syz.4.1183': attribute type 10 has an invalid length. [ 346.490449][ T7903] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1190'. [ 348.047805][ T7914] netlink: 'syz.2.1194': attribute type 10 has an invalid length. [ 348.393784][ T7914] device veth1_macvtap left promiscuous mode [ 348.954912][ T7927] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1199'. [ 349.335015][ T7930] can: request_module (can-proto-0) failed. [ 349.624745][ T7950] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1209'. [ 349.894697][ T7960] device syzkaller0 entered promiscuous mode [ 351.226238][ T7985] netlink: 'syz.1.1218': attribute type 1 has an invalid length. [ 351.264222][ T7985] netlink: 'syz.1.1218': attribute type 3 has an invalid length. [ 351.300598][ T7985] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1218'. [ 351.395483][ T7991] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.1219'. [ 352.730495][ T8005] netlink: 'syz.1.1224': attribute type 2 has an invalid length. [ 353.324428][ T8011] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1225'. [ 355.895089][ T8031] FAULT_INJECTION: forcing a failure. [ 355.895089][ T8031] name failslab, interval 1, probability 0, space 0, times 0 [ 355.916208][ T8031] CPU: 1 PID: 8031 Comm: syz.0.1234 Not tainted syzkaller #0 [ 355.923731][ T8031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 355.933816][ T8031] Call Trace: [ 355.937169][ T8031] [ 355.940183][ T8031] dump_stack_lvl+0x188/0x24e [ 355.944946][ T8031] ? show_regs_print_info+0x12/0x12 [ 355.950373][ T8031] ? load_image+0x410/0x410 [ 355.954945][ T8031] ? __might_sleep+0xd0/0xd0 [ 355.959623][ T8031] ? __lock_acquire+0x7bd0/0x7bd0 [ 355.964697][ T8031] should_fail_ex+0x390/0x4c0 [ 355.969435][ T8031] should_failslab+0x5/0x20 [ 355.974054][ T8031] slab_pre_alloc_hook+0x59/0x300 [ 355.979157][ T8031] kmem_cache_alloc_node+0x5a/0x310 [ 355.984459][ T8031] ? __alloc_skb+0xf9/0x7d0 [ 355.988985][ T8031] __alloc_skb+0xf9/0x7d0 [ 355.993338][ T8031] alloc_skb_with_frags+0xa7/0x710 [ 355.998518][ T8031] ? __ipv6_dev_get_saddr+0x404/0x430 [ 356.003955][ T8031] sock_alloc_send_pskb+0x87f/0x9a0 [ 356.009186][ T8031] ? ip6_dst_lookup_tail+0x2ac/0x1600 [ 356.014582][ T8031] ? sock_kzfree_s+0x50/0x50 [ 356.019193][ T8031] ? ip6_dst_lookup_tail+0x11d9/0x1600 [ 356.024652][ T8031] rawv6_send_hdrinc+0x2eb/0x16a0 [ 356.029727][ T8031] ? txopt_get+0x76/0x3f0 [ 356.034054][ T8031] ? rawv6_probe_proto_opt+0x300/0x300 [ 356.039514][ T8031] ? txopt_get+0x340/0x3f0 [ 356.043932][ T8031] ? fl6_sock_lookup+0xc0/0xc0 [ 356.048717][ T8031] rawv6_sendmsg+0x11a7/0x1710 [ 356.053515][ T8031] ? compat_rawv6_ioctl+0x60/0x60 [ 356.058559][ T8031] ? aa_sk_perm+0x81f/0x950 [ 356.063172][ T8031] ? tomoyo_socket_sendmsg_permission+0x212/0x2f0 [ 356.069730][ T8031] ? inet_sendmsg+0x7a/0x2a0 [ 356.074464][ T8031] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 356.080356][ T8031] ? inet_send_prepare+0x250/0x250 [ 356.085502][ T8031] ____sys_sendmsg+0x5ed/0x9a0 [ 356.090298][ T8031] ? __sys_sendmsg_sock+0x30/0x30 [ 356.095348][ T8031] ? __import_iovec+0x306/0x510 [ 356.100255][ T8031] ? import_iovec+0x6f/0xa0 [ 356.104777][ T8031] ___sys_sendmsg+0x2a2/0x360 [ 356.109471][ T8031] ? __sys_sendmsg+0x2a0/0x2a0 [ 356.114252][ T8031] ? __lock_acquire+0x7bd0/0x7bd0 [ 356.119296][ T8031] __se_sys_sendmsg+0x1c3/0x2b0 [ 356.124167][ T8031] ? __x64_sys_sendmsg+0x80/0x80 [ 356.129120][ T8031] ? lockdep_hardirqs_on+0x94/0x140 [ 356.134320][ T8031] do_syscall_64+0x4c/0xa0 [ 356.138740][ T8031] ? clear_bhb_loop+0x60/0xb0 [ 356.143477][ T8031] ? clear_bhb_loop+0x60/0xb0 [ 356.148158][ T8031] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 356.154087][ T8031] RIP: 0033:0x7f39a019ce59 [ 356.158510][ T8031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 356.178154][ T8031] RSP: 002b:00007f39a1028028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 356.186655][ T8031] RAX: ffffffffffffffda RBX: 00007f39a0415fa0 RCX: 00007f39a019ce59 [ 356.194656][ T8031] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 356.203061][ T8031] RBP: 00007f39a1028090 R08: 0000000000000000 R09: 0000000000000000 [ 356.211053][ T8031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 356.219034][ T8031] R13: 00007f39a0416038 R14: 00007f39a0415fa0 R15: 00007ffc8173b808 [ 356.227033][ T8031] [ 356.495082][ T8005] device 1 entered promiscuous mode [ 356.527594][ T8007] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1224'. [ 356.632635][ T8036] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1236'. [ 356.836985][ T8040] netlink: 'syz.4.1238': attribute type 1 has an invalid length. [ 356.844808][ T8040] netlink: 'syz.4.1238': attribute type 3 has an invalid length. [ 356.861094][ T8040] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1238'. [ 357.002255][ T8047] netlink: 'syz.1.1239': attribute type 3 has an invalid length. [ 357.004502][ T8043] netlink: 'syz.1.1239': attribute type 3 has an invalid length. [ 357.135169][ T8047] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1239'. [ 357.186784][ T8043] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1239'. [ 359.336303][ T8086] netlink: 'syz.4.1251': attribute type 1 has an invalid length. [ 359.348355][ T8086] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.1251'. [ 361.007657][ T8142] netlink: 'syz.3.1269': attribute type 1 has an invalid length. [ 361.039190][ T8142] netlink: 'syz.3.1269': attribute type 3 has an invalid length. [ 361.076970][ T8142] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1269'. [ 361.648934][ T8163] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1272'. [ 362.039926][ T8149] device syzkaller0 entered promiscuous mode [ 362.448008][ T8173] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1276'. [ 368.555330][ T8235] FAULT_INJECTION: forcing a failure. [ 368.555330][ T8235] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 368.574371][ T8235] CPU: 0 PID: 8235 Comm: syz.2.1299 Not tainted syzkaller #0 [ 368.581966][ T8235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 368.592031][ T8235] Call Trace: [ 368.595348][ T8235] [ 368.598286][ T8235] dump_stack_lvl+0x188/0x24e [ 368.602998][ T8235] ? show_regs_print_info+0x12/0x12 [ 368.608214][ T8235] ? load_image+0x410/0x410 [ 368.612836][ T8235] ? __lock_acquire+0x7bd0/0x7bd0 [ 368.617916][ T8235] should_fail_ex+0x390/0x4c0 [ 368.622604][ T8235] _copy_from_user+0x2c/0x170 [ 368.627307][ T8235] kstrtouint_from_user+0xda/0x170 [ 368.632767][ T8235] ? kstrtol_from_user+0x190/0x190 [ 368.637969][ T8235] proc_fail_nth_write+0x8b/0x200 [ 368.643055][ T8235] ? proc_fail_nth_read+0x220/0x220 [ 368.648358][ T8235] ? common_file_perm+0x171/0x1c0 [ 368.653518][ T8235] ? proc_fail_nth_read+0x220/0x220 [ 368.658745][ T8235] vfs_write+0x2dc/0x9a0 [ 368.663065][ T8235] ? file_end_write+0x250/0x250 [ 368.667927][ T8235] ? __fget_files+0x28/0x460 [ 368.672571][ T8235] ? __fget_files+0x3fc/0x460 [ 368.677282][ T8235] ? __fdget_pos+0x2ae/0x360 [ 368.681918][ T8235] ? ksys_write+0x70/0x260 [ 368.686456][ T8235] ksys_write+0x14d/0x260 [ 368.691104][ T8235] ? __ia32_sys_read+0x80/0x80 [ 368.695874][ T8235] ? lockdep_hardirqs_on+0x94/0x140 [ 368.701081][ T8235] do_syscall_64+0x4c/0xa0 [ 368.705633][ T8235] ? clear_bhb_loop+0x60/0xb0 [ 368.710350][ T8235] ? clear_bhb_loop+0x60/0xb0 [ 368.715049][ T8235] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 368.720956][ T8235] RIP: 0033:0x7f515635d68e [ 368.725371][ T8235] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 368.745603][ T8235] RSP: 002b:00007f515730cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 368.754579][ T8235] RAX: ffffffffffffffda RBX: 00007f515730d6c0 RCX: 00007f515635d68e [ 368.762742][ T8235] RDX: 0000000000000001 RSI: 00007f515730d0a0 RDI: 0000000000000007 [ 368.770739][ T8235] RBP: 00007f515730d090 R08: 0000000000000000 R09: 0000000000000000 [ 368.778748][ T8235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 368.786764][ T8235] R13: 00007f5156616038 R14: 00007f5156615fa0 R15: 00007ffed587df08 [ 368.794774][ T8235] [ 368.972172][ T8238] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1300'. [ 370.007186][ T8249] FAULT_INJECTION: forcing a failure. [ 370.007186][ T8249] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 370.106850][ T8249] CPU: 0 PID: 8249 Comm: syz.3.1303 Not tainted syzkaller #0 [ 370.116737][ T8249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 370.130828][ T8249] Call Trace: [ 370.134155][ T8249] [ 370.137128][ T8249] dump_stack_lvl+0x188/0x24e [ 370.141833][ T8249] ? show_regs_print_info+0x12/0x12 [ 370.147064][ T8249] ? load_image+0x410/0x410 [ 370.151627][ T8249] ? __lock_acquire+0x7bd0/0x7bd0 [ 370.156729][ T8249] should_fail_ex+0x390/0x4c0 [ 370.161448][ T8249] _copy_from_user+0x2c/0x170 [ 370.166270][ T8249] restore_altstack+0xab/0x4e0 [ 370.171130][ T8249] ? __lock_acquire+0x7bd0/0x7bd0 [ 370.176392][ T8249] ? __ia32_sys_sigaltstack+0x2a0/0x2a0 [ 370.182018][ T8249] ? __might_fault+0xc2/0x120 [ 370.186778][ T8249] ? __might_fault+0xa6/0x120 [ 370.191480][ T8249] __ia32_sys_rt_sigreturn+0x624/0x750 [ 370.197024][ T8249] ? load_gs_index+0x130/0x130 [ 370.201835][ T8249] ? lock_chain_count+0x20/0x20 [ 370.206794][ T8249] ? exit_to_user_mode_loop+0xdc/0x110 [ 370.212353][ T8249] ? lockdep_hardirqs_on+0x94/0x140 [ 370.217585][ T8249] do_syscall_64+0x4c/0xa0 [ 370.222111][ T8249] ? clear_bhb_loop+0x60/0xb0 [ 370.226825][ T8249] ? clear_bhb_loop+0x60/0xb0 [ 370.231607][ T8249] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 370.237783][ T8249] RIP: 0033:0x7f70e839ce59 [ 370.242340][ T8249] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 370.262574][ T8249] RSP: 002b:00007f70e91c6028 EFLAGS: 00000246 [ 370.269810][ T8249] RAX: ffffffffffffffea RBX: 00007f70e8615fa0 RCX: 00007f70e839ce59 [ 370.277811][ T8249] RDX: 0000000000000008 RSI: 0000200000000300 RDI: 0000000000000024 [ 370.285794][ T8249] RBP: 00007f70e91c6090 R08: 0000000000000000 R09: 0000000000000000 [ 370.293883][ T8249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 370.302225][ T8249] R13: 00007f70e8616038 R14: 00007f70e8615fa0 R15: 00007fffd8afe5d8 [ 370.310332][ T8249] [ 370.658545][ T8269] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1311'. [ 371.615545][ T8302] netlink: 'syz.4.1320': attribute type 4 has an invalid length. [ 371.688608][ T8302] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1320'. [ 371.888746][ T8309] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1325'. [ 372.665421][ T8332] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1333'. [ 373.065125][ T8339] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1339'. [ 373.402652][ T8351] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.1342'. [ 373.856327][ T8361] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1347'. [ 375.490883][ T8393] netlink: 'syz.3.1350': attribute type 10 has an invalid length. [ 375.598462][ T8393] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1350'. [ 375.773386][ T8396] netlink: 'syz.1.1358': attribute type 2 has an invalid length. [ 376.198415][ T8391] netlink: 'syz.0.1356': attribute type 4 has an invalid length. [ 376.206407][ T8391] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.1356'. [ 376.631731][ T8396] device 2 entered promiscuous mode [ 376.968832][ T8416] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1361'. [ 378.611493][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.618128][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.921057][ T8427] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1367'. [ 380.669888][ T8442] netlink: 'syz.3.1373': attribute type 10 has an invalid length. [ 380.728103][ T8442] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1373'. [ 382.019075][ T8467] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1380'. [ 383.598391][ T8497] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1390'. [ 386.283307][ T8558] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1411'. [ 386.378388][ T8562] netlink: 'syz.3.1413': attribute type 46 has an invalid length. [ 388.698977][ T8594] netlink: 'syz.2.1424': attribute type 29 has an invalid length. [ 388.747378][ T8594] netlink: 'syz.2.1424': attribute type 29 has an invalid length. [ 388.833237][ T8602] netlink: 'syz.2.1424': attribute type 29 has an invalid length. [ 388.917143][ T8594] netlink: 'syz.2.1424': attribute type 29 has an invalid length. [ 389.044304][ T8606] netlink: 'syz.1.1427': attribute type 3 has an invalid length. [ 389.084588][ T8606] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1427'. [ 389.309999][ T8605] delete_channel: no stack [ 389.436981][ T8620] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1430'. [ 391.898047][ T8655] netlink: 8192 bytes leftover after parsing attributes in process `syz.0.1443'. [ 392.704927][ T8672] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1448'. [ 393.903016][ T8691] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.1455'. [ 395.469832][ T8709] FAULT_INJECTION: forcing a failure. [ 395.469832][ T8709] name failslab, interval 1, probability 0, space 0, times 0 [ 395.496607][ T8709] CPU: 1 PID: 8709 Comm: syz.2.1463 Not tainted syzkaller #0 [ 395.504334][ T8709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 395.514780][ T8709] Call Trace: [ 395.518100][ T8709] [ 395.521070][ T8709] dump_stack_lvl+0x188/0x24e [ 395.525793][ T8709] ? show_regs_print_info+0x12/0x12 [ 395.531118][ T8709] ? load_image+0x410/0x410 [ 395.535670][ T8709] ? __might_sleep+0xd0/0xd0 [ 395.540309][ T8709] ? __lock_acquire+0x7bd0/0x7bd0 [ 395.545374][ T8709] should_fail_ex+0x390/0x4c0 [ 395.550100][ T8709] should_failslab+0x5/0x20 [ 395.554643][ T8709] slab_pre_alloc_hook+0x59/0x300 [ 395.559714][ T8709] ? apparmor_sk_alloc_security+0x74/0x100 [ 395.565560][ T8709] __kmem_cache_alloc_node+0x4f/0x270 [ 395.570968][ T8709] ? apparmor_sk_alloc_security+0x74/0x100 [ 395.576879][ T8709] kmalloc_trace+0x26/0xe0 [ 395.581374][ T8709] apparmor_sk_alloc_security+0x74/0x100 [ 395.587672][ T8709] security_sk_alloc+0x6a/0xa0 [ 395.592476][ T8709] sk_prot_alloc+0x101/0x210 [ 395.597200][ T8709] ? sk_alloc+0x20/0x330 [ 395.601574][ T8709] sk_alloc+0x36/0x330 [ 395.605772][ T8709] ? bpf_ctx_init+0x154/0x190 [ 395.610792][ T8709] bpf_prog_test_run_skb+0x36d/0x18e0 [ 395.616183][ T8709] ? __fget_files+0x28/0x460 [ 395.620984][ T8709] ? __fget_files+0x3fc/0x460 [ 395.626299][ T8709] ? cpu_online+0xa0/0xa0 [ 395.630851][ T8709] bpf_prog_test_run+0x31c/0x390 [ 395.635912][ T8709] __sys_bpf+0x62b/0x780 [ 395.640210][ T8709] ? bpf_link_show_fdinfo+0x380/0x380 [ 395.645824][ T8709] ? lock_chain_count+0x20/0x20 [ 395.651273][ T8709] __x64_sys_bpf+0x78/0x90 [ 395.656140][ T8709] do_syscall_64+0x4c/0xa0 [ 395.660587][ T8709] ? clear_bhb_loop+0x60/0xb0 [ 395.665289][ T8709] ? clear_bhb_loop+0x60/0xb0 [ 395.669986][ T8709] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 395.675897][ T8709] RIP: 0033:0x7f515639ce59 [ 395.680333][ T8709] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 395.701134][ T8709] RSP: 002b:00007f515730d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 395.710210][ T8709] RAX: ffffffffffffffda RBX: 00007f5156615fa0 RCX: 00007f515639ce59 [ 395.718210][ T8709] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 000000000000000a [ 395.726291][ T8709] RBP: 00007f515730d090 R08: 0000000000000000 R09: 0000000000000000 [ 395.735261][ T8709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 395.743983][ T8709] R13: 00007f5156616038 R14: 00007f5156615fa0 R15: 00007ffed587df08 [ 395.752198][ T8709] [ 396.453945][ T8726] netlink: 'syz.0.1469': attribute type 3 has an invalid length. [ 396.483446][ T8726] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1469'. [ 396.513497][ T8725] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1467'. [ 396.775523][ T8735] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1469'. [ 397.094201][ T8740] netlink: 'syz.2.1472': attribute type 10 has an invalid length. [ 397.639747][ T8740] device wlan1 entered promiscuous mode [ 397.670844][ T8740] team0: Port device wlan1 added [ 398.406288][ T8764] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.923008][ T8782] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1485'. [ 399.160291][ T8789] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1488'. [ 400.332355][ T8798] netlink: 'syz.1.1492': attribute type 10 has an invalid length. [ 402.145723][ T8843] netlink: 'syz.2.1508': attribute type 25 has an invalid length. [ 402.179306][ T8843] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1508'. [ 402.400708][ T8854] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.1510'. [ 402.510104][ T8858] FAULT_INJECTION: forcing a failure. [ 402.510104][ T8858] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 402.589070][ T8857] netlink: 'syz.4.1511': attribute type 10 has an invalid length. [ 402.607917][ T8858] CPU: 0 PID: 8858 Comm: syz.1.1521 Not tainted syzkaller #0 [ 402.615480][ T8858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 402.625987][ T8858] Call Trace: [ 402.630016][ T8858] [ 402.633009][ T8858] dump_stack_lvl+0x188/0x24e [ 402.637734][ T8858] ? show_regs_print_info+0x12/0x12 [ 402.644264][ T8858] ? load_image+0x410/0x410 [ 402.649973][ T8858] ? __lock_acquire+0x7bd0/0x7bd0 [ 402.655333][ T8858] should_fail_ex+0x390/0x4c0 [ 402.660160][ T8858] _copy_from_user+0x2c/0x170 [ 402.664971][ T8858] __sys_bpf+0x2ea/0x780 [ 402.669264][ T8858] ? bpf_link_show_fdinfo+0x380/0x380 [ 402.674804][ T8858] ? lock_chain_count+0x20/0x20 [ 402.679894][ T8858] __x64_sys_bpf+0x78/0x90 [ 402.684458][ T8858] do_syscall_64+0x4c/0xa0 [ 402.689279][ T8858] ? clear_bhb_loop+0x60/0xb0 [ 402.695233][ T8858] ? clear_bhb_loop+0x60/0xb0 [ 402.703059][ T8858] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 402.709506][ T8858] RIP: 0033:0x7f24d6d9ce59 [ 402.714141][ T8858] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 402.736201][ T8858] RSP: 002b:00007f24d7b88028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 402.745645][ T8858] RAX: ffffffffffffffda RBX: 00007f24d7015fa0 RCX: 00007f24d6d9ce59 [ 402.754163][ T8858] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 402.762617][ T8858] RBP: 00007f24d7b88090 R08: 0000000000000000 R09: 0000000000000000 [ 402.770757][ T8858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 402.778791][ T8858] R13: 00007f24d7016038 R14: 00007f24d7015fa0 R15: 00007ffe309f6308 [ 402.786810][ T8858] [ 402.937170][ T8857] team0: Port device wlan1 added [ 403.062583][ T8870] netlink: 'syz.2.1514': attribute type 10 has an invalid length. [ 405.151656][ T8927] netlink: 'syz.3.1534': attribute type 13 has an invalid length. [ 405.177697][ T8927] netlink: 24643 bytes leftover after parsing attributes in process `syz.3.1534'. [ 405.342253][ T8928] delete_channel: no stack [ 406.207716][ T8964] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1546'. [ 406.224459][ T8965] FAULT_INJECTION: forcing a failure. [ 406.224459][ T8965] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 406.242799][ T8965] CPU: 1 PID: 8965 Comm: syz.4.1547 Not tainted syzkaller #0 [ 406.251277][ T8965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 406.261392][ T8965] Call Trace: [ 406.264684][ T8965] [ 406.267634][ T8965] dump_stack_lvl+0x188/0x24e [ 406.272512][ T8965] ? show_regs_print_info+0x12/0x12 [ 406.277729][ T8965] ? load_image+0x410/0x410 [ 406.282256][ T8965] ? __lock_acquire+0x7bd0/0x7bd0 [ 406.287317][ T8965] should_fail_ex+0x390/0x4c0 [ 406.292011][ T8965] prepare_alloc_pages+0x1e1/0x5b0 [ 406.297212][ T8965] __alloc_pages+0x130/0x4f0 [ 406.301840][ T8965] ? zone_statistics+0x170/0x170 [ 406.306804][ T8965] ? _raw_spin_lock_irqsave+0x100/0x100 [ 406.312426][ T8965] ? copy_page_from_iter+0xe4/0x100 [ 406.318178][ T8965] pipe_write+0x616/0x1ae0 [ 406.323059][ T8965] ? pipe_read+0x12d0/0x12d0 [ 406.327899][ T8965] ? end_current_label_crit_section+0x14b/0x170 [ 406.334527][ T8965] ? common_file_perm+0x171/0x1c0 [ 406.339583][ T8965] vfs_write+0x482/0x9a0 [ 406.343870][ T8965] ? file_end_write+0x250/0x250 [ 406.348948][ T8965] ? __fget_files+0x3fc/0x460 [ 406.353685][ T8965] ? __fdget_pos+0x1d4/0x360 [ 406.358502][ T8965] ? ksys_write+0x70/0x260 [ 406.362963][ T8965] ksys_write+0x14d/0x260 [ 406.367319][ T8965] ? __ia32_sys_read+0x80/0x80 [ 406.372112][ T8965] ? lockdep_hardirqs_on+0x94/0x140 [ 406.377334][ T8965] do_syscall_64+0x4c/0xa0 [ 406.381808][ T8965] ? clear_bhb_loop+0x60/0xb0 [ 406.386535][ T8965] ? clear_bhb_loop+0x60/0xb0 [ 406.391398][ T8965] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 406.397382][ T8965] RIP: 0033:0x7f891499ce59 [ 406.401814][ T8965] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 406.421523][ T8965] RSP: 002b:00007f891582c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 406.429954][ T8965] RAX: ffffffffffffffda RBX: 00007f8914c15fa0 RCX: 00007f891499ce59 [ 406.438899][ T8965] RDX: 000000000000fdef RSI: 0000200000000200 RDI: 0000000000000000 [ 406.447077][ T8965] RBP: 00007f891582c090 R08: 0000000000000000 R09: 0000000000000000 [ 406.455182][ T8965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 406.464075][ T8965] R13: 00007f8914c16038 R14: 00007f8914c15fa0 R15: 00007ffeaa69fba8 [ 406.473517][ T8965] [ 406.900442][ T8974] can: request_module (can-proto-0) failed. [ 408.150459][ T9005] can: request_module (can-proto-0) failed. [ 408.299346][ T9014] netlink: 'syz.0.1561': attribute type 28 has an invalid length. [ 408.432118][ T9014] netlink: 'syz.0.1561': attribute type 29 has an invalid length. [ 408.473370][ T9014] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1561'. [ 410.951943][ T9060] bridge0: port 3(team0) entered disabled state [ 411.036653][ T9060] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.072495][ T9060] device bridge_slave_0 left promiscuous mode [ 411.090476][ T9060] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.754672][ T9071] delete_channel: no stack [ 411.823350][ T9078] netlink: 'syz.4.1584': attribute type 10 has an invalid length. [ 411.867440][ T9078] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1584'. [ 411.908904][ T9078] batman_adv: batadv0: Adding interface: virt_wifi0 [ 411.915751][ T9078] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 412.008192][ T9084] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1586'. [ 412.032982][ T9078] batman_adv: batadv0: Interface activated: virt_wifi0 [ 412.074156][ T9084] FAULT_INJECTION: forcing a failure. [ 412.074156][ T9084] name failslab, interval 1, probability 0, space 0, times 0 [ 412.152955][ T9084] CPU: 1 PID: 9084 Comm: syz.1.1586 Not tainted syzkaller #0 [ 412.160460][ T9084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 412.170779][ T9084] Call Trace: [ 412.174133][ T9084] [ 412.177141][ T9084] dump_stack_lvl+0x188/0x24e [ 412.181939][ T9084] ? show_regs_print_info+0x12/0x12 [ 412.189632][ T9084] ? load_image+0x410/0x410 [ 412.195100][ T9084] ? __might_sleep+0xd0/0xd0 [ 412.202762][ T9084] ? __lock_acquire+0x7bd0/0x7bd0 [ 412.208166][ T9084] ? aa_file_perm+0x3ea/0xf00 [ 412.213366][ T9084] should_fail_ex+0x390/0x4c0 [ 412.218270][ T9084] should_failslab+0x5/0x20 [ 412.222858][ T9084] slab_pre_alloc_hook+0x59/0x300 [ 412.228030][ T9084] ? kernfs_fop_write_iter+0x154/0x520 [ 412.233595][ T9084] __kmem_cache_alloc_node+0x4f/0x270 [ 412.239114][ T9084] ? kernfs_fop_write_iter+0x154/0x520 [ 412.244615][ T9084] __kmalloc+0xa3/0x240 [ 412.248847][ T9084] kernfs_fop_write_iter+0x154/0x520 [ 412.255776][ T9084] vfs_write+0x482/0x9a0 [ 412.260181][ T9084] ? file_end_write+0x250/0x250 [ 412.265101][ T9084] ? __fget_files+0x3fc/0x460 [ 412.269879][ T9084] ? __fdget_pos+0x2ae/0x360 [ 412.274810][ T9084] ? ksys_write+0x70/0x260 [ 412.279290][ T9084] ksys_write+0x14d/0x260 [ 412.283708][ T9084] ? __ia32_sys_read+0x80/0x80 [ 412.289009][ T9084] ? lockdep_hardirqs_on+0x94/0x140 [ 412.294512][ T9084] do_syscall_64+0x4c/0xa0 [ 412.298990][ T9084] ? clear_bhb_loop+0x60/0xb0 [ 412.304419][ T9084] ? clear_bhb_loop+0x60/0xb0 [ 412.309241][ T9084] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 412.315494][ T9084] RIP: 0033:0x7f24d6d9ce59 [ 412.320047][ T9084] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 412.339846][ T9084] RSP: 002b:00007f24d7b88028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 412.348939][ T9084] RAX: ffffffffffffffda RBX: 00007f24d7015fa0 RCX: 00007f24d6d9ce59 [ 412.357674][ T9084] RDX: 000000000000006a RSI: 0000200000000340 RDI: 000000000000000b [ 412.365896][ T9084] RBP: 00007f24d7b88090 R08: 0000000000000000 R09: 0000000000000000 [ 412.374299][ T9084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 412.382666][ T9084] R13: 00007f24d7016038 R14: 00007f24d7015fa0 R15: 00007ffe309f6308 [ 412.392085][ T9084] [ 413.129012][ T9101] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1590'. [ 413.965123][ T9114] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1593'. [ 414.635698][ T9124] delete_channel: no stack [ 415.013824][ T9133] netlink: 'syz.4.1601': attribute type 21 has an invalid length. [ 415.087089][ T9133] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1601'. [ 415.185169][ T9135] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.1601'. [ 415.215823][ T9135] netlink: zone id is out of range [ 415.246244][ T9135] netlink: zone id is out of range [ 415.256406][ T9135] netlink: zone id is out of range [ 415.264142][ T9135] netlink: zone id is out of range [ 415.280413][ T9135] netlink: zone id is out of range [ 415.339083][ T9135] netlink: zone id is out of range [ 415.375275][ T9135] netlink: zone id is out of range [ 415.417141][ T9135] netlink: zone id is out of range [ 415.422598][ T9135] netlink: zone id is out of range [ 415.507082][ T9135] netlink: zone id is out of range [ 416.204734][ T9167] netlink: 'syz.4.1610': attribute type 2 has an invalid length. [ 416.305604][ T9167] netlink: 17267 bytes leftover after parsing attributes in process `syz.4.1610'. [ 416.456853][ T9171] netlink: 'syz.3.1614': attribute type 10 has an invalid length. [ 416.457217][ T9169] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1612'. [ 416.857520][ T9176] FAULT_INJECTION: forcing a failure. [ 416.857520][ T9176] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 416.901957][ T9173] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1613'. [ 416.951669][ T9176] CPU: 0 PID: 9176 Comm: syz.0.1615 Not tainted syzkaller #0 [ 416.959258][ T9176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 416.970223][ T9176] Call Trace: [ 416.973746][ T9176] [ 416.976851][ T9176] dump_stack_lvl+0x188/0x24e [ 416.982952][ T9176] ? show_regs_print_info+0x12/0x12 [ 416.990004][ T9176] ? load_image+0x410/0x410 [ 416.994781][ T9176] ? __lock_acquire+0x7bd0/0x7bd0 [ 417.000383][ T9176] should_fail_ex+0x390/0x4c0 [ 417.005614][ T9176] _copy_from_user+0x2c/0x170 [ 417.012075][ T9176] ___sys_sendmsg+0x1c3/0x360 [ 417.017135][ T9176] ? __sys_sendmsg+0x2a0/0x2a0 [ 417.022092][ T9176] ? __lock_acquire+0x7bd0/0x7bd0 [ 417.028480][ T9176] __se_sys_sendmsg+0x1c3/0x2b0 [ 417.034690][ T9176] ? __x64_sys_sendmsg+0x80/0x80 [ 417.040103][ T9176] ? lockdep_hardirqs_on+0x94/0x140 [ 417.045575][ T9176] do_syscall_64+0x4c/0xa0 [ 417.051300][ T9176] ? clear_bhb_loop+0x60/0xb0 [ 417.056408][ T9176] ? clear_bhb_loop+0x60/0xb0 [ 417.061619][ T9176] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 417.070721][ T9176] RIP: 0033:0x7f39a019ce59 [ 417.076109][ T9176] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 417.099200][ T9176] RSP: 002b:00007f39a1028028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 417.108387][ T9176] RAX: ffffffffffffffda RBX: 00007f39a0415fa0 RCX: 00007f39a019ce59 [ 417.117588][ T9176] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000006 [ 417.126757][ T9176] RBP: 00007f39a1028090 R08: 0000000000000000 R09: 0000000000000000 [ 417.136005][ T9176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 417.144353][ T9176] R13: 00007f39a0416038 R14: 00007f39a0415fa0 R15: 00007ffc8173b808 [ 417.152522][ T9176] [ 417.191704][ T4280] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 417.208142][ T9179] netlink: 'syz.3.1617': attribute type 10 has an invalid length. [ 418.716295][ T9194] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1622'. [ 418.745588][ T9209] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1626'. [ 419.137274][ T9212] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1628'. [ 419.254917][ T9183] Bluetooth: hci4: command 0x2016 tx timeout [ 419.616455][ C1] [ 419.616464][ C1] ================================ [ 419.616469][ C1] WARNING: inconsistent lock state [ 419.616474][ C1] syzkaller #0 Not tainted [ 419.616482][ C1] -------------------------------- [ 419.616486][ C1] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 419.616492][ C1] syz.2.1627/9213 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 419.616511][ C1] ffffffff8cc84218 (kernfs_rename_lock){....}-{2:2}, at: kernfs_path_from_node+0x84/0xd60 [ 419.616560][ C1] {INITIAL USE} state was registered at: [ 419.616567][ C1] lock_acquire+0x1bb/0x4a0 [ 419.616587][ C1] _raw_spin_lock_irq+0xab/0xf0 [ 419.616606][ C1] kernfs_rename_ns+0x55d/0x990 [ 419.616622][ C1] sysfs_rename_link_ns+0x171/0x1b0 [ 419.616642][ C1] device_rename+0x11c/0x1a0 [ 419.616719][ C1] dev_change_name+0x37b/0x910 [ 419.616735][ C1] do_setlink+0x967/0x29c0 [ 419.616775][ C1] rtnl_newlink+0x16e4/0x1f90 [ 419.616789][ C1] rtnetlink_rcv_msg+0x863/0xfb0 [ 419.616804][ C1] netlink_rcv_skb+0x1ef/0x440 [ 419.616819][ C1] netlink_unicast+0x7ad/0x920 [ 419.616832][ C1] netlink_sendmsg+0x8ad/0xbd0 [ 419.616847][ C1] __sys_sendto+0x497/0x650 [ 419.616862][ C1] __x64_sys_sendto+0xda/0xf0 [ 419.616875][ C1] do_syscall_64+0x4c/0xa0 [ 419.616891][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 419.616913][ C1] irq event stamp: 2786 [ 419.616918][ C1] hardirqs last enabled at (2785): [] syscall_enter_from_user_mode+0x21/0x80 [ 419.616945][ C1] hardirqs last disabled at (2786): [] exc_debug+0x6e/0x130 [ 419.616965][ C1] softirqs last enabled at (2322): [] bpf_map_alloc_id+0x87/0xd0 [ 419.616991][ C1] softirqs last disabled at (2320): [] bpf_map_alloc_id+0x21/0xd0 [ 419.617016][ C1] [ 419.617016][ C1] other info that might help us debug this: [ 419.617021][ C1] Possible unsafe locking scenario: [ 419.617021][ C1] [ 419.617025][ C1] CPU0 [ 419.617028][ C1] ---- [ 419.617031][ C1] lock(kernfs_rename_lock); [ 419.617042][ C1] [ 419.617045][ C1] lock(kernfs_rename_lock); [ 419.617055][ C1] [ 419.617055][ C1] *** DEADLOCK *** [ 419.617055][ C1] [ 419.617059][ C1] no locks held by syz.2.1627/9213. [ 419.617066][ C1] [ 419.617066][ C1] stack backtrace: [ 419.617071][ C1] CPU: 1 PID: 9213 Comm: syz.2.1627 Not tainted syzkaller #0 [ 419.617087][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 419.617096][ C1] Call Trace: [ 419.617104][ C1] <#DB> [ 419.617137][ C1] dump_stack_lvl+0x188/0x24e [ 419.617157][ C1] ? show_regs_print_info+0x12/0x12 [ 419.617180][ C1] ? print_usage_bug+0x42a/0x690 [ 419.617203][ C1] ? verify_lock_unused+0x15/0x140 [ 419.617237][ C1] lock_acquire+0x2df/0x4a0 [ 419.617262][ C1] ? kernfs_path_from_node+0x84/0xd60 [ 419.617281][ C1] ? read_lock_is_recursive+0x10/0x10 [ 419.617306][ C1] ? trace_event_raw_event_lock+0x230/0x230 [ 419.617325][ C1] ? look_up_lock_class+0x75/0x140 [ 419.617348][ C1] _raw_spin_lock_irqsave+0xb0/0x100 [ 419.617369][ C1] ? kernfs_path_from_node+0x84/0xd60 [ 419.617386][ C1] ? _raw_spin_lock+0x40/0x40 [ 419.617405][ C1] ? rcu_is_watching+0x11/0xa0 [ 419.617465][ C1] ? lock_release+0xcf/0x920 [ 419.617487][ C1] ? percpu_ref_tryget+0x15/0x180 [ 419.617549][ C1] kernfs_path_from_node+0x84/0xd60 [ 419.617567][ C1] ? __lock_acquire+0x7bd0/0x7bd0 [ 419.617588][ C1] ? perf_trace_lock_acquire+0x101/0x3f0 [ 419.617611][ C1] ? kernfs_name+0x140/0x140 [ 419.617629][ C1] ? get_mem_cgroup_from_mm+0x34/0x290 [ 419.617649][ C1] ? get_mem_cgroup_from_mm+0x1ae/0x290 [ 419.617668][ C1] get_mm_memcg_path+0xb9/0x360 [ 419.617691][ C1] __mmap_lock_do_trace_acquire_returned+0xe7/0x390 [ 419.617716][ C1] ? get_mm_memcg_path+0x360/0x360 [ 419.617749][ C1] ? __init_rwsem+0x160/0x160 [ 419.617770][ C1] stack_map_get_build_id_offset+0x699/0x9d0 [ 419.617813][ C1] ? pcpu_freelist_pop+0x126/0x180 [ 419.617871][ C1] ? __pcpu_freelist_pop+0x850/0x850 [ 419.617891][ C1] ? __bpf_get_stackid+0x920/0x920 [ 419.617915][ C1] __bpf_get_stackid+0x55d/0x920 [ 419.617939][ C1] bpf_prog_12712c88fd19bd5b+0x21/0x25 [ 419.617958][ C1] bpf_overflow_handler+0x6d1/0x790 [ 419.617985][ C1] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 419.618009][ C1] ? bpf_overflow_handler+0xd9/0x790 [ 419.618026][ C1] ? perf_swevent_overflow+0x230/0x230 [ 419.618049][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 419.618073][ C1] __perf_event_overflow+0x457/0x630 [ 419.618100][ C1] perf_swevent_event+0x315/0x570 [ 419.618124][ C1] ? perf_tp_event+0xc10/0xc10 [ 419.618154][ C1] perf_bp_event+0x311/0x3f0 [ 419.618180][ C1] ? perf_trace_lock_acquire+0x101/0x3f0 [ 419.618198][ C1] ? perf_event_free_bpf_prog+0x120/0x120 [ 419.618251][ C1] ? atomic_notifier_call_chain+0x2c/0x2b0 [ 419.618293][ C1] ? read_lock_is_recursive+0x10/0x10 [ 419.618319][ C1] hw_breakpoint_exceptions_notify+0x14d/0x470 [ 419.618367][ C1] atomic_notifier_call_chain+0x17a/0x2b0 [ 419.618384][ C1] ? atomic_notifier_call_chain+0x2c/0x2b0 [ 419.618405][ C1] notify_die+0x141/0x1a0 [ 419.618424][ C1] ? srcu_init_notifier_head+0x90/0x90 [ 419.618452][ C1] notify_debug+0x20/0x30 [ 419.618471][ C1] exc_debug+0xd9/0x130 [ 419.618489][ C1] asm_exc_debug+0x1a/0x40 [ 419.618510][ C1] RIP: 0010:copy_user_enhanced_fast_string+0xa/0x40 [ 419.618530][ C1] Code: ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 8d 0c ca 89 ca eb 20 0f 01 cb 83 fa 40 72 38 89 d1 a4 31 c0 0f 01 ca c3 89 ca eb 0a 90 90 90 90 90 90 90 90 90 90 [ 419.618543][ C1] RSP: 0018:ffffc9001b567d48 EFLAGS: 00050206 [ 419.618560][ C1] RAX: ffffffff840ff001 RBX: 0000000000000090 RCX: 000000000000004f [ 419.618571][ C1] RDX: 0000000000000090 RSI: 0000200000000301 RDI: ffffc9001b567e01 [ 419.618583][ C1] RBP: 0000000000000000 R08: ffffc9001b567e4f R09: 1ffff920036acfc9 [ 419.618594][ C1] R10: dffffc0000000000 R11: fffff520036acfca R12: 00007fffffffef70 [ 419.618605][ C1] R13: 0000000000000090 R14: ffffc9001b567dc0 R15: 00002000000002c0 [ 419.618622][ C1] ? refcount_dec_and_lock_irqsave+0xe1/0xf0 [ 419.618649][ C1] [ 419.618654][ C1] [ 419.618659][ C1] _copy_from_user+0xf4/0x170 [ 419.618680][ C1] __sys_bpf+0x2ea/0x780 [ 419.618704][ C1] ? bpf_link_show_fdinfo+0x380/0x380 [ 419.618735][ C1] ? lock_chain_count+0x20/0x20 [ 419.618761][ C1] __x64_sys_bpf+0x78/0x90 [ 419.618783][ C1] do_syscall_64+0x4c/0xa0 [ 419.618798][ C1] ? clear_bhb_loop+0x60/0xb0 [ 419.618811][ C1] ? clear_bhb_loop+0x60/0xb0 [ 419.618826][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 419.618846][ C1] RIP: 0033:0x7f515639ce59 [ 419.618859][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 419.618872][ C1] RSP: 002b:00007f515730d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 419.618888][ C1] RAX: ffffffffffffffda RBX: 00007f5156615fa0 RCX: 00007f515639ce59 [ 419.618900][ C1] RDX: 0000000000000094 RSI: 00002000000002c0 RDI: 0000000000000005 [ 419.618909][ C1] RBP: 00007f5156432e6f R08: 0000000000000000 R09: 0000000000000000 [ 419.618919][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 419.618929][ C1] R13: 00007f5156616038 R14: 00007f5156615fa0 R15: 00007ffed587df08 [ 419.618951][ C1]