last executing test programs: 9m57.893985796s ago: executing program 4 (id=1271): bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0x1, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x4, [@typedef={0xf, 0x0, 0x0, 0x8, 0x5}, @enum64={0x3, 0x4, 0x0, 0x13, 0x0, 0xa, [{0xc, 0x5, 0xaa6}, {0x4, 0x0, 0xe4}, {0x7}, {0x3, 0x3, 0x400}]}, @float={0x4}, @fwd={0xa}, @float={0x3, 0x0, 0x0, 0x10, 0xc}, @type_tag={0x4, 0x0, 0x0, 0x12, 0x5}, @type_tag={0xb, 0x0, 0x0, 0x12, 0x4}, @ptr={0x1, 0x0, 0x0, 0x2, 0x2}, @func={0xd, 0x0, 0x0, 0xc, 0x4}, @enum64={0xf, 0x1, 0x0, 0x13, 0x1, 0x2, [{0x4, 0xa4b, 0xba4}]}]}, {0x0, [0x2e, 0x30]}}, &(0x7f0000000340)=""/63, 0xd0, 0x3f, 0x0, 0x38a08d2a}, 0x28) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce220000"], 0xfdef) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1d, 0x8, 0x7, 0x3, 0x28008, 0x1, 0x81, '\x00', r0, r1, 0x3, 0x1, 0x1, 0x0, @value=r3}, 0x50) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfe1b) socket$kcm(0xf, 0x3, 0x2) r4 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x3}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/193, 0xc1}, 0x40000064) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x16, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) setsockopt$sock_attach_bpf(r4, 0x0, 0x4, 0x0, 0x28) socket$kcm(0x2, 0x3, 0x84) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703100000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 9m56.908159397s ago: executing program 4 (id=1277): socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_clone(0x200, 0x0, 0x0, 0x0, 0x0, 0x0) 9m56.809625241s ago: executing program 4 (id=1278): r0 = socket$kcm(0x21, 0x2, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/11], 0x0, 0x4, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xc9}, 0x50) setsockopt$sock_attach_bpf(r0, 0x110, 0x2, &(0x7f0000000140), 0x16) socket$kcm(0x15, 0x5, 0x0) r2 = socket$kcm(0x10, 0x2, 0x2) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x800000002, 0x1fffc}, 0x102065, 0x0, 0x0, 0x3, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0}, 0x0) r3 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x404a) socket$kcm(0x2b, 0x1, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32, @ANYBLOB="1e000100110000001031bc22486b1ea92c3c4b1d6e"], 0x20) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict]}}, &(0x7f0000000380)=""/254, 0x26, 0xfe, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1d00000004000000020000000000000001020000", @ANYRES32, @ANYBLOB="000000001200"/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="01000000ffffffff00"/28], 0x50) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) recvmsg$kcm(r2, &(0x7f00000028c0)={&(0x7f00000001c0)=@generic, 0x80, &(0x7f0000002740)=[{&(0x7f0000000240)=""/24, 0x18}, {&(0x7f0000000580)=""/91, 0x5b}, {&(0x7f0000001680)=""/4096, 0x1000}, {&(0x7f0000002680)=""/82, 0x52}, {&(0x7f0000002700)=""/11, 0xb}], 0x5, &(0x7f00000027c0)=""/193, 0xc1}, 0x2000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={0x0, 0x0, 0x4e}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x15, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) close(r5) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) 9m55.85986419s ago: executing program 4 (id=1292): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x5, &(0x7f0000001300)=ANY=[@ANYBLOB="25ffff00000000788b0000000000180000000000000000000f00000000009500ab3cdb29557389900000000000000000ad62c6055ce8711f7a462b2b88300ecc5e905035f66132cc6e1cd1a48d58712c17e224839649a210a5fbe72bf4b4acf6643790f62ebeb7b2414f3cf9a515950f9f02dc"], &(0x7f0000000000)='GPL\x00'}, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0e000000040000000800000002"], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="1b00"/20, @ANYRES32=r0, @ANYBLOB="1000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200fd0002000000000000000000000000009cc3febc623dd107aab4"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000800000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe30e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x208800, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0xa, 0x5, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000004680)=ANY=[@ANYBLOB="18020000e2ffffff00000000000000c685000000360000009500001800000000922ae83713ab9600010000801b10fb54a8cb72d232ad558c46fff4208d4990ec11ce9413ac30e00bd0081f8504e19a5183d769676520e98a263345e44d5ad12bca35510100c4d86abeb12303ff1c9fe0d0020000d60400000007d3670000008aff66d6b3181ffc1d62a3954c1198bbc4fa13aee48ca9e8969faebf3183fe803ab3f5024b52dc265b36fc9dae00a09404f01f9504d0976d252bd8d24538556e5e57bee3b8cf464ef3c6a7def8bad3ca6e3abdb21696e340bb8e2a093add57196b40def3858ef569147fa4108328392d322ab5df10a2f69a6bdf72ee7944e810d0223917c3d042410f57466f59544047d6d8ac44060000000000ee16c729300d2301800000000000002b5a8b05fcc154ad5290a8cdb97c343f454ff69dd6cbde49b28a6cb5f4fc0001745cff6e00e7ffffff0000acf3209a08439f1ff01779b6f6df7e02aa6d7760525b595fe1f697bc114ed1778e97a3f0395f946974cfb458be2a34cf924dc37b5592bf17956f3547497aba814382ff67b345b677a9d6523d87008000000400000000003fe8613ca29ff92be0d8deffff7b68136b0046d535dd39c0f35408869e9b342b953f91447e6b9eab304f134306320600a44095254b45a6c1312a13696c7202df5f764713504facc532c5a6d44d99ec7530ed7b0311000000000000e54e9072a22d911f4a2c2e2fa806e63c5cd98a8569a6d6bcfb000064885117e2ad910eae67e0ebe380d0f648713e68153579e02d71c58d147b00821ab9a6475b31e1ebf1369a04000000fbf3983f283f2f00000000992774814d63c933912d000006000000a66acb0a38856929e7d8b1b06c9bd5d7e5490f3b8596b694ea9483ad4bd287c83dd998a74694d18bdd8ad0983bc90770bbd26a82b9d99d5fc04563b523c47ef8c33400e90d02000000000000000edf1147a7afe772cd45af8aeffe2753088e02ca6bb2feec446ce7dbce66f0a93a03371320980865c7c62ea4d8f8a864dce9fa85aeb0454349100296ee2dba39c3f6fd6cf96714e11fe03b5062809a7418b165dd0336d226bac1e1223be1c97b15175d0e664beb126000e96549e1a1228c686edb475b705eaa9515c96f4fc6b3c925ea404e0f1de61026dc6c6618580fd6ce9eac602c1756f6d1056712412131ed9925989e01eae489ec7052e0ed72c326c7a8aa63999e2297c54ce1822d14b7c7699a9d0600f11f2e7f474cffbc35bc8623cd5eb68af82275a940be0400000000000000bcc3fbe7d90de96d6a8e9f32f18d1f606b381e4903b500000000000000000000004a2357ba5f03000000000000005dcf4f2aaee86d4802000000000000007cdb686d5da2a42e4b5024b6535811f362201d4f82012e6af704973d04ea923c19e6cb723c1923b3eea2d73e176dff383c9fbbac53dfdcb1a68c98e96fe39eec23963faf3ebed3409144c7c53d6318ced678a621450a9b01e9f2772e5f2999d3435da02556e36c3215d2bd4e96c93bff3ad04a82ff3cfadcf65eb92adc6c68d66b11cb2d7556414a86dfa94bb7aa52c7febb1e9b2efcbbc5bccf9d39bed802f4f056976a9a362ee9cc624ec454b90200fd9603f96908bddc14500000000000000000000000000044d917c62b27679913075731e8fddb07c10c82002d60181588ae63a440454287de9e340f611267f37bdd0f2d21cb06fcaf45a0a297e396f428d43371424b307eef82c5d6d19f3ef0d3b8f7fa51957e3099caab31133b34a1d3eebc0f0c9056df2e9667ba0b55695c7894010079b07e7aef7785e2486472b5cba1f3346c1e8e23deb8c83ab6eb2c72c484241dc3b66da78260f800fffd39368b952f6f4a10295c50c887a31d8b543c5d10f2dbd4d0b84eaad43feb6e169a9f2fcff7000000000000000000e011bc6366f56fa787f212c1f8c0f47f5078191c8a02ad436725771738a2a98891971e3b932352896e1ea10f62e8ef7a87e16151b39d6c27575714540d8c293a3fa4b5a825360423c1cbc8b5d19167152823ed853140edda002c16c842b168bb55f6bb713deb57d0aa78d6d4e5fc5be2c402bd246128f41bcb02000000892b135a92e8c844938aa98ba4839a1408a696454d40e5eed4d4dce481ca86bfac54c330331b7f2cde17cbaeb0377696faf546ecbe742d73d47d726a50f6e752f3325255bd7e8b5923aa3cfb6f7e06494f21ca450139c558000000000000000000000800000000000000000075aa0000000000000000000000005560bd9eb81e839e4992e64b074a66cccccf00334fa94da8477be7d99b558ec6a5b1596ac1e7617c6b32eed0cc70286caf2c5189a103f4b0b04aff171c4d388ccf67fea37e782f025c94c853cde330a193a967d907a8c88fcb033e680f559a72150cb900bafcd536f48797915a2fe9922ce27300009e1b36aa4730117d9b00000000003c630000000000008fbbd11b015c415ca04192fbfb1a8b0e3460af35771dbac10062835c9bab3ad09f7a022c52d8000000000000000000004000000000000000000000000000000000000000000400000000000000000000000000006ec473c54399b7b8aa1ee46132fc45da8292631178cecf19550108b8b8423de42957ffe9bb6d752e68d2bc2ce777a17bf4dfdfee5de0f3e4dadf51ab9562827b762fa611ba5f32861c19dffe1dc9fd5c41cd46cf131fd6b0c2ddad90ac33f768f9ecc70327c59918fa5a249befe98262f53c8182d95f6da3698a6a88c2c31d801a8f1f5e0ce05138d5422da0a6a62b9dfe1f39775d1d0c9186096415f544aaf76b0a1c877a6c826a5adcfb22c4a0e5a46271caa3eaf4f389dd5f3c20dbddc0377a4266d7b9fd61b9287e9b4be0a413ee31be0ddecab0ef7b25cba1fb3654ddf291ecb7768ac1e177042cb4c452fa6b3966950000000000000000c187da23d6855500fe8510b51e13a890e394b84a6ea2cc8d42b97c697c29122298d55e2e1cca8e07abda2606a3f381c64b9fec0000000a7965e4854e8e3572ad5149b3872342dea9252132860c9af1bd5fe263c0313dea5d6e0c11a466d6892ed65f34667dd79b07b5cbdd8aa7dd561a26b5562d4861a7e1b0f48930e0b696ea3bee7eb72794e163d7aeac9a0fa5403ac9cb421eae283b0550f1d0d339cd7b96e71d3ab48ad9d7975e0c9b117f71d3ab80a0c9b0284ecc469fa6181c9c71fce07a6ffb23296a107763138e8d9876291af2076890c47925ac773d95d2ca42acb3e5f3a1550665b898462c139ffd0106bc8a61b6117d252efcab7106b4c3a3c13a70ff452e9d2096142c517b0e91b5cf88332faca5b3ee96363065c3ce32d3d39ec36e20d597e05664f2526bd918090649da11f7299789d00f5024df1e99d3efecb9b457642fe810370ba4fbe00fa60a28af966a27a1659e448bbe43a1dcd2ea760018b57a36ac41ef2051a7b703d55c0602540663016e20d50385766df4dac47802a55bd38dd767ee9960c6daa704fc5d01a14591f26b7b538c9bb22f6a2f7a34d1b9edfde3be9e25a110228c64253588ff420644dbc0854e69a7bdda72f93ceaccf92cfe7dd6296c950db10f6dd8a5ef9b73cf6a12a1ba16fdc7e35b805f4fd2fcff0a623722149c1465e4de2d53f0f10b14c21865027abc71a12cb1e9f8029c7a20000000eeb0d53a83e518c8d2052c08b515d9d0bde24ac4e798040c7db0bb03c019507d6377f3d5dd94a27abc6d6b120d61f772407e0d2cb50d29168b68aef9f176b4c3aa8b21279d4ea9c1f669aa8c2c17d5b3a8d1dda58d26f1019af04b7774c85d5bce8be010f27c5211938031c3404680b01279c778bd1fe1b48c4b5b8e0fe756e54a8d76b7cec5e3407d93b4eadc446440607de844acf5524a4657e33af2115547b735b57b5092d0bc8fa6acb832509abe0882d570ce400aaebd7baff88526608d6991aac95751671174129457e4a03aca69d82b64b89e6ad6ed1e275ec5002e48170e4c7b4f3971481098dedb88fba90770e44bf404d5a97fefe2fe8e459fe45933b78c7ab5fe985a480193a20fb07da1455fb283df68af569ac82aa6dc703e29bf158931fb79f2abfa6ff7eb8c4f381c9da58bea460e2ead969933e5391970ca4fddd64da2e5df9c4d82044068caaaab771b37bb06bbe673056d849825525f1120b2250f6b8520381f7a74b1c687781cb6b23e67b918844b83dbaeeb559ec8520d710dd6d6b4e64838bd434a36ed03fc0c488b24571032ffbc9f8ce97041e1bc4729d539358dc9599c1266b9ce2cb6dd0ad57a6e9d3d4a11a27f70b2934c96237e2ba09c58eeda678d4d08b6da99b7a86e946215afb1b48792fde54492e306cb5342e2589874b603a1de972b1f09cc350096f5c3e814118afdba0793cfdf20c77b34eacfdf63ce59ec4d2f867bf884e941559b068d908325667672b5e1cf71f4829c0493e8b141489ed926b822becead7a0a2b4a4c008ab16b616d60f347e4da54f06443507efe57ea62399ef4eb11b2f559e1b056456a53998bf1c6d13c92e75136147f91ae3a75ca15eb1b51bf700b3c0bf54bc3745ff313c5e75dc66386897f6ee45429371b8d0878c442ad2fe9baf85c1390da13efc353ccbef950c29f39ddf436f0d9bf1be1515ed251d8b6f11ecb16b1e8d1ed04196e9b6c2f9e068b7749bb6c1f533e493f22c901662c65cb761dc2eeff2f698bd4dbae83e2dfdc4f1c7f918a00515c1bc189d10ec22b35c92725cbf0ba244fd029c4f026f68e000000060000ab0476c3fd7f7c1e5c000000000000000000000011e43e39d3f4394fbfa13c416b1c443c5e52eea726491ad75100ebad7c6d5a665c59a3fb158e43da904f19e7e8daa4e90390b8da945f6cd78536c0d2be07221f85ad46b180f256d4d84592691d15d65896b66b63a46705338b67b72dc1c3075fcdc5cbffb0366151632ba5be8ae815dfea9fadfd31c473a24a73d3e5116c3023b3563c72d26fbd59877132bde5ca4ef8d92fd3613c768b35223f6fd0b5e9a8b98cccf1e2b4612e620e3a159d6365c9045aaa826aa0ee6d26cf0397ce674c20824584b464ebdc2f3ea26a7aec4570b242a6677a4e9187f8591c3a9bdc00000000002364bbd93964a8d0bdc802b9be2563838a91802e3deb150a6a97a73b168ccd8f7872"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x26}, 0x70) setsockopt$sock_attach_bpf(r3, 0x29, 0x3b, &(0x7f0000000100)=r4, 0x120) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000840)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x10, 0x0, 0x0, 0x9, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r5) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x7a}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r8 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000380)=r7, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r8, r6, 0x4, r6}, 0x10) sendmsg$kcm(r3, &(0x7f0000002dc0)={&(0x7f0000001580)=@l2tp6={0xa, 0x0, 0x0, @remote, 0x3, 0x5c4}, 0x80, &(0x7f00000029c0)=[{&(0x7f0000001480)="89", 0x1}], 0x1}, 0xc9) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r9, &(0x7f0000001080), 0x2, 0x0) socketpair(0x1, 0x1, 0x1, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'vcan0\x00', 0x10}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000240)) 9m55.000677677s ago: executing program 4 (id=1300): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000280)=[{&(0x7f00000001c0)="e9", 0xff04}], 0x1}, 0x8054) 9m54.753264935s ago: executing program 4 (id=1304): perf_event_open$cgroup(&(0x7f00000000c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xe}, 0x10e542, 0xe, 0x0, 0x0, 0x0, 0x6, 0xffff, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff7) ioctl$TUNGETVNETLE(r0, 0x4010744d, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000140)=ANY=[@ANYRES16=r1], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000b00)='>', 0x1}], 0x1}, 0x20000040) setsockopt$sock_attach_bpf(r2, 0x1, 0x10, &(0x7f0000001280), 0x4) recvmsg(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/17, 0x11}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f9, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x3f, 0x7, 0x3d, 0x7, 0x0, 0x0, 0xd299, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x100882, 0x7ff, 0x6, 0x0, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x61000600, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r4, &(0x7f0000000000), 0x2a979d) write$cgroup_subtree(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="2d68756765746c62202b626c6b696f202d726c202b78c672665f6576816e74202b72646d6120"], 0x34) socket$kcm(0x2, 0x1, 0x84) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80008, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x152, 0x1, 0x0, 0x2, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x1e, 0x1, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x2a}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socket$kcm(0x10, 0x2, 0x10) 9m39.509018005s ago: executing program 32 (id=1304): perf_event_open$cgroup(&(0x7f00000000c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xe}, 0x10e542, 0xe, 0x0, 0x0, 0x0, 0x6, 0xffff, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff7) ioctl$TUNGETVNETLE(r0, 0x4010744d, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000140)=ANY=[@ANYRES16=r1], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000b00)='>', 0x1}], 0x1}, 0x20000040) setsockopt$sock_attach_bpf(r2, 0x1, 0x10, &(0x7f0000001280), 0x4) recvmsg(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/17, 0x11}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f9, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x3f, 0x7, 0x3d, 0x7, 0x0, 0x0, 0xd299, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x100882, 0x7ff, 0x6, 0x0, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x61000600, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r4, &(0x7f0000000000), 0x2a979d) write$cgroup_subtree(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="2d68756765746c62202b626c6b696f202d726c202b78c672665f6576816e74202b72646d6120"], 0x34) socket$kcm(0x2, 0x1, 0x84) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80008, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x152, 0x1, 0x0, 0x2, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x1e, 0x1, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x2a}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socket$kcm(0x10, 0x2, 0x10) 8.179094291s ago: executing program 3 (id=3604): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x3000, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa7, 0x7898}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80350, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.swap.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0x60}, 0x40000062) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 8.166575932s ago: executing program 0 (id=3605): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) r4 = socket$kcm(0x2, 0x5, 0x84) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x7d, &(0x7f0000000000), 0x8) recvmsg$kcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000001c0)=@generic={&(0x7f00000002c0)='./file0\x00'}, 0x18) write$cgroup_subtree(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="364000001a00910069cdfb5cc682e02e0a"], 0xfe33) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x80108907, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000000), 0x4) r6 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x43cd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x8, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb7030000f30000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYRES64=r7], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x7}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r8) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000013006bcd9e3fe3d46e48aa31086b8703131801001f00000000000000080004000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c902d1938037e73f07d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x4e22, @local}, 0x4, 0x1, 0x3, 0x3}}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000380)="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", 0x159}, {&(0x7f0000000200)="8bfda0fae4fcd4a9de55ad3b1c2d1fdee363ddc06dfda6f2edea373945", 0x1d}, {&(0x7f0000000500)="6e53a24a72ed7c399a6d988520a67c260c93b7f99fd0c890646db95b326077f3cc59744b885bffbfb776ff7e8a0cc9934ed8b017f286080756c3a32b05cb39c4e3391ea559e10279c094afdc10176e4e13a513c5650b8915a29e5fa6acda018ff4c2d7eba173aaeeced07b02bad4bfd3a4b628d14f73d47cfc1e3a0003e1f0b1f235042213032073", 0x88}, {&(0x7f00000018c0)="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", 0xd61}], 0x4}, 0x4044020) 7.92023736s ago: executing program 0 (id=3609): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000018000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x13bb711e) 7.676058927s ago: executing program 3 (id=3613): perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x3}, 0x10020, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x50) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@generic={&(0x7f0000000180)='./file0\x00', 0x0, 0x8}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x12, &(0x7f0000000280)=@framed={{0x18, 0x5, 0x0, 0x0, 0xa}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x2}]}, &(0x7f0000000000)='GPL\x00', 0xec, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) socket$kcm(0x11, 0x2, 0x300) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) close(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x20702, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup(r3, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8914, &(0x7f0000000080)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_pid(r3, &(0x7f00000005c0), 0x12) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0xfffff000, 0x0, 0x0, 0x0, 0x0, 0xfeff, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7.005442288s ago: executing program 2 (id=3614): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x42010, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x248, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000, 0x10001}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, 0x0, 0xfe33) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0, 0xb}, 0x8061, 0x3, 0xffffffff, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r3, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x8, &(0x7f0000001680)}}, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x711fec55}, 0xa0d2}, 0x0, 0x0, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) setsockopt$sock_attach_bpf(r4, 0x29, 0x16, &(0x7f00000000c0), 0xb9) socket$kcm(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x6}, 0x100080, 0x0, 0x0, 0xc5f97a813e0b6f87}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r6, 0x0, 0x12, 0x2f, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.935680561s ago: executing program 0 (id=3616): r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x32}, 0x800, 0xfa, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000e40)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000ed2ba09eef1a0000000000000000000000000000000000000000000001"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000f91f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2, r1}, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x2, 0x0, 0x80, 0x0, 0x0, 0x4000000000000, 0x8d120, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x5}, 0x12010, 0xc8, 0x2, 0x1, 0x0, 0x5, 0xffff, 0x0, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x1) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) r7 = socket$kcm(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r6}, &(0x7f0000000080), &(0x7f00000001c0)=r7}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000020000000000000002000004000000000000000002000000000000000000000002000000000000000100000000000001"], 0x0, 0x4e}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc6, &(0x7f0000000c40)=""/198, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffff}, 0x10}, 0x94) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="8000000000f0ffffffffffffff00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r8, &(0x7f0000000000), &(0x7f0000000d40)=""/76}, 0x10) socket$kcm(0x10, 0x7, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000dc0)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa008, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfffffffffffffffb}, 0x9000, 0xfffffffffffffff7, 0x0, 0x4, 0xed}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_type(r9, &(0x7f0000000300), 0x2, 0x0) 3.81764072s ago: executing program 1 (id=3619): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 3.80793898s ago: executing program 3 (id=3620): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_clone(0x3002500, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x3002500, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, 0x0}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) unlink(&(0x7f0000003640)='.\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f0, &(0x7f0000000080)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300), 0x8, 0x50, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYRES16], 0x27) r3 = socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x3, 0x6}, 0x0, 0xffffffffffefffff, 0xffffffffffffffff, 0x8) close(0xffffffffffffffff) sendmsg$inet(r3, &(0x7f00000007c0)={&(0x7f0000000040)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000180)}, 0x24044851) sendmsg$inet(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000740)=[{0x0}], 0x1}, 0x48000) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x11, 0x0, 0x0) 3.80186306s ago: executing program 1 (id=3621): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x11, 0x4, 0x4, 0x9}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x2, 0x4, 0x8, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2000000}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b000000000000000000000071e64b1904d9ef09", @ANYRES32, @ANYBLOB='0F\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000050000000500"/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x30c) r2 = socket$kcm(0xa, 0x1, 0x106) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid\x00') perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x2, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r3, 0x0, &(0x7f00000002c0)=""/218}, 0x20) r4 = socket$kcm(0x2, 0x1000000000000005, 0x0) sendmsg$inet(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000040)=[{&(0x7f00000004c0)='.', 0x1}], 0x1}, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0x17, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@printk={@u, {0x3, 0x3, 0x3, 0x4, 0x9}}], {{0x7, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r4, &(0x7f0000007940)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="20000000000000008400000002000000948404"], 0x20}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r6 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='.\x00\x00\x00', @ANYRESHEX=r2], 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB], 0x48) sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000200)="2000000020008107090f9becdb4cb96b0200000000fbff010000000000000000", 0x20}], 0x1, 0x0, 0x0, 0x81000000}, 0x4) 3.751172511s ago: executing program 2 (id=3623): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000700)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000680)="76389e6a65585578f830e9000000", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.601575016s ago: executing program 5 (id=3624): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x18}, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) r2 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x28}, 0xfc40) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00039fe15300"/28], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000280)={r3, &(0x7f0000000940)}, 0x20) r4 = socket$kcm(0x2b, 0x1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b28, &(0x7f0000000000)={'vlan0\x00', @remote}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x6, 0x13, &(0x7f0000000200)=r7, 0x4) sendmsg$kcm(r4, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x2400c814) r8 = socket$kcm(0x15, 0x5, 0x0) sendmsg$kcm(r8, &(0x7f0000000200)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}, 0x0) socket$kcm(0x21, 0x2, 0x2) (async) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x18}, 0x0) (async) socket$kcm(0x21, 0x2, 0x2) (async) socket$kcm(0x21, 0x2, 0xa) (async) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x28}, 0xfc40) (async) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00039fe15300"/28], 0x48) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000280)={r3, &(0x7f0000000940)}, 0x20) (async) socket$kcm(0x2b, 0x1, 0x0) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b28, &(0x7f0000000000)={'vlan0\x00', @remote}) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) (async) close(r6) (async) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) setsockopt$sock_attach_bpf(r4, 0x6, 0x13, &(0x7f0000000200)=r7, 0x4) (async) sendmsg$kcm(r4, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x2400c814) (async) socket$kcm(0x15, 0x5, 0x0) (async) sendmsg$kcm(r8, &(0x7f0000000200)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}, 0x0) (async) 3.563793957s ago: executing program 2 (id=3625): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r0, @ANYBLOB="cc37c40d23b4606a75da1968110e3f9f501e71a2c1b2b0adf91ec8ac6d299083985ecc06960f359a6a5e6f4d2358d7848862", @ANYRES8=r1], 0x128}, 0x4000000) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x6, 0xb6, 0x1, 0xa, 0x0, 0x8001, 0x40, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x9, 0x3, @perf_bp={&(0x7f0000000000), 0x1}, 0x41c0, 0x2cb405f2, 0x5, 0x9, 0xb46, 0x8000, 0x1ff, 0x0, 0x6, 0x0, 0x1}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x9) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3065, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x9, r2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e0003e811008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x4) 3.540056858s ago: executing program 5 (id=3626): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000018000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x13bb711e) 3.432487661s ago: executing program 2 (id=3627): bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1", 0x12}], 0x1}, 0x800) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x72, 0x4}, 0x1801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x24, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540), 0x2}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x33}, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x28}, 0x4044454) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB], 0x50) r0 = socket$kcm(0x22, 0x2, 0x21) sendmsg$sock(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x3) recvmsg$kcm(r0, &(0x7f0000001b80)={&(0x7f0000000580)=@caif=@rfm, 0x80, &(0x7f0000001a00)=[{&(0x7f0000000300)=""/23, 0x17}, {&(0x7f0000000740)=""/190, 0xbe}, {&(0x7f0000000800)=""/76, 0x4c}, {0x0}, {&(0x7f0000001980)=""/80, 0x50}], 0x5}, 0x4160) r1 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r1, 0x1, 0xc, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[], 0x50) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) socket$kcm(0x21, 0x2, 0x2) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000000c0)='THAWED\x00', 0x7) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x830d}, 0x0, 0x3, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x28, 0x5, 0x28, &(0x7f0000000000)) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x1c, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000f80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25}, 0x94) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0xa, &(0x7f0000000100)=[{&(0x7f0000000200)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a1182c1500060014f00000001208000a0043000000a80016000400014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4260000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd", 0xd8}], 0x1}, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f0000000f00)={0x5, 0x80, 0xb, 0x9, 0x2, 0x7, 0x0, 0x4, 0x800, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe2, 0x0, @perf_config_ext={0xc1f, 0x4ee}, 0x1800, 0x393a, 0x6, 0x2, 0x9, 0x1, 0x4, 0x0, 0xf167, 0x0, 0x7fffffffffffffff}, 0x0, 0xf, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f008004ce0003000000700008877fbac0c1416e000030a44079f03b18000070c0511e0845013f2325f000708050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0x3, 0x60000000, 0x0, 0xfffffffe, &(0x7f0000001240)="b2bca90657cbd43e95c64d7152c5c88f01ea03bb65753e67936c1fc00d50d9dabb20e7dc5f1e0679c4a43911273f0dc72ed86d35cb4a31fadda6a36b2c9bb36dfce447207b10063dffaa10cea5e48267ba6bb3df1578393eb538a01f2d04ab42ad4bc22f680debd599995f4d0180f5096be44639e42e80ed54d7ba9e29aece686968aa18046924f5"}, 0x15) 3.432094221s ago: executing program 3 (id=3628): perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x6, 0x1}, 0x880, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x37}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000040)="428114dc9d5249560b3065ba1d36", 0xe}], 0x1}, 0x24040084) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000140)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a00100000000580607ee622", 0x2e}], 0x1}, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2a, 0x2, 0x0) syz_clone(0x9008a400, &(0x7f00000009c0)="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", 0x110, &(0x7f0000000140), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="7a0a06ff000f0000711070000000000095736140393ccb35c880bfedaee0"], &(0x7f0000000480)='syzkaller\x00', 0x8}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x2, @perf_bp={0x0, 0x4}, 0x10041, 0xc8, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) recvmsg$unix(r2, &(0x7f0000000b80)={&(0x7f0000000900)=@abs, 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000b00)=""/40, 0x28}], 0x1}, 0x40000040) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce220000"], 0xfdef) write$cgroup_subtree(r4, &(0x7f0000000bc0)=ANY=[@ANYBLOB="666693ed11a29b82502c35a7fc783f33f31d5543bbcd7b98d9f5ec6d249d2b5c02d250fa60d7b17c931f9e1d7f94e225bd13e2b5a92d63f52376dc3274b8c862655cbc68f2fd41012db1b128b7d51e5a5148f2fec7c50c1a755f03f9e634514a6c7811dfec4de807d04cd26ef25078dc82123833f1dec024035a5f98870311e62ce14df8b2a58bfa220b4e9c20e69204fb7566d70c1c4e79f15a394eeb25fadf1be9e4641ff460f7ce80b11418b363b5eae12b0e99351f7d59ff7a0ed3006c60b4678e3afd35e4639af3baf5d5b8"], 0xfdef) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r5 = syz_clone(0x206000, &(0x7f0000001980), 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0xe, 0x5, 0x0, 0x7602, 0x2, 0x8140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, r5, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="05000000050000000200000007000000000000000ed6064199d7", @ANYRES32=0x1, @ANYRES64=r0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRESOCT=r2, @ANYBLOB="93cfdb113f4647cd6db3673e73a8ff880b9bdb43e507543e2a5defcc43b6275e75c58e51d06ab75d5bb06cab3cef5a851bfe4733f8e63f2c36eef3405ad19b285df358e16bbbca53a077186dac8053dd2ea565f750ef869cc87ccefd46d8c88585ea19a38914e27698774b36d685c385234047b37cfd3b74ee732a1d5c42b7335f9bcbdc5492077b", @ANYRES64=0x0, @ANYBLOB="69f72cac55a05cea59498f3de51f182b9c9b71799a6025c6552caf84504a8b26a084cf246a4b", @ANYRESDEC=r6, @ANYBLOB="f5b6d5777ab01776471e95b593277e32a14aef7357c2608f41f2"], 0x50) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x62a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffff01}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xe, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRESOCT=r3], 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x56311ae1, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x6}, 0x50, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1589, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x8, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 3.431633072s ago: executing program 0 (id=3629): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x248, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000, 0x10001}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0, 0xb}, 0x8061, 0x3, 0xffffffff, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r1, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x8, &(0x7f0000001680)}}, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x711fec55}, 0xa0d2}, 0x0, 0x0, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169b740ac03d7c64cee49ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d54f45a24effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f949c479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c7724e9e7e7babf61fe358ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261ed1d4515f46290d5c6579b63358fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f13dff7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63e774e940bfeb0de83f42fd565a299f741f9b00be4e8fcaf4ec85daceb16d9e8a438e3eb2556570e381b03d9e3c245728648ed9ff22dc963ed105c851c3481125b4c0c8a08a0c9930190902af109fc56b64cc952f298ebe73d7b18052e0147356228ca171b06274a871e2cf9609e0b4cdad36c3"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) setsockopt$sock_attach_bpf(r2, 0x29, 0x16, &(0x7f00000000c0), 0xb9) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x6}, 0x100080, 0x0, 0x0, 0xc5f97a813e0b6f87}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0x12, 0x2f, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.209716228s ago: executing program 1 (id=3630): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="2c000000000000000000000007000000441c"], 0x30}, 0x890) (fail_nth: 6) 2.641252166s ago: executing program 1 (id=3631): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c30, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0xfffffffd, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) r0 = socket$kcm(0x10, 0x3, 0x10) (rerun: 64) recvmsg$kcm(r0, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001800)=[{&(0x7f00000000c0)=""/90, 0x5a}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/24, 0x18}, {&(0x7f0000001540)=""/139, 0x8b}, {&(0x7f0000001600)=""/148, 0x94}, {&(0x7f00000016c0)=""/76, 0x4c}, {&(0x7f0000001740)=""/16, 0x10}, {&(0x7f0000001780)=""/84, 0x54}], 0x8, &(0x7f0000001880)=""/198, 0xc6}, 0x20) (async) r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000140), 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r1}, 0x8) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37080c18800dac0f0003ff", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) 2.565595739s ago: executing program 5 (id=3632): perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x100000000, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x200000000000014f, 0x41, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, 0x0, 0x19, 0x10, 0x8, 0x0, 0x0}}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f9, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f00000003c0)='I{?[\xb60z\xa5N c\x86RL\xd6\x9b\x87\xde\x00T\f|\'w\xfew]\xf6\xf3\xaa\x91\xdd\xe6\xe7A\xaac\xa2cA\xad\xfc\xb8 n\x14\xde\xa6U$\x02\x00\xc4\xa7\xb7\xc9\xe9c\xcc\x06\x94g\xc4\xde>\f\x9e7\xa7;\xdc\x9d\x88\x8f.\xd1\xdc{$I\x17\xa7\xdf\'\xc0\xdc\x02M\x1a/\xa1AF\xcf\xca\xe0-an\x90g\x90`o\xe9\x93S\xa5S\xe8\x11a\xee\xf6klI\xa9cJ\xb3\xe5O\xa4\xae#6\xf2y\x8c/\x9bt\xed\x05im4\x8f\xe9\xd6)\xbf\x89\xe0!$\x1aZ\x98\x16;Q\xda\xf4i\rZq\xce0 \xc4\"r\xc0\xde\xc9Z\xa8#x\x8a\xf1\x87]\x05\x86\a=\x00\xd9\x96\xcbyDP\xddy\xb0R\xdb\x95.}B\xe0\x97\xc2\xf2\xb8\xbcP[\xb6\x9b\xd5$C\x1b\x87\x1d\x14\v\xc9T\xa2~\bT<\xdbRGI\xee\xd9p\x13=\x8f\xea\xc2\x17\xf7\xf1\x80;}\xa4\xe2\x85{8\x03\x11?\x06\x994\xfd\x86\x87K\xbf`\x9b \xb4\x8a\xf6|\x19\xe4 \xdf\xbb\x90o;\xb8%\x9d_\xeb\xaa\xaalyG\xc6\x9b+\x0f\xeeGdZL\xb6\x13[\x9c\xd5y !%\xfb^y\x8d\x97N\x02\x95\r\xbf\xe8\xf6\xaf\xda\xfd\xf1|I\xfdrTO\x1aS\x8b\xcb\x15\xed\xe1W\xbdAjy(\xa8\xf0\fA\\\xb9\xbb0_@h\xef?\xfd]\xb80xffffffffffffffff}) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={&(0x7f0000000100)=@in={0x2, 0x4e21, @remote}, 0x80, &(0x7f0000000000)=[{&(0x7f00000006c0)='@', 0x1}], 0x1, &(0x7f0000000040)=[{0x18, 0x84, 0x0, 'r'}, {0x20, 0x84, 0x8, "eeb4fe8ba15e3999ef"}], 0x38}, 0x41) close(r0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x81) (async) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@volatile={0x6, 0x0, 0x0, 0x9, 0x2}]}, {0x0, [0x2e, 0x61, 0x30, 0x2e, 0x0, 0x30, 0x2e, 0x61, 0x3d1ad536729d714, 0x6f]}}, &(0x7f0000000080)=""/105, 0x30, 0x69, 0x1, 0x3}, 0x28) r4 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000ad000000660000000000000016000000000000009500000000010000"], &(0x7f0000000140)='GPL\x00', 0x2, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x23) (async) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x8000, 0x0, 0xffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x5}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r6}, 0x57) (async) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1b00000000000000000000000300000000000000", @ANYRES32=0x1, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000010000000100070000000000000000000000000000000000215c43584bcab04c2ea5bcb3bfdb578b98410199166cfb7c722c465c49a87f936123d96cba7d4e37acc42b42ae02c77aee168af5a9e36ddcfad5eea350cc23fdde5a4d405c5c"], 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@map=r7, 0x2b, 0x0, 0x1ff, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32, @ANYRES32=r4, @ANYBLOB="1200000011000000", @ANYRES32=r4, @ANYBLOB="451366b8f86d7a311334c5e9bdde84870739a58be6359b040a9723c911a11302bdc40c723c996095b52b0677fc32b70824edc82dc4c03fb0c4d5da2047a089a4d4721d8c11f2c6d509f43ab2da766da7848ffe2181050accbbf3df5407f974f42afc2b945240110fe2ceabec19ce50715d2777d874e0d56eb40010a858d818180203bddd8d6e7d75048b0ecd4fe4789a940df22df36f84002a535208ad424ceaa72fc480a940468d5d8483be65b868884a", @ANYRES32=r4, @ANYBLOB, @ANYRES64=r8], 0x20) (async) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x49, 0x0, 0x1, 0x3, '\x00', 0x0, r3, 0x3, 0x3, 0x4}, 0x50) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000240)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, &(0x7f0000000280)=[0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x43, &(0x7f0000000300)=[{}], 0x8, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x55, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={@map=r9, 0xffffffffffffffff, 0x13, 0x20, 0x0, @void, @void, @void, @value=r10, r8}, 0x20) (async) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000001c40)) 256.648622ms ago: executing program 5 (id=3637): r0 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000280)=@in6={0xa, 0x4e23, 0x1802, @empty, 0x80fe}, 0x80, 0x0}, 0x20000001) 256.362202ms ago: executing program 1 (id=3638): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x1e, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_clone(0x3002500, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x3002500, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, 0x0}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f0, &(0x7f0000000080)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300), 0x8, 0x50, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYRES16], 0x27) r3 = socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x3, 0x6}, 0x0, 0xffffffffffefffff, 0xffffffffffffffff, 0x8) close(0xffffffffffffffff) sendmsg$inet(r3, &(0x7f00000007c0)={&(0x7f0000000040)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000180)}, 0x24044851) sendmsg$inet(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000740)=[{0x0}], 0x1}, 0x48000) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x11, 0x0, 0x0) 255.866372ms ago: executing program 0 (id=3639): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002640)=@bpf_lsm={0x1d, 0x26, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, [@call={0x85, 0x0, 0x0, 0x17}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffff8}, @map_val={0x18, 0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5}, @ringbuf_query, @cb_func={0x18, 0x3, 0x4, 0x0, 0x7}, @tail_call, @map_fd={0x18, 0x8}, @tail_call], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000580)='syzkaller\x00', 0x7, 0x1000, &(0x7f0000001540)=""/4096, 0x40f00, 0x60, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002540)={0x4, 0x3, 0xffff8000, 0x8}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000002580)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1], &(0x7f00000025c0)=[{0x2, 0x3, 0xd, 0x1}, {0x1, 0x5, 0xf, 0x9}, {0x2, 0x3, 0x2, 0x8}, {0x3, 0x2, 0xa, 0xb}, {0x4, 0x5, 0xa, 0xc}, {0x3, 0x2, 0xd, 0x7}, {0x0, 0x5, 0x3, 0xc}, {0x4, 0x4, 0x9, 0xa}], 0x10, 0x80000000}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r1, 0x0, 0x1, 0x21, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000200)=[0x0, 0x0], 0x0}, 0x40) (async) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r4, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r5}, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@fallback=r3, 0xffffffffffffffff, 0xe, 0x24, 0x0, @void, @void, @void, @value=r5, r2}, 0x20) (async) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x3}, 0x50) (async, rerun: 64) r7 = socket$kcm(0x2, 0x5, 0x84) (rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r7, 0x84, 0x64, &(0x7f0000000000)=r9, 0x1c) (async, rerun: 32) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000002700)={@map=r6, r0, 0x1c, 0x2000, 0xffffffffffffffff, @value=r9, @void, @void, @void, r2}, 0x20) (async, rerun: 32) r10 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r10, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000000000), 0x4c00}], 0x1}, 0x0) recvmsg$kcm(r10, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x406) (async) recvmsg$kcm(r10, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x22) 165.597005ms ago: executing program 3 (id=3640): r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r0, 0x24, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, 0x0, 0x24054084) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001400)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x248, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000, 0x10001}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x80047453, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110c23003f) write$cgroup_devices(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="80"], 0xa) r4 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r4, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, 0x0, 0x10b8}, 0x200008c0) r5 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfe103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x4, 0x8}, 0x2000, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe49, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r7, &(0x7f0000000000), 0x2a979d) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x20a02, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) ioctl$TUNSETLINK(r8, 0x400454cd, 0x305) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4000, @broadcast}}, 0x80, 0x0, 0x0, 0x0, 0x18}, 0x0) 161.772705ms ago: executing program 5 (id=3641): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r2}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000800000000000000060000009500"], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@ifindex=r4, 0x15, 0x1, 0x40, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000200)=[0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0]}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x6, &(0x7f0000000100)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @alu={0x0, 0x1, 0x2, 0x8, 0x9, 0x2, 0x4}, @exit]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f9, 0x0) socket$kcm(0x10, 0x2, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x0) socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4e23, @broadcast}, 0x10, 0x0}, 0x4004004) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x8}, 0x101000, 0x7, 0x8, 0x3, 0x0, 0x2, 0xffff, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 158.387805ms ago: executing program 2 (id=3642): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000018000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x13bb711e) 0s ago: executing program 0 (id=3643): bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1", 0x12}], 0x1}, 0x800) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x72, 0x4}, 0x1801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x24, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540), 0x2}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x33}, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x28}, 0x4044454) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB], 0x50) r0 = socket$kcm(0x22, 0x2, 0x21) sendmsg$sock(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x3) recvmsg$kcm(r0, &(0x7f0000001b80)={&(0x7f0000000580)=@caif=@rfm, 0x80, &(0x7f0000001a00)=[{&(0x7f0000000300)=""/23, 0x17}, {&(0x7f0000000740)=""/190, 0xbe}, {&(0x7f0000000800)=""/76, 0x4c}, {0x0}, {&(0x7f0000001980)=""/80, 0x50}], 0x5}, 0x4160) r1 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r1, 0x1, 0xc, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[], 0x50) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) socket$kcm(0x21, 0x2, 0x2) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000000c0)='THAWED\x00', 0x7) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x830d}, 0x0, 0x3, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x28, 0x5, 0x28, &(0x7f0000000000)) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x1c, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000f80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25}, 0x94) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0xa, &(0x7f0000000100)=[{&(0x7f0000000200)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a1182c1500060014f00000001208000a0043000000a80016000400014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4260000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd", 0xd8}], 0x1}, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f0000000f00)={0x5, 0x80, 0xb, 0x9, 0x2, 0x7, 0x0, 0x4, 0x800, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe2, 0x0, @perf_config_ext={0xc1f, 0x4ee}, 0x1800, 0x393a, 0x6, 0x2, 0x9, 0x1, 0x4, 0x0, 0xf167, 0x0, 0x7fffffffffffffff}, 0x0, 0xf, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f008004ce0003000000700008877fbac0c1416e000030a44079f03b18000070c0511e0845013f2325f000708050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0x3, 0x60000000, 0x0, 0xfffffffe, &(0x7f0000001240)="b2bca90657cbd43e95c64d7152c5c88f01ea03bb65753e67936c1fc00d50d9dabb20e7dc5f1e0679c4a43911273f0dc72ed86d35cb4a31fadda6a36b2c9bb36dfce447207b10063dffaa10cea5e48267ba6bb3df1578393eb538a01f2d04ab42ad4bc22f680debd599995f4d0180f5096be44639e42e80ed54d7ba9e29aece686968aa18046924f5"}, 0x15) kernel console output (not intermixed with test programs): [ 685.571262][T13016] dump_stack_lvl+0x188/0x250 [ 685.575979][T13016] ? show_regs_print_info+0x20/0x20 [ 685.581219][T13016] ? load_image+0x400/0x400 [ 685.585773][T13016] ? __lock_acquire+0x7d10/0x7d10 [ 685.590849][T13016] should_fail+0x38c/0x4c0 [ 685.595311][T13016] _copy_to_user+0x2e/0x130 [ 685.599849][T13016] simple_read_from_buffer+0xe3/0x150 [ 685.605357][T13016] proc_fail_nth_read+0x1a6/0x220 [ 685.605791][T13019] netlink: 'syz.3.2831': attribute type 10 has an invalid length. [ 685.610416][T13016] ? proc_fault_inject_write+0x310/0x310 [ 685.610447][T13016] ? fsnotify_perm+0x254/0x560 [ 685.610473][T13016] ? proc_fault_inject_write+0x310/0x310 [ 685.634337][T13016] vfs_read+0x301/0xd60 [ 685.638540][T13016] ? kernel_read+0x1e0/0x1e0 [ 685.643178][T13016] ? __fget_files+0x40f/0x480 [ 685.647902][T13016] ? mutex_lock_nested+0x17/0x20 [ 685.652882][T13016] ? __fdget_pos+0x2bf/0x370 [ 685.657503][T13016] ? ksys_read+0x71/0x260 [ 685.661880][T13016] ksys_read+0x152/0x260 [ 685.666176][T13016] ? vfs_write+0xd60/0xd60 [ 685.670634][T13016] ? lockdep_hardirqs_on+0x94/0x140 [ 685.675876][T13016] do_syscall_64+0x4c/0xa0 [ 685.680328][T13016] ? clear_bhb_loop+0x30/0x80 [ 685.685040][T13016] ? clear_bhb_loop+0x30/0x80 [ 685.689762][T13016] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 685.695693][T13016] RIP: 0033:0x7fc58852968e [ 685.700145][T13016] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 685.719797][T13016] RSP: 002b:00007fc5867c1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 685.728254][T13016] RAX: ffffffffffffffda RBX: 00007fc5867c26c0 RCX: 00007fc58852968e [ 685.736260][T13016] RDX: 000000000000000f RSI: 00007fc5867c20a0 RDI: 0000000000000004 [ 685.744270][T13016] RBP: 00007fc5867c2090 R08: 0000000000000000 R09: 0000000000000000 [ 685.752284][T13016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 685.760297][T13016] R13: 00007fc5887e2038 R14: 00007fc5887e1fa0 R15: 00007fff72947e68 [ 685.768336][T13016] [ 686.067505][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.073923][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.255872][T13033] netlink: 209820 bytes leftover after parsing attributes in process `syz.0.2838'. [ 688.038522][ T9] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 688.964053][T13049] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.2840'. [ 689.067760][T13052] delete_channel: no stack [ 689.075392][T13056] netlink: 180 bytes leftover after parsing attributes in process `syz.1.2844'. [ 689.126014][T13060] netlink: 180 bytes leftover after parsing attributes in process `syz.1.2844'. [ 689.194921][T13064] netlink: 'syz.5.2847': attribute type 10 has an invalid length. [ 689.316326][T13071] netlink: 'syz.0.2849': attribute type 10 has an invalid length. [ 690.042504][T13089] delete_channel: no stack [ 690.522034][T13106] netlink: 'syz.3.2862': attribute type 10 has an invalid length. [ 693.047449][T13122] netlink: 763 bytes leftover after parsing attributes in process `syz.5.2867'. [ 693.331621][T13131] delete_channel: no stack [ 693.572370][T13144] netlink: 'syz.2.2877': attribute type 10 has an invalid length. [ 696.842508][T13174] delete_channel: no stack [ 696.954713][T13183] delete_channel: no stack [ 697.534890][T13206] netlink: 'syz.3.2899': attribute type 10 has an invalid length. [ 699.125875][T13218] delete_channel: no stack [ 700.761310][T13231] delete_channel: no stack [ 701.437953][T13242] chnl_net:caif_netlink_parms(): no params data found [ 701.591573][T13242] bridge0: port 1(bridge_slave_0) entered blocking state [ 701.608628][T13242] bridge0: port 1(bridge_slave_0) entered disabled state [ 701.627579][T13242] device bridge_slave_0 entered promiscuous mode [ 701.649332][T13242] bridge0: port 2(bridge_slave_1) entered blocking state [ 701.667692][T13242] bridge0: port 2(bridge_slave_1) entered disabled state [ 701.687039][T13242] device bridge_slave_1 entered promiscuous mode [ 701.744254][T13242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 701.777255][T13242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 701.848805][T13242] team0: Port device team_slave_0 added [ 701.876907][T13242] team0: Port device team_slave_1 added [ 701.936385][T13242] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 701.951681][T13242] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 702.045427][T13242] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 702.093091][T13242] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 702.120719][T13242] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 702.195865][T13242] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 703.098415][ T1111] Bluetooth: hci3: command 0x0409 tx timeout [ 703.518131][T13242] device hsr_slave_0 entered promiscuous mode [ 703.546923][T13242] device hsr_slave_1 entered promiscuous mode [ 703.561137][T13242] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 703.594478][T13242] Cannot create hsr debugfs directory [ 703.753990][T13258] delete_channel: no stack [ 703.953368][T13270] netlink: 'syz.2.2919': attribute type 29 has an invalid length. [ 704.027357][T13270] netlink: 'syz.2.2919': attribute type 29 has an invalid length. [ 704.056837][T13271] netlink: 'syz.2.2919': attribute type 29 has an invalid length. [ 705.137379][ T5502] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 705.499054][ T4236] Bluetooth: hci3: command 0x041b tx timeout [ 706.020211][T13287] FAULT_INJECTION: forcing a failure. [ 706.020211][T13287] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 706.116670][T13287] CPU: 1 PID: 13287 Comm: syz.0.2923 Not tainted syzkaller #0 [ 706.124219][T13287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 706.134302][T13287] Call Trace: [ 706.137613][T13287] [ 706.140589][T13287] dump_stack_lvl+0x188/0x250 [ 706.145303][T13287] ? show_regs_print_info+0x20/0x20 [ 706.150537][T13287] ? load_image+0x400/0x400 [ 706.155096][T13287] ? __lock_acquire+0x7d10/0x7d10 [ 706.160164][T13287] ? unix_ioctl+0x25d/0x660 [ 706.164707][T13287] should_fail+0x38c/0x4c0 [ 706.169185][T13287] _copy_from_user+0x2e/0x170 [ 706.173904][T13287] sock_do_ioctl+0x18c/0x320 [ 706.178528][T13287] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 706.184732][T13287] ? sock_show_fdinfo+0xb0/0xb0 [ 706.189766][T13287] ? sock_ioctl+0x4bf/0x710 [ 706.194325][T13287] sock_ioctl+0x4d2/0x710 [ 706.198695][T13287] ? sock_poll+0x410/0x410 [ 706.203154][T13287] ? bpf_lsm_file_ioctl+0x5/0x10 [ 706.208126][T13287] ? security_file_ioctl+0x7c/0xa0 [ 706.213269][T13287] ? sock_poll+0x410/0x410 [ 706.217717][T13287] __se_sys_ioctl+0xfa/0x170 [ 706.222352][T13287] do_syscall_64+0x4c/0xa0 [ 706.226793][T13287] ? clear_bhb_loop+0x30/0x80 [ 706.231510][T13287] ? clear_bhb_loop+0x30/0x80 [ 706.236228][T13287] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 706.242159][T13287] RIP: 0033:0x7fc588568e59 [ 706.246603][T13287] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 706.266260][T13287] RSP: 002b:00007fc5867c2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 706.274733][T13287] RAX: ffffffffffffffda RBX: 00007fc5887e1fa0 RCX: 00007fc588568e59 [ 706.282741][T13287] RDX: 0000200000000000 RSI: 0000000000008924 RDI: 000000000000000a [ 706.290741][T13287] RBP: 00007fc5867c2090 R08: 0000000000000000 R09: 0000000000000000 [ 706.298739][T13287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 706.306744][T13287] R13: 00007fc5887e2038 R14: 00007fc5887e1fa0 R15: 00007fff72947e68 [ 706.314776][T13287] [ 706.319822][T13282] delete_channel: no stack [ 706.333501][ T5502] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 706.994302][T13242] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.092248][T13290] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.2924'. [ 707.211083][T13242] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.284331][T13293] delete_channel: no stack [ 707.328011][T13242] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.578902][ T4236] Bluetooth: hci3: command 0x040f tx timeout [ 709.390497][T13315] delete_channel: no stack [ 709.658934][ T4236] Bluetooth: hci3: command 0x0419 tx timeout [ 710.328042][T13242] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.503721][T13320] netlink: 'syz.5.2935': attribute type 2 has an invalid length. [ 710.689451][T13242] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 713.479271][T13242] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 713.493973][T13328] netlink: 'syz.5.2940': attribute type 10 has an invalid length. [ 713.514548][T13333] netlink: 'syz.2.2941': attribute type 10 has an invalid length. [ 713.528444][T13242] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 713.577831][T13242] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 713.764966][T13344] netlink: 'syz.5.2945': attribute type 19 has an invalid length. [ 714.005224][T13242] 8021q: adding VLAN 0 to HW filter on device bond0 [ 714.039682][T13345] delete_channel: no stack [ 714.297504][T13344] device syzkaller0 entered promiscuous mode [ 714.385607][ T5510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 714.425951][ T5510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 714.503545][T13242] 8021q: adding VLAN 0 to HW filter on device team0 [ 714.571712][ T5508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 714.595194][T13352] netlink: 'syz.1.2947': attribute type 29 has an invalid length. [ 714.607837][ T5508] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 714.639812][ T5508] bridge0: port 1(bridge_slave_0) entered blocking state [ 714.646957][ T5508] bridge0: port 1(bridge_slave_0) entered forwarding state [ 714.693687][ T5508] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 714.900528][T13352] netlink: 'syz.1.2947': attribute type 29 has an invalid length. [ 715.174027][ T5506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 715.187844][ T5506] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 715.281554][ T5506] bridge0: port 2(bridge_slave_1) entered blocking state [ 715.288732][ T5506] bridge0: port 2(bridge_slave_1) entered forwarding state [ 715.359552][ T5506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 715.389892][ T5506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 717.801581][T13369] netlink: 'syz.5.2953': attribute type 10 has an invalid length. [ 717.813163][ T5502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 717.858340][ T5502] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 717.884658][ T5502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 717.899752][T13374] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.2954'. [ 717.939746][ T5502] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 717.989090][ T5502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 717.990311][T13381] FAULT_INJECTION: forcing a failure. [ 717.990311][T13381] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 718.029055][ T5502] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 718.046462][T13242] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 718.059296][T13242] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 718.079636][T13381] CPU: 1 PID: 13381 Comm: syz.5.2957 Not tainted syzkaller #0 [ 718.087177][T13381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 718.097298][T13381] Call Trace: [ 718.100621][T13381] [ 718.103598][T13381] dump_stack_lvl+0x188/0x250 [ 718.108329][T13381] ? show_regs_print_info+0x20/0x20 [ 718.113570][T13381] ? load_image+0x400/0x400 [ 718.118122][T13381] ? __lock_acquire+0x7d10/0x7d10 [ 718.123205][T13381] should_fail+0x38c/0x4c0 [ 718.127681][T13381] _copy_to_user+0x2e/0x130 [ 718.132229][T13381] simple_read_from_buffer+0xe3/0x150 [ 718.137650][T13381] proc_fail_nth_read+0x1a6/0x220 [ 718.142737][T13381] ? proc_fault_inject_write+0x310/0x310 [ 718.148422][T13381] ? fsnotify_perm+0x254/0x560 [ 718.153232][T13381] ? proc_fault_inject_write+0x310/0x310 [ 718.158931][T13381] vfs_read+0x301/0xd60 [ 718.163171][T13381] ? kernel_read+0x1e0/0x1e0 [ 718.167829][T13381] ? __fget_files+0x40f/0x480 [ 718.172565][T13381] ? mutex_lock_nested+0x17/0x20 [ 718.177557][T13381] ? __fdget_pos+0x2bf/0x370 [ 718.182195][T13381] ? ksys_read+0x71/0x260 [ 718.186596][T13381] ksys_read+0x152/0x260 [ 718.190894][T13381] ? vfs_write+0xd60/0xd60 [ 718.195366][T13381] ? lockdep_hardirqs_on+0x94/0x140 [ 718.200618][T13381] do_syscall_64+0x4c/0xa0 [ 718.205073][T13381] ? clear_bhb_loop+0x30/0x80 [ 718.209781][T13381] ? clear_bhb_loop+0x30/0x80 [ 718.214500][T13381] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 718.220446][T13381] RIP: 0033:0x7f31f6f9e68e [ 718.224895][T13381] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 718.244533][T13381] RSP: 002b:00007f31f5236fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 718.252996][T13381] RAX: ffffffffffffffda RBX: 00007f31f52376c0 RCX: 00007f31f6f9e68e [ 718.261005][T13381] RDX: 000000000000000f RSI: 00007f31f52370a0 RDI: 0000000000000007 [ 718.269017][T13381] RBP: 00007f31f5237090 R08: 0000000000000000 R09: 0000000000000000 [ 718.277011][T13381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 718.285002][T13381] R13: 00007f31f7257038 R14: 00007f31f7256fa0 R15: 00007ffdb7621548 [ 718.293030][T13381] [ 718.370151][ T5502] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 718.375243][T13378] delete_channel: no stack [ 718.399150][ T5502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 718.431046][ T5502] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 718.574232][T13396] netlink: 'syz.0.2960': attribute type 19 has an invalid length. [ 718.961459][ T5504] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 718.982857][T13399] device syzkaller0 entered promiscuous mode [ 719.049949][ T5502] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 719.072844][ T5502] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 719.120004][T13242] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 719.986076][ T5500] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 722.224726][ T5500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 722.259533][ T5500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 722.430115][ T5510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 722.439488][ T5510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 722.461366][ T5510] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 722.477300][ T5510] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 722.486974][T13425] FAULT_INJECTION: forcing a failure. [ 722.486974][T13425] name failslab, interval 1, probability 0, space 0, times 0 [ 722.500365][T13425] CPU: 0 PID: 13425 Comm: syz.2.2968 Not tainted syzkaller #0 [ 722.507883][T13425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 722.517967][T13425] Call Trace: [ 722.521253][T13425] [ 722.524184][T13425] dump_stack_lvl+0x188/0x250 [ 722.528876][T13425] ? show_regs_print_info+0x20/0x20 [ 722.534111][T13425] ? load_image+0x400/0x400 [ 722.538653][T13425] ? __might_sleep+0xf0/0xf0 [ 722.543282][T13425] ? __lock_acquire+0x7d10/0x7d10 [ 722.548340][T13425] should_fail+0x38c/0x4c0 [ 722.552791][T13425] should_failslab+0x5/0x20 [ 722.557326][T13425] slab_pre_alloc_hook+0x51/0xc0 [ 722.562305][T13425] __kmalloc_node_track_caller+0x68/0x3a0 [ 722.568059][T13425] ? rtmsg_ifinfo_build_skb+0x80/0x180 [ 722.573557][T13425] ? kmem_cache_alloc_node+0x162/0x2d0 [ 722.579048][T13425] ? __alloc_skb+0xf4/0x750 [ 722.583586][T13425] ? rtmsg_ifinfo_build_skb+0x80/0x180 [ 722.589102][T13425] __alloc_skb+0x22c/0x750 [ 722.593558][T13425] rtmsg_ifinfo_build_skb+0x80/0x180 [ 722.598878][T13425] rtnetlink_event+0xcd/0x1a0 [ 722.603577][T13425] raw_notifier_call_chain+0xcb/0x160 [ 722.609075][T13425] dev_set_mac_address+0x2e8/0x400 [ 722.614225][T13425] ? dev_pre_changeaddr_notify+0x120/0x120 [ 722.620059][T13425] ? rwsem_write_trylock+0x135/0x1c0 [ 722.625360][T13425] ? clear_nonspinnable+0x60/0x60 [ 722.630380][T13425] ? __mutex_lock_common+0x155c/0x2400 [ 722.635848][T13425] ? full_name_hash+0x8e/0xe0 [ 722.640568][T13425] dev_set_mac_address_user+0x2d/0x50 [ 722.645966][T13425] dev_ifsioc+0x761/0xd50 [ 722.650315][T13425] ? dev_ioctl+0xe30/0xe30 [ 722.654738][T13425] ? apparmor_capable+0x12c/0x190 [ 722.659776][T13425] ? full_name_hash+0x8e/0xe0 [ 722.664462][T13425] dev_ioctl+0x545/0xe30 [ 722.668711][T13425] ? _copy_from_user+0x111/0x170 [ 722.673647][T13425] sock_do_ioctl+0x245/0x320 [ 722.678265][T13425] ? sock_show_fdinfo+0xb0/0xb0 [ 722.683146][T13425] sock_ioctl+0x4d2/0x710 [ 722.687472][T13425] ? sock_poll+0x410/0x410 [ 722.691895][T13425] ? bpf_lsm_file_ioctl+0x5/0x10 [ 722.696833][T13425] ? security_file_ioctl+0x7c/0xa0 [ 722.701964][T13425] ? sock_poll+0x410/0x410 [ 722.706396][T13425] __se_sys_ioctl+0xfa/0x170 [ 722.710994][T13425] do_syscall_64+0x4c/0xa0 [ 722.715413][T13425] ? clear_bhb_loop+0x30/0x80 [ 722.720099][T13425] ? clear_bhb_loop+0x30/0x80 [ 722.724792][T13425] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 722.730684][T13425] RIP: 0033:0x7f44d75c8e59 [ 722.735110][T13425] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 722.754755][T13425] RSP: 002b:00007f44d5822028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 722.763179][T13425] RAX: ffffffffffffffda RBX: 00007f44d7841fa0 RCX: 00007f44d75c8e59 [ 722.771155][T13425] RDX: 0000200000000000 RSI: 0000000000008924 RDI: 0000000000000004 [ 722.779133][T13425] RBP: 00007f44d5822090 R08: 0000000000000000 R09: 0000000000000000 [ 722.787132][T13425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 722.795121][T13425] R13: 00007f44d7842038 R14: 00007f44d7841fa0 R15: 00007ffe615c6688 [ 722.803108][T13425] [ 722.828672][T13422] delete_channel: no stack [ 722.840454][T13427] netlink: 'syz.0.2967': attribute type 10 has an invalid length. [ 722.859661][T13242] device veth0_vlan entered promiscuous mode [ 722.885287][T13242] device veth1_vlan entered promiscuous mode [ 722.985952][ T5506] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 722.995434][ T5506] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 723.004554][ T5506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 723.094261][ T5506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 723.119693][T13242] device veth0_macvtap entered promiscuous mode [ 723.181065][T13435] netlink: 'syz.1.2971': attribute type 3 has an invalid length. [ 723.207913][T13435] netlink: 'syz.1.2971': attribute type 6 has an invalid length. [ 723.234984][T13435] netlink: 144448 bytes leftover after parsing attributes in process `syz.1.2971'. [ 725.887797][T13242] device veth1_macvtap entered promiscuous mode [ 725.940128][ T5506] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 725.966580][ T5506] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 726.024779][T13453] netlink: 'syz.0.2976': attribute type 10 has an invalid length. [ 726.093965][T13242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 726.156198][T13242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 726.191247][T13242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 726.224917][T13242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 726.245774][T13242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 726.288893][T13242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 726.311713][T13242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 726.336727][T13242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 726.375873][T13242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 726.391180][T13242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 726.415587][T13242] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 729.080306][ T5510] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 729.091513][ T5510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 729.113366][T13242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 729.135726][T13242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 729.145724][T13242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 729.156314][T13242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 729.166461][T13242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 729.177168][T13242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 729.201797][T13242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 729.226341][T13242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 729.236559][T13242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 729.247345][T13242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 729.260478][T13242] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 729.281318][ T5504] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 729.294216][T13468] delete_channel: no stack [ 729.319410][ T5504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 729.342021][T13242] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.378489][T13242] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.387265][T13242] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.414675][T13242] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.602171][T13484] netlink: 'syz.2.2985': attribute type 19 has an invalid length. [ 729.964140][T13485] delete_channel: no stack [ 730.059381][ T5504] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 730.067407][ T5504] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 730.102392][ T5502] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 730.285037][ T5506] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 730.305606][ T5506] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 730.442961][ T5498] device hsr_slave_0 left promiscuous mode [ 730.453939][ T5498] device hsr_slave_1 left promiscuous mode [ 730.461765][ T5498] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 730.469806][ T5498] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 730.478923][ T5498] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 730.486392][ T5498] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 730.495483][ T5498] device bridge_slave_1 left promiscuous mode [ 730.504563][ T5498] bridge0: port 2(bridge_slave_1) entered disabled state [ 730.516981][ T5498] device bridge_slave_0 left promiscuous mode [ 730.523975][ T5498] bridge0: port 1(bridge_slave_0) entered disabled state [ 730.548888][ T5498] device veth1_macvtap left promiscuous mode [ 730.555469][ T5498] device veth0_macvtap left promiscuous mode [ 730.562072][ T5498] device veth1_vlan left promiscuous mode [ 730.568983][ T5498] device veth0_vlan left promiscuous mode [ 734.265822][ T5498] device team_slave_1 left promiscuous mode [ 734.276509][ T5498] team0 (unregistering): Port device team_slave_1 removed [ 734.316170][ T5498] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 734.343081][ T5498] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 734.482719][ T5498] device bridge0 left promiscuous mode [ 734.489854][ T5498] team0 (unregistering): Port device bridge0 removed [ 734.527091][ T5498] bond0 (unregistering): Released all slaves [ 734.608692][ T5504] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 734.617779][T13499] netlink: 'syz.1.2987': attribute type 10 has an invalid length. [ 734.645412][T13499] team0: Device vxcan1 is of different type [ 734.704653][T13492] device syzkaller0 entered promiscuous mode [ 735.111358][T13512] netlink: 'syz.5.2992': attribute type 10 has an invalid length. [ 735.134151][T13506] netlink: 212168 bytes leftover after parsing attributes in process `syz.0.2990'. [ 738.318080][T13524] netlink: 65055 bytes leftover after parsing attributes in process `syz.5.2997'. [ 738.357758][T13529] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2998'. [ 738.595507][T13534] netlink: 'syz.2.2999': attribute type 29 has an invalid length. [ 738.697349][T13534] netlink: 'syz.2.2999': attribute type 29 has an invalid length. [ 738.880645][T13539] delete_channel: no stack [ 739.109481][T13536] netlink: 'syz.2.2999': attribute type 29 has an invalid length. [ 739.117896][T13541] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 739.165394][T13526] chnl_net:caif_netlink_parms(): no params data found [ 739.222703][T13545] delete_channel: no stack [ 739.399923][T13526] bridge0: port 1(bridge_slave_0) entered blocking state [ 739.407285][T13526] bridge0: port 1(bridge_slave_0) entered disabled state [ 739.416581][T13526] device bridge_slave_0 entered promiscuous mode [ 739.427515][T13526] bridge0: port 2(bridge_slave_1) entered blocking state [ 739.436552][T13526] bridge0: port 2(bridge_slave_1) entered disabled state [ 739.446700][T13526] device bridge_slave_1 entered promiscuous mode [ 739.478466][T13526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 739.491255][T13526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 739.546113][T13526] team0: Port device team_slave_0 added [ 739.561718][T13526] team0: Port device team_slave_1 added [ 739.654217][T13526] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 739.677155][T13526] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 739.761368][T13526] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 739.807341][T13526] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 739.833908][T13526] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 739.890413][T13526] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 740.111861][T13550] delete_channel: no stack [ 740.378421][ T13] Bluetooth: hci4: command 0x0409 tx timeout [ 741.762418][T13526] device hsr_slave_0 entered promiscuous mode [ 741.800802][T13526] device hsr_slave_1 entered promiscuous mode [ 741.812050][T13526] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 741.830261][T13526] Cannot create hsr debugfs directory [ 741.876906][T13557] netlink: 'syz.5.3006': attribute type 10 has an invalid length. [ 742.458389][ T13] Bluetooth: hci4: command 0x041b tx timeout [ 742.557098][T13526] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.542691][T13459] Bluetooth: hci4: command 0x040f tx timeout [ 745.456533][T13526] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.567871][T13526] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.648934][T13526] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.690947][T13584] netlink: 'syz.0.3014': attribute type 29 has an invalid length. [ 745.772967][T13588] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3015'. [ 745.790399][T13584] netlink: 'syz.0.3014': attribute type 29 has an invalid length. [ 745.959042][T13586] delete_channel: no stack [ 746.031294][T13591] netlink: 'syz.3.3018': attribute type 19 has an invalid length. [ 746.321456][T13591] device syzkaller0 entered promiscuous mode [ 746.368142][T13589] netlink: 'syz.0.3014': attribute type 29 has an invalid length. [ 746.438840][T13598] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.3019'. [ 746.631656][ T4236] Bluetooth: hci4: command 0x0419 tx timeout [ 746.922256][T13526] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 746.989051][T13526] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 747.013672][T13526] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 747.061892][T13526] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 747.182099][T13616] netlink: 'syz.5.3025': attribute type 21 has an invalid length. [ 747.441004][T13526] 8021q: adding VLAN 0 to HW filter on device bond0 [ 747.512508][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.518937][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.627900][T13625] team0: Port device team_slave_0 removed [ 747.673656][T13624] delete_channel: no stack [ 747.688770][ T5506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 747.702860][ T5506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 747.738020][T13526] 8021q: adding VLAN 0 to HW filter on device team0 [ 747.845642][T13630] netlink: 'syz.0.3040': attribute type 10 has an invalid length. [ 747.893180][ T5500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 747.931349][T13634] netlink: 'syz.3.3031': attribute type 29 has an invalid length. [ 747.940742][ T5500] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 747.958810][ T5500] bridge0: port 1(bridge_slave_0) entered blocking state [ 747.965928][ T5500] bridge0: port 1(bridge_slave_0) entered forwarding state [ 748.029591][ T5500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 748.063018][ T5500] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 748.089117][ T5500] bridge0: port 2(bridge_slave_1) entered blocking state [ 748.096228][ T5500] bridge0: port 2(bridge_slave_1) entered forwarding state [ 748.130327][ T5500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 748.179639][ T5500] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 748.220905][T13634] netlink: 'syz.3.3031': attribute type 29 has an invalid length. [ 748.264176][T13637] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3031'. [ 748.278687][ T5510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 748.298041][ T5510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 748.370414][ T5510] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 748.425842][T13635] netlink: 'syz.3.3031': attribute type 29 has an invalid length. [ 748.449794][T13634] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3031'. [ 748.472219][ T5510] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 748.575306][ T5510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 748.615120][ T5510] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 748.632268][ T5510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 748.650286][ T5510] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 748.660610][ T5510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 748.699532][ T5510] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 748.733914][T13526] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 748.926126][T13648] netlink: 'syz.5.3035': attribute type 19 has an invalid length. [ 749.138968][T13648] device syzkaller0 entered promiscuous mode [ 749.641820][T13662] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 749.725957][T13526] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 749.764936][ T5506] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 749.773858][ T5506] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 749.848812][T13669] delete_channel: no stack [ 749.870855][ T5506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 749.884412][ T5506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 749.983409][ T5510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 750.019250][ T5510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 750.055038][ T5510] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 750.077766][ T5510] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 750.115171][T13526] device veth0_vlan entered promiscuous mode [ 750.200178][T13526] device veth1_vlan entered promiscuous mode [ 750.383553][T13526] device veth0_macvtap entered promiscuous mode [ 750.409120][ T5502] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 750.440438][ T5502] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 750.454393][ T5502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 750.467367][ T5502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 750.495487][ T5502] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 750.515042][T13526] device veth1_macvtap entered promiscuous mode [ 750.567674][ T5498] device hsr_slave_0 left promiscuous mode [ 750.576941][ T5498] device hsr_slave_1 left promiscuous mode [ 750.588150][ T5498] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 750.606022][ T5498] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 750.614375][ T5498] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 750.622252][ T5498] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 750.630745][ T5498] device bridge_slave_1 left promiscuous mode [ 750.637132][ T5498] bridge0: port 2(bridge_slave_1) entered disabled state [ 750.646021][ T5498] device bridge_slave_0 left promiscuous mode [ 750.652306][ T5498] bridge0: port 1(bridge_slave_0) entered disabled state [ 750.665301][ T5498] device veth1_macvtap left promiscuous mode [ 750.673504][ T5498] device veth0_macvtap left promiscuous mode [ 750.679808][ T5498] device veth1_vlan left promiscuous mode [ 750.685595][ T5498] device veth0_vlan left promiscuous mode [ 751.237462][ T5498] team0 (unregistering): Port device team_slave_1 removed [ 751.313170][ T5498] team0 (unregistering): Port device bridge0 removed [ 751.386079][T13526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 751.396819][T13526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.410490][T13526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 751.422511][T13526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.432800][T13526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 751.443602][T13526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.453830][T13526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 751.464630][T13526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.476317][T13526] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 751.491066][ T5502] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 751.518148][ T5502] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 751.527301][ T5502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 751.548796][T13526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 751.560056][T13526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.575534][T13526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 751.586480][T13526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.596586][T13526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 751.607220][T13526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.617179][T13526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 751.627802][T13526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.639923][T13526] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 751.655420][ T5502] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 751.667259][ T5502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 751.685695][T13526] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.695576][T13526] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.704704][T13526] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.713859][T13526] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.856171][ T5510] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 751.865232][ T5510] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 751.880378][ T5500] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 751.911672][ T5500] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 751.919753][ T5500] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 751.945067][ T5500] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 752.003215][T13691] netlink: 'syz.0.3058': attribute type 1 has an invalid length. [ 752.027684][T13691] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.3058'. [ 752.078657][T13691] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3058'. [ 752.149902][T13697] netlink: 'syz.1.2991': attribute type 10 has an invalid length. [ 752.173354][T13697] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2991'. [ 752.204732][T13697] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 752.365947][T13709] netlink: 'syz.5.3053': attribute type 19 has an invalid length. [ 753.184600][T13723] FAULT_INJECTION: forcing a failure. [ 753.184600][T13723] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 753.244320][T13712] delete_channel: no stack [ 753.266846][T13723] CPU: 1 PID: 13723 Comm: syz.1.3059 Not tainted syzkaller #0 [ 753.274391][T13723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 753.284501][T13723] Call Trace: [ 753.287841][T13723] [ 753.290800][T13723] dump_stack_lvl+0x188/0x250 [ 753.295516][T13723] ? show_regs_print_info+0x20/0x20 [ 753.300762][T13723] ? load_image+0x400/0x400 [ 753.305309][T13723] ? __lock_acquire+0x7d10/0x7d10 [ 753.310368][T13723] should_fail+0x38c/0x4c0 [ 753.314819][T13723] _copy_from_user+0x2e/0x170 [ 753.319544][T13723] bpf_test_init+0x136/0x1b0 [ 753.324161][T13723] bpf_prog_test_run_skb+0x181/0x1180 [ 753.329546][T13723] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 753.335726][T13723] ? bpf_prog_test_run+0x253/0x390 [ 753.340863][T13723] ? cpu_online+0x60/0x60 [ 753.345208][T13723] bpf_prog_test_run+0x31e/0x390 [ 753.350166][T13723] __sys_bpf+0x5a5/0x6f0 [ 753.354421][T13723] ? bpf_link_show_fdinfo+0x380/0x380 [ 753.359824][T13723] __x64_sys_bpf+0x78/0x90 [ 753.364249][T13723] do_syscall_64+0x4c/0xa0 [ 753.368678][T13723] ? clear_bhb_loop+0x30/0x80 [ 753.373373][T13723] ? clear_bhb_loop+0x30/0x80 [ 753.378061][T13723] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 753.383986][T13723] RIP: 0033:0x7faf72a07e59 [ 753.388419][T13723] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 753.408046][T13723] RSP: 002b:00007faf70c61028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 753.416489][T13723] RAX: ffffffffffffffda RBX: 00007faf72c80fa0 RCX: 00007faf72a07e59 [ 753.424487][T13723] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 753.432534][T13723] RBP: 00007faf70c61090 R08: 0000000000000000 R09: 0000000000000000 [ 753.440529][T13723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 753.449035][T13723] R13: 00007faf72c81038 R14: 00007faf72c80fa0 R15: 00007ffd88a051a8 [ 753.457033][T13723] [ 753.847492][T13720] chnl_net:caif_netlink_parms(): no params data found [ 754.377817][T13720] bridge0: port 1(bridge_slave_0) entered blocking state [ 754.410224][T13720] bridge0: port 1(bridge_slave_0) entered disabled state [ 754.454684][T13720] device bridge_slave_0 entered promiscuous mode [ 754.507844][T13720] bridge0: port 2(bridge_slave_1) entered blocking state [ 754.554772][T13720] bridge0: port 2(bridge_slave_1) entered disabled state [ 754.577280][T13720] device bridge_slave_1 entered promiscuous mode [ 754.703900][T13748] netlink: 'syz.1.3065': attribute type 10 has an invalid length. [ 754.748867][T13748] bridge0: port 2(bridge_slave_1) entered disabled state [ 754.757938][T13748] bridge0: port 1(bridge_slave_0) entered disabled state [ 754.836462][T13753] netlink: 'syz.0.3066': attribute type 1 has an invalid length. [ 754.862255][T13753] netlink: 15999 bytes leftover after parsing attributes in process `syz.0.3066'. [ 754.898717][T13748] bridge0: port 2(bridge_slave_1) entered blocking state [ 754.906329][T13748] bridge0: port 2(bridge_slave_1) entered forwarding state [ 754.915635][T13748] bridge0: port 1(bridge_slave_0) entered blocking state [ 754.923058][T13748] bridge0: port 1(bridge_slave_0) entered forwarding state [ 755.019942][T13748] team0: Port device bridge0 added [ 755.042117][T13720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 755.098355][ T4232] Bluetooth: hci0: command 0x0409 tx timeout [ 755.106680][T13720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 755.303018][T13720] team0: Port device team_slave_0 added [ 755.350195][T13720] team0: Port device team_slave_1 added [ 755.437373][T13720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 755.488303][T13720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 755.596613][T13720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 755.630598][T13720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 755.637603][T13720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 755.678446][T13766] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3070'. [ 755.778348][T13720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 755.832938][T13766] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3070'. [ 755.876393][T13767] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3070'. [ 755.972066][T13720] device hsr_slave_0 entered promiscuous mode [ 756.090899][T13720] device hsr_slave_1 entered promiscuous mode [ 756.132145][T13720] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 756.152249][T13720] Cannot create hsr debugfs directory [ 756.385628][T13772] netlink: 184 bytes leftover after parsing attributes in process `syz.0.3072'. [ 756.921090][T13782] netlink: 'syz.3.3077': attribute type 10 has an invalid length. [ 756.944962][T13783] netlink: 'syz.0.3076': attribute type 29 has an invalid length. [ 756.968333][T13782] bridge0: port 2(bridge_slave_1) entered disabled state [ 756.977047][T13782] bridge0: port 1(bridge_slave_0) entered disabled state [ 757.081199][T13782] bridge0: port 2(bridge_slave_1) entered blocking state [ 757.088812][T13782] bridge0: port 2(bridge_slave_1) entered forwarding state [ 757.098590][T13782] bridge0: port 1(bridge_slave_0) entered blocking state [ 757.106013][T13782] bridge0: port 1(bridge_slave_0) entered forwarding state [ 757.178457][ T1111] Bluetooth: hci0: command 0x041b tx timeout [ 757.199754][T13782] team0: Port device bridge0 added [ 757.382192][T13783] netlink: 'syz.0.3076': attribute type 29 has an invalid length. [ 757.409289][T13784] netlink: 'syz.0.3076': attribute type 29 has an invalid length. [ 757.610007][T13720] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 757.643651][T13720] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 757.676763][T13798] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3081'. [ 757.695480][T13797] netlink: 13951 bytes leftover after parsing attributes in process `syz.0.3082'. [ 757.737872][T13720] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 757.763392][T13798] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3081'. [ 757.801161][T13720] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 757.842785][T13796] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3081'. [ 758.024269][T13806] FAULT_INJECTION: forcing a failure. [ 758.024269][T13806] name failslab, interval 1, probability 0, space 0, times 0 [ 758.074045][T13806] CPU: 1 PID: 13806 Comm: syz.3.3085 Not tainted syzkaller #0 [ 758.081583][T13806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 758.091683][T13806] Call Trace: [ 758.095002][T13806] [ 758.097966][T13806] dump_stack_lvl+0x188/0x250 [ 758.102685][T13806] ? show_regs_print_info+0x20/0x20 [ 758.107911][T13806] ? load_image+0x400/0x400 [ 758.112438][T13806] ? __might_sleep+0xf0/0xf0 [ 758.117056][T13806] ? __lock_acquire+0x7d10/0x7d10 [ 758.122129][T13806] should_fail+0x38c/0x4c0 [ 758.126597][T13806] should_failslab+0x5/0x20 [ 758.131123][T13806] slab_pre_alloc_hook+0x51/0xc0 [ 758.136095][T13806] __kmalloc+0x6b/0x330 [ 758.140266][T13806] ? iovec_from_user+0x83/0x370 [ 758.145144][T13806] ? _copy_from_user+0x111/0x170 [ 758.150111][T13806] iovec_from_user+0x83/0x370 [ 758.154818][T13806] ? verify_lock_unused+0x140/0x140 [ 758.160051][T13806] __import_iovec+0x70/0x490 [ 758.164669][T13806] import_iovec+0x6f/0xa0 [ 758.169025][T13806] ___sys_sendmsg+0x1fd/0x2e0 [ 758.173745][T13806] ? __sys_sendmsg+0x2a0/0x2a0 [ 758.178548][T13806] ? vfs_write+0x8b2/0xd60 [ 758.183021][T13806] __se_sys_sendmsg+0x1af/0x290 [ 758.187900][T13806] ? __x64_sys_sendmsg+0x80/0x80 [ 758.192866][T13806] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 758.198902][T13806] ? lockdep_hardirqs_on+0x94/0x140 [ 758.204131][T13806] do_syscall_64+0x4c/0xa0 [ 758.208576][T13806] ? clear_bhb_loop+0x30/0x80 [ 758.213277][T13806] ? clear_bhb_loop+0x30/0x80 [ 758.217976][T13806] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 758.223893][T13806] RIP: 0033:0x7f6306f34e59 [ 758.228332][T13806] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 758.247980][T13806] RSP: 002b:00007f630518e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 758.256410][T13806] RAX: ffffffffffffffda RBX: 00007f63071adfa0 RCX: 00007f6306f34e59 [ 758.264431][T13806] RDX: 00000000000012cd RSI: 0000200000000040 RDI: 0000000000000003 [ 758.272414][T13806] RBP: 00007f630518e090 R08: 0000000000000000 R09: 0000000000000000 [ 758.280392][T13806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 758.288387][T13806] R13: 00007f63071ae038 R14: 00007f63071adfa0 R15: 00007ffddb36f258 [ 758.296384][T13806] [ 758.356911][T13720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 758.400322][ T5500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 758.438813][ T5500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 758.492188][T13720] 8021q: adding VLAN 0 to HW filter on device team0 [ 758.526865][T13810] netlink: 'syz.1.3087': attribute type 19 has an invalid length. [ 758.575225][ T5504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 758.584512][ T5504] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 758.594233][ T5504] bridge0: port 1(bridge_slave_0) entered blocking state [ 758.601400][ T5504] bridge0: port 1(bridge_slave_0) entered forwarding state [ 758.611637][ T5504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 758.621204][ T5504] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 758.668561][ T5504] bridge0: port 2(bridge_slave_1) entered blocking state [ 758.675724][ T5504] bridge0: port 2(bridge_slave_1) entered forwarding state [ 758.697332][ T5504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 758.746344][ T5504] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 758.757741][ T5504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 758.767534][ T5504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 758.780925][ T5504] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 758.845946][T13817] device syzkaller0 entered promiscuous mode [ 758.853941][ T5504] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 758.863890][ T5504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 758.874122][ T5504] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 758.884714][ T5504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 758.894510][ T5504] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 758.904273][ T5504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 758.913160][ T5504] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 758.932642][T13720] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 759.270246][ T1111] Bluetooth: hci0: command 0x040f tx timeout [ 759.408859][T13837] FAULT_INJECTION: forcing a failure. [ 759.408859][T13837] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 759.454348][T13837] CPU: 1 PID: 13837 Comm: syz.1.3092 Not tainted syzkaller #0 [ 759.461885][T13837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 759.471979][T13837] Call Trace: [ 759.475347][T13837] [ 759.478308][T13837] dump_stack_lvl+0x188/0x250 [ 759.483029][T13837] ? show_regs_print_info+0x20/0x20 [ 759.488275][T13837] ? load_image+0x400/0x400 [ 759.492821][T13837] ? __lock_acquire+0x7d10/0x7d10 [ 759.497897][T13837] should_fail+0x38c/0x4c0 [ 759.502366][T13837] _copy_from_user+0x2e/0x170 [ 759.507100][T13837] btf_new_fd+0x3c0/0x910 [ 759.511481][T13837] __sys_bpf+0x58c/0x6f0 [ 759.515772][T13837] ? bpf_link_show_fdinfo+0x380/0x380 [ 759.521176][T13837] ? rcu_nmi_exit+0x6f/0xf0 [ 759.525728][T13837] ? vtime_user_exit+0x2c8/0x3e0 [ 759.530870][T13837] __x64_sys_bpf+0x78/0x90 [ 759.535336][T13837] do_syscall_64+0x4c/0xa0 [ 759.539789][T13837] ? clear_bhb_loop+0x30/0x80 [ 759.544502][T13837] ? clear_bhb_loop+0x30/0x80 [ 759.549233][T13837] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 759.555162][T13837] RIP: 0033:0x7faf72a07e59 [ 759.559615][T13837] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 759.579254][T13837] RSP: 002b:00007faf70c61028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 759.587709][T13837] RAX: ffffffffffffffda RBX: 00007faf72c80fa0 RCX: 00007faf72a07e59 [ 759.595751][T13837] RDX: 0000000000000028 RSI: 0000200000000740 RDI: 0000000000000012 [ 759.603770][T13837] RBP: 00007faf70c61090 R08: 0000000000000000 R09: 0000000000000000 [ 759.611779][T13837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 759.619797][T13837] R13: 00007faf72c81038 R14: 00007faf72c80fa0 R15: 00007ffd88a051a8 [ 759.627838][T13837] [ 759.785985][T13841] netlink: 'syz.1.3093': attribute type 3 has an invalid length. [ 759.820736][T13841] netlink: 200248 bytes leftover after parsing attributes in process `syz.1.3093'. [ 761.338583][ T4236] Bluetooth: hci0: command 0x0419 tx timeout [ 762.120586][T13843] netlink: 'syz.1.3094': attribute type 10 has an invalid length. [ 762.146837][T13843] team0: Device nlmon0 is of different type [ 762.271575][ T5498] device hsr_slave_0 left promiscuous mode [ 762.338688][ T5498] device hsr_slave_1 left promiscuous mode [ 762.347176][ T5498] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 762.361987][T13852] netlink: 'syz.1.3100': attribute type 3 has an invalid length. [ 762.382195][ T5498] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 762.401330][T13852] netlink: 200232 bytes leftover after parsing attributes in process `syz.1.3100'. [ 762.415023][ T5498] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 762.447230][ T5498] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 762.477026][ T5498] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 762.509659][ T5498] batman_adv: batadv0: Removing interface: veth0_vlan [ 762.517831][ T5498] device bridge_slave_1 left promiscuous mode [ 762.533052][ T5498] bridge0: port 2(bridge_slave_1) entered disabled state [ 762.567550][ T5498] device bridge_slave_0 left promiscuous mode [ 762.591631][ T5498] bridge0: port 1(bridge_slave_0) entered disabled state [ 762.632972][ T5498] device veth1_macvtap left promiscuous mode [ 762.647819][ T5498] device veth0_macvtap left promiscuous mode [ 762.663147][ T5498] device veth1_vlan left promiscuous mode [ 762.670694][ T5498] device veth0_vlan left promiscuous mode [ 763.555815][ T5498] team0 (unregistering): Port device geneve1 removed [ 763.599410][ T5498] team0 (unregistering): Port device macvlan0 removed [ 763.657566][ T5498] team0 (unregistering): Port device team_slave_1 removed [ 763.685146][ T5498] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 763.701932][ T5498] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 763.766232][ T5498] team0 (unregistering): Port device bridge0 removed [ 763.792367][ T5498] bond0 (unregistering): Released all slaves [ 763.842965][T13853] netlink: 'syz.0.3108': attribute type 10 has an invalid length. [ 763.852338][T13857] netlink: 'syz.3.3101': attribute type 19 has an invalid length. [ 763.899948][T13720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 763.923818][T13865] bridge0: port 1(bridge_slave_0) entered forwarding state [ 763.966601][T13863] device syzkaller0 entered promiscuous mode [ 763.992789][T13822] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 764.012220][T13822] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 764.179153][T13880] netlink: 'syz.1.3107': attribute type 10 has an invalid length. [ 764.219752][T13880] bridge0: port 2(bridge_slave_1) entered disabled state [ 764.227991][T13880] bridge0: port 1(bridge_slave_0) entered disabled state [ 764.351238][T13822] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 764.387126][T13822] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 764.475644][T13822] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 764.521003][T13822] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 764.540172][T13720] device veth0_vlan entered promiscuous mode [ 764.557516][T13822] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 764.576444][T13822] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 764.596623][T13720] device veth1_vlan entered promiscuous mode [ 764.647859][T13898] netlink: 'syz.0.3112': attribute type 3 has an invalid length. [ 764.674571][T13898] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3112'. [ 764.704979][T13720] device veth0_macvtap entered promiscuous mode [ 764.734091][T13822] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 764.753580][T13822] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 764.778019][T13822] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 764.795641][T13822] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 764.809592][T13720] device veth1_macvtap entered promiscuous mode [ 764.844886][T13822] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 764.864587][T13822] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 764.887136][T13902] netlink: 'syz.1.3114': attribute type 10 has an invalid length. [ 764.906565][T13720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 764.923950][T13720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 764.935717][T13720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 764.994885][T13720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 765.025463][T13720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 765.054113][T13720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 765.073231][T13720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 765.108347][T13720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 765.140054][T13720] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 765.154216][T13822] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 765.167057][T13822] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 765.179885][T13720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 765.194500][T13720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 765.211727][T13720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 765.222642][T13720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 765.245941][T13720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 765.263000][T13720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 765.290066][T13720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 765.300897][T13720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 765.315823][T13720] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 765.325064][T13822] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 765.344728][T13822] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 765.366146][T13720] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.401017][T13720] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.410794][T13720] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.424447][T13720] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.441730][T13915] netlink: 'syz.3.3118': attribute type 19 has an invalid length. [ 765.633804][T13915] device syzkaller0 entered promiscuous mode [ 765.911860][T13924] netlink: 'syz.0.3122': attribute type 19 has an invalid length. [ 766.030626][T13822] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 766.033522][T13929] netlink: 'syz.5.3123': attribute type 10 has an invalid length. [ 766.047254][T13822] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 766.220177][ T5502] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 766.398053][T13927] device syzkaller0 entered promiscuous mode [ 766.939085][ T5508] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 766.978489][ T5508] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 766.997697][ T5508] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 767.443932][T13956] netlink: 'syz.1.3130': attribute type 19 has an invalid length. [ 767.630495][T13956] device syzkaller0 entered promiscuous mode [ 769.929664][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 769.991355][T13959] chnl_net:caif_netlink_parms(): no params data found [ 770.041851][T13965] netlink: 'syz.5.3131': attribute type 10 has an invalid length. [ 770.275445][T13973] netlink: 'syz.1.3134': attribute type 10 has an invalid length. [ 770.366603][T13975] netlink: 'syz.3.3133': attribute type 19 has an invalid length. [ 770.518481][T13980] netlink: 'syz.2.3136': attribute type 19 has an invalid length. [ 770.626396][T13959] bridge0: port 1(bridge_slave_0) entered blocking state [ 770.648558][T13959] bridge0: port 1(bridge_slave_0) entered disabled state [ 770.679883][T13959] device bridge_slave_0 entered promiscuous mode [ 770.825106][T13984] device syzkaller0 entered promiscuous mode [ 770.850501][T13959] bridge0: port 2(bridge_slave_1) entered blocking state [ 770.866009][T13959] bridge0: port 2(bridge_slave_1) entered disabled state [ 770.891137][T13959] device bridge_slave_1 entered promiscuous mode [ 770.949267][T13993] netlink: 'syz.1.3138': attribute type 21 has an invalid length. [ 771.132907][T13959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 771.153658][T14000] netlink: 'syz.1.3149': attribute type 19 has an invalid length. [ 771.168814][T14002] netlink: 'syz.2.3140': attribute type 10 has an invalid length. [ 771.283499][T14002] bridge0: port 2(bridge_slave_1) entered disabled state [ 771.294135][T14002] bridge0: port 1(bridge_slave_0) entered disabled state [ 771.735898][T14002] bridge0: port 2(bridge_slave_1) entered blocking state [ 771.745605][T14002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 771.759010][T14002] bridge0: port 1(bridge_slave_0) entered blocking state [ 771.766836][T14002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 771.978586][ T4235] Bluetooth: hci2: command 0x041b tx timeout [ 771.985977][T14002] team0: Port device bridge0 added [ 772.001378][T13959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 772.071781][T14002] syz.2.3140 (14002) used greatest stack depth: 17968 bytes left [ 772.080169][T14015] netlink: 'syz.5.3143': attribute type 19 has an invalid length. [ 772.201974][T13959] team0: Port device team_slave_0 added [ 772.294230][T13959] team0: Port device team_slave_1 added [ 772.376755][T14021] delete_channel: no stack [ 772.444541][T13959] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 772.474932][T13959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 772.525263][T13959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 772.543492][T13959] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 772.551635][T13959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 772.584050][T13959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 772.600117][T14026] bridge0: port 1(bridge_slave_0) entered forwarding state [ 772.630777][T14032] netlink: 'syz.5.3148': attribute type 10 has an invalid length. [ 772.710037][T13959] device hsr_slave_0 entered promiscuous mode [ 772.725211][T14041] FAULT_INJECTION: forcing a failure. [ 772.725211][T14041] name failslab, interval 1, probability 0, space 0, times 0 [ 772.752144][T14041] CPU: 1 PID: 14041 Comm: syz.2.3151 Not tainted syzkaller #0 [ 772.759683][T14041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 772.769786][T14041] Call Trace: [ 772.773098][T14041] [ 772.776048][T14041] dump_stack_lvl+0x188/0x250 [ 772.780754][T14041] ? show_regs_print_info+0x20/0x20 [ 772.785979][T14041] ? load_image+0x400/0x400 [ 772.790515][T14041] ? __might_sleep+0xf0/0xf0 [ 772.795143][T14041] ? __lock_acquire+0x7d10/0x7d10 [ 772.800203][T14041] should_fail+0x38c/0x4c0 [ 772.804645][T14041] should_failslab+0x5/0x20 [ 772.809173][T14041] slab_pre_alloc_hook+0x51/0xc0 [ 772.814142][T14041] __kmalloc+0x6b/0x330 [ 772.818323][T14041] ? bpf_test_init+0xf8/0x1b0 [ 772.823033][T14041] ? __lock_acquire+0x7d10/0x7d10 [ 772.828105][T14041] bpf_test_init+0xf8/0x1b0 [ 772.832642][T14041] bpf_prog_test_run_skb+0x181/0x1180 [ 772.838036][T14041] ? __fget_files+0x40f/0x480 [ 772.842746][T14041] ? cpu_online+0x60/0x60 [ 772.847103][T14041] bpf_prog_test_run+0x31e/0x390 [ 772.852091][T14041] __sys_bpf+0x5a5/0x6f0 [ 772.856386][T14041] ? bpf_link_show_fdinfo+0x380/0x380 [ 772.861787][T14041] ? rcu_nmi_exit+0x6f/0xf0 [ 772.866323][T14041] ? vtime_user_exit+0x2c8/0x3e0 [ 772.871294][T14041] __x64_sys_bpf+0x78/0x90 [ 772.875745][T14041] do_syscall_64+0x4c/0xa0 [ 772.880188][T14041] ? clear_bhb_loop+0x30/0x80 [ 772.884887][T14041] ? clear_bhb_loop+0x30/0x80 [ 772.889607][T14041] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 772.895565][T14041] RIP: 0033:0x7f155d398e59 [ 772.900012][T14041] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 772.919662][T14041] RSP: 002b:00007f155b5f2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 772.928105][T14041] RAX: ffffffffffffffda RBX: 00007f155d611fa0 RCX: 00007f155d398e59 [ 772.936112][T14041] RDX: 0000000000000050 RSI: 0000200000000040 RDI: 000000000000000a [ 772.944112][T14041] RBP: 00007f155b5f2090 R08: 0000000000000000 R09: 0000000000000000 [ 772.952111][T14041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 772.960110][T14041] R13: 00007f155d612038 R14: 00007f155d611fa0 R15: 00007ffdd9298848 [ 772.968131][T14041] [ 772.978804][T13959] device hsr_slave_1 entered promiscuous mode [ 772.995162][T13959] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 773.019740][T13959] Cannot create hsr debugfs directory [ 773.033176][T14044] netlink: 'syz.3.3152': attribute type 19 has an invalid length. [ 773.303132][T14043] device syzkaller0 entered promiscuous mode [ 773.394263][T14050] delete_channel: no stack [ 773.549875][T14054] device syzkaller0 entered promiscuous mode [ 773.776224][T14064] bridge0: port 2(bridge_slave_1) entered disabled state [ 773.785907][T14064] bridge0: port 1(bridge_slave_0) entered disabled state [ 774.058684][ T21] Bluetooth: hci2: command 0x040f tx timeout [ 774.198133][T13959] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.249661][T14071] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3159'. [ 774.359261][T13959] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.464522][T13959] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.528847][T14081] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3162'. [ 774.574723][T13959] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.615495][T14086] bridge0: port 2(bridge_slave_1) entered disabled state [ 774.623205][T14086] bridge0: port 1(bridge_slave_0) entered disabled state [ 774.832616][T14092] device syzkaller0 entered promiscuous mode [ 774.844039][T14087] delete_channel: no stack [ 775.119741][T14096] validate_nla: 9 callbacks suppressed [ 775.119759][T14096] netlink: 'syz.1.3168': attribute type 19 has an invalid length. [ 775.243092][T14101] netlink: 'syz.5.3169': attribute type 19 has an invalid length. [ 775.352862][T14098] device syzkaller0 entered promiscuous mode [ 775.423192][T14107] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3170'. [ 775.479563][T13959] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 775.616576][T13959] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 775.639358][T14118] netlink: 'syz.5.3173': attribute type 19 has an invalid length. [ 775.649308][T13959] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 775.709902][T13959] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 775.932535][T14118] device syzkaller0 entered promiscuous mode [ 776.163598][ T4238] Bluetooth: hci2: command 0x0419 tx timeout [ 776.272349][T14127] delete_channel: no stack [ 776.379128][T14133] netlink: 'syz.2.3179': attribute type 10 has an invalid length. [ 776.615657][T14135] device syzkaller0 entered promiscuous mode [ 776.664531][T14140] netlink: 'syz.5.3182': attribute type 19 has an invalid length. [ 776.715280][T13959] 8021q: adding VLAN 0 to HW filter on device bond0 [ 777.032429][ T5504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 777.081915][ T5504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 777.125347][T13959] 8021q: adding VLAN 0 to HW filter on device team0 [ 777.238127][ T5508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 777.263543][ T5508] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 777.287934][ T5508] bridge0: port 1(bridge_slave_0) entered blocking state [ 777.295207][ T5508] bridge0: port 1(bridge_slave_0) entered forwarding state [ 777.427109][ T5508] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 777.456483][ T5508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 777.517047][ T5508] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 777.554324][ T5508] bridge0: port 2(bridge_slave_1) entered blocking state [ 777.561692][ T5508] bridge0: port 2(bridge_slave_1) entered forwarding state [ 777.623226][ T5508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 777.681700][ T5508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 777.730092][ T5508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 777.831949][ T5508] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 777.912000][ T5508] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 777.945805][ T5508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 777.972917][ T5508] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 778.000002][ T5508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 778.019794][ T5508] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 778.057695][ T5508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 778.079787][ T5508] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 778.136796][T13959] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 778.208008][T14166] netlink: 'syz.5.3198': attribute type 19 has an invalid length. [ 779.210453][T14182] team0: Port device team_slave_0 removed [ 779.249851][T14180] delete_channel: no stack [ 781.743838][T14189] netlink: 'syz.2.3195': attribute type 10 has an invalid length. [ 781.761254][T14194] netlink: 'syz.5.3196': attribute type 10 has an invalid length. [ 781.809894][T13959] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 781.817454][ T5510] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 781.844872][ T5510] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 781.858830][T14199] netlink: 'syz.1.3197': attribute type 16 has an invalid length. [ 781.867331][T14199] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3197'. [ 781.894465][ T5510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 781.905188][ T5510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 781.959096][ T5510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 781.968977][ T5510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 782.009568][T13959] device veth0_vlan entered promiscuous mode [ 782.034438][ T5510] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 782.076871][ T5510] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 782.122569][T13959] device veth1_vlan entered promiscuous mode [ 782.151079][T14209] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3199'. [ 782.293477][T13959] device veth0_macvtap entered promiscuous mode [ 782.331335][T13822] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 782.340086][T13822] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 782.349248][T13822] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 782.359517][T13822] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 782.376007][T13959] device veth1_macvtap entered promiscuous mode [ 782.389253][T13822] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 782.400186][T13822] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 782.430025][T13959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 782.440721][T13959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 782.453200][T13959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 782.469074][T13959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 782.492641][T13959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 782.512071][T13959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 782.526269][T13959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 782.545547][T13959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 782.557170][T13959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 782.576095][T13959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 782.600025][T13959] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 782.617335][ T5500] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 782.627982][ T5500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 782.649245][T13959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 782.669922][T13959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 782.687197][T13959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 782.710801][T13959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 782.728347][T13959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 782.745808][T13959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 782.758625][T13959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 782.769882][T13959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 782.781273][T13959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 782.792341][T13959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 782.805831][T13959] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 782.815513][ T5500] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 782.829659][ T5500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 782.850787][T13959] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.862161][T13959] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.871771][T13959] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.880966][T13959] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.171844][T14215] netlink: 'syz.2.3204': attribute type 19 has an invalid length. [ 785.209602][T14218] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3206'. [ 785.235609][ T5500] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 785.261877][ T5500] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 785.358413][ T5504] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 785.408538][ T5504] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 785.427898][ T5504] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 785.482612][T13822] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 785.654595][T14228] netlink: 'syz.3.3208': attribute type 10 has an invalid length. [ 786.148956][T14239] netlink: 'syz.0.3210': attribute type 19 has an invalid length. [ 786.460280][T14237] device syzkaller0 entered promiscuous mode [ 786.493398][T14241] netlink: 'syz.2.3211': attribute type 16 has an invalid length. [ 786.511594][T14241] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3211'. [ 786.530172][T14245] netlink: 'syz.3.3212': attribute type 4 has an invalid length. [ 789.349321][T14267] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.3217'. [ 789.441644][T14267] netlink: 8454 bytes leftover after parsing attributes in process `syz.2.3217'. [ 789.519580][T14270] netlink: 'syz.5.3223': attribute type 10 has an invalid length. [ 789.527969][T14272] netlink: 'syz.1.3222': attribute type 19 has an invalid length. [ 789.548916][T14275] netlink: 'syz.3.3224': attribute type 16 has an invalid length. [ 789.599332][T14275] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3224'. [ 789.638785][T14276] netlink: 22 bytes leftover after parsing attributes in process `syz.0.3225'. [ 790.377126][T14291] device syzkaller0 entered promiscuous mode [ 790.608159][T14285] device syzkaller0 entered promiscuous mode [ 793.619842][T14306] netlink: 'syz.1.3229': attribute type 10 has an invalid length. [ 794.540743][T14320] netlink: 30699 bytes leftover after parsing attributes in process `syz.3.3234'. [ 794.629706][T14320] netlink: 6324 bytes leftover after parsing attributes in process `syz.3.3234'. [ 794.724045][T14320] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3234'. [ 796.742454][T14328] netlink: 'syz.3.3237': attribute type 10 has an invalid length. [ 796.814837][T14330] netlink: 'syz.0.3239': attribute type 19 has an invalid length. [ 796.882564][T14334] netlink: 'syz.5.3238': attribute type 16 has an invalid length. [ 796.900744][T14334] netlink: 168 bytes leftover after parsing attributes in process `syz.5.3238'. [ 797.127835][T14330] device syzkaller0 entered promiscuous mode [ 797.141154][T14340] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.3240'. [ 797.208996][T14340] netlink: 6320 bytes leftover after parsing attributes in process `syz.2.3240'. [ 797.251484][T14335] delete_channel: no stack [ 797.523709][T14350] netlink: 'syz.1.3244': attribute type 19 has an invalid length. [ 797.707554][T14352] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 797.764812][T14352] FAULT_INJECTION: forcing a failure. [ 797.764812][T14352] name failslab, interval 1, probability 0, space 0, times 0 [ 797.778241][T14352] CPU: 1 PID: 14352 Comm: syz.3.3245 Not tainted syzkaller #0 [ 797.785758][T14352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 797.795948][T14352] Call Trace: [ 797.799271][T14352] [ 797.802245][T14352] dump_stack_lvl+0x188/0x250 [ 797.806998][T14352] ? show_regs_print_info+0x20/0x20 [ 797.812253][T14352] ? load_image+0x400/0x400 [ 797.816875][T14352] should_fail+0x38c/0x4c0 [ 797.821377][T14352] should_failslab+0x5/0x20 [ 797.825939][T14352] slab_pre_alloc_hook+0x51/0xc0 [ 797.830974][T14352] __kmalloc+0x6b/0x330 [ 797.835171][T14352] ? ___neigh_create+0x6d2/0x2250 [ 797.840259][T14352] ? rcu_lockdep_current_cpu_online+0x35/0x130 [ 797.846507][T14352] ___neigh_create+0x6d2/0x2250 [ 797.851491][T14352] ? __ipv6_neigh_lookup_noref+0x5b2/0x7d0 [ 797.857406][T14352] ip6_finish_output2+0x9f6/0x1510 [ 797.862636][T14352] ? nf_hook+0x360/0x360 [ 797.866940][T14352] ? ip6_finish_output+0x64c/0x7d0 [ 797.872154][T14352] ip6_send_skb+0x1b9/0x360 [ 797.876734][T14352] udp_v6_send_skb+0xa28/0x1680 [ 797.881729][T14352] udp_v6_push_pending_frames+0x1cc/0x320 [ 797.887549][T14352] ? udp_v6_send_skb+0x1680/0x1680 [ 797.892749][T14352] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 797.897666][T14352] udpv6_sendmsg+0xee3/0x2650 [ 797.902409][T14352] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 797.907308][T14352] ? perf_trace_run_bpf_submit+0x124/0x1c0 [ 797.913175][T14352] ? udp_v6_early_demux+0xec0/0xec0 [ 797.918588][T14352] ? aa_sk_perm+0x7dc/0x910 [ 797.923157][T14352] ? aa_af_perm+0x340/0x340 [ 797.927693][T14352] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 797.934146][T14352] ? sock_rps_record_flow+0x17/0x3b0 [ 797.939473][T14352] ? inet_send_prepare+0x58/0x260 [ 797.944545][T14352] ? inet6_sendmsg+0x5b/0xd0 [ 797.949178][T14352] ? inet6_compat_ioctl+0x3c0/0x3c0 [ 797.954419][T14352] ____sys_sendmsg+0x5b7/0x8f0 [ 797.959248][T14352] ? __sys_sendmsg_sock+0x30/0x30 [ 797.964432][T14352] ? import_iovec+0x6f/0xa0 [ 797.968988][T14352] ___sys_sendmsg+0x236/0x2e0 [ 797.973735][T14352] ? __sys_sendmsg+0x2a0/0x2a0 [ 797.978581][T14352] ? trace_event_raw_event_lock+0x270/0x270 [ 797.984514][T14352] ? vfs_write+0x8b2/0xd60 [ 797.989046][T14352] __se_sys_sendmsg+0x1af/0x290 [ 797.993944][T14352] ? __x64_sys_sendmsg+0x80/0x80 [ 797.998909][T14352] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 798.004971][T14352] ? lockdep_hardirqs_on+0x94/0x140 [ 798.010213][T14352] do_syscall_64+0x4c/0xa0 [ 798.014658][T14352] ? clear_bhb_loop+0x30/0x80 [ 798.019371][T14352] ? clear_bhb_loop+0x30/0x80 [ 798.024091][T14352] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 798.030015][T14352] RIP: 0033:0x7f6306f34e59 [ 798.034473][T14352] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 798.054114][T14352] RSP: 002b:00007f630518e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 798.062560][T14352] RAX: ffffffffffffffda RBX: 00007f63071adfa0 RCX: 00007f6306f34e59 [ 798.070559][T14352] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000006 [ 798.078553][T14352] RBP: 00007f630518e090 R08: 0000000000000000 R09: 0000000000000000 [ 798.086547][T14352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 798.094566][T14352] R13: 00007f63071ae038 R14: 00007f63071adfa0 R15: 00007ffddb36f258 [ 798.102620][T14352] [ 798.161432][T14350] device syzkaller0 entered promiscuous mode [ 798.947289][T14377] netlink: 'syz.2.3252': attribute type 10 has an invalid length. [ 799.113656][T14381] netlink: 'syz.3.3253': attribute type 10 has an invalid length. [ 799.306829][T14374] delete_channel: no stack [ 800.215036][T14386] delete_channel: no stack [ 801.843696][T14397] netlink: 'syz.2.3257': attribute type 19 has an invalid length. [ 802.400470][T14392] device syzkaller0 entered promiscuous mode [ 802.885693][T14411] netlink: 'syz.1.3263': attribute type 19 has an invalid length. [ 803.013199][T14415] FAULT_INJECTION: forcing a failure. [ 803.013199][T14415] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 803.088571][T14415] CPU: 1 PID: 14415 Comm: syz.5.3265 Not tainted syzkaller #0 [ 803.096137][T14415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 803.106263][T14415] Call Trace: [ 803.109587][T14415] [ 803.112569][T14415] dump_stack_lvl+0x188/0x250 [ 803.117455][T14415] ? show_regs_print_info+0x20/0x20 [ 803.122703][T14415] ? load_image+0x400/0x400 [ 803.127258][T14415] ? __lock_acquire+0x7d10/0x7d10 [ 803.132335][T14415] ? __lock_acquire+0x7d10/0x7d10 [ 803.137420][T14415] should_fail+0x38c/0x4c0 [ 803.141909][T14415] _copy_from_user+0x2e/0x170 [ 803.146633][T14415] ____sys_sendmsg+0x30a/0x8f0 [ 803.151467][T14415] ? __sys_sendmsg_sock+0x30/0x30 [ 803.156556][T14415] ? import_iovec+0x6f/0xa0 [ 803.161137][T14415] ___sys_sendmsg+0x236/0x2e0 [ 803.165870][T14415] ? __sys_sendmsg+0x2a0/0x2a0 [ 803.170712][T14415] ? vfs_write+0x8b2/0xd60 [ 803.175235][T14415] __se_sys_sendmsg+0x1af/0x290 [ 803.180131][T14415] ? __x64_sys_sendmsg+0x80/0x80 [ 803.185097][T14415] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 803.191148][T14415] ? lockdep_hardirqs_on+0x94/0x140 [ 803.196410][T14415] do_syscall_64+0x4c/0xa0 [ 803.200857][T14415] ? clear_bhb_loop+0x30/0x80 [ 803.205561][T14415] ? clear_bhb_loop+0x30/0x80 [ 803.210274][T14415] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 803.216197][T14415] RIP: 0033:0x7f31f6fdde59 [ 803.220644][T14415] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 803.240278][T14415] RSP: 002b:00007f31f5237028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 803.248724][T14415] RAX: ffffffffffffffda RBX: 00007f31f7256fa0 RCX: 00007f31f6fdde59 [ 803.256728][T14415] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005 [ 803.264731][T14415] RBP: 00007f31f5237090 R08: 0000000000000000 R09: 0000000000000000 [ 803.272734][T14415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 803.280731][T14415] R13: 00007f31f7257038 R14: 00007f31f7256fa0 R15: 00007ffdb7621548 [ 803.288784][T14415] [ 803.416047][T14411] device syzkaller0 entered promiscuous mode [ 804.601824][T14426] delete_channel: no stack [ 805.267356][T14433] delete_channel: no stack [ 806.861788][T14427] team0: Port device team_slave_0 removed [ 806.879640][T14441] netlink: 'syz.0.3273': attribute type 10 has an invalid length. [ 806.895904][T14441] bridge0: port 2(bridge_slave_1) entered disabled state [ 806.903437][T14441] bridge0: port 1(bridge_slave_0) entered disabled state [ 806.943266][T14441] bridge0: port 2(bridge_slave_1) entered blocking state [ 806.950758][T14441] bridge0: port 2(bridge_slave_1) entered forwarding state [ 806.959290][T14441] bridge0: port 1(bridge_slave_0) entered blocking state [ 806.966436][T14441] bridge0: port 1(bridge_slave_0) entered forwarding state [ 807.020446][T14441] team0: Port device bridge0 added [ 807.137381][T14448] delete_channel: no stack [ 807.702017][T14469] netlink: 'syz.0.3280': attribute type 19 has an invalid length. [ 807.754612][T14464] netlink: 30699 bytes leftover after parsing attributes in process `syz.1.3277'. [ 807.779274][T14464] netlink: 6324 bytes leftover after parsing attributes in process `syz.1.3277'. [ 807.830274][T14464] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3277'. [ 808.948822][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.955364][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.092028][T14480] netlink: 'syz.5.3283': attribute type 19 has an invalid length. [ 809.319556][T14483] delete_channel: no stack [ 809.640446][T14478] device syzkaller0 entered promiscuous mode [ 809.707848][T14486] netlink: 'syz.0.3286': attribute type 10 has an invalid length. [ 810.360976][T14491] delete_channel: no stack [ 812.440001][T14486] bridge0: port 2(bridge_slave_1) entered disabled state [ 812.451643][T14486] bridge0: port 1(bridge_slave_0) entered disabled state [ 813.345369][T14516] netlink: 'syz.5.3296': attribute type 19 has an invalid length. [ 813.628394][T14516] device syzkaller0 entered promiscuous mode [ 816.164474][T14529] team0: Port device team_slave_0 removed [ 816.188729][T14532] netlink: 'syz.3.3300': attribute type 10 has an invalid length. [ 816.200609][T14528] delete_channel: no stack [ 816.262442][T14540] delete_channel: no stack [ 816.499197][T14551] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.3306'. [ 820.351401][T14574] delete_channel: no stack [ 820.380876][T14581] netlink: 'syz.2.3313': attribute type 19 has an invalid length. [ 820.766693][T14581] device syzkaller0 entered promiscuous mode [ 820.820761][T14586] netlink: 'syz.5.3316': attribute type 10 has an invalid length. [ 821.346700][T14584] delete_channel: no stack [ 822.716448][T14593] FAULT_INJECTION: forcing a failure. [ 822.716448][T14593] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 822.778469][T14593] CPU: 0 PID: 14593 Comm: syz.1.3318 Not tainted syzkaller #0 [ 822.786013][T14593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 822.796113][T14593] Call Trace: [ 822.799418][T14593] [ 822.802369][T14593] dump_stack_lvl+0x188/0x250 [ 822.807073][T14593] ? show_regs_print_info+0x20/0x20 [ 822.812289][T14593] ? load_image+0x400/0x400 [ 822.816818][T14593] ? __lock_acquire+0x7d10/0x7d10 [ 822.821861][T14593] ? slab_post_alloc_hook+0x4c/0x380 [ 822.827157][T14593] ? __alloc_skb+0xf4/0x750 [ 822.831685][T14593] ? alloc_skb_with_frags+0xa7/0x730 [ 822.836983][T14593] ? sock_alloc_send_pskb+0x87f/0x9a0 [ 822.842369][T14593] should_fail+0x38c/0x4c0 [ 822.846809][T14593] prepare_alloc_pages+0x1e4/0x5f0 [ 822.851942][T14593] __alloc_pages+0x11b/0x480 [ 822.856543][T14593] ? zone_statistics+0x170/0x170 [ 822.861512][T14593] kmalloc_large_node+0x7d/0x190 [ 822.866472][T14593] __kmalloc_node_track_caller+0x22e/0x3a0 [ 822.872294][T14593] ? alloc_skb_with_frags+0xa7/0x730 [ 822.877595][T14593] ? kmem_cache_alloc_node+0x162/0x2d0 [ 822.883068][T14593] ? __alloc_skb+0xf4/0x750 [ 822.887589][T14593] ? alloc_skb_with_frags+0xa7/0x730 [ 822.892890][T14593] __alloc_skb+0x22c/0x750 [ 822.897349][T14593] alloc_skb_with_frags+0xa7/0x730 [ 822.902491][T14593] ? mark_lock+0x94/0x320 [ 822.906840][T14593] sock_alloc_send_pskb+0x87f/0x9a0 [ 822.912064][T14593] ? sock_kzfree_s+0x50/0x50 [ 822.916676][T14593] tun_get_user+0x7c8/0x3a70 [ 822.921293][T14593] ? tun_ring_recv+0xc40/0xc40 [ 822.926078][T14593] ? rcu_lock_release+0x5/0x20 [ 822.930866][T14593] ? __lock_acquire+0x7d10/0x7d10 [ 822.935918][T14593] tun_chr_write_iter+0x112/0x1e0 [ 822.940955][T14593] vfs_write+0x745/0xd60 [ 822.945217][T14593] ? file_end_write+0x250/0x250 [ 822.950088][T14593] ? __fget_files+0x40f/0x480 [ 822.954783][T14593] ? __fdget_pos+0x1e2/0x370 [ 822.959381][T14593] ? ksys_write+0x71/0x260 [ 822.963809][T14593] ksys_write+0x152/0x260 [ 822.968154][T14593] ? __ia32_sys_read+0x80/0x80 [ 822.972941][T14593] ? lockdep_hardirqs_on+0x94/0x140 [ 822.978157][T14593] do_syscall_64+0x4c/0xa0 [ 822.982605][T14593] ? clear_bhb_loop+0x30/0x80 [ 822.987298][T14593] ? clear_bhb_loop+0x30/0x80 [ 822.991991][T14593] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 822.997909][T14593] RIP: 0033:0x7faf72a07e59 [ 823.002448][T14593] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 823.022081][T14593] RSP: 002b:00007faf70c61028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 823.030525][T14593] RAX: ffffffffffffffda RBX: 00007faf72c80fa0 RCX: 00007faf72a07e59 [ 823.038515][T14593] RDX: 000000000000fdef RSI: 0000200000000200 RDI: 00000000000000c8 [ 823.046500][T14593] RBP: 00007faf70c61090 R08: 0000000000000000 R09: 0000000000000000 [ 823.054480][T14593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 823.062456][T14593] R13: 00007faf72c81038 R14: 00007faf72c80fa0 R15: 00007ffd88a051a8 [ 823.070448][T14593] [ 823.119589][T14599] IPv6: Can't replace route, no match found [ 823.213676][T14601] netlink: 'syz.3.3323': attribute type 21 has an invalid length. [ 823.228512][T14601] netlink: 'syz.3.3323': attribute type 1 has an invalid length. [ 823.249749][T14601] netlink: 'syz.3.3323': attribute type 2 has an invalid length. [ 823.274968][T14601] netlink: 9062 bytes leftover after parsing attributes in process `syz.3.3323'. [ 824.814328][T14620] delete_channel: no stack [ 826.379485][ T4232] Bluetooth: hci3: command 0x0406 tx timeout [ 826.402184][T14632] netlink: 'syz.3.3331': attribute type 10 has an invalid length. [ 826.520039][T14629] delete_channel: no stack [ 827.540439][T14651] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.3337'. [ 829.753275][T14666] netlink: 'syz.0.3340': attribute type 8 has an invalid length. [ 829.789665][T14666] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3340'. [ 831.164567][T14695] netlink: 'syz.3.3349': attribute type 10 has an invalid length. [ 831.354720][T14673] delete_channel: no stack [ 834.504007][T14715] netlink: 'syz.2.3355': attribute type 10 has an invalid length. [ 834.553177][T14714] netlink: 'syz.3.3354': attribute type 8 has an invalid length. [ 834.581345][T14714] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3354'. [ 834.628587][T14716] netlink: 'syz.2.3355': attribute type 10 has an invalid length. [ 835.303840][T14733] delete_channel: no stack [ 835.474393][T14745] netlink: 'syz.3.3365': attribute type 10 has an invalid length. [ 838.862392][T14769] netlink: 'syz.3.3382': attribute type 10 has an invalid length. [ 839.035445][T14778] netlink: 'syz.5.3373': attribute type 8 has an invalid length. [ 839.068552][T14778] netlink: 156 bytes leftover after parsing attributes in process `syz.5.3373'. [ 839.104202][T14775] delete_channel: no stack [ 839.310225][T14787] device syzkaller0 entered promiscuous mode [ 843.129717][T14811] netlink: 'syz.3.3388': attribute type 10 has an invalid length. [ 843.152227][T14812] netlink: 196 bytes leftover after parsing attributes in process `syz.5.3391'. [ 843.260404][T14810] delete_channel: no stack [ 843.406222][T14826] netlink: 'syz.2.3394': attribute type 3 has an invalid length. [ 843.425026][T14826] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3394'. [ 843.627868][T14835] device syzkaller0 entered promiscuous mode [ 843.672403][T14838] netlink: 196 bytes leftover after parsing attributes in process `syz.5.3400'. [ 846.952845][T14859] delete_channel: no stack [ 846.968306][T14865] FAULT_INJECTION: forcing a failure. [ 846.968306][T14865] name failslab, interval 1, probability 0, space 0, times 0 [ 846.984904][T14863] netlink: 'syz.5.3409': attribute type 10 has an invalid length. [ 847.028378][T14865] CPU: 0 PID: 14865 Comm: syz.3.3408 Not tainted syzkaller #0 [ 847.035924][T14865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 847.046020][T14865] Call Trace: [ 847.049333][T14865] [ 847.052288][T14865] dump_stack_lvl+0x188/0x250 [ 847.057003][T14865] ? show_regs_print_info+0x20/0x20 [ 847.062243][T14865] ? load_image+0x400/0x400 [ 847.066793][T14865] ? __lock_acquire+0x7d10/0x7d10 [ 847.071867][T14865] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 847.077993][T14865] should_fail+0x38c/0x4c0 [ 847.082469][T14865] should_failslab+0x5/0x20 [ 847.087018][T14865] slab_pre_alloc_hook+0x51/0xc0 [ 847.091993][T14865] __kmalloc+0x6b/0x330 [ 847.096179][T14865] ? ip_options_get+0x4c/0x430 [ 847.100974][T14865] ? __local_bh_enable_ip+0x136/0x1c0 [ 847.106394][T14865] ip_options_get+0x4c/0x430 [ 847.111024][T14865] ip_setsockopt+0x179b/0x3130 [ 847.115826][T14865] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 847.121231][T14865] ? verify_lock_unused+0x140/0x140 [ 847.126476][T14865] ? mark_lock+0x94/0x320 [ 847.130846][T14865] ? __lock_acquire+0x13bc/0x7d10 [ 847.135904][T14865] ? udp_setsockopt+0x77/0xa0 [ 847.140619][T14865] ipv6_setsockopt+0x2cd/0x3cc0 [ 847.145525][T14865] ? ipv6_update_options+0x400/0x400 [ 847.150842][T14865] ? mark_lock+0x94/0x320 [ 847.155206][T14865] ? __lock_acquire+0x12e8/0x7d10 [ 847.160266][T14865] ? verify_lock_unused+0x140/0x140 [ 847.165527][T14865] ? verify_lock_unused+0x140/0x140 [ 847.170773][T14865] ? mark_lock+0x94/0x320 [ 847.175140][T14865] ? __lock_acquire+0x12e8/0x7d10 [ 847.180219][T14865] ? __lock_acquire+0x13bc/0x7d10 [ 847.185284][T14865] ? verify_lock_unused+0x140/0x140 [ 847.190526][T14865] ? aa_label_sk_perm+0x3d0/0x530 [ 847.195599][T14865] ? aa_sk_perm+0x910/0x910 [ 847.200160][T14865] ? __might_sleep+0xf0/0xf0 [ 847.204788][T14865] ? rcu_lock_release+0x9/0x20 [ 847.209610][T14865] tcp_setsockopt+0x240/0x1e90 [ 847.214418][T14865] ? aa_sk_perm+0x7dc/0x910 [ 847.218956][T14865] ? tcp_set_window_clamp+0x1a0/0x1a0 [ 847.224372][T14865] ? aa_af_perm+0x340/0x340 [ 847.228916][T14865] ? __fget_files+0x40f/0x480 [ 847.233641][T14865] ? aa_sock_opt_perm+0x74/0x100 [ 847.238620][T14865] ? sock_common_setsockopt+0x32/0xb0 [ 847.244028][T14865] ? sock_common_recvmsg+0x1c0/0x1c0 [ 847.249369][T14865] __sys_setsockopt+0x2bf/0x3d0 [ 847.254266][T14865] __x64_sys_setsockopt+0xb1/0xc0 [ 847.259329][T14865] do_syscall_64+0x4c/0xa0 [ 847.263782][T14865] ? clear_bhb_loop+0x30/0x80 [ 847.268497][T14865] ? clear_bhb_loop+0x30/0x80 [ 847.273212][T14865] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 847.279135][T14865] RIP: 0033:0x7f6306f34e59 [ 847.283590][T14865] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 847.303564][T14865] RSP: 002b:00007f630518e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 847.312030][T14865] RAX: ffffffffffffffda RBX: 00007f63071adfa0 RCX: 00007f6306f34e59 [ 847.320312][T14865] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000003 [ 847.328331][T14865] RBP: 00007f630518e090 R08: 0000000000000000 R09: 0000000000000000 [ 847.336514][T14865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 847.344549][T14865] R13: 00007f63071ae038 R14: 00007f63071adfa0 R15: 00007ffddb36f258 [ 847.352675][T14865] [ 847.543873][T14866] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3410'. [ 847.946880][T14884] device syzkaller0 entered promiscuous mode [ 850.890955][T14897] netlink: 'syz.1.3419': attribute type 10 has an invalid length. [ 850.902674][T14897] netlink: 55 bytes leftover after parsing attributes in process `syz.1.3419'. [ 850.979080][T14900] netlink: 'syz.1.3419': attribute type 1 has an invalid length. [ 851.300568][T14904] delete_channel: no stack [ 851.331357][T14909] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3421'. [ 851.488011][T14919] netlink: 'syz.1.3425': attribute type 10 has an invalid length. [ 851.584120][T14924] netlink: 'syz.5.3427': attribute type 1 has an invalid length. [ 851.629482][T14924] netlink: 'syz.5.3427': attribute type 4 has an invalid length. [ 851.672966][T14924] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.3427'. [ 853.343156][T14947] delete_channel: no stack [ 853.394582][T14955] FAULT_INJECTION: forcing a failure. [ 853.394582][T14955] name failslab, interval 1, probability 0, space 0, times 0 [ 853.430792][T14955] CPU: 1 PID: 14955 Comm: syz.2.3439 Not tainted syzkaller #0 [ 853.438337][T14955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 853.448429][T14955] Call Trace: [ 853.451744][T14955] [ 853.454695][T14955] dump_stack_lvl+0x188/0x250 [ 853.459423][T14955] ? show_regs_print_info+0x20/0x20 [ 853.464669][T14955] ? load_image+0x400/0x400 [ 853.469210][T14955] ? __might_sleep+0xf0/0xf0 [ 853.473837][T14955] ? __lock_acquire+0x7d10/0x7d10 [ 853.478915][T14955] should_fail+0x38c/0x4c0 [ 853.483385][T14955] should_failslab+0x5/0x20 [ 853.487931][T14955] slab_pre_alloc_hook+0x51/0xc0 [ 853.492910][T14955] __kmalloc+0x6b/0x330 [ 853.497098][T14955] ? sock_kmalloc+0x92/0xf0 [ 853.501662][T14955] sock_kmalloc+0x92/0xf0 [ 853.506033][T14955] ____sys_sendmsg+0x1bb/0x8f0 [ 853.510848][T14955] ? __sys_sendmsg_sock+0x30/0x30 [ 853.515921][T14955] ? import_iovec+0x6f/0xa0 [ 853.520467][T14955] ___sys_sendmsg+0x236/0x2e0 [ 853.525198][T14955] ? __sys_sendmsg+0x2a0/0x2a0 [ 853.530106][T14955] ? vfs_write+0x8b2/0xd60 [ 853.534584][T14955] __se_sys_sendmsg+0x1af/0x290 [ 853.539480][T14955] ? __x64_sys_sendmsg+0x80/0x80 [ 853.544469][T14955] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 853.550509][T14955] ? lockdep_hardirqs_on+0x94/0x140 [ 853.555754][T14955] do_syscall_64+0x4c/0xa0 [ 853.560207][T14955] ? clear_bhb_loop+0x30/0x80 [ 853.564929][T14955] ? clear_bhb_loop+0x30/0x80 [ 853.569650][T14955] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 853.575590][T14955] RIP: 0033:0x7f155d398e59 [ 853.580063][T14955] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 853.599710][T14955] RSP: 002b:00007f155b5f2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 853.608167][T14955] RAX: ffffffffffffffda RBX: 00007f155d611fa0 RCX: 00007f155d398e59 [ 853.616179][T14955] RDX: 0000000000040880 RSI: 0000200000000140 RDI: 000000000000000e [ 853.624316][T14955] RBP: 00007f155b5f2090 R08: 0000000000000000 R09: 0000000000000000 [ 853.632323][T14955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 853.640331][T14955] R13: 00007f155d612038 R14: 00007f155d611fa0 R15: 00007ffdd9298848 [ 853.648352][T14955] [ 855.151650][T14961] netlink: 'syz.1.3441': attribute type 10 has an invalid length. [ 855.636314][T14982] netlink: 'syz.1.3449': attribute type 2 has an invalid length. [ 855.684867][T14982] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3449'. [ 856.021008][T14990] delete_channel: no stack [ 856.577690][T15001] netlink: 'syz.3.3454': attribute type 2 has an invalid length. [ 856.594213][T15001] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3454'. [ 862.020855][T15017] netlink: 'syz.0.3460': attribute type 10 has an invalid length. [ 862.327607][ T1111] Bluetooth: hci4: command 0x0406 tx timeout [ 862.520194][T15032] netlink: 209820 bytes leftover after parsing attributes in process `syz.5.3465'. [ 862.623833][T15033] delete_channel: no stack [ 865.698479][T15054] device syzkaller0 entered promiscuous mode [ 865.733019][T15054] netlink: 26 bytes leftover after parsing attributes in process `syz.0.3473'. [ 868.818848][T15061] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.3476'. [ 868.831408][T15062] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3474'. [ 868.956660][T15073] netlink: 'syz.1.3478': attribute type 10 has an invalid length. [ 868.993139][T15078] FAULT_INJECTION: forcing a failure. [ 868.993139][T15078] name failslab, interval 1, probability 0, space 0, times 0 [ 869.006383][T15078] CPU: 1 PID: 15078 Comm: syz.5.3482 Not tainted syzkaller #0 [ 869.013894][T15078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 869.023982][T15078] Call Trace: [ 869.027301][T15078] [ 869.030260][T15078] dump_stack_lvl+0x188/0x250 [ 869.034981][T15078] ? lock_chain_count+0x20/0x20 [ 869.039875][T15078] ? show_regs_print_info+0x20/0x20 [ 869.045103][T15078] ? load_image+0x400/0x400 [ 869.049645][T15078] ? sctp_get_port_local+0x332/0x1510 [ 869.055080][T15078] should_fail+0x38c/0x4c0 [ 869.059531][T15078] should_failslab+0x5/0x20 [ 869.064067][T15078] slab_pre_alloc_hook+0x51/0xc0 [ 869.069030][T15078] ? sctp_get_port_local+0x6fc/0x1510 [ 869.074447][T15078] kmem_cache_alloc+0x3d/0x290 [ 869.079246][T15078] sctp_get_port_local+0x6fc/0x1510 [ 869.084477][T15078] ? __lock_acquire+0x7d10/0x7d10 [ 869.089548][T15078] ? sctp_do_bind+0x990/0x990 [ 869.094262][T15078] ? sctp_bind_addr_match+0x249/0x260 [ 869.099670][T15078] sctp_do_bind+0x555/0x990 [ 869.104226][T15078] sctp_connect_new_asoc+0x266/0x6a0 [ 869.109553][T15078] ? __sctp_connect+0xd80/0xd80 [ 869.114438][T15078] ? __local_bh_enable_ip+0x136/0x1c0 [ 869.119851][T15078] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 869.125433][T15078] ? security_sctp_bind_connect+0x85/0xb0 [ 869.131206][T15078] sctp_sendmsg+0x158d/0x2900 [ 869.135936][T15078] ? aa_sk_perm+0x7dc/0x910 [ 869.140470][T15078] ? sctp_getsockopt+0x8a0/0x8a0 [ 869.145443][T15078] ? aa_af_perm+0x340/0x340 [ 869.149973][T15078] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 869.156429][T15078] ? sock_rps_record_flow+0x17/0x3b0 [ 869.161760][T15078] ? inet_sendmsg+0xe5/0x2f0 [ 869.166403][T15078] ? inet_send_prepare+0x260/0x260 [ 869.171549][T15078] ____sys_sendmsg+0x5b7/0x8f0 [ 869.176370][T15078] ? __sys_sendmsg_sock+0x30/0x30 [ 869.181441][T15078] ? import_iovec+0x6f/0xa0 [ 869.185993][T15078] ___sys_sendmsg+0x236/0x2e0 [ 869.190709][T15078] ? __sys_sendmsg+0x2a0/0x2a0 [ 869.195517][T15078] ? trace_event_raw_event_lock+0x270/0x270 [ 869.201441][T15078] ? vfs_write+0x8b2/0xd60 [ 869.205914][T15078] __se_sys_sendmsg+0x1af/0x290 [ 869.210801][T15078] ? __x64_sys_sendmsg+0x80/0x80 [ 869.215773][T15078] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 869.221804][T15078] ? lockdep_hardirqs_on+0x94/0x140 [ 869.227039][T15078] do_syscall_64+0x4c/0xa0 [ 869.231481][T15078] ? clear_bhb_loop+0x30/0x80 [ 869.236191][T15078] ? clear_bhb_loop+0x30/0x80 [ 869.240885][T15078] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 869.246821][T15078] RIP: 0033:0x7f31f6fdde59 [ 869.251262][T15078] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 869.270892][T15078] RSP: 002b:00007f31f5237028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 869.279331][T15078] RAX: ffffffffffffffda RBX: 00007f31f7256fa0 RCX: 00007f31f6fdde59 [ 869.287324][T15078] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000003 [ 869.295317][T15078] RBP: 00007f31f5237090 R08: 0000000000000000 R09: 0000000000000000 [ 869.303312][T15078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 869.311296][T15078] R13: 00007f31f7257038 R14: 00007f31f7256fa0 R15: 00007ffdb7621548 [ 869.319306][T15078] [ 869.379133][T15075] delete_channel: no stack [ 869.850563][T15095] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3485'. [ 870.333475][T15112] netlink: 'syz.3.3493': attribute type 25 has an invalid length. [ 870.367646][T15112] netlink: 'syz.3.3493': attribute type 9 has an invalid length. [ 870.393986][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.400447][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.410529][T15113] netlink: 'syz.3.3493': attribute type 25 has an invalid length. [ 870.430498][T15113] netlink: 'syz.3.3493': attribute type 9 has an invalid length. [ 873.215180][T15126] netlink: 'syz.3.3497': attribute type 10 has an invalid length. [ 873.229108][T15120] delete_channel: no stack [ 873.943726][T15151] netlink: 64535 bytes leftover after parsing attributes in process `syz.1.3504'. [ 874.193497][T15164] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3509'. [ 874.573563][T15166] delete_channel: no stack [ 875.135461][T15176] netlink: 'syz.2.3512': attribute type 10 has an invalid length. [ 877.422783][T15186] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.3516'. [ 877.588790][ T13] Bluetooth: hci0: command 0x0406 tx timeout [ 877.595691][T15195] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.3517'. [ 878.313870][T15201] device wlan1 entered promiscuous mode [ 878.513310][T15214] netlink: 'syz.3.3525': attribute type 7 has an invalid length. [ 878.532870][T15211] delete_channel: no stack [ 878.539609][T15217] netlink: 'syz.3.3525': attribute type 7 has an invalid length. [ 878.723105][T15226] netlink: 'syz.3.3529': attribute type 10 has an invalid length. [ 881.787399][T15247] netlink: 199824 bytes leftover after parsing attributes in process `syz.5.3533'. [ 882.002131][T15256] delete_channel: no stack [ 882.049832][T15268] netlink: 'syz.3.3541': attribute type 1 has an invalid length. [ 882.455648][T15276] netlink: 'syz.0.3545': attribute type 10 has an invalid length. [ 885.406623][T15298] IPv6: NLM_F_CREATE should be specified when creating new route [ 885.545193][T15298] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 885.552640][T15298] IPv6: NLM_F_CREATE should be set when creating new route [ 885.560066][T15298] IPv6: NLM_F_CREATE should be set when creating new route [ 885.567393][T15298] IPv6: NLM_F_CREATE should be set when creating new route [ 885.624391][T15303] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 886.185488][T15297] delete_channel: no stack [ 886.370679][T15323] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 886.546656][T15344] netlink: 'syz.1.3558': attribute type 1 has an invalid length. [ 886.577054][T15344] netlink: 180900 bytes leftover after parsing attributes in process `syz.1.3558'. [ 886.895209][T15357] netlink: 'syz.3.3562': attribute type 10 has an invalid length. [ 887.044002][T15360] C: renamed from team_slave_0 [ 887.746219][T15369] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.3565'. [ 889.717284][T15360] netlink: 'syz.2.3564': attribute type 2 has an invalid length. [ 889.732909][T15360] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3564'. [ 889.747820][T15360] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 890.070855][T15371] delete_channel: no stack [ 890.164920][T15384] netlink: 'syz.0.3568': attribute type 10 has an invalid length. [ 890.177193][T15384] team0: Device geneve1 is up. Set it down before adding it as a team port [ 890.205779][T15387] FAULT_INJECTION: forcing a failure. [ 890.205779][T15387] name failslab, interval 1, probability 0, space 0, times 0 [ 890.280259][T15387] CPU: 0 PID: 15387 Comm: syz.1.3570 Not tainted syzkaller #0 [ 890.287800][T15387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 890.297883][T15387] Call Trace: [ 890.301193][T15387] [ 890.304157][T15387] dump_stack_lvl+0x188/0x250 [ 890.308851][T15387] ? show_regs_print_info+0x20/0x20 [ 890.314062][T15387] ? load_image+0x400/0x400 [ 890.318578][T15387] ? __might_sleep+0xf0/0xf0 [ 890.323187][T15387] ? __lock_acquire+0x7d10/0x7d10 [ 890.328231][T15387] ? netlink_insert+0xe95/0x11f0 [ 890.333196][T15387] should_fail+0x38c/0x4c0 [ 890.337645][T15387] should_failslab+0x5/0x20 [ 890.342160][T15387] slab_pre_alloc_hook+0x51/0xc0 [ 890.347108][T15387] kmem_cache_alloc_node+0x47/0x2d0 [ 890.352319][T15387] ? __alloc_skb+0xf4/0x750 [ 890.356846][T15387] __alloc_skb+0xf4/0x750 [ 890.361203][T15387] netlink_sendmsg+0x654/0xbe0 [ 890.365987][T15387] ? netlink_getsockopt+0x570/0x570 [ 890.371198][T15387] ? aa_sock_msg_perm+0x94/0x150 [ 890.376154][T15387] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 890.381458][T15387] ? security_socket_sendmsg+0x7c/0xa0 [ 890.386932][T15387] ? netlink_getsockopt+0x570/0x570 [ 890.392141][T15387] ____sys_sendmsg+0x5b7/0x8f0 [ 890.396932][T15387] ? __sys_sendmsg_sock+0x30/0x30 [ 890.401988][T15387] ? import_iovec+0x6f/0xa0 [ 890.406512][T15387] ___sys_sendmsg+0x236/0x2e0 [ 890.411212][T15387] ? __sys_sendmsg+0x2a0/0x2a0 [ 890.416005][T15387] ? vfs_write+0x8b2/0xd60 [ 890.420459][T15387] __se_sys_sendmsg+0x1af/0x290 [ 890.425334][T15387] ? __x64_sys_sendmsg+0x80/0x80 [ 890.430289][T15387] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 890.436312][T15387] ? lockdep_hardirqs_on+0x94/0x140 [ 890.441527][T15387] do_syscall_64+0x4c/0xa0 [ 890.445959][T15387] ? clear_bhb_loop+0x30/0x80 [ 890.450647][T15387] ? clear_bhb_loop+0x30/0x80 [ 890.455342][T15387] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 890.461245][T15387] RIP: 0033:0x7faf72a07e59 [ 890.465682][T15387] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 890.485299][T15387] RSP: 002b:00007faf70c61028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 890.493735][T15387] RAX: ffffffffffffffda RBX: 00007faf72c80fa0 RCX: 00007faf72a07e59 [ 890.501720][T15387] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 890.509700][T15387] RBP: 00007faf70c61090 R08: 0000000000000000 R09: 0000000000000000 [ 890.517687][T15387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 890.525673][T15387] R13: 00007faf72c81038 R14: 00007faf72c80fa0 R15: 00007ffd88a051a8 [ 890.533662][T15387] [ 890.607809][T15396] netlink: 'syz.0.3574': attribute type 10 has an invalid length. [ 890.647966][T15396] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3574'. [ 890.662043][T15394] netlink: 209592 bytes leftover after parsing attributes in process `syz.3.3573'. [ 890.673573][T15396] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 890.698905][T15399] netlink: 'syz.0.3574': attribute type 40 has an invalid length. [ 890.901480][T15406] netdevsim netdevsim1: Direct firmware load for Ö failed with error -2 [ 890.942224][T15406] netdevsim netdevsim1: Falling back to sysfs fallback for: Ö [ 891.035367][T15408] device lo entered promiscuous mode [ 892.060033][T15423] netlink: 'syz.5.3582': attribute type 10 has an invalid length. [ 892.939897][T13459] Bluetooth: hci2: command 0x0406 tx timeout [ 893.171062][T15426] delete_channel: no stack [ 894.399048][T15441] netlink: 'syz.5.3587': attribute type 10 has an invalid length. [ 894.422811][T15441] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 894.448360][T15441] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 894.461755][T15441] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 894.485998][T15441] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 894.512194][T15441] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 894.546176][T15441] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 894.559262][T15441] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 894.568752][T15441] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 894.584972][T15441] team0: Port device geneve1 added [ 894.733053][T15457] FAULT_INJECTION: forcing a failure. [ 894.733053][T15457] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 894.770280][T15457] CPU: 1 PID: 15457 Comm: syz.5.3593 Not tainted syzkaller #0 [ 894.777924][T15457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 894.788007][T15457] Call Trace: [ 894.791318][T15457] [ 894.794278][T15457] dump_stack_lvl+0x188/0x250 [ 894.799002][T15457] ? show_regs_print_info+0x20/0x20 [ 894.804278][T15457] ? load_image+0x400/0x400 [ 894.808835][T15457] ? __lock_acquire+0x7d10/0x7d10 [ 894.813918][T15457] should_fail+0x38c/0x4c0 [ 894.818378][T15457] _copy_to_user+0x2e/0x130 [ 894.822919][T15457] simple_read_from_buffer+0xe3/0x150 [ 894.828349][T15457] proc_fail_nth_read+0x1a6/0x220 [ 894.833408][T15457] ? proc_fault_inject_write+0x310/0x310 [ 894.839105][T15457] ? fsnotify_perm+0x254/0x560 [ 894.843907][T15457] ? proc_fault_inject_write+0x310/0x310 [ 894.849578][T15457] vfs_read+0x301/0xd60 [ 894.853767][T15457] ? lock_chain_count+0x20/0x20 [ 894.858654][T15457] ? kernel_read+0x1e0/0x1e0 [ 894.863294][T15457] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 894.869503][T15457] ? lockdep_hardirqs_on+0x94/0x140 [ 894.874735][T15457] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 894.880929][T15457] ksys_read+0x152/0x260 [ 894.885213][T15457] ? vfs_write+0xd60/0xd60 [ 894.889663][T15457] ? syscall_enter_from_user_mode+0x2a/0x70 [ 894.895603][T15457] do_syscall_64+0x4c/0xa0 [ 894.900054][T15457] ? clear_bhb_loop+0x30/0x80 [ 894.904765][T15457] ? clear_bhb_loop+0x30/0x80 [ 894.909475][T15457] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 894.915400][T15457] RIP: 0033:0x7f31f6f9e68e [ 894.919844][T15457] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 894.939487][T15457] RSP: 002b:00007f31f5236fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 894.947939][T15457] RAX: ffffffffffffffda RBX: 00007f31f52376c0 RCX: 00007f31f6f9e68e [ 894.955952][T15457] RDX: 000000000000000f RSI: 00007f31f52370a0 RDI: 0000000000000004 [ 894.963959][T15457] RBP: 00007f31f5237090 R08: 0000000000000000 R09: 0000000000000000 [ 894.971961][T15457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 894.980102][T15457] R13: 00007f31f7257038 R14: 00007f31f7256fa0 R15: 00007ffdb7621548 [ 894.988129][T15457] [ 895.592546][T15468] netlink: 'syz.3.3598': attribute type 10 has an invalid length. [ 895.791518][T15464] netlink: 'syz.0.3596': attribute type 10 has an invalid length. [ 896.218137][T15474] FAULT_INJECTION: forcing a failure. [ 896.218137][T15474] name failslab, interval 1, probability 0, space 0, times 0 [ 896.231321][T15474] CPU: 1 PID: 15474 Comm: syz.2.3599 Not tainted syzkaller #0 [ 896.238827][T15474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 896.248926][T15474] Call Trace: [ 896.252235][T15474] [ 896.255191][T15474] dump_stack_lvl+0x188/0x250 [ 896.259898][T15474] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 896.266526][T15474] ? show_regs_print_info+0x20/0x20 [ 896.271758][T15474] ? load_image+0x400/0x400 [ 896.276310][T15474] should_fail+0x38c/0x4c0 [ 896.280791][T15474] should_failslab+0x5/0x20 [ 896.285328][T15474] slab_pre_alloc_hook+0x51/0xc0 [ 896.290299][T15474] ? dst_alloc+0x101/0x160 [ 896.294753][T15474] kmem_cache_alloc+0x3d/0x290 [ 896.299551][T15474] ? ipv6_sysctl_rtcache_flush+0xf0/0xf0 [ 896.305224][T15474] dst_alloc+0x101/0x160 [ 896.309511][T15474] ip6_pol_route+0x91e/0x12c0 [ 896.314236][T15474] ? trace_fib6_table_lookup+0x1b0/0x1b0 [ 896.319905][T15474] ? register_lock_class+0xc0/0x890 [ 896.325164][T15474] fib6_rule_lookup+0x33c/0x5d0 [ 896.330053][T15474] ? ip6_route_output_flags_noref+0x390/0x390 [ 896.336155][T15474] ? fib6_lookup+0x2d0/0x2d0 [ 896.340788][T15474] ? dev_get_by_index_rcu+0xf0/0x110 [ 896.346117][T15474] ? __ipv6_addr_type+0x108/0x2f0 [ 896.351182][T15474] ? ip6_route_output_flags_noref+0x230/0x390 [ 896.357294][T15474] ip6_route_output_flags+0xbf/0x300 [ 896.362630][T15474] ip6_dst_lookup_tail+0x1a9/0x1280 [ 896.367872][T15474] ? rcu_lock_release+0x5/0x20 [ 896.372673][T15474] ? ip6_dst_lookup+0x60/0x60 [ 896.377383][T15474] ? __lock_acquire+0x7d10/0x7d10 [ 896.382473][T15474] ? sk_dst_check+0x2e4/0x430 [ 896.387194][T15474] ip6_sk_dst_lookup_flow+0x70e/0x9b0 [ 896.392618][T15474] udpv6_sendmsg+0x1a9b/0x2650 [ 896.397428][T15474] ? udpv6_sendmsg+0x2650/0x2650 [ 896.402415][T15474] ? udp_v6_early_demux+0xec0/0xec0 [ 896.407665][T15474] ? rcu_nmi_exit+0x6f/0xf0 [ 896.412230][T15474] ? __local_bh_enable_ip+0x136/0x1c0 [ 896.417636][T15474] ? lockdep_hardirqs_on+0x94/0x140 [ 896.422871][T15474] ? __local_bh_enable_ip+0x136/0x1c0 [ 896.428301][T15474] ? _local_bh_enable+0xa0/0xa0 [ 896.433209][T15474] ? do_raw_spin_unlock+0x11d/0x230 [ 896.438444][T15474] ? inet_send_prepare+0x1af/0x260 [ 896.443600][T15474] ? inet_send_prepare+0x1af/0x260 [ 896.448757][T15474] ? inet6_sendmsg+0x5b/0xd0 [ 896.453397][T15474] ? inet6_compat_ioctl+0x3c0/0x3c0 [ 896.458632][T15474] ____sys_sendmsg+0x5b7/0x8f0 [ 896.463444][T15474] ? __sys_sendmsg_sock+0x30/0x30 [ 896.468518][T15474] ? import_iovec+0x6f/0xa0 [ 896.473059][T15474] ___sys_sendmsg+0x236/0x2e0 [ 896.477787][T15474] ? __sys_sendmsg+0x2a0/0x2a0 [ 896.482629][T15474] ? vfs_write+0x8b2/0xd60 [ 896.487126][T15474] __se_sys_sendmsg+0x1af/0x290 [ 896.492103][T15474] ? __x64_sys_sendmsg+0x80/0x80 [ 896.497075][T15474] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 896.503107][T15474] ? lockdep_hardirqs_on+0x94/0x140 [ 896.508347][T15474] do_syscall_64+0x4c/0xa0 [ 896.512805][T15474] ? clear_bhb_loop+0x30/0x80 [ 896.517514][T15474] ? clear_bhb_loop+0x30/0x80 [ 896.522232][T15474] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 896.528163][T15474] RIP: 0033:0x7f155d398e59 [ 896.532614][T15474] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 896.552390][T15474] RSP: 002b:00007f155b5f2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 896.560849][T15474] RAX: ffffffffffffffda RBX: 00007f155d611fa0 RCX: 00007f155d398e59 [ 896.568862][T15474] RDX: 0000000020008810 RSI: 0000200000000480 RDI: 0000000000000003 [ 896.576865][T15474] RBP: 00007f155b5f2090 R08: 0000000000000000 R09: 0000000000000000 [ 896.584879][T15474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 896.592888][T15474] R13: 00007f155d612038 R14: 00007f155d611fa0 R15: 00007ffdd9298848 [ 896.600910][T15474] [ 898.125806][T15464] team0: Device wg1 is of different type [ 898.492559][T15497] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3605'. [ 898.529595][T15500] netlink: 'syz.2.3606': attribute type 17 has an invalid length. [ 898.574847][T15500] netlink: 'syz.2.3606': attribute type 16 has an invalid length. [ 898.652263][T15500] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3606'. [ 898.896693][T15511] netlink: 'syz.5.3610': attribute type 39 has an invalid length. [ 899.444857][T15510] delete_channel: no stack [ 902.595531][T15516] device syzkaller0 entered promiscuous mode [ 902.605873][T15531] netlink: 'syz.5.3615': attribute type 10 has an invalid length. [ 903.010008][T15549] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3621'. [ 903.193018][T15573] netlink: 'syz.3.3628': attribute type 10 has an invalid length. [ 903.285836][T15571] delete_channel: no stack [ 903.409429][T15578] FAULT_INJECTION: forcing a failure. [ 903.409429][T15578] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 903.472419][T15578] CPU: 1 PID: 15578 Comm: syz.1.3630 Not tainted syzkaller #0 [ 903.479963][T15578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 903.490077][T15578] Call Trace: [ 903.493398][T15578] [ 903.496361][T15578] dump_stack_lvl+0x188/0x250 [ 903.501097][T15578] ? show_regs_print_info+0x20/0x20 [ 903.506335][T15578] ? load_image+0x400/0x400 [ 903.510875][T15578] ? __lock_acquire+0x7d10/0x7d10 [ 903.515979][T15578] should_fail+0x38c/0x4c0 [ 903.520445][T15578] _copy_to_user+0x2e/0x130 [ 903.525001][T15578] simple_read_from_buffer+0xe3/0x150 [ 903.530424][T15578] proc_fail_nth_read+0x1a6/0x220 [ 903.535485][T15578] ? proc_fault_inject_write+0x310/0x310 [ 903.541153][T15578] ? fsnotify_perm+0x254/0x560 [ 903.545956][T15578] ? proc_fault_inject_write+0x310/0x310 [ 903.551627][T15578] vfs_read+0x301/0xd60 [ 903.555831][T15578] ? kernel_read+0x1e0/0x1e0 [ 903.560467][T15578] ? __fget_files+0x40f/0x480 [ 903.565181][T15578] ? mutex_lock_nested+0x17/0x20 [ 903.570165][T15578] ? __fdget_pos+0x2bf/0x370 [ 903.574787][T15578] ? ksys_read+0x71/0x260 [ 903.579151][T15578] ksys_read+0x152/0x260 [ 903.583435][T15578] ? vfs_write+0xd60/0xd60 [ 903.587907][T15578] ? lockdep_hardirqs_on+0x94/0x140 [ 903.593146][T15578] do_syscall_64+0x4c/0xa0 [ 903.597596][T15578] ? clear_bhb_loop+0x30/0x80 [ 903.602320][T15578] ? clear_bhb_loop+0x30/0x80 [ 903.607039][T15578] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 903.612966][T15578] RIP: 0033:0x7faf729c868e [ 903.617412][T15578] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 903.637061][T15578] RSP: 002b:00007faf70c60fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 903.645528][T15578] RAX: ffffffffffffffda RBX: 00007faf70c616c0 RCX: 00007faf729c868e [ 903.653537][T15578] RDX: 000000000000000f RSI: 00007faf70c610a0 RDI: 0000000000000004 [ 903.661543][T15578] RBP: 00007faf70c61090 R08: 0000000000000000 R09: 0000000000000000 [ 903.669552][T15578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 903.677567][T15578] R13: 00007faf72c81038 R14: 00007faf72c80fa0 R15: 00007ffd88a051a8 [ 903.685599][T15578] [ 904.013795][T15582] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.3631'. [ 906.508402][ T5498] unregister_netdevice: waiting for lo to become free. Usage count = 2 [ 906.733501][T15623] delete_channel: no stack