last executing test programs: 5.262738253s ago: executing program 1 (id=4712): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x98, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair(0x1, 0x1, 0x40009, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x2f, &(0x7f0000000400), 0xa5e) (async, rerun: 64) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000080000000000b100"/28], 0x48) (rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001000)={0x1f, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000fcffffff20000000800000008500000075000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a60000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$kcm(0x2, 0x5, 0x84) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000003c0)=[{0x10000002, 0x0, 0x0, 0x7}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, 0x0, 0x4000000) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async, rerun: 64) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async, rerun: 64) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffffffffffeab, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="28010062000000000001000000345646384455f1ea03dc0d4e374954e2576c6fce26325ab976759ef5accd928688f7970f57ffefd71cb399c078d179f2cf5e69b74bfe9575371fe47a4eb3a4b9ec2d184c752c8e0780551b638f5a5545"], 0xe}, 0x20000805) (async) socketpair$unix(0x1, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x128}, 0x0) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') (async) recvmsg$unix(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)}, 0x40010001) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1}, 0x0, &(0x7f0000000040)}, 0x20) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="850000000000000018100000", @ANYRES32, @ANYBLOB="0000000000000000950000000000000045"], 0x0, 0x7}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') r7 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) close(r7) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000080)) 5.028521576s ago: executing program 1 (id=4715): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x14, &(0x7f0000000000), 0x4) r1 = socket$kcm(0x10, 0xf, 0x0) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="5c00000011006bec9e3be35c6e17aa31076b876c1d0000007ea20864160af3653c001ac004000202080002000a0001001400000007b556a737c160f9555b4755bb05251e618200000051f60a84c9f4d4938037e786a6", 0x56}, {&(0x7f0000000140)="7e3f15d6d2ee", 0x6}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001680)={r2, 0x0, 0x0, 0x0, &(0x7f0000001440), 0x0, 0xf28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x50) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r2, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x5d31, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x401}, 0x806, 0x0, 0x0, 0x5, 0x1, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x42, 0x40000040, 0xc2, 0x1}, 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x114905, 0x7, 0x2, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) socket$kcm(0x2, 0x5, 0x84) socket$kcm(0x10, 0x2, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000160080ff0000000000000000850000002c00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/189, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2e}, 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xc, &(0x7f0000000100)=r4, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f0, &(0x7f0000000080)) 4.998697366s ago: executing program 0 (id=4717): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000a00)=""/221, 0xdd}, {&(0x7f0000000f80)=""/272, 0x110}, {&(0x7f0000001880)=""/4054, 0xfd6}, {&(0x7f00000014c0)=""/260, 0x104}, {&(0x7f0000000400)=""/183, 0xb7}, {&(0x7f0000000340)=""/176, 0xb0}, {&(0x7f0000000e80)=""/246, 0xf6}, {&(0x7f0000000bc0)=""/76, 0x4c}, {&(0x7f00000006c0)=""/180, 0xb4}, {&(0x7f00000005c0)=""/158, 0x9e}, {&(0x7f00000002c0)=""/78, 0x4e}, {&(0x7f0000000000)=""/62, 0x3e}, {&(0x7f0000000880)=""/65, 0x41}, {&(0x7f0000000780)=""/224, 0xe0}, {&(0x7f0000000900)=""/182, 0xb6}, {&(0x7f0000000d00)=""/242, 0xf2}], 0x10, 0x0, 0x0, 0xffffe000}, 0x0) 4.915381388s ago: executing program 2 (id=4719): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000080000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x40, 0x0, 0x8, 0x0, 0x0, 0x61000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0}, 0xa100, 0xc8, 0x1000003, 0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0x7, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa66a6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340), 0xc}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x40, 0x81}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) close(r2) recvmsg$unix(r3, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r7, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f0000000180), 0x127) write$cgroup_type(r5, &(0x7f0000000500), 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa35f0"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x94, 0x0, 0x2, 0xffffffff}, {0x6}]}) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', r5, 0x4000, r4}, 0x18) 4.204531518s ago: executing program 0 (id=4722): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4008, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=0xffffffffffffffff, 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000140)={r3}, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000000)=0x6) ioctl$TUNSETOFFLOAD(r0, 0x40047438, 0x17) 4.027661721s ago: executing program 2 (id=4725): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[], &(0x7f0000000b80)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x23}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x2, 0x5, 0x84) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0x1, 0x58, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb01001800000000c8a0260000003000000030000000063300000600000003000085050000000900000001000000100000000d0000000400001001000000090000000100000018000000006100"], &(0x7f0000000440)=""/182, 0x4e, 0xb6, 0x1, 0x1ff, 0x10000}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00008a590e4300000000000300000000000000", @ANYRES32=0x1, @ANYBLOB="0600"/20, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="02000000000000000400"/28], 0x50) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0xe, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="3eaa03108946519d7d010000ba664fede0a500fd05000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000002c0)=@o_path={&(0x7f0000000280)='./file0\x00', r1, 0x4000, r1}, 0x18) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={r5}, 0xc) r6 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff73, 0x0, @perf_bp={&(0x7f0000000b40), 0xc}, 0x0, 0x1, 0x0, 0x8, 0x2, 0xfffffffc, 0xf, 0x0, 0x2}, 0x0, 0xf, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000ac0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000a80)='%-5lx \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000b00)={r7}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21bef5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a835701bea8240399c56ce8f58df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f9ac2f7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63bb20e1e0469f7615f67a9218cbace38f5236821314f76302b98afa93044b83989339ca10e6ae30e70e17a82f03e915b8425e8e7a91614306d2ae0bc3550d856f2d7293672b5673d264fc886b0c8bdf436a0fcd21bf9da7bdca98e34cd6e59b0a7ce4ba1b466561aaa35448dff47bb1d7df23d467689a6669e4300d5acf12e4d0b35abf91569f605b2f6df0d861"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r8) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0x18, &(0x7f0000000780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x107a655, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r10, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x8000, 0x2, 0x0, 0x1}, {0xffffffe, 0x8000000, 0x0, 0xb}], 0x10, 0xa2b}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) close(r12) recvmsg$unix(r11, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2d, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x64, &(0x7f0000000000)=r13, 0x10) r14 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r16) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0x10, &(0x7f00000006c0)=@raw=[@exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r13}}, @map_val={0x18, 0xb, 0x2, 0x0, r13, 0x0, 0x0, 0x0, 0x6}], &(0x7f0000000740)='syzkaller\x00', 0x5, 0xe3, &(0x7f0000000780)=""/227, 0x41000, 0x0, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x2, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[r13], 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002ac0)={r13, 0x0, 0x100c, 0x1b, &(0x7f0000002b40)="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", &(0x7f0000002980)=""/27, 0xfe, 0x0, 0x7, 0x89, &(0x7f00000029c0)="e06392ea69293b", &(0x7f0000002a00)="82723f02679a06cf083046884fb391f8424549b844938ee21b5d1e46404c44e7dcf0ef89663d2d97e45f1735791ae5207f3275cef0b593c93dd82f036a2c610928bde7303ce779ac79d34e5cb2cbb19bbe5136bc61796b64c495757497961b7f55d0cf5c5179c34a47a3ed15224aa219dcf4c5be75a351df1026cbfabcfdbe16adea94b160994eac59", 0x2, 0x0, 0x85}, 0x50) recvmsg$unix(r15, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x118feeebb424eaac) setsockopt$sock_attach_bpf(r14, 0x84, 0x64, &(0x7f0000000000), 0x10) 4.017565301s ago: executing program 1 (id=4726): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x5450, 0xf0ff1f00000000) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2d1}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20061, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_bp={0x0}, 0x10000, 0x100, 0x6}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x3) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x0, 0x0, 0x0, 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x40f00, 0x0, '\x00', 0x0, @sock_ops, r3}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="12000000070000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r4}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r6, &(0x7f00000003c0)="19cca238", &(0x7f0000000540)=""/239}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x11, 0x16, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, r3}, 0x94) 3.980936121s ago: executing program 3 (id=4727): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0xfffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000090000000800000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2}, &(0x7f0000001d80), &(0x7f0000001d40)=r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r2, &(0x7f00000006c0), 0x0}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x40f00, 0x15}, 0x94) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socket$kcm(0x2b, 0x1, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000a80)={&(0x7f0000000200)="b5b6499030c9a859b890a9f4b1390f28b59dbcaec415", &(0x7f0000000500)=""/157, &(0x7f0000000780)="7b454da0f79c586e05e95ab75cbd96c2eeb91fe988911c6003870513b46ec46941042af093a5dc49809b2017eae6a98678ec14d61861dc045d622f8ced4cafb251a48b9c12fa5b33c5cdeb6852ffb7cd9b8948b8281369771e5d88fff1dce74982f79eff51307f280af2169feb4b2c1b1822981fdeeb074c91236d25b22d037f529183a279c22f4bfa0cec0d779d3aea6b2baff6bb6157a50b5f08a02f489fa06dbcc1c411725b82c79c2a1a1bf0a403258653bd390910fa66ca5431dedc791e9c5466796187ad3b5265e2c7c8855d204bb38580ab7915a27e88cabd18ff", &(0x7f0000000880)="8016712a3ca7e47c9b9542de5035beb81e478eafc67006348c6abf435155f6ac296ddf36e0f02962665b3a9d198ee6994de8a02c2ac4df31f9918e78e8e732c8882a8e731b963f3733d764aa0fcaefe516cef57da2eb776fd485a42739137207ccb250bc51f36c418b48320a1a2fed18", 0x7, 0xffffffffffffffff, 0x4}, 0x38) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f93d24fc60", 0x14}], 0x1}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) r7 = socket$kcm(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r6}, &(0x7f0000000080), &(0x7f00000001c0)=r7}, 0x20) socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000100), 0x4) socket$kcm(0xa, 0x5, 0x0) 3.980452751s ago: executing program 0 (id=4728): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000200), 0x12) socket$kcm(0xa, 0x1, 0x106) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xb, [@struct={0x4, 0x1, 0x0, 0x4, 0x1, 0x2, [{0xa, 0x3, 0x1000a00}]}, @fwd={0x1}]}, {0x0, [0x0, 0x30, 0x2e, 0x61, 0x30, 0x61, 0x61, 0x61, 0x61]}}, 0x0, 0x47}, 0x28) 3.833772303s ago: executing program 1 (id=4729): r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x19, &(0x7f0000000000), 0x4) recvmsg(r0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f3317000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4004010) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9, 0x6a, 0x9, 0x6, 0x0, 0xb9, 0x800, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000040), 0x8}, 0x158, 0x2000000000000, 0x7, 0x1, 0xa740, 0x5, 0x6, 0x0, 0x8, 0x0, 0x9}, 0x0, 0x10, 0xffffffffffffffff, 0x1) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@generic={&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x8}, 0x18) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x3) 3.824905554s ago: executing program 2 (id=4730): ioctl$TUNSETIFF(0xffffffffffffffff, 0x5452, &(0x7f0000000180)={'syzkaller0\x00'}) r0 = socket$kcm(0x2, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000240)=ANY=[@ANYRESOCT, @ANYBLOB='E'], 0x31) setsockopt$sock_attach_bpf(r0, 0x1, 0xf, &(0x7f00000002c0), 0x4) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0xa, 0x0}, 0x48000) r3 = socket$kcm(0x15, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x114, 0x6, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x44, &(0x7f0000000640), 0x4) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b40200000000f21f61118c0000000000"], &(0x7f0000000380)='GPL\x00', 0x7, 0xc3, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f00000003c0)={0x5, 0x80, 0x81, 0x4, 0x0, 0x5, 0x0, 0x4cce, 0x80, 0xe, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1, 0x2, @perf_config_ext={0xffffffffffff6805}, 0x1100, 0x8000000000000000, 0x2, 0x5, 0x2, 0xe000000, 0xffff, 0x0, 0x3, 0x0, 0x7}) getpid() syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x7ffffffffffffffe}, 0x0, 0x0, 0xc2bb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x208}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=0x0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r4}, &(0x7f0000000080), &(0x7f0000000200)=r5}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) 3.3775977s ago: executing program 0 (id=4731): ioctl$TUNSETIFF(0xffffffffffffffff, 0x5452, &(0x7f0000000180)={'syzkaller0\x00'}) r0 = socket$kcm(0x2, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000240)=ANY=[@ANYRESOCT, @ANYBLOB='E'], 0x31) setsockopt$sock_attach_bpf(r0, 0x1, 0xf, &(0x7f00000002c0), 0x4) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0xa, 0x0}, 0x48000) r3 = socket$kcm(0x15, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x114, 0x6, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x44, &(0x7f0000000640), 0x4) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000380)='GPL\x00', 0x7, 0xc3, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f00000003c0)={0x5, 0x80, 0x81, 0x4, 0x0, 0x5, 0x0, 0x4cce, 0x80, 0xe, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1, 0x2, @perf_config_ext={0xffffffffffff6805}, 0x1100, 0x8000000000000000, 0x2, 0x5, 0x2, 0xe000000, 0xffff, 0x0, 0x3, 0x0, 0x7}) getpid() syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x7ffffffffffffffe}, 0x0, 0x0, 0xc2bb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x208}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=0x0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r4}, &(0x7f0000000080), &(0x7f0000000200)=r5}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) 3.37713401s ago: executing program 1 (id=4732): ioctl$TUNSETIFF(0xffffffffffffffff, 0x5452, &(0x7f0000000180)={'syzkaller0\x00'}) r0 = socket$kcm(0x2, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000240)=ANY=[@ANYRESOCT, @ANYBLOB='E'], 0x31) setsockopt$sock_attach_bpf(r0, 0x1, 0xf, &(0x7f00000002c0), 0x4) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0xa, 0x0}, 0x48000) r3 = socket$kcm(0x15, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x114, 0x6, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x44, &(0x7f0000000640), 0x4) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b40200000000f21f61118c0000000000"], &(0x7f0000000380)='GPL\x00', 0x7, 0xc3, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f00000003c0)={0x5, 0x80, 0x81, 0x4, 0x0, 0x5, 0x0, 0x4cce, 0x80, 0xe, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1, 0x2, @perf_config_ext={0xffffffffffff6805}, 0x1100, 0x8000000000000000, 0x2, 0x5, 0x2, 0xe000000, 0xffff, 0x0, 0x3, 0x0, 0x7}) getpid() syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x7ffffffffffffffe}, 0x0, 0x0, 0xc2bb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x208}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=0x0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r4}, &(0x7f0000000080), &(0x7f0000000200)=r5}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) 2.267877036s ago: executing program 3 (id=4734): socket$kcm(0x10, 0x400000002, 0x0) (async) socket$kcm(0x10, 0x400000002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)}], 0x1, 0x0, 0x0, 0x7400}, 0x40) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)}], 0x1, 0x0, 0x0, 0x7400}, 0x40) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0) (async) ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1bf274aa22d103000000ffffffff000000000004"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) (async) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[], 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x14, &(0x7f0000000040), 0x3b) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001240)=ANY=[], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="1200000002000000080000000100000000000000", @ANYRES32, @ANYBLOB="000000aa00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001680)={0xe, 0xe, &(0x7f0000001240)=ANY=[@ANYRES8=r4, @ANYRES32=r5, @ANYRESHEX=r4], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000240)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f0000001740)=ANY=[@ANYBLOB="18000000d1b48f000000000000000100000018110000", @ANYRESHEX=r1, @ANYBLOB="0000000000000000b702000054000001b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000c3090000e1000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000001340)='syzkaller\x00', 0x7, 0x1005, &(0x7f0000001f00)=""/4101, 0x40f00, 0xd}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f0000001740)=ANY=[@ANYBLOB="18000000d1b48f000000000000000100000018110000", @ANYRESHEX=r1, @ANYBLOB="0000000000000000b702000054000001b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000c3090000e1000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000001340)='syzkaller\x00', 0x7, 0x1005, &(0x7f0000001f00)=""/4101, 0x40f00, 0xd}, 0x94) r6 = socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r6, &(0x7f0000001ec0)={&(0x7f0000001a00)=@isdn={0x22, 0x1, 0x2, 0x2, 0xa}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000001a80)="1425002b7e8ce9c462a77df9700ad9337856264f8f5b34ef0f94f22e2e16c0ddb8c2b7a9302ba011ab5c200d9add4a452924a2ec812960bc89c0b7ce9cc5f4d233c1a4f041d07699cdb320858eda148a05ddfa49040e65d9dcf18f227875c57a9fc52148e8ee5da3517fc9fad729098768852767432e635381a94b57d663521e80befce9bc3a7052cd56ee30102e600ef7dbb47c783605888acc7362e74627016a7e025ffbea3d", 0xa7}, {&(0x7f0000001b40)="5145a1077c613b75ba53676ee38f742b1326aeec31e2da64a388f889fc09123b8d6570d53b52c5f873fa71c6bbbca9e486dc1b019cb78364ed760ac58deec22c636da51df0ad6687d32f45b39b0d2f3b72e792c37c50fbe0d6cdf8f7a21e0ff31a542ca5b4d7f38d31f4dff4a26d70ff8e1c2804cac4284ed9d8c73a827dc41545833fc0c0e20788467a0b8f6257bfe267596277b8e6ebab190e01e9aad9d65638edbeb126e448517bf61e2e26dd941100724620cb9f", 0xb6}, {&(0x7f0000001c40)="a045420460311f80168f2348d5f3c66f2d9ac4bd", 0x14}], 0x3, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], 0x128}, 0x40000) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, &(0x7f0000000400)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86%\x7f\xec\xb2\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc80xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) 1.780089384s ago: executing program 4 (id=4737): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000080000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x40, 0x0, 0x8, 0x0, 0x0, 0x61000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0}, 0xa100, 0xc8, 0x1000003, 0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0x7, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa66a6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340), 0xc}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x40, 0x81}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) close(r2) recvmsg$unix(r3, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r7, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f0000000180), 0x127) write$cgroup_type(r5, &(0x7f0000000500), 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa35f0"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x94, 0x0, 0x2, 0xffffffff}, {0x6}]}) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', r5, 0x4000, r4}, 0x18) 1.779398744s ago: executing program 3 (id=4747): socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) 1.562499347s ago: executing program 3 (id=4738): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000021c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x42, '\x00', 0x0, @fallback=0x15}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000002c0), &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xee, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x58, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) socket$kcm(0xa, 0x2, 0x3a) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xffffffff, 0xffffffff, 0xfffffffe}, 0x1b) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x2}, 0x0, 0x0, 0xfffffffd, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8923, &(0x7f0000000800)={'pim6reg1\x00', @link_local={0x1, 0x35}}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="09000000080000000080000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r5}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 870.983647ms ago: executing program 3 (id=4739): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x1}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x1}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x0, 0x2) (async) socket$kcm(0x21, 0x0, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x8, 0x2}, 0x80, 0x0}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb10001800000000000000240000002400000002000000000000000000000203000000070000000000000c0500000000000000000000020000000000001d1b135e07f16c6132358796629dd42ebd886fcb22c56d71901989968420"], 0x0, 0x3e, 0x0, 0x1001, 0x0, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x0, 0x2b, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0xc}, 0x94) socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000140), 0x6}, 0x100, 0x0, 0x800000, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r4) (async) close(r4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r4, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @local}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080)) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080)) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) (async) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000004100)={0x5, 0x80, 0x0, 0x6, 0x87, 0x0, 0x0, 0x1, 0x100, 0x5, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x9, 0x2, @perf_config_ext={0x0, 0x8}, 0x11098, 0xfffffffffffffffc, 0x465, 0x5, 0x0, 0x3, 0xc, 0x0, 0xa, 0x0, 0x10000}, 0x0, 0x0, r1, 0x0) (async) perf_event_open(&(0x7f0000004100)={0x5, 0x80, 0x0, 0x6, 0x87, 0x0, 0x0, 0x1, 0x100, 0x5, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x9, 0x2, @perf_config_ext={0x0, 0x8}, 0x11098, 0xfffffffffffffffc, 0x465, 0x5, 0x0, 0x3, 0xc, 0x0, 0xa, 0x0, 0x10000}, 0x0, 0x0, r1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="e1dece606dd3d550f172a8a38dbe39e74501001724ea3796bec0d8e8c26c417b038c7bdcce07db36f2f3ab7eeb61708659d4aa8aa0a03c857102fe1b1b9cb55db33e1a9201129a23c565c47ea49f2b7edbea62cb775cf868b5b5222c5bff2e4a748b7f97522e014d18b6aa56d19896476cc241c3ff054a642ff979c68ccebd5a965dc0fcd566a12d55838ffe2c"], 0x48) r6 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000580)=ANY=[@ANYBLOB="364000001a00913a09b51bcb3cc5a05f0a"], 0xfe33) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff001, 0x20, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp={0x0, 0x6}, 0x100000, 0x200, 0xffffffff, 0x0, 0x9, 0x2c, 0x3, 0x0, 0x0, 0x0, 0x100000032}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r7 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff001, 0x20, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp={0x0, 0x6}, 0x100000, 0x200, 0xffffffff, 0x0, 0x9, 0x2c, 0x3, 0x0, 0x0, 0x0, 0x100000032}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, 0xffffffffffffffff) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, 0xffffffffffffffff) recvmsg$kcm(r6, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x222) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x1c, &(0x7f00000004c0)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000181100", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 772.509018ms ago: executing program 4 (id=4740): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) socketpair(0xb, 0x1, 0x6, &(0x7f00000007c0)) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f0000000180)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="27030202590400200000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada300c9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2c236205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0xfeb9}, {&(0x7f0000000280)="fe112162c63e6da8bc8432294ef18af53cc330a62a2c7035246635093ba4d30fcf19a90804f04a10939db8f4e13069cda6d167bf1b68c94d8d694d6ad1a4d51a715975560ad48770706eb1b88d021e1119f2eb75275cfe77f862368649be0f7aff5e7826729816e3d3e7986d9434f891c71ca6e4210c6757083cfd8e732048c504f28b6d309fc129ed8eb5a82e224eb648f90134d1d315977c6ea360a7fece4baa3dd7dcc970759f29df0e86469e954e2b050e87b203ca27a2a519b7555c3b73f2681d49442d9647ff5ea64110cc5020fdeafe53a7d8be70f3260816bc376bcdc5352771fa55d9733e27730ec7103520e8359c78edd21ee6c68feb3685a55722f5da09ffe8ba9f05081a8d214156376f99906245f2f390ad717979d98f0574f8c5b52dcc2fa494f461be6c2560ddbaafb80c5b4583cbe56d24f14ab78fd718947077ea736251c7b8eee267267534c84daa6f095e94bfb85986a03ddea362cc7e6682884e710727c1163cd4f336c13b844605b7a815fe39e43bd0d2e414410a82958455b8a6bd9194c631d66295675fed64c04107a595c421111a3af6e9fadab5c9", 0x1a1}, {&(0x7f0000000540)="6fe4dd9eeb85271de1b87ef9440284", 0xf}], 0x4}, 0x200400c4) 733.089529ms ago: executing program 0 (id=4741): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, 0x0, 0x5}, 0x94) socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x8601, 0x2000000, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xd, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x108, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) r0 = socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x9, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x61, 0x10, 0x30}, [@ldst={0x5, 0x0, 0x2}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x22) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f91a24fc602f020f000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x74000000}, 0x0) perf_event_open(0x0, 0x0, 0xaffffffeffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x400000002, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001500030000120800040043000000a8001600a400014020000c00ffffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) socket$kcm(0xa, 0x5, 0x0) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x9, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], &(0x7f0000000240)=""/252, 0x37, 0xfc, 0x1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000008000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000040)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, r3, 0x14, &(0x7f00000000c0)={0x20, 0x11}, 0x1, 0x10, &(0x7f0000000000), 0xa, 0x0, 0xffffffffffffffff, 0x4c}, 0x70) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) socket$kcm(0x10, 0x2, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x82040, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000013006bcd9e3fe3d46e48aa31086b8703130000001f00000000000000080004000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c902d1938037e73f07d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_ext={0x1c, 0x14, &(0x7f0000000000)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_idx={0x18, 0x7, 0x5, 0x0, 0xe}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x7, 0x0, 0x5, 0x6, 0x6, 0x4, 0xffffffffffffffe7}], &(0x7f00000000c0)='GPL\x00', 0x6, 0xea, &(0x7f0000000100)=""/234, 0xd6f37891d27747f0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x17a4, 0xffffffffffffffff, 0x7, &(0x7f0000000240)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000280)=[{0x5, 0x5, 0x2, 0xb}, {0x3, 0x4, 0x2, 0x5}, {0x1, 0x3, 0xc, 0x5}, {0x0, 0x1, 0xd, 0x9}, {0x5, 0x5, 0xb, 0xc}, {0x3, 0x4, 0x10, 0x5}, {0x2, 0x3, 0xb, 0x6}], 0x10, 0x4}, 0x94) 635.1072ms ago: executing program 3 (id=4742): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000200), 0x12) socket$kcm(0xa, 0x1, 0x106) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xb, [@struct={0x4, 0x1, 0x0, 0x4, 0x1, 0x2, [{0xa, 0x3, 0x1000a00}]}, @fwd={0x1}]}, {0x0, [0x0, 0x30, 0x2e, 0x61, 0x30, 0x61, 0x61, 0x61, 0x61]}}, 0x0, 0x47}, 0x28) 622.14015ms ago: executing program 1 (id=4743): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x80000005}, {0x2}]}, 0x94) sendmsg$inet(r0, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x4000040) sendmsg$inet(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="18020000000000000000000000a79c39099ba8028a65b2904100000000000000000000e9967601f478397a204095f60119cab543b0ba50e6136fc49818e436666d955cb038ebe1f7426febc271512c4e91ed7140d0da45d6f7ed5a4a35d29e3bf85fcc659cea429a567bb7c8322a3c15a4f5e19c75e1c3c0b60c4bfe52da5677d0e5cc0e92ae3f77943fa8d83bf394bd3e0000000000000000e55eb02de8483bd55474197255f060a3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x1c092, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0xb3e, 0xfffffffffffffff8}, 0x840, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$sock_attach_bpf(r0, 0x84, 0x7b, &(0x7f0000000000)=r2, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x702, 0x36, 0x0, &(0x7f0000001080)="e460334470b8d480eb00c15286dd08d8829f5fb5e2eb3b56fddaa2b27da9d81c20bfde92a3cd98f29389530882794568195b29c77653", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 563.120141ms ago: executing program 4 (id=4744): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, 0x0, 0x5}, 0x94) socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x8601, 0x2000000, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xd, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x108, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) r0 = socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x9, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x61, 0x10, 0x30}, [@ldst={0x5, 0x0, 0x2}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x22) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f91a24fc602f020f000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x74000000}, 0x0) perf_event_open(0x0, 0x0, 0xaffffffeffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x400000002, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001500030000120800040043000000a8001600a400014020000c00ffffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) socket$kcm(0xa, 0x5, 0x0) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x9, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], &(0x7f0000000240)=""/252, 0x37, 0xfc, 0x1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000008000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000040)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, r3, 0x14, &(0x7f00000000c0)={0x20, 0x11}, 0x1, 0x10, &(0x7f0000000000), 0xa, 0x0, 0xffffffffffffffff, 0x4c}, 0x70) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) socket$kcm(0x10, 0x2, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x82040, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000013006bcd9e3fe3d46e48aa31086b8703130000001f00000000000000080004000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c902d1938037e73f07d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_ext={0x1c, 0x14, &(0x7f0000000000)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_idx={0x18, 0x7, 0x5, 0x0, 0xe}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x7, 0x0, 0x5, 0x6, 0x6, 0x4, 0xffffffffffffffe7}], &(0x7f00000000c0)='GPL\x00', 0x6, 0xea, &(0x7f0000000100)=""/234, 0xd6f37891d27747f0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x17a4, 0xffffffffffffffff, 0x7, &(0x7f0000000240)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000280)=[{0x5, 0x5, 0x2, 0xb}, {0x3, 0x4, 0x2, 0x5}, {0x1, 0x3, 0xc, 0x5}, {0x0, 0x1, 0xd, 0x9}, {0x5, 0x5, 0xb, 0xc}, {0x3, 0x4, 0x10, 0x5}, {0x2, 0x3, 0xb, 0x6}], 0x10, 0x4}, 0x94) 541.377442ms ago: executing program 2 (id=4745): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008104e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x72bd1de2ad10b2b3, 0x9, 0x9, 0x3, 0x4, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r2 = perf_event_open$cgroup(&(0x7f0000000500)={0x2, 0x80, 0x6, 0x53, 0xe, 0x29, 0x0, 0x4, 0x49023, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x800, 0x1, @perf_bp={&(0x7f00000001c0), 0x1}, 0x5002, 0x31, 0x9, 0x1, 0x8, 0xc, 0x3, 0x0, 0x8001, 0x0, 0x3}, 0xffffffffffffffff, 0x6, r1, 0xa) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x2}, 0x0, 0xffffffffffffffff, r2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x3}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$kcm(0x2, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) setsockopt$sock_attach_bpf(r3, 0x88, 0x67, &(0x7f00000000c0)=r4, 0x4) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f00000003c0)={0x2, 0x4e22, @multicast1=0xe000004f}, 0x10, &(0x7f0000000040), 0x0, &(0x7f00000017c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x4c}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x44}, @remote}}}, @ip_retopts={{0x8c, 0x0, 0x7, {[@end, @lsrr={0x83, 0xf, 0x12, [@local, @private=0xa010100, @multicast1]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x30, 0x1, [{0x7, 0x5, "b619f4"}, {0x4, 0xd, "0dab83e8c84f5320163044"}, {0x6, 0xa, "0610e269570f02f0"}, {0x0, 0xe, "f947bba002756e170ae220fb"}]}, @generic={0x94, 0xc, "bcd7d0fe8a06b8be6cce"}, @timestamp_addr={0x44, 0x2c, 0x24, 0x1, 0x7, [{@loopback, 0x1}, {@multicast1, 0x1}, {@multicast2, 0x4}, {@empty, 0x2}, {@local}]}]}}}], 0xc8}, 0x4840) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14}, 0xde) socketpair(0x1e, 0x5, 0x0, &(0x7f0000000980)={0x0, 0x0}) close(r6) socket$kcm(0x10, 0x2, 0x10) setsockopt$sock_attach_bpf(r6, 0x10e, 0x2, &(0x7f0000000300), 0x4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8940, &(0x7f0000000080)) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000060000000f0000000800"], 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB="1e00000000000000070000000400000080000000", @ANYRES32, @ANYRESDEC=r7, @ANYRESOCT=r5, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0xffffffffffffffd4, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f0000000340)) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x3) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r11, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000280)=@o_path={&(0x7f0000000240)='./file0\x00', r11, 0x4000, r10}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 294.375415ms ago: executing program 0 (id=4746): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, 0x0, 0x0) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfdef) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x7, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x61, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x5, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) close(0x3) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r5 = socket$kcm(0x10, 0x2, 0x4) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) sendmsg$inet(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="5c00000012006b000040017ea608601602f3650400010008000000000002009ee517c356a7b0251e616859ad3a78a76e807c857e21bea297bff435cf01c937e786a6d0bdc7fcf50e4509c5cc68b7ed9c232d786c3500000000000074", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) setsockopt$sock_attach_bpf(r2, 0x0, 0x4, 0x0, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r7, 0x0, 0x2, 0x0) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) mkdir(0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 159.389877ms ago: executing program 2 (id=4748): socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$kcm(0x2, 0x200000000000001, 0x106) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) socket$kcm(0xa, 0x5, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0e00000004000000080000000800"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB='+cpu'], 0x5) write$cgroup_subtree(r2, &(0x7f00000001c0)=ANY=[], 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x1, 0x4004, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x5000, 0x84, 0x0, 0x0, 0x1000000000000000, 0xa}, 0xffffffffffffffff, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x23, &(0x7f0000000040), 0xcf) sendmsg$kcm(r3, &(0x7f0000001240)={&(0x7f0000000940)=@generic={0xa, "8ab77fa26849ff263ef30c98b353011a5990650042e2dacdc165ececece6be1862e2adacd2737d00ad6f9fa9f3d7145e15dd9fb1a7adc211220963ad5def53b911ba5b9da13641f982757012a7496de0b3a36f5849f260c603dbc317f54b901ee80ea6132ca6e88c776553e1833052ca376304313c5637786a36a4b83857"}, 0x80, 0x0}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x4, @perf_config_ext, 0x10c002, 0xac5d, 0xffffff9a, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}) 59.989398ms ago: executing program 4 (id=4749): socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x10, 0x2, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f0000000040)}, 0x20) recvmsg$unix(0xffffffffffffffff, &(0x7f0000002340)={0x0, 0x0, 0x0}, 0x2003) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0xfffffffffffffe9d, 0x10, &(0x7f0000002e00), &(0x7f0000000200), 0x8, 0xa0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan1\x00', 0x800}) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)}, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)}, 0x40080) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='freezer.parent_freezing\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x401c5820, &(0x7f0000000040)=0x100008000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20000010) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$sock(r1, 0x0, 0x800) ioctl$SIOCSIFHWADDR(r6, 0x8946, &(0x7f0000000040)={'team_slave_1\x00', @random='\x00\x00\x00\x00\x00 '}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="b7080000000000007b8af8ff00000000b7080000000000807b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000085100000fbffffff18110000", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\b\x00\x00\x00\x00'], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000640)={0x5, 0xc, 0xf, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000680)=[r3, r3, r3], &(0x7f0000000980), 0x10, 0x7fff}, 0x94) 0s ago: executing program 2 (id=4750): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x48, 0x7fe2, 0x2}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000006c0)={r0, &(0x7f0000000500), &(0x7f0000000600)=""/155}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001580)={r0, &(0x7f00000014c0), &(0x7f00000010c0)=""/159}, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90324fc602f00000009000100053582c137153e3702480180000c0000d1bd", 0x33fe0}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x48, 0x7fe2, 0x2}, 0x48) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000006c0)={r0, &(0x7f0000000500), &(0x7f0000000600)=""/155}, 0x20) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001580)={r0, &(0x7f00000014c0), &(0x7f00000010c0)=""/159}, 0x20) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) socket$kcm(0x10, 0x2, 0x10) (async) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90324fc602f00000009000100053582c137153e3702480180000c0000d1bd", 0x33fe0}], 0x1}, 0x0) (async) kernel console output (not intermixed with test programs): 3706'. [ 1176.372779][T16539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1176.386087][T16539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1176.396680][T16539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1176.407476][T16539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1176.419130][T16539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1176.431408][T16539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1176.453579][T16539] device batadv_slave_1 entered promiscuous mode [ 1177.194797][T16554] netlink: 'syz.2.3710': attribute type 10 has an invalid length. [ 1177.266711][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.273217][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.914698][T16554] team0 (unregistering): Port device team_slave_0 removed [ 1177.949979][T16554] team0 (unregistering): Port device team_slave_1 removed [ 1177.972609][T16554] bridge0: port 2(bridge_slave_1) entered disabled state [ 1177.980004][T16554] bridge0: port 1(bridge_slave_0) entered disabled state [ 1178.046026][T16554] team0 (unregistering): Port device bridge0 removed [ 1178.079940][T16562] netlink: 'syz.3.3711': attribute type 9 has an invalid length. [ 1178.137507][T16575] netlink: 'syz.1.3715': attribute type 15 has an invalid length. [ 1178.571016][T16591] netlink: 'syz.1.3719': attribute type 4 has an invalid length. [ 1178.647282][T16595] __nla_validate_parse: 3 callbacks suppressed [ 1178.647303][T16595] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3722'. [ 1178.796005][T16598] FAULT_INJECTION: forcing a failure. [ 1178.796005][T16598] name failslab, interval 1, probability 0, space 0, times 0 [ 1178.822943][T16598] CPU: 1 PID: 16598 Comm: syz.1.3723 Not tainted syzkaller #0 [ 1178.830464][T16598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1178.840538][T16598] Call Trace: [ 1178.843832][T16598] [ 1178.846779][T16598] dump_stack_lvl+0x188/0x24e [ 1178.851493][T16598] ? show_regs_print_info+0x12/0x12 [ 1178.856713][T16598] ? load_image+0x410/0x410 [ 1178.861247][T16598] ? __might_sleep+0xd0/0xd0 [ 1178.865857][T16598] ? __lock_acquire+0x7bd0/0x7bd0 [ 1178.870914][T16598] should_fail_ex+0x390/0x4c0 [ 1178.875627][T16598] should_failslab+0x5/0x20 [ 1178.880149][T16598] slab_pre_alloc_hook+0x59/0x300 [ 1178.885206][T16598] kmem_cache_alloc_node+0x5a/0x310 [ 1178.890425][T16598] ? __alloc_skb+0xf9/0x7d0 [ 1178.895039][T16598] __alloc_skb+0xf9/0x7d0 [ 1178.899398][T16598] netlink_ack+0x373/0x1160 [ 1178.903941][T16598] ? genl_bind+0x360/0x360 [ 1178.908393][T16598] ? netlink_dump+0xcd0/0xcd0 [ 1178.913108][T16598] netlink_rcv_skb+0x26d/0x440 [ 1178.917897][T16598] ? genl_bind+0x360/0x360 [ 1178.922343][T16598] ? netlink_ack+0x1160/0x1160 [ 1178.927139][T16598] ? down_read+0x1a8/0x2d0 [ 1178.931580][T16598] genl_rcv+0x24/0x40 [ 1178.935574][T16598] netlink_unicast+0x7ad/0x920 [ 1178.940341][T16598] netlink_sendmsg+0x8ad/0xbd0 [ 1178.945104][T16598] ? netlink_getsockopt+0x550/0x550 [ 1178.950298][T16598] ? aa_sock_msg_perm+0x94/0x150 [ 1178.955232][T16598] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1178.960511][T16598] ? security_socket_sendmsg+0x7c/0xa0 [ 1178.965970][T16598] ? netlink_getsockopt+0x550/0x550 [ 1178.971165][T16598] ____sys_sendmsg+0x5ed/0x9a0 [ 1178.975930][T16598] ? __sys_sendmsg_sock+0x30/0x30 [ 1178.980953][T16598] ? __import_iovec+0x306/0x510 [ 1178.985806][T16598] ? import_iovec+0x6f/0xa0 [ 1178.990308][T16598] ___sys_sendmsg+0x2a2/0x360 [ 1178.994983][T16598] ? __sys_sendmsg+0x2a0/0x2a0 [ 1178.999759][T16598] ? __lock_acquire+0x7bd0/0x7bd0 [ 1179.004804][T16598] __se_sys_sendmsg+0x1c3/0x2b0 [ 1179.009653][T16598] ? __x64_sys_sendmsg+0x80/0x80 [ 1179.014600][T16598] ? lockdep_hardirqs_on+0x94/0x140 [ 1179.019800][T16598] do_syscall_64+0x4c/0xa0 [ 1179.024212][T16598] ? clear_bhb_loop+0x60/0xb0 [ 1179.028879][T16598] ? clear_bhb_loop+0x60/0xb0 [ 1179.033548][T16598] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1179.039442][T16598] RIP: 0033:0x7f69a779ce59 [ 1179.043854][T16598] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1179.063461][T16598] RSP: 002b:00007f69a8655028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1179.071871][T16598] RAX: ffffffffffffffda RBX: 00007f69a7a15fa0 RCX: 00007f69a779ce59 [ 1179.079837][T16598] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1179.087799][T16598] RBP: 00007f69a8655090 R08: 0000000000000000 R09: 0000000000000000 [ 1179.095765][T16598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1179.103728][T16598] R13: 00007f69a7a16038 R14: 00007f69a7a15fa0 R15: 00007ffc62272068 [ 1179.111704][T16598] [ 1180.401476][T16613] netlink: 22 bytes leftover after parsing attributes in process `syz.0.3729'. [ 1180.587761][T16618] netlink: 184 bytes leftover after parsing attributes in process `syz.0.3729'. [ 1180.691521][T16619] netlink: 'syz.0.3729': attribute type 10 has an invalid length. [ 1181.001114][T16619] team0 (unregistering): Port device team_slave_0 removed [ 1181.076232][T16619] team0 (unregistering): Port device team_slave_1 removed [ 1181.365374][T16627] netlink: 'syz.1.3733': attribute type 4 has an invalid length. [ 1181.485534][T16601] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.3725'. [ 1181.655153][T16630] netlink: 'syz.3.3734': attribute type 29 has an invalid length. [ 1181.698982][T16630] netlink: 'syz.3.3734': attribute type 29 has an invalid length. [ 1181.725702][T16631] netlink: 'syz.3.3734': attribute type 29 has an invalid length. [ 1181.987255][T16640] netlink: 1010 bytes leftover after parsing attributes in process `syz.3.3738'. [ 1182.078414][T16640] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1182.153670][T16644] netlink: 16211 bytes leftover after parsing attributes in process `syz.0.3740'. [ 1182.217961][T16647] netlink: 134268 bytes leftover after parsing attributes in process `syz.0.3740'. [ 1182.315609][T16644] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3740'. [ 1182.338938][T16644] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1182.368876][T16650] netlink: 'syz.3.3741': attribute type 29 has an invalid length. [ 1182.406904][T16650] netlink: 'syz.3.3741': attribute type 29 has an invalid length. [ 1182.425413][T16644] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3740'. [ 1182.442372][T16644] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1182.607519][T16650] Ÿë: port 1(gretap0) entered blocking state [ 1182.656578][T16650] Ÿë: port 1(gretap0) entered disabled state [ 1182.670001][T16650] device gretap0 entered promiscuous mode [ 1182.988307][T16660] netlink: 'syz.1.3744': attribute type 29 has an invalid length. [ 1183.020372][T16660] netlink: 'syz.1.3744': attribute type 29 has an invalid length. [ 1183.057014][T16655] netlink: 'syz.2.3743': attribute type 13 has an invalid length. [ 1183.099970][T16655] netlink: 172 bytes leftover after parsing attributes in process `syz.2.3743'. [ 1183.154140][T16655] erspan0: refused to change device tx_queue_len [ 1183.174861][T16663] netlink: 'syz.1.3744': attribute type 29 has an invalid length. [ 1183.243272][T16671] netlink: 'syz.0.3747': attribute type 4 has an invalid length. [ 1183.844858][T16681] device syzkaller0 entered promiscuous mode [ 1183.938869][T16684] netlink: 'syz.4.3751': attribute type 10 has an invalid length. [ 1184.177895][T16684] team0: Device wg1 is of different type [ 1184.321644][T16699] __nla_validate_parse: 1 callbacks suppressed [ 1184.321699][T16699] netlink: 16211 bytes leftover after parsing attributes in process `syz.3.3767'. [ 1184.352242][T16701] netlink: 'syz.2.3757': attribute type 29 has an invalid length. [ 1184.364861][T16702] netlink: 134268 bytes leftover after parsing attributes in process `syz.3.3767'. [ 1184.473055][ T4330] Bluetooth: hci0: command 0x0406 tx timeout [ 1185.069401][T16712] FAULT_INJECTION: forcing a failure. [ 1185.069401][T16712] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1185.093848][T16712] CPU: 1 PID: 16712 Comm: syz.1.3759 Not tainted syzkaller #0 [ 1185.101384][T16712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1185.111463][T16712] Call Trace: [ 1185.114745][T16712] [ 1185.117677][T16712] dump_stack_lvl+0x188/0x24e [ 1185.122365][T16712] ? show_regs_print_info+0x12/0x12 [ 1185.127570][T16712] ? load_image+0x410/0x410 [ 1185.132116][T16712] ? __lock_acquire+0x7bd0/0x7bd0 [ 1185.137169][T16712] ? perf_trace_lock_acquire+0x101/0x3f0 [ 1185.142856][T16712] should_fail_ex+0x390/0x4c0 [ 1185.147599][T16712] _copy_from_user+0x2c/0x170 [ 1185.152329][T16712] kstrtouint_from_user+0xda/0x170 [ 1185.157574][T16712] ? kstrtol_from_user+0x190/0x190 [ 1185.162719][T16712] proc_fail_nth_write+0x8b/0x200 [ 1185.167749][T16712] ? proc_fail_nth_read+0x220/0x220 [ 1185.172946][T16712] ? common_file_perm+0x171/0x1c0 [ 1185.177980][T16712] ? proc_fail_nth_read+0x220/0x220 [ 1185.183177][T16712] vfs_write+0x2dc/0x9a0 [ 1185.187464][T16712] ? file_end_write+0x250/0x250 [ 1185.192374][T16712] ? __fget_files+0x28/0x460 [ 1185.197103][T16712] ? __fget_files+0x3fc/0x460 [ 1185.201855][T16712] ? __fdget_pos+0x2ae/0x360 [ 1185.206469][T16712] ? ksys_write+0x70/0x260 [ 1185.210898][T16712] ksys_write+0x14d/0x260 [ 1185.215237][T16712] ? __ia32_sys_read+0x80/0x80 [ 1185.220014][T16712] ? lockdep_hardirqs_on+0x94/0x140 [ 1185.225220][T16712] do_syscall_64+0x4c/0xa0 [ 1185.229651][T16712] ? clear_bhb_loop+0x60/0xb0 [ 1185.234434][T16712] ? clear_bhb_loop+0x60/0xb0 [ 1185.239112][T16712] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1185.245028][T16712] RIP: 0033:0x7f69a775d68e [ 1185.249486][T16712] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1185.269134][T16712] RSP: 002b:00007f69a8654fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1185.277598][T16712] RAX: ffffffffffffffda RBX: 00007f69a86556c0 RCX: 00007f69a775d68e [ 1185.285578][T16712] RDX: 0000000000000001 RSI: 00007f69a86550a0 RDI: 0000000000000007 [ 1185.293576][T16712] RBP: 00007f69a8655090 R08: 0000000000000000 R09: 0000000000000000 [ 1185.301672][T16712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1185.309660][T16712] R13: 00007f69a7a16038 R14: 00007f69a7a15fa0 R15: 00007ffc62272068 [ 1185.317662][T16712] [ 1186.417652][T16701] netlink: 'syz.2.3757': attribute type 29 has an invalid length. [ 1186.427173][T16699] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3767'. [ 1186.438987][T16699] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1186.456295][T16704] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3767'. [ 1186.475318][T16704] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1186.706049][T16723] netlink: 65055 bytes leftover after parsing attributes in process `syz.4.3762'. [ 1186.942752][T16728] netlink: 194236 bytes leftover after parsing attributes in process `syz.2.3765'. [ 1187.005896][T16728] netlink: zone id is out of range [ 1187.030387][T16728] netlink: zone id is out of range [ 1187.051291][T16728] netlink: zone id is out of range [ 1187.070926][T16728] netlink: zone id is out of range [ 1187.105895][T16728] netlink: zone id is out of range [ 1187.120249][T16728] netlink: zone id is out of range [ 1187.486032][T16747] netlink: 16211 bytes leftover after parsing attributes in process `syz.2.3771'. [ 1187.552917][T16747] netlink: 134268 bytes leftover after parsing attributes in process `syz.2.3771'. [ 1187.588310][T16747] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3771'. [ 1187.615242][T16747] net_ratelimit: 15 callbacks suppressed [ 1187.615295][T16747] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1187.662628][T16750] netlink: 'syz.4.3773': attribute type 29 has an invalid length. [ 1187.692894][T16750] netlink: 'syz.4.3773': attribute type 29 has an invalid length. [ 1187.752736][T16747] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3771'. [ 1187.844427][T16747] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1187.937195][T16753] Ÿë: port 1(gretap0) entered blocking state [ 1187.943943][T16753] Ÿë: port 1(gretap0) entered disabled state [ 1187.952503][T16753] device gretap0 entered promiscuous mode [ 1188.209038][T16757] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1188.323601][T16759] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1189.830947][T16800] __nla_validate_parse: 6 callbacks suppressed [ 1189.830998][T16800] netlink: 16211 bytes leftover after parsing attributes in process `syz.4.3789'. [ 1189.849875][T16805] netlink: 'syz.0.3792': attribute type 16 has an invalid length. [ 1189.849947][T16805] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3792'. [ 1189.915672][T16800] netlink: 134268 bytes leftover after parsing attributes in process `syz.4.3789'. [ 1190.093282][T16807] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3789'. [ 1190.115031][T16807] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1190.149531][T16811] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3789'. [ 1190.190296][T16811] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1190.399528][T16819] FAULT_INJECTION: forcing a failure. [ 1190.399528][T16819] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1190.458153][T16819] CPU: 0 PID: 16819 Comm: syz.2.3795 Not tainted syzkaller #0 [ 1190.465679][T16819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1190.475752][T16819] Call Trace: [ 1190.479053][T16819] [ 1190.481999][T16819] dump_stack_lvl+0x188/0x24e [ 1190.486701][T16819] ? show_regs_print_info+0x12/0x12 [ 1190.491938][T16819] ? load_image+0x410/0x410 [ 1190.496464][T16819] ? __lock_acquire+0x7bd0/0x7bd0 [ 1190.501518][T16819] should_fail_ex+0x390/0x4c0 [ 1190.506219][T16819] _copy_from_user+0x2c/0x170 [ 1190.510926][T16819] btf_new_fd+0x326/0x760 [ 1190.515274][T16819] __sys_bpf+0x612/0x780 [ 1190.519529][T16819] ? bpf_link_show_fdinfo+0x380/0x380 [ 1190.524925][T16819] ? lock_chain_count+0x20/0x20 [ 1190.529782][T16819] __x64_sys_bpf+0x78/0x90 [ 1190.534201][T16819] do_syscall_64+0x4c/0xa0 [ 1190.538615][T16819] ? clear_bhb_loop+0x60/0xb0 [ 1190.543289][T16819] ? clear_bhb_loop+0x60/0xb0 [ 1190.547963][T16819] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1190.553857][T16819] RIP: 0033:0x7ff52199ce59 [ 1190.558266][T16819] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1190.577869][T16819] RSP: 002b:00007ff522903028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1190.586280][T16819] RAX: ffffffffffffffda RBX: 00007ff521c15fa0 RCX: 00007ff52199ce59 [ 1190.594244][T16819] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 0000000000000012 [ 1190.602210][T16819] RBP: 00007ff522903090 R08: 0000000000000000 R09: 0000000000000000 [ 1190.610346][T16819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1190.618311][T16819] R13: 00007ff521c16038 R14: 00007ff521c15fa0 R15: 00007ffc2f622a38 [ 1190.626292][T16819] [ 1190.685051][T16825] netlink: 16211 bytes leftover after parsing attributes in process `syz.4.3796'. [ 1190.722090][T16823] netlink: 134268 bytes leftover after parsing attributes in process `syz.4.3796'. [ 1190.759549][T16823] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3796'. [ 1190.816011][T16823] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1190.840655][T16832] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3798'. [ 1190.882416][T16821] netlink: 'syz.1.3794': attribute type 13 has an invalid length. [ 1190.895584][T16821] netlink: 172 bytes leftover after parsing attributes in process `syz.1.3794'. [ 1191.013134][T16821] erspan0: refused to change device tx_queue_len [ 1191.024993][T16823] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1191.359818][T16848] netlink: 'syz.0.3802': attribute type 4 has an invalid length. [ 1191.592975][T16855] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 1191.599140][T16855] dvmrp1: linktype set to 768 [ 1192.080110][T16862] netlink: 'syz.4.3808': attribute type 39 has an invalid length. [ 1192.327315][T16871] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1192.483564][T16871] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1192.540800][T16883] FAULT_INJECTION: forcing a failure. [ 1192.540800][T16883] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1192.564729][T16883] CPU: 1 PID: 16883 Comm: syz.0.3814 Not tainted syzkaller #0 [ 1192.572236][T16883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1192.582305][T16883] Call Trace: [ 1192.585601][T16883] [ 1192.588554][T16883] dump_stack_lvl+0x188/0x24e [ 1192.593256][T16883] ? show_regs_print_info+0x12/0x12 [ 1192.598468][T16883] ? load_image+0x410/0x410 [ 1192.602988][T16883] ? __lock_acquire+0x7bd0/0x7bd0 [ 1192.608015][T16883] should_fail_ex+0x390/0x4c0 [ 1192.612695][T16883] _copy_from_user+0x2c/0x170 [ 1192.617362][T16883] ___sys_sendmsg+0x1c3/0x360 [ 1192.622044][T16883] ? __sys_sendmsg+0x2a0/0x2a0 [ 1192.626831][T16883] ? trace_call_bpf+0xbf/0x6b0 [ 1192.631612][T16883] __se_sys_sendmsg+0x1c3/0x2b0 [ 1192.636470][T16883] ? perf_trace_preemptirq_template+0x268/0x320 [ 1192.642721][T16883] ? __x64_sys_sendmsg+0x80/0x80 [ 1192.647666][T16883] ? lockdep_hardirqs_on+0x94/0x140 [ 1192.652863][T16883] do_syscall_64+0x4c/0xa0 [ 1192.657271][T16883] ? clear_bhb_loop+0x60/0xb0 [ 1192.661937][T16883] ? clear_bhb_loop+0x60/0xb0 [ 1192.666604][T16883] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1192.672493][T16883] RIP: 0033:0x7fe0c619ce59 [ 1192.676901][T16883] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1192.696499][T16883] RSP: 002b:00007fe0c70ae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1192.704911][T16883] RAX: ffffffffffffffda RBX: 00007fe0c6415fa0 RCX: 00007fe0c619ce59 [ 1192.712876][T16883] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 1192.720867][T16883] RBP: 00007fe0c70ae090 R08: 0000000000000000 R09: 0000000000000000 [ 1192.728839][T16883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1192.736809][T16883] R13: 00007fe0c6416038 R14: 00007fe0c6415fa0 R15: 00007ffdd76488d8 [ 1192.744788][T16883] [ 1192.794120][T16881] netlink: 'syz.1.3816': attribute type 4 has an invalid length. [ 1193.129074][T16899] netlink: zone id is out of range [ 1193.171873][T16903] netlink: 'syz.2.3823': attribute type 21 has an invalid length. [ 1193.181492][T16899] netlink: get zone limit has 8 unknown bytes [ 1193.849796][T16919] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1194.013290][T16918] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1194.062098][T16922] netlink: 'syz.3.3830': attribute type 16 has an invalid length. [ 1194.309331][T16929] netlink: 'syz.0.3831': attribute type 4 has an invalid length. [ 1194.597616][T16937] netlink: 'syz.4.3833': attribute type 1 has an invalid length. [ 1194.844397][T16941] __nla_validate_parse: 15 callbacks suppressed [ 1194.844415][T16941] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3835'. [ 1194.977474][T16941] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3835'. [ 1195.016836][T16945] netlink: 'syz.3.3836': attribute type 12 has an invalid length. [ 1195.035498][T16945] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3836'. [ 1195.053164][T16946] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3835'. [ 1195.081466][T16954] netlink: 'syz.4.3840': attribute type 21 has an invalid length. [ 1195.090389][T16949] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3835'. [ 1195.523277][T16966] netlink: 16211 bytes leftover after parsing attributes in process `syz.1.3845'. [ 1195.546367][T16968] FAULT_INJECTION: forcing a failure. [ 1195.546367][T16968] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1195.546614][T16969] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3845'. [ 1195.575154][T16968] CPU: 1 PID: 16968 Comm: syz.4.3846 Not tainted syzkaller #0 [ 1195.582644][T16968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1195.592697][T16968] Call Trace: [ 1195.595968][T16968] [ 1195.598892][T16968] dump_stack_lvl+0x188/0x24e [ 1195.603573][T16968] ? show_regs_print_info+0x12/0x12 [ 1195.608763][T16968] ? load_image+0x410/0x410 [ 1195.613266][T16968] ? __might_fault+0xa6/0x120 [ 1195.617943][T16968] should_fail_ex+0x390/0x4c0 [ 1195.622616][T16968] copyin+0x1b/0x120 [ 1195.626505][T16968] _copy_from_iter+0x447/0x1130 [ 1195.631352][T16968] ? copyout_mc+0x110/0x110 [ 1195.635846][T16968] ? __virt_addr_valid+0x188/0x540 [ 1195.640957][T16968] ? __virt_addr_valid+0x188/0x540 [ 1195.646062][T16968] ? __virt_addr_valid+0x467/0x540 [ 1195.651170][T16968] ? __phys_addr_symbol+0x2b/0x70 [ 1195.656189][T16968] ? __check_object_size+0x4f6/0xa70 [ 1195.661472][T16968] netlink_sendmsg+0x755/0xbd0 [ 1195.666252][T16968] ? netlink_getsockopt+0x550/0x550 [ 1195.671447][T16968] ? aa_sock_msg_perm+0x94/0x150 [ 1195.676380][T16968] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1195.681657][T16968] ? security_socket_sendmsg+0x7c/0xa0 [ 1195.687105][T16968] ? netlink_getsockopt+0x550/0x550 [ 1195.692299][T16968] ____sys_sendmsg+0x5ed/0x9a0 [ 1195.697064][T16968] ? __sys_sendmsg_sock+0x30/0x30 [ 1195.702078][T16968] ? __import_iovec+0x306/0x510 [ 1195.706927][T16968] ? import_iovec+0x6f/0xa0 [ 1195.711429][T16968] ___sys_sendmsg+0x2a2/0x360 [ 1195.716103][T16968] ? __sys_sendmsg+0x2a0/0x2a0 [ 1195.720876][T16968] ? __lock_acquire+0x7bd0/0x7bd0 [ 1195.725919][T16968] __se_sys_sendmsg+0x1c3/0x2b0 [ 1195.730764][T16968] ? __x64_sys_sendmsg+0x80/0x80 [ 1195.735705][T16968] ? lockdep_hardirqs_on+0x94/0x140 [ 1195.740901][T16968] do_syscall_64+0x4c/0xa0 [ 1195.745317][T16968] ? clear_bhb_loop+0x60/0xb0 [ 1195.749987][T16968] ? clear_bhb_loop+0x60/0xb0 [ 1195.754658][T16968] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1195.760550][T16968] RIP: 0033:0x7f4eea39ce59 [ 1195.764956][T16968] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1195.784551][T16968] RSP: 002b:00007f4eeb1ab028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1195.792958][T16968] RAX: ffffffffffffffda RBX: 00007f4eea615fa0 RCX: 00007f4eea39ce59 [ 1195.800921][T16968] RDX: 0000000000000040 RSI: 0000200000000040 RDI: 0000000000000003 [ 1195.808887][T16968] RBP: 00007f4eeb1ab090 R08: 0000000000000000 R09: 0000000000000000 [ 1195.816850][T16968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1195.824811][T16968] R13: 00007f4eea616038 R14: 00007f4eea615fa0 R15: 00007ffe47a0cbd8 [ 1195.832789][T16968] [ 1195.845614][T16969] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1195.976869][T16966] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3845'. [ 1196.013118][T16966] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1196.291707][T16975] netlink: 'syz.3.3849': attribute type 4 has an invalid length. [ 1196.374175][T16981] netlink: 'syz.4.3847': attribute type 16 has an invalid length. [ 1196.397722][T16981] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3847'. [ 1197.258452][T17009] netlink: 'syz.3.3859': attribute type 4 has an invalid length. [ 1197.297241][T17009] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3859'. [ 1198.388941][T17043] FAULT_INJECTION: forcing a failure. [ 1198.388941][T17043] name failslab, interval 1, probability 0, space 0, times 0 [ 1198.442580][T17043] CPU: 0 PID: 17043 Comm: syz.1.3872 Not tainted syzkaller #0 [ 1198.450095][T17043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1198.460164][T17043] Call Trace: [ 1198.463446][T17043] [ 1198.466372][T17043] dump_stack_lvl+0x188/0x24e [ 1198.471055][T17043] ? show_regs_print_info+0x12/0x12 [ 1198.476258][T17043] ? load_image+0x410/0x410 [ 1198.480782][T17043] ? perf_trace_lock_acquire+0x101/0x3f0 [ 1198.486420][T17043] ? verify_lock_unused+0x140/0x140 [ 1198.491625][T17043] ? perf_trace_lock_acquire+0x101/0x3f0 [ 1198.497264][T17043] should_fail_ex+0x390/0x4c0 [ 1198.501951][T17043] should_failslab+0x5/0x20 [ 1198.506450][T17043] slab_pre_alloc_hook+0x59/0x300 [ 1198.511486][T17043] kmem_cache_alloc+0x56/0x2f0 [ 1198.516251][T17043] ? skb_clone+0x1e7/0x370 [ 1198.520674][T17043] skb_clone+0x1e7/0x370 [ 1198.524918][T17043] __netlink_deliver_tap+0x3e4/0x7e0 [ 1198.530215][T17043] ? netlink_deliver_tap+0x2e/0x1b0 [ 1198.535412][T17043] netlink_deliver_tap+0x19c/0x1b0 [ 1198.540524][T17043] netlink_unicast+0x777/0x920 [ 1198.545303][T17043] netlink_sendmsg+0x8ad/0xbd0 [ 1198.550070][T17043] ? netlink_getsockopt+0x550/0x550 [ 1198.555289][T17043] ? aa_sock_msg_perm+0x94/0x150 [ 1198.560237][T17043] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1198.565523][T17043] ? security_socket_sendmsg+0x7c/0xa0 [ 1198.570976][T17043] ? netlink_getsockopt+0x550/0x550 [ 1198.576174][T17043] ____sys_sendmsg+0x5ed/0x9a0 [ 1198.580955][T17043] ? __sys_sendmsg_sock+0x30/0x30 [ 1198.585979][T17043] ? __import_iovec+0x306/0x510 [ 1198.590847][T17043] ? import_iovec+0x6f/0xa0 [ 1198.595368][T17043] ___sys_sendmsg+0x2a2/0x360 [ 1198.600065][T17043] ? __sys_sendmsg+0x2a0/0x2a0 [ 1198.604847][T17043] ? __lock_acquire+0x7bd0/0x7bd0 [ 1198.609898][T17043] __se_sys_sendmsg+0x1c3/0x2b0 [ 1198.614752][T17043] ? __x64_sys_sendmsg+0x80/0x80 [ 1198.619704][T17043] ? lockdep_hardirqs_on+0x94/0x140 [ 1198.624907][T17043] do_syscall_64+0x4c/0xa0 [ 1198.629317][T17043] ? clear_bhb_loop+0x60/0xb0 [ 1198.634022][T17043] ? clear_bhb_loop+0x60/0xb0 [ 1198.638697][T17043] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1198.644588][T17043] RIP: 0033:0x7f69a779ce59 [ 1198.649002][T17043] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1198.668610][T17043] RSP: 002b:00007f69a8655028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1198.677022][T17043] RAX: ffffffffffffffda RBX: 00007f69a7a15fa0 RCX: 00007f69a779ce59 [ 1198.684991][T17043] RDX: 0000000004000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1198.692960][T17043] RBP: 00007f69a8655090 R08: 0000000000000000 R09: 0000000000000000 [ 1198.701020][T17043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1198.708987][T17043] R13: 00007f69a7a16038 R14: 00007f69a7a15fa0 R15: 00007ffc62272068 [ 1198.716973][T17043] [ 1198.894546][T17051] sctp: [Deprecated]: syz.0.3875 (pid 17051) Use of int in maxseg socket option. [ 1198.894546][T17051] Use struct sctp_assoc_value instead [ 1198.936618][T17048] validate_nla: 1 callbacks suppressed [ 1198.936639][T17048] netlink: 'syz.3.3874': attribute type 10 has an invalid length. [ 1199.052560][T17055] netlink: 'syz.1.3876': attribute type 4 has an invalid length. [ 1199.253619][T17063] FAULT_INJECTION: forcing a failure. [ 1199.253619][T17063] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1199.335299][T17063] CPU: 0 PID: 17063 Comm: syz.4.3880 Not tainted syzkaller #0 [ 1199.342825][T17063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1199.352892][T17063] Call Trace: [ 1199.356181][T17063] [ 1199.359121][T17063] dump_stack_lvl+0x188/0x24e [ 1199.363811][T17063] ? show_regs_print_info+0x12/0x12 [ 1199.369015][T17063] ? load_image+0x410/0x410 [ 1199.373529][T17063] ? __lock_acquire+0x7bd0/0x7bd0 [ 1199.378563][T17063] ? snprintf+0xe5/0x140 [ 1199.382836][T17063] should_fail_ex+0x390/0x4c0 [ 1199.387532][T17063] _copy_to_user+0x2c/0x130 [ 1199.392045][T17063] simple_read_from_buffer+0xe3/0x150 [ 1199.397433][T17063] proc_fail_nth_read+0x1a6/0x220 [ 1199.402466][T17063] ? proc_fault_inject_write+0x310/0x310 [ 1199.408114][T17063] ? fsnotify_perm+0x248/0x550 [ 1199.412889][T17063] ? proc_fault_inject_write+0x310/0x310 [ 1199.418527][T17063] vfs_read+0x2db/0x960 [ 1199.422699][T17063] ? kernel_read+0x1e0/0x1e0 [ 1199.427299][T17063] ? __fget_files+0x28/0x460 [ 1199.431895][T17063] ? __fget_files+0x3fc/0x460 [ 1199.436591][T17063] ? __fdget_pos+0x2ae/0x360 [ 1199.441186][T17063] ? ksys_read+0x70/0x260 [ 1199.445526][T17063] ksys_read+0x14d/0x260 [ 1199.449778][T17063] ? vfs_write+0x9a0/0x9a0 [ 1199.454208][T17063] ? lockdep_hardirqs_on+0x94/0x140 [ 1199.459418][T17063] do_syscall_64+0x4c/0xa0 [ 1199.463876][T17063] ? clear_bhb_loop+0x60/0xb0 [ 1199.468554][T17063] ? clear_bhb_loop+0x60/0xb0 [ 1199.473258][T17063] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1199.479161][T17063] RIP: 0033:0x7f4eea35d68e [ 1199.483580][T17063] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1199.503187][T17063] RSP: 002b:00007f4eeb1aafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1199.511611][T17063] RAX: ffffffffffffffda RBX: 00007f4eeb1ab6c0 RCX: 00007f4eea35d68e [ 1199.519583][T17063] RDX: 000000000000000f RSI: 00007f4eeb1ab0a0 RDI: 0000000000000006 [ 1199.527553][T17063] RBP: 00007f4eeb1ab090 R08: 0000000000000000 R09: 0000000000000000 [ 1199.535523][T17063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1199.543494][T17063] R13: 00007f4eea616038 R14: 00007f4eea615fa0 R15: 00007ffe47a0cbd8 [ 1199.551488][T17063] [ 1199.566605][T17075] FAULT_INJECTION: forcing a failure. [ 1199.566605][T17075] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1199.587558][T17075] CPU: 1 PID: 17075 Comm: syz.0.3883 Not tainted syzkaller #0 [ 1199.595062][T17075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1199.605127][T17075] Call Trace: [ 1199.608404][T17075] [ 1199.611330][T17075] dump_stack_lvl+0x188/0x24e [ 1199.616013][T17075] ? show_regs_print_info+0x12/0x12 [ 1199.621209][T17075] ? load_image+0x410/0x410 [ 1199.625714][T17075] ? __lock_acquire+0x7bd0/0x7bd0 [ 1199.630744][T17075] should_fail_ex+0x390/0x4c0 [ 1199.635421][T17075] _copy_from_user+0x2c/0x170 [ 1199.640101][T17075] __sys_bpf+0x2ea/0x780 [ 1199.644348][T17075] ? bpf_link_show_fdinfo+0x380/0x380 [ 1199.649731][T17075] ? lock_chain_count+0x20/0x20 [ 1199.654586][T17075] __x64_sys_bpf+0x78/0x90 [ 1199.659003][T17075] do_syscall_64+0x4c/0xa0 [ 1199.663416][T17075] ? clear_bhb_loop+0x60/0xb0 [ 1199.668087][T17075] ? clear_bhb_loop+0x60/0xb0 [ 1199.672767][T17075] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1199.678674][T17075] RIP: 0033:0x7fe0c619ce59 [ 1199.683087][T17075] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1199.702694][T17075] RSP: 002b:00007fe0c708d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1199.711109][T17075] RAX: ffffffffffffffda RBX: 00007fe0c6416090 RCX: 00007fe0c619ce59 [ 1199.719076][T17075] RDX: 0000000000000094 RSI: 00002000000015c0 RDI: 0000000000000005 [ 1199.727041][T17075] RBP: 00007fe0c708d090 R08: 0000000000000000 R09: 0000000000000000 [ 1199.735005][T17075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1199.742972][T17075] R13: 00007fe0c6416128 R14: 00007fe0c6416090 R15: 00007ffdd76488d8 [ 1199.750956][T17075] [ 1202.016456][T17103] netlink: 'syz.4.3892': attribute type 4 has an invalid length. [ 1202.129000][T17109] FAULT_INJECTION: forcing a failure. [ 1202.129000][T17109] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1202.203713][T17109] CPU: 1 PID: 17109 Comm: syz.0.3895 Not tainted syzkaller #0 [ 1202.211242][T17109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1202.221317][T17109] Call Trace: [ 1202.224614][T17109] [ 1202.227561][T17109] dump_stack_lvl+0x188/0x24e [ 1202.232267][T17109] ? show_regs_print_info+0x12/0x12 [ 1202.237489][T17109] ? load_image+0x410/0x410 [ 1202.242070][T17109] ? __lock_acquire+0x7bd0/0x7bd0 [ 1202.247123][T17109] ? __might_sleep+0xd0/0xd0 [ 1202.251741][T17109] should_fail_ex+0x390/0x4c0 [ 1202.256459][T17109] _copy_from_user+0x2c/0x170 [ 1202.261167][T17109] generic_map_update_batch+0x48d/0x7f0 [ 1202.266755][T17109] ? rcu_read_unlock+0xa0/0xa0 [ 1202.271560][T17109] ? __fdget+0x17c/0x200 [ 1202.275828][T17109] ? rcu_read_unlock+0xa0/0xa0 [ 1202.280625][T17109] bpf_map_do_batch+0x475/0x5f0 [ 1202.285496][T17109] ? bpf_lsm_xfrm_state_pol_flow_match+0x10/0x10 [ 1202.291828][T17109] __sys_bpf+0x6f7/0x780 [ 1202.296075][T17109] ? bpf_link_show_fdinfo+0x380/0x380 [ 1202.301467][T17109] ? lock_chain_count+0x20/0x20 [ 1202.306402][T17109] __x64_sys_bpf+0x78/0x90 [ 1202.310830][T17109] do_syscall_64+0x4c/0xa0 [ 1202.315245][T17109] ? clear_bhb_loop+0x60/0xb0 [ 1202.319920][T17109] ? clear_bhb_loop+0x60/0xb0 [ 1202.324602][T17109] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1202.330498][T17109] RIP: 0033:0x7fe0c619ce59 [ 1202.334916][T17109] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1202.354524][T17109] RSP: 002b:00007fe0c70ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1202.362943][T17109] RAX: ffffffffffffffda RBX: 00007fe0c6415fa0 RCX: 00007fe0c619ce59 [ 1202.370908][T17109] RDX: 0000000000000038 RSI: 0000200000000180 RDI: 000000000000001a [ 1202.378871][T17109] RBP: 00007fe0c70ae090 R08: 0000000000000000 R09: 0000000000000000 [ 1202.386839][T17109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1202.394799][T17109] R13: 00007fe0c6416038 R14: 00007fe0c6415fa0 R15: 00007ffdd76488d8 [ 1202.402783][T17109] [ 1202.978200][T17123] __nla_validate_parse: 2 callbacks suppressed [ 1202.978216][T17123] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3900'. [ 1203.020489][T17123] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1203.030177][T17123] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1203.682588][T17140] netlink: 'syz.3.3907': attribute type 4 has an invalid length. [ 1203.879930][T17147] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3909'. [ 1203.923626][T17147] netlink: 'syz.0.3909': attribute type 29 has an invalid length. [ 1203.945268][T17147] netlink: 'syz.0.3909': attribute type 29 has an invalid length. [ 1203.963618][T17145] netlink: 'syz.0.3909': attribute type 29 has an invalid length. [ 1203.987854][T17155] netlink: 'syz.0.3909': attribute type 29 has an invalid length. [ 1204.158714][T17162] netlink: 16211 bytes leftover after parsing attributes in process `syz.4.3914'. [ 1204.206869][T17162] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3914'. [ 1204.247041][T17162] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1204.390082][T17162] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3914'. [ 1204.420601][T17162] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1204.585047][T17172] netlink: 'syz.0.3918': attribute type 4 has an invalid length. [ 1204.663031][T17177] netlink: 63219 bytes leftover after parsing attributes in process `syz.3.3919'. [ 1204.704261][T17177] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3919'. [ 1204.887966][T17182] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3922'. [ 1205.736033][T17204] netlink: 'syz.0.3931': attribute type 4 has an invalid length. [ 1205.755905][T17201] netlink: 16211 bytes leftover after parsing attributes in process `syz.4.3930'. [ 1205.761780][T17203] syz.3.3932[17203] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1205.785935][T17203] syz.3.3932[17203] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1205.814124][T17201] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3930'. [ 1205.867658][T17201] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1205.977073][T17201] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1206.863978][T17247] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1207.656450][T17257] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1207.734007][T17257] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1208.320290][T17277] netlink: 'syz.0.3960': attribute type 2 has an invalid length. [ 1208.349597][T17277] __nla_validate_parse: 5 callbacks suppressed [ 1208.349629][T17277] netlink: 170140 bytes leftover after parsing attributes in process `syz.0.3960'. [ 1208.419708][T17279] netlink: 'syz.1.3958': attribute type 9 has an invalid length. [ 1208.438367][T17279] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.3958'. [ 1208.468058][T17277] netlink: 'syz.0.3960': attribute type 22 has an invalid length. [ 1208.493000][T17277] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3960'. [ 1208.562136][T17279] netlink: 'syz.1.3958': attribute type 4 has an invalid length. [ 1208.594015][T17279] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3958'. [ 1208.782044][T17279] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1209.140099][T17302] netlink: 'syz.0.3966': attribute type 3 has an invalid length. [ 1209.216440][T17302] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3966'. [ 1210.032234][T17318] device syzkaller0 entered promiscuous mode [ 1210.071289][ T4333] Bluetooth: hci1: command 0x0406 tx timeout [ 1210.320037][T17337] netlink: 'syz.3.3978': attribute type 9 has an invalid length. [ 1210.348396][T17337] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.3978'. [ 1210.549415][T17341] netlink: 134268 bytes leftover after parsing attributes in process `syz.1.3979'. [ 1210.658504][T17337] netlink: 'syz.3.3978': attribute type 4 has an invalid length. [ 1210.678952][T17337] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3978'. [ 1210.777768][T17337] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1210.807837][T17345] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3979'. [ 1210.832154][T17345] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1210.853248][T17349] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3979'. [ 1210.880659][T17349] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1212.839502][T17371] Â: renamed from pim6reg1 [ 1213.111991][T17380] device wlan1 entered promiscuous mode [ 1213.383328][T17388] netlink: 134268 bytes leftover after parsing attributes in process `syz.2.3997'. [ 1213.466766][T17386] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3997'. [ 1213.491636][T17386] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1213.563495][T17386] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3997'. [ 1213.606300][T17386] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1213.801909][T17395] netlink: 'syz.3.4000': attribute type 2 has an invalid length. [ 1213.878162][T17395] netlink: 199848 bytes leftover after parsing attributes in process `syz.3.4000'. [ 1214.488719][T17411] device wlan1 entered promiscuous mode [ 1214.939245][T17429] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4012'. [ 1214.975653][T17419] can: request_module (can-proto-0) failed. [ 1215.011345][T17429] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1215.178370][T17425] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4012'. [ 1215.821313][ T5042] wlan1: Trigger new scan to find an IBSS to join [ 1216.453713][T17425] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1216.964191][T17450] netlink: 'syz.2.4020': attribute type 1 has an invalid length. [ 1216.991409][T17450] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.4020'. [ 1217.019161][T17452] netlink: 134268 bytes leftover after parsing attributes in process `syz.1.4031'. [ 1217.069796][T17457] device wlan1 entered promiscuous mode [ 1217.095053][T17452] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4031'. [ 1217.123682][T17452] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1217.198161][T17464] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.4021'. [ 1217.238315][T17452] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1217.494166][T17468] delete_channel: no stack [ 1217.755332][T17483] netlink: 'syz.1.4029': attribute type 2 has an invalid length. [ 1217.838548][T17483] FAULT_INJECTION: forcing a failure. [ 1217.838548][T17483] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1217.921354][T17483] CPU: 1 PID: 17483 Comm: syz.1.4029 Not tainted syzkaller #0 [ 1217.928867][T17483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1217.938941][T17483] Call Trace: [ 1217.942218][T17483] [ 1217.945142][T17483] dump_stack_lvl+0x188/0x24e [ 1217.949822][T17483] ? show_regs_print_info+0x12/0x12 [ 1217.955014][T17483] ? load_image+0x410/0x410 [ 1217.959516][T17483] ? __lock_acquire+0x7bd0/0x7bd0 [ 1217.964540][T17483] should_fail_ex+0x390/0x4c0 [ 1217.969213][T17483] _copy_from_user+0x2c/0x170 [ 1217.973887][T17483] iovec_from_user+0x143/0x360 [ 1217.978648][T17483] __import_iovec+0x6c/0x510 [ 1217.983236][T17483] import_iovec+0x6f/0xa0 [ 1217.987560][T17483] ___sys_sendmsg+0x252/0x360 [ 1217.992234][T17483] ? __sys_sendmsg+0x2a0/0x2a0 [ 1217.997000][T17483] ? ktime_get+0x7b/0x270 [ 1218.001339][T17483] __se_sys_sendmsg+0x1c3/0x2b0 [ 1218.006180][T17483] ? perf_trace_preemptirq_template+0x268/0x320 [ 1218.012418][T17483] ? __x64_sys_sendmsg+0x80/0x80 [ 1218.017360][T17483] ? lockdep_hardirqs_on+0x94/0x140 [ 1218.022555][T17483] do_syscall_64+0x4c/0xa0 [ 1218.026961][T17483] ? clear_bhb_loop+0x60/0xb0 [ 1218.031625][T17483] ? clear_bhb_loop+0x60/0xb0 [ 1218.036296][T17483] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1218.042188][T17483] RIP: 0033:0x7f69a779ce59 [ 1218.046596][T17483] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1218.066192][T17483] RSP: 002b:00007f69a8634028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1218.074599][T17483] RAX: ffffffffffffffda RBX: 00007f69a7a16090 RCX: 00007f69a779ce59 [ 1218.082561][T17483] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 000000000000000b [ 1218.090524][T17483] RBP: 00007f69a8634090 R08: 0000000000000000 R09: 0000000000000000 [ 1218.098487][T17483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1218.106451][T17483] R13: 00007f69a7a16128 R14: 00007f69a7a16090 R15: 00007ffc62272068 [ 1218.114428][T17483] [ 1218.861877][ T5042] wlan1: Trigger new scan to find an IBSS to join [ 1219.007492][T17504] __nla_validate_parse: 2 callbacks suppressed [ 1219.007543][T17504] netlink: 134268 bytes leftover after parsing attributes in process `syz.4.4037'. [ 1219.025698][T17507] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4037'. [ 1219.059603][T17507] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1219.270861][T17504] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4037'. [ 1219.319542][T17504] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1219.345010][T17522] netlink: 'syz.1.4043': attribute type 4 has an invalid length. [ 1219.574516][T17530] FAULT_INJECTION: forcing a failure. [ 1219.574516][T17530] name failslab, interval 1, probability 0, space 0, times 0 [ 1219.593738][T17530] CPU: 1 PID: 17530 Comm: syz.4.4045 Not tainted syzkaller #0 [ 1219.601243][T17530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1219.611315][T17530] Call Trace: [ 1219.614606][T17530] [ 1219.617549][T17530] dump_stack_lvl+0x188/0x24e [ 1219.622250][T17530] ? show_regs_print_info+0x12/0x12 [ 1219.627469][T17530] ? load_image+0x410/0x410 [ 1219.631991][T17530] ? __might_sleep+0xd0/0xd0 [ 1219.636609][T17530] ? __lock_acquire+0x7bd0/0x7bd0 [ 1219.641670][T17530] should_fail_ex+0x390/0x4c0 [ 1219.646368][T17530] should_failslab+0x5/0x20 [ 1219.650898][T17530] slab_pre_alloc_hook+0x59/0x300 [ 1219.655953][T17530] kmem_cache_alloc_node+0x5a/0x310 [ 1219.661175][T17530] ? __alloc_skb+0xf9/0x7d0 [ 1219.665706][T17530] __alloc_skb+0xf9/0x7d0 [ 1219.670054][T17530] netlink_ack+0x373/0x1160 [ 1219.674590][T17530] ? genl_bind+0x360/0x360 [ 1219.679048][T17530] ? netlink_dump+0xcd0/0xcd0 [ 1219.683758][T17530] netlink_rcv_skb+0x26d/0x440 [ 1219.688541][T17530] ? genl_bind+0x360/0x360 [ 1219.692977][T17530] ? netlink_ack+0x1160/0x1160 [ 1219.697784][T17530] ? down_read+0x1a8/0x2d0 [ 1219.702224][T17530] genl_rcv+0x24/0x40 [ 1219.706227][T17530] netlink_unicast+0x7ad/0x920 [ 1219.711011][T17530] netlink_sendmsg+0x8ad/0xbd0 [ 1219.715791][T17530] ? netlink_getsockopt+0x550/0x550 [ 1219.721014][T17530] ? aa_sock_msg_perm+0x94/0x150 [ 1219.725972][T17530] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1219.731278][T17530] ? security_socket_sendmsg+0x7c/0xa0 [ 1219.736754][T17530] ? netlink_getsockopt+0x550/0x550 [ 1219.741980][T17530] ____sys_sendmsg+0x5ed/0x9a0 [ 1219.746776][T17530] ? __sys_sendmsg_sock+0x30/0x30 [ 1219.751814][T17530] ? __import_iovec+0x306/0x510 [ 1219.756694][T17530] ? import_iovec+0x6f/0xa0 [ 1219.761219][T17530] ___sys_sendmsg+0x2a2/0x360 [ 1219.765922][T17530] ? __sys_sendmsg+0x2a0/0x2a0 [ 1219.770741][T17530] ? __lock_acquire+0x7bd0/0x7bd0 [ 1219.775814][T17530] __se_sys_sendmsg+0x1c3/0x2b0 [ 1219.780691][T17530] ? __x64_sys_sendmsg+0x80/0x80 [ 1219.785662][T17530] ? lockdep_hardirqs_on+0x94/0x140 [ 1219.790888][T17530] do_syscall_64+0x4c/0xa0 [ 1219.795318][T17530] ? clear_bhb_loop+0x60/0xb0 [ 1219.800011][T17530] ? clear_bhb_loop+0x60/0xb0 [ 1219.804703][T17530] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1219.810615][T17530] RIP: 0033:0x7f4eea39ce59 [ 1219.815045][T17530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1219.834674][T17530] RSP: 002b:00007f4eeb1ab028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1219.843108][T17530] RAX: ffffffffffffffda RBX: 00007f4eea615fa0 RCX: 00007f4eea39ce59 [ 1219.851089][T17530] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1219.859070][T17530] RBP: 00007f4eeb1ab090 R08: 0000000000000000 R09: 0000000000000000 [ 1219.867052][T17530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1219.875037][T17530] R13: 00007f4eea616038 R14: 00007f4eea615fa0 R15: 00007ffe47a0cbd8 [ 1219.883048][T17530] [ 1220.069783][T17545] netlink: 'syz.4.4051': attribute type 1 has an invalid length. [ 1220.074412][T17543] device syzkaller0 entered promiscuous mode [ 1220.098199][T17545] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.4051'. [ 1220.136670][ T46] wlan1: Creating new IBSS network, BSSID ee:ab:39:e0:57:ec [ 1220.342263][T17550] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1220.634667][T17557] netlink: 134268 bytes leftover after parsing attributes in process `syz.1.4056'. [ 1221.146096][T17567] can: request_module (can-proto-0) failed. [ 1222.184482][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1222.199741][T17560] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4056'. [ 1222.209057][T17560] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1222.248205][T17562] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4056'. [ 1222.271490][T17562] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1222.505746][T17576] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.4062'. [ 1222.959321][T17586] netlink: 'syz.0.4074': attribute type 21 has an invalid length. [ 1223.527606][T17595] netlink: 'syz.2.4067': attribute type 2 has an invalid length. [ 1224.655203][T17595] device .*! entered promiscuous mode [ 1224.662415][T17604] netlink: 'syz.1.4069': attribute type 27 has an invalid length. [ 1224.709286][T17603] delete_channel: no stack [ 1224.926419][T17612] netlink: 134268 bytes leftover after parsing attributes in process `syz.0.4072'. [ 1224.944316][T17615] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4072'. [ 1224.956605][T17615] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1225.018244][T17617] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4076'. [ 1225.072801][T17615] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4072'. [ 1225.114492][T17615] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1225.890052][T17634] netlink: 'syz.1.4081': attribute type 2 has an invalid length. [ 1225.909200][T17634] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4081'. [ 1225.923391][T17640] netlink: 'syz.1.4081': attribute type 10 has an invalid length. [ 1226.017683][T17640] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1226.019317][T17634] netlink: 'syz.1.4081': attribute type 29 has an invalid length. [ 1226.070407][T17645] bridge0: port 2(bridge_slave_1) entered disabled state [ 1226.080274][T17645] bridge0: port 1(bridge_slave_0) entered disabled state [ 1226.105683][T17647] FAULT_INJECTION: forcing a failure. [ 1226.105683][T17647] name failslab, interval 1, probability 0, space 0, times 0 [ 1226.133351][T17634] netlink: 'syz.1.4081': attribute type 29 has an invalid length. [ 1226.146730][T17647] CPU: 0 PID: 17647 Comm: syz.2.4084 Not tainted syzkaller #0 [ 1226.154236][T17647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1226.164306][T17647] Call Trace: [ 1226.167592][T17647] [ 1226.170528][T17647] dump_stack_lvl+0x188/0x24e [ 1226.175224][T17647] ? show_regs_print_info+0x12/0x12 [ 1226.180430][T17647] ? load_image+0x410/0x410 [ 1226.184956][T17647] ? __might_sleep+0xd0/0xd0 [ 1226.189553][T17647] ? __lock_acquire+0x7bd0/0x7bd0 [ 1226.194600][T17647] should_fail_ex+0x390/0x4c0 [ 1226.199290][T17647] should_failslab+0x5/0x20 [ 1226.203805][T17647] slab_pre_alloc_hook+0x59/0x300 [ 1226.208849][T17647] ? dev_ethtool+0x125/0x12f0 [ 1226.213544][T17647] __kmem_cache_alloc_node+0x4f/0x270 [ 1226.218931][T17647] ? dev_ethtool+0x125/0x12f0 [ 1226.223621][T17647] kmalloc_trace+0x26/0xe0 [ 1226.228419][T17647] dev_ethtool+0x125/0x12f0 [ 1226.232967][T17647] ? ethtool_get_module_eeprom_call+0x170/0x170 [ 1226.239225][T17647] ? __lock_acquire+0x7bd0/0x7bd0 [ 1226.244265][T17647] ? full_name_hash+0x8e/0xe0 [ 1226.248948][T17647] ? dev_load+0x1d/0x1e0 [ 1226.253201][T17647] ? dev_load+0x1d/0x1e0 [ 1226.257453][T17647] dev_ioctl+0x474/0xe80 [ 1226.261706][T17647] sock_do_ioctl+0x245/0x320 [ 1226.266307][T17647] ? sock_show_fdinfo+0xb0/0xb0 [ 1226.271188][T17647] sock_ioctl+0x48a/0x700 [ 1226.275529][T17647] ? sock_poll+0x420/0x420 [ 1226.279958][T17647] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1226.284904][T17647] ? security_file_ioctl+0x7c/0xa0 [ 1226.290033][T17647] ? sock_poll+0x420/0x420 [ 1226.294459][T17647] __se_sys_ioctl+0xfa/0x170 [ 1226.299074][T17647] do_syscall_64+0x4c/0xa0 [ 1226.303494][T17647] ? clear_bhb_loop+0x60/0xb0 [ 1226.308178][T17647] ? clear_bhb_loop+0x60/0xb0 [ 1226.312860][T17647] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1226.318760][T17647] RIP: 0033:0x7ff52199ce59 [ 1226.323178][T17647] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1226.342787][T17647] RSP: 002b:00007ff522903028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1226.351203][T17647] RAX: ffffffffffffffda RBX: 00007ff521c15fa0 RCX: 00007ff52199ce59 [ 1226.359178][T17647] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000006 [ 1226.367155][T17647] RBP: 00007ff522903090 R08: 0000000000000000 R09: 0000000000000000 [ 1226.375130][T17647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1226.383103][T17647] R13: 00007ff521c16038 R14: 00007ff521c15fa0 R15: 00007ffc2f622a38 [ 1226.391096][T17647] [ 1226.406569][T17642] netlink: 'syz.1.4081': attribute type 29 has an invalid length. [ 1226.440719][T17640] netlink: 'syz.1.4081': attribute type 29 has an invalid length. [ 1226.583232][T17634] netlink: 'syz.1.4081': attribute type 3 has an invalid length. [ 1226.591023][T17634] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4081'. [ 1226.696724][T17654] delete_channel: no stack [ 1226.975376][T17666] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4091'. [ 1227.059836][T17671] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4089'. [ 1227.104847][T17666] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.4091'. [ 1227.172734][T17671] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1227.288857][T17674] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4089'. [ 1227.335762][T17678] netlink: zone id is out of range [ 1227.342734][T17678] netlink: get zone limit has 8 unknown bytes [ 1227.361281][T17674] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1227.676917][T17687] netlink: zone id is out of range [ 1227.692673][T17687] netlink: zone id is out of range [ 1227.721471][T17687] netlink: zone id is out of range [ 1227.741794][T17687] netlink: zone id is out of range [ 1227.814785][T17687] netlink: zone id is out of range [ 1227.844163][T17687] netlink: zone id is out of range [ 1227.986525][T17696] validate_nla: 5 callbacks suppressed [ 1227.986544][T17696] netlink: 'syz.3.4101': attribute type 10 has an invalid length. [ 1228.021386][T17698] netlink: 'syz.0.4102': attribute type 27 has an invalid length. [ 1228.042023][T17702] netlink: 'syz.3.4101': attribute type 29 has an invalid length. [ 1228.050476][T17701] delete_channel: no stack [ 1228.060760][T17697] delete_channel: no stack [ 1228.080581][T17702] netlink: 'syz.3.4101': attribute type 29 has an invalid length. [ 1228.156746][T17696] netlink: 'syz.3.4101': attribute type 29 has an invalid length. [ 1228.216766][T17702] netlink: 'syz.3.4101': attribute type 29 has an invalid length. [ 1228.242813][T17696] netlink: 'syz.3.4101': attribute type 29 has an invalid length. [ 1228.295008][T17696] netlink: 'syz.3.4101': attribute type 3 has an invalid length. [ 1228.531695][T17714] netlink: 'syz.0.4107': attribute type 10 has an invalid length. [ 1229.456304][T17752] netlink: 'syz.2.4119': attribute type 2 has an invalid length. [ 1229.974189][T17766] device 0 entered promiscuous mode [ 1230.287870][T17773] __nla_validate_parse: 12 callbacks suppressed [ 1230.287928][T17773] netlink: 134268 bytes leftover after parsing attributes in process `syz.4.4127'. [ 1230.328545][T17776] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4127'. [ 1230.457310][T17778] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.4130'. [ 1230.565956][T17782] sctp: [Deprecated]: syz.1.4130 (pid 17782) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1230.565956][T17782] Use struct sctp_sack_info instead [ 1232.059765][T17776] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4127'. [ 1232.074979][T17787] device wlan1 entered promiscuous mode [ 1232.095597][T17789] device sit0 entered promiscuous mode [ 1232.253237][T17796] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4133'. [ 1232.341943][T17796] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.4133'. [ 1232.503514][T17807] FAULT_INJECTION: forcing a failure. [ 1232.503514][T17807] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1232.551141][T17807] CPU: 0 PID: 17807 Comm: syz.3.4138 Not tainted syzkaller #0 [ 1232.558674][T17807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1232.568750][T17807] Call Trace: [ 1232.572046][T17807] [ 1232.575067][T17807] dump_stack_lvl+0x188/0x24e [ 1232.579762][T17807] ? show_regs_print_info+0x12/0x12 [ 1232.584977][T17807] ? load_image+0x410/0x410 [ 1232.589505][T17807] ? __lock_acquire+0x7bd0/0x7bd0 [ 1232.594549][T17807] ? snprintf+0xe5/0x140 [ 1232.598812][T17807] should_fail_ex+0x390/0x4c0 [ 1232.603502][T17807] _copy_to_user+0x2c/0x130 [ 1232.608007][T17807] simple_read_from_buffer+0xe3/0x150 [ 1232.613377][T17807] proc_fail_nth_read+0x1a6/0x220 [ 1232.618400][T17807] ? proc_fault_inject_write+0x310/0x310 [ 1232.624028][T17807] ? fsnotify_perm+0x248/0x550 [ 1232.628790][T17807] ? proc_fault_inject_write+0x310/0x310 [ 1232.634419][T17807] vfs_read+0x2db/0x960 [ 1232.638575][T17807] ? kernel_read+0x1e0/0x1e0 [ 1232.643161][T17807] ? __fget_files+0x28/0x460 [ 1232.647748][T17807] ? __fget_files+0x3fc/0x460 [ 1232.652425][T17807] ? __fdget_pos+0x2ae/0x360 [ 1232.657008][T17807] ? ksys_read+0x70/0x260 [ 1232.661340][T17807] ksys_read+0x14d/0x260 [ 1232.665581][T17807] ? vfs_write+0x9a0/0x9a0 [ 1232.669995][T17807] ? lockdep_hardirqs_on+0x94/0x140 [ 1232.675194][T17807] do_syscall_64+0x4c/0xa0 [ 1232.679600][T17807] ? clear_bhb_loop+0x60/0xb0 [ 1232.684269][T17807] ? clear_bhb_loop+0x60/0xb0 [ 1232.688938][T17807] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1232.694830][T17807] RIP: 0033:0x7fdd7d35d68e [ 1232.699238][T17807] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1232.718842][T17807] RSP: 002b:00007fdd7e2d0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1232.727246][T17807] RAX: ffffffffffffffda RBX: 00007fdd7e2d16c0 RCX: 00007fdd7d35d68e [ 1232.735208][T17807] RDX: 000000000000000f RSI: 00007fdd7e2d10a0 RDI: 0000000000000009 [ 1232.743170][T17807] RBP: 00007fdd7e2d1090 R08: 0000000000000000 R09: 0000000000000000 [ 1232.751130][T17807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1232.759090][T17807] R13: 00007fdd7d616038 R14: 00007fdd7d615fa0 R15: 00007ffefe27aa88 [ 1232.767065][T17807] [ 1232.829981][T17812] bridge0: port 2(bridge_slave_1) entered blocking state [ 1232.837209][T17812] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1232.844710][T17812] bridge0: port 1(bridge_slave_0) entered blocking state [ 1232.851885][T17812] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1232.872054][T17812] device bridge0 entered promiscuous mode [ 1232.879039][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1232.914788][T17810] bridge0: port 2(bridge_slave_1) entered disabled state [ 1233.171106][T17810] bridge0: port 2(bridge_slave_1) entered blocking state [ 1233.178876][T17810] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1233.205370][T17810] device bridge0 entered promiscuous mode [ 1233.545266][T17834] validate_nla: 16 callbacks suppressed [ 1233.545316][T17834] netlink: 'syz.4.4146': attribute type 2 has an invalid length. [ 1233.581006][T17834] device 0 entered promiscuous mode [ 1233.778077][T17840] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4149'. [ 1233.826839][T17842] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4147'. [ 1233.844449][T17842] net_ratelimit: 40 callbacks suppressed [ 1233.844465][T17842] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1233.929389][T17850] FAULT_INJECTION: forcing a failure. [ 1233.929389][T17850] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1233.961176][T17850] CPU: 1 PID: 17850 Comm: syz.0.4150 Not tainted syzkaller #0 [ 1233.968694][T17850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1233.978764][T17850] Call Trace: [ 1233.982065][T17850] [ 1233.985012][T17850] dump_stack_lvl+0x188/0x24e [ 1233.989718][T17850] ? show_regs_print_info+0x12/0x12 [ 1233.994942][T17850] ? load_image+0x410/0x410 [ 1233.999476][T17850] ? __lock_acquire+0x7bd0/0x7bd0 [ 1234.004525][T17850] ? zone_statistics+0x170/0x170 [ 1234.009485][T17850] should_fail_ex+0x390/0x4c0 [ 1234.014172][T17850] _copy_from_user+0x2c/0x170 [ 1234.018847][T17850] bpf_prog_test_run_xdp+0xc26/0xf80 [ 1234.024131][T17850] ? __lock_acquire+0x7bd0/0x7bd0 [ 1234.029162][T17850] ? dev_put+0x80/0x80 [ 1234.033245][T17850] ? dev_put+0x80/0x80 [ 1234.037311][T17850] bpf_prog_test_run+0x31c/0x390 [ 1234.042251][T17850] __sys_bpf+0x62b/0x780 [ 1234.046495][T17850] ? bpf_link_show_fdinfo+0x380/0x380 [ 1234.051879][T17850] ? lock_chain_count+0x20/0x20 [ 1234.056733][T17850] __x64_sys_bpf+0x78/0x90 [ 1234.061150][T17850] do_syscall_64+0x4c/0xa0 [ 1234.065559][T17850] ? clear_bhb_loop+0x60/0xb0 [ 1234.070227][T17850] ? clear_bhb_loop+0x60/0xb0 [ 1234.074909][T17850] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1234.080796][T17850] RIP: 0033:0x7fe0c619ce59 [ 1234.085204][T17850] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1234.104807][T17850] RSP: 002b:00007fe0c708d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1234.113300][T17850] RAX: ffffffffffffffda RBX: 00007fe0c6416090 RCX: 00007fe0c619ce59 [ 1234.121263][T17850] RDX: 0000000000000050 RSI: 0000200000000c80 RDI: 000000000000000a [ 1234.129238][T17850] RBP: 00007fe0c708d090 R08: 0000000000000000 R09: 0000000000000000 [ 1234.137198][T17850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1234.145161][T17850] R13: 00007fe0c6416128 R14: 00007fe0c6416090 R15: 00007ffdd76488d8 [ 1234.153136][T17850] [ 1234.157247][T17844] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4147'. [ 1234.183138][T17844] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1234.318494][T17852] netlink: 'syz.3.4151': attribute type 2 has an invalid length. [ 1234.330834][T17852] netlink: 'syz.3.4151': attribute type 8 has an invalid length. [ 1234.352610][T17852] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4151'. [ 1236.053015][T17869] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4157'. [ 1236.179534][T17872] FAULT_INJECTION: forcing a failure. [ 1236.179534][T17872] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1236.236292][T17872] CPU: 1 PID: 17872 Comm: syz.0.4158 Not tainted syzkaller #0 [ 1236.243814][T17872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1236.253889][T17872] Call Trace: [ 1236.257182][T17872] [ 1236.260127][T17872] dump_stack_lvl+0x188/0x24e [ 1236.264827][T17872] ? show_regs_print_info+0x12/0x12 [ 1236.270044][T17872] ? load_image+0x410/0x410 [ 1236.274572][T17872] ? __lock_acquire+0x7bd0/0x7bd0 [ 1236.279621][T17872] ? ktime_get+0x7b/0x270 [ 1236.283971][T17872] should_fail_ex+0x390/0x4c0 [ 1236.288668][T17872] _copy_from_user+0x2c/0x170 [ 1236.293369][T17872] __sys_bpf+0x2ea/0x780 [ 1236.297639][T17872] ? bpf_link_show_fdinfo+0x380/0x380 [ 1236.303039][T17872] ? lock_chain_count+0x20/0x20 [ 1236.307904][T17872] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1236.313907][T17872] __x64_sys_bpf+0x78/0x90 [ 1236.318346][T17872] do_syscall_64+0x4c/0xa0 [ 1236.322779][T17872] ? clear_bhb_loop+0x60/0xb0 [ 1236.327472][T17872] ? clear_bhb_loop+0x60/0xb0 [ 1236.332184][T17872] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1236.338100][T17872] RIP: 0033:0x7fe0c619ce59 [ 1236.342533][T17872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1236.362156][T17872] RSP: 002b:00007fe0c70ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1236.370575][T17872] RAX: ffffffffffffffda RBX: 00007fe0c6415fa0 RCX: 00007fe0c619ce59 [ 1236.378576][T17872] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 1236.386543][T17872] RBP: 00007fe0c70ae090 R08: 0000000000000000 R09: 0000000000000000 [ 1236.394511][T17872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1236.402479][T17872] R13: 00007fe0c6416038 R14: 00007fe0c6415fa0 R15: 00007ffdd76488d8 [ 1236.410454][T17872] [ 1237.149381][T17908] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4170'. [ 1237.192527][T17908] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1237.420046][T17915] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4172'. [ 1237.531280][T17906] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4170'. [ 1237.602293][T17906] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1237.696069][T17920] netlink: 'syz.4.4174': attribute type 10 has an invalid length. [ 1237.708538][T17920] team0: Port device macvlan0 added [ 1237.883728][T17928] netlink: 184 bytes leftover after parsing attributes in process `syz.4.4177'. [ 1238.415736][T17946] netlink: 'syz.4.4182': attribute type 2 has an invalid length. [ 1238.435522][T17946] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4182'. [ 1238.707615][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.714073][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.958978][T17956] netlink: 134268 bytes leftover after parsing attributes in process `syz.0.4186'. [ 1239.008463][T17956] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4186'. [ 1239.102328][T17956] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1239.179118][T17956] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4186'. [ 1239.244180][T17956] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1239.688391][T17969] netlink: 'syz.0.4191': attribute type 41 has an invalid length. [ 1239.800934][T17965] netlink: 'syz.2.4189': attribute type 33 has an invalid length. [ 1239.840272][T17965] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4189'. [ 1240.978751][T17994] netlink: 'syz.1.4198': attribute type 3 has an invalid length. [ 1241.532113][T18001] netlink: 'syz.2.4200': attribute type 19 has an invalid length. [ 1241.558020][T18004] __nla_validate_parse: 5 callbacks suppressed [ 1241.558039][T18004] netlink: 134268 bytes leftover after parsing attributes in process `syz.4.4201'. [ 1241.584468][T18001] netlink: 14552 bytes leftover after parsing attributes in process `syz.2.4200'. [ 1241.657276][T18009] netlink: 202920 bytes leftover after parsing attributes in process `syz.3.4203'. [ 1241.680880][T18006] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4201'. [ 1241.707216][T18006] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1241.825772][T18010] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4201'. [ 1241.878250][T18010] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1242.427019][T18020] netlink: 'syz.4.4205': attribute type 33 has an invalid length. [ 1242.437354][T18020] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4205'. [ 1242.574572][T18020] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 1243.043113][T18043] netlink: 'syz.1.4212': attribute type 2 has an invalid length. [ 1243.134030][T18043] netlink: 199848 bytes leftover after parsing attributes in process `syz.1.4212'. [ 1243.157530][T18044] netlink: 'syz.4.4213': attribute type 2 has an invalid length. [ 1243.160466][T18048] FAULT_INJECTION: forcing a failure. [ 1243.160466][T18048] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1243.263619][T18044] netlink: 199848 bytes leftover after parsing attributes in process `syz.4.4213'. [ 1243.270052][T18048] CPU: 0 PID: 18048 Comm: syz.4.4213 Not tainted syzkaller #0 [ 1243.280408][T18048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1243.290474][T18048] Call Trace: [ 1243.293759][T18048] [ 1243.296696][T18048] dump_stack_lvl+0x188/0x24e [ 1243.301394][T18048] ? show_regs_print_info+0x12/0x12 [ 1243.306615][T18048] ? load_image+0x410/0x410 [ 1243.311144][T18048] ? __lock_acquire+0x7bd0/0x7bd0 [ 1243.316188][T18048] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1243.322192][T18048] should_fail_ex+0x390/0x4c0 [ 1243.326887][T18048] _copy_from_user+0x2c/0x170 [ 1243.331582][T18048] ___sys_sendmsg+0x1c3/0x360 [ 1243.336280][T18048] ? __sys_sendmsg+0x2a0/0x2a0 [ 1243.341061][T18048] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1243.347057][T18048] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1243.353214][T18048] ? lockdep_hardirqs_on+0x94/0x140 [ 1243.358416][T18048] ? __se_sys_sendmsg+0xee/0x2b0 [ 1243.363347][T18048] ? kasan_check_range+0x80/0x290 [ 1243.368374][T18048] __se_sys_sendmsg+0x1c3/0x2b0 [ 1243.373221][T18048] ? perf_trace_preemptirq_template+0x268/0x320 [ 1243.379459][T18048] ? __x64_sys_sendmsg+0x80/0x80 [ 1243.384407][T18048] ? lockdep_hardirqs_on+0x94/0x140 [ 1243.389600][T18048] do_syscall_64+0x4c/0xa0 [ 1243.394007][T18048] ? clear_bhb_loop+0x60/0xb0 [ 1243.398677][T18048] ? clear_bhb_loop+0x60/0xb0 [ 1243.403355][T18048] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1243.409256][T18048] RIP: 0033:0x7f4eea39ce59 [ 1243.413672][T18048] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1243.433277][T18048] RSP: 002b:00007f4ee85f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1243.441690][T18048] RAX: ffffffffffffffda RBX: 00007f4eea616180 RCX: 00007f4eea39ce59 [ 1243.449655][T18048] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000009 [ 1243.457618][T18048] RBP: 00007f4ee85f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1243.465580][T18048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1243.473545][T18048] R13: 00007f4eea616218 R14: 00007f4eea616180 R15: 00007ffe47a0cbd8 [ 1243.481518][T18048] [ 1243.507966][T18053] netlink: 134268 bytes leftover after parsing attributes in process `syz.3.4215'. [ 1243.578823][T18056] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4215'. [ 1243.631882][T18056] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1243.710513][T18059] netlink: 'syz.2.4217': attribute type 28 has an invalid length. [ 1243.748644][T18059] netlink: 'syz.2.4217': attribute type 10 has an invalid length. [ 1243.789840][T18056] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1244.136924][T18072] netlink: 'syz.4.4219': attribute type 41 has an invalid length. [ 1245.022793][T18091] validate_nla: 1 callbacks suppressed [ 1245.022810][T18091] netlink: 'syz.3.4227': attribute type 2 has an invalid length. [ 1245.564672][T18106] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1245.683062][T18108] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1246.014135][T18119] netlink: 'syz.1.4238': attribute type 15 has an invalid length. [ 1246.045454][T18119] bridge_slave_1: default FDB implementation only supports local addresses [ 1247.131629][T18152] __nla_validate_parse: 8 callbacks suppressed [ 1247.131668][T18152] netlink: 134268 bytes leftover after parsing attributes in process `syz.3.4248'. [ 1247.243417][T18155] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4248'. [ 1247.259346][T18155] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1247.275170][T18157] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4248'. [ 1247.718831][T18157] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1250.166061][ T5022] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1250.996629][T18178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1251.518760][T18200] netlink: 'syz.4.4263': attribute type 21 has an invalid length. [ 1251.561445][T18200] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4263'. [ 1251.620321][T18200] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1251.649987][T18200] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1251.694413][T18200] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1251.721342][T18200] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1252.308060][T18206] netlink: 134268 bytes leftover after parsing attributes in process `syz.1.4266'. [ 1252.372570][T18208] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4266'. [ 1252.397438][T18208] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1252.511696][T18206] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4266'. [ 1252.528619][T18206] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1252.765632][T18212] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1252.819637][T18212] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1252.831404][T18219] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.4269'. [ 1254.249357][T18260] netlink: 'syz.1.4283': attribute type 29 has an invalid length. [ 1254.274294][T18260] netlink: 'syz.1.4283': attribute type 29 has an invalid length. [ 1254.338292][T18259] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1254.364566][T18259] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1254.386548][T18257] netlink: 'syz.1.4283': attribute type 29 has an invalid length. [ 1254.419874][T18262] netlink: 'syz.1.4283': attribute type 29 has an invalid length. [ 1254.785298][T18277] netlink: 65055 bytes leftover after parsing attributes in process `syz.4.4288'. [ 1256.582620][T18306] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1256.663586][T18306] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1257.416569][T18322] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.4306'. [ 1257.761425][T18331] netlink: 'syz.0.4308': attribute type 3 has an invalid length. [ 1257.783720][T18331] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.4308'. [ 1259.611442][T18378] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.4322'. [ 1260.077258][T18377] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4323'. [ 1260.560726][T18389] netlink: 134268 bytes leftover after parsing attributes in process `syz.4.4327'. [ 1260.561355][T18392] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4327'. [ 1260.589280][T18392] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1260.729767][T18389] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4327'. [ 1261.048813][T18389] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1261.382632][T18402] device veth1_macvtap left promiscuous mode [ 1261.401716][T18402] device macsec0 left promiscuous mode [ 1261.424761][T18407] netlink: 'syz.1.4335': attribute type 3 has an invalid length. [ 1261.484195][T18407] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4335'. [ 1261.521243][T18404] netlink: 'syz.2.4333': attribute type 10 has an invalid length. [ 1262.153497][T18411] device veth1_macvtap entered promiscuous mode [ 1262.160004][T18411] device macsec0 entered promiscuous mode [ 1262.337874][T18420] netlink: 'syz.3.4336': attribute type 29 has an invalid length. [ 1262.435763][T18420] netlink: 'syz.3.4336': attribute type 29 has an invalid length. [ 1262.498769][T18417] netlink: 'syz.3.4336': attribute type 29 has an invalid length. [ 1262.654202][T18417] netlink: 'syz.3.4336': attribute type 29 has an invalid length. [ 1262.789709][T18431] netlink: 'syz.2.4341': attribute type 21 has an invalid length. [ 1262.806129][T18431] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4341'. [ 1262.944237][T18431] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1262.953549][T18431] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1262.974743][T18431] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1262.983897][T18431] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1263.117046][T18443] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4345'. [ 1263.126937][T18443] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1263.130367][T18442] netlink: 134268 bytes leftover after parsing attributes in process `syz.4.4345'. [ 1263.198706][T18443] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4345'. [ 1263.220873][T18443] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1263.617418][T18450] netlink: 'syz.4.4347': attribute type 2 has an invalid length. [ 1263.635960][T18450] netlink: 'syz.4.4347': attribute type 3 has an invalid length. [ 1263.646378][T18450] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4347'. [ 1263.895595][T18460] netlink: 16054 bytes leftover after parsing attributes in process `syz.4.4349'. [ 1267.219742][T18481] netlink: 134268 bytes leftover after parsing attributes in process `syz.0.4357'. [ 1267.255326][T18481] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4357'. [ 1267.282356][T18481] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1267.368212][T18481] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4357'. [ 1267.408564][T18481] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1267.529696][T18488] netlink: 'syz.1.4360': attribute type 2 has an invalid length. [ 1267.537680][T18488] netlink: 'syz.1.4360': attribute type 3 has an invalid length. [ 1267.546062][T18488] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4360'. [ 1267.649102][T18496] device veth1_macvtap left promiscuous mode [ 1267.671283][T18496] device macsec0 left promiscuous mode [ 1267.739266][T18496] device veth1_macvtap entered promiscuous mode [ 1267.749997][T18496] device macsec0 entered promiscuous mode [ 1267.767949][ T8991] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1268.207107][T18515] ref_ctr_offset mismatch. inode: 0x58c offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 1268.750661][T18528] __nla_validate_parse: 1 callbacks suppressed [ 1268.750700][T18528] netlink: 134268 bytes leftover after parsing attributes in process `syz.3.4374'. [ 1268.779951][T18529] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4374'. [ 1268.789564][T18529] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1268.911751][T18528] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4374'. [ 1268.922726][T18528] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1269.180498][T18538] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4375'. [ 1269.194592][T18535] netlink: 134268 bytes leftover after parsing attributes in process `syz.0.4375'. [ 1269.270096][T18538] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1269.436607][T18541] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4375'. [ 1269.471848][T18541] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1269.575777][T18545] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1269.606188][T18545] device syzkaller0 entered promiscuous mode [ 1271.320262][T18561] netlink: 'syz.0.4382': attribute type 10 has an invalid length. [ 1271.330869][T18561] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4382'. [ 1271.455367][T18574] netlink: 'syz.4.4387': attribute type 7 has an invalid length. [ 1271.463842][T18574] netlink: 'syz.4.4387': attribute type 6 has an invalid length. [ 1271.633366][T18585] netlink: 'syz.1.4388': attribute type 1 has an invalid length. [ 1271.641740][T18587] FAULT_INJECTION: forcing a failure. [ 1271.641740][T18587] name failslab, interval 1, probability 0, space 0, times 0 [ 1271.654754][T18587] CPU: 1 PID: 18587 Comm: syz.0.4390 Not tainted syzkaller #0 [ 1271.662232][T18587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1271.672307][T18587] Call Trace: [ 1271.675600][T18587] [ 1271.678544][T18587] dump_stack_lvl+0x188/0x24e [ 1271.683243][T18587] ? show_regs_print_info+0x12/0x12 [ 1271.688454][T18587] ? load_image+0x410/0x410 [ 1271.692985][T18587] ? __might_sleep+0xd0/0xd0 [ 1271.697593][T18587] ? __lock_acquire+0x7bd0/0x7bd0 [ 1271.702649][T18587] should_fail_ex+0x390/0x4c0 [ 1271.707360][T18587] should_failslab+0x5/0x20 [ 1271.711878][T18587] slab_pre_alloc_hook+0x59/0x300 [ 1271.716925][T18587] ? tomoyo_encode+0x28a/0x550 [ 1271.721719][T18587] __kmem_cache_alloc_node+0x4f/0x270 [ 1271.727114][T18587] ? tomoyo_encode+0x28a/0x550 [ 1271.731932][T18587] __kmalloc+0xa3/0x240 [ 1271.736124][T18587] tomoyo_encode+0x28a/0x550 [ 1271.740747][T18587] tomoyo_realpath_from_path+0x578/0x5c0 [ 1271.746406][T18587] ? tomoyo_domain+0xd2/0x120 [ 1271.751109][T18587] ? tomoyo_path_number_perm+0x205/0x650 [ 1271.756762][T18587] tomoyo_path_number_perm+0x22f/0x650 [ 1271.762252][T18587] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1271.767732][T18587] ? ksys_write+0x1ce/0x260 [ 1271.772263][T18587] ? common_file_perm+0x171/0x1c0 [ 1271.777353][T18587] ? __fget_files+0x28/0x460 [ 1271.781978][T18587] security_file_ioctl+0x6c/0xa0 [ 1271.786944][T18587] __se_sys_ioctl+0x48/0x170 [ 1271.791575][T18587] do_syscall_64+0x4c/0xa0 [ 1271.796001][T18587] ? clear_bhb_loop+0x60/0xb0 [ 1271.800690][T18587] ? clear_bhb_loop+0x60/0xb0 [ 1271.805379][T18587] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1271.811289][T18587] RIP: 0033:0x7fe0c619ce59 [ 1271.815719][T18587] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1271.835343][T18587] RSP: 002b:00007fe0c70ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1271.843777][T18587] RAX: ffffffffffffffda RBX: 00007fe0c6415fa0 RCX: 00007fe0c619ce59 [ 1271.851765][T18587] RDX: 00002000000001c0 RSI: 00000000000089e0 RDI: 0000000000000003 [ 1271.859751][T18587] RBP: 00007fe0c70ae090 R08: 0000000000000000 R09: 0000000000000000 [ 1271.867735][T18587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1271.875719][T18587] R13: 00007fe0c6416038 R14: 00007fe0c6415fa0 R15: 00007ffdd76488d8 [ 1271.883721][T18587] [ 1271.906364][T18585] netlink: 'syz.1.4388': attribute type 4 has an invalid length. [ 1271.942299][T18585] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.4388'. [ 1272.040893][T18587] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1272.329882][T18597] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.4393'. [ 1273.056950][T18607] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4396'. [ 1273.136580][T18607] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1273.360520][T18603] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1274.444286][T18632] __nla_validate_parse: 1 callbacks suppressed [ 1274.444314][T18632] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4404'. [ 1275.244600][T18647] netlink: 'syz.2.4408': attribute type 29 has an invalid length. [ 1275.483996][T18647] netlink: 'syz.2.4408': attribute type 29 has an invalid length. [ 1275.501584][T18650] netlink: 'syz.2.4408': attribute type 29 has an invalid length. [ 1275.825299][T18667] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4413'. [ 1275.845362][T18663] netlink: 134268 bytes leftover after parsing attributes in process `syz.3.4413'. [ 1275.861676][T18667] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1275.971780][T18670] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4413'. [ 1276.023461][T18670] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1276.240501][T18672] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4416'. [ 1278.281884][T18704] netlink: 'syz.2.4425': attribute type 10 has an invalid length. [ 1278.289775][T18704] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4425'. [ 1278.454255][T18704] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1278.575059][T18715] netlink: 134268 bytes leftover after parsing attributes in process `syz.4.4429'. [ 1278.616686][T18716] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4429'. [ 1278.652440][T18716] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1278.670373][T18719] netlink: 'syz.2.4431': attribute type 3 has an invalid length. [ 1278.689560][T18719] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4431'. [ 1278.720181][T18721] netlink: 'syz.1.4432': attribute type 10 has an invalid length. [ 1278.785307][T18721] bridge0: port 2(bridge_slave_1) entered disabled state [ 1278.794537][T18721] bridge0: port 1(bridge_slave_0) entered disabled state [ 1278.880925][T18721] bridge0: port 2(bridge_slave_1) entered blocking state [ 1278.889086][T18721] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1278.899251][T18721] bridge0: port 1(bridge_slave_0) entered blocking state [ 1278.906885][T18721] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1278.947053][T18721] team0: Port device bridge0 added [ 1278.972761][T18715] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4429'. [ 1278.988276][T18715] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1279.683041][T18743] netlink: 'syz.3.4440': attribute type 10 has an invalid length. [ 1279.742414][T18745] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4441'. [ 1279.772126][T18745] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4441'. [ 1279.864919][T18746] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4441'. [ 1279.884166][T18745] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4441'. [ 1281.024724][T18771] netlink: 134268 bytes leftover after parsing attributes in process `syz.2.4448'. [ 1281.059153][T18782] netlink: 'syz.1.4445': attribute type 29 has an invalid length. [ 1281.194398][ T8991] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1281.661284][T18779] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4448'. [ 1281.691961][T18779] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1281.806196][T18781] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4448'. [ 1281.847240][T18781] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1281.880678][T18782] netlink: 'syz.1.4445': attribute type 29 has an invalid length. [ 1282.010773][T18793] netlink: 134268 bytes leftover after parsing attributes in process `syz.0.4453'. [ 1282.148281][T18795] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4453'. [ 1282.191302][T18795] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1282.314839][T18793] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4453'. [ 1282.373345][T18793] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1283.368971][T18825] netlink: 'syz.0.4464': attribute type 3 has an invalid length. [ 1283.407406][T18825] netlink: 'syz.0.4464': attribute type 1 has an invalid length. [ 1283.719696][T18831] netlink: 'syz.1.4468': attribute type 17 has an invalid length. [ 1284.197171][T18844] netlink: 'syz.0.4467': attribute type 29 has an invalid length. [ 1284.233499][T18844] netlink: 'syz.0.4467': attribute type 29 has an invalid length. [ 1284.270519][T18835] netlink: 'syz.0.4467': attribute type 29 has an invalid length. [ 1286.493562][T18873] netlink: 'syz.0.4481': attribute type 10 has an invalid length. [ 1286.502244][T18873] __nla_validate_parse: 2 callbacks suppressed [ 1286.502376][T18873] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4481'. [ 1286.555779][T18873] batman_adv: batadv0: Adding interface: virt_wifi0 [ 1286.573794][T18873] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1286.586546][T18876] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.4481'. [ 1286.607490][T18873] batman_adv: batadv0: Interface activated: virt_wifi0 [ 1287.072501][T18883] netlink: 'syz.3.4484': attribute type 17 has an invalid length. [ 1287.080394][T18883] netlink: 148 bytes leftover after parsing attributes in process `syz.3.4484'. [ 1287.632699][T18901] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4490'. [ 1288.551814][T18917] netlink: 'syz.4.4496': attribute type 3 has an invalid length. [ 1288.582111][T18917] netlink: 'syz.4.4496': attribute type 8 has an invalid length. [ 1288.590077][T18917] netlink: 197344 bytes leftover after parsing attributes in process `syz.4.4496'. [ 1288.615054][T18912] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4495'. [ 1289.266697][T18939] netlink: 'syz.3.4501': attribute type 10 has an invalid length. [ 1289.303654][T18939] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4501'. [ 1289.373955][T18939] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1289.508831][T18951] netlink: 'syz.0.4504': attribute type 17 has an invalid length. [ 1289.531591][T18939] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.4501'. [ 1289.542368][T18951] netlink: 148 bytes leftover after parsing attributes in process `syz.0.4504'. [ 1291.410571][T18986] FAULT_INJECTION: forcing a failure. [ 1291.410571][T18986] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1291.426706][T18986] CPU: 0 PID: 18986 Comm: syz.3.4517 Not tainted syzkaller #0 [ 1291.434207][T18986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1291.444284][T18986] Call Trace: [ 1291.447582][T18986] [ 1291.450526][T18986] dump_stack_lvl+0x188/0x24e [ 1291.455226][T18986] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1291.461410][T18986] ? show_regs_print_info+0x12/0x12 [ 1291.466630][T18986] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1291.472816][T18986] ? dump_stack+0x5/0x12 [ 1291.477083][T18986] should_fail_ex+0x390/0x4c0 [ 1291.481784][T18986] strncpy_from_user+0x32/0x340 [ 1291.486659][T18986] bpf_prog_load+0x200/0x1530 [ 1291.491371][T18986] ? map_freeze+0x390/0x390 [ 1291.495893][T18986] ? __might_fault+0xa6/0x120 [ 1291.500603][T18986] ? __might_fault+0xa6/0x120 [ 1291.505297][T18986] ? __might_fault+0xc2/0x120 [ 1291.509991][T18986] ? __might_fault+0xa6/0x120 [ 1291.514684][T18986] ? bpf_lsm_bpf+0x5/0x10 [ 1291.519031][T18986] ? security_bpf+0x7a/0xa0 [ 1291.523553][T18986] __sys_bpf+0x5b8/0x780 [ 1291.527829][T18986] ? bpf_link_show_fdinfo+0x380/0x380 [ 1291.533231][T18986] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1291.539596][T18986] __x64_sys_bpf+0x78/0x90 [ 1291.544036][T18986] do_syscall_64+0x4c/0xa0 [ 1291.548470][T18986] ? clear_bhb_loop+0x60/0xb0 [ 1291.553163][T18986] ? clear_bhb_loop+0x60/0xb0 [ 1291.557860][T18986] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1291.563773][T18986] RIP: 0033:0x7fdd7d39ce59 [ 1291.568202][T18986] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1291.587828][T18986] RSP: 002b:00007fdd7e2d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1291.596260][T18986] RAX: ffffffffffffffda RBX: 00007fdd7d615fa0 RCX: 00007fdd7d39ce59 [ 1291.604244][T18986] RDX: 0000000000000078 RSI: 0000200000000440 RDI: 0000000000000005 [ 1291.612228][T18986] RBP: 00007fdd7e2d1090 R08: 0000000000000000 R09: 0000000000000000 [ 1291.620220][T18986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1291.628205][T18986] R13: 00007fdd7d616038 R14: 00007fdd7d615fa0 R15: 00007ffefe27aa88 [ 1291.636206][T18986] [ 1291.816922][T18988] netlink: 'syz.4.4518': attribute type 10 has an invalid length. [ 1291.879474][T18988] team0: Device veth1_macvtap failed to register rx_handler [ 1292.093712][T19007] netlink: 'syz.4.4521': attribute type 10 has an invalid length. [ 1292.123697][T19007] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4521'. [ 1292.183827][T19007] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1292.186121][T19008] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.4521'. [ 1292.414179][T19021] netlink: 'syz.1.4525': attribute type 29 has an invalid length. [ 1292.422843][T19021] netlink: 'syz.1.4525': attribute type 29 has an invalid length. [ 1292.432383][T19021] netlink: 'syz.1.4525': attribute type 29 has an invalid length. [ 1292.639632][T19028] device veth1_macvtap left promiscuous mode [ 1292.671690][T19028] device macsec0 left promiscuous mode [ 1292.775229][T19028] device veth1_macvtap entered promiscuous mode [ 1292.826900][T19028] device macsec0 entered promiscuous mode [ 1292.998350][T19041] netlink: 'syz.3.4534': attribute type 11 has an invalid length. [ 1295.786480][T19059] validate_nla: 1 callbacks suppressed [ 1295.786513][T19059] netlink: 'syz.3.4538': attribute type 3 has an invalid length. [ 1295.847585][T19059] netlink: 'syz.3.4538': attribute type 8 has an invalid length. [ 1295.881093][T19063] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.4539'. [ 1295.881144][T19059] netlink: 197344 bytes leftover after parsing attributes in process `syz.3.4538'. [ 1295.925359][T19063] netlink: 'syz.0.4539': attribute type 3 has an invalid length. [ 1295.945114][T19063] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.4539'. [ 1296.319434][T19076] netlink: 134268 bytes leftover after parsing attributes in process `syz.3.4544'. [ 1296.370404][T19077] netlink: 134268 bytes leftover after parsing attributes in process `syz.4.4545'. [ 1296.385218][T19076] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4544'. [ 1296.421373][T19076] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1296.490719][T19084] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4545'. [ 1296.505411][T19084] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1296.556141][T19089] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4545'. [ 1296.567143][T19089] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1296.591886][T19082] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1296.705877][T19095] netlink: 'syz.0.4551': attribute type 29 has an invalid length. [ 1296.740525][T19096] FAULT_INJECTION: forcing a failure. [ 1296.740525][T19096] name failslab, interval 1, probability 0, space 0, times 0 [ 1296.776336][T19096] CPU: 0 PID: 19096 Comm: syz.1.4549 Not tainted syzkaller #0 [ 1296.783865][T19096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1296.793946][T19096] Call Trace: [ 1296.797241][T19096] [ 1296.800186][T19096] dump_stack_lvl+0x188/0x24e [ 1296.803237][T19104] FAULT_INJECTION: forcing a failure. [ 1296.803237][T19104] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1296.804866][T19096] ? sctp_sendmsg+0x1686/0x2940 [ 1296.823186][T19096] ? ___sys_sendmsg+0x2a2/0x360 [ 1296.828054][T19096] ? show_regs_print_info+0x12/0x12 [ 1296.833267][T19096] ? load_image+0x410/0x410 [ 1296.837790][T19096] should_fail_ex+0x390/0x4c0 [ 1296.842475][T19096] should_failslab+0x5/0x20 [ 1296.846983][T19096] slab_pre_alloc_hook+0x59/0x300 [ 1296.852022][T19096] ? sctp_add_bind_addr+0x89/0x350 [ 1296.857140][T19096] __kmem_cache_alloc_node+0x4f/0x270 [ 1296.862525][T19096] ? sctp_add_bind_addr+0x89/0x350 [ 1296.867642][T19096] kmalloc_trace+0x26/0xe0 [ 1296.872069][T19096] sctp_add_bind_addr+0x89/0x350 [ 1296.877101][T19096] sctp_copy_local_addr_list+0x317/0x4d0 [ 1296.882742][T19096] ? sctp_copy_local_addr_list+0xa0/0x4d0 [ 1296.888464][T19096] ? sctp_do_8_2_transport_strike+0x900/0x900 [ 1296.894534][T19096] ? sctp_v4_is_any+0x31/0x50 [ 1296.899213][T19096] ? sctp_copy_one_addr+0x93/0x660 [ 1296.904337][T19096] sctp_bind_addr_copy+0x185/0x3c0 [ 1296.909472][T19096] sctp_connect_new_asoc+0x2f5/0x6a0 [ 1296.914775][T19096] ? __sctp_connect+0xd80/0xd80 [ 1296.919640][T19096] ? sctp_sendmsg+0x1518/0x2940 [ 1296.924499][T19096] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 1296.930058][T19096] ? security_sctp_bind_connect+0x85/0xb0 [ 1296.935799][T19096] sctp_sendmsg+0x1686/0x2940 [ 1296.940497][T19096] ? sctp_getsockopt+0x8a0/0x8a0 [ 1296.945447][T19096] ? __might_fault+0xa6/0x120 [ 1296.950134][T19096] ? aa_af_perm+0x340/0x340 [ 1296.954642][T19096] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 1296.961073][T19096] ? inet_sendmsg+0xca/0x2a0 [ 1296.965670][T19096] ? inet_send_prepare+0x250/0x250 [ 1296.970789][T19096] ____sys_sendmsg+0x5ed/0x9a0 [ 1296.975565][T19096] ? __sys_sendmsg_sock+0x30/0x30 [ 1296.980596][T19096] ? __import_iovec+0x306/0x510 [ 1296.985457][T19096] ? import_iovec+0x6f/0xa0 [ 1296.989964][T19096] ___sys_sendmsg+0x2a2/0x360 [ 1296.994653][T19096] ? __sys_sendmsg+0x2a0/0x2a0 [ 1296.999441][T19096] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1297.005630][T19096] __se_sys_sendmsg+0x1c3/0x2b0 [ 1297.010493][T19096] ? __x64_sys_sendmsg+0x80/0x80 [ 1297.015445][T19096] ? lockdep_hardirqs_on+0x94/0x140 [ 1297.020660][T19096] do_syscall_64+0x4c/0xa0 [ 1297.025077][T19096] ? clear_bhb_loop+0x60/0xb0 [ 1297.029756][T19096] ? clear_bhb_loop+0x60/0xb0 [ 1297.034434][T19096] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1297.040333][T19096] RIP: 0033:0x7f69a779ce59 [ 1297.044746][T19096] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1297.064353][T19096] RSP: 002b:00007f69a8655028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1297.072776][T19096] RAX: ffffffffffffffda RBX: 00007f69a7a15fa0 RCX: 00007f69a779ce59 [ 1297.080747][T19096] RDX: 0000000000008040 RSI: 00002000000002c0 RDI: 0000000000000006 [ 1297.088723][T19096] RBP: 00007f69a8655090 R08: 0000000000000000 R09: 0000000000000000 [ 1297.096695][T19096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1297.104665][T19096] R13: 00007f69a7a16038 R14: 00007f69a7a15fa0 R15: 00007ffc62272068 [ 1297.112653][T19096] [ 1297.115670][T19104] CPU: 1 PID: 19104 Comm: syz.4.4554 Not tainted syzkaller #0 [ 1297.123143][T19104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1297.133212][T19104] Call Trace: [ 1297.136502][T19104] [ 1297.139441][T19104] dump_stack_lvl+0x188/0x24e [ 1297.144126][T19104] ? show_regs_print_info+0x12/0x12 [ 1297.149320][T19104] ? load_image+0x410/0x410 [ 1297.153830][T19104] ? __might_fault+0xa6/0x120 [ 1297.158503][T19104] should_fail_ex+0x390/0x4c0 [ 1297.163177][T19104] copyin+0x1b/0x120 [ 1297.167077][T19104] _copy_from_iter+0x447/0x1130 [ 1297.171936][T19104] ? copyout_mc+0x110/0x110 [ 1297.176433][T19104] ? copyout_mc+0x110/0x110 [ 1297.180926][T19104] ? __virt_addr_valid+0x188/0x540 [ 1297.186038][T19104] ? page_copy_sane+0x194/0x390 [ 1297.190880][T19104] copy_page_from_iter+0x77/0x100 [ 1297.195900][T19104] skb_copy_datagram_from_iter+0x2c5/0x6b0 [ 1297.201711][T19104] unix_stream_sendmsg+0x4d5/0xa70 [ 1297.206833][T19104] ? unix_show_fdinfo+0x2c0/0x2c0 [ 1297.211855][T19104] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 1297.218275][T19104] ? aa_sock_msg_perm+0x94/0x150 [ 1297.223210][T19104] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1297.228488][T19104] ? security_socket_sendmsg+0x7c/0xa0 [ 1297.233935][T19104] ? unix_show_fdinfo+0x2c0/0x2c0 [ 1297.238956][T19104] ____sys_sendmsg+0x5ed/0x9a0 [ 1297.243728][T19104] ? __sys_sendmsg_sock+0x30/0x30 [ 1297.248744][T19104] ? __import_iovec+0x306/0x510 [ 1297.253591][T19104] ? import_iovec+0x6f/0xa0 [ 1297.258090][T19104] ___sys_sendmsg+0x2a2/0x360 [ 1297.262762][T19104] ? __sys_sendmsg+0x2a0/0x2a0 [ 1297.267531][T19104] ? __lock_acquire+0x7bd0/0x7bd0 [ 1297.272567][T19104] __se_sys_sendmsg+0x1c3/0x2b0 [ 1297.277409][T19104] ? __x64_sys_sendmsg+0x80/0x80 [ 1297.282348][T19104] ? lockdep_hardirqs_on+0x94/0x140 [ 1297.287551][T19104] do_syscall_64+0x4c/0xa0 [ 1297.291956][T19104] ? clear_bhb_loop+0x60/0xb0 [ 1297.296626][T19104] ? clear_bhb_loop+0x60/0xb0 [ 1297.301294][T19104] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1297.307187][T19104] RIP: 0033:0x7f4eea39ce59 [ 1297.311595][T19104] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1297.331195][T19104] RSP: 002b:00007f4eeb1ab028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1297.339601][T19104] RAX: ffffffffffffffda RBX: 00007f4eea615fa0 RCX: 00007f4eea39ce59 [ 1297.347564][T19104] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000005 [ 1297.355527][T19104] RBP: 00007f4eeb1ab090 R08: 0000000000000000 R09: 0000000000000000 [ 1297.363487][T19104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1297.371449][T19104] R13: 00007f4eea616038 R14: 00007f4eea615fa0 R15: 00007ffe47a0cbd8 [ 1297.379425][T19104] [ 1297.382593][T19095] netlink: 'syz.0.4551': attribute type 29 has an invalid length. [ 1297.400358][T19101] netlink: 'syz.0.4551': attribute type 29 has an invalid length. [ 1297.574772][T19116] netlink: 'syz.1.4557': attribute type 3 has an invalid length. [ 1297.601217][T19116] netlink: 'syz.1.4557': attribute type 8 has an invalid length. [ 1297.621807][T19116] __nla_validate_parse: 1 callbacks suppressed [ 1297.621839][T19116] netlink: 197344 bytes leftover after parsing attributes in process `syz.1.4557'. [ 1298.095322][T19138] netlink: 134268 bytes leftover after parsing attributes in process `syz.1.4563'. [ 1298.120970][T19143] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4563'. [ 1298.181173][T19143] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1298.241333][T19148] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4563'. [ 1298.260219][T19148] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1299.350938][T19185] netlink: 134268 bytes leftover after parsing attributes in process `syz.0.4581'. [ 1299.375413][T19185] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4581'. [ 1299.398294][T19185] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1299.416904][T19191] netlink: 'syz.3.4583': attribute type 41 has an invalid length. [ 1299.509388][T19185] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4581'. [ 1299.532214][T19185] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1299.552477][T19191] netlink: 'syz.3.4583': attribute type 10 has an invalid length. [ 1300.144117][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.150458][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.275202][T19223] FAULT_INJECTION: forcing a failure. [ 1300.275202][T19223] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1300.357190][T19223] CPU: 1 PID: 19223 Comm: syz.1.4592 Not tainted syzkaller #0 [ 1300.364707][T19223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1300.374845][T19223] Call Trace: [ 1300.378116][T19223] [ 1300.381043][T19223] dump_stack_lvl+0x188/0x24e [ 1300.385724][T19223] ? show_regs_print_info+0x12/0x12 [ 1300.390917][T19223] ? load_image+0x410/0x410 [ 1300.395420][T19223] ? __lock_acquire+0x7bd0/0x7bd0 [ 1300.400443][T19223] should_fail_ex+0x390/0x4c0 [ 1300.405115][T19223] _copy_from_user+0x2c/0x170 [ 1300.409788][T19223] iovec_from_user+0x143/0x360 [ 1300.414550][T19223] __import_iovec+0x6c/0x510 [ 1300.419157][T19223] import_iovec+0x6f/0xa0 [ 1300.423497][T19223] ___sys_sendmsg+0x252/0x360 [ 1300.428183][T19223] ? __sys_sendmsg+0x2a0/0x2a0 [ 1300.432961][T19223] ? __lock_acquire+0x7bd0/0x7bd0 [ 1300.438010][T19223] __se_sys_sendmsg+0x1c3/0x2b0 [ 1300.442858][T19223] ? __x64_sys_sendmsg+0x80/0x80 [ 1300.447805][T19223] ? lockdep_hardirqs_on+0x94/0x140 [ 1300.453003][T19223] do_syscall_64+0x4c/0xa0 [ 1300.457411][T19223] ? clear_bhb_loop+0x60/0xb0 [ 1300.462079][T19223] ? clear_bhb_loop+0x60/0xb0 [ 1300.466746][T19223] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1300.472646][T19223] RIP: 0033:0x7f69a779ce59 [ 1300.477053][T19223] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1300.496649][T19223] RSP: 002b:00007f69a8655028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1300.505054][T19223] RAX: ffffffffffffffda RBX: 00007f69a7a15fa0 RCX: 00007f69a779ce59 [ 1300.513014][T19223] RDX: 0000000004000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1300.520977][T19223] RBP: 00007f69a8655090 R08: 0000000000000000 R09: 0000000000000000 [ 1300.528941][T19223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1300.536906][T19223] R13: 00007f69a7a16038 R14: 00007f69a7a15fa0 R15: 00007ffc62272068 [ 1300.544881][T19223] [ 1300.646017][T19227] device syzkaller0 entered promiscuous mode [ 1300.731980][T19231] device wlan1 left promiscuous mode [ 1300.870057][T19231] validate_nla: 4 callbacks suppressed [ 1300.870116][T19231] netlink: 'syz.3.4597': attribute type 10 has an invalid length. [ 1303.038300][T19263] netlink: 'syz.4.4605': attribute type 1 has an invalid length. [ 1303.084675][T19263] netlink: 'syz.4.4605': attribute type 4 has an invalid length. [ 1303.141369][T19263] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.4605'. [ 1303.989778][T19283] netlink: 'syz.0.4608': attribute type 10 has an invalid length. [ 1304.085278][T19283] bridge0: port 2(bridge_slave_1) entered disabled state [ 1304.116539][T19283] device bridge_slave_1 left promiscuous mode [ 1304.130929][T19283] bridge0: port 2(bridge_slave_1) entered disabled state [ 1304.167121][T19283] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1304.372074][T19298] netlink: 134268 bytes leftover after parsing attributes in process `syz.3.4618'. [ 1304.413403][T19298] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4618'. [ 1304.425495][T19298] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1304.494583][T19302] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4618'. [ 1304.511977][T19302] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1304.704584][T19309] netlink: 'syz.3.4621': attribute type 1 has an invalid length. [ 1304.950393][T19317] netlink: 'syz.4.4625': attribute type 10 has an invalid length. [ 1305.083169][T19323] netlink: 'syz.0.4626': attribute type 10 has an invalid length. [ 1305.115063][T19323] netlink: 55 bytes leftover after parsing attributes in process `syz.0.4626'. [ 1305.490853][T19335] netlink: 134268 bytes leftover after parsing attributes in process `syz.1.4631'. [ 1305.865225][T19328] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4626'. [ 1305.880122][T19337] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4631'. [ 1305.901369][T19337] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1305.932741][T19340] netlink: 'syz.2.4633': attribute type 21 has an invalid length. [ 1305.983865][T19341] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4631'. [ 1306.018386][T19341] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1306.460563][T19361] device veth1_macvtap left promiscuous mode [ 1306.473214][T19361] device macsec0 left promiscuous mode [ 1306.517132][T19361] device veth1_macvtap entered promiscuous mode [ 1306.530539][T19361] device macsec0 entered promiscuous mode [ 1306.555016][T19368] netlink: 'syz.2.4641': attribute type 39 has an invalid length. [ 1306.579456][T19360] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.4639'. [ 1308.893950][T19411] netlink: 'syz.4.4657': attribute type 33 has an invalid length. [ 1308.918971][T19411] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4657'. [ 1308.950244][T19411] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1309.026855][T19411] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1309.182630][T19422] netlink: 'syz.0.4660': attribute type 39 has an invalid length. [ 1309.725136][T19442] netlink: 'syz.3.4666': attribute type 10 has an invalid length. [ 1309.742260][T19442] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4666'. [ 1309.763871][T19447] netlink: 'syz.0.4667': attribute type 2 has an invalid length. [ 1309.868150][T19448] netlink: 'syz.2.4678': attribute type 39 has an invalid length. [ 1309.906220][T19451] netlink: 'syz.0.4667': attribute type 3 has an invalid length. [ 1309.956556][T19451] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.4667'. [ 1310.991533][T19478] device veth1_macvtap left promiscuous mode [ 1310.999892][T19478] device macsec0 left promiscuous mode [ 1311.039746][T19479] device veth1_macvtap entered promiscuous mode [ 1311.069329][T19479] device macsec0 entered promiscuous mode [ 1311.603125][T19495] netlink: 'syz.0.4682': attribute type 10 has an invalid length. [ 1311.624804][T19495] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4682'. [ 1311.637387][T19495] device bond0 entered promiscuous mode [ 1311.643742][T19495] device bond_slave_0 entered promiscuous mode [ 1311.650527][T19495] device bond_slave_1 entered promiscuous mode [ 1311.681848][T19495] device bridge_slave_1 entered promiscuous mode [ 1311.711299][T19495] bridge0: port 2(bond0) entered blocking state [ 1311.723233][T19495] bridge0: port 2(bond0) entered disabled state [ 1311.733413][T19495] bridge0: port 2(bond0) entered blocking state [ 1311.739787][T19495] bridge0: port 2(bond0) entered forwarding state [ 1311.838569][T19502] netlink: 'syz.4.4684': attribute type 39 has an invalid length. [ 1311.963322][T19505] netlink: 'syz.1.4686': attribute type 2 has an invalid length. [ 1312.047308][T19513] netlink: 'syz.1.4686': attribute type 3 has an invalid length. [ 1312.068523][T19513] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4686'. [ 1312.645480][T19530] device macsec0 left promiscuous mode [ 1312.727054][T19530] device macsec0 entered promiscuous mode [ 1312.832685][T19535] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4697'. [ 1312.929692][T19542] netlink: 'syz.1.4699': attribute type 39 has an invalid length. [ 1313.503945][T19556] netlink: 'syz.1.4703': attribute type 39 has an invalid length. [ 1314.030554][T19572] netlink: 830 bytes leftover after parsing attributes in process `syz.4.4707'. [ 1314.754847][T19582] netlink: 'syz.1.4706': attribute type 10 has an invalid length. [ 1314.836337][T19582] bridge0: port 2(bridge_slave_1) entered disabled state [ 1314.848986][T19582] device bridge_slave_1 left promiscuous mode [ 1314.855438][T19582] bridge0: port 2(bridge_slave_1) entered disabled state [ 1314.874744][T19582] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1314.974762][T19586] netlink: 'syz.2.4724': attribute type 10 has an invalid length. [ 1315.439894][T19604] netlink: 'syz.0.4717': attribute type 29 has an invalid length. [ 1315.933954][T19615] netlink: 'syz.3.4721': attribute type 29 has an invalid length. [ 1316.950474][T19638] validate_nla: 4 callbacks suppressed [ 1316.950491][T19638] netlink: 'syz.3.4727': attribute type 10 has an invalid length. [ 1317.165202][T19638] device bridge_slave_1 left promiscuous mode [ 1317.281322][T19638] bridge0: port 2(bridge_slave_1) entered disabled state [ 1319.708832][T19684] netlink: 134268 bytes leftover after parsing attributes in process `syz.0.4741'. [ 1319.748155][T19684] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4741'. [ 1319.775131][T19684] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1319.877450][T19684] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4741'. [ 1319.903693][T19684] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1319.925416][T19691] netlink: 134268 bytes leftover after parsing attributes in process `syz.4.4744'. [ 1319.937462][T19695] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4745'. [ 1319.947896][T19696] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4744'. [ 1319.959921][T19696] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1320.070574][T19696] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4744'. [ 1320.120239][T19696] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1320.417057][T19708] netlink: 'syz.2.4750': attribute type 1 has an invalid length. [ 1320.428084][T19708] netlink: 'syz.2.4750': attribute type 1 has an invalid length. [ 1320.436861][T19708] netlink: 116376 bytes leftover after parsing attributes in process `syz.2.4750'. [ 1336.245185][ T4330] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1336.256796][ T4330] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1336.264972][ T4330] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1336.272963][ T4330] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1336.280910][ T4330] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1336.288733][ T4330] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1336.550690][ T4333] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1336.559283][ T4333] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1336.570494][ T4333] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1336.578335][ T4333] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1336.588495][ T4333] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1336.596059][ T4333] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1336.904488][ T4330] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1336.913661][ T4330] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1336.924198][ T4333] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1336.932651][ T4333] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1336.944925][ T4333] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1336.952281][ T4333] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1337.185192][T19716] chnl_net:caif_netlink_parms(): no params data found [ 1337.666560][T19721] chnl_net:caif_netlink_parms(): no params data found [ 1337.897833][ T4333] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1337.907299][ T4333] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1337.920231][ T4333] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1337.928245][ T4333] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1337.940877][ T4333] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 1337.948210][ T4333] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1338.020558][T19716] bridge0: port 1(bridge_slave_0) entered blocking state [ 1338.028401][T19716] bridge0: port 1(bridge_slave_0) entered disabled state [ 1338.041724][T19716] device bridge_slave_0 entered promiscuous mode [ 1338.096032][T19716] bridge0: port 2(bridge_slave_1) entered blocking state [ 1338.112872][T19716] bridge0: port 2(bridge_slave_1) entered disabled state [ 1338.126072][T19716] device bridge_slave_1 entered promiscuous mode [ 1338.193994][ T4333] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1338.207346][ T4333] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1338.215417][ T4333] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1338.228848][ T4333] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1338.236858][ T4333] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 1338.244377][ T4333] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1338.383012][T13616] Bluetooth: hci4: command 0x0409 tx timeout [ 1338.427343][T19716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1338.464344][T19718] chnl_net:caif_netlink_parms(): no params data found [ 1338.489017][T19716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1338.587716][T19721] bridge0: port 1(bridge_slave_0) entered blocking state [ 1338.597485][T19721] bridge0: port 1(bridge_slave_0) entered disabled state [ 1338.609628][T19721] device bridge_slave_0 entered promiscuous mode [ 1338.621160][T13616] Bluetooth: hci6: command 0x0409 tx timeout [ 1338.687450][T19721] bridge0: port 2(bridge_slave_1) entered blocking state [ 1338.702658][T19721] bridge0: port 2(bridge_slave_1) entered disabled state [ 1338.710861][T19721] device bridge_slave_1 entered promiscuous mode [ 1338.729166][T19716] team0: Port device team_slave_0 added [ 1339.021250][T13616] Bluetooth: hci7: command 0x0409 tx timeout [ 1339.981146][T13616] Bluetooth: hci8: command 0x0409 tx timeout [ 1340.301217][T13616] Bluetooth: hci9: command 0x0409 tx timeout [ 1340.461181][T13616] Bluetooth: hci4: command 0x041b tx timeout [ 1340.701121][T13616] Bluetooth: hci6: command 0x041b tx timeout [ 1341.104345][T13616] Bluetooth: hci7: command 0x041b tx timeout [ 1342.061196][T13616] Bluetooth: hci8: command 0x041b tx timeout [ 1342.381193][T13616] Bluetooth: hci9: command 0x041b tx timeout [ 1342.541207][T13616] Bluetooth: hci4: command 0x040f tx timeout [ 1342.781159][T13616] Bluetooth: hci6: command 0x040f tx timeout [ 1343.181139][T13616] Bluetooth: hci7: command 0x040f tx timeout [ 1344.141124][T13616] Bluetooth: hci8: command 0x040f tx timeout [ 1344.461174][T13616] Bluetooth: hci9: command 0x040f tx timeout [ 1344.621188][T13616] Bluetooth: hci4: command 0x0419 tx timeout [ 1344.861144][T13616] Bluetooth: hci6: command 0x0419 tx timeout [ 1345.261141][T13616] Bluetooth: hci7: command 0x0419 tx timeout [ 1346.222633][T13616] Bluetooth: hci8: command 0x0419 tx timeout [ 1346.541153][T13616] Bluetooth: hci9: command 0x0419 tx timeout [ 1346.861200][ T41] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 0-.... } 2645 jiffies s: 84225 root: 0x1/. [ 1346.881271][ T41] rcu: blocking rcu_node structures (internal RCU debug): [ 1346.888439][ T41] Sending NMI from CPU 1 to CPUs 0: [ 1346.893853][ C0] NMI backtrace for cpu 0 [ 1346.893863][ C0] CPU: 0 PID: 19702 Comm: syz.0.4746 Not tainted syzkaller #0 [ 1346.893879][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1346.893887][ C0] RIP: 0010:kasan_check_range+0xc/0x290 [ 1346.893914][ C0] Code: c0 c3 0f 0b b8 ea ff ff ff c3 0f 0b b8 ea ff ff ff c3 00 00 cc cc 00 00 cc cc 00 00 cc cc b0 01 48 85 f6 0f 84 ac 01 00 00 55 <41> 57 41 56 41 54 53 49 89 f8 49 01 f0 0f 82 0e 02 00 00 49 89 f8 [ 1346.893926][ C0] RSP: 0018:ffffc900000079d8 EFLAGS: 00000002 [ 1346.893939][ C0] RAX: 0000000000000001 RBX: ffffffff8a2ae283 RCX: ffffffff81888a4b [ 1346.893950][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8e200f68 [ 1346.893960][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1346.893969][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1346.893978][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: dffffc0000000000 [ 1346.893989][ C0] FS: 00007fe0c70ae6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1346.894003][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1346.894013][ C0] CR2: 00007ff521c17dac CR3: 00000000a07cd000 CR4: 00000000003506f0 [ 1346.894027][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1346.894036][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff1 DR7: 0000000000000600 [ 1346.894045][ C0] Call Trace: [ 1346.894051][ C0] [ 1346.894057][ C0] trace_hardirqs_off_finish+0xfb/0x180 [ 1346.894078][ C0] irqentry_enter+0x33/0x50 [ 1346.894096][ C0] sysvec_irq_work+0xa/0xc0 [ 1346.894112][ C0] asm_sysvec_irq_work+0x16/0x20 [ 1346.894132][ C0] RIP: 0010:rcu_read_unlock_special+0x7f/0x510 [ 1346.894149][ C0] Code: eb 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 2b 42 c7 44 2b 08 f8 f3 f3 f3 65 44 8b 35 e2 82 95 7e 41 f7 c6 00 00 f0 00 74 40 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 42 c7 44 2b 08 [ 1346.894160][ C0] RSP: 0018:ffffc90000007ae0 EFLAGS: 00000206 [ 1346.894171][ C0] RAX: 45be7b6df245c200 RBX: 1ffff92000000f64 RCX: 45be7b6df245c200 [ 1346.894182][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8c17a0 RDI: ffffffff8adee1a0 [ 1346.894193][ C0] RBP: ffffc90000007bd0 R08: ffffffff90af22e7 R09: 1ffffffff215e45c [ 1346.894204][ C0] R10: dffffc0000000000 R11: fffffbfff215e45d R12: 0000000000000246 [ 1346.894214][ C0] R13: dffffc0000000000 R14: ffff8880b8e3bb00 R15: 0000000000000001 [ 1346.894233][ C0] ? kmem_cache_free+0x80/0x2a0 [ 1346.894250][ C0] ? __rcu_read_unlock+0xd0/0xd0 [ 1346.894269][ C0] __rcu_read_unlock+0x78/0xd0 [ 1346.894282][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170 [ 1346.894371][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 1346.894420][ C0] ieee80211_iterate_active_interfaces_atomic+0x156/0x170 [ 1346.894437][ C0] mac80211_hwsim_beacon+0xb7/0x1b0 [ 1346.894455][ C0] __hrtimer_run_queues+0x522/0xc90 [ 1346.894475][ C0] ? hw_scan_work+0xf00/0xf00 [ 1346.894494][ C0] ? hrtimer_interrupt+0x980/0x980 [ 1346.894513][ C0] hrtimer_run_softirq+0x173/0x290 [ 1346.894536][ C0] handle_softirqs+0x291/0x910 [ 1346.894553][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 1346.894568][ C0] ? do_softirq+0x210/0x210 [ 1346.894580][ C0] ? hrtimer_interrupt+0x775/0x980 [ 1346.894600][ C0] __irq_exit_rcu+0x13b/0x230 [ 1346.894613][ C0] ? irq_exit_rcu+0x20/0x20 [ 1346.894631][ C0] irq_exit_rcu+0x5/0x20 [ 1346.894643][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 1346.894660][ C0] [ 1346.894665][ C0] [ 1346.894670][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1346.894689][ C0] RIP: 0010:kmem_cache_free_bulk+0x435/0x480 [ 1346.894705][ C0] Code: 8b 54 24 48 48 89 d0 48 ff c8 49 39 c4 0f 94 c0 b1 01 f6 c2 01 75 0f 84 c9 4c 8b 7c 24 08 0f 85 de fc ff ff eb 39 89 c1 eb ed <65> 48 8b 04 25 28 00 00 00 48 3b 44 24 58 75 20 48 83 c4 60 5b 41 [ 1346.894717][ C0] RSP: 0018:ffffc90019edf508 EFLAGS: 00000246 [ 1346.894729][ C0] RAX: 0000000000000000 RBX: ffff8880483b8c00 RCX: 45be7b6df245c200 [ 1346.894739][ C0] RDX: dffffc0000000000 RSI: 0000000000000000 RDI: ffffffff8adee1a0 [ 1346.894750][ C0] RBP: ffff8880174c5000 R08: ffffffff90af22e7 R09: 1ffffffff215e45c [ 1346.894761][ C0] R10: dffffc0000000000 R11: fffffbfff215e45d R12: ffffea000120ee00 [ 1346.894771][ C0] R13: ffff888061cc8618 R14: 0000000000000000 R15: ffff8880174c5000 [ 1346.894789][ C0] ? kmem_cache_free_bulk+0x364/0x480 [ 1346.894804][ C0] ? mas_destroy+0x251f/0x2d40 [ 1346.894837][ C0] mas_destroy+0x251f/0x2d40 [ 1346.894861][ C0] ? ldt_dup_context+0x247/0x2e0 [ 1346.894877][ C0] ? mas_store_prealloc+0x430/0x430 [ 1346.894895][ C0] ? trace_contention_end+0x5f/0x170 [ 1346.894913][ C0] ? __mutex_lock+0x1ab/0xae0 [ 1346.894930][ C0] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1346.894947][ C0] ? mutex_unlock+0x10/0x10 [ 1346.894964][ C0] ? mas_next_entry+0xe03/0xe90 [ 1346.894989][ C0] copy_mm+0x1050/0x1680 [ 1346.895011][ C0] ? copy_signal+0x640/0x640 [ 1346.895035][ C0] ? __init_rwsem+0x11e/0x160 [ 1346.895051][ C0] ? copy_signal+0x51f/0x640 [ 1346.895067][ C0] copy_process+0x19a6/0x40c0 [ 1346.895087][ C0] ? copy_process+0x974/0x40c0 [ 1346.895107][ C0] ? idle_dummy+0x10/0x10 [ 1346.895127][ C0] kernel_clone+0x24b/0x900 [ 1346.895144][ C0] ? create_io_thread+0x170/0x170 [ 1346.895167][ C0] __x64_sys_clone+0x1a7/0x220 [ 1346.895183][ C0] ? __ia32_sys_vfork+0x140/0x140 [ 1346.895204][ C0] ? lock_chain_count+0x20/0x20 [ 1346.895220][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1346.895242][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 1346.895260][ C0] do_syscall_64+0x4c/0xa0 [ 1346.895274][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1346.895286][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1346.895299][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1346.895318][ C0] RIP: 0033:0x7fe0c619ce59 [ 1346.895331][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1346.895342][ C0] RSP: 002b:00007fe0c70adfd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1346.895356][ C0] RAX: ffffffffffffffda RBX: 00007fe0c6415fa0 RCX: 00007fe0c619ce59 [ 1346.895366][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020800000 [ 1346.895375][ C0] RBP: 00007fe0c6232e6f R08: 0000000000000000 R09: 0000000000000000 [ 1346.895385][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1346.895394][ C0] R13: 00007fe0c6416038 R14: 00007fe0c6415fa0 R15: 00007ffdd76488d8 [ 1346.895411][ C0]