last executing test programs: 2.754291699s ago: executing program 0 (id=2809): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = getpid() r2 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r2, &(0x7f0000000a00)={&(0x7f0000000040)={0x2, 0x0, @dev}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000000)="c109000000000000001d1e020e", 0xd}], 0x1}, 0x20040000) r3 = perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x2, 0x3fff8000}, 0x1844, 0xad2b, 0x43a1bd79, 0x6, 0x9, 0x6, 0x2, 0x0, 0x8, 0x0, 0xab}, r1, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22}, 0x94) socketpair(0x1, 0x5, 0xfffffffd, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x65, 0xe, 0x0, 0x0, 0x0, 0x2000, 0xbf281, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000a, 0x0, @perf_bp={0x0, 0x2}, 0x1075, 0x4, 0x0, 0x0, 0xffffffffffffbbfe, 0x0, 0x1, 0x0, 0xfffffffe, 0x0, 0xfffffffffffffffe}, 0x0, 0x8000000000009, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f0, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x3, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0x10, 0x3, 0x10) r9 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x2) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xfffffffffffffed2, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b03d25a806c8c6f94f90624fc601000127a0a000600093582c137153e37080c188001ac0f000300", 0x33fe0}], 0x1}, 0x0) openat$cgroup_subtree(r9, &(0x7f00000000c0), 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x1f00, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef436000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) 1.837606203s ago: executing program 0 (id=2815): socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) sendmsg$sock(r0, &(0x7f0000000040)={&(0x7f0000000140)=@l2={0x1f, 0x9, @none, 0x2d0, 0x2}, 0x80, &(0x7f0000001700)=[{&(0x7f00000001c0)="85081427eadeea9ddb947a3cd5b6f6cb51f4607a746a3f9341e3caf2df3730f8081ba7468ba508f92562b7d4196a115cf5ed1a06dfbb385c32397f5578fe1b32420587e7ab5c554e70ea5c207148ecf7249bced047497a2227e3ca5d78400dd60070d4d93b87f66eb9f696704e3291ae556185b07a9cb93835cf4c199c81fb53b04ebdbc2022df7284fc3ac4bb3444ad84569104a73c3ac442a536a8818a25ff09502f377d3456f53d454d7f17dcf31ec4c4b155f6dfffd589b24b301c71de519c3556488976df9b77bb00c65961a205d1eff48f8de0e6180dc00bb19f81751b3119d466472accadb06eb91634c6958b5d1212ab2f1dc05852b3b18161a87c1a50dd93a61bd85d8529265d42ead7641cd7d556d67630987867bb4e8c2fd30bff9da347f28535d9bfe363c07cea74bcdfb1c37f76b838f78f0456feefb85967494d37192844e57e61c5f4a9bac968381239db6b8c384aa9e3f465822ddef67e0e427228188a28f815827963ad3a146368bd46e91c6ea8e6de8e35493ec0c838f43f8001b43fe3c06f9e248195badcac553bfc83130aedb2f88124178e3417fc1a81723159b4890c98014abd93865fcc5516d5ecaa9b5b97bf5d4a831b4deaee691842f8f3dcbebcd47e39a139c585cb201ac61b546a1e978c4fad8630fc321a006e4f2d952690789c60a299d12cbbed234e33beff1229421709abac51cfc07fc8db0d0660f0ef725615c2bd431bf88525c637b88bf7e139151702ec7867a7651afb77b5b2b4c73d32e0a97dbadb6382c63f7e2ee8868d553b22c0ca34b21cd92ee749790b8eee238c0a2267b20e6b455f90c5e90d90ded49a27a92c577a4f6fbd1b4e03556a22e884776ea257e3d4c1d002a3ec9d83cabb39f84c6b42e56b0d6b83648c74c176a10c41460963a9d2252ee25a87e06f773ff3a91d7af994d60eef5ac2e42f6f5f3b22e3de4589d6210e21b64f4379a32fac347bcba736d39435cdc6ebae273192c950b6f3bad24ede9943cb9df2739096f6f2a3ca533ebac1d97b6ed8833c774a911b898a72416540e09f560053d4d16154ba42974a1b5c51bbf6737d6a3c33681e7f5c562bc42dc2df438d8c62fd3fefc4fb0860f3dab5fa4a225b1d7f4202d77db0d018c846d90aac3709f00642939bdf4bf2ec5a1c3b507fb3df13e47513533b05aadbd6fffa47a83741faf5a8284f46753fbca3c95b8b85963d236c04e5ed64fdc085ec172ede6b479372247a86039b4f3fc6fbd12aefd45e734a9572d25c8a9f9cb8c856b6a24abe2f03da44adb906a6633f36c1bc111b7266fb83cbc6eed904e752d74461cce848cac64f1d7a18423088650c237f552f5193df68cea19b442eaddf79e24b37fcf213b0071dcf18715886ff327b9a87d3d8c4cc5231565005941625600d1b67161478f2eb8d292a431240a019a659615b61128759085edef95604002ad17a28a7d2cc60270697ca287cc9e07278ae1b2cf78585803fbbfcc34334aa99b960811b64e87772ea619963cd5e5648c578f40a1a8636852dd30b3840ed8cbd87d82873cde79e13f69f556a45b1572ca5c07a108344485ae5979ba55b38fd00bfc2e0b04ccdf5af63e61f037c00adfd54bf94f867be4824d941c3357bf9bc80d635acb513dda1321b002798ac5f67ec7b7390d03208a80f6932d04510c8cbf2452d0270ab384f0813aa9a8800ae14a95193d18a0497ce1bba3f629cba9f2abcf0f8402532f4807ceb985cd53c7b19215e4d58a380579f25c9947124b39f8f63dc4dc0b5b5334cadc1a89644afb2911ef4e3295671d75d225bec654c26f1852af0c8688211b15501fc370a127521ac36fe65b0f56ebd7a875999611bdf7084b2c057475ff89577f810d5b2ee670e88e8547a39fc893d6bb4ea34f2b5ec57d098ae055993611ada0b568e27c67ad738a719d9931fe74b51db465fbdd4c79cdc1b5a689fbd9d10a74599d45c96adbb2bd8b5ba0c030c6a4d37b23a63cfd394c8f3d65f6bcb0157c58bb875210f286753d9bb26b4609527c117456f3c2d43873566e7c31cc7122cfd5137b8794585cd6c944dd0b298aecfa454ee010e9848859b2cd730fe181d76bc48a1bedbb2dc809afce7dfcc9f987c8af34e4823fc72f44470d8009817d28432e4d2829a1788f2d5511fed69321bb1b61873af829a2b0189d580c1cc722137277a9c742f96d58bfea8a945f7ba16f01924a2987b39bf549b8e823562a3091ec59857710bb9a1dfa2004d472a2024c5e7a94f60db46058d6e9503bb904d757c28f8dd147805f58d7177f20f61baa5e974e26935887eca7a010922428065eb4772587210883a9ea80e55ca769597432390e60095989fcb5755e43936d571eb84dc37994b9e302e2add8e6cca6a865238ddf25ec3ad61fcb525dab1e4998247343ab8b69bd981de9ab4db2661d49f0b5a87e2e9d25ed47d83cd2c572e81fe66a37f083a0d048a98f583efeb6c2866d7669b968965f357ab980170329495e07d3aafa5f476e1cf5bdae1bfe368d1cb1f7a939b17a2c8abe053e51a7e215e156a6bbacac20d38824940abdb69524bd00aef52e1baff11ea35ff48eea1ea6a2aaf976d05bdff6eb7b4d976f9dcdad8e2faa8438e2cc895be5830427f4e0dfde0547072a952e5a48af896ab63782d120225d39f84e543609ef67ab8613f5b92736bfbea711a7447fd9f77b1006fd238ef2366cfcbf2d32c67aa235bcfac11d68d2dbb1ca0bcb28400ad5340a95e72335fae5738c66c8b018a88fec38b93c55ecba12d43348186892738355d3fb3450381cd990f81187470a11dbbb50e44c61f72afb39f21b745690b90a95c83e663328d68b3db31439eddd71f61e9594e57372abe9cf2530baa741cbfff71bc96e7f42b083e51f51430a424579140c883ff2fe4f81ccbcb5490e74e784ce833ea31ba0ce40fbfa8cbd1a58008e46c830b686b6946c637f49f96b2ed6bd0fc2fce6e8a03a6398bbc4ee0fbe1abf8494efa75f2aa662c8c1611c6e01eb12e82626db74018910a88e659d480d08b826c2c2445a033394c4e3cf815d9362af52362a63715a86485208c0a95ad07523b053335d175410de8fe263cfd8dcd464d23a817d632fa5214646b0097f9898d1ce84465efc0a9dcd75016dae490f618f975b59af57f04b51610ac69090454a23a3f7f8134aaefc840f28292a1ae0e4a2b107f85d95e63954099a0b650e53563e58d95b9bcd51d1245ea747de1ce0b02fcef5524b8de8a629c8f5116b80b71d1e4d923a130693c5f43f70790eeb183bf0b6c672a579f3b3f7fffb49db26465d246783f626b2f20b06417f9b6cf5c3e768cd358ef33ce42d0e25cc05993ed5d866c402ec3644e073d56df7f322faf56bb8cb82cb7cc401125f9c8a3b8da72c07297480084cbcdaa844bd44bf49157c911365ed57e6f15aa228c2e083c09ff0f3572e3c54d1161c43fd18add8b784c62e0c935e10e0db46fe951772befd2bbe6fd89cc71b614b6866bc5beb751a521f220397f617177f2e57c7b5c365a3b838771d05ab5102c68eb009f872a21b107a4cb533aae51b923ce56970ce455be085932a5fbbd915b678b1eb2e055523b519288a38fec07ed1c84754b0c57ff7e6c5709c587831b82847fb7a5d010d8a0e044a62f238d68a4b136d66fc40f7c0090ce3e751ab12e49c94feedea1b7fa07bef50e2ec95fa394f998d38b955a9893a77b9f60e522af275d8cdec236686bceb0ac5df829d715b88f57468e4bf3afd75406e8fb553b2ce6b0382ef1c41d34a028ea0d5aca32313ed8b1ba43f4a01c9a1260ad7eba693de9d95c715a80ce9eeef76adf32a2b233d71408fecb8dd9bd8759f85b29182f5600b81a9c766788f1cff16d1480eb3929f72d4891f4ab188bd176ac748c66a3a612ab2b32cab7544b3371ad7c953201ec26d5cc71202c91bfcfb85ae0d1867080c6fa30b655be48e1e38b4fa6554e1294c356b9a0831ee1ed4cc4deae71e7f5dcc896f85cc561e63b907484507f7b22789a873995c7523a1addf4837fe5afa4c113947a77c8f156b12a0edafa4ff49f8a8cac5f8f887f5807df3c21da9bc4831c78b20bddbe00123b669eaa778fb50ada8db1c0286e144c21763f8291361bca087ff5ef9a3d96dbe2615a131254637f92cc22efb82ea662cf9905fb3186992c9e615f8916d13daa7078d889ec81d6a99d0b2ca93fce1ada628c4c7ed72061661682df515edd4ac0086dde14851356cffb9712de14651a1f62649063045c816f05f6a2b19365409faae39a88e3d262e413bcbcceb861d3f35e4a43a720605a7f124eeb159efcfeb8090c31982315b2957d3436e4822d80ad1b9dca89d873c705264a4ac17f5e3a6f860e3ee4182dd3596dcead1373b8fbbb22be18e655ab358c4ee18687d81cf173eb2282c0d6ba94005ee5e1ea1283ad4714b9834180f50d86faf117cb116fded2935972c5c56a88cc7038fd2756e915ff90a8bea86fff12d08d5f0d6865f97feced02bbe6b1b4c4846fbab6cb5e5e4d12dc732f99882c0691c95b1c10ce59e5a0698e8e132afae53dc197fa3314ab2bd53d18f478e9d2a385d0fb980b6c753685a81238a97600f8761ea5d926e0aad1fa975c73c610db4e83b6accf41cfd9824ec08b4f9dbdce8fb3addea85cf487065c3abd4348069d3c9fceed192d28382f72e256b522dac2128d572656e9e02cd5bb3f63058cc13b440995364fd35be9b6727c0d0ade09c3adf1fc5493dbb62a77c641fdbbb2707ed17a6b18fae0de2b0c46ef946c947b88ac21b224aef7a804aeb142a37c62915d2a15c75916983fd0cc8f2a9f092a96ce08a14a50abb74e3051cb1e57382036ad5f6594073059edb8d05190052d0e28eb218a6b1498a22fb73399cae2853acc6059869703352d9350b5fe3deb4e2ae87dcc901e76bbac984db1ed80a6af68afee7d02b573a3d7f114be673cdcc26b079fdc7e1382bbc17981c257fce894cadf92cb00f6139574647685b35bf170861a745be14fd89c886f753c52e7c586802357fb2e140c67be2d323176d512462fc9dc47d9abfb9658fc421392fe2ed48c433b28290f3778b5c62becdd281d788aa0180b40a0a8146339750919d60d700e3b8a33b3e89e052641f6ca21a9db859f85d263e43728e6b241b21f6b91323c8cf5d608be709e394cf3a6bcb8bd743ca07744f2a84afe3d98c6c07de82cf429e29e5ed42eec94122b1689a0d8d95c3b504e0a07cc33421ba411e874f310a8ec82ba5d77706cf29c71bf212a1ebb4ca25cf46161b76b79ee47b04197c9b8c02cce20f604c6823542cc1c771f4446f26b75d338baee3ab39bfac107144f0ffa85326a197069dd20ea20baf86daf5ab7ce467ea4163abaacdff4d2b28962278b8af9b32106243d6ce96be15516a5e075d8b07a0994bdc50e3f7c6a59076f8eca8a30026c6218d5430603cd32c8bba537d74b8d3bb247cee95d585f9725843a9ce38965ef9bc1ed70e9e33dbbc4c9a425aa2eddcb3de09290fafaae475304deec238c3cc17232d150560eeb712401c14655164f086460e5c6871978c861fc1bc201fedcbc4e88de99d298817c32faf537d332a64c4fd0827f6fc9568d4fe1d5940eaccf1f8573e42d22facf1e2f64887c3d680b667f2a941aea44756ed26dc238ae33ba1e76291081112d187cd0c269c2ebc29d28974e172eed91fd6d423d9b7e12a222329d4ff66a0c88b39258a5553c09ad1d8ca4dc7e75c31ad8ed923791dff29ba7d82aad3defd9724487b1c64d75b673767fb1249bf81882b8", 0x1000}, {&(0x7f00000011c0)="4c90de889ff80b4a3169e6319129c1434b513592cfdeea769a910580858f8ac4a43901b7dd583ba85b645dc1cfe54b8076ab23fefdc1d0eb9a89f85959790eac8e2ba5cd85d9f952edf94f282ce0be2917251cec68849b1d2d68a85251fe03232f96d39852783173975d7c4d4465a68a19944da216e7fdef31f3fd0b0e8a96090866450fbdd9ff376f88a6b0bf20aff8bc5b33947f32", 0x96}, {&(0x7f0000001280)="cbe064acef89c197c409323e1325efc8cd66ddea32268fe2fed92578adc7c1274e1ad8ee9664fcb792a48a21715783e22a59041a9d451c9ad7cf61ad2affd091110f1d712785694d41bfc30a95fc10ce1ae6833c030c4e84343be6fc088f95272b3789b4db5169877943d6697a463459ddc534f9d8d78a88b705b2c059e645fdcc63a838a678d13ed083a0ab4048c79785b2bf78f33ee47c728080", 0x9b}, {&(0x7f0000001340)="f6543a5830745847720c01a4d61f03e50d5783f5daaf6f1fee2267db20d61a96be612d76ba8133504cf3a2551e59cb9c7161346c758519baa85b07e160d304bf005df5b5dbe56aeae127fc1db291b1a8ea5f1ad73bc7d2533a2eb29423dafab992c8698254f713258de5e0e77055f165d60cf2d9cbd5d1f14b08ecdb583aa2740ab650e7dfa64c2e4252e4fcb5e2c635a55a", 0x92}, {&(0x7f0000001400)="55219159338bc54ad67042d90252f3af916a7f1ab0a9839e80329de4feb40bdf3ba18b0de58aaaca2a89c0902bb85e5cf10e70cf863268f6057331a01739594f06849ebb2c723be1fe01c95d62476ec2a13c1673099a5a28e55da9ddb00955163a914bcd0e477ea12c501cc63d5ba08aac0b2bd0c46e0d275885a1d0e62ead9cb8251e94e8c2741b55d12781056f05ae6df2066b7e01ef7a18e164", 0x9b}, {&(0x7f00000014c0)="5e07e342779b9e293425fc4441370266b4f10410de5ee25dbebeb90fad1a64bbb784c131eb608c4afb1a73619d4274587430b4d57fe265d47f1afcd34da78b1891ae35b53d3db301", 0x48}, {&(0x7f0000001540)="f10f933fb4452ac9d9f421e1db852dd16b160c68329e2c454dd748d69f86139cdfb567995805f526eb2a99bf799a8223d6a8b162a903b3d041633b76e43d02d185ee39afde18b8cec56222d2eebde8de4f79895e9296498e189e53cd5f58e0a3cc3459ef311148e56a80564dd0fd5d525584ac88bc4b8960e758b04ad8fc0752e42e3aefbf27c73ec0fa980fcd0a88372961eae023dedc8db959af0400550a2fe81bc9fc1db861780a8ea50d2c98de969b05815fcaa4ff86457c8e2384b3b0d4ff2762948bf197ad5b14b56c21cae065450cd8bcb4262de443f55bd162dd1ab24c060155bceb2bdc08a4f76131211a1e596ef4c669", 0xf5}, {&(0x7f0000001640)="d3c4a14941f556349292afd402d213e2850230df0920261c916271c7ac2aca4484825028c23c5932906b74011e0d83962f2fff45f35217c545c915817093cdc87a26594b549c747ddd68701be4fefbc7f6cf481c5e5593f4375cfb2b89aaed89bf106a0fad47f78b535a2fd946723d96bd5af138ca153aa6d8728f53d6cd676976c4b4e1121bd4cd952f87fe7b6cdcf3df02095ace777d39f0c82ceefb9e6368", 0xa0}], 0x8, &(0x7f0000001780)=[@txtime={{0x18, 0x1, 0x3d, 0x170e}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @mark={{0x14, 0x1, 0x24, 0xfffffffd}}, @timestamping={{0x14, 0x1, 0x25, 0xff}}], 0x78}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f375ffff86dd6317ce62"], 0xfe1b) r2 = socket$kcm(0x25, 0x1, 0x0) sendmsg$inet(r2, &(0x7f00000006c0)={&(0x7f00000000c0)={0x2, 0x4e20, @local}, 0x10, 0x0}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f2, &(0x7f0000000080)) 1.836958093s ago: executing program 4 (id=2816): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x104005, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="18470000f8ffffff0009000000000000001fb154888f170de9e60000000095000000000000"], &(0x7f0000000280)='GPL\x00', 0x7, 0xaa, &(0x7f00000002c0)=""/170, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x8, 0xb, 0x8, 0x4570}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000500)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000540)=[{0x0, 0x3, 0x5}, {0x3, 0x3, 0xd, 0x4}, {0x2, 0x5, 0x0, 0x5}], 0x10, 0x6}, 0x94) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000580)=r1, 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27033000bdfd28000600002fb96dbcf706e10500000086ddffff1144ee162fd4b8bf4a31accb85224650d4a6a0797256da82f6184b8a34f9015cc99e570000043c2188", 0x43}], 0x1}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0300000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000a3857dd07551e0c3180be2244d737e1d48000000000000000019000000000000008bed07ef00679e00"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000b40)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB="260000000000010001cdf6c6", @ANYRES32=r1, @ANYBLOB, @ANYRES64=0x0], 0x20) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r6, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$tipc(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000040)="fb", 0x1}], 0x1}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000d40)={0x1}, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="1b00000000000000000000000600000000000000", @ANYRES32, @ANYBLOB="040000000000e11100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000200"/28], 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0300000004000000040080000a00000000000000765ba033c526d835ca445a3232d4903753b48632a142ba6092", @ANYRES32=0x1, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="00000000040000000400"/28], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0x1a, 0x0, &(0x7f0000000640)="c1dfb080cd21d308098e000008007e227f3ad7a91ba78c185431", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x6, 0xe, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000d5b000000000000ffffff7f8510000008000000850000006c00000018120000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000080000000095000000000000009500000000000000183900000100000000000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x9, 0x4, &(0x7f00000007c0)=""/4, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0x0, 0x2}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f0000000e80), &(0x7f0000000ec0)=[{0x4, 0x3, 0xc}], 0x10, 0x8}, 0x94) socket$kcm(0x10, 0x2, 0x4) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) ioctl$TUNGETVNETBE(r7, 0x800454df, &(0x7f00000005c0)) recvmsg(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1, 0x0, 0x500}, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000a40)=@generic={&(0x7f0000000a00)='./file0\x00', 0x0, 0x18}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000009c0)={@fallback=r0, 0x12, 0x0, 0x4, &(0x7f0000000240)=[0x0], 0x1, 0x0, &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0, 0x0]}, 0x40) socket$kcm(0x2a, 0x2, 0x0) r9 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r9, &(0x7f00000017c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}, 0xa, 0x2}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000004c0)="7f", 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000084000000070000007f00000000000000b8"], 0xd0}, 0x480c4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x0, 0x4, &(0x7f0000000b40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000002}, 0x94) socket$kcm(0x10, 0x2, 0x4) 1.759226848s ago: executing program 3 (id=2817): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000340)="8753dd26ab9e3bcf0518e8aa1dff8691c2820f475fa9662e7e1610cc04ca5b592499fb7c671f503e", 0x28}], 0x1}, 0x4040001) recvmsg$unix(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x1) recvmsg$unix(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000006c0)=""/109, 0xffffffe6}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x17}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000040)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001000c080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1}, 0xff0f000020000080) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x14002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, r3, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}) ioctl$PERF_EVENT_IOC_RESET(r4, 0x2403, 0x7) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0xc0}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000380)={0xffffffffffffffff, &(0x7f0000000080)="3220756399bafa6e7d1b7b4633450d4ad20c3257508ea5f8fa23c8a961c0190e89a142b62285a2a311cbbc6fc61758445c6aa9611ad954e68ad5ba58f42ecf", &(0x7f0000000500)=""/102, 0x4}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.72070556s ago: executing program 0 (id=2818): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x108}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x9, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000080)=r3, 0x4) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r4, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000000)="811e", 0x2}, {&(0x7f00000007c0)="f89eb1", 0x3}], 0x2, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @dev={0xac, 0x14, 0x14, 0x3a}}}}], 0x20}, 0x4840) 1.676277642s ago: executing program 4 (id=2819): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x5, 0x0, &(0x7f0000000000)="259a53f271", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x4, 0xd}, {0x10000002, 0x0, 0xf, 0x6}], 0x10, 0x4000000}, 0xfe33) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000000)=r3, 0x10) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x75, &(0x7f0000000000)=r4, 0x8) 1.580008238s ago: executing program 4 (id=2820): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$kcm(0x2c, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181014100000000010000000000000e002e000f00000002800200121f", 0x2e}], 0x1}, 0x20000010) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@fallback=r0, 0x0, 0x1, 0x25, &(0x7f0000000380)=[0x0], 0x1, 0x0, &(0x7f0000000400), &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0], 0x0}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c80)={r3, 0xe0, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xa4, &(0x7f0000000a80)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000ac0), &(0x7f0000000b00), 0x8, 0x67, 0x8, 0x8, &(0x7f0000000b40)}}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000cc0)={0x40}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000d00)={@cgroup=r4, r1, 0x30, 0x4, 0x0, @void, @value=r4, @void, @void, r5}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r6, r3, 0x26, 0x0, 0x0, @void, @value=r1}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r6, 0x26, 0x0, 0x0, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r7 = gettid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f00000001c0)=[@cred={{0x1c, 0x1, 0x2, {r7, 0xee01, 0xee00}}}], 0x20, 0x800}, 0x40800) syz_open_procfs$namespace(r7, &(0x7f00000000c0)='ns/net\x00') recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000020000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f00000008c0)='fib6_table_lookup\x00', r8}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000100)="b7", 0x1}], 0x1}, 0x40080c0) 1.53230765s ago: executing program 0 (id=2821): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xd, 0xffff0000}, 0x10}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='cpu&\t\t') bpf$BPF_PROG_DETACH(0x8, &(0x7f00000009c0)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$unix(r1, &(0x7f00000004c0)={&(0x7f0000000180), 0x6e, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x22fe0}], 0x12}, 0x0) 1.449959796s ago: executing program 4 (id=2823): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xd, 0xffff0000}, 0x10}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='cpu&\t\t') bpf$BPF_PROG_DETACH(0x8, &(0x7f00000009c0)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$unix(r1, &(0x7f00000004c0)={&(0x7f0000000180), 0x6e, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x22fe0}], 0x12}, 0x0) 1.449376486s ago: executing program 2 (id=2824): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001340)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf81"], 0x0, 0x4}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) 1.428500597s ago: executing program 2 (id=2825): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e00)={&(0x7f0000000980)='sys_exit\x00', r0}, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) write$cgroup_int(r2, &(0x7f00000001c0)=0x10000000000, 0xfffffdef) 1.21047495s ago: executing program 2 (id=2826): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, &(0x7f0000000000), 0x4) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xf}, 0x90208, 0x0, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$kcm(0x10, 0x3, 0x0) write$cgroup_subtree(r1, &(0x7f0000001ec0)=ANY=[@ANYBLOB="13120000120091ef04e9befbbd00005c0a"], 0xfe33) recvmsg$kcm(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000800)}, 0x0) 1.209648169s ago: executing program 2 (id=2827): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x0, 0x1, [@random="be05edcabb56"]}) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000, 0x0, 0xd, 0x3, 0x1000000}, 0x0, 0x1000000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001004900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/15], 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r3, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000680)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa7, &(0x7f0000000780)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000007c0), &(0x7f0000000800), 0x8, 0x56, 0x8, 0x8, &(0x7f0000000840)}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b00)=@bpf_tracing={0x1a, 0x13, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB], &(0x7f0000000600)='syzkaller\x00', 0x1ff, 0x0, 0x0, 0x41100, 0x40, '\x00', r4, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000a00)={0x5, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x128aa, 0xffffffffffffffff, 0x5, 0x0, &(0x7f0000000a80)=[{0x2, 0x4, 0x8, 0xa}, {0x5, 0x4, 0xa}, {0x4, 0x2, 0xf, 0x6}, {0x2, 0x4, 0x7, 0x2}, {0x3, 0x2, 0x7, 0x5}], 0x10, 0xff}, 0x94) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000400)=@o_path={&(0x7f00000003c0)='./cgroup/../file0\x00', 0x0, 0x0, r1}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_ext={0x1c, 0xd, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x73}, @generic={0x0, 0x8, 0x4, 0x100, 0x5d3}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x3}]}, &(0x7f0000000340)='GPL\x00', 0x6, 0xfb, &(0x7f0000000540)=""/251, 0x41100, 0x1, '\x00', r4, 0x0, r0, 0x8, &(0x7f0000000380)={0x6, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x1512c, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)=[r5, r0], &(0x7f0000000740)=[{0x3, 0x4, 0x2, 0x7}, {0x2, 0x1, 0x4, 0x6}, {0x0, 0x2, 0xf, 0xa}, {0x1, 0x5, 0xf, 0x9}, {0x1, 0x2, 0xa, 0x7}, {0x4, 0x3, 0xc, 0x8}, {0x5, 0x2, 0xd, 0x1}, {0x3, 0x5, 0x0, 0x1}], 0x10, 0x1}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x90) bpf$ITER_CREATE(0x21, &(0x7f00000009c0)={r0}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r6}, 0x10) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000a40)={0x0, r1}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r9, 0x40082404, &(0x7f0000000bc0)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0xd, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0x36}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r11 = socket$kcm(0xa, 0x2, 0x11) getpid() sendmsg$inet(r11, &(0x7f0000001800)={&(0x7f0000000000)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000017c0)=[@ip_pktinfo={{0x1c, 0x0, 0x2, {0x0, @dev, @dev}}}], 0x20}, 0x0) r12 = openat$cgroup_pressure(r7, &(0x7f0000001000)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r12, &(0x7f0000000080)={'some', 0x20, 0x2000000005, 0x20, 0x10000000fffff}, 0x2f) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000073013200000000009500000000000000a2646a116e93f6aceed5e3835d6e0ed5d3ebdecc19eaa739fa1b977f20ecceaa3b9352e4b74260c934fc19f0c396cfe727e8c7fbaa05f861d2e5a53f586a938e74b4c596c97c3c18376a4000b751ac262e42e3ad386182e2bea73935d565832681d988d87dd438b199168774c075c45f"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) 1.115761305s ago: executing program 2 (id=2828): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="7a0a00ff0000000071106d00000000009500000000963c00039d74af667e15d944b1d8dd6d211ad08cb941bc60722bd88fda40cc575bcc11a4145f84ece97b3effffffffccebf5b2539453c083613c854860579516195da29e22ea0e62bd3c37777aae311ed18a32ee6d7f63ae82ecb1dcc756e68251f8050a77ffb496eb59dca6fd1c0f72578da5fa17c9e6ab981bf40797c4df94a21a25710e59abdfb14974205bb4896b3836370b64c2fa31f822f09d216e585aa78e1dcc04a4297bf3c1"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0xb}, 0x200000, 0x0, 0x93c0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000880)={0xffffffffffffffff}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f00000008c0)=ANY=[@ANYBLOB="9feb01001800000000000000bc000000bc000000060000000a00000000000002030000000c0000000000000e02000000010000000300000005000093080000000d00000009000000c000000006000000050000000400000006000000c10000000700000010000000080000000a0000000900000003000000ffffff7f0400000000000008000000000000000000000003000004000400000004000000000200000d0000000000000c030000000730e1fb24fa542391b52d00000000000002020000000a00000000000011040000000a0000000e0000000000000800000000002e30002e00"], &(0x7f0000000680)=""/156, 0xda, 0x9c, 0x1, 0x2, 0x10000, @value=r0}, 0x28) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff858500000073000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r5 = getpid() r6 = getpid() perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x4156, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffff8, 0x1}, 0x12640, 0x0, 0xfffffffe, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = getpid() r8 = perf_event_open(0x0, r7, 0xf, 0xffffffffffffffff, 0x0) r9 = syz_clone(0x40000, &(0x7f0000000580)="7cd2b32d5654f7270ab742ab9b285b9b9ad4252816139626ff38b3ab13cd6378eb5682ba56790addaffd2aea337c959cc901b264d27f577b7bdfc72f165d0e784bca9f4b8debbe17124e2f2faeac3f6058bd1e5708bd8b9a48efc947b75914c49801d05c332ba214daa221034975c03b19e2978ec28463328057a2e05b67b118f62ca1221c7a2163d7bbc639b3a2511bbda52e69659dd29ce117d68b2b75e871d1e64571b81e", 0xa6, &(0x7f0000000180), &(0x7f0000000640), &(0x7f00000009c0)="f4563c983b82150401f9ec588f35daf4afb018d316f599ccdfbb68ae76987875d39869cb5cdc76cd5c272bf3d9130ef3e73b2c8f11e8c8fd246a59192b8d713bed4421de28c388d2e6f428757af2e77daa76a5f53c3d26652ae21ca1043c0dd7745b41d5b435ffc6514f5385529a47fac5e11e071841b6b19bb9fc99e978be966f81da0cceccaa") sendmsg$unix(r2, &(0x7f0000000840)={&(0x7f0000000280)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000300)="2d2c222c1a17fcf769d1448a0446a13b2e8a9d2afd53cf70707dfe72177aac8b5cd3b2303c237f883aaa335effde954e92cb813f0540f57257ebd91aff2e2ad06e9d17bb286b13b12ba2810025f64fa3eb00933eb41887c8868f4f1474c67d8bc6fbef167a7ff4acbbd34bb97aef5c52bb5a5618a1bd3bb86680cc00eef719", 0x7f}], 0x1, &(0x7f0000000740)=[@rights={{0x28, 0x1, 0x1, [r1, r3, r1, r0, r0, r4]}}, @cred={{0x1c, 0x1, 0x2, {r5, 0xee01, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r6, 0xee01, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r7, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r9, 0xee01, 0xee01}}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r1]}}], 0xe8, 0x1}, 0x4000001) ioctl$PERF_EVENT_IOC_DISABLE(r8, 0x2401, 0xffffffff) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r10, &(0x7f0000000b80), 0x0}, 0x20) r11 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r11, &(0x7f0000000080)='syz1\x00', 0x1ff) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x8) r13 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="1400000020000b0fd25a806c8c6f94f90124fc60", 0x14}], 0x1}, 0x4000010) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b70800000000ff907b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r12, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 911.001347ms ago: executing program 1 (id=2830): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x5, 0x0, &(0x7f0000000000)="259a53f271", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x4, 0xd}, {0x10000002, 0x0, 0xf, 0x6}], 0x10, 0x4000000}, 0xfe33) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000000)=r4, 0x10) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)=r5, 0x8) 843.305381ms ago: executing program 1 (id=2831): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r0, &(0x7f0000000c00)={&(0x7f0000000840)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x2, 0x1, 0x0, {0xa, 0x4e24, 0x5, @rand_addr=' \x01\x00', 0x7fff}}}, 0x80, &(0x7f0000000b80)=[{0x0}, {&(0x7f0000000a00)}, {&(0x7f0000000b00)="01513a35814163ab57d33becbe37cbeffa0e06ce6fe5e0c411ed266cbceb5dad33782f4175504c5aff5f9aa5b12aac002987891b945585b0a238faca4c99d337bc24", 0x42}], 0x3}, 0x4000) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000000000)={'bridge_slave_1\x00', @random="442200001000"}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) recvmsg$unix(r3, 0x0, 0x0) socketpair(0x1f, 0x800, 0xcfa2, &(0x7f0000000580)) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4a, 0x4a, 0x8, [@float={0x4, 0x0, 0x0, 0x10, 0x8}, @datasec={0xc, 0x4, 0x0, 0xf, 0x2, [{0x1, 0x1, 0x9}, {0x2, 0x6, 0x4}, {0x4}, {0x5, 0x0, 0x9c2}], "791c"}]}, {0x0, [0x30, 0x0, 0x30, 0x61, 0x0, 0x2e]}}, &(0x7f0000000180)=""/42, 0x6c, 0x2a, 0x1, 0xd, 0x10000}, 0x28) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0xfffffffe, 0xfe0, 0x58a7, 0x84a0, r1, 0x7, '\x00', 0x0, r4, 0x3, 0x0, 0x3, 0x4, @value=r4}, 0x50) r6 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r6, 0x29, 0x10, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000040)={{r7, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000000)='%pS \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r8}, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r5}, 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x18000000000002a0, 0xe40, 0x60ff, &(0x7f0000000840)="b9ff03076003008cb89e08f086dd", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 834.534131ms ago: executing program 3 (id=2832): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000000)="811e", 0x2}, {&(0x7f00000007c0)="f89eb1", 0x3}], 0x2, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @dev={0xac, 0x14, 0x14, 0x3a}}}}], 0x20}, 0x4840) 766.161146ms ago: executing program 3 (id=2833): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002, 0x2, 0x4}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = socket$kcm(0x2, 0xa, 0x84) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x7d, &(0x7f0000000000)=r4, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="4eaa000000000000711001000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f00000001c0), 0x0}, 0x20) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) ioctl$TUNGETFEATURES(r6, 0x541b, &(0x7f00000013c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20005d31, 0x10000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0x1000000}, 0x0, 0x0, 0x1, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, r5, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) close(r7) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000200000001000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r8}, 0x38) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r9, 0x2000002, 0xe, 0xfffffffffffffda9, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="5c00000011006bcc9e3be35c6e1700800000876c1d0000007ea60864160af36514001ac00400020207000200020001000200000000938037a786a6d0001000000e4509c5f05c2f070000000000000088bbcb", 0x52}, {&(0x7f0000000100)="9b25af20af07241a63c3", 0xa}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) 587.942976ms ago: executing program 0 (id=2834): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$kcm(0x2c, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181014100000000010000000000000e002e000f00000002800200121f", 0x2e}], 0x1}, 0x20000010) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc8910610700fa6fa26fa7088c60897d4a6148a1c1e43f00001bde605cbeac671e8e8fdecb035865e362ead91b1979a5ae30705b52710aeee835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5bc6d3fd0500000022eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd21142525815b91076ccb7b37b41215c184e731fb13d100323b77f613af02b6f3259d6f3ac85da4fe304ecfca2be5f4a8b3910a8f0a88d082ac161c4a3c1132831a88f199f67aca8f4698996d076250b2b75cdc7776b8cab72716149f70efb190007832c6077da0df4c63a226284cd6a2e5ec5bb28f18dd44821065b9758fd159c490421901361244c01bfa0cddbc726f2b4ceace9f9309f507e6a7135b33f418af0a63bfb480c2feced947dae1d7dc19c4f1807b17c559c27be4d18b2e0a3cf26832d7fc97cea307de1852f90317b501bf66473eb6dac986d7b5682abc3a5ea1dabde56b9e3a56ba20a65dc0df39edd5f34ed22a8f0c6594a894901e455d0369e407dae0f4fb4e181415153000000b6b384cb4bbfd4edfd70cd7324de228e1047a61292abe63fc71063a9040bd927779d56ef0f4725dfb3822ce1e24632f7d51a0e65bd5664fcd3e4a0b0388b842115b5689769438f9763a55956288e78b6cad0ff3f310722b4a5cc4f25a69753fcc8ece189808e6f2f71ca2337d0de3a9feaa3f4cd2a2c69d21daec3751aca69f0a6f5b0af65aace6d04dad91c67e57a0f7b8accb3f8d9b787e002e56a7149c2d10a268884e695256ddb9c17853e29689f41667522e693"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@fallback=r0, 0x0, 0x1, 0x25, &(0x7f0000000380)=[0x0], 0x1, 0x0, &(0x7f0000000400), &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0], 0x0}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c80)={r3, 0xe0, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xa4, &(0x7f0000000a80)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000ac0), &(0x7f0000000b00), 0x8, 0x67, 0x8, 0x8, &(0x7f0000000b40)}}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000cc0)={0x40}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000d00)={@cgroup=r4, r1, 0x30, 0x4, 0x0, @void, @value=r4, @void, @void, r5}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r6, r3, 0x26, 0x0, 0x0, @void, @value=r1}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r6, 0x26, 0x0, 0x0, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r7 = gettid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f00000001c0)=[@cred={{0x1c, 0x1, 0x2, {r7, 0xee01, 0xee00}}}], 0x20, 0x800}, 0x40800) syz_open_procfs$namespace(r7, &(0x7f00000000c0)='ns/net\x00') recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000020000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r8 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r8, &(0x7f00000003c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000100)="b7", 0x1}], 0x1}, 0x40080c0) 586.927856ms ago: executing program 3 (id=2835): r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="364000001a0091000b00b80000"], 0xfe33) 545.617589ms ago: executing program 4 (id=2836): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001340)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf81"], 0x0, 0x4}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) (fail_nth: 2) 420.768656ms ago: executing program 1 (id=2837): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8992, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)="5c00000052006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038021d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d49380e78ff6a1577ae18c819945fb4e37e70e4509c5", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000002400)=""/4073, 0xfe9}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xfb4, 0x0}, 0x0) 420.014276ms ago: executing program 3 (id=2838): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, &(0x7f0000000000), 0x4) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xf}, 0x90208, 0x0, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$kcm(0x10, 0x3, 0x0) write$cgroup_subtree(r1, &(0x7f0000001ec0)=ANY=[@ANYBLOB="13120000120091ef04e9befbbd00005c0a"], 0xfe33) recvmsg$kcm(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000039c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/233, 0xe9}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/87, 0x57}, {&(0x7f0000000400)=""/211, 0xd3}, {&(0x7f0000000b00)=""/157, 0x9d}, {&(0x7f00000008c0)=""/210, 0xd2}], 0x7}, 0x0) 380.406558ms ago: executing program 3 (id=2839): r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x5, 0x0, &(0x7f0000000000)="259a53f271", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x4, 0xd}, {0x10000002, 0x0, 0xf, 0x6}], 0x10, 0x4000000}, 0xfe33) r4 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x6e, &(0x7f0000000000)=r7, 0x10) r8 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x19) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x75, &(0x7f0000000000)=r9, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4e93, 0x18445, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xc0000000000000, 0xfffe}, 0x8080, 0x4, 0x80000000, 0x5, 0x400000a5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r11) r12 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4e93, 0x18445, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xc0000000000000, 0xfffe}, 0x8080, 0xa9, 0x80000000, 0x5, 0x400000a5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r12, 0x40042408, r11) r13 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10}, [@ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x50}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) r14 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r15 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r16 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r17 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e00)={&(0x7f0000000980)='sys_exit\x00', r16}, 0x10) r18 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r17}, 0x8) write$cgroup_int(r18, &(0x7f00000001c0), 0xfffffdef) r19 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r19, 0x29, 0x4e, 0x0, 0x0) r20 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000d40)={0xffffffffffffffff, 0x2, 0x8}, 0xc) sendmsg$unix(r1, &(0x7f0000000d80)={&(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000b00)=[{&(0x7f0000000080)="66a6060c3aa2d5c200095117812a1eada6e7f67d1e7cf722dea4bd1c265e192014a232", 0x23}, {&(0x7f0000000540)="012fda579f922ea31bb967389d40c534dbf1d90a9d2d3d55feef8595125721", 0x1f}, {&(0x7f0000000680)="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", 0xfb}, {&(0x7f0000000580)="1bdb71b3dfe49e1f8c19a6fd74e2fddcc4867137b2c5baf3ced05ea8c0f6c42500e7cfe866c9e7f78995ef0b9c2bff1e68", 0x31}, {&(0x7f0000000780)="8aaf452938cc116bd1a8dbca06702f166fc27f883806c6bf2e5ee07c9eab1164971e84d378532c0f623514913f1f1e51a425006de0f686e4a6b385b9696a02f6685762d5ae273626dbc780d4115a70fb82f819f266d8ccd1ee6c4f3baf4ba339e873bb75b81006c5ba529c99d2bb3381485e4ae6d9e3f3d25ad0609d580a71d06b455db31f4b4f646aa4", 0x8a}, {&(0x7f0000000840)="6f84dcf589bdfee54db45ca63c790db37448d1cf5bc5d7eed88fa50f58d85cf0531c5054cc6acf2ae1f409a7f6bbc30cdb00a512e783a088b880536db71633321dc6f96409092b8d549e115476f5de4c1639143ee1950443f3c0ac0aaf84d39fc58fc24e33efd8a1", 0x68}, {&(0x7f00000008c0)="26df73bc47df8b8c058c2700189d3722bcf74a004d43cb611db85361e2a005afab97dcb6bcdf7bcc43ad177d77bd9cd9174f2a567850fe479fb97e390e160b2ad3b95f7c99e412b2c90d3af2af5f509b1a160d0b", 0x54}, {&(0x7f00000009c0)="32684ad14c4988a15e370e8c9a9275f8f03c6f2bc04c544ea5f4d775638e2593face0386a2d8ca7927ad7edd3a1e04df0a5cf638dce25f6051970cdb591b52f61c577bfdcb9126d03214b6fea3fb3e15cf77d268d51f3bde818012c507d7894cb3db4d2cfe664bed4fa4a4f9adaf9242c5fcecd3e160f484066c9ad2598250f8f478f619", 0x84}, {&(0x7f0000000a80)="47ee5214566e5fca7615449eeaed0ba15437167c75c57527b74a35edf2e42d83ee2294bf704c226257dd05567e34b5c00a7732418cdb598897a418a1c40af9229f9bfa9506d9d11a18d69e1d7251403f76817f4ec9f8922d935ab1e1cca4971ebb10bb14", 0x64}], 0x9, &(0x7f0000000e40)=[@cred={{0x1c, 0x1, 0x2, {r14, 0xee01, 0xee01}}}, @rights={{0x20, 0x1, 0x1, [r5, r3, r3, r9]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r11, r13]}}, @rights={{0x14, 0x1, 0x1, [r8]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xffffffffffffffff}}}, @rights={{0x24, 0x1, 0x1, [r15, r4, 0xffffffffffffffff, r0, r0]}}, @rights={{0x28, 0x1, 0x1, [r2, r10, r16, r0, r19, r0]}}, @rights={{0x24, 0x1, 0x1, [r17, r2, r1, r0, r20]}}], 0x130, 0x4000}, 0x20000000) 280.072294ms ago: executing program 2 (id=2840): bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={0xffffffffffffffff, 0x2}, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='tlb_flush\x00', r0}, 0x10) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0xc, &(0x7f0000001d00)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000dba100000000000007010000f8ffffffb70200e607000000b7030000000009208500000072000100850000000800000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8e, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)=@caif=@util={0x25, "a2a8a5222ff1140b1db69ccc6131b57f"}, 0x80, &(0x7f0000000300)}, 0x448c0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x400}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000700)='\xe4W\x15\rQ\xd0\x84\x91g$\xd3\x8b\xd2}\xba\xafpj\x9c\xbf\x92\x90\x81\x10\xcf\xd9\r\xca\x00!\x9cg\v)\xdf9\xe0\xb1!\xd4`pv\xeda\xe7\xfe\xf5H\xd8\n\xf65\xd0Q\x1bA\xe8\xcd\xff\x0e\"\xa3\xce\xb3\xae\x0e\x16\x9a\x02\x11I\xa8\x1b\xb2\xf8\n\xf33`\x02Z\f\xd4\x99\xf5\xd4cH\xf0\xc1\xbcs\xe5\xec\x90\x05nG\x95\xc89\xea\x8d\\\xc7\x89\x82R\x92\f\xeb\xf0\t\xf4\xa9\xae\x04\xc5-\x1f.\xf5\xa7@>\x1f\f\'\xc4{\xe3\xd9\xf8\x19\xdf7\xe2\x9bH\x8d\x91$\x8c\xd0 BK\xc7=\x86\r\xeeW\xc2S\x80\xc9)P\xf4\x9b\x85\x13\xffBQ\xf0:\xe1$h\xde\xa3\fg\x9a\x11j\x8b\x1b\xb0X\xec\xacG\xc0$[\xbe8\x9fF.QF\xb4@UB\xee\bJ\xdc\"F~\x1eF\xbf\x06\x8e1\xa3\\\xf8\xb8\xb8\x81E\x18\'\x97\xd6\x02\xd6\v\xd1\x16\xf8\x9e]Y\xc5\xdf\xdcW(\xf9\x12\x00\x8e0\xc3J\xfe\x95\xdfwd\xcb\xbf]1\xb2\xc5\x7f\xf0\x80\xa9\v\x00'/271) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='workqueue_execute_end\x00', r2, 0x0, 0xe}, 0x18) 149.537482ms ago: executing program 1 (id=2841): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x5, 0x0, &(0x7f0000000000)="259a53f271", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x4, 0xd}, {0x10000002, 0x0, 0xf, 0x6}], 0x10, 0x4000000}, 0xfe33) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000000)=r4, 0x10) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)=r5, 0x8) 122.392533ms ago: executing program 4 (id=2842): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000120000f1850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000000)={&(0x7f0000000080), 0x6e, 0x0, 0x0, 0x0, 0x1d}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) setsockopt$sock_attach_bpf(r2, 0x1, 0x10, &(0x7f0000000040), 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x4c00, 0x0}, 0x0) socket$kcm(0x10, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000013006bec9e3be35c6e17aa31076b876c1d0000007ea60864160af3653c001ac004000202080002", 0x2b}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90324fc602f00001550000100feff000037153e370248018080351700d1bd", 0x33fe0}], 0x1}, 0x0) socket$kcm(0x29, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x2, &(0x7f0000000040)=@raw=[@btf_id={0x18, 0x1, 0x3, 0x0, 0x2}], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x8, &(0x7f0000000000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @initr0, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffb}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @exit], &(0x7f00000000c0)='GPL\x00'}, 0x94) r5 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(r5, &(0x7f0000001280)={&(0x7f00000010c0)=@in6={0xa, 0x0, 0x400000, @local, 0x4}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000080)='J', 0x1}], 0x1}, 0x404c810) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r4, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x200000000000014f, 0x41, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, 0x0, 0x19, 0x10, 0x8, 0x0, 0x0}}, 0x10) 89.123375ms ago: executing program 1 (id=2843): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000000)="811e", 0x2}, {&(0x7f00000007c0)="f89eb1", 0x3}], 0x2, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @dev={0xac, 0x14, 0x14, 0x3a}}}}], 0x20}, 0x4840) 87.796185ms ago: executing program 0 (id=2844): socket$kcm(0xa, 0x1, 0x106) r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="9c9cf23dced2276564c3f79796ae6d20e30a9f72fa307739a72c18588120667f1b34adf81841202b96189b2f28", 0x1}], 0x3c}, 0x20008884) sendmsg$kcm(r0, &(0x7f00000002c0)={&(0x7f0000000000)=@ax25={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x6}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default]}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000080)="f568ca5c6de3a6716d76e0e3935b11939fac797b624e324b27976dcdba3ac6f843cdf5bc39c91cc2c05e613b92977a339323c808e98d037a01915ab6991a0624e6ff016d45bdae77a364f2f9d9", 0x4d}], 0x1, &(0x7f0000000140)=[{0xd0, 0x112, 0x10, "77283c0721f85e62d006d66154ee49d82ef5d7b5bc0566abd5a580909f9e82b289738c6d5eff2a2954d5757207dcc75a003fe18551383f53ae00393188f5f4ed9e7c7dfed19ab6d8a61cad605a66c315329f50a3c37450be2b79d3776f3fff5660d22d3980e49c8ef0f2af73ff611570b7fb58cc93e7a7685d118070a1c85c628a132a829bad2d5a7686e4066781f3dcb172dbab239e9f9a44fd7f4cd5c01dea8839617f577d31da93eef38e00b89f7c885c0bb5f035f5bd38"}, {0x80, 0x88, 0xd5c, "105946260a3ca131580ec7e3e88ce56f7cf893804da60519776b91a93200cd9307e3eee262376d81e4d5cdfd6620be04afcd754e23572e7f9fa4059943de22349d3b524194c7e4ff6be4db3e858bd204ab7048572093eb0c20776a5a13102d106831f0c8b470c7c02611d9353f71d6"}], 0x150}, 0x4048845) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth0_to_bridge\x00', 0x400}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x5, 0xfffffffffffffdfb, 0x1a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x450, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x4, @perf_config_ext, 0x0, 0x8, 0x2, 0x5, 0x0, 0x7fff, 0xfffd, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x100) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c5a560833861abd67dcead199ea074e0ee7b1bcc261fa137c859c8c1e4396419f1f24c48b30ee58ea733f51851bff343b6012276bf2be0592571d787aedde3b8d06ea93f63c77f99ba7e5d9c4b651d9570386e505d62409a9adc9566cf65fecfb0ffffffff29b65f77f0f54d589e3d39d3bbd8bf680778e61dba76d9528c98b46ff57db9df5760ce92cfb95e66da6b3a5e41c52f0e34e9e9fcab8a375fc5f16a7139506949ad43f745897710485d5af688f246ead0a5e1024a"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r1, 0x0, 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="18600000000000000000000000000000185700000000000000000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)}, 0x80) bpf$MAP_CREATE(0x0, 0x0, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000380), 0x12) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x1) gettid() bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2b, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x3}, 0xc001, 0x9, 0x0, 0xd}, 0x0, 0x6, 0xffffffffffffffff, 0x0) unlink(0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) bpf$PROG_LOAD(0x5, 0x0, 0x0) 0s ago: executing program 1 (id=2845): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, 0x0, 0x40000000) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, 0x0, 0x0}, 0x94) r1 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x0, 0x485, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbfe, 0x3, 0x3ff, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000006c0)={0x1, 0x80, 0x5, 0x0, 0x40, 0x2, 0x0, 0x4d31, 0x85220, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff01, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x4, 0xffffffee, 0x0, 0x200000000000, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x59}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3c) sendmsg$kcm(r2, 0x0, 0x1) socket$kcm(0x2, 0x1, 0x84) syz_clone(0x32004000, 0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f0000000340)="da") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)="d800000019008111e0020f060d8107040a60090000020000000455a1bc00090008000699e3ffffff140005000800000006000567b8b7b94002000009080016060000000000000074d67f6f5d6b26462f25a4d1c2e446b727f3e29400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237ee4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b694138c9f1ac76efb42a9ecbee5de6ccd4", 0xd8}], 0x1}, 0x94) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90224fc60", 0x14}], 0x1, 0x0, 0x0, 0x10}, 0x0) kernel console output (not intermixed with test programs): ace deactivated: batadv_slave_1 [ 72.125159][ T4647] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 72.160398][ T4647] bond0: (slave batadv0): Releasing backup interface [ 72.175004][ T4647] device batadv0 left promiscuous mode [ 72.913092][ T4679] netlink: 'syz.0.158': attribute type 46 has an invalid length. [ 72.927553][ T4683] netlink: 830 bytes leftover after parsing attributes in process `syz.1.159'. [ 73.095711][ T4689] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.162'. [ 73.469092][ T4708] netlink: 40 bytes leftover after parsing attributes in process `syz.1.168'. [ 73.558553][ T4713] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.587607][ T4713] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.601597][ T4713] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.616890][ T4713] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.731206][ T4713] bond0: (slave batadv0): Releasing backup interface [ 73.753133][ T4713] device batadv0 left promiscuous mode [ 73.919344][ T4726] netlink: 'syz.1.176': attribute type 46 has an invalid length. [ 74.876212][ T4754] netlink: 'syz.0.185': attribute type 46 has an invalid length. [ 75.148951][ T4774] __nla_validate_parse: 2 callbacks suppressed [ 75.149057][ T4774] netlink: 830 bytes leftover after parsing attributes in process `syz.0.195'. [ 75.234230][ T4769] delete_channel: no stack [ 76.082997][ T4802] netlink: 'syz.2.205': attribute type 46 has an invalid length. [ 76.112991][ T4810] netlink: 830 bytes leftover after parsing attributes in process `syz.3.209'. [ 76.520888][ T4817] delete_channel: no stack [ 76.579008][ T23] cfg80211: failed to load regulatory.db [ 76.632754][ T4843] netlink: 40 bytes leftover after parsing attributes in process `syz.3.220'. [ 76.721731][ T4848] netlink: 830 bytes leftover after parsing attributes in process `syz.4.222'. [ 76.734452][ T4849] syz.0.224[4849] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 76.734593][ T4849] syz.0.224[4849] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 78.376501][ T4861] netlink: 830 bytes leftover after parsing attributes in process `syz.4.228'. [ 78.479436][ T4870] netlink: 132 bytes leftover after parsing attributes in process `syz.0.232'. [ 78.518427][ T4876] netlink: 'syz.3.235': attribute type 46 has an invalid length. [ 78.680274][ T4873] delete_channel: no stack [ 78.735006][ T4885] netlink: 'syz.1.238': attribute type 10 has an invalid length. [ 78.747422][ T4885] netlink: 40 bytes leftover after parsing attributes in process `syz.1.238'. [ 78.762249][ T4885] device caif0 entered promiscuous mode [ 78.768667][ T4885] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 78.784662][ T4890] netlink: 40 bytes leftover after parsing attributes in process `syz.0.237'. [ 78.827012][ T4890] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.865575][ T4890] device bridge_slave_0 left promiscuous mode [ 78.885574][ T4890] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.886785][ T4897] netlink: 'syz.1.242': attribute type 3 has an invalid length. [ 78.911707][ T4897] netlink: 132 bytes leftover after parsing attributes in process `syz.1.242'. [ 81.806123][ T4895] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 81.865073][ T4895] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 82.014958][ T4903] netlink: 830 bytes leftover after parsing attributes in process `syz.3.244'. [ 82.115214][ T4917] netlink: 'syz.3.251': attribute type 46 has an invalid length. [ 82.115683][ T4914] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.250'. [ 82.308119][ T4919] delete_channel: no stack [ 82.456955][ T4928] netlink: 830 bytes leftover after parsing attributes in process `syz.3.257'. [ 82.597069][ T4938] netlink: 830 bytes leftover after parsing attributes in process `syz.3.262'. [ 82.660766][ T4944] netlink: 'syz.3.265': attribute type 46 has an invalid length. [ 82.714990][ T4948] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.267'. [ 82.749984][ T4950] netlink: 'syz.3.268': attribute type 10 has an invalid length. [ 82.759594][ T4950] netlink: 40 bytes leftover after parsing attributes in process `syz.3.268'. [ 82.772523][ T4950] device caif0 entered promiscuous mode [ 82.778705][ T4950] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 82.995806][ T4966] netlink: 830 bytes leftover after parsing attributes in process `syz.1.275'. [ 83.094982][ T4975] netlink: 'syz.3.279': attribute type 46 has an invalid length. [ 83.534451][ T4945] delete_channel: no stack [ 86.400573][ T4999] netlink: 830 bytes leftover after parsing attributes in process `syz.0.290'. [ 89.616227][ T5039] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.305'. [ 89.644377][ T5037] netlink: 830 bytes leftover after parsing attributes in process `syz.0.304'. [ 89.741824][ T5052] netlink: 'syz.0.310': attribute type 3 has an invalid length. [ 89.976638][ T5076] netlink: 'syz.0.320': attribute type 46 has an invalid length. [ 90.012423][ T5077] netlink: 830 bytes leftover after parsing attributes in process `syz.4.321'. [ 90.373102][ T5087] netlink: 'syz.4.324': attribute type 3 has an invalid length. [ 90.793078][ T5107] netlink: 830 bytes leftover after parsing attributes in process `syz.3.333'. [ 90.922737][ T5115] netlink: 'syz.4.336': attribute type 46 has an invalid length. [ 90.939448][ T5114] netlink: 'syz.3.337': attribute type 3 has an invalid length. [ 91.362349][ T5141] netlink: 830 bytes leftover after parsing attributes in process `syz.4.348'. [ 91.700659][ T5154] netlink: 'syz.0.353': attribute type 3 has an invalid length. [ 91.762035][ T5159] netlink: 'syz.0.356': attribute type 46 has an invalid length. [ 91.956229][ T5168] netlink: 830 bytes leftover after parsing attributes in process `syz.4.360'. [ 92.216085][ T5185] netlink: 'syz.2.367': attribute type 3 has an invalid length. [ 92.340118][ T5193] netlink: 'syz.2.371': attribute type 46 has an invalid length. [ 92.419198][ T5197] netlink: 830 bytes leftover after parsing attributes in process `syz.4.373'. [ 92.923164][ T5220] netlink: 'syz.2.382': attribute type 3 has an invalid length. [ 93.060370][ T5226] netlink: 40 bytes leftover after parsing attributes in process `syz.2.385'. [ 93.070369][ T5226] device caif0 entered promiscuous mode [ 93.076478][ T5226] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 93.150616][ T5231] netlink: 830 bytes leftover after parsing attributes in process `syz.2.387'. [ 93.510949][ T5255] netlink: 40 bytes leftover after parsing attributes in process `syz.0.398'. [ 93.531876][ T5255] device caif0 entered promiscuous mode [ 93.545757][ T5255] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 94.091630][ T5291] device caif0 entered promiscuous mode [ 94.097709][ T5291] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 94.619869][ T5320] __nla_validate_parse: 3 callbacks suppressed [ 94.619883][ T5320] netlink: 40 bytes leftover after parsing attributes in process `syz.4.427'. [ 94.636229][ T5320] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 94.760559][ T5328] netlink: 830 bytes leftover after parsing attributes in process `syz.1.430'. [ 94.910088][ T5342] validate_nla: 7 callbacks suppressed [ 94.910105][ T5342] netlink: 'syz.0.438': attribute type 46 has an invalid length. [ 94.949149][ T5344] netlink: 830 bytes leftover after parsing attributes in process `syz.1.439'. [ 94.980816][ T5344] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.006651][ T5344] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.022313][ T5344] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.032748][ T5344] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.075719][ T5344] bond0: (slave batadv0): Releasing backup interface [ 95.089065][ T5344] device batadv0 left promiscuous mode [ 95.150023][ T5360] netlink: 830 bytes leftover after parsing attributes in process `syz.0.445'. [ 95.161111][ T5359] netlink: 'syz.2.444': attribute type 10 has an invalid length. [ 95.169466][ T5359] netlink: 40 bytes leftover after parsing attributes in process `syz.2.444'. [ 95.198247][ T5359] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 95.343331][ T5369] netlink: 'syz.4.449': attribute type 3 has an invalid length. [ 95.353250][ T5369] netlink: 132 bytes leftover after parsing attributes in process `syz.4.449'. [ 95.452781][ T5383] netlink: 'syz.1.456': attribute type 46 has an invalid length. [ 95.564477][ T5388] netlink: 830 bytes leftover after parsing attributes in process `syz.2.458'. [ 95.694736][ T5393] netlink: 830 bytes leftover after parsing attributes in process `syz.0.462'. [ 95.720062][ T5395] netlink: 'syz.2.461': attribute type 10 has an invalid length. [ 95.730607][ T5395] netlink: 40 bytes leftover after parsing attributes in process `syz.2.461'. [ 95.740978][ T5395] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 95.836721][ T5403] netlink: 'syz.2.465': attribute type 3 has an invalid length. [ 95.851403][ T5403] netlink: 132 bytes leftover after parsing attributes in process `syz.2.465'. [ 95.967811][ T5415] netlink: 'syz.2.471': attribute type 46 has an invalid length. [ 96.216124][ T5427] netlink: 'syz.2.477': attribute type 3 has an invalid length. [ 96.250864][ T5429] netlink: 'syz.0.478': attribute type 10 has an invalid length. [ 96.269522][ T5429] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 96.451287][ T5450] netlink: 'syz.3.488': attribute type 46 has an invalid length. [ 96.695918][ T5464] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 97.160633][ T5494] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 98.592991][ T5579] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 99.398517][ T5576] delete_channel: no stack [ 99.608038][ T5619] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 99.646958][ T5620] __nla_validate_parse: 24 callbacks suppressed [ 99.646976][ T5620] netlink: 152 bytes leftover after parsing attributes in process `syz.0.566'. [ 99.716438][ T5622] netlink: 132 bytes leftover after parsing attributes in process `syz.3.567'. [ 100.029339][ T5632] delete_channel: no stack [ 100.391500][ T5660] validate_nla: 18 callbacks suppressed [ 100.391801][ T5660] netlink: 'syz.2.583': attribute type 3 has an invalid length. [ 100.406070][ T5660] netlink: 132 bytes leftover after parsing attributes in process `syz.2.583'. [ 100.717724][ T5671] netlink: 830 bytes leftover after parsing attributes in process `syz.1.588'. [ 100.805924][ T5674] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.590'. [ 100.962519][ T5680] netlink: 830 bytes leftover after parsing attributes in process `syz.2.593'. [ 100.982372][ T5682] netlink: 'syz.1.594': attribute type 3 has an invalid length. [ 100.994132][ T5682] netlink: 132 bytes leftover after parsing attributes in process `syz.1.594'. [ 101.082163][ T5686] netlink: 'syz.0.595': attribute type 10 has an invalid length. [ 101.110993][ T5686] netlink: 40 bytes leftover after parsing attributes in process `syz.0.595'. [ 101.143351][ T5677] delete_channel: no stack [ 101.151058][ T5686] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 101.203723][ T5696] netlink: 830 bytes leftover after parsing attributes in process `syz.2.600'. [ 101.229514][ T5698] netlink: 'syz.4.601': attribute type 28 has an invalid length. [ 101.254255][ T5698] netlink: 152 bytes leftover after parsing attributes in process `syz.4.601'. [ 101.380617][ T5710] netlink: 'syz.2.604': attribute type 46 has an invalid length. [ 101.393028][ T5707] netlink: 'syz.0.605': attribute type 3 has an invalid length. [ 101.500274][ T5715] netlink: 'syz.3.607': attribute type 3 has an invalid length. [ 101.714324][ T5731] netlink: 'syz.2.614': attribute type 10 has an invalid length. [ 101.723472][ T5731] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 101.929178][ T5744] netlink: 'syz.0.621': attribute type 46 has an invalid length. [ 104.887186][ T5765] netlink: 'syz.4.631': attribute type 10 has an invalid length. [ 104.912987][ T5765] __nla_validate_parse: 3 callbacks suppressed [ 104.913001][ T5765] netlink: 40 bytes leftover after parsing attributes in process `syz.4.631'. [ 104.958079][ T5765] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 105.293829][ T5778] delete_channel: no stack [ 105.510956][ T5799] validate_nla: 1 callbacks suppressed [ 105.510973][ T5799] netlink: 'syz.1.645': attribute type 3 has an invalid length. [ 105.526806][ T5799] netlink: 132 bytes leftover after parsing attributes in process `syz.1.645'. [ 105.786441][ T5807] netlink: 830 bytes leftover after parsing attributes in process `syz.1.649'. [ 105.822033][ T5809] netlink: 'syz.4.650': attribute type 46 has an invalid length. [ 106.321659][ T5814] delete_channel: no stack [ 106.509883][ T5831] netlink: 'syz.0.661': attribute type 10 has an invalid length. [ 106.528782][ T5831] netlink: 40 bytes leftover after parsing attributes in process `syz.0.661'. [ 106.550410][ T5831] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 106.666679][ T5840] netlink: 40 bytes leftover after parsing attributes in process `syz.3.665'. [ 106.861163][ T5853] netlink: 'syz.3.668': attribute type 46 has an invalid length. [ 109.784928][ T5862] netlink: 830 bytes leftover after parsing attributes in process `syz.1.672'. [ 109.795161][ T5867] netlink: 'syz.0.676': attribute type 3 has an invalid length. [ 109.795206][ T5867] netlink: 132 bytes leftover after parsing attributes in process `syz.0.676'. [ 109.814283][ T5865] netlink: 'syz.4.675': attribute type 10 has an invalid length. [ 109.823987][ T5865] netlink: 40 bytes leftover after parsing attributes in process `syz.4.675'. [ 109.834205][ T5865] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 109.916951][ T5872] netlink: 40 bytes leftover after parsing attributes in process `syz.2.679'. [ 110.064365][ T5888] netlink: 'syz.0.685': attribute type 46 has an invalid length. [ 110.272656][ T5883] delete_channel: no stack [ 112.056159][ T5906] netlink: 830 bytes leftover after parsing attributes in process `syz.0.691'. [ 112.581661][ T5931] delete_channel: no stack [ 115.640564][ T5948] netlink: 830 bytes leftover after parsing attributes in process `syz.2.708'. [ 115.751037][ T5956] netlink: 'syz.2.712': attribute type 3 has an invalid length. [ 115.782912][ T5956] netlink: 132 bytes leftover after parsing attributes in process `syz.2.712'. [ 115.855317][ T5968] netlink: 'syz.0.718': attribute type 10 has an invalid length. [ 115.866224][ T5968] netlink: 40 bytes leftover after parsing attributes in process `syz.0.718'. [ 115.885040][ T5968] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 115.976138][ T5979] netlink: 830 bytes leftover after parsing attributes in process `syz.0.722'. [ 118.931560][ T5995] netlink: 'syz.3.729': attribute type 3 has an invalid length. [ 118.961761][ T5995] netlink: 132 bytes leftover after parsing attributes in process `syz.3.729'. [ 119.026224][ T6007] netlink: 'syz.3.733': attribute type 10 has an invalid length. [ 119.036741][ T6007] netlink: 40 bytes leftover after parsing attributes in process `syz.3.733'. [ 119.048032][ T6007] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 119.131623][ T6013] netlink: 'syz.3.736': attribute type 3 has an invalid length. [ 119.151878][ T6015] netlink: 830 bytes leftover after parsing attributes in process `syz.1.737'. [ 119.165375][ T6013] netlink: 'syz.3.736': attribute type 10 has an invalid length. [ 121.661518][ T6036] netlink: 'syz.1.744': attribute type 3 has an invalid length. [ 121.695211][ T6036] netlink: 132 bytes leftover after parsing attributes in process `syz.1.744'. [ 121.798707][ T6048] netlink: 830 bytes leftover after parsing attributes in process `syz.1.750'. [ 121.886735][ T6054] netlink: 'syz.3.753': attribute type 28 has an invalid length. [ 121.950877][ T6054] netlink: 152 bytes leftover after parsing attributes in process `syz.3.753'. [ 121.986476][ T6058] netlink: 830 bytes leftover after parsing attributes in process `syz.1.755'. [ 122.498593][ T6065] netlink: 830 bytes leftover after parsing attributes in process `syz.0.757'. [ 122.531023][ T6066] netlink: 830 bytes leftover after parsing attributes in process `syz.1.758'. [ 122.602436][ T6074] netlink: 'syz.2.762': attribute type 3 has an invalid length. [ 122.613426][ T6074] netlink: 132 bytes leftover after parsing attributes in process `syz.2.762'. [ 122.720210][ T6080] netlink: 'syz.1.764': attribute type 3 has an invalid length. [ 122.738871][ T6080] netlink: 'syz.1.764': attribute type 10 has an invalid length. [ 125.218285][ T6099] netlink: 'syz.4.770': attribute type 46 has an invalid length. [ 125.238297][ T6101] netlink: 'syz.0.771': attribute type 28 has an invalid length. [ 125.262157][ T6101] netlink: 152 bytes leftover after parsing attributes in process `syz.0.771'. [ 125.670156][ T6115] netlink: 'syz.4.776': attribute type 3 has an invalid length. [ 125.679231][ T6115] netlink: 132 bytes leftover after parsing attributes in process `syz.4.776'. [ 125.843785][ T6119] netlink: 830 bytes leftover after parsing attributes in process `syz.3.778'. [ 126.568023][ T6127] delete_channel: no stack [ 126.729268][ T6138] netlink: 'syz.4.785': attribute type 10 has an invalid length. [ 126.745339][ T6138] netlink: 40 bytes leftover after parsing attributes in process `syz.4.785'. [ 127.884348][ T6138] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 128.096751][ T6150] netlink: 'syz.4.786': attribute type 46 has an invalid length. [ 128.114790][ T6148] netlink: 'syz.2.789': attribute type 3 has an invalid length. [ 128.127861][ T6148] netlink: 132 bytes leftover after parsing attributes in process `syz.2.789'. [ 128.330981][ T6160] netlink: 'syz.4.795': attribute type 28 has an invalid length. [ 128.344813][ T6160] netlink: 152 bytes leftover after parsing attributes in process `syz.4.795'. [ 128.363680][ T6163] netlink: 'syz.1.796': attribute type 3 has an invalid length. [ 128.376265][ T6163] netlink: 'syz.1.796': attribute type 10 has an invalid length. [ 128.424495][ T6168] netlink: 'syz.1.798': attribute type 10 has an invalid length. [ 128.433545][ T6168] netlink: 40 bytes leftover after parsing attributes in process `syz.1.798'. [ 128.444770][ T6168] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 129.255428][ T6167] delete_channel: no stack [ 131.712902][ T6191] netlink: 'syz.0.805': attribute type 46 has an invalid length. [ 131.755110][ T6192] netlink: 830 bytes leftover after parsing attributes in process `syz.3.806'. [ 131.779265][ T6194] netlink: 'syz.2.808': attribute type 3 has an invalid length. [ 131.793077][ T6194] netlink: 'syz.2.808': attribute type 10 has an invalid length. [ 131.944478][ T6200] netlink: 'syz.1.810': attribute type 10 has an invalid length. [ 131.953738][ T6200] netlink: 40 bytes leftover after parsing attributes in process `syz.1.810'. [ 131.964447][ T6200] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 132.259076][ T6223] netlink: 830 bytes leftover after parsing attributes in process `syz.4.820'. [ 132.397446][ T6227] netlink: 830 bytes leftover after parsing attributes in process `syz.4.822'. [ 132.780036][ T6209] delete_channel: no stack [ 132.919729][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.926468][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.179674][ T6233] netlink: 'syz.0.825': attribute type 46 has an invalid length. [ 135.200951][ T6230] netlink: 830 bytes leftover after parsing attributes in process `syz.1.824'. [ 135.279997][ T6239] netlink: 'syz.2.828': attribute type 3 has an invalid length. [ 135.327839][ T6239] netlink: 'syz.2.828': attribute type 10 has an invalid length. [ 135.338540][ T6245] netlink: 'syz.3.831': attribute type 10 has an invalid length. [ 135.346405][ T6245] netlink: 40 bytes leftover after parsing attributes in process `syz.3.831'. [ 135.358837][ T6245] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 135.479121][ T6250] netlink: 830 bytes leftover after parsing attributes in process `syz.3.833'. [ 135.576339][ T6252] delete_channel: no stack [ 135.952767][ T6270] netlink: 'syz.2.843': attribute type 10 has an invalid length. [ 135.961501][ T6270] netlink: 40 bytes leftover after parsing attributes in process `syz.2.843'. [ 138.616509][ T6270] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 138.800897][ T6281] netlink: 'syz.4.847': attribute type 46 has an invalid length. [ 138.876612][ T6284] netlink: 830 bytes leftover after parsing attributes in process `syz.2.849'. [ 139.112304][ T6282] delete_channel: no stack [ 139.180952][ T6296] netlink: 40 bytes leftover after parsing attributes in process `syz.2.853'. [ 139.191903][ T6302] netlink: 'syz.4.856': attribute type 28 has an invalid length. [ 139.199815][ T6302] netlink: 152 bytes leftover after parsing attributes in process `syz.4.856'. [ 141.902043][ T6322] netlink: 'syz.1.866': attribute type 46 has an invalid length. [ 141.933243][ T6323] netlink: 830 bytes leftover after parsing attributes in process `syz.4.863'. [ 142.146710][ T6336] netlink: 40 bytes leftover after parsing attributes in process `syz.4.869'. [ 142.174952][ T6338] netlink: 'syz.1.871': attribute type 3 has an invalid length. [ 142.183283][ T6338] netlink: 132 bytes leftover after parsing attributes in process `syz.1.871'. [ 142.613799][ T6356] netlink: 830 bytes leftover after parsing attributes in process `syz.4.879'. [ 142.780158][ T6328] delete_channel: no stack [ 145.470817][ T6367] netlink: 'syz.0.881': attribute type 46 has an invalid length. [ 145.479896][ T6369] netlink: 'syz.4.884': attribute type 3 has an invalid length. [ 145.488109][ T6369] netlink: 132 bytes leftover after parsing attributes in process `syz.4.884'. [ 145.552353][ T6376] netlink: 'syz.3.886': attribute type 28 has an invalid length. [ 145.569572][ T6376] netlink: 152 bytes leftover after parsing attributes in process `syz.3.886'. [ 145.641980][ T6378] netlink: 830 bytes leftover after parsing attributes in process `syz.4.888'. [ 145.817968][ T6395] netlink: 40 bytes leftover after parsing attributes in process `syz.1.892'. [ 146.545747][ T6383] delete_channel: no stack [ 149.008620][ T6412] netlink: 'syz.1.902': attribute type 3 has an invalid length. [ 149.033635][ T6412] netlink: 'syz.1.902': attribute type 10 has an invalid length. [ 149.198512][ T6428] netlink: 830 bytes leftover after parsing attributes in process `syz.3.910'. [ 149.426555][ T6442] netlink: 830 bytes leftover after parsing attributes in process `syz.3.915'. [ 149.904980][ T6449] netlink: 16182 bytes leftover after parsing attributes in process `syz.0.917'. [ 149.918104][ T6449] netlink: 'syz.0.917': attribute type 10 has an invalid length. [ 152.275512][ T6472] netlink: 'syz.2.927': attribute type 46 has an invalid length. [ 152.362309][ T6478] netlink: 830 bytes leftover after parsing attributes in process `syz.4.931'. [ 152.487921][ T6488] netlink: 'syz.4.934': attribute type 3 has an invalid length. [ 152.507831][ T6488] netlink: 'syz.4.934': attribute type 10 has an invalid length. [ 153.477249][ T6495] delete_channel: no stack [ 154.328288][ T6484] netlink: 830 bytes leftover after parsing attributes in process `syz.2.933'. [ 154.455121][ T6519] netlink: 'syz.3.943': attribute type 46 has an invalid length. [ 154.772953][ T6526] delete_channel: no stack [ 154.851107][ T6542] netlink: 16182 bytes leftover after parsing attributes in process `syz.1.952'. [ 154.865929][ T6542] netlink: 'syz.1.952': attribute type 10 has an invalid length. [ 154.890690][ T6544] netlink: 830 bytes leftover after parsing attributes in process `syz.0.951'. [ 155.062976][ T6553] netlink: 830 bytes leftover after parsing attributes in process `syz.4.954'. [ 155.186152][ T6556] netlink: 'syz.2.956': attribute type 10 has an invalid length. [ 155.194566][ T6556] netlink: 40 bytes leftover after parsing attributes in process `syz.2.956'. [ 155.206726][ T6556] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 155.229545][ T6547] delete_channel: no stack [ 156.510933][ T6581] netlink: 'syz.3.965': attribute type 3 has an invalid length. [ 156.520917][ T6581] netlink: 'syz.3.965': attribute type 10 has an invalid length. [ 156.633172][ T6592] netlink: 'syz.3.969': attribute type 10 has an invalid length. [ 156.688064][ T6592] netlink: 40 bytes leftover after parsing attributes in process `syz.3.969'. [ 156.760959][ T6592] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 156.786272][ T6595] netlink: 40 bytes leftover after parsing attributes in process `syz.1.968'. [ 156.966664][ T6597] delete_channel: no stack [ 156.986250][ T6608] netlink: 830 bytes leftover after parsing attributes in process `syz.1.975'. [ 157.084098][ T6603] delete_channel: no stack [ 157.102269][ T6616] netlink: 'syz.1.979': attribute type 3 has an invalid length. [ 160.070198][ T6640] netlink: 40 bytes leftover after parsing attributes in process `syz.4.985'. [ 160.248032][ T6645] validate_nla: 1 callbacks suppressed [ 160.248047][ T6645] netlink: 'syz.2.991': attribute type 3 has an invalid length. [ 160.285397][ T6645] netlink: 'syz.2.991': attribute type 10 has an invalid length. [ 163.312121][ T6677] netlink: 'syz.4.1001': attribute type 28 has an invalid length. [ 163.339520][ T6677] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1001'. [ 163.365692][ T6684] netlink: 'syz.2.1007': attribute type 3 has an invalid length. [ 163.375605][ T6684] netlink: 'syz.2.1007': attribute type 10 has an invalid length. [ 163.439250][ T6687] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1008'. [ 163.509824][ T6691] netlink: 'syz.2.1010': attribute type 7 has an invalid length. [ 163.635799][ T6697] netlink: 'syz.2.1013': attribute type 10 has an invalid length. [ 163.657326][ T6697] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1013'. [ 163.673945][ T6697] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 163.859784][ T6714] netlink: 16182 bytes leftover after parsing attributes in process `syz.2.1020'. [ 163.870809][ T6714] netlink: 'syz.2.1020': attribute type 10 has an invalid length. [ 165.333793][ T6717] netlink: 'syz.2.1021': attribute type 28 has an invalid length. [ 165.358188][ T6717] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1021'. [ 165.416218][ T6729] netlink: 'syz.4.1026': attribute type 10 has an invalid length. [ 165.424304][ T6729] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1026'. [ 165.440526][ T6729] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 165.600611][ T6739] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1028'. [ 165.621685][ T6741] netlink: 'syz.3.1031': attribute type 3 has an invalid length. [ 165.658528][ T6741] netlink: 'syz.3.1031': attribute type 10 has an invalid length. [ 168.718674][ T6761] delete_channel: no stack [ 168.788413][ T6777] netlink: 16182 bytes leftover after parsing attributes in process `syz.2.1045'. [ 168.824237][ T6777] netlink: 'syz.2.1045': attribute type 10 has an invalid length. [ 168.892268][ T6784] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1046'. [ 168.960439][ T6786] netlink: 'syz.2.1059': attribute type 3 has an invalid length. [ 168.990067][ T6790] netlink: 'syz.3.1050': attribute type 7 has an invalid length. [ 169.008983][ T6786] netlink: 'syz.2.1059': attribute type 10 has an invalid length. [ 169.321704][ T6818] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1063'. [ 169.346736][ T6803] delete_channel: no stack [ 169.495239][ T6817] delete_channel: no stack [ 169.533367][ T6825] netlink: 'syz.3.1067': attribute type 3 has an invalid length. [ 169.575856][ T6825] netlink: 'syz.3.1067': attribute type 10 has an invalid length. [ 169.843787][ T6854] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1078'. [ 170.058345][ T6852] delete_channel: no stack [ 170.433547][ T6893] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1096'. [ 170.538496][ T6844] delete_channel: no stack [ 170.543538][ T6898] validate_nla: 4 callbacks suppressed [ 170.543553][ T6898] netlink: 'syz.4.1100': attribute type 3 has an invalid length. [ 170.562862][ T6891] delete_channel: no stack [ 170.570053][ T6898] netlink: 'syz.4.1100': attribute type 10 has an invalid length. [ 170.684993][ T6908] netlink: 'syz.0.1105': attribute type 7 has an invalid length. [ 170.869910][ T6927] netlink: 'syz.1.1114': attribute type 3 has an invalid length. [ 170.897150][ T6927] netlink: 'syz.1.1114': attribute type 10 has an invalid length. [ 170.924668][ T6935] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1112'. [ 171.202042][ T6947] netlink: 'syz.3.1122': attribute type 7 has an invalid length. [ 171.325265][ T6960] netlink: 'syz.1.1128': attribute type 3 has an invalid length. [ 171.341644][ T6960] netlink: 'syz.1.1128': attribute type 10 has an invalid length. [ 171.610859][ T6966] delete_channel: no stack [ 171.687790][ T6928] delete_channel: no stack [ 171.842269][ T6988] netlink: 'syz.0.1139': attribute type 7 has an invalid length. [ 171.875151][ T6990] netlink: 'syz.4.1141': attribute type 3 has an invalid length. [ 172.116411][ T7008] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1147'. [ 172.361165][ T7005] delete_channel: no stack [ 172.565837][ T7010] delete_channel: no stack [ 172.751306][ T7028] netlink: 16182 bytes leftover after parsing attributes in process `syz.4.1156'. [ 172.926323][ T7037] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1161'. [ 173.026760][ T7049] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1162'. [ 173.302918][ T7046] delete_channel: no stack [ 173.828305][ T7044] delete_channel: no stack [ 173.979315][ T7082] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1180'. [ 174.116009][ T7096] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1181'. [ 174.214699][ T7091] delete_channel: no stack [ 174.446358][ T7115] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1194'. [ 174.970814][ T7125] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1196'. [ 175.229796][ T7143] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 175.480665][ T7138] delete_channel: no stack [ 175.676047][ T7169] __nla_validate_parse: 3 callbacks suppressed [ 175.676424][ T7169] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1219'. [ 175.795538][ T7180] validate_nla: 14 callbacks suppressed [ 175.795556][ T7180] netlink: 'syz.0.1224': attribute type 7 has an invalid length. [ 175.857685][ T7181] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1222'. [ 175.947712][ T4243] Bluetooth: hci3: command 0x0406 tx timeout [ 175.955242][ T4243] Bluetooth: hci4: command 0x0406 tx timeout [ 175.985080][ T4243] Bluetooth: hci2: command 0x0406 tx timeout [ 176.007261][ T4243] Bluetooth: hci1: command 0x0406 tx timeout [ 176.029227][ T4243] Bluetooth: hci0: command 0x0406 tx timeout [ 179.025608][ T7203] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1234'. [ 179.102830][ T7206] netlink: 'syz.4.1235': attribute type 3 has an invalid length. [ 179.117378][ T7208] netlink: 'syz.3.1236': attribute type 10 has an invalid length. [ 179.137782][ T7206] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1235'. [ 179.148533][ T7208] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1236'. [ 179.160352][ T7208] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 179.179287][ T7212] netlink: 'syz.2.1238': attribute type 7 has an invalid length. [ 179.230766][ T7215] netlink: 'syz.1.1240': attribute type 7 has an invalid length. [ 179.370940][ T7226] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1242'. [ 179.424613][ T7230] netlink: 'syz.3.1246': attribute type 3 has an invalid length. [ 179.434572][ T7230] netlink: 'syz.3.1246': attribute type 10 has an invalid length. [ 179.483769][ T7235] netlink: 'syz.3.1249': attribute type 3 has an invalid length. [ 179.499749][ T7235] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1249'. [ 179.677301][ T7242] netlink: 'syz.3.1252': attribute type 10 has an invalid length. [ 179.685736][ T7242] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1252'. [ 179.702976][ T7242] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 179.748760][ T7245] netlink: 'syz.2.1253': attribute type 28 has an invalid length. [ 179.758511][ T7245] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1253'. [ 179.789378][ T7194] delete_channel: no stack [ 180.176519][ T7264] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1260'. [ 180.315085][ T7270] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 180.721988][ T7297] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 180.738724][ T7298] __nla_validate_parse: 6 callbacks suppressed [ 180.738740][ T7298] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1276'. [ 180.877985][ T7307] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1282'. [ 180.893765][ T7309] validate_nla: 11 callbacks suppressed [ 180.893780][ T7309] netlink: 'syz.2.1283': attribute type 28 has an invalid length. [ 180.909544][ T7309] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1283'. [ 181.051287][ T7319] netlink: 'syz.1.1288': attribute type 3 has an invalid length. [ 181.060604][ T7319] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1288'. [ 181.102721][ T7321] netlink: 'syz.1.1290': attribute type 10 has an invalid length. [ 181.117742][ T7321] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1290'. [ 181.171454][ T7321] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 181.246433][ T7275] delete_channel: no stack [ 181.358397][ T7340] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1297'. [ 181.380438][ T7338] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1293'. [ 181.488454][ T7344] netlink: 'syz.0.1299': attribute type 28 has an invalid length. [ 181.522735][ T7344] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1299'. [ 181.534218][ T7346] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1300'. [ 181.602179][ T7327] delete_channel: no stack [ 181.650273][ T7352] netlink: 'syz.0.1303': attribute type 3 has an invalid length. [ 181.658781][ T7352] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1303'. [ 181.735455][ T7357] netlink: 'syz.2.1304': attribute type 10 has an invalid length. [ 181.744143][ T7357] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 181.814638][ T7361] netlink: 'syz.0.1307': attribute type 7 has an invalid length. [ 181.894078][ T7358] delete_channel: no stack [ 182.059838][ T7376] netlink: 'syz.3.1314': attribute type 28 has an invalid length. [ 182.153022][ T7378] netlink: 'syz.2.1315': attribute type 3 has an invalid length. [ 182.371211][ T7388] netlink: 'syz.4.1320': attribute type 10 has an invalid length. [ 182.384459][ T7388] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 182.435032][ T7379] delete_channel: no stack [ 182.701413][ T7393] delete_channel: no stack [ 182.805678][ T7415] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 183.749773][ T7424] delete_channel: no stack [ 184.761338][ T7438] delete_channel: no stack [ 185.556848][ T7460] delete_channel: no stack [ 185.800711][ T7471] __nla_validate_parse: 13 callbacks suppressed [ 185.800766][ T7471] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1356'. [ 185.852396][ T7474] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1357'. [ 185.887735][ T7476] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1358'. [ 185.943969][ T7478] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1359'. [ 185.979883][ T7480] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1360'. [ 186.046762][ T7488] validate_nla: 4 callbacks suppressed [ 186.046775][ T7488] netlink: 'syz.3.1364': attribute type 46 has an invalid length. [ 186.150811][ T7492] netlink: 'syz.2.1366': attribute type 46 has an invalid length. [ 186.282580][ T7498] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1369'. [ 186.515330][ T7499] delete_channel: no stack [ 186.521141][ T7466] delete_channel: no stack [ 186.539204][ T7509] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1374'. [ 186.645098][ T7503] delete_channel: no stack [ 186.715281][ T7518] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1376'. [ 186.823175][ T7510] delete_channel: no stack [ 186.955588][ T7524] delete_channel: no stack [ 186.982352][ T7530] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1383'. [ 187.030423][ T7534] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1385'. [ 187.309553][ T7539] delete_channel: no stack [ 187.394981][ T7536] delete_channel: no stack [ 187.413055][ T7541] delete_channel: no stack [ 187.424023][ T7545] delete_channel: no stack [ 187.699201][ T7526] delete_channel: no stack [ 187.776596][ T7574] netlink: 'syz.3.1403': attribute type 28 has an invalid length. [ 187.879677][ T7580] netlink: 'syz.1.1406': attribute type 7 has an invalid length. [ 188.382889][ T7611] netlink: 'syz.1.1420': attribute type 28 has an invalid length. [ 188.420780][ T7613] netlink: 'syz.3.1421': attribute type 7 has an invalid length. [ 188.489295][ T7617] netlink: 'syz.1.1423': attribute type 46 has an invalid length. [ 188.871610][ T7638] netlink: 'syz.3.1434': attribute type 28 has an invalid length. [ 189.079768][ T7652] netlink: 'syz.2.1440': attribute type 46 has an invalid length. [ 189.389715][ T7671] netlink: 'syz.1.1449': attribute type 28 has an invalid length. [ 189.658197][ T7683] delete_channel: no stack [ 189.727908][ T7682] delete_channel: no stack [ 189.873784][ T7692] delete_channel: no stack [ 190.091750][ T7714] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 190.128408][ T7666] delete_channel: no stack [ 190.160368][ T7722] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 190.397821][ T7717] delete_channel: no stack [ 190.587889][ T7729] delete_channel: no stack [ 190.715034][ T7748] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 190.831677][ T7743] delete_channel: no stack [ 190.870286][ T7756] __nla_validate_parse: 33 callbacks suppressed [ 190.870303][ T7756] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1490'. [ 191.042477][ T7757] delete_channel: no stack [ 191.106027][ T7774] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1496'. [ 191.192004][ T7772] delete_channel: no stack [ 191.192369][ T7780] validate_nla: 8 callbacks suppressed [ 191.192382][ T7780] netlink: 'syz.0.1500': attribute type 10 has an invalid length. [ 191.210317][ T7780] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1500'. [ 191.221596][ T7780] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 191.238157][ T7781] netlink: 'syz.1.1498': attribute type 28 has an invalid length. [ 191.255913][ T7781] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1498'. [ 191.595740][ T7790] delete_channel: no stack [ 191.608267][ T7803] netlink: 'syz.2.1511': attribute type 46 has an invalid length. [ 191.684825][ T7807] netlink: 'syz.3.1512': attribute type 10 has an invalid length. [ 191.725670][ T7807] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1512'. [ 191.774226][ T7798] delete_channel: no stack [ 191.782465][ T7807] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 191.851418][ T7814] netlink: 'syz.2.1516': attribute type 28 has an invalid length. [ 191.887320][ T7814] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1516'. [ 192.021146][ T7818] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1519'. [ 192.021328][ T7808] delete_channel: no stack [ 192.219458][ T7835] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1524'. [ 192.284302][ T7838] netlink: 'syz.2.1526': attribute type 10 has an invalid length. [ 192.300245][ T7841] netlink: 'syz.3.1528': attribute type 3 has an invalid length. [ 192.308908][ T7841] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1528'. [ 192.318850][ T7838] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1526'. [ 192.328312][ T7838] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 192.545063][ T7847] delete_channel: no stack [ 192.795857][ T7859] delete_channel: no stack [ 192.814025][ T7863] delete_channel: no stack [ 192.856188][ T7877] netlink: 'syz.2.1544': attribute type 10 has an invalid length. [ 192.857772][ T7876] netlink: 'syz.1.1543': attribute type 3 has an invalid length. [ 192.875610][ T7877] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 193.107780][ T7891] netlink: 'syz.4.1561': attribute type 10 has an invalid length. [ 193.116149][ T7891] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 193.362470][ T7894] delete_channel: no stack [ 193.544702][ T7905] delete_channel: no stack [ 193.663588][ T7925] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 194.051843][ T7947] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 194.135219][ T7940] delete_channel: no stack [ 194.223397][ T7909] delete_channel: no stack [ 194.341047][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.347969][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.875652][ T7994] delete_channel: no stack [ 195.480116][ T8043] net_ratelimit: 2 callbacks suppressed [ 195.480124][ T8043] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 195.899935][ T8068] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 195.922973][ T8072] __nla_validate_parse: 31 callbacks suppressed [ 195.922989][ T8072] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1632'. [ 196.030045][ T8084] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1641'. [ 196.115065][ T8090] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1644'. [ 196.140695][ T8094] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1646'. [ 196.155676][ T8092] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1645'. [ 196.293341][ T8105] validate_nla: 20 callbacks suppressed [ 196.293359][ T8105] netlink: 'syz.0.1651': attribute type 10 has an invalid length. [ 196.339429][ T8105] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1651'. [ 196.372646][ T8105] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 196.447966][ T8095] delete_channel: no stack [ 196.644383][ T8119] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1654'. [ 196.685024][ T8125] netlink: 'syz.3.1659': attribute type 3 has an invalid length. [ 196.693833][ T8125] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1659'. [ 196.739452][ T8129] netlink: 'syz.3.1660': attribute type 46 has an invalid length. [ 196.775001][ T8128] netlink: 'syz.0.1670': attribute type 3 has an invalid length. [ 196.823889][ T8128] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1670'. [ 196.882551][ T8136] netlink: 'syz.0.1663': attribute type 10 has an invalid length. [ 196.891191][ T8136] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1663'. [ 196.913737][ T8136] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 196.950427][ T8132] delete_channel: no stack [ 197.321759][ T8145] delete_channel: no stack [ 197.402917][ T8159] netlink: 'syz.0.1674': attribute type 3 has an invalid length. [ 197.482169][ T8163] netlink: 'syz.2.1676': attribute type 10 has an invalid length. [ 197.495914][ T8163] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 197.525415][ T8169] netlink: 'syz.1.1678': attribute type 46 has an invalid length. [ 197.668149][ T8179] netlink: 'syz.2.1692': attribute type 10 has an invalid length. [ 197.698218][ T8179] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 197.866411][ T8192] netlink: 'syz.4.1687': attribute type 3 has an invalid length. [ 198.237854][ T8212] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 198.450684][ T8176] delete_channel: no stack [ 198.643935][ T8221] delete_channel: no stack [ 199.009494][ T8242] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 199.341555][ T8255] delete_channel: no stack [ 199.912461][ T8280] delete_channel: no stack [ 200.218106][ T8265] delete_channel: no stack [ 201.003986][ T8330] __nla_validate_parse: 15 callbacks suppressed [ 201.004037][ T8330] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1748'. [ 201.119006][ T8331] delete_channel: no stack [ 201.518901][ T8318] delete_channel: no stack [ 201.641186][ T8362] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1761'. [ 202.074295][ T8383] validate_nla: 5 callbacks suppressed [ 202.074398][ T8383] netlink: 'syz.3.1771': attribute type 46 has an invalid length. [ 202.781518][ T8386] delete_channel: no stack [ 202.900966][ T8403] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1781'. [ 205.918229][ T8421] netlink: 'syz.0.1788': attribute type 10 has an invalid length. [ 205.926339][ T8421] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1788'. [ 205.939870][ T8423] netlink: 'syz.4.1787': attribute type 3 has an invalid length. [ 205.954580][ T8423] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1787'. [ 206.000544][ T8421] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 206.035146][ T8432] netlink: 'syz.4.1792': attribute type 28 has an invalid length. [ 206.050805][ T8432] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1792'. [ 206.215282][ T8447] netlink: 'syz.2.1800': attribute type 46 has an invalid length. [ 209.488841][ T8476] netlink: 'syz.3.1809': attribute type 28 has an invalid length. [ 209.509444][ T8476] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1809'. [ 209.532771][ T8479] netlink: 'syz.1.1811': attribute type 46 has an invalid length. [ 209.977444][ T8486] delete_channel: no stack [ 209.984719][ T8501] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1819'. [ 213.175839][ T8521] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1830'. [ 213.334409][ T8531] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1835'. [ 213.384358][ T8537] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1838'. [ 213.469581][ T8541] netlink: 'syz.4.1839': attribute type 46 has an invalid length. [ 213.701600][ T8560] netlink: 'syz.1.1848': attribute type 28 has an invalid length. [ 213.711105][ T8560] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1848'. [ 213.816252][ T8563] netlink: 'syz.0.1859': attribute type 28 has an invalid length. [ 213.834135][ T8563] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1859'. [ 214.006584][ T8561] delete_channel: no stack [ 214.178616][ T8569] delete_channel: no stack [ 214.301098][ T8576] delete_channel: no stack [ 214.543292][ T8593] netlink: 'syz.2.1862': attribute type 3 has an invalid length. [ 214.558358][ T8594] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1863'. [ 214.609645][ T8593] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1862'. [ 214.697867][ T8587] delete_channel: no stack [ 215.059486][ T8604] delete_channel: no stack [ 215.135620][ T8622] netlink: 'syz.1.1875': attribute type 3 has an invalid length. [ 215.158872][ T8622] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1875'. [ 215.195707][ T8619] delete_channel: no stack [ 215.321782][ T8636] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1878'. [ 215.440996][ T8630] delete_channel: no stack [ 215.517297][ T8643] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1884'. [ 215.616429][ T8651] netlink: 'syz.1.1888': attribute type 3 has an invalid length. [ 216.526529][ T8656] delete_channel: no stack [ 217.753788][ T8684] netlink: 'syz.0.1902': attribute type 3 has an invalid length. [ 217.936101][ T8706] netlink: 'syz.0.1911': attribute type 46 has an invalid length. [ 218.187488][ T8720] netlink: 'syz.2.1917': attribute type 28 has an invalid length. [ 218.206344][ T8719] netlink: 'syz.1.1918': attribute type 3 has an invalid length. [ 218.215464][ T8719] __nla_validate_parse: 5 callbacks suppressed [ 218.215512][ T8719] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1918'. [ 218.219714][ T8720] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1917'. [ 218.388252][ T8734] netlink: 'syz.0.1924': attribute type 10 has an invalid length. [ 218.396669][ T8734] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1924'. [ 218.422120][ T8739] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1927'. [ 218.432924][ T8734] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 218.543959][ T8746] netlink: 'syz.2.1930': attribute type 3 has an invalid length. [ 218.544003][ T8748] netlink: 'syz.1.1932': attribute type 28 has an invalid length. [ 218.544019][ T8748] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1932'. [ 218.553716][ T8746] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1930'. [ 218.634240][ T8749] delete_channel: no stack [ 218.690186][ T8756] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.1935'. [ 218.756389][ T8765] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1939'. [ 218.771109][ T8765] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 218.892600][ T8771] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1938'. [ 219.061859][ T8781] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1944'. [ 219.280144][ T8793] delete_channel: no stack [ 219.336724][ T8799] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 219.829467][ T8825] delete_channel: no stack [ 219.889812][ T8839] validate_nla: 5 callbacks suppressed [ 219.889842][ T8839] netlink: 'syz.4.1969': attribute type 3 has an invalid length. [ 220.005638][ T8847] netlink: 'syz.0.1973': attribute type 46 has an invalid length. [ 220.319745][ T8849] delete_channel: no stack [ 220.459042][ T8875] netlink: 'syz.1.1984': attribute type 3 has an invalid length. [ 221.190340][ T8867] delete_channel: no stack [ 223.491265][ T8901] __nla_validate_parse: 14 callbacks suppressed [ 223.491281][ T8901] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1992'. [ 223.593307][ T8903] netlink: 'syz.0.1996': attribute type 3 has an invalid length. [ 223.627427][ T8903] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1996'. [ 223.744519][ T8910] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1997'. [ 223.879454][ T8913] delete_channel: no stack [ 224.087010][ T8923] delete_channel: no stack [ 226.922289][ T8922] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2013'. [ 227.143746][ T8931] netlink: 'syz.3.2007': attribute type 3 has an invalid length. [ 227.168594][ T8931] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2007'. [ 227.213810][ T8941] netlink: 'syz.1.2010': attribute type 46 has an invalid length. [ 227.252731][ T8944] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2008'. [ 227.539529][ T8956] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2017'. [ 227.688301][ T8964] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2018'. [ 227.702355][ T8953] delete_channel: no stack [ 227.834252][ T8970] netlink: 'syz.2.2023': attribute type 3 has an invalid length. [ 227.857416][ T8970] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2023'. [ 227.953456][ T8979] netlink: 'syz.2.2026': attribute type 28 has an invalid length. [ 227.976934][ T8979] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2026'. [ 228.042105][ T8984] netlink: 'syz.0.2028': attribute type 3 has an invalid length. [ 228.188662][ T8989] delete_channel: no stack [ 228.323680][ T9001] netlink: 'syz.3.2036': attribute type 3 has an invalid length. [ 228.414826][ T8995] delete_channel: no stack [ 228.570325][ T9017] __nla_validate_parse: 5 callbacks suppressed [ 228.570341][ T9017] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2041'. [ 228.631075][ T9015] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2042'. [ 228.648046][ T9018] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2040'. [ 228.785575][ T9027] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2046'. [ 228.910564][ T9029] delete_channel: no stack [ 228.966649][ T9039] netlink: 'syz.4.2050': attribute type 3 has an invalid length. [ 228.996993][ T9039] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2050'. [ 229.050224][ T9043] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2051'. [ 229.243655][ T9057] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2056'. [ 229.292169][ T9056] netlink: 'syz.2.2057': attribute type 46 has an invalid length. [ 229.340884][ T9050] delete_channel: no stack [ 229.441376][ T9063] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2060'. [ 229.544441][ T9071] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2061'. [ 229.649845][ T9076] netlink: 'syz.2.2068': attribute type 3 has an invalid length. [ 229.658277][ T9076] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2068'. [ 229.728775][ T9081] netlink: 'syz.3.2069': attribute type 28 has an invalid length. [ 229.918071][ T9048] delete_channel: no stack [ 230.605140][ T9134] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 231.180095][ T9117] delete_channel: no stack [ 234.298965][ T9202] validate_nla: 8 callbacks suppressed [ 234.299113][ T9202] netlink: 'syz.3.2116': attribute type 3 has an invalid length. [ 234.316288][ T9202] __nla_validate_parse: 15 callbacks suppressed [ 234.316321][ T9202] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2116'. [ 234.399994][ T9204] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2120'. [ 234.474946][ T9212] netlink: 'syz.2.2123': attribute type 10 has an invalid length. [ 234.483566][ T9212] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2123'. [ 234.496023][ T9212] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 234.645814][ T9224] netlink: 'syz.1.2127': attribute type 28 has an invalid length. [ 234.657912][ T9224] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2127'. [ 234.691016][ T9228] netlink: 'syz.3.2131': attribute type 7 has an invalid length. [ 235.107811][ T9240] netlink: 'syz.4.2136': attribute type 28 has an invalid length. [ 235.116452][ T9240] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2136'. [ 235.173628][ T9242] netlink: 'syz.2.2137': attribute type 3 has an invalid length. [ 235.198121][ T9242] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2137'. [ 235.409035][ T9252] netlink: 'syz.2.2140': attribute type 28 has an invalid length. [ 235.422587][ T9252] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2140'. [ 235.528045][ T9257] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2142'. [ 235.625186][ T9260] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2143'. [ 235.762556][ T9266] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2146'. [ 236.213652][ T9285] netlink: 'syz.3.2154': attribute type 46 has an invalid length. [ 236.219378][ T9272] delete_channel: no stack [ 236.289625][ T9290] netlink: 'syz.4.2156': attribute type 46 has an invalid length. [ 236.402289][ T9281] delete_channel: no stack [ 236.671648][ T9302] netlink: 'syz.4.2159': attribute type 3 has an invalid length. [ 236.786350][ T9295] delete_channel: no stack [ 236.811290][ T9276] delete_channel: no stack [ 237.400701][ T9319] delete_channel: no stack [ 237.735405][ T9329] delete_channel: no stack [ 237.996811][ T9340] delete_channel: no stack [ 238.535122][ T9367] delete_channel: no stack [ 241.456248][ T9379] __nla_validate_parse: 8 callbacks suppressed [ 241.456281][ T9379] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2192'. [ 241.509321][ T9374] delete_channel: no stack [ 241.688258][ T9395] validate_nla: 10 callbacks suppressed [ 241.688309][ T9395] netlink: 'syz.4.2200': attribute type 3 has an invalid length. [ 241.704117][ T9395] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2200'. [ 241.794002][ T9400] netlink: 'syz.2.2213': attribute type 3 has an invalid length. [ 241.810738][ T9400] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2213'. [ 241.917074][ T9386] delete_channel: no stack [ 242.010346][ T9397] delete_channel: no stack [ 242.082644][ T9414] netlink: 'syz.1.2205': attribute type 7 has an invalid length. [ 242.469128][ T9424] delete_channel: no stack [ 242.734843][ T9438] netlink: 'syz.1.2215': attribute type 3 has an invalid length. [ 242.743849][ T9438] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2215'. [ 242.982318][ T9453] netlink: 'syz.0.2222': attribute type 3 has an invalid length. [ 243.057715][ T9453] netlink: 'syz.0.2222': attribute type 10 has an invalid length. [ 243.132639][ T9451] delete_channel: no stack [ 243.172761][ T9461] netlink: 'syz.3.2226': attribute type 7 has an invalid length. [ 243.179188][ T9443] delete_channel: no stack [ 243.397675][ T9470] netlink: 'syz.1.2229': attribute type 3 has an invalid length. [ 243.427610][ T9470] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2229'. [ 243.521097][ T9476] netlink: 'syz.1.2242': attribute type 3 has an invalid length. [ 243.549888][ T9476] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2242'. [ 243.840108][ T9491] netlink: 'syz.1.2236': attribute type 3 has an invalid length. [ 243.911882][ T9489] delete_channel: no stack [ 244.361778][ T9511] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2245'. [ 244.595050][ T9521] delete_channel: no stack [ 245.142909][ T9508] delete_channel: no stack [ 245.152637][ T9548] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2260'. [ 246.219044][ T9562] delete_channel: no stack [ 248.330311][ T9575] validate_nla: 11 callbacks suppressed [ 248.330331][ T9575] netlink: 'syz.0.2272': attribute type 7 has an invalid length. [ 248.355440][ T9580] netlink: 'syz.4.2273': attribute type 3 has an invalid length. [ 248.363932][ T9580] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2273'. [ 248.676133][ T9572] delete_channel: no stack [ 248.695256][ T9588] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2275'. [ 248.834246][ T9594] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2276'. [ 249.089259][ T9606] netlink: 'syz.2.2282': attribute type 7 has an invalid length. [ 249.128465][ T9608] netlink: 'syz.3.2283': attribute type 7 has an invalid length. [ 249.278359][ T9613] netlink: 'syz.2.2285': attribute type 7 has an invalid length. [ 252.230029][ T9626] netlink: 'syz.3.2286': attribute type 7 has an invalid length. [ 252.508501][ T9620] delete_channel: no stack [ 252.541545][ T9625] delete_channel: no stack [ 253.000891][ T9643] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2293'. [ 253.207816][ T9656] netlink: 'syz.3.2299': attribute type 7 has an invalid length. [ 253.236902][ T9658] netlink: 'syz.2.2301': attribute type 46 has an invalid length. [ 253.781836][ T9666] delete_channel: no stack [ 253.793001][ T9668] delete_channel: no stack [ 253.884964][ T9678] netlink: 'syz.4.2316': attribute type 7 has an invalid length. [ 253.968503][ T9653] delete_channel: no stack [ 254.498358][ T9690] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2309'. [ 254.582707][ T9700] netlink: 'syz.2.2314': attribute type 46 has an invalid length. [ 254.593439][ T9696] netlink: 'syz.0.2313': attribute type 7 has an invalid length. [ 254.902228][ T9706] netlink: 'syz.2.2327': attribute type 46 has an invalid length. [ 255.273802][ T9707] delete_channel: no stack [ 255.525990][ T9711] delete_channel: no stack [ 255.527877][ T9709] delete_channel: no stack [ 255.787117][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.793654][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.886375][ T9742] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2326'. [ 256.068491][ T9750] netlink: 'syz.3.2331': attribute type 46 has an invalid length. [ 256.086346][ T9751] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2339'. [ 256.264637][ T9757] netlink: 'syz.2.2344': attribute type 46 has an invalid length. [ 256.332217][ T9760] netlink: 'syz.1.2333': attribute type 7 has an invalid length. [ 256.407026][ T9756] delete_channel: no stack [ 256.715693][ T9769] delete_channel: no stack [ 256.962981][ T9777] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2340'. [ 257.040623][ T9782] netlink: 'syz.2.2341': attribute type 7 has an invalid length. [ 257.067552][ T9783] netlink: 'syz.1.2345': attribute type 46 has an invalid length. [ 257.266801][ T9791] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2347'. [ 257.321628][ T9794] netlink: 'syz.1.2349': attribute type 46 has an invalid length. [ 257.407240][ T9796] delete_channel: no stack [ 257.528951][ T9806] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.2354'. [ 257.979160][ T9833] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2365'. [ 258.032319][ T9831] delete_channel: no stack [ 258.170572][ T9838] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.2369'. [ 258.757585][ T9863] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2380'. [ 258.773168][ T9862] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2381'. [ 258.922982][ T9872] validate_nla: 5 callbacks suppressed [ 258.922998][ T9872] netlink: 'syz.2.2383': attribute type 46 has an invalid length. [ 259.503030][ T9901] netlink: 'syz.0.2393': attribute type 46 has an invalid length. [ 259.624645][ T9905] delete_channel: no stack [ 259.730454][ T9913] netlink: 'syz.1.2402': attribute type 46 has an invalid length. [ 259.873789][ T9917] __nla_validate_parse: 3 callbacks suppressed [ 259.873808][ T9917] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2404'. [ 263.047461][ T9935] delete_channel: no stack [ 263.152244][ T9941] netlink: 'syz.1.2414': attribute type 28 has an invalid length. [ 263.195115][ T9941] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2414'. [ 266.045134][ T9949] netlink: 'syz.1.2418': attribute type 28 has an invalid length. [ 266.063197][ T9949] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2418'. [ 266.074472][ T9951] netlink: 'syz.4.2416': attribute type 28 has an invalid length. [ 266.086871][ T9951] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2416'. [ 266.170385][ T9955] delete_channel: no stack [ 266.349928][ T9952] delete_channel: no stack [ 266.685506][ T9982] netlink: 'syz.3.2430': attribute type 28 has an invalid length. [ 266.702464][ T9982] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2430'. [ 266.900191][ T9954] delete_channel: no stack [ 270.243370][T10016] netlink: 'syz.3.2443': attribute type 28 has an invalid length. [ 270.258622][T10016] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2443'. [ 270.281082][T10020] netlink: 'syz.0.2444': attribute type 28 has an invalid length. [ 270.289516][T10020] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2444'. [ 270.292124][T10004] delete_channel: no stack [ 273.806883][T10038] delete_channel: no stack [ 273.968602][T10061] netlink: 'syz.4.2460': attribute type 28 has an invalid length. [ 274.020273][T10061] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2460'. [ 274.167002][T10065] delete_channel: no stack [ 274.324363][T10075] delete_channel: no stack [ 274.339728][T10081] netlink: 'syz.2.2470': attribute type 46 has an invalid length. [ 274.459211][T10089] netlink: 'syz.2.2473': attribute type 28 has an invalid length. [ 274.467610][T10089] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2473'. [ 274.528907][T10094] netlink: 'syz.2.2474': attribute type 28 has an invalid length. [ 274.537021][T10094] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2474'. [ 274.648329][T10054] delete_channel: no stack [ 274.746126][T10099] delete_channel: no stack [ 274.952454][T10114] netlink: 'syz.0.2484': attribute type 46 has an invalid length. [ 274.987949][T10111] delete_channel: no stack [ 275.592682][T10137] delete_channel: no stack [ 275.611263][T10144] delete_channel: no stack [ 275.618503][T10136] delete_channel: no stack [ 275.652246][T10147] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.2497'. [ 275.766954][T10152] netlink: 'syz.4.2499': attribute type 46 has an invalid length. [ 275.872713][T10154] delete_channel: no stack [ 275.879888][T10151] delete_channel: no stack [ 276.024781][T10163] FAULT_INJECTION: forcing a failure. [ 276.024781][T10163] name failslab, interval 1, probability 0, space 0, times 1 [ 276.038959][T10163] CPU: 1 PID: 10163 Comm: syz.1.2516 Not tainted syzkaller #0 [ 276.046531][T10163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 276.056884][T10163] Call Trace: [ 276.060352][T10163] [ 276.063563][T10163] dump_stack_lvl+0x188/0x250 [ 276.068289][T10163] ? show_regs_print_info+0x20/0x20 [ 276.073604][T10163] ? load_image+0x400/0x400 [ 276.078148][T10163] should_fail+0x38c/0x4c0 [ 276.082597][T10163] should_failslab+0x5/0x20 [ 276.087200][T10163] slab_pre_alloc_hook+0x51/0xc0 [ 276.092160][T10163] __kmalloc_node_track_caller+0x68/0x3a0 [ 276.098160][T10163] ? tipc_msg_create+0x4b/0x4d0 [ 276.103041][T10163] ? kmem_cache_alloc_node+0x162/0x2d0 [ 276.108525][T10163] ? __alloc_skb+0xf4/0x750 [ 276.113054][T10163] ? tipc_msg_create+0x4b/0x4d0 [ 276.118112][T10163] __alloc_skb+0x22c/0x750 [ 276.122554][T10163] tipc_msg_create+0x4b/0x4d0 [ 276.127359][T10163] tipc_group_create_event+0x11f/0x980 [ 276.132850][T10163] tipc_sk_proto_rcv+0x68d/0x1730 [ 276.137994][T10163] ? mark_lock+0x94/0x320 [ 276.142531][T10163] ? trace_tipc_sk_dump+0x200/0x200 [ 276.147755][T10163] ? __lock_acquire+0x13bc/0x7d10 [ 276.153061][T10163] ? verify_lock_unused+0x140/0x140 [ 276.158451][T10163] ? tipc_sk_filtering+0x138/0x510 [ 276.163713][T10163] tipc_sk_filter_rcv+0x2e91/0x30c0 [ 276.169194][T10163] ? mark_lock+0x94/0x320 [ 276.173911][T10163] ? verify_lock_unused+0x140/0x140 [ 276.179473][T10163] ? rcu_lock_release+0x5/0x20 [ 276.184356][T10163] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 276.190529][T10163] ? tipc_sk_rcv+0x712/0x29f0 [ 276.195406][T10163] ? lock_chain_count+0x20/0x20 [ 276.200554][T10163] ? tipc_sk_publish+0x450/0x450 [ 276.205763][T10163] ? __local_bh_enable_ip+0xd7/0x1c0 [ 276.211258][T10163] ? __local_bh_enable_ip+0x136/0x1c0 [ 276.216756][T10163] tipc_sk_rcv+0x847/0x29f0 [ 276.221456][T10163] ? verify_lock_unused+0x140/0x140 [ 276.227053][T10163] ? __skb_queue_purge+0x160/0x160 [ 276.232188][T10163] ? memset+0x1e/0x40 [ 276.236467][T10163] ? lockdep_init_map_type+0x98/0x900 [ 276.241950][T10163] ? kfree+0xef/0x2a0 [ 276.246052][T10163] ? __raw_spin_lock_init+0x41/0x100 [ 276.251443][T10163] tipc_node_xmit+0x1eb/0xf20 [ 276.256310][T10163] ? kasan_set_track+0x62/0x70 [ 276.261269][T10163] ? kasan_set_track+0x4b/0x70 [ 276.266138][T10163] ? ____kasan_slab_free+0xd5/0x110 [ 276.271355][T10163] ? kfree+0xef/0x2a0 [ 276.275374][T10163] ? tipc_group_delete+0x3ba/0x4c0 [ 276.280592][T10163] ? tipc_sk_leave+0x142/0x4d0 [ 276.285393][T10163] ? tipc_release+0x315/0x1ff0 [ 276.290364][T10163] ? sock_close+0xd5/0x240 [ 276.294966][T10163] ? __fput+0x234/0x930 [ 276.299130][T10163] ? tipc_node_get_linkname+0x190/0x190 [ 276.304782][T10163] ? syscall_exit_to_user_mode+0x16/0x40 [ 276.310606][T10163] ? do_syscall_64+0x58/0xa0 [ 276.315384][T10163] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 276.321587][T10163] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 276.327852][T10163] tipc_node_distr_xmit+0x2d2/0x3f0 [ 276.333073][T10163] ? tipc_node_xmit_skb+0x190/0x190 [ 276.338560][T10163] ? tipc_group_delete+0x3ba/0x4c0 [ 276.343869][T10163] ? kfree+0xef/0x2a0 [ 276.347870][T10163] tipc_group_delete+0x3f2/0x4c0 [ 276.352839][T10163] ? tipc_group_update_member+0x3c0/0x3c0 [ 276.358674][T10163] ? tipc_group_self+0x22/0x1c0 [ 276.363732][T10163] tipc_sk_leave+0x142/0x4d0 [ 276.368346][T10163] ? __tipc_shutdown+0x1520/0x1520 [ 276.373652][T10163] ? _local_bh_enable+0xa0/0xa0 [ 276.378625][T10163] tipc_release+0x315/0x1ff0 [ 276.383327][T10163] ? tipc_sock_destruct+0x170/0x170 [ 276.388660][T10163] sock_close+0xd5/0x240 [ 276.392928][T10163] ? sock_mmap+0x90/0x90 [ 276.397293][T10163] __fput+0x234/0x930 [ 276.401299][T10163] task_work_run+0x125/0x1a0 [ 276.406002][T10163] exit_to_user_mode_loop+0x10f/0x130 [ 276.411386][T10163] exit_to_user_mode_prepare+0xee/0x180 [ 276.416946][T10163] syscall_exit_to_user_mode+0x16/0x40 [ 276.422414][T10163] do_syscall_64+0x58/0xa0 [ 276.426930][T10163] ? clear_bhb_loop+0x30/0x80 [ 276.431700][T10163] ? clear_bhb_loop+0x30/0x80 [ 276.436395][T10163] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 276.442405][T10163] RIP: 0033:0x7fc09d9becb9 [ 276.447069][T10163] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 276.467395][T10163] RSP: 002b:00007fc09bc1a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 276.476105][T10163] RAX: 0000000000000000 RBX: 00007fc09dc39fa0 RCX: 00007fc09d9becb9 [ 276.484359][T10163] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 276.492425][T10163] RBP: 00007fc09bc1a090 R08: 0000000000000000 R09: 0000000000000000 [ 276.500671][T10163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 276.508741][T10163] R13: 00007fc09dc3a038 R14: 00007fc09dc39fa0 R15: 00007ffc1128e828 [ 276.516880][T10163] [ 276.575627][T10167] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2506'. [ 276.617851][T10169] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2507'. [ 276.674342][T10173] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2509'. [ 276.724029][T10176] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2511'. [ 279.079682][T10186] netlink: 'syz.4.2514': attribute type 46 has an invalid length. [ 279.138111][T10191] netlink: 1034 bytes leftover after parsing attributes in process `syz.3.2515'. [ 279.222824][T10205] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.2521'. [ 279.266464][T10210] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.2522'. [ 279.362308][T10215] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2523'. [ 279.549399][T10218] delete_channel: no stack [ 282.249775][T10238] netlink: 'syz.2.2533': attribute type 46 has an invalid length. [ 282.279247][T10243] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2534'. [ 282.294799][T10235] delete_channel: no stack [ 282.321636][T10245] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2535'. [ 282.404163][T10251] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.2536'. [ 282.721211][T10266] delete_channel: no stack [ 283.096389][T10240] delete_channel: no stack [ 285.287519][T10279] netlink: 'syz.0.2550': attribute type 46 has an invalid length. [ 285.368536][T10278] delete_channel: no stack [ 285.458812][T10289] netlink: 'syz.4.2553': attribute type 46 has an invalid length. [ 285.485764][T10293] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2555'. [ 286.408258][T10299] netlink: 'syz.3.2557': attribute type 3 has an invalid length. [ 286.416724][T10299] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2557'. [ 288.546266][T10323] netlink: 'syz.3.2567': attribute type 46 has an invalid length. [ 288.652242][T10325] delete_channel: no stack [ 288.689510][T10330] netlink: 15119 bytes leftover after parsing attributes in process `syz.1.2569'. [ 288.781049][T10335] netlink: 'syz.3.2571': attribute type 46 has an invalid length. [ 288.794085][T10333] netlink: 'syz.2.2570': attribute type 3 has an invalid length. [ 288.822491][T10333] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2570'. [ 291.911957][T10362] netlink: 'syz.2.2581': attribute type 21 has an invalid length. [ 291.938059][T10362] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2581'. [ 292.055426][T10376] netlink: 'syz.3.2586': attribute type 3 has an invalid length. [ 292.069223][T10375] netlink: 'syz.1.2585': attribute type 46 has an invalid length. [ 292.075497][T10376] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2586'. [ 292.210649][T10382] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.2587'. [ 292.221504][T10382] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.2587'. [ 292.234200][T10382] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.2587'. [ 295.553532][T10413] netlink: 'syz.1.2598': attribute type 3 has an invalid length. [ 295.590157][T10413] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2598'. [ 295.658580][T10421] netlink: 'syz.4.2600': attribute type 46 has an invalid length. [ 295.707432][T10424] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2601'. [ 295.718934][T10424] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2601'. [ 295.758758][T10424] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2601'. [ 296.316199][T10456] FAULT_INJECTION: forcing a failure. [ 296.316199][T10456] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 296.330516][T10456] CPU: 1 PID: 10456 Comm: syz.4.2612 Not tainted syzkaller #0 [ 296.338190][T10456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 296.348572][T10456] Call Trace: [ 296.352041][T10456] [ 296.355076][T10456] dump_stack_lvl+0x188/0x250 [ 296.359943][T10456] ? show_regs_print_info+0x20/0x20 [ 296.365167][T10456] ? load_image+0x400/0x400 [ 296.369690][T10456] ? __lock_acquire+0x7d10/0x7d10 [ 296.372277][T10458] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2615'. [ 296.374751][T10456] ? perf_trace_lock_acquire+0xed/0x3e0 [ 296.374784][T10456] should_fail+0x38c/0x4c0 [ 296.374810][T10456] _copy_from_user+0x2e/0x170 [ 296.374831][T10456] __copy_msghdr_from_user+0x48a/0x630 [ 296.374850][T10456] ? verify_lock_unused+0x140/0x140 [ 296.374872][T10456] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 296.374903][T10456] ___sys_sendmsg+0x19a/0x2e0 [ 296.420020][T10456] ? __sys_sendmsg+0x2a0/0x2a0 [ 296.424817][T10456] ? vfs_write+0x8b2/0xd60 [ 296.429272][T10456] __se_sys_sendmsg+0x1af/0x290 [ 296.434406][T10456] ? __x64_sys_sendmsg+0x80/0x80 [ 296.439353][T10456] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 296.445555][T10456] ? lockdep_hardirqs_on+0x94/0x140 [ 296.450791][T10456] do_syscall_64+0x4c/0xa0 [ 296.455319][T10456] ? clear_bhb_loop+0x30/0x80 [ 296.460113][T10456] ? clear_bhb_loop+0x30/0x80 [ 296.464843][T10456] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 296.470929][T10456] RIP: 0033:0x7fbe5b3becb9 [ 296.475363][T10456] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 296.495076][T10456] RSP: 002b:00007fbe595f9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 296.504472][T10456] RAX: ffffffffffffffda RBX: 00007fbe5b63a090 RCX: 00007fbe5b3becb9 [ 296.512735][T10456] RDX: 0000000000008010 RSI: 0000200000000180 RDI: 0000000000000003 [ 296.520808][T10456] RBP: 00007fbe595f9090 R08: 0000000000000000 R09: 0000000000000000 [ 296.528975][T10456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 296.537451][T10456] R13: 00007fbe5b63a128 R14: 00007fbe5b63a090 R15: 00007ffcd0c54168 [ 296.545546][T10456] [ 296.679134][T10466] netlink: 'syz.2.2617': attribute type 46 has an invalid length. [ 296.872004][T10473] FAULT_INJECTION: forcing a failure. [ 296.872004][T10473] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 296.896951][T10473] CPU: 1 PID: 10473 Comm: syz.2.2621 Not tainted syzkaller #0 [ 296.904551][T10473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 296.915079][T10473] Call Trace: [ 296.918377][T10473] [ 296.921417][T10473] dump_stack_lvl+0x188/0x250 [ 296.926306][T10473] ? show_regs_print_info+0x20/0x20 [ 296.931930][T10473] ? load_image+0x400/0x400 [ 296.936460][T10473] ? __lock_acquire+0x7d10/0x7d10 [ 296.941507][T10473] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 296.947507][T10473] should_fail+0x38c/0x4c0 [ 296.952101][T10473] _copy_from_user+0x2e/0x170 [ 296.956802][T10473] copy_bpf_fprog_from_user+0x1a6/0x310 [ 296.962367][T10473] ? linkwatch_event+0x50/0x50 [ 296.967157][T10473] sock_setsockopt+0xb5b/0x24c0 [ 296.972035][T10473] ? __sock_set_mark+0x150/0x150 [ 296.976993][T10473] ? __lock_acquire+0x7d10/0x7d10 [ 296.982038][T10473] ? aa_sk_perm+0x7dc/0x910 [ 296.986649][T10473] ? aa_af_perm+0x340/0x340 [ 296.991348][T10473] ? __fget_files+0x40f/0x480 [ 296.996135][T10473] ? aa_sock_opt_perm+0x74/0x100 [ 297.001144][T10473] ? bpf_lsm_socket_setsockopt+0x5/0x10 [ 297.006977][T10473] ? security_socket_setsockopt+0x7a/0xa0 [ 297.012975][T10473] __sys_setsockopt+0x2f6/0x3d0 [ 297.018015][T10473] __x64_sys_setsockopt+0xb1/0xc0 [ 297.023429][T10473] do_syscall_64+0x4c/0xa0 [ 297.028132][T10473] ? clear_bhb_loop+0x30/0x80 [ 297.033078][T10473] ? clear_bhb_loop+0x30/0x80 [ 297.037756][T10473] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 297.043738][T10473] RIP: 0033:0x7f65e9020cb9 [ 297.048235][T10473] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 297.068702][T10473] RSP: 002b:00007f65e727c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 297.077284][T10473] RAX: ffffffffffffffda RBX: 00007f65e929bfa0 RCX: 00007f65e9020cb9 [ 297.085503][T10473] RDX: 000000000000001a RSI: 0000000000000001 RDI: 0000000000000004 [ 297.093675][T10473] RBP: 00007f65e727c090 R08: 0000000000000010 R09: 0000000000000000 [ 297.101926][T10473] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000001 [ 297.110163][T10473] R13: 00007f65e929c038 R14: 00007f65e929bfa0 R15: 00007fff015f54e8 [ 297.118889][T10473] [ 297.261209][T10488] __nla_validate_parse: 3 callbacks suppressed [ 297.261240][T10488] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2627'. [ 297.285242][T10488] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2627'. [ 297.323939][T10488] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2627'. [ 297.467699][T10502] netlink: 'syz.0.2632': attribute type 46 has an invalid length. [ 297.694411][T10504] netlink: 'syz.4.2633': attribute type 3 has an invalid length. [ 297.704013][T10504] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2633'. [ 297.771588][T10507] netlink: 207508 bytes leftover after parsing attributes in process `syz.0.2634'. [ 297.791963][T10513] FAULT_INJECTION: forcing a failure. [ 297.791963][T10513] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 297.806835][T10513] CPU: 0 PID: 10513 Comm: syz.3.2637 Not tainted syzkaller #0 [ 297.814684][T10513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 297.818803][T10515] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2638'. [ 297.824752][T10513] Call Trace: [ 297.824771][T10513] [ 297.824779][T10513] dump_stack_lvl+0x188/0x250 [ 297.824806][T10513] ? show_regs_print_info+0x20/0x20 [ 297.824822][T10513] ? load_image+0x400/0x400 [ 297.824842][T10513] ? __lock_acquire+0x7d10/0x7d10 [ 297.824863][T10513] ? unix_ioctl+0x25d/0x660 [ 297.824886][T10513] should_fail+0x38c/0x4c0 [ 297.824911][T10513] _copy_from_user+0x2e/0x170 [ 297.834913][T10515] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2638'. [ 297.837640][T10513] sock_do_ioctl+0x18c/0x320 [ 297.837668][T10513] ? sock_show_fdinfo+0xb0/0xb0 [ 297.837697][T10513] sock_ioctl+0x4d2/0x710 [ 297.837716][T10513] ? sock_poll+0x410/0x410 [ 297.837741][T10513] ? bpf_lsm_file_ioctl+0x5/0x10 [ 297.837759][T10513] ? security_file_ioctl+0x7c/0xa0 [ 297.855437][T10515] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2638'. [ 297.860412][T10513] ? sock_poll+0x410/0x410 [ 297.860441][T10513] __se_sys_ioctl+0xfa/0x170 [ 297.860462][T10513] do_syscall_64+0x4c/0xa0 [ 297.860479][T10513] ? clear_bhb_loop+0x30/0x80 [ 297.860494][T10513] ? clear_bhb_loop+0x30/0x80 [ 297.860510][T10513] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 297.860526][T10513] RIP: 0033:0x7f32bc6b8cb9 [ 297.860543][T10513] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 297.860557][T10513] RSP: 002b:00007f32ba914028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 297.860577][T10513] RAX: ffffffffffffffda RBX: 00007f32bc933fa0 RCX: 00007f32bc6b8cb9 [ 297.860590][T10513] RDX: 0000200000000000 RSI: 0000000000008924 RDI: 0000000000000004 [ 297.860600][T10513] RBP: 00007f32ba914090 R08: 0000000000000000 R09: 0000000000000000 [ 297.860611][T10513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 297.860622][T10513] R13: 00007f32bc934038 R14: 00007f32bc933fa0 R15: 00007fffb385a178 [ 297.860647][T10513] [ 298.175701][T10523] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2641'. [ 298.187795][T10523] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2641'. [ 298.296078][T10530] netlink: 'syz.0.2644': attribute type 1 has an invalid length. [ 298.378958][T10532] netlink: 'syz.4.2645': attribute type 46 has an invalid length. [ 298.455378][T10538] delete_channel: no stack [ 298.461040][T10537] delete_channel: no stack [ 298.487638][T10538] delete_channel: no stack [ 298.512981][T10537] delete_channel: no stack [ 299.049753][T10554] chnl_net:caif_netlink_parms(): no params data found [ 299.123912][T10554] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.131710][T10554] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.143201][T10554] device bridge_slave_0 entered promiscuous mode [ 299.154456][T10554] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.163095][T10554] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.173230][T10554] device bridge_slave_1 entered promiscuous mode [ 299.204788][T10554] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 299.218842][T10554] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 299.252709][T10554] team0: Port device team_slave_0 added [ 299.262362][T10554] team0: Port device team_slave_1 added [ 299.286515][T10554] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 299.293806][T10554] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.328128][T10554] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 299.342785][T10554] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 299.352263][T10554] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.384344][T10554] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 299.812623][T10554] device hsr_slave_0 entered promiscuous mode [ 300.572555][T10554] device hsr_slave_1 entered promiscuous mode [ 300.599088][T10554] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 300.613565][T10554] Cannot create hsr debugfs directory [ 300.701015][ T4216] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.811336][T10579] FAULT_INJECTION: forcing a failure. [ 300.811336][T10579] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 300.817387][ T4216] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.865679][T10579] CPU: 1 PID: 10579 Comm: syz.1.2658 Not tainted syzkaller #0 [ 300.873262][T10579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 300.883594][T10579] Call Trace: [ 300.887064][T10579] [ 300.890178][T10579] dump_stack_lvl+0x188/0x250 [ 300.894971][T10579] ? show_regs_print_info+0x20/0x20 [ 300.900273][T10579] ? load_image+0x400/0x400 [ 300.904795][T10579] ? __lock_acquire+0x7d10/0x7d10 [ 300.909940][T10579] should_fail+0x38c/0x4c0 [ 300.914554][T10579] _copy_from_user+0x2e/0x170 [ 300.919257][T10579] iovec_from_user+0x142/0x370 [ 300.919739][T10581] netlink: 'syz.0.2659': attribute type 1 has an invalid length. [ 300.924040][T10579] __import_iovec+0x70/0x490 [ 300.924075][T10579] import_iovec+0x6f/0xa0 [ 300.924096][T10579] ___sys_sendmsg+0x1fd/0x2e0 [ 300.945715][T10579] ? __sys_sendmsg+0x2a0/0x2a0 [ 300.950557][T10579] __se_sys_sendmsg+0x1af/0x290 [ 300.955409][T10579] ? __x64_sys_sendmsg+0x80/0x80 [ 300.960522][T10579] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 300.966683][T10579] ? trace_sys_enter+0x1f/0x80 [ 300.971509][T10579] do_syscall_64+0x4c/0xa0 [ 300.975916][T10579] ? clear_bhb_loop+0x30/0x80 [ 300.980579][T10579] ? clear_bhb_loop+0x30/0x80 [ 300.985246][T10579] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 300.991529][T10579] RIP: 0033:0x7fc09d9becb9 [ 300.995934][T10579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 301.016253][T10579] RSP: 002b:00007fc09bc1a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 301.025163][T10579] RAX: ffffffffffffffda RBX: 00007fc09dc39fa0 RCX: 00007fc09d9becb9 [ 301.033143][T10579] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 301.041509][T10579] RBP: 00007fc09bc1a090 R08: 0000000000000000 R09: 0000000000000000 [ 301.049568][T10579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 301.057798][T10579] R13: 00007fc09dc3a038 R14: 00007fc09dc39fa0 R15: 00007ffc1128e828 [ 301.065865][T10579] [ 301.070521][ T9721] Bluetooth: hci5: command 0x0409 tx timeout [ 301.118216][ T4216] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.246284][ T4216] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.400398][T10592] netlink: 'syz.1.2663': attribute type 3 has an invalid length. [ 301.569757][T10599] FAULT_INJECTION: forcing a failure. [ 301.569757][T10599] name failslab, interval 1, probability 0, space 0, times 0 [ 301.583831][T10599] CPU: 1 PID: 10599 Comm: syz.4.2667 Not tainted syzkaller #0 [ 301.591494][T10599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 301.601935][T10599] Call Trace: [ 301.605207][T10599] [ 301.608123][T10599] dump_stack_lvl+0x188/0x250 [ 301.612789][T10599] ? show_regs_print_info+0x20/0x20 [ 301.618358][T10599] ? load_image+0x400/0x400 [ 301.622873][T10599] ? __might_sleep+0xf0/0xf0 [ 301.627619][T10599] ? __lock_acquire+0x7d10/0x7d10 [ 301.632889][T10599] ? __local_bh_enable_ip+0x136/0x1c0 [ 301.638266][T10599] should_fail+0x38c/0x4c0 [ 301.642783][T10599] should_failslab+0x5/0x20 [ 301.647273][T10599] slab_pre_alloc_hook+0x51/0xc0 [ 301.652283][T10599] kmem_cache_alloc_node_trace+0x4a/0x300 [ 301.658164][T10599] ? __get_vm_area_node+0x119/0x2d0 [ 301.663741][T10599] __get_vm_area_node+0x119/0x2d0 [ 301.669223][T10599] __vmalloc_node_range+0xef/0x8b0 [ 301.674428][T10599] ? netlink_sendmsg+0x5ec/0xbe0 [ 301.679533][T10599] ? netlink_data_ready+0x10/0x10 [ 301.684648][T10599] ? netlink_sendmsg+0x5ec/0xbe0 [ 301.689660][T10599] vmalloc+0x75/0x80 [ 301.693693][T10599] ? netlink_sendmsg+0x5ec/0xbe0 [ 301.698620][T10599] netlink_sendmsg+0x5ec/0xbe0 [ 301.703458][T10599] ? netlink_getsockopt+0x570/0x570 [ 301.708839][T10599] ? aa_sock_msg_perm+0x94/0x150 [ 301.713761][T10599] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 301.719029][T10599] ? security_socket_sendmsg+0x7c/0xa0 [ 301.724660][T10599] ? netlink_getsockopt+0x570/0x570 [ 301.730108][T10599] ____sys_sendmsg+0x5b7/0x8f0 [ 301.734967][T10599] ? __sys_sendmsg_sock+0x30/0x30 [ 301.740160][T10599] ? import_iovec+0x6f/0xa0 [ 301.744832][T10599] ___sys_sendmsg+0x236/0x2e0 [ 301.749678][T10599] ? __sys_sendmsg+0x2a0/0x2a0 [ 301.754669][T10599] ? vfs_write+0x8b2/0xd60 [ 301.759340][T10599] __se_sys_sendmsg+0x1af/0x290 [ 301.764178][T10599] ? __x64_sys_sendmsg+0x80/0x80 [ 301.769184][T10599] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 301.775331][T10599] ? lockdep_hardirqs_on+0x94/0x140 [ 301.780964][T10599] do_syscall_64+0x4c/0xa0 [ 301.785670][T10599] ? clear_bhb_loop+0x30/0x80 [ 301.790647][T10599] ? clear_bhb_loop+0x30/0x80 [ 301.795489][T10599] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 301.801540][T10599] RIP: 0033:0x7fbe5b3becb9 [ 301.806198][T10599] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 301.826611][T10599] RSP: 002b:00007fbe5961a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 301.835463][T10599] RAX: ffffffffffffffda RBX: 00007fbe5b639fa0 RCX: 00007fbe5b3becb9 [ 301.843436][T10599] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 301.851512][T10599] RBP: 00007fbe5961a090 R08: 0000000000000000 R09: 0000000000000000 [ 301.859744][T10599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 301.867955][T10599] R13: 00007fbe5b63a038 R14: 00007fbe5b639fa0 R15: 00007ffcd0c54168 [ 301.876148][T10599] [ 301.885179][T10599] syz.4.2667: vmalloc error: size 213312, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 301.900859][T10599] CPU: 0 PID: 10599 Comm: syz.4.2667 Not tainted syzkaller #0 [ 301.908782][T10599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 301.918846][T10599] Call Trace: [ 301.922350][T10599] [ 301.925291][T10599] dump_stack_lvl+0x188/0x250 [ 301.929984][T10599] ? rcu_lock_release+0x5/0x20 [ 301.934754][T10599] ? show_regs_print_info+0x20/0x20 [ 301.940228][T10599] ? load_image+0x400/0x400 [ 301.945181][T10599] warn_alloc+0x243/0x320 [ 301.949744][T10599] ? zone_watermark_ok_safe+0x240/0x240 [ 301.955454][T10599] ? kmem_cache_alloc_node_trace+0x16c/0x300 [ 301.961534][T10599] ? __get_vm_area_node+0x119/0x2d0 [ 301.966870][T10599] __vmalloc_node_range+0x2b1/0x8b0 [ 301.972349][T10599] ? netlink_data_ready+0x10/0x10 [ 301.977462][T10599] ? netlink_sendmsg+0x5ec/0xbe0 [ 301.982397][T10599] vmalloc+0x75/0x80 [ 301.986459][T10599] ? netlink_sendmsg+0x5ec/0xbe0 [ 301.991398][T10599] netlink_sendmsg+0x5ec/0xbe0 [ 301.996164][T10599] ? netlink_getsockopt+0x570/0x570 [ 302.001530][T10599] ? aa_sock_msg_perm+0x94/0x150 [ 302.006460][T10599] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 302.012098][T10599] ? security_socket_sendmsg+0x7c/0xa0 [ 302.017914][T10599] ? netlink_getsockopt+0x570/0x570 [ 302.023519][T10599] ____sys_sendmsg+0x5b7/0x8f0 [ 302.028388][T10599] ? __sys_sendmsg_sock+0x30/0x30 [ 302.034158][T10599] ? import_iovec+0x6f/0xa0 [ 302.038859][T10599] ___sys_sendmsg+0x236/0x2e0 [ 302.043724][T10599] ? __sys_sendmsg+0x2a0/0x2a0 [ 302.048491][T10599] ? vfs_write+0x8b2/0xd60 [ 302.052926][T10599] __se_sys_sendmsg+0x1af/0x290 [ 302.058035][T10599] ? __x64_sys_sendmsg+0x80/0x80 [ 302.063067][T10599] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 302.069165][T10599] ? lockdep_hardirqs_on+0x94/0x140 [ 302.074547][T10599] do_syscall_64+0x4c/0xa0 [ 302.078960][T10599] ? clear_bhb_loop+0x30/0x80 [ 302.083634][T10599] ? clear_bhb_loop+0x30/0x80 [ 302.088623][T10599] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 302.094615][T10599] RIP: 0033:0x7fbe5b3becb9 [ 302.099116][T10599] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 302.120202][T10599] RSP: 002b:00007fbe5961a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 302.128706][T10599] RAX: ffffffffffffffda RBX: 00007fbe5b639fa0 RCX: 00007fbe5b3becb9 [ 302.136848][T10599] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 302.145425][T10599] RBP: 00007fbe5961a090 R08: 0000000000000000 R09: 0000000000000000 [ 302.153673][T10599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 302.161961][T10599] R13: 00007fbe5b63a038 R14: 00007fbe5b639fa0 R15: 00007ffcd0c54168 [ 302.170039][T10599] [ 302.219652][T10599] Mem-Info: [ 302.223004][T10599] active_anon:270 inactive_anon:33905 isolated_anon:0 [ 302.223004][T10599] active_file:4810 inactive_file:36785 isolated_file:0 [ 302.223004][T10599] unevictable:768 dirty:393 writeback:0 [ 302.223004][T10599] slab_reclaimable:19969 slab_unreclaimable:97632 [ 302.223004][T10599] mapped:29414 shmem:1629 pagetables:612 bounce:0 [ 302.223004][T10599] kernel_misc_reclaimable:0 [ 302.223004][T10599] free:1361672 free_pcp:12665 free_cma:0 [ 302.240894][T10595] device wlan1 entered promiscuous mode [ 302.300984][T10599] Node 0 active_anon:1048kB inactive_anon:135112kB active_file:19036kB inactive_file:147140kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117656kB dirty:1572kB writeback:0kB shmem:4440kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11352kB pagetables:2348kB all_unreclaimable? no [ 302.340826][T10599] Node 1 active_anon:32kB inactive_anon:508kB active_file:204kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2076kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 302.390990][T10609] netlink: 'syz.3.2669': attribute type 3 has an invalid length. [ 302.402873][T10609] __nla_validate_parse: 10 callbacks suppressed [ 302.402902][T10609] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2669'. [ 302.423032][T10599] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 302.458382][T10599] lowmem_reserve[]: 0 2539 2540 2540 2540 [ 302.464273][T10599] Node 0 DMA32 free:1512120kB min:34784kB low:43480kB high:52176kB reserved_highatomic:0KB active_anon:1048kB inactive_anon:135112kB active_file:19036kB inactive_file:147140kB unevictable:1536kB writepending:1572kB present:3129332kB managed:2606544kB mlocked:0kB bounce:0kB free_pcp:40456kB local_pcp:21340kB free_cma:0kB [ 302.512796][T10599] lowmem_reserve[]: 0 0 0 0 0 [ 302.517830][T10599] Node 0 Normal free:8kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:660kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:12kB free_cma:0kB [ 302.546699][T10599] lowmem_reserve[]: 0 0 0 0 0 [ 302.552968][T10599] Node 1 Normal free:3919200kB min:55108kB low:68884kB high:82660kB reserved_highatomic:0KB active_anon:32kB inactive_anon:508kB active_file:204kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:8936kB local_pcp:2004kB free_cma:0kB [ 302.583838][T10599] lowmem_reserve[]: 0 0 0 0 0 [ 302.588865][T10599] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 302.603916][T10599] Node 0 DMA32: 786*4kB (UME) 392*8kB (UM) 409*16kB (UME) 1497*32kB (UME) 416*64kB (UME) 717*128kB (UME) 244*256kB (UME) 147*512kB (UME) 15*1024kB (UME) 13*2048kB (UE) 282*4096kB (UM) = 1513912kB [ 302.627831][T10599] Node 0 Normal: 2*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 302.641110][T10599] Node 1 Normal: 100*4kB (UME) 40*8kB (UE) 23*16kB (UME) 107*32kB (UE) 45*64kB (UME) 15*128kB (UME) 7*256kB (UME) 1*512kB (U) 0*1024kB 2*2048kB (ME) 953*4096kB (M) = 3919200kB [ 302.660661][T10599] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 302.670413][T10599] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 302.681332][T10599] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 302.692206][T10599] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 302.703203][T10599] 43226 total pagecache pages [ 302.708034][T10599] 0 pages in swap cache [ 302.712426][T10599] Swap cache stats: add 0, delete 0, find 0/0 [ 302.720088][T10599] Free swap = 124996kB [ 302.724253][T10599] Total swap = 124996kB [ 302.729415][T10599] 2097051 pages RAM [ 302.733485][T10599] 0 pages HighMem/MovableOnly [ 302.740509][T10599] 411492 pages reserved [ 302.744862][T10599] 0 pages cma reserved [ 303.137349][ T9723] Bluetooth: hci5: command 0x041b tx timeout [ 304.701950][T10619] netlink: 'syz.3.2672': attribute type 46 has an invalid length. [ 304.751852][T10621] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2673'. [ 304.851837][T10629] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2677'. [ 304.852845][T10627] netlink: 'syz.4.2676': attribute type 3 has an invalid length. [ 304.876343][T10629] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2677'. [ 304.876456][T10627] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2676'. [ 304.891933][T10629] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2677'. [ 304.998875][T10634] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.2679'. [ 305.015188][T10554] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 305.028960][T10636] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2680'. [ 305.044547][T10554] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 305.060646][T10636] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2680'. [ 305.081787][T10554] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 305.092644][T10636] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2680'. [ 305.109194][T10554] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 305.219021][ T21] Bluetooth: hci5: command 0x040f tx timeout [ 305.260823][T10656] netlink: 'syz.4.2682': attribute type 1 has an invalid length. [ 305.333195][T10554] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.350285][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 305.364227][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 305.377086][T10554] 8021q: adding VLAN 0 to HW filter on device team0 [ 305.391690][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 305.402761][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 305.413367][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.420712][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 305.440052][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 305.458921][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 305.470330][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 305.480693][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.487859][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 305.499440][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 305.520647][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 305.531166][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 305.545111][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 305.555524][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 305.572105][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 305.593495][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 305.605266][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 305.615119][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 305.626753][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 305.639179][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 305.653171][T10554] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 305.789573][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 305.799152][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 305.814957][T10554] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 305.844009][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 305.854336][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 305.891585][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 305.913939][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 305.943800][T10554] device veth0_vlan entered promiscuous mode [ 305.959522][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 305.973604][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 305.995993][T10554] device veth1_vlan entered promiscuous mode [ 306.038560][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 306.064923][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 306.074650][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 306.094745][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 306.110418][T10554] device veth0_macvtap entered promiscuous mode [ 306.162567][T10554] device veth1_macvtap entered promiscuous mode [ 306.175834][T10673] netlink: 'syz.0.2690': attribute type 3 has an invalid length. [ 306.210715][T10554] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 306.230805][ T239] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 306.242109][ T239] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 306.257051][ T239] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 306.268287][ T239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 306.286710][T10554] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 306.300355][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 306.314890][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 306.376264][T10554] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.386352][T10554] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.396641][T10554] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.406020][T10554] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.539280][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.574411][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.587032][ T4216] device hsr_slave_0 left promiscuous mode [ 306.598482][ T4216] device hsr_slave_1 left promiscuous mode [ 306.615350][ T4216] device bridge_slave_1 left promiscuous mode [ 306.623859][ T4216] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.658591][ T4216] device veth1_vlan left promiscuous mode [ 306.683987][ T4216] device veth0_vlan left promiscuous mode [ 306.855204][T10702] netlink: 'syz.1.2702': attribute type 3 has an invalid length. [ 306.956880][ T4216] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 307.030067][ T4216] device batadv_slave_0 left promiscuous mode [ 307.297530][ T2239] Bluetooth: hci5: command 0x0419 tx timeout [ 307.415250][ T4216] team0 (unregistering): Port device team_slave_1 removed [ 307.445410][ T4216] team0 (unregistering): Port device team_slave_0 removed [ 307.465930][ T4216] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 307.475726][ T4216] device bond_slave_1 left promiscuous mode [ 307.491934][T10715] __nla_validate_parse: 10 callbacks suppressed [ 307.491984][T10715] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2707'. [ 307.509459][ T4216] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 307.520686][ T4216] device bond_slave_0 left promiscuous mode [ 307.568408][ T4216] bond0 (unregistering): Released all slaves [ 307.623302][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 307.631132][T10709] netlink: 'syz.1.2704': attribute type 1 has an invalid length. [ 307.645722][T10709] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.2704'. [ 307.656116][T10715] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2707'. [ 307.681763][ T239] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.702738][ T239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.727237][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 307.735794][T10716] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2707'. [ 307.778432][T10720] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2709'. [ 307.841504][T10725] FAULT_INJECTION: forcing a failure. [ 307.841504][T10725] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 307.872393][T10725] CPU: 0 PID: 10725 Comm: syz.2.2650 Not tainted syzkaller #0 [ 307.880211][T10725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 307.882793][T10729] netlink: 'syz.0.2712': attribute type 3 has an invalid length. [ 307.890274][T10725] Call Trace: [ 307.890286][T10725] [ 307.890294][T10725] dump_stack_lvl+0x188/0x250 [ 307.890317][T10725] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 307.890336][T10725] ? show_regs_print_info+0x20/0x20 [ 307.890350][T10725] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 307.890377][T10725] should_fail+0x38c/0x4c0 [ 307.890401][T10725] _copy_from_user+0x2e/0x170 [ 307.899143][T10729] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2712'. [ 307.901491][T10725] vmemdup_user+0xa4/0x170 [ 307.901523][T10725] map_delete_elem+0x1f2/0x550 [ 307.901544][T10725] ? bpf_lsm_bpf+0x5/0x10 [ 307.958361][T10725] __sys_bpf+0x498/0x6f0 [ 307.963220][T10725] ? bpf_link_show_fdinfo+0x380/0x380 [ 307.968692][T10725] ? vtime_user_exit+0x2c8/0x3e0 [ 307.973640][T10725] __x64_sys_bpf+0x78/0x90 [ 307.978047][T10725] do_syscall_64+0x4c/0xa0 [ 307.982452][T10725] ? clear_bhb_loop+0x30/0x80 [ 307.987208][T10725] ? clear_bhb_loop+0x30/0x80 [ 307.991959][T10725] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 307.998182][T10725] RIP: 0033:0x7fcc0a4b6cb9 [ 308.002679][T10725] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 308.022922][T10725] RSP: 002b:00007fcc08712028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 308.031424][T10725] RAX: ffffffffffffffda RBX: 00007fcc0a731fa0 RCX: 00007fcc0a4b6cb9 [ 308.039391][T10725] RDX: 0000000000000020 RSI: 0000200000000180 RDI: 0000000000000003 [ 308.047532][T10725] RBP: 00007fcc08712090 R08: 0000000000000000 R09: 0000000000000000 [ 308.055683][T10725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 308.063653][T10725] R13: 00007fcc0a732038 R14: 00007fcc0a731fa0 R15: 00007ffda13ce2b8 [ 308.071622][T10725] [ 309.873435][T10759] netlink: 'syz.1.2731': attribute type 46 has an invalid length. [ 309.929835][T10761] netlink: 'syz.2.2721': attribute type 1 has an invalid length. [ 309.957341][T10761] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.2721'. [ 310.924363][T10765] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2722'. [ 310.955711][T10769] netlink: 'syz.3.2725': attribute type 3 has an invalid length. [ 310.969968][T10768] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2724'. [ 310.992483][T10769] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2725'. [ 314.303593][T10801] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2739'. [ 314.397539][T10805] netlink: 'syz.0.2740': attribute type 3 has an invalid length. [ 314.405652][T10805] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2740'. [ 315.811037][T10815] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.2743'. [ 315.848755][T10810] device wlan0 entered promiscuous mode [ 315.883649][T10810] netlink: 'syz.3.2742': attribute type 9 has an invalid length. [ 315.916653][T10810] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2742'. [ 316.122351][T10834] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2750'. [ 316.132094][T10835] netlink: 'syz.0.2751': attribute type 3 has an invalid length. [ 316.141324][T10835] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2751'. [ 317.223051][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.229788][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.593566][T10853] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.2757'. [ 318.611150][T10858] FAULT_INJECTION: forcing a failure. [ 318.611150][T10858] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 318.644358][T10858] CPU: 1 PID: 10858 Comm: syz.4.2758 Not tainted syzkaller #0 [ 318.652263][T10858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 318.662676][T10858] Call Trace: [ 318.666123][T10858] [ 318.669233][T10858] dump_stack_lvl+0x188/0x250 [ 318.674147][T10858] ? show_regs_print_info+0x20/0x20 [ 318.679357][T10858] ? load_image+0x400/0x400 [ 318.684127][T10858] ? __lock_acquire+0x7d10/0x7d10 [ 318.689176][T10858] ? vfs_write+0x8b2/0xd60 [ 318.693606][T10858] should_fail+0x38c/0x4c0 [ 318.698038][T10858] _copy_from_user+0x2e/0x170 [ 318.703338][T10858] __sys_bpf+0x26d/0x6f0 [ 318.707775][T10858] ? bpf_link_show_fdinfo+0x380/0x380 [ 318.713153][T10858] ? vtime_user_exit+0x2c8/0x3e0 [ 318.718090][T10858] __x64_sys_bpf+0x78/0x90 [ 318.722588][T10858] do_syscall_64+0x4c/0xa0 [ 318.727089][T10858] ? clear_bhb_loop+0x30/0x80 [ 318.731851][T10858] ? clear_bhb_loop+0x30/0x80 [ 318.736536][T10858] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 318.742511][T10858] RIP: 0033:0x7fbe5b3becb9 [ 318.747008][T10858] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 318.766695][T10858] RSP: 002b:00007fbe5961a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 318.775204][T10858] RAX: ffffffffffffffda RBX: 00007fbe5b639fa0 RCX: 00007fbe5b3becb9 [ 318.783183][T10858] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 0000000000000000 [ 318.791600][T10858] RBP: 00007fbe5961a090 R08: 0000000000000000 R09: 0000000000000000 [ 318.800095][T10858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 318.808319][T10858] R13: 00007fbe5b63a038 R14: 00007fbe5b639fa0 R15: 00007ffcd0c54168 [ 318.816299][T10858] [ 318.837511][T10863] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2762'. [ 318.868946][T10865] netlink: 'syz.4.2763': attribute type 3 has an invalid length. [ 318.877315][T10865] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2763'. [ 318.969002][T10870] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2776'. [ 318.984275][T10868] device wlan0 entered promiscuous mode [ 318.998892][T10872] netlink: 'syz.4.2765': attribute type 4 has an invalid length. [ 319.030297][T10868] netlink: 'syz.2.2764': attribute type 9 has an invalid length. [ 322.300989][T10899] netlink: 'syz.4.2775': attribute type 3 has an invalid length. [ 322.331000][T10899] __nla_validate_parse: 1 callbacks suppressed [ 322.331045][T10899] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2775'. [ 322.390160][T10909] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.2778'. [ 322.391223][T10910] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2779'. [ 325.928687][T10941] netlink: 'syz.1.2791': attribute type 46 has an invalid length. [ 325.983995][T10949] netlink: 'syz.0.2790': attribute type 3 has an invalid length. [ 325.998467][T10949] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2790'. [ 326.064571][T10959] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2795'. [ 326.142442][T10968] netlink: 'syz.1.2799': attribute type 46 has an invalid length. [ 329.691717][T10990] FAULT_INJECTION: forcing a failure. [ 329.691717][T10990] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 329.715808][T10990] CPU: 0 PID: 10990 Comm: syz.1.2808 Not tainted syzkaller #0 [ 329.723483][T10990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 329.733719][T10990] Call Trace: [ 329.737005][T10990] [ 329.740027][T10990] dump_stack_lvl+0x188/0x250 [ 329.744719][T10990] ? show_regs_print_info+0x20/0x20 [ 329.749928][T10990] ? load_image+0x400/0x400 [ 329.752869][T10988] device syzkaller0 entered promiscuous mode [ 329.754436][T10990] ? __might_sleep+0xf0/0xf0 [ 329.765108][T10990] ? __lock_acquire+0x7d10/0x7d10 [ 329.770015][T10995] netlink: 'syz.4.2805': attribute type 46 has an invalid length. [ 329.770120][T10990] ? mark_lock+0x94/0x320 [ 329.782486][T10990] should_fail+0x38c/0x4c0 [ 329.786996][T10990] copy_page_from_iter+0x33c/0x760 [ 329.792282][T10990] pipe_write+0x96f/0x1aa0 [ 329.796806][T10990] ? pipe_write+0x1c1/0x1aa0 [ 329.801605][T10990] ? pipe_read+0x1260/0x1260 [ 329.806216][T10990] ? end_current_label_crit_section+0x14b/0x170 [ 329.812653][T10990] ? memset+0x1e/0x40 [ 329.816906][T10990] ? iov_iter_init+0xb4/0x170 [ 329.821686][T10990] vfs_write+0x745/0xd60 [ 329.826111][T10990] ? file_end_write+0x250/0x250 [ 329.831048][T10990] ? __fget_files+0x40f/0x480 [ 329.835813][T10990] ? __fdget_pos+0x1e2/0x370 [ 329.840480][T10990] ? ksys_write+0x71/0x260 [ 329.844893][T10990] ksys_write+0x152/0x260 [ 329.849222][T10990] ? __ia32_sys_read+0x80/0x80 [ 329.854073][T10990] ? trace_sys_enter+0x1f/0x80 [ 329.858832][T10990] do_syscall_64+0x4c/0xa0 [ 329.863245][T10990] ? clear_bhb_loop+0x30/0x80 [ 329.867919][T10990] ? clear_bhb_loop+0x30/0x80 [ 329.872599][T10990] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 329.878581][T10990] RIP: 0033:0x7fc09d9becb9 [ 329.883276][T10990] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 329.903390][T10990] RSP: 002b:00007fc09bc1a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 329.911901][T10990] RAX: ffffffffffffffda RBX: 00007fc09dc39fa0 RCX: 00007fc09d9becb9 [ 329.920050][T10990] RDX: 00000000fffffdef RSI: 00002000000001c0 RDI: 0000000000000000 [ 329.928474][T10990] RBP: 00007fc09bc1a090 R08: 0000000000000000 R09: 0000000000000000 [ 329.936444][T10990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 329.944589][T10990] R13: 00007fc09dc3a038 R14: 00007fc09dc39fa0 R15: 00007ffc1128e828 [ 329.952929][T10990] [ 330.013592][T10998] netlink: 'syz.0.2809': attribute type 10 has an invalid length. [ 330.034106][T11000] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.2810'. [ 330.069108][T10998] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2809'. [ 330.359179][T10998] team0: Port device vlan0 removed [ 330.696355][T11015] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2814'. [ 330.744906][T11015] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.830612][T11015] device bridge_slave_0 left promiscuous mode [ 330.839513][T11015] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.929184][T11027] netlink: 'syz.4.2820': attribute type 46 has an invalid length. [ 331.246197][T11040] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2826'. [ 331.439528][T11048] tap0: tun_chr_ioctl cmd 1074025675 [ 331.445405][T11048] tap0: persist enabled [ 331.453299][T11048] tap0: tun_chr_ioctl cmd 1074025675 [ 331.461299][T11048] tap0: persist disabled [ 331.477405][T11048] netlink: 'syz.1.2829': attribute type 3 has an invalid length. [ 331.485552][T11048] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2829'. [ 331.725759][T11057] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2833'. [ 331.971133][T11061] netlink: 'syz.0.2834': attribute type 46 has an invalid length. [ 331.992273][T11064] FAULT_INJECTION: forcing a failure. [ 331.992273][T11064] name failslab, interval 1, probability 0, space 0, times 0 [ 332.070612][T11068] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2838'. [ 332.073123][T11064] CPU: 0 PID: 11064 Comm: syz.4.2836 Not tainted syzkaller #0 [ 332.089680][T11064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 332.099936][T11064] Call Trace: [ 332.103432][T11064] [ 332.106373][T11064] dump_stack_lvl+0x188/0x250 [ 332.111516][T11064] ? show_regs_print_info+0x20/0x20 [ 332.116900][T11064] ? load_image+0x400/0x400 [ 332.121667][T11064] ? __might_sleep+0xf0/0xf0 [ 332.126350][T11064] ? __lock_acquire+0x7d10/0x7d10 [ 332.131389][T11064] should_fail+0x38c/0x4c0 [ 332.135833][T11064] should_failslab+0x5/0x20 [ 332.140496][T11064] slab_pre_alloc_hook+0x51/0xc0 [ 332.145627][T11064] __kmalloc+0x6b/0x330 [ 332.150061][T11064] ? tomoyo_encode+0x27e/0x540 [ 332.155013][T11064] tomoyo_encode+0x27e/0x540 [ 332.159712][T11064] tomoyo_realpath_from_path+0x5cd/0x610 [ 332.165588][T11064] tomoyo_path_number_perm+0x242/0x660 [ 332.171258][T11064] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 332.177870][T11064] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 332.183385][T11064] security_file_ioctl+0x6c/0xa0 [ 332.188509][T11064] __se_sys_ioctl+0x48/0x170 [ 332.193303][T11064] do_syscall_64+0x4c/0xa0 [ 332.197943][T11064] ? clear_bhb_loop+0x30/0x80 [ 332.202890][T11064] ? clear_bhb_loop+0x30/0x80 [ 332.207562][T11064] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 332.213538][T11064] RIP: 0033:0x7fbe5b3becb9 [ 332.217960][T11064] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 332.237995][T11064] RSP: 002b:00007fbe5961a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 332.246759][T11064] RAX: ffffffffffffffda RBX: 00007fbe5b639fa0 RCX: 00007fbe5b3becb9 [ 332.254998][T11064] RDX: 0000200000000080 RSI: 00000000000089f0 RDI: 0000000000000004 [ 332.263163][T11064] RBP: 00007fbe5961a090 R08: 0000000000000000 R09: 0000000000000000 [ 332.271128][T11064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 332.279253][T11064] R13: 00007fbe5b63a038 R14: 00007fbe5b639fa0 R15: 00007ffcd0c54168 [ 332.287232][T11064] [ 332.298195][T11064] ERROR: Out of memory at tomoyo_realpath_from_path. [ 332.473522][ C0] ------------[ cut here ]------------ [ 332.479274][ C0] WARNING: CPU: 0 PID: 11088 at mm/maccess.c:226 copy_from_user_nofault+0x160/0x1c0 [ 332.488857][ C0] Modules linked in: [ 332.492760][ C0] CPU: 0 PID: 11088 Comm: syz.1.2845 Not tainted syzkaller #0 [ 332.500469][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 332.511497][ C0] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 332.517747][ C0] Code: 24 45 31 f6 31 ff 89 de e8 7d 94 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 00 91 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 332.537477][ C0] RSP: 0018:ffffc90000007d38 EFLAGS: 00010006 [ 332.543671][ C0] RAX: ffffffff81a07ea0 RBX: 0000000000000008 RCX: ffff88802a85bb80 [ 332.551811][ C0] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000000 [ 332.560046][ C0] RBP: 0000000000000000 R08: ffff88802a85bb87 R09: 1ffff1100550b770 [ 332.568117][ C0] R10: dffffc0000000000 R11: ffffed100550b771 R12: ffff88802a85d308 [ 332.576547][ C0] R13: 00007ffffffff000 R14: ffffc90000007da8 R15: 0000000000000000 [ 332.584507][ C0] FS: 00007fc09bc1a6c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 332.593774][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 332.600436][ C0] CR2: 0000000020000000 CR3: 0000000071a5f000 CR4: 00000000003506f0 [ 332.608660][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 332.616618][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 332.624750][ C0] Call Trace: [ 332.628215][ C0] [ 332.631231][ C0] bpf_probe_read_compat+0xdd/0x170 [ 332.636702][ C0] bpf_prog_1ccb8ba97563bf77+0x59/0x850 [ 332.642673][ C0] bpf_trace_run2+0x163/0x2e0 [ 332.647347][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 332.653503][ C0] ? bpf_trace_run1+0x2e0/0x2e0 [ 332.658339][ C0] ? flush_tlb_one_user+0x50/0x50 [ 332.663435][ C0] trace_tlb_flush+0xe6/0x110 [ 332.668291][ C0] flush_tlb_func+0x4c7/0x5b0 [ 332.673216][ C0] ? kvm_sched_clock_read+0x14/0x40 [ 332.678461][ C0] ? sched_clock_cpu+0x15/0x3c0 [ 332.683298][ C0] ? native_flush_tlb_multi+0xd0/0xd0 [ 332.688742][ C0] ? kvm_sched_clock_read+0x14/0x40 [ 332.693925][ C0] ? native_flush_tlb_multi+0xd0/0xd0 [ 332.699276][ C0] flush_smp_call_function_queue+0x2a9/0x760 [ 332.705254][ C0] __sysvec_call_function_single+0x98/0x240 [ 332.711145][ C0] sysvec_call_function_single+0x98/0xc0 [ 332.716938][ C0] [ 332.720027][ C0] [ 332.723028][ C0] asm_sysvec_call_function_single+0x16/0x20 [ 332.729169][ C0] RIP: 0010:native_apic_msr_write+0x35/0x50 [ 332.735081][ C0] Code: 74 2a 83 ff 30 74 25 eb 10 81 ff d0 00 00 00 74 1b 81 ff e0 00 00 00 74 13 c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 c3 89 f6 31 d2 e9 ff 40 d0 02 66 2e 0f 1f 84 00 00 00 00 00 [ 332.755772][ C0] RSP: 0018:ffffc900031cfc90 EFLAGS: 00000246 [ 332.761975][ C0] RAX: 00000000000000f6 RBX: ffffffff8be29a20 RCX: 000000000000083f [ 332.770209][ C0] RDX: 0000000000000000 RSI: 00000000000000f6 RDI: 000000000000083f [ 332.778279][ C0] RBP: 0000000000000000 R08: ffff8880b9033d77 R09: 1ffff110172067ae [ 332.786498][ C0] R10: dffffc0000000000 R11: ffffed10172067af R12: ffff8880b9033b01 [ 332.794806][ C0] R13: dffffc0000000000 R14: dffffc0000000000 R15: 0000000000000020 [ 332.803136][ C0] arch_irq_work_raise+0x82/0xd0 [ 332.808712][ C0] irq_work_queue+0x95/0x140 [ 332.813295][ C0] bpf_send_signal_common+0x2be/0x420 [ 332.818895][ C0] ? read_lock_is_recursive+0x10/0x10 [ 332.824329][ C0] ? rcu_lock_release+0x20/0x20 [ 332.829361][ C0] bpf_send_signal+0x15/0x20 [ 332.833940][ C0] bpf_prog_a7bf4e27797d188e+0x1a/0x608 [ 332.839572][ C0] bpf_trace_run2+0x163/0x2e0 [ 332.844493][ C0] ? __lock_acquire+0x7d10/0x7d10 [ 332.849622][ C0] ? bpf_trace_run1+0x2e0/0x2e0 [ 332.854465][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 332.860548][ C0] __bpf_trace_sys_exit+0x60/0x70 [ 332.865740][ C0] __traceiter_sys_exit+0x26/0x40 [ 332.870838][ C0] syscall_exit_work+0x18e/0x1b0 [ 332.875785][ C0] syscall_exit_to_user_mode_prepare+0x5f/0x80 [ 332.882167][ C0] syscall_exit_to_user_mode+0x9/0x40 [ 332.887613][ C0] do_syscall_64+0x58/0xa0 [ 332.892012][ C0] ? clear_bhb_loop+0x30/0x80 [ 332.896674][ C0] ? clear_bhb_loop+0x30/0x80 [ 332.901421][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 332.907307][ C0] RIP: 0033:0x7fc09d97b1ac [ 332.912034][ C0] Code: 28 00 64 c7 40 04 fe ff ff ff 85 db 0f 85 69 02 00 00 48 8b 44 24 08 be 18 00 00 00 48 8d b8 e0 02 00 00 b8 11 01 00 00 0f 05 <48> 8d 7c 24 10 e8 0a 4c fe ff 66 0f ef c0 41 89 c0 48 8b 44 24 08 [ 332.932328][ C0] RSP: 002b:00007fc09bc1a120 EFLAGS: 00000246 ORIG_RAX: 0000000000000111 [ 332.940745][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fc09d97b1ac [ 332.948741][ C0] RDX: 00007fc09bc1a0d0 RSI: 0000000000000018 RDI: 00007fc09bc1a9a0 [ 332.956699][ C0] RBP: 0000000000000000 R08: 0000000000000004 R09: 00000000fffffffc [ 332.964745][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: ffffffffffffffe8 [ 332.972796][ C0] R13: 000000000000000b R14: 00007ffc1128e740 R15: 00007ffc1128e828 [ 332.980941][ C0] [ 332.984041][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 332.991298][ C0] CPU: 0 PID: 11088 Comm: syz.1.2845 Not tainted syzkaller #0 [ 332.998913][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 333.009343][ C0] Call Trace: [ 333.012612][ C0] [ 333.015533][ C0] dump_stack_lvl+0x188/0x250 [ 333.020206][ C0] ? show_regs_print_info+0x20/0x20 [ 333.025474][ C0] ? load_image+0x400/0x400 [ 333.029980][ C0] panic+0x2e5/0x810 [ 333.033876][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 333.038572][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 333.044189][ C0] __warn+0x248/0x2b0 [ 333.048388][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 333.054031][ C0] report_bug+0x1b7/0x2e0 [ 333.058450][ C0] handle_bug+0x3a/0x70 [ 333.062801][ C0] exc_invalid_op+0x16/0x40 [ 333.067565][ C0] asm_exc_invalid_op+0x16/0x20 [ 333.072628][ C0] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 333.079218][ C0] Code: 24 45 31 f6 31 ff 89 de e8 7d 94 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 00 91 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 333.099526][ C0] RSP: 0018:ffffc90000007d38 EFLAGS: 00010006 [ 333.105790][ C0] RAX: ffffffff81a07ea0 RBX: 0000000000000008 RCX: ffff88802a85bb80 [ 333.113839][ C0] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000000 [ 333.121885][ C0] RBP: 0000000000000000 R08: ffff88802a85bb87 R09: 1ffff1100550b770 [ 333.129938][ C0] R10: dffffc0000000000 R11: ffffed100550b771 R12: ffff88802a85d308 [ 333.138187][ C0] R13: 00007ffffffff000 R14: ffffc90000007da8 R15: 0000000000000000 [ 333.146334][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 333.151967][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 333.157600][ C0] bpf_probe_read_compat+0xdd/0x170 [ 333.162825][ C0] bpf_prog_1ccb8ba97563bf77+0x59/0x850 [ 333.168579][ C0] bpf_trace_run2+0x163/0x2e0 [ 333.173333][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 333.179312][ C0] ? bpf_trace_run1+0x2e0/0x2e0 [ 333.184240][ C0] ? flush_tlb_one_user+0x50/0x50 [ 333.189641][ C0] trace_tlb_flush+0xe6/0x110 [ 333.194486][ C0] flush_tlb_func+0x4c7/0x5b0 [ 333.199144][ C0] ? kvm_sched_clock_read+0x14/0x40 [ 333.204678][ C0] ? sched_clock_cpu+0x15/0x3c0 [ 333.209673][ C0] ? native_flush_tlb_multi+0xd0/0xd0 [ 333.215074][ C0] ? kvm_sched_clock_read+0x14/0x40 [ 333.220529][ C0] ? native_flush_tlb_multi+0xd0/0xd0 [ 333.226159][ C0] flush_smp_call_function_queue+0x2a9/0x760 [ 333.232393][ C0] __sysvec_call_function_single+0x98/0x240 [ 333.238540][ C0] sysvec_call_function_single+0x98/0xc0 [ 333.244298][ C0] [ 333.247413][ C0] [ 333.250348][ C0] asm_sysvec_call_function_single+0x16/0x20 [ 333.256373][ C0] RIP: 0010:native_apic_msr_write+0x35/0x50 [ 333.262375][ C0] Code: 74 2a 83 ff 30 74 25 eb 10 81 ff d0 00 00 00 74 1b 81 ff e0 00 00 00 74 13 c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 c3 89 f6 31 d2 e9 ff 40 d0 02 66 2e 0f 1f 84 00 00 00 00 00 [ 333.282068][ C0] RSP: 0018:ffffc900031cfc90 EFLAGS: 00000246 [ 333.288190][ C0] RAX: 00000000000000f6 RBX: ffffffff8be29a20 RCX: 000000000000083f [ 333.296311][ C0] RDX: 0000000000000000 RSI: 00000000000000f6 RDI: 000000000000083f [ 333.304672][ C0] RBP: 0000000000000000 R08: ffff8880b9033d77 R09: 1ffff110172067ae [ 333.312872][ C0] R10: dffffc0000000000 R11: ffffed10172067af R12: ffff8880b9033b01 [ 333.320846][ C0] R13: dffffc0000000000 R14: dffffc0000000000 R15: 0000000000000020 [ 333.329226][ C0] arch_irq_work_raise+0x82/0xd0 [ 333.334167][ C0] irq_work_queue+0x95/0x140 [ 333.338742][ C0] bpf_send_signal_common+0x2be/0x420 [ 333.344525][ C0] ? read_lock_is_recursive+0x10/0x10 [ 333.349978][ C0] ? rcu_lock_release+0x20/0x20 [ 333.355102][ C0] bpf_send_signal+0x15/0x20 [ 333.359960][ C0] bpf_prog_a7bf4e27797d188e+0x1a/0x608 [ 333.365669][ C0] bpf_trace_run2+0x163/0x2e0 [ 333.370422][ C0] ? __lock_acquire+0x7d10/0x7d10 [ 333.375466][ C0] ? bpf_trace_run1+0x2e0/0x2e0 [ 333.380563][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 333.386626][ C0] __bpf_trace_sys_exit+0x60/0x70 [ 333.392137][ C0] __traceiter_sys_exit+0x26/0x40 [ 333.397262][ C0] syscall_exit_work+0x18e/0x1b0 [ 333.402749][ C0] syscall_exit_to_user_mode_prepare+0x5f/0x80 [ 333.409327][ C0] syscall_exit_to_user_mode+0x9/0x40 [ 333.414867][ C0] do_syscall_64+0x58/0xa0 [ 333.419511][ C0] ? clear_bhb_loop+0x30/0x80 [ 333.424584][ C0] ? clear_bhb_loop+0x30/0x80 [ 333.429336][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 333.435752][ C0] RIP: 0033:0x7fc09d97b1ac [ 333.440329][ C0] Code: 28 00 64 c7 40 04 fe ff ff ff 85 db 0f 85 69 02 00 00 48 8b 44 24 08 be 18 00 00 00 48 8d b8 e0 02 00 00 b8 11 01 00 00 0f 05 <48> 8d 7c 24 10 e8 0a 4c fe ff 66 0f ef c0 41 89 c0 48 8b 44 24 08 [ 333.460791][ C0] RSP: 002b:00007fc09bc1a120 EFLAGS: 00000246 ORIG_RAX: 0000000000000111 [ 333.469520][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fc09d97b1ac [ 333.477664][ C0] RDX: 00007fc09bc1a0d0 RSI: 0000000000000018 RDI: 00007fc09bc1a9a0 [ 333.485722][ C0] RBP: 0000000000000000 R08: 0000000000000004 R09: 00000000fffffffc [ 333.493792][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: ffffffffffffffe8 [ 333.501996][ C0] R13: 000000000000000b R14: 00007ffc1128e740 R15: 00007ffc1128e828 [ 333.510053][ C0] [ 333.513943][ C0] Kernel Offset: disabled [ 333.518540][ C0] Rebooting in 86400 seconds..