last executing test programs: 25.204217585s ago: executing program 3 (id=3040): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x300, &(0x7f00000002c0)=[{&(0x7f0000000300)="6000000022007f029e607dd75fcb520003a124b244de91f7f414adcf41bfafdd1b1e93c6292aefa3ca89563a63fb94b2584ca2faa20f2c308b0fe298acec10e3019e1e26e6efd0166e6c1b01132e5423294ac2f4d53c3870c3068461957e5357", 0x60}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffffd, 0x1}, 0x100, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x5}, 0x8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x5865}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00', 0x20}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f9, &(0x7f0000000080)) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000011008188040f80ec59acbc0413a1f848020000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) 24.040169971s ago: executing program 3 (id=3042): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000340)="1400000020000b0fd25a806c8c6f94f901a12182", 0x14}], 0x1}, 0x4000010) 23.634782659s ago: executing program 3 (id=3044): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x6}, 0x11c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x16, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001418030000120800040043000000a8001600a400014020000500036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000000000000008100000081"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 6.104151715s ago: executing program 2 (id=3107): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x5}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, r1, 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r1}, 0x8) r2 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) setsockopt$sock_attach_bpf(r2, 0x84, 0x14, &(0x7f0000000000), 0x8) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x60, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d0000004001000000000000", 0x20}], 0x1}, 0x40000) 5.654565955s ago: executing program 2 (id=3109): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0xf6}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004080000000000000003000000030000000000000002000000000000000000000000000002000000000000000000000004"], 0x0, 0x56}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)=ANY=[@ANYBLOB="020000000c000e9926dc0000af01000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="000000000100"/28], 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000300)=""/180}, 0x20) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f91324fc", 0x13}], 0x1}, 0x54) r3 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f00000003c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x80, 0x0}, 0x40080c0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000500)=@l2={0x1f, 0x1000, @any, 0xb}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000580)="a92ff3ae4a3323c0530d33b17b", 0xd}, {&(0x7f00000005c0)="f24b1210baca760a", 0x8}], 0x2}, 0x8000) 5.137150617s ago: executing program 1 (id=3113): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x11, 0x0, 0xb, &(0x7f0000000400)) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x4) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000140)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a00100000000280607ee622", 0x2e}], 0x1}, 0x24000044) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r2 = syz_clone(0x20001000, 0x0, 0x0, &(0x7f0000000740), &(0x7f0000000780), &(0x7f00000007c0)="f12c049b1cc2592267662f46ec99a2120a6d29fd0deb82576ede") perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x9, 0x2, 0xb, 0x10, 0x0, 0x255, 0x8040, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x10, 0x6}, 0x18133, 0x1, 0x8, 0x5, 0x7fffffffffffffff, 0x6, 0x2, 0x0, 0x6, 0x0, 0x52113ba2}, r2, 0xe, r1, 0x1) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000040)=r1) close(r1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000007044f16c01b1fbfd000000000000008af65f0df9928941994cc8c173fac5688671085a86d143c59fed0e57feb97f422c51d8e63b4ed9e295df3ccd1a55752dfc2f32f14b6c8f0e7413c3e9caaad30dcb412d0f54623f388bb2c63d2b1f7d83cd0cc021867bb4aee9967a6ee83e1b18fd8beca7d7eddcd96634"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000000000000000000000000000007fffffff0001"], 0xfdef) r4 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) close(r5) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r5, 0x40047451, &(0x7f0000000180)) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x4, &(0x7f00000004c0)=ANY=[@ANYRES8=r4], &(0x7f0000000340)='GPL\x00', 0x3, 0x87, &(0x7f0000000140)=""/135, 0x41000, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44a904020000000000000000000005100013", 0x1f}], 0x1}, 0x4090) r7 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="0439000020"], 0x33fe0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') 4.851706833s ago: executing program 2 (id=3114): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x18, 0x7, &(0x7f0000000880)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000}, 0x94) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x11201, 0x0, 0x0, 0x0, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4136}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ec}, 0x0, 0x0, 0xfffffffc, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x20, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x7, 0x7}, 0x7602, 0x5, 0x0, 0x0, 0x100000000000000, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) (async) perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x2) (async) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000300)=r3, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000140)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)}, 0x0) (async) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x800, 0x3, 0x0, 0x200000, 0x7, 0xffff, 0x0, 0x0, 0x0, 0xe000000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2826b47ad8ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b478abc5b196dd5308cb20c4e2a0bd702651bb39f10523102dcd8ece692159028f314e0d6bfa400475c6699fdc40efe0948e3cef7419a7f113134e5ee20fd87c4521ccfbd32d6f147f743d30866bdd86ca8bf0c7bcc475f4ed53517aaa51f1c151d859a7f0b53abd332c84bdad313e82ac3777a6f7f649ff8a25f6dfe09cb29213896b49a825257bf143e9fa3bbd47009e66fe5705b3ef2b40a182e408c680727d64e00e1ce508f8fd64ac6c84ccc28fc333067de63b9bb5daaa12ce60ee3779ded79651be69d2a413cd948a873dd7ad7017b150828cf100d3df8537f22aff58343c9ee966fceb594bbe10b911427f76a25a219be2f85287b7f83d323a30991067ad1369792166062085ff20c5fb9f6e4f78dd09c7d2d6ca3c8a5d0d26ccbe576f44a1bc94194817"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000021000aac141419e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{0x0}], 0x1}, 0x4040004) (async) r5 = socket$kcm(0xa, 0x2, 0x3a) (async) socket$kcm(0x2c, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x21}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xb2}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) (async) r7 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) socket$kcm(0x2c, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x72bd1de2ad10b2f3, 0xfffffffffffff6f0, 0xcfb5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x84000, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) close(r8) (async) perf_event_open$cgroup(&(0x7f00000001c0)={0x5, 0x80, 0x8, 0x1, 0x7, 0x4, 0x0, 0x1, 0x20000, 0x8, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x200, 0x4, @perf_config_ext={0x7, 0x5}, 0x800, 0x4, 0x6, 0x0, 0x5, 0x8, 0x5, 0x0, 0x1, 0x0, 0x7}, 0xffffffffffffffff, 0x9, r1, 0xc) sendmsg$kcm(r5, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) 4.364420104s ago: executing program 2 (id=3115): r0 = perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xe44e}, 0x11c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x6f, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x6, 0x2}, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000000000000008100000081"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x808fd}, 0x94) socketpair(0x5, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00', 0x400}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89fc, &(0x7f0000000080)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000380)=ANY=[@ANYRESOCT=0x0], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x31, 0x0, 0x41000}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x1c, 0x1, 0x0, 0x4, 0x0, 0x4, 0x220, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext, 0x10d000, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$kcm(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x42, &(0x7f0000000040), 0x3b) sendmsg$kcm(r2, &(0x7f0000000440)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000180)="89", 0x1}, {&(0x7f0000000640)='%7\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x12}, {&(0x7f0000000540)="676d5e9ee5da102be78b2397cb1989db9151abc75d3b423bbf1025955e01c072627afd9233eb77ea6874e88b5c521cdeb2b8bd5e3c6759a6c4c1d1dcc7c780689c508a09ae4ef2bce5d8515f93d168a78e804ceddaab25809ebdaa5f1a3a71b75c9f551d8f96e06020224ec3e996a8b0378a76a8b973e5349c51387d79bd653818c0e66155931f8f1853ee7786c9a195b0bebf4cccd283736ca60f22337d26d1e8262b34b5d2617eb9d8494467f3a891d59ad7a8dca83badc09f26c59546df6e4d07e7ba", 0xc4}, {&(0x7f00000006c0)="1fbf11bc3bdc58fd16f23df0bd4705a1e5287cb0dc8e3b91195354a820b731ce2b30c8c127dccf05b15a148ccf3001e495c520e414a13b2513d4517a90f652b61bd5497c0404a4481afae061dd0ff696a859bd20d6b5b3411499367e29a3c67914c811853d69c708baf0d37c1aac6906bf715c939b660ef0fe630bf53c1f645639bd4fe7e22087f2eb3e9718941ffa7f818037290238ca8acb3acdd32f2e085b3bdcc9c4387c46d9b2c2cef9340a8fa24b367d1bcb01e9", 0xb7}], 0x4, 0x0, 0x0, 0x900}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000100)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f00000000c0)=0x2, 0xe) socket$kcm(0x2, 0x0, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) close(0x3) socket$kcm(0xa, 0x5, 0x0) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x10042) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) 3.748410747s ago: executing program 1 (id=3119): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0xe59}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x2000000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) 3.514681652s ago: executing program 2 (id=3121): socket$kcm(0x10, 0x7, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x11e, 0x8, 0x0, 0x7c) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00'], 0x48) socket$kcm(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000d0ffffff000000000000001718110000", @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7010000080000004608f0ff76000000bf9800000000000079080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.263930838s ago: executing program 4 (id=3122): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4070000000000000400000000000e1ff95000000000000002ba76bb3019c1341056bd8174b79603123751c4e345c652fbc1626cca2a2ad75806150ae0209e62751ee00aa19ce670d25010000020000040000009fc404000000c788b277beee1cbf9b0a4def23d410f6accd3641110bec4e90a6341965dac05c04683712a0b09ec39e9ef8f6e396ad200e011ea665c45a3449abe802f5ab3e89cf40b8580218ce740068720000074e468eea3fcfcf498278a315f5b87e1c26433a8acd715f5888b2007f00000000000000000100000000000000010015d60605000053350000000034a70c2ab40c7cf5691db43a5c00000000000000f030007ce2c6f800000000000000e75a89faff01218087560cce39bf405f1e846c1242000000000040cad326ad7add65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bef5d7d617da7a6520655a805608df4d431623c850af895abba14f6fbd7fb5e2a431ab9142f3a06d55740a43088696daaed74b9c5c29647d2f950a959cf050000008600a62e96b7cb8e52cbdc2ba9d580609e31c30879d6fce424c2208af6c3784a1975fa657de38a3a32e4fd67ce446adb431d07db79241aca1dd9ba02453bbb5ee8babe1745e645f091231b986e952afdac972f342c6f184777d05d988d6edc71df0100000013a38300cabf2b554380ad215c789bef4cc574109b8df8d9a9db669557b3809d8c396d2c0361629d1822f722ec23812770d72cd00100000078a75dea785be550dbb420287e0789b8c7044f563a1f68d4efe895fdbc463f747c08f4010586903500000000000000e800000000000000000000000000000000000000003ddf4aa4b1c8b8a0ae6fb5425f1d581961471cdb51f8940290e99ccff4123f955267fe4a75c11448741f064fc7ce7e62ee4df874e086287547d4099aeec9f1538ee25a2a5ccf4a9b604e88e12ff25184d4e3c6f7f623559435b2c505fb711300000000040000000000000000000000000000e67ccc02148a4fc43021cce9f24f4b2f9492c32e7a92a557ac2b44b84e88bbf7a49789906d923e4916f390ab7edcd3f5b9fe14446dd446a52131c464f2c08efb46d934615c8631b7c42efd029406000000433f5c899119ec0c0acef5385c5a2720caeb68f1e9c05b0591d89467ded84da092dea262e51811e2d7fa515722516bd5ef6c8c4966e5937562a5648a696ad3a042a7097ddefe0671a5767014b09ddbf69b78f977fb145890f5bf41ba92b8c4c8b14f0d4a880ef4518bb32879d326497e21e041254f06bd7f3a067e147e82e841dba3867da8bfbc101d3960e07d282f483e7b49991be06b950ccd48f4e49833f3c4a02bbd06c84680549f9eb16682ecb722e8ffaca907a3eaaebfc8e0a47c0076d7cc9d32b3cc96aa751d890881c3c33bd91f6ecf45ab3f12f816318346f9b883427b9190024edc1eddd68f34ce3bfedb5fe5d7beae4d3ca561e37570587783f9673e7ab17f5a09efc1114777d2707d2996961203aedff1c52108d9c0d51dc30209872ec602af42eb29d54a37be0fdfdcd74c2d859a566ee5c30677173a2592a4617ae08bec07422d52d2ba7271550a5c20e3a8d1c8c8fd3025ff00607b2249ae9a18391e01b21b36169790b8e96f7955754b6b01a75165d3573d1dec5cf1b08b6115b43203a5654cce2277eb4c02ef4817b4cb989ac178895810eff7b697f2dc9b308aa2460e3cb85cdc4833571a62bf310700000000000000cc7f923284230ada8c756096a66119d4b6b2f159585c3cf8e7bfdd619e294b1d21cd491b8cfd4a253856e485fe29c6ad177a9fb078ca905782b9ed3c30675b89a784bb8031cac0de95178a5acff029a0f0fe972df22b20afe95fba722056f94ab15f1cf605c33df627311f1b614684d77549"], &(0x7f0000000140)='GPL\x00'}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x17, &(0x7f0000000100)=r0, 0x4) sendmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000080)=@in6={0xa, 0x4e22, 0x0, @mcast2}, 0x80, 0x0}, 0xb80b) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)=@generic={0x0, 0x0, 0x28}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000001700)=@bloom_filter={0x1e, 0x0, 0x4, 0x4, 0x2002, 0xffffffffffffffff, 0x1c, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x48) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)={'a', ' *:* ', 'm\x00'}, 0x8) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0xc2ba, 0x0, 0xcee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x4004743d, 0xf0ff1f00000000) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="2e00000011008188040f80ec59acbc0413a1810031000000000f000000028002002d1f0000000000000000000400", 0x2e}], 0x1, 0x0, 0x0, 0x2100}, 0x44004) 2.941242955s ago: executing program 2 (id=3124): bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40040, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, r1, 0x0, 0xff51, 0x0}, 0xfffffffffffffdca) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0xa}, 0x0, 0x2000, 0x73, 0x0, 0xb}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020032000b07d25a806f8c6394f90624fc602f00", 0x16}], 0x1}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x84, &(0x7f0000000000), 0x90) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000340)={0xffffffffffffffff, r3}) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="905d429b000000000000000000000000001006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x94) r5 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r5, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r6, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000500)={r7, &(0x7f00000003c0)="8af886", &(0x7f00000004c0)=""/3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001600)={{0x1}, &(0x7f0000001580), &(0x7f00000015c0)=r3}, 0x20) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001940)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00\b\x00'/20, @ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB="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"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xc, &(0x7f0000001840)=ANY=[@ANYBLOB="1800000081000000000000000400000054150600010000008585feff08000000180000004f0c0000000000000600000018110000", @ANYRES16=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018000000040000000000000009000002"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x100b, &(0x7f0000001b00)=""/4107, 0x40f00, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001500)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001540)={0x2, 0x7, 0x9, 0x5}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000016c0), &(0x7f0000001700)=[{0x5, 0x3, 0x10, 0x5}, {0x0, 0x2, 0x9, 0xb}, {0x2, 0x4, 0x5}, {0x5, 0x5, 0x8, 0x1}, {0x0, 0x5, 0x10, 0x5}], 0x10, 0x5}, 0x94) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) 2.786309058s ago: executing program 4 (id=3125): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x6, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21bef5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a835701bea8240399c56ce8f58df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f9ac2f7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63bb20e1e0469f7615f67a9218cbace38f5236821314f76302b98afa93044b83989339ca10e6ae30e70e17a82f03e915b8425e8e7a91614306d2ae0bc3550d856f2d7293672b5673d264fc886b0c8bdf436a0fcd21bf9da7bdca98e34cd6e59b0a7ce4ba1b466561aaa35448dff47bb1d7df23d467689a6669e4300d5acf12e4d0b35abf91569f605b2f6df0d861"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="09000000100000000800000040000000c0000000", @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00\x00'], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r2}, 0x38) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, r2}, 0x38) 2.692921841s ago: executing program 1 (id=3127): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0xf6}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004080000000000000003000021000000000000000002000000000000000000000000000002000000000000000000000004"], 0x0, 0x56}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)=ANY=[@ANYBLOB="020000000c000e9926dc0000af01000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="000000000100"/28], 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000300)=""/180}, 0x20) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f91324fc", 0x13}], 0x1}, 0x54) r3 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f00000003c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x80, 0x0}, 0x40080c0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000500)=@l2={0x1f, 0x1000, @any, 0xb}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000580)="a92ff3ae4a3323c0530d33b17b", 0xd}, {&(0x7f00000005c0)="f24b1210baca760a", 0x8}], 0x2}, 0x8000) 2.405360837s ago: executing program 3 (id=3045): r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x36, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000240)=ANY=[@ANYBLOB="850000007b00000095000000000000003eb51394255f517aaac2e709000000c0365821c301031877faf22bf1131a446ff0ab6d4284fdfb33ff19f2d28f0c22f8647c936d7f55256c1dc18fe38447bc142b6481f3088fac1eed1b491877425636ff6d3c6d8bbd7860db3ebabcf82d61d0d51639ab293d0d9eff6b9a3b47f935987d4c572cd94cb6ccb1980d7e"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x80) r9 = socket$kcm(0x10, 0x2, 0x0) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_subtree(r10, &(0x7f0000000080), 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x60, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d0000004001000000000000", 0x20}], 0x1}, 0x40000) setsockopt$sock_attach_bpf(r0, 0x84, 0x13, 0x0, 0x0) 2.132568803s ago: executing program 0 (id=3128): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) syz_open_procfs$namespace(0x0, 0x0) (async, rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1}, &(0x7f0000000040), 0x0}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000140)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a00100000000280607ee622", 0x2e}], 0x1}, 0x24000044) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x24, 0x0, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'wlan0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) (async) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80056, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f00000001c0), 0x2}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, r0, 0x9) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYRES16], &(0x7f0000000400)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x46, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffff2}, 0x94) (async, rerun: 64) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r5 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r5, 0x84, 0x12, &(0x7f0000000040)=r4, 0x4) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20) (async, rerun: 64) r6 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8, 0x0, 0x0, 0x4}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x8) (async, rerun: 64) r7 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000f40)={r7, r6, 0x0, 0x8, &(0x7f0000000f00)='$&[*:[^\x00'}, 0x30) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0xfc, 0x3, 0x41, 0x0, 0x0, 0x9, 0x1a8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x4, @perf_config_ext={0x5, 0x1}, 0x0, 0x7, 0x0, 0x2, 0x6, 0x6aee, 0x0, 0x0, 0x1000000, 0x0, 0x9}, r7, 0xb, 0xffffffffffffffff, 0x6) (async, rerun: 64) ioctl$PERF_EVENT_IOC_QUERY_BPF(r3, 0xc008240a, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000000000000006bf922a0541ad085e53f5da1ea923699000000"]) (async, rerun: 64) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000000), 0x4) (async, rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f00000002c0)=ANY=[@ANYRES16], 0x0, 0x6, 0x0, 0x0, 0x0, 0x22}, 0x94) (async, rerun: 32) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3b) (async, rerun: 32) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'team0\x00'}) (async, rerun: 32) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x8946, &(0x7f0000000080)) 1.8101066s ago: executing program 0 (id=3130): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x6}, 0x11c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x16, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001418030000120800040043000000a8001600a400014020000500036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) (fail_nth: 1) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000000000000008100000081"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x10, 0x1}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.764869001s ago: executing program 4 (id=3131): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x230081, 0x0) ioctl$TUNGETVNETLE(r0, 0x800454dd, &(0x7f0000000040)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000080)={'dummy0\x00', @local}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x2, 0x18}, 0xc) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r1, &(0x7f0000000100)="2e4de010e4693a65a7d3e539874be7bb986cda6f5b72d1f21d85ac0f99f88ad81d97f28f0ef709d1453cf28d58d3b156a4491abe88ca8fcbb785779a5913785b0c54767408e32e23fb5fa37128c0d80763c67c24486d6b0badeb66e38dcd96dd550cbed41505867da9699d3494f2db3b379a94464fd6573cb8dc94188ea2adbc041db3813d1c5c4455fab959aad63d2c158ac9", &(0x7f00000001c0)=""/157}, 0x20) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8000, 0x0) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000300)) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_ext={0x1c, 0x18, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4b}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000400)='GPL\x00', 0x6, 0x7a, &(0x7f0000000440)=""/122, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000500)={0x3, 0xd, 0xa9d, 0x5}, 0x10, 0x2e8d1, 0xffffffffffffffff, 0x0, &(0x7f0000000540)=[r1, r1, r1, r1, r1, r1], 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a00)={r3, 0x0, 0xc3, 0xa4, &(0x7f0000000640)="c97099203654107908204fa83ec1e0be14e7cf5f5c446980f832667c27948e5722ddc5ebae631fa7328555f4ae85b913bc95a7d2811ca0d4ebbcf579861662ebafc5f22ea936535832c071132b9f1575463126591562d5321e4eeb892e2ec9f38d02ff14ed80e5ada2b1892f11003963424627c53a88151fcebe21536c8022df87f9c237fd75e8483287de52f394d2ce974233346e69ade38fc5568dc029bfc1833aed0fe1f9721d90e7547e67ba59c0297f90a8f075e918e56bc8cddb877d48d891ed", &(0x7f0000000740)=""/164, 0x25, 0x0, 0xd7, 0xcb, &(0x7f0000000800)="eef953d6b57d45c930eb40d3ca4809b5e7e0a4d92df692d95adbd750d8b70c97a67665b50d9e695b87aea1858bf9f04a92a03f40bb66e40a3cd37e5e9dbf3c19a510aa817d8a71bab84cee59d7f3267d792aef572bd12e368605a441ff74b16cacee146cd3e2b83464e42412adc860dc5d5dd754309d11e7585a63574e8cfe726e3f263afa11d75a4eb8d63299d404a7783cc3566fc7816d831e85327956c40c1e004cd7141a73fe8e173fe61d22ed3c71fed68c779c92c4cdfb62d7b0f51a3c26fd3b7a00545ab93e42ebe0882930c1e85861880dd169", &(0x7f0000000900)="2e831bd3c6f0515db04e123f0070792c882bedab3712e08e1779678223da6f818c7f7fdb9416bb9fcdd46cad77736bff9bd9a475cd543868b995859cbc4e534dc7368a919d249843a8e5bcd3e90d42094d4463a085a3099e6d090ec54645172c04ca12d92626b1329e51ad3341ed13396f80ae9798eb5c414c67d44160f4c1f83e944e91064de1319145a15656652bd280ac73fd09946caca5dbc23e49306dca7ee25a55eab2b1b70c0fc830ed398dd1221722d403c13bdfd847704f2251626f087e705bb4c2bb600c22b2"}, 0x50) r4 = syz_clone(0x9900400, &(0x7f0000000a80)="0e933c67b08af1dc5dc75805ececef692436a7b3ebfeb3ff0c273ea607197eba9e6fa79c95b2b7b7b1499dba7e545dc53c9224ad122ab5b83dede49b5427b5dcb3f09843a82ea3dfec00fd739db56104d1e196bfa5f3ddedcc38489cec7b9bed04ef4a9fdd18a454f6b3505fa7d231b8c7b645079d295ecbac1efa45cd882f16f984af5f2a83f4d1a59a576fff431fab2951c521200b3d6205a76f86e4b01802e5190a90e002cc08dd", 0xa9, &(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)="0bbe3b3430b141022359638095b00bd161b27a2b99d0df0e500adc4ba07c52f1f8c776ad3a290c0b30bfd75feda9d2e66056d1e109da9e51c8e07196d82decabb737f4e1e9b6070bf784760b7a910a4269991a3eac9d0055251afcf580385ed05cd646207b95c113e240685c39c6451226ea7bfb91f66bc1314dd310cfb6e2cb70ed8120dd2a") bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000d00)={r1, 0x58, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) socket$kcm(0x29, 0x2, 0x0) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000d40), 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000e80)={@map=r1, 0x1, 0x1, 0x49, &(0x7f0000000d80)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000dc0)=[0x0], &(0x7f0000000e00)=[0x0, 0x0], &(0x7f0000000e40)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000ec0)={@ifindex, r6, 0xe, 0x400a, r3, @void, @value=r3, @void, @void, r8}, 0x20) close(r1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000011c0)={r6, 0xe0, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000f00), ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, &(0x7f0000000f40)=[0x0, 0x0], &(0x7f0000000f80)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x2d, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000001000), &(0x7f0000001040), 0x8, 0x51, 0x8, 0x8, &(0x7f0000001080)}}, 0x10) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000001200)={'vxcan1\x00', 0x200}) socketpair(0x23, 0x804, 0x6ee8, &(0x7f0000001240)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = perf_event_open(&(0x7f0000001280)={0x3, 0x80, 0x7, 0x9, 0x7f, 0x0, 0x0, 0xffffffffffffff00, 0x200, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x4, @perf_config_ext={0x1000, 0x7}, 0x4000, 0x8, 0x52aa42a7, 0x3, 0x95c, 0x10, 0x9c0, 0x0, 0x7a6, 0x0, 0x1}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_RESET(r13, 0x2403, 0x418) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000001300)=r6) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000001340)=0x9) openat$tun(0xffffffffffffff9c, &(0x7f0000001380), 0x100, 0x0) r14 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000013c0)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x5aedf3ff, '\x00', r5, r3, 0x0, 0x1, 0x5}, 0x50) r15 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001600)=r10, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001740)=@bpf_ext={0x1c, 0x12, &(0x7f0000001440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r14}}, {}, [@alu={0x7, 0x1, 0xc, 0x4, 0xb, 0x0, 0xd}, @map_val={0x18, 0x4, 0x2, 0x0, r7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001500)='GPL\x00', 0x2, 0xa9, &(0x7f0000001540)=""/169, 0x41100, 0x61, '\x00', r9, 0x0, r15, 0x8, &(0x7f0000001640)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000001680)={0x0, 0x9, 0x0, 0x6}, 0x10, 0x8e9c, r6, 0x1, &(0x7f00000016c0)=[r1, r12, r7, r1], &(0x7f0000001700)=[{0x0, 0x2, 0xd, 0x3}], 0x10, 0x90}, 0x94) r16 = openat$cgroup_type(r11, &(0x7f0000001800), 0x2, 0x0) write$cgroup_type(r16, &(0x7f0000001840), 0x9) 1.708374742s ago: executing program 1 (id=3132): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x5}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, r1, 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r1}, 0x8) r2 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) setsockopt$sock_attach_bpf(r2, 0x84, 0x14, &(0x7f0000000000), 0x8) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x60, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d0000004001000000000000", 0x20}], 0x1}, 0x40000) 859.981481ms ago: executing program 0 (id=3133): socket$kcm(0x10, 0x7, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x11e, 0x8, 0x0, 0x7c) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00'], 0x48) socket$kcm(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000d0ffffff000000000000001718110000", @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7010000080000004608f0ff76000000bf9800000000000079080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 859.656961ms ago: executing program 3 (id=3134): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x5}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, r1, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], 0x0}, 0x94) r2 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) setsockopt$sock_attach_bpf(r2, 0x84, 0x14, &(0x7f0000000000), 0x8) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x60, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d0000004001000000000000", 0x20}], 0x1}, 0x40000) 810.088982ms ago: executing program 1 (id=3135): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x2, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)}, 0x40000000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x10}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f2, &(0x7f0000000080)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x5, 0x0, 0x16) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0x16, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x84084, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x400, 0x0, 0x8, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0xf, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x4044, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 797.616422ms ago: executing program 4 (id=3136): write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0600000004000000060000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00We\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r0, 0x0, 0xa0028000}, 0x38) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$kcm(r1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x2, 0x922000000001, 0x106) recvmsg(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x12041) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid\x00') perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x1, 0x6, 0x7, 0x5, 0x0, 0x8, 0x200, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x4, @perf_config_ext={0xb063, 0x2}, 0xc0c, 0x69416e10, 0x9, 0x4, 0x9, 0x495d, 0x4, 0x0, 0x4, 0x0, 0x1}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8995, &(0x7f0000001f40)='lo:\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1Y\xad4\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\xf5\a\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'5\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\x06\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5\xdcZ\xb9\xd7Z\x88\x9b\xdff[\x90\xfa\x9a{b\xf4Dq') ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x8d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 686.597654ms ago: executing program 0 (id=3137): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0f00000004000000040000000c"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000001800000018110000", @ANYRES32=r0, @ANYBLOB="0000003000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 446.12566ms ago: executing program 4 (id=3138): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) 445.79239ms ago: executing program 0 (id=3139): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0xf6}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004080000000000000003000000090000000000000002000000000000000000000000000002000000000000000000000004"], 0x0, 0x56}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)=ANY=[@ANYBLOB="020000000c000e9926dc0000af01000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="000000000100"/28], 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000300)=""/180}, 0x20) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f91324fc", 0x13}], 0x1}, 0x54) r3 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f00000003c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x80, 0x0}, 0x40080c0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000500)=@l2={0x1f, 0x1000, @any, 0xb}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000580)="a92ff3ae4a3323c0530d33b17b", 0xd}, {&(0x7f00000005c0)="f24b1210baca760a", 0x8}], 0x2}, 0x8000) 444.71333ms ago: executing program 3 (id=3140): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{r0}, &(0x7f00000007c0), &(0x7f0000000800)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d7"], 0x10b8}, 0x106) recvmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100) r4 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0xa, 0x0, @empty}}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000001001000001000000dc00000000000000edf8b94e5b510056aa0cae89788c1f82aefe0433df4de56a905c3f5e46e8e4aab714c77be3a35865ec3b5dcb3db9543b9922252ef22e932e7aaf2e"], 0x18}, 0x0) socket$kcm(0x10, 0x2, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)) close(0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000740)="5c00000013006bcc9e3be35c6e17aa33074b876c1d0000007ea60864160af36514000cc0080019000300000006001dc00200bc24eab5008000001e618294ff4051f60a84c9f4d4938037e786a6d00010000400000000000000c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4004004) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af3653c001ac004000202080002000600010009000300eab556a705251e618294ff0051f60a", 0x43}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)="d8000000200081044e81f782db44b90402000004000055a1180015000f00142603600e1209000a0000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970100040000", 0xd8}], 0x1}, 0x4000040) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r5, &(0x7f0000000040)="c03dc30a717bcbddc3d4b5669c9a5efc53465e4a", &(0x7f0000000080)=""/95}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 102.350507ms ago: executing program 1 (id=3141): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x806, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18040000000000200000000000000000850000002e0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000b00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x5, 0x4, 0x4, 0x4, 0x1, 0xffffffffffffffff, 0xb92, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e00)={r2, 0xe0, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, &(0x7f0000000b80)=[0x0, 0x0], &(0x7f0000000bc0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x58, &(0x7f0000000c00)=[{}], 0x8, 0x10, &(0x7f0000000c40), &(0x7f0000000c80), 0x8, 0xd0, 0x8, 0x8, &(0x7f0000000cc0)}}, 0x10) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000e40)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000e80)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x1ff, '\x00', r4, r5, 0x2, 0x4, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r7) r8 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) syz_clone(0x32a0000, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000b40), 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x4, 0xba, &(0x7f000000cf3d)=""/186}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a80)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0xffffffffffffff4b, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffe}, 0x7) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="09000000100000000800000040000000c0000000", @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00\x00'], 0x50) r12 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r12, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803003a000b12d25a80648c2594f90124fc60100c034002560100053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r11}, 0x38) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x2, r11}, 0x38) 101.912137ms ago: executing program 4 (id=3142): r0 = socket$kcm(0x29, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x19, &(0x7f0000000000), 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[], 0x10026) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0xff, 0x0, 0x4}, 0x0, 0x0, r2, 0x1e35aa3822bae40e) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r3}, &(0x7f0000000040), &(0x7f00000001c0)}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r2, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x4f, &(0x7f00000002c0)=[{}], 0x8, 0x10, &(0x7f0000000300), &(0x7f0000000380), 0x8, 0x63, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000680), 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x5, '\x00', r5, r6, 0x4, 0x4, 0x4}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000400000000000000000900000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2000000, 0xe, 0xfffffffffffffe35, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 0 (id=3143): r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x1, 0x3c, &(0x7f0000000800), 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa0000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x15}}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x28, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x23d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = socket$kcm(0x22, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x80044944, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'veth1_vlan\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[@ANYBLOB="2b40000048009125745c7388641f9c0e0a"], 0xfe33) close(r7) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r10 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r10, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x4e24, @private=0xa010102}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)="b7", 0x1}], 0x1}, 0x20008050) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x12306, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x100000, 0x6, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x0, 0xfffffffd}, {0x2, 0x0, 0xfffffffc, 0x8}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r12) recvmsg$unix(r11, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r10, 0x84, 0x10, &(0x7f0000000000)=r13, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000001"], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$kcm(r8, &(0x7f00000006c0)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)=""/182, 0xb6}, {&(0x7f00000005c0)=""/45, 0x2d}], 0x2, &(0x7f0000000640)=""/109, 0x6d}, 0x0) setsockopt$sock_attach_bpf(r5, 0x84, 0x7b, &(0x7f0000000000)=r9, 0x8) kernel console output (not intermixed with test programs): 203][ T8467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 308.922195][ T8467] R13: 00007f4b9d626038 R14: 00007f4b9d625fa0 R15: 00007fffc8b55718 [ 308.930211][ T8467] [ 308.942399][ T8471] netlink: 'syz.1.1501': attribute type 39 has an invalid length. [ 309.052970][ T8473] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1502'. [ 309.384791][ T8477] netlink: 'syz.2.1504': attribute type 27 has an invalid length. [ 309.438332][ T8477] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1504'. [ 309.913979][ T8481] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1505'. [ 310.002823][ T8486] netlink: 'syz.4.1507': attribute type 11 has an invalid length. [ 310.045837][ T8486] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1507'. [ 310.824005][ T8485] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 311.167840][ T8496] netlink: 'syz.1.1512': attribute type 39 has an invalid length. [ 312.250593][ T8515] FAULT_INJECTION: forcing a failure. [ 312.250593][ T8515] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 312.311546][ T8515] CPU: 0 PID: 8515 Comm: syz.2.1517 Not tainted syzkaller #0 [ 312.319094][ T8515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 312.329187][ T8515] Call Trace: [ 312.332508][ T8515] [ 312.335472][ T8515] dump_stack_lvl+0x188/0x24e [ 312.340207][ T8515] ? show_regs_print_info+0x12/0x12 [ 312.345451][ T8515] ? load_image+0x410/0x410 [ 312.349995][ T8515] ? __lock_acquire+0x7c40/0x7c40 [ 312.355066][ T8515] ? snprintf+0xe5/0x140 [ 312.359346][ T8515] should_fail_ex+0x390/0x4c0 [ 312.364078][ T8515] _copy_to_user+0x2c/0x130 [ 312.368640][ T8515] simple_read_from_buffer+0xe3/0x150 [ 312.374141][ T8515] proc_fail_nth_read+0x1a6/0x220 [ 312.379213][ T8515] ? proc_fault_inject_write+0x310/0x310 [ 312.384889][ T8515] ? fsnotify_perm+0x248/0x550 [ 312.389698][ T8515] ? proc_fault_inject_write+0x310/0x310 [ 312.395377][ T8515] vfs_read+0x2db/0x960 [ 312.399588][ T8515] ? kernel_read+0x1e0/0x1e0 [ 312.404235][ T8515] ? __fget_files+0x28/0x460 [ 312.408959][ T8515] ? __fget_files+0x3fc/0x460 [ 312.413687][ T8515] ? __fdget_pos+0x2ae/0x360 [ 312.418325][ T8515] ? ksys_read+0x70/0x260 [ 312.422701][ T8515] ksys_read+0x14d/0x260 [ 312.426995][ T8515] ? vfs_write+0x9a0/0x9a0 [ 312.431467][ T8515] ? lockdep_hardirqs_on+0x94/0x140 [ 312.436708][ T8515] do_syscall_64+0x4c/0xa0 [ 312.441167][ T8515] ? clear_bhb_loop+0x60/0xb0 [ 312.445888][ T8515] ? clear_bhb_loop+0x60/0xb0 [ 312.450613][ T8515] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 312.456552][ T8515] RIP: 0033:0x7f4b9d35e6ce [ 312.461010][ T8515] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 312.480650][ T8515] RSP: 002b:00007f4b9e1b0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 312.489103][ T8515] RAX: ffffffffffffffda RBX: 00007f4b9e1b16c0 RCX: 00007f4b9d35e6ce [ 312.497222][ T8515] RDX: 000000000000000f RSI: 00007f4b9e1b10a0 RDI: 0000000000000018 [ 312.505231][ T8515] RBP: 00007f4b9e1b1090 R08: 0000000000000000 R09: 0000000000000000 [ 312.513333][ T8515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 312.521379][ T8515] R13: 00007f4b9d626128 R14: 00007f4b9d626090 R15: 00007fffc8b55718 [ 312.529409][ T8515] [ 315.436884][ T8555] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.1533'. [ 315.999470][ T8535] netlink: 'syz.3.1524': attribute type 39 has an invalid length. [ 316.007713][ T8542] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1529'. [ 316.019889][ T8540] FAULT_INJECTION: forcing a failure. [ 316.019889][ T8540] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 316.058777][ T8540] CPU: 0 PID: 8540 Comm: syz.4.1528 Not tainted syzkaller #0 [ 316.066230][ T8540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 316.076343][ T8540] Call Trace: [ 316.076382][ T8540] [ 316.076391][ T8540] dump_stack_lvl+0x188/0x24e [ 316.076430][ T8540] ? show_regs_print_info+0x12/0x12 [ 316.076462][ T8540] ? load_image+0x410/0x410 [ 316.076495][ T8540] ? __lock_acquire+0x7c40/0x7c40 [ 316.076532][ T8540] should_fail_ex+0x390/0x4c0 [ 316.076567][ T8540] _copy_from_iter+0x1c0/0x1130 [ 316.111868][ T8540] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 316.118064][ T8540] ? lockdep_hardirqs_on+0x94/0x140 [ 316.123299][ T8540] ? copyout_mc+0x110/0x110 [ 316.127840][ T8540] ? page_copy_sane+0x4e/0x390 [ 316.132736][ T8540] ? __sanitizer_cov_trace_pc+0x4/0x60 [ 316.138757][ T8540] ? page_copy_sane+0x4e/0x390 [ 316.143555][ T8540] copy_page_from_iter+0x77/0x100 [ 316.148611][ T8540] pipe_write+0x859/0x1ae0 [ 316.153075][ T8540] ? pipe_read+0x12d0/0x12d0 [ 316.157699][ T8540] ? end_current_label_crit_section+0x14b/0x170 [ 316.163978][ T8540] ? common_file_perm+0x171/0x1c0 [ 316.169048][ T8540] vfs_write+0x482/0x9a0 [ 316.173332][ T8540] ? file_end_write+0x250/0x250 [ 316.178221][ T8540] ? __fget_files+0x3fc/0x460 [ 316.182934][ T8540] ? __fdget_pos+0x1d4/0x360 [ 316.187555][ T8540] ? ksys_write+0x70/0x260 [ 316.192005][ T8540] ksys_write+0x14d/0x260 [ 316.196389][ T8540] ? __ia32_sys_read+0x80/0x80 [ 316.201193][ T8540] ? lockdep_hardirqs_on+0x94/0x140 [ 316.206418][ T8540] do_syscall_64+0x4c/0xa0 [ 316.210866][ T8540] ? clear_bhb_loop+0x60/0xb0 [ 316.215569][ T8540] ? clear_bhb_loop+0x60/0xb0 [ 316.220278][ T8540] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 316.226200][ T8540] RIP: 0033:0x7f35c995e6ce [ 316.230637][ T8540] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 316.250267][ T8540] RSP: 002b:00007f35ca88cce8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 316.258702][ T8540] RAX: ffffffffffffffda RBX: 00007f35ca88d6c0 RCX: 00007f35c995e6ce [ 316.266697][ T8540] RDX: 0000000000000029 RSI: 00007f35ca88ce90 RDI: 0000000000000002 [ 316.274689][ T8540] RBP: 00007f35ca88ce90 R08: 0000000000000000 R09: 0000000000000000 [ 316.282681][ T8540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000029 [ 316.290672][ T8540] R13: 00007f35c9bf07a0 R14: 00007f35c9be74a0 R15: 0000000000000001 [ 316.298680][ T8540] [ 316.319886][ T8555] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 317.117422][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.124163][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.172918][ T8594] netlink: 'syz.3.1547': attribute type 39 has an invalid length. [ 318.361368][ T8601] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1550'. [ 318.453478][ T8604] netlink: 'syz.1.1551': attribute type 2 has an invalid length. [ 318.490699][ T8604] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1551'. [ 318.854788][ T8613] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1555'. [ 318.970211][ T8613] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 320.269293][ T8635] netlink: 'syz.1.1562': attribute type 39 has an invalid length. [ 320.982665][ T8661] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1572'. [ 321.058482][ T8661] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 321.337329][ T8670] device syzkaller0 entered promiscuous mode [ 321.359128][ T8674] netlink: 'syz.0.1575': attribute type 39 has an invalid length. [ 324.550434][ T8687] netlink: 'syz.0.1578': attribute type 33 has an invalid length. [ 324.563499][ T8687] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1578'. [ 324.574603][ T8690] netlink: 'syz.0.1578': attribute type 33 has an invalid length. [ 324.582487][ T8690] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1578'. [ 324.594659][ T8701] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1584'. [ 324.615341][ T8709] netlink: 'syz.1.1587': attribute type 22 has an invalid length. [ 324.623263][ T8709] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1587'. [ 324.840436][ T8712] netlink: 'syz.2.1588': attribute type 39 has an invalid length. [ 326.261661][ T8737] netlink: 'syz.0.1598': attribute type 10 has an invalid length. [ 327.542470][ T8739] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1598'. [ 329.139655][ T8776] netlink: 'syz.0.1613': attribute type 15 has an invalid length. [ 329.180270][ T8776] netlink: 'syz.0.1613': attribute type 7 has an invalid length. [ 329.315085][ T8778] netlink: 'syz.3.1614': attribute type 21 has an invalid length. [ 329.364655][ T8776] netlink: 'syz.0.1613': attribute type 39 has an invalid length. [ 330.009105][ T8795] netlink: 'syz.3.1620': attribute type 22 has an invalid length. [ 330.022155][ T8795] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1620'. [ 330.181483][ T8802] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1623'. [ 331.643641][ T8837] netlink: 'syz.1.1635': attribute type 22 has an invalid length. [ 331.673903][ T8837] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1635'. [ 333.552486][ T8882] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1646'. [ 333.885048][ T8886] netlink: 'syz.2.1650': attribute type 22 has an invalid length. [ 333.912102][ T8886] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1650'. [ 334.952459][ T8910] netlink: 'syz.3.1658': attribute type 15 has an invalid length. [ 334.981043][ T8910] netlink: 'syz.3.1658': attribute type 7 has an invalid length. [ 335.152422][ T8910] netlink: 'syz.3.1658': attribute type 39 has an invalid length. [ 338.080780][ T8926] netlink: 'syz.0.1662': attribute type 22 has an invalid length. [ 338.097481][ T8926] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1662'. [ 338.686888][ T8944] netlink: 'syz.1.1670': attribute type 39 has an invalid length. [ 339.608193][ T8955] netlink: 'syz.2.1675': attribute type 22 has an invalid length. [ 339.665431][ T8955] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1675'. [ 339.923661][ T8966] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.1681'. [ 340.770885][ T8990] netlink: 'syz.3.1686': attribute type 39 has an invalid length. [ 341.132231][ T8994] netlink: 'syz.4.1690': attribute type 22 has an invalid length. [ 341.155406][ T8994] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1690'. [ 343.008940][ T9016] device syzkaller0 entered promiscuous mode [ 345.223783][ T9031] netlink: 'syz.1.1702': attribute type 39 has an invalid length. [ 345.231897][ T9033] netlink: 'syz.0.1703': attribute type 22 has an invalid length. [ 345.245504][ T9033] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1703'. [ 346.437563][ T9075] netlink: 'syz.0.1720': attribute type 22 has an invalid length. [ 346.457068][ T9075] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1720'. [ 346.928990][ T9093] netlink: 196 bytes leftover after parsing attributes in process `syz.2.1725'. [ 348.204535][ T9101] netlink: 'syz.0.1728': attribute type 22 has an invalid length. [ 348.299670][ T9101] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1728'. [ 350.361363][ T9119] netlink: 'syz.4.1733': attribute type 22 has an invalid length. [ 350.370683][ T9119] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1733'. [ 353.846560][ T9183] netlink: 'syz.4.1763': attribute type 22 has an invalid length. [ 353.872331][ T9183] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1763'. [ 354.315211][ T9197] netlink: 'syz.3.1767': attribute type 39 has an invalid length. [ 356.069131][ T9235] netlink: 'syz.0.1782': attribute type 22 has an invalid length. [ 356.103983][ T9235] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1782'. [ 356.353295][ T9238] netlink: 'syz.4.1783': attribute type 39 has an invalid length. [ 356.554529][ T9244] netlink: 'syz.0.1796': attribute type 39 has an invalid length. [ 356.984899][ T9258] netlink: 26 bytes leftover after parsing attributes in process `syz.3.1791'. [ 357.063890][ T9259] netlink: 14719 bytes leftover after parsing attributes in process `syz.3.1791'. [ 357.120941][ T9261] netlink: 14719 bytes leftover after parsing attributes in process `syz.3.1791'. [ 358.358393][ T9279] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1801'. [ 359.353916][ T9299] netlink: 'syz.2.1807': attribute type 27 has an invalid length. [ 359.515576][ T9299] bond0: (slave bond_slave_0): Releasing backup interface [ 360.743400][ T9324] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.1814'. [ 360.856344][ T9324] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 360.903399][ T9324] CPU: 0 PID: 9324 Comm: syz.1.1814 Not tainted syzkaller #0 [ 360.910884][ T9324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 360.921008][ T9324] Call Trace: [ 360.924342][ T9324] [ 360.927352][ T9324] dump_stack_lvl+0x188/0x24e [ 360.932239][ T9324] ? show_regs_print_info+0x12/0x12 [ 360.937516][ T9324] ? load_image+0x410/0x410 [ 360.942145][ T9324] sysfs_warn_dup+0x8a/0xa0 [ 360.946901][ T9324] sysfs_do_create_link_sd+0xc0/0x110 [ 360.952354][ T9324] device_add+0x83b/0x1050 [ 360.956942][ T9324] wiphy_register+0x1d8b/0x2aa0 [ 360.962013][ T9324] ? cfg80211_event_work+0x40/0x40 [ 360.967208][ T9324] ? minstrel_ht_alloc+0x894/0xa20 [ 360.972491][ T9324] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 360.978717][ T9324] ieee80211_register_hw+0x2d48/0x39f0 [ 360.984360][ T9324] ? ieee80211_register_hw+0xf61/0x39f0 [ 360.989954][ T9324] ? ieee80211_register_hw+0xf61/0x39f0 [ 360.995559][ T9324] ? ieee80211_tasklet_handler+0x20/0x20 [ 361.001229][ T9324] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 361.007252][ T9324] ? __debug_object_init+0xed/0x440 [ 361.012565][ T9324] ? memset+0x1e/0x40 [ 361.016628][ T9324] ? __hrtimer_init+0x189/0x270 [ 361.021631][ T9324] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 361.027457][ T9324] ? memcpy+0x3c/0x60 [ 361.031485][ T9324] hwsim_new_radio_nl+0xab7/0xc90 [ 361.036575][ T9324] genl_family_rcv_msg_doit+0x22f/0x350 [ 361.042246][ T9324] ? end_current_label_crit_section+0x170/0x170 [ 361.048634][ T9324] ? lockdep_hardirqs_on+0x94/0x140 [ 361.054108][ T9324] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 361.060070][ T9324] ? bpf_lsm_capable+0x5/0x10 [ 361.064874][ T9324] ? security_capable+0x85/0xb0 [ 361.069855][ T9324] genl_rcv_msg+0x601/0x790 [ 361.074425][ T9324] ? genl_bind+0x360/0x360 [ 361.078889][ T9324] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 361.085293][ T9324] netlink_rcv_skb+0x1ef/0x440 [ 361.090100][ T9324] ? genl_bind+0x360/0x360 [ 361.094568][ T9324] ? netlink_ack+0x1160/0x1160 [ 361.099394][ T9324] ? down_read+0x1a8/0x2d0 [ 361.103944][ T9324] genl_rcv+0x24/0x40 [ 361.107966][ T9324] netlink_unicast+0x7ad/0x920 [ 361.112805][ T9324] netlink_sendmsg+0x8ad/0xbd0 [ 361.117628][ T9324] ? netlink_getsockopt+0x550/0x550 [ 361.122875][ T9324] ? apparmor_socket_sendmsg+0x8a/0x330 [ 361.128468][ T9324] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 361.133855][ T9324] ? security_socket_sendmsg+0x7c/0xa0 [ 361.139354][ T9324] ? netlink_getsockopt+0x550/0x550 [ 361.144685][ T9324] ____sys_sendmsg+0x5ed/0x9a0 [ 361.149575][ T9324] ? __sys_sendmsg_sock+0x30/0x30 [ 361.154637][ T9324] ? __import_iovec+0x306/0x510 [ 361.159558][ T9324] ? import_iovec+0x6f/0xa0 [ 361.164117][ T9324] ___sys_sendmsg+0x2a2/0x360 [ 361.168843][ T9324] ? __sys_sendmsg+0x2a0/0x2a0 [ 361.173740][ T9324] __se_sys_sendmsg+0x1c3/0x2b0 [ 361.178641][ T9324] ? __x64_sys_sendmsg+0x80/0x80 [ 361.183644][ T9324] ? lockdep_hardirqs_on+0x94/0x140 [ 361.188898][ T9324] do_syscall_64+0x4c/0xa0 [ 361.193365][ T9324] ? clear_bhb_loop+0x60/0xb0 [ 361.198089][ T9324] ? clear_bhb_loop+0x60/0xb0 [ 361.202829][ T9324] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 361.208785][ T9324] RIP: 0033:0x7fb88879de99 [ 361.213231][ T9324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 361.232869][ T9324] RSP: 002b:00007fb88967e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 361.241403][ T9324] RAX: ffffffffffffffda RBX: 00007fb888a26090 RCX: 00007fb88879de99 [ 361.249405][ T9324] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 361.257407][ T9324] RBP: 00007fb888833eaf R08: 0000000000000000 R09: 0000000000000000 [ 361.265410][ T9324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 361.273407][ T9324] R13: 00007fb888a26128 R14: 00007fb888a26090 R15: 00007ffd328af938 [ 361.281440][ T9324] [ 361.483976][ T9331] netlink: 'syz.2.1818': attribute type 39 has an invalid length. [ 361.527020][ T9345] netlink: 14126 bytes leftover after parsing attributes in process `syz.3.1822'. [ 362.750347][ T9365] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1828'. [ 362.762780][ T9365] openvswitch: netlink: Message has 6 unknown bytes. [ 364.549592][ T9371] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1829'. [ 368.327101][ T9405] netlink: 'syz.1.1843': attribute type 3 has an invalid length. [ 368.436804][ T9405] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1843'. [ 368.839743][ T9418] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1849'. [ 368.933921][ T9416] netlink: 'syz.2.1848': attribute type 39 has an invalid length. [ 370.388724][ T9457] netlink: 'syz.0.1864': attribute type 39 has an invalid length. [ 370.906192][ T9472] netlink: 'syz.2.1870': attribute type 10 has an invalid length. [ 372.417670][ T9511] netlink: 'syz.1.1879': attribute type 39 has an invalid length. [ 377.913271][ T9587] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1907'. [ 378.489708][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.496908][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.782845][ T9631] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1923'. [ 381.021554][ T9663] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.1935'. [ 381.251438][ T9661] netlink: 'syz.0.1931': attribute type 10 has an invalid length. [ 381.342379][ T9663] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 381.449265][ T9667] netlink: 'syz.0.1931': attribute type 10 has an invalid length. [ 381.489975][ T9667] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 385.728743][ T9723] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1958'. [ 386.286332][ T9737] netlink: 'syz.1.1965': attribute type 22 has an invalid length. [ 386.325592][ T9737] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1965'. [ 387.714092][ T9769] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.1974'. [ 387.888774][ T9769] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 388.017817][ T9769] CPU: 0 PID: 9769 Comm: syz.0.1974 Not tainted syzkaller #0 [ 388.025321][ T9769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 388.035442][ T9769] Call Trace: [ 388.038767][ T9769] [ 388.041751][ T9769] dump_stack_lvl+0x188/0x24e [ 388.046514][ T9769] ? show_regs_print_info+0x12/0x12 [ 388.051780][ T9769] ? load_image+0x410/0x410 [ 388.056376][ T9769] sysfs_warn_dup+0x8a/0xa0 [ 388.060947][ T9769] sysfs_do_create_link_sd+0xc0/0x110 [ 388.066406][ T9769] device_add+0x83b/0x1050 [ 388.070899][ T9769] wiphy_register+0x1d8b/0x2aa0 [ 388.075867][ T9769] ? cfg80211_event_work+0x40/0x40 [ 388.081045][ T9769] ? minstrel_ht_alloc+0x894/0xa20 [ 388.086243][ T9769] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 388.092378][ T9769] ieee80211_register_hw+0x2d48/0x39f0 [ 388.097936][ T9769] ? ieee80211_register_hw+0xf61/0x39f0 [ 388.103562][ T9769] ? ieee80211_register_hw+0xf61/0x39f0 [ 388.109191][ T9769] ? ieee80211_tasklet_handler+0x20/0x20 [ 388.114884][ T9769] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 388.120853][ T9769] ? __debug_object_init+0xed/0x440 [ 388.126141][ T9769] ? memset+0x1e/0x40 [ 388.130193][ T9769] ? __hrtimer_init+0x189/0x270 [ 388.135123][ T9769] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 388.140935][ T9769] ? memcpy+0x3c/0x60 [ 388.144992][ T9769] hwsim_new_radio_nl+0xab7/0xc90 [ 388.150126][ T9769] genl_family_rcv_msg_doit+0x22f/0x350 [ 388.155755][ T9769] ? end_current_label_crit_section+0x170/0x170 [ 388.162082][ T9769] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 388.168076][ T9769] ? bpf_lsm_capable+0x5/0x10 [ 388.172827][ T9769] ? security_capable+0x85/0xb0 [ 388.177775][ T9769] genl_rcv_msg+0x601/0x790 [ 388.182365][ T9769] ? genl_bind+0x360/0x360 [ 388.186849][ T9769] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 388.193307][ T9769] netlink_rcv_skb+0x1ef/0x440 [ 388.198139][ T9769] ? genl_bind+0x360/0x360 [ 388.202632][ T9769] ? netlink_ack+0x1160/0x1160 [ 388.207487][ T9769] ? down_read+0x1a8/0x2d0 [ 388.211968][ T9769] genl_rcv+0x24/0x40 [ 388.216017][ T9769] netlink_unicast+0x7ad/0x920 [ 388.220878][ T9769] netlink_sendmsg+0x8ad/0xbd0 [ 388.225824][ T9769] ? netlink_getsockopt+0x550/0x550 [ 388.231105][ T9769] ? apparmor_socket_sendmsg+0x8a/0x330 [ 388.236726][ T9769] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 388.242098][ T9769] ? security_socket_sendmsg+0x7c/0xa0 [ 388.247624][ T9769] ? netlink_getsockopt+0x550/0x550 [ 388.252901][ T9769] ____sys_sendmsg+0x5ed/0x9a0 [ 388.257751][ T9769] ? __sys_sendmsg_sock+0x30/0x30 [ 388.262853][ T9769] ? __import_iovec+0x306/0x510 [ 388.267804][ T9769] ? import_iovec+0x6f/0xa0 [ 388.272390][ T9769] ___sys_sendmsg+0x2a2/0x360 [ 388.277156][ T9769] ? __sys_sendmsg+0x2a0/0x2a0 [ 388.282110][ T9769] __se_sys_sendmsg+0x1c3/0x2b0 [ 388.287040][ T9769] ? __x64_sys_sendmsg+0x80/0x80 [ 388.292086][ T9769] ? lockdep_hardirqs_on+0x94/0x140 [ 388.297352][ T9769] do_syscall_64+0x4c/0xa0 [ 388.301834][ T9769] ? clear_bhb_loop+0x60/0xb0 [ 388.306591][ T9769] ? clear_bhb_loop+0x60/0xb0 [ 388.311329][ T9769] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 388.317261][ T9769] RIP: 0033:0x7f923f39de99 [ 388.321716][ T9769] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 388.341428][ T9769] RSP: 002b:00007f923d5f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 388.349919][ T9769] RAX: ffffffffffffffda RBX: 00007f923f626090 RCX: 00007f923f39de99 [ 388.357959][ T9769] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 388.366089][ T9769] RBP: 00007f923f433eaf R08: 0000000000000000 R09: 0000000000000000 [ 388.374135][ T9769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 388.382169][ T9769] R13: 00007f923f626128 R14: 00007f923f626090 R15: 00007ffd55414ef8 [ 388.390247][ T9769] [ 392.107736][ T9826] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1997'. [ 394.719992][ T9800] netlink: 'syz.3.1988': attribute type 22 has an invalid length. [ 394.731067][ T9800] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1988'. [ 394.744566][ T9826] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1997'. [ 395.107944][ T9838] netlink: 'syz.4.2001': attribute type 19 has an invalid length. [ 395.145485][ T9838] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2001'. [ 395.811180][ T9848] netlink: 'syz.4.2007': attribute type 29 has an invalid length. [ 395.838486][ T9848] netlink: 'syz.4.2007': attribute type 29 has an invalid length. [ 395.935605][ T9851] netlink: 'syz.4.2007': attribute type 29 has an invalid length. [ 397.630821][ T9887] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2019'. [ 398.398840][ T4287] Bluetooth: hci2: ISO packet for unknown connection handle 5 [ 399.012968][ T9910] netlink: 'syz.0.2030': attribute type 46 has an invalid length. [ 399.031584][ T9910] netlink: 'syz.0.2030': attribute type 21 has an invalid length. [ 399.041546][ T9910] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2030'. [ 400.050188][ T9931] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2038'. [ 400.333450][ T9937] netlink: 'syz.2.2042': attribute type 22 has an invalid length. [ 400.344130][ T9937] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2042'. [ 400.666691][ T9950] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2046'. [ 401.307570][ T9962] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2050'. [ 401.768254][ T9968] netlink: 'syz.4.2052': attribute type 10 has an invalid length. [ 401.983369][ T9968] team0: Port device hsr_slave_0 added [ 402.245315][ T9980] netlink: 'syz.0.2058': attribute type 22 has an invalid length. [ 402.253499][ T9980] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2058'. [ 403.859350][T10011] netlink: 'syz.2.2070': attribute type 3 has an invalid length. [ 403.908022][T10011] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2070'. [ 404.455801][T10019] netlink: 'syz.2.2072': attribute type 39 has an invalid length. [ 404.787997][T10024] netlink: 'syz.1.2074': attribute type 22 has an invalid length. [ 404.813846][T10024] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2074'. [ 406.740683][T10050] netlink: 'syz.4.2086': attribute type 39 has an invalid length. [ 408.539265][T10056] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2088'. [ 408.576523][T10056] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2088'. [ 408.614854][T10056] netlink: 33 bytes leftover after parsing attributes in process `syz.2.2088'. [ 408.626546][T10056] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2088'. [ 408.637017][T10056] netlink: 33 bytes leftover after parsing attributes in process `syz.2.2088'. [ 408.676776][T10056] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2088'. [ 408.759158][T10056] netlink: 33 bytes leftover after parsing attributes in process `syz.2.2088'. [ 408.805207][T10061] netlink: 'syz.1.2090': attribute type 22 has an invalid length. [ 408.856215][T10061] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2090'. [ 411.334552][T10090] netlink: 'syz.4.2101': attribute type 39 has an invalid length. [ 411.621855][T10099] netlink: 'syz.4.2104': attribute type 22 has an invalid length. [ 411.657351][T10099] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2104'. [ 412.635842][T10122] netlink: 'syz.3.2114': attribute type 39 has an invalid length. [ 413.088518][T10130] netlink: 'syz.3.2118': attribute type 22 has an invalid length. [ 413.120700][T10130] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2118'. [ 413.779169][T10140] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2120'. [ 416.817399][T10169] netlink: 'syz.0.2128': attribute type 39 has an invalid length. [ 416.957279][T10171] netlink: 'syz.4.2130': attribute type 22 has an invalid length. [ 416.993992][T10171] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2130'. [ 417.355667][T10181] tap0: tun_chr_ioctl cmd 1074025675 [ 417.361517][T10181] tap0: persist enabled [ 417.368469][T10181] tap0: tun_chr_ioctl cmd 1074025675 [ 417.381092][T10181] tap0: persist disabled [ 418.118219][T10189] netlink: 'syz.3.2137': attribute type 15 has an invalid length. [ 418.149433][T10189] netlink: 'syz.3.2137': attribute type 7 has an invalid length. [ 418.258771][T10189] netlink: 'syz.3.2137': attribute type 39 has an invalid length. [ 418.327969][T10189] netlink: 'syz.3.2137': attribute type 3 has an invalid length. [ 418.373905][T10189] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2137'. [ 419.659522][T10220] netlink: 'syz.1.2147': attribute type 22 has an invalid length. [ 419.694464][T10220] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2147'. [ 421.337057][T10237] netlink: 'syz.2.2152': attribute type 15 has an invalid length. [ 421.350403][T10237] netlink: 'syz.2.2152': attribute type 7 has an invalid length. [ 421.422476][T10237] netlink: 'syz.2.2152': attribute type 39 has an invalid length. [ 421.480500][T10240] netlink: 'syz.2.2152': attribute type 3 has an invalid length. [ 421.529031][T10240] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2152'. [ 421.660656][T10249] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2156'. [ 421.841325][T10249] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2156'. [ 422.419799][T10267] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2162'. [ 425.365752][T10292] netlink: 'syz.2.2171': attribute type 3 has an invalid length. [ 425.373558][T10292] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2171'. [ 426.498367][T10313] netlink: 'syz.3.2179': attribute type 22 has an invalid length. [ 426.537353][T10313] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2179'. [ 426.577784][T10318] raw_sendmsg: syz.4.2180 forgot to set AF_INET. Fix it! [ 427.335100][T10331] netlink: 'syz.4.2186': attribute type 29 has an invalid length. [ 427.382206][T10331] netlink: 'syz.4.2186': attribute type 29 has an invalid length. [ 427.444644][T10332] netlink: 'syz.4.2186': attribute type 29 has an invalid length. [ 427.980627][T10348] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2194'. [ 428.570860][T10368] netlink: 184 bytes leftover after parsing attributes in process `syz.4.2200'. [ 428.801404][T10377] sock: sock_set_timeout: `syz.1.2205' (pid 10377) tries to set negative timeout [ 430.150812][T10396] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 430.178952][T10396] syzkaller1: group set to 778 [ 433.741282][T10473] netlink: 'syz.1.2242': attribute type 22 has an invalid length. [ 433.827892][T10473] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2242'. [ 434.997555][T10500] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2251'. [ 435.044726][T10500] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 435.278746][T10508] netlink: 'syz.1.2252': attribute type 2 has an invalid length. [ 435.360982][T10508] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2252'. [ 435.477395][T10505] device syzkaller0 entered promiscuous mode [ 439.098992][T10523] netlink: 'syz.4.2256': attribute type 22 has an invalid length. [ 439.107861][T10523] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2256'. [ 439.119619][T10550] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2269'. [ 439.129986][T10550] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 439.416054][T10565] netlink: 'syz.4.2275': attribute type 25 has an invalid length. [ 439.427347][T10565] netlink: 'syz.4.2275': attribute type 29 has an invalid length. [ 439.467807][T10565] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2275'. [ 439.797199][T10577] netlink: 'syz.4.2280': attribute type 1 has an invalid length. [ 439.937216][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.943706][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.442978][T10588] netlink: 'syz.4.2285': attribute type 22 has an invalid length. [ 440.481462][T10588] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2285'. [ 440.568120][T10593] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2287'. [ 440.603464][T10593] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 442.287178][T10622] netlink: 'syz.2.2299': attribute type 22 has an invalid length. [ 442.327183][T10622] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2299'. [ 442.447081][T10629] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2302'. [ 442.504017][T10629] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 442.659001][T10635] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2303'. [ 443.108048][T10648] netlink: 'syz.1.2307': attribute type 10 has an invalid length. [ 443.924180][T10666] netlink: 'syz.1.2314': attribute type 22 has an invalid length. [ 443.943784][T10666] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2314'. [ 444.175676][T10670] netlink: 'syz.4.2317': attribute type 4 has an invalid length. [ 444.183600][T10670] netlink: 'syz.4.2317': attribute type 8 has an invalid length. [ 444.295952][T10670] netlink: 193092 bytes leftover after parsing attributes in process `syz.4.2317'. [ 444.756966][T10676] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2320'. [ 444.793934][T10676] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 445.847059][T10696] netlink: 'syz.3.2328': attribute type 22 has an invalid length. [ 445.882598][T10696] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2328'. [ 446.027334][T10700] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2329'. [ 446.547108][T10727] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2340'. [ 446.568779][T10727] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 446.992218][T10733] device batadv0 entered promiscuous mode [ 447.088346][T10736] netlink: 'syz.4.2343': attribute type 22 has an invalid length. [ 447.103929][T10736] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2343'. [ 447.150533][T10742] netlink: 'syz.3.2342': attribute type 49 has an invalid length. [ 447.185443][T10744] netlink: 160 bytes leftover after parsing attributes in process `syz.3.2342'. [ 450.096782][T10780] netlink: 'syz.4.2356': attribute type 22 has an invalid length. [ 450.105840][T10780] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2356'. [ 450.115074][T10785] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2357'. [ 450.133765][T10785] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 450.531563][T10808] netlink: 180 bytes leftover after parsing attributes in process `syz.3.2365'. [ 450.685700][T10810] netlink: 'syz.3.2365': attribute type 3 has an invalid length. [ 450.762724][T10810] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2365'. [ 451.674968][T10828] netlink: 'syz.2.2373': attribute type 22 has an invalid length. [ 451.683267][T10828] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2373'. [ 451.991839][T10836] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2376'. [ 452.020000][T10836] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 453.553251][T10864] netlink: 'syz.2.2386': attribute type 22 has an invalid length. [ 453.570087][T10864] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2386'. [ 453.596898][T10868] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2389'. [ 453.860019][T10873] netlink: 'syz.3.2387': attribute type 22 has an invalid length. [ 453.875150][T10873] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2387'. [ 454.310935][T10893] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2396'. [ 454.332161][T10893] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 455.375313][T10903] netlink: 'syz.3.2401': attribute type 22 has an invalid length. [ 455.415975][T10903] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2401'. [ 456.059459][T10913] netlink: 'syz.0.2405': attribute type 22 has an invalid length. [ 456.082530][T10913] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2405'. [ 457.208833][T10924] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2409'. [ 457.554127][T10942] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2413'. [ 457.692779][T10942] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 458.622104][T10958] netlink: 'syz.4.2420': attribute type 22 has an invalid length. [ 458.696128][T10958] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2420'. [ 460.325683][T11001] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2433'. [ 460.350833][T11001] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 460.395589][T11003] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2432'. [ 460.968843][T11006] netlink: 'syz.3.2434': attribute type 22 has an invalid length. [ 460.998734][T11006] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2434'. [ 462.698141][T11030] FAULT_INJECTION: forcing a failure. [ 462.698141][T11030] name failslab, interval 1, probability 0, space 0, times 0 [ 462.749822][T11030] CPU: 1 PID: 11030 Comm: syz.0.2443 Not tainted syzkaller #0 [ 462.757465][T11030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 462.767566][T11030] Call Trace: [ 462.770881][T11030] [ 462.773847][T11030] dump_stack_lvl+0x188/0x24e [ 462.778677][T11030] ? show_regs_print_info+0x12/0x12 [ 462.783976][T11030] ? load_image+0x410/0x410 [ 462.788534][T11030] ? __might_sleep+0xd0/0xd0 [ 462.793232][T11030] ? __lock_acquire+0x7c40/0x7c40 [ 462.798326][T11030] should_fail_ex+0x390/0x4c0 [ 462.803100][T11030] should_failslab+0x5/0x20 [ 462.807680][T11030] slab_pre_alloc_hook+0x59/0x300 [ 462.812776][T11030] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 462.818555][T11030] __kmem_cache_alloc_node+0x4f/0x270 [ 462.823961][T11030] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 462.829711][T11030] __kmalloc+0xa3/0x240 [ 462.833921][T11030] tomoyo_realpath_from_path+0xe2/0x5c0 [ 462.839497][T11030] ? tomoyo_domain+0xd2/0x120 [ 462.844199][T11030] ? tomoyo_path_number_perm+0x205/0x650 [ 462.849868][T11030] tomoyo_path_number_perm+0x22f/0x650 [ 462.855350][T11030] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 462.860830][T11030] ? ksys_write+0x1ce/0x260 [ 462.865455][T11030] ? __fget_files+0x28/0x460 [ 462.870126][T11030] security_file_ioctl+0x6c/0xa0 [ 462.875093][T11030] __se_sys_ioctl+0x48/0x170 [ 462.879750][T11030] do_syscall_64+0x4c/0xa0 [ 462.884198][T11030] ? clear_bhb_loop+0x60/0xb0 [ 462.888912][T11030] ? clear_bhb_loop+0x60/0xb0 [ 462.893628][T11030] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 462.899567][T11030] RIP: 0033:0x7f923f39de99 [ 462.904008][T11030] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 462.923640][T11030] RSP: 002b:00007f9240193028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 462.932111][T11030] RAX: ffffffffffffffda RBX: 00007f923f625fa0 RCX: 00007f923f39de99 [ 462.940188][T11030] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000008 [ 462.948184][T11030] RBP: 00007f9240193090 R08: 0000000000000000 R09: 0000000000000000 [ 462.956182][T11030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 462.964175][T11030] R13: 00007f923f626038 R14: 00007f923f625fa0 R15: 00007ffd55414ef8 [ 462.972183][T11030] [ 463.139757][T11030] ERROR: Out of memory at tomoyo_realpath_from_path. [ 463.229972][T11046] netlink: 'syz.3.2448': attribute type 22 has an invalid length. [ 463.254033][T11046] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2448'. [ 463.299606][T11047] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2449'. [ 463.315911][T11047] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 463.579463][T11055] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2452'. [ 463.901083][T11058] netlink: 196 bytes leftover after parsing attributes in process `syz.1.2453'. [ 463.917489][T11058] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 464.897519][T11075] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2460'. [ 464.983937][T11077] netlink: 'syz.2.2461': attribute type 22 has an invalid length. [ 465.011567][T11077] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2461'. [ 466.341050][T11089] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2466'. [ 466.364011][T11089] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 467.034777][T11111] netlink: 'syz.4.2474': attribute type 22 has an invalid length. [ 467.066176][T11111] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2474'. [ 468.314541][T11134] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2484'. [ 468.373872][T11134] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 468.831891][T11146] netlink: 'syz.4.2488': attribute type 22 has an invalid length. [ 468.853203][T11146] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2488'. [ 469.045538][T11151] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2489'. [ 470.175942][T11176] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2501'. [ 470.231238][T11176] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 470.764545][T11181] netlink: 'syz.0.2502': attribute type 22 has an invalid length. [ 470.799074][T11181] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2502'. [ 471.636410][T11197] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2509'. [ 471.688332][T11199] delete_channel: no stack [ 471.729963][T11199] delete_channel: no stack [ 471.818390][T11198] delete_channel: no stack [ 473.003208][T11217] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2517'. [ 473.084361][T11217] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 473.275290][T11220] netlink: 'syz.4.2518': attribute type 22 has an invalid length. [ 473.288757][T11220] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2518'. [ 474.136105][T11248] netlink: 'syz.2.2530': attribute type 10 has an invalid length. [ 474.154038][T11248] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2530'. [ 474.183349][T11248] device dummy0 entered promiscuous mode [ 474.252149][T11252] FAULT_INJECTION: forcing a failure. [ 474.252149][T11252] name failslab, interval 1, probability 0, space 0, times 0 [ 474.279805][T11248] bridge0: port 3(dummy0) entered blocking state [ 474.301159][T11248] bridge0: port 3(dummy0) entered disabled state [ 474.319092][T11252] CPU: 0 PID: 11252 Comm: syz.3.2532 Not tainted syzkaller #0 [ 474.326626][T11252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 474.336735][T11252] Call Trace: [ 474.340057][T11252] [ 474.343033][T11252] dump_stack_lvl+0x188/0x24e [ 474.347795][T11252] ? show_regs_print_info+0x12/0x12 [ 474.353070][T11252] ? load_image+0x410/0x410 [ 474.357635][T11252] ? __might_sleep+0xd0/0xd0 [ 474.362273][T11252] ? __lock_acquire+0x7c40/0x7c40 [ 474.367360][T11252] should_fail_ex+0x390/0x4c0 [ 474.372095][T11252] should_failslab+0x5/0x20 [ 474.376649][T11252] slab_pre_alloc_hook+0x59/0x300 [ 474.381740][T11252] ? lockdep_hardirqs_on+0x94/0x140 [ 474.386996][T11252] ? kernfs_fop_write_iter+0x154/0x520 [ 474.392520][T11252] __kmem_cache_alloc_node+0x4f/0x270 [ 474.397967][T11252] ? kernfs_fop_write_iter+0x154/0x520 [ 474.403479][T11252] __kmalloc+0xa3/0x240 [ 474.407704][T11252] kernfs_fop_write_iter+0x154/0x520 [ 474.413047][T11252] vfs_write+0x482/0x9a0 [ 474.417358][T11252] ? file_end_write+0x250/0x250 [ 474.422289][T11252] ? __fget_files+0x3fc/0x460 [ 474.427039][T11252] ? __fdget_pos+0x2ae/0x360 [ 474.431688][T11252] ? ksys_write+0x70/0x260 [ 474.436167][T11252] ksys_write+0x14d/0x260 [ 474.440554][T11252] ? __ia32_sys_read+0x80/0x80 [ 474.445382][T11252] ? lockdep_hardirqs_on+0x94/0x140 [ 474.450632][T11252] do_syscall_64+0x4c/0xa0 [ 474.455103][T11252] ? clear_bhb_loop+0x60/0xb0 [ 474.459835][T11252] ? clear_bhb_loop+0x60/0xb0 [ 474.464571][T11252] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 474.470665][T11252] RIP: 0033:0x7f932319de99 [ 474.475162][T11252] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 474.494855][T11252] RSP: 002b:00007f9324032028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 474.503324][T11252] RAX: ffffffffffffffda RBX: 00007f9323425fa0 RCX: 00007f932319de99 [ 474.511339][T11252] RDX: 000000000000006a RSI: 00002000000000c0 RDI: 000000000000000a [ 474.519351][T11252] RBP: 00007f9324032090 R08: 0000000000000000 R09: 0000000000000000 [ 474.527495][T11252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 474.535596][T11252] R13: 00007f9323426038 R14: 00007f9323425fa0 R15: 00007ffe530f3b68 [ 474.543633][T11252] [ 474.597349][T11248] bridge0: port 3(dummy0) entered blocking state [ 474.604462][T11248] bridge0: port 3(dummy0) entered forwarding state [ 474.634117][T11250] netlink: 'syz.4.2531': attribute type 22 has an invalid length. [ 474.656783][T11250] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2531'. [ 474.701471][T11254] netlink: 'syz.3.2532': attribute type 39 has an invalid length. [ 474.824126][T11256] netlink: 'syz.1.2533': attribute type 39 has an invalid length. [ 474.835673][T11258] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2534'. [ 474.854685][T11258] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 475.544759][T11269] netlink: 'syz.4.2538': attribute type 41 has an invalid length. [ 477.049827][T11287] netlink: 'syz.0.2545': attribute type 22 has an invalid length. [ 477.081047][T11287] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2545'. [ 477.199213][T11292] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 477.207228][T11292] IPv6: NLM_F_CREATE should be set when creating new route [ 477.214817][T11292] IPv6: NLM_F_CREATE should be set when creating new route [ 477.222321][T11292] IPv6: NLM_F_CREATE should be set when creating new route [ 477.471618][T11302] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2551'. [ 477.591561][T11302] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 477.980522][T11315] FAULT_INJECTION: forcing a failure. [ 477.980522][T11315] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 478.019039][T11315] CPU: 1 PID: 11315 Comm: syz.1.2555 Not tainted syzkaller #0 [ 478.026598][T11315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 478.036697][T11315] Call Trace: [ 478.040015][T11315] [ 478.042983][T11315] dump_stack_lvl+0x188/0x24e [ 478.047726][T11315] ? show_regs_print_info+0x12/0x12 [ 478.053004][T11315] ? load_image+0x410/0x410 [ 478.057553][T11315] ? __lock_acquire+0x7c40/0x7c40 [ 478.062625][T11315] ? __lock_acquire+0x138a/0x7c40 [ 478.067711][T11315] should_fail_ex+0x390/0x4c0 [ 478.072448][T11315] _copy_from_user+0x2c/0x170 [ 478.077171][T11315] ip6gre_tunnel_siocdevprivate+0x2d2/0x730 [ 478.083246][T11315] ? ip6gre_tunnel_init+0x140/0x140 [ 478.088548][T11315] ? trace_contention_end+0x5f/0x170 [ 478.093895][T11315] ? full_name_hash+0x8e/0xe0 [ 478.098628][T11315] dev_ifsioc+0xa4a/0xd50 [ 478.103128][T11315] ? dev_ioctl+0xe80/0xe80 [ 478.107605][T11315] ? __lock_acquire+0x7c40/0x7c40 [ 478.112685][T11315] ? full_name_hash+0x8e/0xe0 [ 478.117418][T11315] ? dev_load+0x1d/0x1e0 [ 478.121726][T11315] ? dev_load+0x1d/0x1e0 [ 478.126029][T11315] dev_ioctl+0x5f8/0xe80 [ 478.130335][T11315] ? get_user_ifreq+0xc7/0x170 [ 478.135173][T11315] sock_ioctl+0x679/0x700 [ 478.139561][T11315] ? sock_poll+0x420/0x420 [ 478.144050][T11315] ? bpf_lsm_file_ioctl+0x5/0x10 [ 478.149045][T11315] ? security_file_ioctl+0x7c/0xa0 [ 478.154205][T11315] ? sock_poll+0x420/0x420 [ 478.158684][T11315] __se_sys_ioctl+0xfa/0x170 [ 478.163329][T11315] do_syscall_64+0x4c/0xa0 [ 478.167808][T11315] ? clear_bhb_loop+0x60/0xb0 [ 478.172538][T11315] ? clear_bhb_loop+0x60/0xb0 [ 478.177265][T11315] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 478.183211][T11315] RIP: 0033:0x7fb88879de99 [ 478.187670][T11315] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 478.207327][T11315] RSP: 002b:00007fb88967e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 478.216058][T11315] RAX: ffffffffffffffda RBX: 00007fb888a26090 RCX: 00007fb88879de99 [ 478.224084][T11315] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000008 [ 478.232103][T11315] RBP: 00007fb88967e090 R08: 0000000000000000 R09: 0000000000000000 [ 478.240124][T11315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 478.248140][T11315] R13: 00007fb888a26128 R14: 00007fb888a26090 R15: 00007ffd328af938 [ 478.256272][T11315] [ 479.018567][T11328] netlink: 'syz.1.2560': attribute type 22 has an invalid length. [ 479.057795][T11328] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2560'. [ 479.588138][T11347] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2567'. [ 479.614099][T11347] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 479.706861][T11348] netlink: 'syz.1.2568': attribute type 39 has an invalid length. [ 479.868661][T11358] netlink: 'syz.2.2570': attribute type 39 has an invalid length. [ 480.924550][T11380] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2575'. [ 481.046822][T11379] netlink: 'syz.0.2576': attribute type 22 has an invalid length. [ 481.073966][T11379] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2576'. [ 482.040574][T11391] netlink: 'syz.1.2581': attribute type 2 has an invalid length. [ 482.330767][T11391] device 0 entered promiscuous mode [ 482.729891][T11402] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2585'. [ 482.767538][T11402] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 483.121189][T11416] netlink: 'syz.1.2589': attribute type 22 has an invalid length. [ 483.143921][T11416] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2589'. [ 483.817156][T11441] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2599'. [ 483.879496][T11441] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 484.701303][T11444] netlink: 463 bytes leftover after parsing attributes in process `syz.1.2600'. [ 484.978878][T11451] netlink: 'syz.3.2602': attribute type 22 has an invalid length. [ 485.044452][T11451] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2602'. [ 485.410774][T11466] FAULT_INJECTION: forcing a failure. [ 485.410774][T11466] name failslab, interval 1, probability 0, space 0, times 0 [ 485.437757][T11463] netlink: 'syz.1.2606': attribute type 22 has an invalid length. [ 485.452277][T11463] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2606'. [ 485.471690][T11466] CPU: 1 PID: 11466 Comm: syz.3.2607 Not tainted syzkaller #0 [ 485.479248][T11466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 485.489350][T11466] Call Trace: [ 485.492683][T11466] [ 485.495664][T11466] dump_stack_lvl+0x188/0x24e [ 485.500406][T11466] ? show_regs_print_info+0x12/0x12 [ 485.505664][T11466] ? load_image+0x410/0x410 [ 485.510238][T11466] ? __might_sleep+0xd0/0xd0 [ 485.514877][T11466] ? __lock_acquire+0x7c40/0x7c40 [ 485.519969][T11466] should_fail_ex+0x390/0x4c0 [ 485.524725][T11466] should_failslab+0x5/0x20 [ 485.529282][T11466] slab_pre_alloc_hook+0x59/0x300 [ 485.534371][T11466] ? alloc_trial_cpuset+0x23/0x140 [ 485.539578][T11466] __kmem_cache_alloc_node+0x4f/0x270 [ 485.545019][T11466] ? alloc_trial_cpuset+0x23/0x140 [ 485.550191][T11466] __kmalloc_node_track_caller+0xa0/0x240 [ 485.555983][T11466] kmemdup+0x27/0x60 [ 485.560016][T11466] alloc_trial_cpuset+0x23/0x140 [ 485.565010][T11466] cpuset_write_resmask+0x1fa/0x1cf0 [ 485.570493][T11466] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 485.576707][T11466] ? lockdep_hardirqs_on+0x94/0x140 [ 485.581955][T11466] ? cpuset_common_seq_show+0x230/0x230 [ 485.587565][T11466] ? cpuset_common_seq_show+0x230/0x230 [ 485.593172][T11466] cgroup_file_write+0x2c9/0x6a0 [ 485.598230][T11466] ? kernfs_fop_write_iter+0x1d8/0x520 [ 485.603735][T11466] ? cgroup_seqfile_stop+0xd0/0xd0 [ 485.608884][T11466] ? __check_object_size+0x2c1/0xa70 [ 485.614239][T11466] ? cgroup_seqfile_stop+0xd0/0xd0 [ 485.619406][T11466] kernfs_fop_write_iter+0x3a0/0x520 [ 485.624740][T11466] vfs_write+0x482/0x9a0 [ 485.629027][T11466] ? file_end_write+0x250/0x250 [ 485.633924][T11466] ? __fget_files+0x3fc/0x460 [ 485.638649][T11466] ? __fdget_pos+0x2ae/0x360 [ 485.643284][T11466] ? ksys_write+0x70/0x260 [ 485.647756][T11466] ksys_write+0x14d/0x260 [ 485.652142][T11466] ? __ia32_sys_read+0x80/0x80 [ 485.656953][T11466] ? syscall_enter_from_user_mode+0x2a/0x80 [ 485.662880][T11466] do_syscall_64+0x4c/0xa0 [ 485.667331][T11466] ? clear_bhb_loop+0x60/0xb0 [ 485.672044][T11466] ? clear_bhb_loop+0x60/0xb0 [ 485.676759][T11466] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 485.682684][T11466] RIP: 0033:0x7f932319de99 [ 485.687127][T11466] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 485.706759][T11466] RSP: 002b:00007f9324032028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 485.715200][T11466] RAX: ffffffffffffffda RBX: 00007f9323425fa0 RCX: 00007f932319de99 [ 485.723192][T11466] RDX: 000000000000006a RSI: 00002000000000c0 RDI: 000000000000000a [ 485.731182][T11466] RBP: 00007f9324032090 R08: 0000000000000000 R09: 0000000000000000 [ 485.739175][T11466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 485.747176][T11466] R13: 00007f9323426038 R14: 00007f9323425fa0 R15: 00007ffe530f3b68 [ 485.755186][T11466] [ 485.864334][T11466] netlink: 'syz.3.2607': attribute type 39 has an invalid length. [ 486.041271][T11479] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2612'. [ 486.118691][T11479] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 486.173947][T11486] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2611'. [ 486.268595][T11490] netlink: 'syz.1.2614': attribute type 29 has an invalid length. [ 486.354129][T11490] netlink: 'syz.1.2614': attribute type 29 has an invalid length. [ 486.380680][T11492] netlink: 'syz.1.2614': attribute type 29 has an invalid length. [ 486.493808][T11490] netlink: 'syz.1.2614': attribute type 29 has an invalid length. [ 486.552388][T11490] netlink: 'syz.1.2614': attribute type 29 has an invalid length. [ 486.620127][T11492] netlink: 'syz.1.2614': attribute type 29 has an invalid length. [ 486.790632][T11488] can: request_module (can-proto-0) failed. [ 487.239374][T11502] netlink: 'syz.1.2619': attribute type 22 has an invalid length. [ 487.249354][T11502] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2619'. [ 487.755615][T11517] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2624'. [ 488.000116][T11523] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2626'. [ 488.085439][T11523] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 488.893529][T11548] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2638'. [ 490.063394][T11562] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2640'. [ 490.093986][T11562] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 490.154864][T11565] validate_nla: 2 callbacks suppressed [ 490.154883][T11565] netlink: 'syz.1.2641': attribute type 10 has an invalid length. [ 490.228127][T11565] device veth0_macvtap left promiscuous mode [ 490.390014][T11570] netlink: 'syz.3.2644': attribute type 29 has an invalid length. [ 490.414636][T11570] netlink: 'syz.3.2644': attribute type 29 has an invalid length. [ 490.442977][T11572] FAULT_INJECTION: forcing a failure. [ 490.442977][T11572] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 490.484681][T11573] netlink: 'syz.3.2644': attribute type 29 has an invalid length. [ 490.492484][T11572] CPU: 0 PID: 11572 Comm: syz.4.2643 Not tainted syzkaller #0 [ 490.492575][T11572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 490.510145][T11572] Call Trace: [ 490.513461][T11572] [ 490.516421][T11572] dump_stack_lvl+0x188/0x24e [ 490.521163][T11572] ? show_regs_print_info+0x12/0x12 [ 490.526430][T11572] ? load_image+0x410/0x410 [ 490.530986][T11572] ? __lock_acquire+0x7c40/0x7c40 [ 490.536067][T11572] ? snprintf+0xed/0x140 [ 490.540358][T11572] should_fail_ex+0x390/0x4c0 [ 490.545100][T11572] _copy_to_user+0x2c/0x130 [ 490.549646][T11572] simple_read_from_buffer+0xe3/0x150 [ 490.555066][T11572] proc_fail_nth_read+0x1a6/0x220 [ 490.560138][T11572] ? proc_fault_inject_write+0x310/0x310 [ 490.565823][T11572] ? fsnotify_perm+0x248/0x550 [ 490.570631][T11572] ? proc_fault_inject_write+0x310/0x310 [ 490.576309][T11572] vfs_read+0x2db/0x960 [ 490.580530][T11572] ? kernel_read+0x1e0/0x1e0 [ 490.585172][T11572] ? __fget_files+0x28/0x460 [ 490.589809][T11572] ? __fget_files+0x3fc/0x460 [ 490.594544][T11572] ? __fdget_pos+0x2ae/0x360 [ 490.599178][T11572] ? ksys_read+0x70/0x260 [ 490.603562][T11572] ksys_read+0x14d/0x260 [ 490.607854][T11572] ? vfs_write+0x9a0/0x9a0 [ 490.612326][T11572] ? syscall_enter_from_user_mode+0x2a/0x80 [ 490.618267][T11572] do_syscall_64+0x4c/0xa0 [ 490.622733][T11572] ? clear_bhb_loop+0x60/0xb0 [ 490.627460][T11572] ? clear_bhb_loop+0x60/0xb0 [ 490.632197][T11572] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 490.638142][T11572] RIP: 0033:0x7f35c995e6ce [ 490.642607][T11572] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 490.662254][T11572] RSP: 002b:00007f35ca88cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 490.670717][T11572] RAX: ffffffffffffffda RBX: 00007f35ca88d6c0 RCX: 00007f35c995e6ce [ 490.678738][T11572] RDX: 000000000000000f RSI: 00007f35ca88d0a0 RDI: 000000000000000b [ 490.686781][T11572] RBP: 00007f35ca88d090 R08: 0000000000000000 R09: 0000000000000000 [ 490.694795][T11572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 490.702810][T11572] R13: 00007f35c9c26038 R14: 00007f35c9c25fa0 R15: 00007ffeaf64ff18 [ 490.710840][T11572] [ 490.783196][T11573] netlink: 'syz.3.2644': attribute type 29 has an invalid length. [ 490.823458][T11573] netlink: 'syz.3.2644': attribute type 29 has an invalid length. [ 490.880050][T11583] netlink: 'syz.3.2644': attribute type 29 has an invalid length. [ 490.950966][T11570] can: request_module (can-proto-0) failed. [ 491.577309][T11593] netlink: 'syz.0.2650': attribute type 22 has an invalid length. [ 491.599525][T11593] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2650'. [ 491.656702][T11599] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2654'. [ 491.695424][T11599] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 492.440488][T11628] netlink: 'syz.2.2656': attribute type 1 has an invalid length. [ 492.463217][T11628] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.2656'. [ 492.521498][T11627] netlink: 'syz.1.2662': attribute type 39 has an invalid length. [ 493.242968][T11637] can: request_module (can-proto-0) failed. [ 493.407984][T11647] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2668'. [ 493.547382][T11651] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2669'. [ 493.611697][T11651] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 495.299419][T11682] validate_nla: 10 callbacks suppressed [ 495.299454][T11682] netlink: 'syz.0.2683': attribute type 22 has an invalid length. [ 495.356161][T11682] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2683'. [ 495.454990][T11691] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2685'. [ 495.511525][T11691] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 497.398137][T11726] netlink: 'syz.2.2698': attribute type 39 has an invalid length. [ 497.492271][T11732] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2700'. [ 497.534041][T11732] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 497.662762][T11721] netlink: 'syz.3.2697': attribute type 1 has an invalid length. [ 497.694196][T11727] netlink: 'syz.3.2697': attribute type 29 has an invalid length. [ 497.702397][T11727] netlink: 'syz.3.2697': attribute type 29 has an invalid length. [ 497.766597][T11721] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.2697'. [ 498.019104][T11745] netlink: 'syz.1.2705': attribute type 27 has an invalid length. [ 498.046987][T11745] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2705'. [ 498.094951][T11749] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2707'. [ 498.195802][T11748] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.2705'. [ 498.430289][T11752] netlink: 'syz.4.2706': attribute type 39 has an invalid length. [ 500.515226][T11786] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2717'. [ 500.534152][T11786] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 501.377437][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.383857][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.953520][T11806] netlink: 'syz.2.2723': attribute type 22 has an invalid length. [ 501.969229][T11806] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2723'. [ 502.114594][T11812] netlink: 'syz.4.2726': attribute type 27 has an invalid length. [ 502.144382][T11812] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2726'. [ 502.230778][T11812] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.2726'. [ 502.418694][T11821] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2730'. [ 502.508737][T11821] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 502.581830][T11828] netlink: 'syz.3.2732': attribute type 2 has an invalid length. [ 502.786240][T11828] device 0 entered promiscuous mode [ 502.879856][T11833] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2734'. [ 503.248016][T11838] netlink: 'syz.1.2737': attribute type 39 has an invalid length. [ 503.989402][T11850] netlink: 'syz.0.2742': attribute type 22 has an invalid length. [ 504.004028][T11850] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2742'. [ 504.238491][T11855] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2744'. [ 504.263746][T11855] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 504.291658][T11858] netlink: 'syz.3.2743': attribute type 27 has an invalid length. [ 504.328976][T11858] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2743'. [ 504.385839][T11863] can: request_module (can-proto-0) failed. [ 504.530355][T11866] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.2743'. [ 505.767847][T11887] device batadv0 entered promiscuous mode [ 506.131207][T11891] netlink: 14601 bytes leftover after parsing attributes in process `syz.0.2767'. [ 506.165623][T11895] netlink: 'syz.2.2758': attribute type 29 has an invalid length. [ 506.196925][T11897] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2759'. [ 506.227809][T11897] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 506.255921][T11895] netlink: 'syz.2.2758': attribute type 29 has an invalid length. [ 506.281243][T11894] netlink: 'syz.3.2757': attribute type 22 has an invalid length. [ 506.328719][T11894] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2757'. [ 506.737971][T11918] FAULT_INJECTION: forcing a failure. [ 506.737971][T11918] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 506.767065][T11918] CPU: 0 PID: 11918 Comm: syz.1.2764 Not tainted syzkaller #0 [ 506.774629][T11918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 506.784748][T11918] Call Trace: [ 506.788090][T11918] [ 506.791083][T11918] dump_stack_lvl+0x188/0x24e [ 506.795844][T11918] ? show_regs_print_info+0x12/0x12 [ 506.801123][T11918] ? load_image+0x410/0x410 [ 506.805701][T11918] ? __lock_acquire+0x7c40/0x7c40 [ 506.810829][T11918] should_fail_ex+0x390/0x4c0 [ 506.815595][T11918] _copy_from_user+0x2c/0x170 [ 506.820354][T11918] __sys_bpf+0x2ea/0x780 [ 506.824804][T11918] ? bpf_link_show_fdinfo+0x380/0x380 [ 506.830316][T11918] ? lock_chain_count+0x20/0x20 [ 506.835283][T11918] __x64_sys_bpf+0x78/0x90 [ 506.839783][T11918] do_syscall_64+0x4c/0xa0 [ 506.844279][T11918] ? clear_bhb_loop+0x60/0xb0 [ 506.849027][T11918] ? clear_bhb_loop+0x60/0xb0 [ 506.853779][T11918] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 506.859737][T11918] RIP: 0033:0x7fb88879de99 [ 506.864334][T11918] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 506.884010][T11918] RSP: 002b:00007fb88967e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 506.892499][T11918] RAX: ffffffffffffffda RBX: 00007fb888a26090 RCX: 00007fb88879de99 [ 506.900533][T11918] RDX: 0000000000000038 RSI: 0000200000000000 RDI: 000000000000001b [ 506.908572][T11918] RBP: 00007fb88967e090 R08: 0000000000000000 R09: 0000000000000000 [ 506.916600][T11918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 506.924627][T11918] R13: 00007fb888a26128 R14: 00007fb888a26090 R15: 00007ffd328af938 [ 506.932732][T11918] [ 507.774641][T11929] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2770'. [ 508.157113][T11936] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2773'. [ 508.215578][T11936] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 508.252993][T11933] netlink: 'syz.3.2772': attribute type 39 has an invalid length. [ 508.273358][T11939] netlink: 'syz.2.2774': attribute type 22 has an invalid length. [ 508.303449][T11939] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2774'. [ 509.122041][T11965] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2787'. [ 509.143936][T11965] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 510.210418][T11992] netlink: 'syz.1.2796': attribute type 39 has an invalid length. [ 510.532543][T11999] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2799'. [ 510.829632][T12006] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2801'. [ 510.883923][T12006] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 512.582028][T12033] netlink: 'syz.1.2809': attribute type 22 has an invalid length. [ 512.590260][T12033] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2809'. [ 513.064892][T12042] netlink: 'syz.1.2814': attribute type 22 has an invalid length. [ 513.093412][T12042] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2814'. [ 513.317851][T12051] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2817'. [ 513.333568][T12051] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 514.402886][T12075] bond0: (slave netdevsim0): Error: Slave device does not support XDP [ 514.458548][T12076] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2828'. [ 514.817756][T12082] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2832'. [ 514.914177][T12082] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 515.546302][T12097] netlink: 'syz.4.2838': attribute type 22 has an invalid length. [ 515.577981][T12097] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2838'. [ 515.980896][T12109] netlink: 'syz.4.2843': attribute type 11 has an invalid length. [ 516.014236][T12109] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2843'. [ 516.261547][T12114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 516.489339][T12120] device bridge_slave_1 left promiscuous mode [ 516.509548][T12120] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.586787][T12120] device bridge_slave_0 left promiscuous mode [ 516.606458][T12120] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.076354][T12133] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2848'. [ 517.349499][T12140] netlink: 'syz.4.2856': attribute type 12 has an invalid length. [ 517.372447][T12140] netlink: 172 bytes leftover after parsing attributes in process `syz.4.2856'. [ 517.893295][T12154] netlink: 'syz.0.2859': attribute type 21 has an invalid length. [ 517.908495][T12154] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2859'. [ 517.921092][T12154] netlink: 'syz.0.2859': attribute type 4 has an invalid length. [ 517.935640][T12154] netlink: 'syz.0.2859': attribute type 5 has an invalid length. [ 517.949522][T12154] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2859'. [ 520.220214][ T4287] Bluetooth: hci4: hcon ffff888059fb2000 sent 1 < count 44 [ 521.128959][T12189] netlink: 'syz.3.2872': attribute type 22 has an invalid length. [ 521.163739][T12189] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2872'. [ 522.088022][T12215] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2881'. [ 522.291228][T12219] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2883'. [ 523.528910][T12250] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2893'. [ 523.572362][T12250] netlink: 'syz.3.2893': attribute type 10 has an invalid length. [ 525.158313][T12280] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2904'. [ 525.198520][T12280] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 528.931109][T12324] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2919'. [ 528.990411][T12324] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 529.766944][T12338] device syzkaller0 entered promiscuous mode [ 533.242963][T12350] netlink: 'syz.0.2929': attribute type 39 has an invalid length. [ 533.251172][T12360] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2932'. [ 533.273672][T12360] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 533.312321][T12363] bridge0: port 3(dummy0) entered disabled state [ 533.333081][T12363] device bridge_slave_1 left promiscuous mode [ 533.373154][T12363] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.416454][T12363] device bridge_slave_0 left promiscuous mode [ 533.439885][T12363] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.702939][T12371] netlink: 'syz.4.2937': attribute type 22 has an invalid length. [ 533.749290][T12371] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2937'. [ 534.907849][T12401] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 534.919079][T12401] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 534.927276][T12401] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 534.936288][T12401] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 534.947277][T12401] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 534.966342][T12401] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 535.514384][T12405] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2947'. [ 535.539554][T12405] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 535.728617][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.892907][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.002741][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.118200][T12419] netlink: 'syz.1.2952': attribute type 22 has an invalid length. [ 536.157862][T12419] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2952'. [ 536.235429][ T11] bond0: (slave netdevsim0): Releasing backup interface [ 536.279811][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.771481][T12446] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2962'. [ 536.803912][T12446] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 536.926367][T12400] chnl_net:caif_netlink_parms(): no params data found [ 537.053755][ T4289] Bluetooth: hci5: command 0x0409 tx timeout [ 537.160374][T12455] FAULT_INJECTION: forcing a failure. [ 537.160374][T12455] name failslab, interval 1, probability 0, space 0, times 0 [ 537.173796][T12455] CPU: 1 PID: 12455 Comm: syz.3.2964 Not tainted syzkaller #0 [ 537.181312][T12455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 537.191437][T12455] Call Trace: [ 537.194752][T12455] [ 537.197702][T12455] dump_stack_lvl+0x188/0x24e [ 537.202499][T12455] ? show_regs_print_info+0x12/0x12 [ 537.207729][T12455] ? load_image+0x410/0x410 [ 537.212261][T12455] ? __lock_acquire+0x7c40/0x7c40 [ 537.217317][T12455] should_fail_ex+0x390/0x4c0 [ 537.222030][T12455] should_failslab+0x5/0x20 [ 537.226564][T12455] slab_pre_alloc_hook+0x59/0x300 [ 537.231613][T12455] ? verify_lock_unused+0x140/0x140 [ 537.236840][T12455] ? bpf_test_init+0x9f/0x140 [ 537.241623][T12455] __kmem_cache_alloc_node+0x4f/0x270 [ 537.247025][T12455] ? bpf_test_init+0x9f/0x140 [ 537.251742][T12455] __kmalloc+0xa3/0x240 [ 537.255931][T12455] bpf_test_init+0x9f/0x140 [ 537.260470][T12455] bpf_prog_test_run_xdp+0x488/0xf80 [ 537.265776][T12455] ? __lock_acquire+0x7c40/0x7c40 [ 537.270853][T12455] ? dev_put+0x80/0x80 [ 537.274956][T12455] ? dev_put+0x80/0x80 [ 537.279047][T12455] bpf_prog_test_run+0x31c/0x390 [ 537.284025][T12455] __sys_bpf+0x62b/0x780 [ 537.288296][T12455] ? bpf_link_show_fdinfo+0x380/0x380 [ 537.293711][T12455] ? lock_chain_count+0x20/0x20 [ 537.298628][T12455] __x64_sys_bpf+0x78/0x90 [ 537.303094][T12455] do_syscall_64+0x4c/0xa0 [ 537.307550][T12455] ? clear_bhb_loop+0x60/0xb0 [ 537.312274][T12455] ? clear_bhb_loop+0x60/0xb0 [ 537.317010][T12455] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 537.322955][T12455] RIP: 0033:0x7f932319de99 [ 537.327432][T12455] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 537.347085][T12455] RSP: 002b:00007f9324032028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 537.355525][T12455] RAX: ffffffffffffffda RBX: 00007f9323425fa0 RCX: 00007f932319de99 [ 537.363615][T12455] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 537.371619][T12455] RBP: 00007f9324032090 R08: 0000000000000000 R09: 0000000000000000 [ 537.379616][T12455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 537.387607][T12455] R13: 00007f9323426038 R14: 00007f9323425fa0 R15: 00007ffe530f3b68 [ 537.395615][T12455] [ 537.493394][T12457] device bridge_slave_0 left promiscuous mode [ 537.514843][T12457] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.986005][T12470] netlink: 'syz.3.2969': attribute type 22 has an invalid length. [ 537.997061][T12470] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2969'. [ 538.148559][T12476] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2973'. [ 538.182955][T12476] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 538.401625][T12400] bridge0: port 1(bridge_slave_0) entered blocking state [ 538.449753][T12400] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.488880][T12400] device bridge_slave_0 entered promiscuous mode [ 538.636562][T12400] bridge0: port 2(bridge_slave_1) entered blocking state [ 538.662447][T12400] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.692924][T12400] device bridge_slave_1 entered promiscuous mode [ 538.836310][T12400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 538.884963][T12400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 539.138239][ T4289] Bluetooth: hci5: command 0x041b tx timeout [ 539.257398][T12400] team0: Port device team_slave_0 added [ 539.311073][T12400] team0: Port device team_slave_1 added [ 539.909912][T12400] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 539.941464][T12400] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 540.033675][T12400] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 540.221678][T12400] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 540.241106][T12400] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 540.269089][T12400] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 540.462206][T12527] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2985'. [ 540.561478][T12527] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 540.821874][T12400] device hsr_slave_0 entered promiscuous mode [ 540.854934][T12400] device hsr_slave_1 entered promiscuous mode [ 541.175758][T12546] FAULT_INJECTION: forcing a failure. [ 541.175758][T12546] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 541.203769][ T4289] Bluetooth: hci5: command 0x040f tx timeout [ 541.270802][T12546] CPU: 1 PID: 12546 Comm: syz.1.2992 Not tainted syzkaller #0 [ 541.278343][T12546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 541.288446][T12546] Call Trace: [ 541.291761][T12546] [ 541.294731][T12546] dump_stack_lvl+0x188/0x24e [ 541.299461][T12546] ? show_regs_print_info+0x12/0x12 [ 541.304710][T12546] ? load_image+0x410/0x410 [ 541.309287][T12546] ? __lock_acquire+0x7c40/0x7c40 [ 541.314363][T12546] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 541.320403][T12546] should_fail_ex+0x390/0x4c0 [ 541.325139][T12546] _copy_from_user+0x2c/0x170 [ 541.329860][T12546] ___sys_sendmsg+0x1c3/0x360 [ 541.334621][T12546] ? __sys_sendmsg+0x2a0/0x2a0 [ 541.339473][T12546] ? ktime_get+0x7b/0x270 [ 541.343881][T12546] __se_sys_sendmsg+0x1c3/0x2b0 [ 541.348789][T12546] ? perf_trace_preemptirq_template+0x268/0x320 [ 541.355119][T12546] ? __x64_sys_sendmsg+0x80/0x80 [ 541.360113][T12546] ? lockdep_hardirqs_on+0x94/0x140 [ 541.365347][T12546] do_syscall_64+0x4c/0xa0 [ 541.369794][T12546] ? clear_bhb_loop+0x60/0xb0 [ 541.374503][T12546] ? clear_bhb_loop+0x60/0xb0 [ 541.379211][T12546] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 541.385128][T12546] RIP: 0033:0x7fb88879de99 [ 541.389566][T12546] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 541.409197][T12546] RSP: 002b:00007fb88969f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 541.417636][T12546] RAX: ffffffffffffffda RBX: 00007fb888a25fa0 RCX: 00007fb88879de99 [ 541.425629][T12546] RDX: 0000000000000000 RSI: 0000200000003780 RDI: 0000000000000005 [ 541.433622][T12546] RBP: 00007fb88969f090 R08: 0000000000000000 R09: 0000000000000000 [ 541.441623][T12546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 541.449615][T12546] R13: 00007fb888a26038 R14: 00007fb888a25fa0 R15: 00007ffd328af938 [ 541.457662][T12546] [ 541.487623][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 541.535035][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 541.600626][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 541.645139][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 541.715500][ T11] device veth0_to_bond left promiscuous mode [ 541.766624][ T11] bridge0: port 3(veth0_to_bond) entered disabled state [ 541.822025][ T11] device bridge_slave_0 left promiscuous mode [ 541.859553][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.996068][ T11] device veth0_macvtap left promiscuous mode [ 542.033297][ T11] device veth1_vlan left promiscuous mode [ 542.054190][ T11] device veth0_vlan left promiscuous mode [ 543.288156][ T4289] Bluetooth: hci5: command 0x0419 tx timeout [ 543.896485][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 543.944947][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 544.364525][ T11] bond0 (unregistering): Released all slaves [ 544.493744][T12588] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3002'. [ 544.502963][T12588] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 544.709920][T12593] netlink: 16046 bytes leftover after parsing attributes in process `syz.4.3003'. [ 546.079730][T12400] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 546.198481][T12400] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 546.260819][T12400] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 546.289475][T12400] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 546.535147][T12626] bridge0: port 3(dummy0) entered disabled state [ 546.564603][T12626] device bridge_slave_1 left promiscuous mode [ 546.570937][T12626] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.657588][T12626] device bridge_slave_0 left promiscuous mode [ 546.676227][T12626] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.932180][T12631] netlink: 11562 bytes leftover after parsing attributes in process `syz.3.3014'. [ 546.971406][T12637] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3015'. [ 547.032208][T12637] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 547.255627][T12645] netlink: 'syz.2.3017': attribute type 21 has an invalid length. [ 547.270138][T12645] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3017'. [ 547.296984][T12645] netlink: 'syz.2.3017': attribute type 4 has an invalid length. [ 547.323902][T12645] netlink: 'syz.2.3017': attribute type 5 has an invalid length. [ 547.343842][T12645] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3017'. [ 547.420377][T12400] 8021q: adding VLAN 0 to HW filter on device bond0 [ 547.479257][T10997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 547.506382][T10997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 547.577560][T12400] 8021q: adding VLAN 0 to HW filter on device team0 [ 547.612621][T12653] FAULT_INJECTION: forcing a failure. [ 547.612621][T12653] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 547.641358][T11004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 547.658658][T11004] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 547.667396][T12653] CPU: 0 PID: 12653 Comm: syz.1.3021 Not tainted syzkaller #0 [ 547.674916][T12653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 547.685097][T12653] Call Trace: [ 547.688429][T12653] [ 547.691406][T12653] dump_stack_lvl+0x188/0x24e [ 547.696158][T12653] ? show_regs_print_info+0x12/0x12 [ 547.701411][T12653] ? load_image+0x410/0x410 [ 547.705967][T12653] ? __lock_acquire+0x7c40/0x7c40 [ 547.711041][T12653] should_fail_ex+0x390/0x4c0 [ 547.715815][T12653] _copy_from_user+0x2c/0x170 [ 547.720542][T12653] iovec_from_user+0x143/0x360 [ 547.725367][T12653] __import_iovec+0x6c/0x510 [ 547.730114][T12653] import_iovec+0x6f/0xa0 [ 547.734503][T12653] ___sys_sendmsg+0x252/0x360 [ 547.739251][T12653] ? __sys_sendmsg+0x2a0/0x2a0 [ 547.744204][T12653] __se_sys_sendmsg+0x1c3/0x2b0 [ 547.749153][T12653] ? perf_trace_preemptirq_template+0x268/0x320 [ 547.755485][T12653] ? __x64_sys_sendmsg+0x80/0x80 [ 547.760562][T12653] ? lockdep_hardirqs_on+0x94/0x140 [ 547.765847][T12653] do_syscall_64+0x4c/0xa0 [ 547.770335][T12653] ? clear_bhb_loop+0x60/0xb0 [ 547.775081][T12653] ? clear_bhb_loop+0x60/0xb0 [ 547.779848][T12653] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 547.785808][T12653] RIP: 0033:0x7fb88879de99 [ 547.790268][T12653] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 547.809912][T12653] RSP: 002b:00007fb88969f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 547.818381][T12653] RAX: ffffffffffffffda RBX: 00007fb888a25fa0 RCX: 00007fb88879de99 [ 547.826405][T12653] RDX: 0000000000000000 RSI: 0000200000003780 RDI: 0000000000000005 [ 547.834437][T12653] RBP: 00007fb88969f090 R08: 0000000000000000 R09: 0000000000000000 [ 547.842453][T12653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 547.850486][T12653] R13: 00007fb888a26038 R14: 00007fb888a25fa0 R15: 00007ffd328af938 [ 547.854314][T11004] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.858505][T12653] [ 547.865780][T11004] bridge0: port 1(bridge_slave_0) entered forwarding state [ 547.918595][T11004] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 547.951036][T11004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 547.979907][T11004] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 548.014036][T11004] bridge0: port 2(bridge_slave_1) entered blocking state [ 548.021257][T11004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 548.069548][T11004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 548.127909][T10997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 548.173983][T11004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 548.222834][T11004] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 548.270245][T11004] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 548.300733][T11004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 548.365439][T11004] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 548.402566][T11004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 548.450570][T11004] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 548.503300][T10999] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 548.526399][T10999] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 548.556805][T12400] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 549.161347][T12690] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3029'. [ 549.223474][T12690] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 549.842927][T12713] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3036'. [ 549.922628][T10997] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 549.958305][T10997] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 549.986412][T12400] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 550.080943][T10997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 550.100259][T10997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 550.184924][T10999] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 550.220945][T10999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 550.264443][T12400] device veth0_vlan entered promiscuous mode [ 550.288033][T10999] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 550.315769][T10999] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 550.362140][T12400] device veth1_vlan entered promiscuous mode [ 550.500949][T10999] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 550.526014][T10999] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 550.566476][T10999] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 550.609378][T10999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 550.678169][T12400] device veth0_macvtap entered promiscuous mode [ 550.741304][T12400] device veth1_macvtap entered promiscuous mode [ 550.873430][T12400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 550.914766][T12400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.948127][T12400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 550.990728][T12400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.034623][T12400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 551.078864][T12400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.118246][T12400] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 551.152389][T12400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 551.184470][T12400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.209040][T12400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 551.236339][T12400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.264273][T12400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 551.293673][T12400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.327098][T12400] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 551.353274][T10999] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 551.369043][T10999] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 551.399510][T10999] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 551.437363][T10999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 551.467834][T10999] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 551.495855][T10999] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 551.701971][T12732] netlink: 'syz.3.3040': attribute type 10 has an invalid length. [ 551.746885][T12400] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.793666][T12400] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.822947][T12400] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.853370][T12400] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.159789][T10995] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 552.211469][T10995] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 552.254327][T10997] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 552.444081][T10997] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 552.482097][T10997] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 552.582862][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 552.668189][T12750] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3044'. [ 552.714052][T12750] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 553.822491][T12770] netlink: 'syz.0.3048': attribute type 39 has an invalid length. [ 553.971503][T12773] FAULT_INJECTION: forcing a failure. [ 553.971503][T12773] name failslab, interval 1, probability 0, space 0, times 0 [ 554.025839][T12773] CPU: 0 PID: 12773 Comm: syz.1.3049 Not tainted syzkaller #0 [ 554.033382][T12773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 554.043572][T12773] Call Trace: [ 554.046893][T12773] [ 554.049885][T12773] dump_stack_lvl+0x188/0x24e [ 554.054628][T12773] ? show_regs_print_info+0x12/0x12 [ 554.059882][T12773] ? load_image+0x410/0x410 [ 554.064433][T12773] ? __might_sleep+0xd0/0xd0 [ 554.069062][T12773] ? __lock_acquire+0x7c40/0x7c40 [ 554.074158][T12773] should_fail_ex+0x390/0x4c0 [ 554.078897][T12773] should_failslab+0x5/0x20 [ 554.083439][T12773] slab_pre_alloc_hook+0x59/0x300 [ 554.088550][T12773] kmem_cache_alloc_node+0x5a/0x310 [ 554.093819][T12773] ? __alloc_skb+0xf9/0x7d0 [ 554.098427][T12773] __alloc_skb+0xf9/0x7d0 [ 554.102826][T12773] pfkey_sendmsg+0x19e/0x1140 [ 554.107602][T12773] ? perf_trace_preemptirq_template+0x268/0x320 [ 554.113902][T12773] ? irqentry_enter+0x33/0x50 [ 554.118633][T12773] ? pfkey_release+0x340/0x340 [ 554.123444][T12773] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 554.129569][T12773] ? lock_chain_count+0x20/0x20 [ 554.134476][T12773] ? rcu_is_watching+0x11/0xa0 [ 554.139426][T12773] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 554.145634][T12773] ? lockdep_hardirqs_on+0x94/0x140 [ 554.150878][T12773] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 554.157094][T12773] ? pfkey_release+0x340/0x340 [ 554.161914][T12773] ? pfkey_release+0x340/0x340 [ 554.166733][T12773] ____sys_sendmsg+0x5ed/0x9a0 [ 554.171561][T12773] ? __sys_sendmsg_sock+0x30/0x30 [ 554.176648][T12773] ? __import_iovec+0x306/0x510 [ 554.181561][T12773] ? import_iovec+0x6f/0xa0 [ 554.186122][T12773] ___sys_sendmsg+0x2a2/0x360 [ 554.190858][T12773] ? __sys_sendmsg+0x2a0/0x2a0 [ 554.195719][T12773] __se_sys_sendmsg+0x1c3/0x2b0 [ 554.200637][T12773] ? __x64_sys_sendmsg+0x80/0x80 [ 554.205651][T12773] do_syscall_64+0x4c/0xa0 [ 554.210124][T12773] ? clear_bhb_loop+0x60/0xb0 [ 554.214854][T12773] ? clear_bhb_loop+0x60/0xb0 [ 554.219601][T12773] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 554.225548][T12773] RIP: 0033:0x7fb88879de99 [ 554.230021][T12773] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 554.249717][T12773] RSP: 002b:00007fb88969f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 554.258196][T12773] RAX: ffffffffffffffda RBX: 00007fb888a25fa0 RCX: 00007fb88879de99 [ 554.266228][T12773] RDX: 0000000000000000 RSI: 0000200000003780 RDI: 0000000000000005 [ 554.274250][T12773] RBP: 00007fb88969f090 R08: 0000000000000000 R09: 0000000000000000 [ 554.282283][T12773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 554.290332][T12773] R13: 00007fb888a26038 R14: 00007fb888a25fa0 R15: 00007ffd328af938 [ 554.298378][T12773] [ 554.417926][T12401] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 554.434513][T12401] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 554.443825][T12401] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 554.463013][T12401] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 554.470846][T12401] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 554.478385][T12401] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 554.503903][T12770] device hsr_slave_1 left promiscuous mode [ 554.840272][T10999] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.144546][T10999] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.358470][T10999] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.615058][T12796] netlink: 'syz.0.3055': attribute type 22 has an invalid length. [ 555.634011][T12796] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3055'. [ 556.139717][T10999] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.579343][ T4289] Bluetooth: hci1: command 0x0409 tx timeout [ 556.869816][T10999] device 0 left promiscuous mode [ 557.088942][T12777] chnl_net:caif_netlink_parms(): no params data found [ 558.066237][T12834] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3064'. [ 558.109437][T12834] device hsr_slave_0 left promiscuous mode [ 558.653847][ T4289] Bluetooth: hci1: command 0x041b tx timeout [ 558.861894][T12777] bridge0: port 1(bridge_slave_0) entered blocking state [ 558.873926][T12777] bridge0: port 1(bridge_slave_0) entered disabled state [ 558.929051][T12855] netlink: 'syz.2.3067': attribute type 29 has an invalid length. [ 558.933067][T12777] device bridge_slave_0 entered promiscuous mode [ 558.988013][T12777] bridge0: port 2(bridge_slave_1) entered blocking state [ 559.026822][T12777] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.058153][T12777] device bridge_slave_1 entered promiscuous mode [ 559.152433][T12851] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.3067'. [ 559.264704][T12855] netlink: 'syz.2.3067': attribute type 29 has an invalid length. [ 559.318774][T12851] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 559.352605][T12851] CPU: 1 PID: 12851 Comm: syz.2.3067 Not tainted syzkaller #0 [ 559.360150][T12851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 559.370259][T12851] Call Trace: [ 559.373591][T12851] [ 559.376572][T12851] dump_stack_lvl+0x188/0x24e [ 559.381321][T12851] ? show_regs_print_info+0x12/0x12 [ 559.386591][T12851] ? load_image+0x410/0x410 [ 559.391173][T12851] sysfs_warn_dup+0x8a/0xa0 [ 559.395737][T12851] sysfs_do_create_link_sd+0xc0/0x110 [ 559.401183][T12851] device_add+0x83b/0x1050 [ 559.405699][T12851] wiphy_register+0x1d8b/0x2aa0 [ 559.410647][T12851] ? cfg80211_event_work+0x40/0x40 [ 559.415817][T12851] ? minstrel_ht_alloc+0x894/0xa20 [ 559.421021][T12851] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 559.427160][T12851] ieee80211_register_hw+0x2d48/0x39f0 [ 559.432702][T12851] ? ieee80211_register_hw+0xf61/0x39f0 [ 559.438305][T12851] ? ieee80211_register_hw+0xf61/0x39f0 [ 559.443950][T12851] ? ieee80211_tasklet_handler+0x20/0x20 [ 559.449641][T12851] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 559.455601][T12851] ? __debug_object_init+0xed/0x440 [ 559.460887][T12851] ? memset+0x1e/0x40 [ 559.464929][T12851] ? __hrtimer_init+0x189/0x270 [ 559.469849][T12851] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 559.475655][T12851] ? memcpy+0x3c/0x60 [ 559.479705][T12851] hwsim_new_radio_nl+0xab7/0xc90 [ 559.484820][T12851] genl_family_rcv_msg_doit+0x22f/0x350 [ 559.490432][T12851] ? end_current_label_crit_section+0x170/0x170 [ 559.496751][T12851] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 559.502731][T12851] ? bpf_lsm_capable+0x5/0x10 [ 559.507562][T12851] ? security_capable+0x85/0xb0 [ 559.512505][T12851] genl_rcv_msg+0x601/0x790 [ 559.517114][T12851] ? genl_bind+0x360/0x360 [ 559.521606][T12851] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 559.528049][T12851] netlink_rcv_skb+0x1ef/0x440 [ 559.532886][T12851] ? genl_bind+0x360/0x360 [ 559.537407][T12851] ? netlink_ack+0x1160/0x1160 [ 559.542282][T12851] ? down_read+0x1a8/0x2d0 [ 559.546761][T12851] genl_rcv+0x24/0x40 [ 559.550810][T12851] netlink_unicast+0x7ad/0x920 [ 559.555668][T12851] netlink_sendmsg+0x8ad/0xbd0 [ 559.560515][T12851] ? netlink_getsockopt+0x550/0x550 [ 559.565855][T12851] ? apparmor_socket_sendmsg+0x8a/0x330 [ 559.571463][T12851] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 559.576892][T12851] ? security_socket_sendmsg+0x7c/0xa0 [ 559.582405][T12851] ? netlink_getsockopt+0x550/0x550 [ 559.587676][T12851] ____sys_sendmsg+0x5ed/0x9a0 [ 559.592520][T12851] ? __sys_sendmsg_sock+0x30/0x30 [ 559.597688][T12851] ? __import_iovec+0x306/0x510 [ 559.602614][T12851] ? import_iovec+0x6f/0xa0 [ 559.607193][T12851] ___sys_sendmsg+0x2a2/0x360 [ 559.611941][T12851] ? __sys_sendmsg+0x2a0/0x2a0 [ 559.616856][T12851] __se_sys_sendmsg+0x1c3/0x2b0 [ 559.621774][T12851] ? __x64_sys_sendmsg+0x80/0x80 [ 559.626800][T12851] ? lockdep_hardirqs_on+0x94/0x140 [ 559.632059][T12851] do_syscall_64+0x4c/0xa0 [ 559.636529][T12851] ? clear_bhb_loop+0x60/0xb0 [ 559.641261][T12851] ? clear_bhb_loop+0x60/0xb0 [ 559.646000][T12851] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 559.651953][T12851] RIP: 0033:0x7f4b9d39de99 [ 559.656418][T12851] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 559.676082][T12851] RSP: 002b:00007f4b9e1d2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 559.684559][T12851] RAX: ffffffffffffffda RBX: 00007f4b9d625fa0 RCX: 00007f4b9d39de99 [ 559.692580][T12851] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 559.700657][T12851] RBP: 00007f4b9d433eaf R08: 0000000000000000 R09: 0000000000000000 [ 559.708683][T12851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 559.716736][T12851] R13: 00007f4b9d626038 R14: 00007f4b9d625fa0 R15: 00007fffc8b55718 [ 559.724793][T12851] [ 559.966002][T12857] netlink: 'syz.2.3067': attribute type 29 has an invalid length. [ 560.122976][T12777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 560.154469][T12867] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3070'. [ 560.723851][ T4289] Bluetooth: hci1: command 0x040f tx timeout [ 561.347769][T12777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 561.427677][T12878] device bridge_slave_1 left promiscuous mode [ 561.447572][T12878] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.756100][T12878] device bridge_slave_0 left promiscuous mode [ 561.762567][T12878] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.159564][T12777] team0: Port device team_slave_0 added [ 562.227592][T12898] netlink: 'syz.4.3077': attribute type 39 has an invalid length. [ 562.248737][T12777] team0: Port device team_slave_1 added [ 562.315149][T12903] FAULT_INJECTION: forcing a failure. [ 562.315149][T12903] name failslab, interval 1, probability 0, space 0, times 0 [ 562.367704][T12903] CPU: 0 PID: 12903 Comm: syz.0.3079 Not tainted syzkaller #0 [ 562.375236][T12903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 562.385337][T12903] Call Trace: [ 562.388659][T12903] [ 562.391635][T12903] dump_stack_lvl+0x188/0x24e [ 562.396383][T12903] ? show_regs_print_info+0x12/0x12 [ 562.401637][T12903] ? load_image+0x410/0x410 [ 562.406193][T12903] ? __lock_acquire+0x7c40/0x7c40 [ 562.411271][T12903] should_fail_ex+0x390/0x4c0 [ 562.416004][T12903] should_failslab+0x5/0x20 [ 562.420546][T12903] slab_pre_alloc_hook+0x59/0x300 [ 562.425615][T12903] ? verify_lock_unused+0x140/0x140 [ 562.430868][T12903] ? bpf_test_init+0x9f/0x140 [ 562.435581][T12903] __kmem_cache_alloc_node+0x4f/0x270 [ 562.440985][T12903] ? bpf_test_init+0x9f/0x140 [ 562.445683][T12903] __kmalloc+0xa3/0x240 [ 562.449876][T12903] bpf_test_init+0x9f/0x140 [ 562.454405][T12903] bpf_prog_test_run_xdp+0x488/0xf80 [ 562.459735][T12903] ? __lock_acquire+0x7c40/0x7c40 [ 562.464803][T12903] ? dev_put+0x80/0x80 [ 562.468901][T12903] ? dev_put+0x80/0x80 [ 562.472994][T12903] bpf_prog_test_run+0x31c/0x390 [ 562.477963][T12903] __sys_bpf+0x62b/0x780 [ 562.482236][T12903] ? bpf_link_show_fdinfo+0x380/0x380 [ 562.487664][T12903] ? lock_chain_count+0x20/0x20 [ 562.492568][T12903] __x64_sys_bpf+0x78/0x90 [ 562.497077][T12903] do_syscall_64+0x4c/0xa0 [ 562.501556][T12903] ? clear_bhb_loop+0x60/0xb0 [ 562.506342][T12903] ? clear_bhb_loop+0x60/0xb0 [ 562.511064][T12903] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 562.517134][T12903] RIP: 0033:0x7f9fb799de99 [ 562.521599][T12903] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 562.541238][T12903] RSP: 002b:00007f9fb8905028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 562.549697][T12903] RAX: ffffffffffffffda RBX: 00007f9fb7c25fa0 RCX: 00007f9fb799de99 [ 562.557709][T12903] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 562.565716][T12903] RBP: 00007f9fb8905090 R08: 0000000000000000 R09: 0000000000000000 [ 562.573737][T12903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 562.581740][T12903] R13: 00007f9fb7c26038 R14: 00007f9fb7c25fa0 R15: 00007ffeddfdbf08 [ 562.589764][T12903] [ 562.654577][T12777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 562.661813][T12777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 562.807744][T12777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 562.859736][T12777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 562.874251][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.880680][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.882216][ T4289] Bluetooth: hci1: command 0x0419 tx timeout [ 562.924014][T12777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 562.950513][T12777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 563.094315][T12777] device hsr_slave_0 entered promiscuous mode [ 563.115849][T12777] device hsr_slave_1 entered promiscuous mode [ 564.470632][T12950] : port 1(ip6gretap0) entered blocking state [ 564.494130][T12950] : port 1(ip6gretap0) entered disabled state [ 564.530271][T12950] device ip6gretap0 entered promiscuous mode [ 564.626655][T10999] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 564.642424][T10999] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 565.416400][T10999] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 565.435559][T10999] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 565.558184][T12970] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.3093'. [ 565.569568][T10999] device veth1_vlan left promiscuous mode [ 565.580062][T10999] device veth0_vlan left promiscuous mode [ 565.821005][T12975] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.3093'. [ 566.731902][T10999] team0 (unregistering): Port device team_slave_1 removed [ 566.798923][T10999] team0 (unregistering): Port device team_slave_0 removed [ 566.860888][T10999] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 566.933416][T10999] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 567.334641][T10999] bond0 (unregistering): Released all slaves [ 567.387461][T12951] device ip6gretap0 left promiscuous mode [ 567.394185][T12951] : port 1(ip6gretap0) entered disabled state [ 567.416144][T12970] netlink: 'syz.2.3093': attribute type 20 has an invalid length. [ 567.434001][T12972] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3092'. [ 567.443084][T12973] IPv6: NLM_F_CREATE should be specified when creating new route [ 567.464143][T12973] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3093'. [ 567.491822][T12978] netlink: 'syz.2.3093': attribute type 2 has an invalid length. [ 567.543974][T12978] netlink: 'syz.2.3093': attribute type 8 has an invalid length. [ 567.552408][T12978] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3093'. [ 568.175082][T12777] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 568.231720][T12777] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 568.265359][T12777] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 568.346965][T12777] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 568.694284][T12777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 568.756119][T11004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 568.774128][T11004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 568.819238][T12777] 8021q: adding VLAN 0 to HW filter on device team0 [ 568.831413][T13010] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3103'. [ 568.848645][T11004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 568.867749][T11004] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 568.885149][T11004] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.892328][T11004] bridge0: port 1(bridge_slave_0) entered forwarding state [ 568.939589][T11004] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 568.958771][T11004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 568.975626][T11004] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 568.999231][T11004] bridge0: port 2(bridge_slave_1) entered blocking state [ 569.006509][T11004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 569.032886][T11004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 569.101822][T11004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 569.149953][T11004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 569.182046][T11004] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 569.239589][T11004] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 569.260008][T11004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 569.320757][T11004] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 569.374256][T11004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 569.415323][T11004] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 569.467347][T13033] FAULT_INJECTION: forcing a failure. [ 569.467347][T13033] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 569.509919][T12777] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 569.542166][T12777] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 569.552095][T13033] CPU: 0 PID: 13033 Comm: syz.0.3104 Not tainted syzkaller #0 [ 569.559681][T13033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 569.569783][T13033] Call Trace: [ 569.573140][T13033] [ 569.576113][T13033] dump_stack_lvl+0x188/0x24e [ 569.576244][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 569.580839][T13033] ? show_regs_print_info+0x12/0x12 [ 569.580879][T13033] ? load_image+0x410/0x410 [ 569.598462][T13033] ? __might_fault+0xa6/0x120 [ 569.603288][T13033] should_fail_ex+0x390/0x4c0 [ 569.608025][T13033] copyin+0x1b/0x120 [ 569.611982][T13033] _copy_from_iter+0x447/0x1130 [ 569.615937][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 569.616882][T13033] ? copyout_mc+0x110/0x110 [ 569.616914][T13033] ? __virt_addr_valid+0x188/0x540 [ 569.634342][T13033] ? __virt_addr_valid+0x188/0x540 [ 569.639523][T13033] ? __virt_addr_valid+0x467/0x540 [ 569.644696][T13033] ? __phys_addr_symbol+0x2b/0x70 [ 569.649806][T13033] ? __check_object_size+0x4f6/0xa70 [ 569.655155][T13033] pfkey_sendmsg+0x1f9/0x1140 [ 569.659882][T13033] ? perf_trace_preemptirq_template+0x268/0x320 [ 569.666204][T13033] ? pfkey_release+0x340/0x340 [ 569.670995][T13033] ? aa_sk_perm+0x81f/0x950 [ 569.675690][T13033] ? rcu_is_watching+0x11/0xa0 [ 569.680489][T13033] ? aa_af_perm+0x340/0x340 [ 569.685032][T13033] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 569.691226][T13033] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 569.697678][T13033] ? aa_sock_msg_perm+0x94/0x150 [ 569.702654][T13033] ? apparmor_socket_sendmsg+0x8a/0x330 [ 569.708243][T13033] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 569.713565][T13033] ? security_socket_sendmsg+0x7c/0xa0 [ 569.719066][T13033] ? pfkey_release+0x340/0x340 [ 569.723868][T13033] ____sys_sendmsg+0x5ed/0x9a0 [ 569.728673][T13033] ? __sys_sendmsg_sock+0x30/0x30 [ 569.733727][T13033] ? __import_iovec+0x306/0x510 [ 569.738625][T13033] ? import_iovec+0x6f/0xa0 [ 569.743166][T13033] ___sys_sendmsg+0x2a2/0x360 [ 569.747889][T13033] ? __fget_files+0x28/0x460 [ 569.752515][T13033] ? __sys_sendmsg+0x2a0/0x2a0 [ 569.757321][T13033] ? ktime_get+0x7b/0x270 [ 569.761702][T13033] __se_sys_sendmsg+0x1c3/0x2b0 [ 569.766599][T13033] ? perf_trace_preemptirq_template+0x268/0x320 [ 569.772879][T13033] ? __x64_sys_sendmsg+0x80/0x80 [ 569.777866][T13033] ? lockdep_hardirqs_on+0x94/0x140 [ 569.783090][T13033] do_syscall_64+0x4c/0xa0 [ 569.787538][T13033] ? clear_bhb_loop+0x60/0xb0 [ 569.792243][T13033] ? clear_bhb_loop+0x60/0xb0 [ 569.796951][T13033] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 569.802877][T13033] RIP: 0033:0x7f9fb799de99 [ 569.807318][T13033] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 569.827037][T13033] RSP: 002b:00007f9fb8905028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 569.835490][T13033] RAX: ffffffffffffffda RBX: 00007f9fb7c25fa0 RCX: 00007f9fb799de99 [ 569.843489][T13033] RDX: 0000000000000000 RSI: 0000200000003780 RDI: 0000000000000005 [ 569.851487][T13033] RBP: 00007f9fb8905090 R08: 0000000000000000 R09: 0000000000000000 [ 569.859487][T13033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 569.867490][T13033] R13: 00007f9fb7c26038 R14: 00007f9fb7c25fa0 R15: 00007ffeddfdbf08 [ 569.875496][T13033] [ 570.437516][T13051] netlink: 'syz.1.3108': attribute type 39 has an invalid length. [ 571.115175][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 571.147398][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 571.589059][T12777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 571.604627][T13067] netlink: 'syz.1.3113': attribute type 10 has an invalid length. [ 571.674890][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 571.700331][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 571.762546][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 571.785269][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 571.829878][T12777] device veth0_vlan entered promiscuous mode [ 571.850288][T12777] device veth1_vlan entered promiscuous mode [ 571.990751][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 572.015221][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 572.050837][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 572.076620][T13073] netlink: 'syz.1.3113': attribute type 19 has an invalid length. [ 572.088143][T13073] netlink: 14552 bytes leftover after parsing attributes in process `syz.1.3113'. [ 572.123840][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 572.152378][T10999] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 572.191461][T10999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 572.239098][T12777] device veth0_macvtap entered promiscuous mode [ 572.274341][T12777] device veth1_macvtap entered promiscuous mode [ 572.354676][T12777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 572.374416][T12777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.391154][T12777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 572.402130][T12777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.412610][T12777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 572.423835][T12777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.439815][T12777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 572.467845][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 572.496817][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 572.531633][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 572.579814][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 572.614466][T12777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 572.654162][T12777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.667291][T12777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 572.678305][T12777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.688757][T12777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 572.699725][T12777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.711977][T12777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 572.721373][T10995] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 572.764542][T10995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 572.809986][T12777] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.849869][T12777] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.897813][T12777] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.922575][T12777] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.961317][T13101] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3122'. [ 573.268303][T11002] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 573.292349][T11002] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 573.416011][T11002] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 573.476261][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 573.503769][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 573.512051][T11002] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 574.098589][T13115] device bridge_slave_1 left promiscuous mode [ 574.123904][T13115] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.135372][T13115] device bridge_slave_0 left promiscuous mode [ 574.141690][T13115] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.342820][T13124] FAULT_INJECTION: forcing a failure. [ 574.342820][T13124] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 574.379886][T13124] CPU: 0 PID: 13124 Comm: syz.0.3130 Not tainted syzkaller #0 [ 574.387428][T13124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 574.397617][T13124] Call Trace: [ 574.400940][T13124] [ 574.403910][T13124] dump_stack_lvl+0x188/0x24e [ 574.408644][T13124] ? show_regs_print_info+0x12/0x12 [ 574.414073][T13124] ? load_image+0x410/0x410 [ 574.418632][T13124] ? __lock_acquire+0x7c40/0x7c40 [ 574.423709][T13124] should_fail_ex+0x390/0x4c0 [ 574.428443][T13124] _copy_from_user+0x2c/0x170 [ 574.433164][T13124] ___sys_sendmsg+0x1c3/0x360 [ 574.437939][T13124] ? __sys_sendmsg+0x2a0/0x2a0 [ 574.442767][T13124] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 574.448825][T13124] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 574.455042][T13124] ? lockdep_hardirqs_on+0x94/0x140 [ 574.460298][T13124] ? __se_sys_sendmsg+0xee/0x2b0 [ 574.465303][T13124] ? kasan_check_range+0x8a/0x290 [ 574.470406][T13124] __se_sys_sendmsg+0x1c3/0x2b0 [ 574.475315][T13124] ? perf_trace_preemptirq_template+0x268/0x320 [ 574.481624][T13124] ? __x64_sys_sendmsg+0x80/0x80 [ 574.486640][T13124] ? lockdep_hardirqs_on+0x94/0x140 [ 574.491893][T13124] do_syscall_64+0x4c/0xa0 [ 574.496354][T13124] ? clear_bhb_loop+0x60/0xb0 [ 574.501116][T13124] ? clear_bhb_loop+0x60/0xb0 [ 574.505853][T13124] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 574.511796][T13124] RIP: 0033:0x7f9fb799de99 [ 574.516253][T13124] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 574.535990][T13124] RSP: 002b:00007f9fb8905028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 574.544460][T13124] RAX: ffffffffffffffda RBX: 00007f9fb7c25fa0 RCX: 00007f9fb799de99 [ 574.552478][T13124] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000005 [ 574.560496][T13124] RBP: 00007f9fb8905090 R08: 0000000000000000 R09: 0000000000000000 [ 574.568505][T13124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 574.576512][T13124] R13: 00007f9fb7c26038 R14: 00007f9fb7c25fa0 R15: 00007ffeddfdbf08 [ 574.584541][T13124] [ 575.006297][ T4289] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 575.018771][ T4289] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 575.029461][ T4289] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 575.047294][ T4289] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 575.056573][ T4289] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 575.064680][ T4289] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 575.295035][ T4271] bond0: (slave syz_tun): Releasing backup interface [ 575.435544][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.620563][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.829716][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.867609][T13153] netlink: 'syz.3.3140': attribute type 22 has an invalid length. [ 575.881637][T13153] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3140'. [ 576.100142][T13157] ================================================================== [ 576.108319][T13157] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6c9/0x920 [ 576.116183][T13157] Write of size 80 at addr ffff88807d188290 by task syz.1.3141/13157 [ 576.124302][T13157] [ 576.126657][T13157] CPU: 0 PID: 13157 Comm: syz.1.3141 Not tainted syzkaller #0 [ 576.134158][T13157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 576.144258][T13157] Call Trace: [ 576.147588][T13157] [ 576.150553][T13157] dump_stack_lvl+0x188/0x24e [ 576.155277][T13157] ? __lock_acquire+0x7c40/0x7c40 [ 576.160342][T13157] ? show_regs_print_info+0x12/0x12 [ 576.165566][T13157] ? load_image+0x410/0x410 [ 576.170096][T13157] ? __virt_addr_valid+0x467/0x540 [ 576.175260][T13157] ? __bpf_get_stackid+0x6c9/0x920 [ 576.180397][T13157] print_report+0xa8/0x210 [ 576.184867][T13157] kasan_report+0x10b/0x140 [ 576.189401][T13157] ? __bpf_get_stackid+0x6c9/0x920 [ 576.194547][T13157] kasan_check_range+0x235/0x290 [ 576.199527][T13157] ? __bpf_get_stackid+0x6c9/0x920 [ 576.204657][T13157] memcpy+0x3c/0x60 [ 576.208485][T13157] __bpf_get_stackid+0x6c9/0x920 [ 576.213450][T13157] bpf_get_stackid_pe+0x33f/0x400 [ 576.218504][T13157] bpf_prog_7018bb76bd3f7f7a+0x28/0x3d [ 576.223980][T13157] bpf_overflow_handler+0x50b/0x790 [ 576.229230][T13157] ? bpf_overflow_handler+0xd9/0x790 [ 576.234542][T13157] ? perf_swevent_overflow+0x230/0x230 [ 576.240021][T13157] ? __perf_event_account_interrupt+0x187/0x280 [ 576.246297][T13157] __perf_event_overflow+0x457/0x630 [ 576.251613][T13157] ? perf_swevent_event+0x1d5/0x570 [ 576.256845][T13157] perf_swevent_event+0x315/0x570 [ 576.261904][T13157] ? perf_tp_event+0xc10/0xc10 [ 576.266698][T13157] ___perf_sw_event+0x498/0x6d0 [ 576.271599][T13157] ? ___perf_sw_event+0x184/0x6d0 [ 576.276678][T13157] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 576.283137][T13157] ? mark_lock+0x94/0x320 [ 576.287512][T13157] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 576.293523][T13157] ? lock_chain_count+0x20/0x20 [ 576.298403][T13157] __perf_sw_event+0x135/0x260 [ 576.303211][T13157] do_user_addr_fault+0x497/0xb20 [ 576.308268][T13157] ? trace_hardirqs_off_finish+0x86/0x180 [ 576.314016][T13157] exc_page_fault+0x60/0x100 [ 576.318634][T13157] asm_exc_page_fault+0x22/0x30 [ 576.323510][T13157] RIP: 0010:copy_user_enhanced_fast_string+0xa/0x40 [ 576.330133][T13157] Code: ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 8d 0c ca 89 ca eb 20 0f 01 cb 83 fa 40 72 38 89 d1 a4 31 c0 0f 01 ca c3 89 ca eb 0a 90 90 90 90 90 90 90 90 90 90 [ 576.349774][T13157] RSP: 0018:ffffc90004407788 EFLAGS: 00050206 [ 576.355876][T13157] RAX: ffffffff84133c01 RBX: 0000000000033fe0 RCX: 0000000000032020 [ 576.363877][T13157] RDX: 0000000000033fe0 RSI: 0000200000002000 RDI: ffffc90004652fc0 [ 576.371880][T13157] RBP: 0000000000000000 R08: ffffc90004684fdf R09: 1ffff920008d09fb [ 576.379879][T13157] R10: dffffc0000000000 R11: fffff520008d09fc R12: 00007ffffffcb020 [ 576.387876][T13157] R13: 0000000000000000 R14: 0000200000000040 R15: ffffc90004651000 [ 576.395968][T13157] ? _copy_from_iter+0x1121/0x1130 [ 576.401128][T13157] copyin+0xe7/0x120 [ 576.405074][T13157] _copy_from_iter+0x447/0x1130 [ 576.409965][T13157] ? copyout_mc+0x110/0x110 [ 576.414501][T13157] ? do_raw_spin_unlock+0x11d/0x230 [ 576.419722][T13157] ? _raw_spin_unlock+0x24/0x40 [ 576.424590][T13157] ? find_vmap_area+0xf8/0x110 [ 576.429458][T13157] ? __phys_addr_symbol+0x2b/0x70 [ 576.434508][T13157] ? __check_object_size+0x4f6/0xa70 [ 576.439817][T13157] netlink_sendmsg+0x755/0xbd0 [ 576.444618][T13157] ? netlink_getsockopt+0x550/0x550 [ 576.449848][T13157] ? apparmor_socket_sendmsg+0x8a/0x330 [ 576.455423][T13157] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 576.460757][T13157] ? security_socket_sendmsg+0x7c/0xa0 [ 576.466254][T13157] ? netlink_getsockopt+0x550/0x550 [ 576.471503][T13157] ____sys_sendmsg+0x5ed/0x9a0 [ 576.476309][T13157] ? __sys_sendmsg_sock+0x30/0x30 [ 576.481367][T13157] ? __import_iovec+0x306/0x510 [ 576.486254][T13157] ? import_iovec+0x6f/0xa0 [ 576.490783][T13157] ___sys_sendmsg+0x2a2/0x360 [ 576.495498][T13157] ? __sys_sendmsg+0x2a0/0x2a0 [ 576.500307][T13157] __se_sys_sendmsg+0x1c3/0x2b0 [ 576.505189][T13157] ? __x64_sys_sendmsg+0x80/0x80 [ 576.510170][T13157] ? lockdep_hardirqs_on+0x94/0x140 [ 576.515395][T13157] do_syscall_64+0x4c/0xa0 [ 576.519840][T13157] ? clear_bhb_loop+0x60/0xb0 [ 576.524547][T13157] ? clear_bhb_loop+0x60/0xb0 [ 576.529270][T13157] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 576.535200][T13157] RIP: 0033:0x7fb88879de99 [ 576.539652][T13157] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 576.559290][T13157] RSP: 002b:00007fb88969f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 576.567725][T13157] RAX: ffffffffffffffda RBX: 00007fb888a25fa0 RCX: 00007fb88879de99 [ 576.575722][T13157] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 576.583713][T13157] RBP: 00007fb888833eaf R08: 0000000000000000 R09: 0000000000000000 [ 576.591704][T13157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 576.599694][T13157] R13: 00007fb888a26038 R14: 00007fb888a25fa0 R15: 00007ffd328af938 [ 576.607695][T13157] [ 576.610733][T13157] [ 576.613072][T13157] Allocated by task 13157: [ 576.617504][T13157] kasan_set_track+0x4b/0x70 [ 576.622123][T13157] __kasan_kmalloc+0x8e/0xa0 [ 576.626742][T13157] __kmalloc_node+0xb2/0x240 [ 576.631359][T13157] bpf_map_area_alloc+0x47/0xe0 [ 576.636235][T13157] prealloc_elems_and_freelist+0x86/0x1c0 [ 576.641974][T13157] stack_map_alloc+0x386/0x510 [ 576.646759][T13157] map_create+0x524/0xff0 [ 576.651114][T13157] __sys_bpf+0x38b/0x780 [ 576.655385][T13157] __x64_sys_bpf+0x78/0x90 [ 576.659823][T13157] do_syscall_64+0x4c/0xa0 [ 576.664261][T13157] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 576.670172][T13157] [ 576.672513][T13157] Last potentially related work creation: [ 576.678242][T13157] kasan_save_stack+0x3a/0x60 [ 576.682945][T13157] __kasan_record_aux_stack+0xb2/0xc0 [ 576.688331][T13157] kvfree_call_rcu+0x103/0x890 [ 576.693120][T13157] trie_update_elem+0x9a8/0xdd0 [ 576.698099][T13157] bpf_map_update_value+0x59d/0x670 [ 576.703324][T13157] generic_map_update_batch+0x52e/0x7f0 [ 576.708893][T13157] bpf_map_do_batch+0x475/0x5f0 [ 576.713773][T13157] __sys_bpf+0x6f7/0x780 [ 576.718038][T13157] __x64_sys_bpf+0x78/0x90 [ 576.722471][T13157] do_syscall_64+0x4c/0xa0 [ 576.726922][T13157] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 576.732838][T13157] [ 576.735183][T13157] The buggy address belongs to the object at ffff88807d188280 [ 576.735183][T13157] which belongs to the cache kmalloc-cg-64 of size 64 [ 576.749340][T13157] The buggy address is located 16 bytes inside of [ 576.749340][T13157] 64-byte region [ffff88807d188280, ffff88807d1882c0) [ 576.762457][T13157] [ 576.764799][T13157] The buggy address belongs to the physical page: [ 576.771295][T13157] page:ffffea0001f46200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7d188 [ 576.781461][T13157] memcg:ffff88807f4f0601 [ 576.785712][T13157] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 576.793286][T13157] raw: 00fff00000000200 ffffea0001f91f80 dead000000000002 ffff888017442780 [ 576.801885][T13157] raw: 0000000000000000 0000000080200020 00000001ffffffff ffff88807f4f0601 [ 576.810477][T13157] page dumped because: kasan: bad access detected [ 576.816910][T13157] page_owner tracks the page as allocated [ 576.822637][T13157] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 4272, tgid 4272 (syz-executor), ts 87920184420, free_ts 87602174920 [ 576.840888][T13157] post_alloc_hook+0x173/0x1a0 [ 576.845678][T13157] get_page_from_freelist+0x206b/0x2180 [ 576.851246][T13157] __alloc_pages+0x1ec/0x4f0 [ 576.855861][T13157] alloc_slab_page+0x5d/0x180 [ 576.860562][T13157] new_slab+0x87/0x2d0 [ 576.864831][T13157] ___slab_alloc+0xbc5/0x1240 [ 576.869525][T13157] __kmem_cache_alloc_node+0x126/0x270 [ 576.875010][T13157] __kmalloc_node+0xa2/0x240 [ 576.879629][T13157] kvmalloc_node+0x6c/0x180 [ 576.884162][T13157] nf_hook_entries_grow+0x31a/0x760 [ 576.889381][T13157] nf_hook_entries_insert_raw+0x47/0x300 [ 576.895033][T13157] nf_nat_register_fn+0x1c0/0x530 [ 576.900147][T13157] ip6table_nat_table_init+0xcf/0x2c0 [ 576.905570][T13157] xt_find_table_lock+0x220/0x360 [ 576.910672][T13157] xt_request_find_table_lock+0x22/0x100 [ 576.916323][T13157] do_ip6t_get_ctl+0x5e8/0x11c0 [ 576.921194][T13157] page last free stack trace: [ 576.925875][T13157] free_unref_page_prepare+0x8e5/0x9e0 [ 576.931363][T13157] free_unref_page_list+0xbb/0x8e0 [ 576.936497][T13157] release_pages+0x20d1/0x2340 [ 576.941350][T13157] tlb_flush_mmu+0x105/0x220 [ 576.945969][T13157] tlb_finish_mmu+0xf0/0x220 [ 576.950584][T13157] exit_mmap+0x388/0x970 [ 576.954855][T13157] __mmput+0x118/0x3a0 [ 576.958986][T13157] exit_mm+0x24d/0x350 [ 576.963110][T13157] do_exit+0x958/0x2570 [ 576.967293][T13157] do_group_exit+0x229/0x2e0 [ 576.971913][T13157] get_signal+0x1259/0x1340 [ 576.976494][T13157] arch_do_signal_or_restart+0xc4/0x1310 [ 576.982180][T13157] exit_to_user_mode_loop+0x70/0x110 [ 576.987525][T13157] exit_to_user_mode_prepare+0xee/0x180 [ 576.993129][T13157] syscall_exit_to_user_mode+0x16/0x40 [ 576.998611][T13157] do_syscall_64+0x58/0xa0 [ 577.003055][T13157] [ 577.005424][T13157] Memory state around the buggy address: [ 577.011065][T13157] ffff88807d188180: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 577.019142][T13157] ffff88807d188200: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 577.027217][T13157] >ffff88807d188280: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 577.035288][T13157] ^ [ 577.040666][T13157] ffff88807d188300: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 577.048737][T13157] ffff88807d188380: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 577.056814][T13157] ================================================================== [ 577.064901][T13157] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 577.072138][T13157] CPU: 0 PID: 13157 Comm: syz.1.3141 Not tainted syzkaller #0 [ 577.079619][T13157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 577.089689][T13157] Call Trace: [ 577.092985][T13157] [ 577.095955][T13157] dump_stack_lvl+0x188/0x24e [ 577.100659][T13157] ? memcpy+0x3c/0x60 [ 577.104669][T13157] ? show_regs_print_info+0x12/0x12 [ 577.109889][T13157] ? load_image+0x410/0x410 [ 577.114421][T13157] panic+0x2d3/0x710 [ 577.118339][T13157] ? bpf_jit_dump+0xd0/0xd0 [ 577.122860][T13157] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 577.128774][T13157] ? _raw_spin_unlock+0x40/0x40 [ 577.133644][T13157] ? print_memory_metadata+0x314/0x400 [ 577.139121][T13157] check_panic_on_warn+0x80/0xa0 [ 577.144083][T13157] ? __bpf_get_stackid+0x6c9/0x920 [ 577.149217][T13157] end_report+0x66/0x110 [ 577.153487][T13157] kasan_report+0x118/0x140 [ 577.158017][T13157] ? __bpf_get_stackid+0x6c9/0x920 [ 577.163153][T13157] kasan_check_range+0x235/0x290 [ 577.168220][T13157] ? __bpf_get_stackid+0x6c9/0x920 [ 577.173358][T13157] memcpy+0x3c/0x60 [ 577.177213][T13157] __bpf_get_stackid+0x6c9/0x920 [ 577.182189][T13157] bpf_get_stackid_pe+0x33f/0x400 [ 577.187243][T13157] bpf_prog_7018bb76bd3f7f7a+0x28/0x3d [ 577.192720][T13157] bpf_overflow_handler+0x50b/0x790 [ 577.197978][T13157] ? bpf_overflow_handler+0xd9/0x790 [ 577.203288][T13157] ? perf_swevent_overflow+0x230/0x230 [ 577.208778][T13157] ? __perf_event_account_interrupt+0x187/0x280 [ 577.215044][T13157] __perf_event_overflow+0x457/0x630 [ 577.220368][T13157] ? perf_swevent_event+0x1d5/0x570 [ 577.225594][T13157] perf_swevent_event+0x315/0x570 [ 577.230653][T13157] ? perf_tp_event+0xc10/0xc10 [ 577.235449][T13157] ___perf_sw_event+0x498/0x6d0 [ 577.240328][T13157] ? ___perf_sw_event+0x184/0x6d0 [ 577.245373][T13157] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 577.251815][T13157] ? mark_lock+0x94/0x320 [ 577.256183][T13157] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 577.262187][T13157] ? lock_chain_count+0x20/0x20 [ 577.267080][T13157] __perf_sw_event+0x135/0x260 [ 577.272482][T13157] do_user_addr_fault+0x497/0xb20 [ 577.277544][T13157] ? trace_hardirqs_off_finish+0x86/0x180 [ 577.283294][T13157] exc_page_fault+0x60/0x100 [ 577.287910][T13157] asm_exc_page_fault+0x22/0x30 [ 577.292784][T13157] RIP: 0010:copy_user_enhanced_fast_string+0xa/0x40 [ 577.299397][T13157] Code: ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 8d 0c ca 89 ca eb 20 0f 01 cb 83 fa 40 72 38 89 d1 a4 31 c0 0f 01 ca c3 89 ca eb 0a 90 90 90 90 90 90 90 90 90 90 [ 577.319022][T13157] RSP: 0018:ffffc90004407788 EFLAGS: 00050206 [ 577.325112][T13157] RAX: ffffffff84133c01 RBX: 0000000000033fe0 RCX: 0000000000032020 [ 577.333277][T13157] RDX: 0000000000033fe0 RSI: 0000200000002000 RDI: ffffc90004652fc0 [ 577.341275][T13157] RBP: 0000000000000000 R08: ffffc90004684fdf R09: 1ffff920008d09fb [ 577.349263][T13157] R10: dffffc0000000000 R11: fffff520008d09fc R12: 00007ffffffcb020 [ 577.357255][T13157] R13: 0000000000000000 R14: 0000200000000040 R15: ffffc90004651000 [ 577.365254][T13157] ? _copy_from_iter+0x1121/0x1130 [ 577.370400][T13157] copyin+0xe7/0x120 [ 577.374319][T13157] _copy_from_iter+0x447/0x1130 [ 577.379225][T13157] ? copyout_mc+0x110/0x110 [ 577.383767][T13157] ? do_raw_spin_unlock+0x11d/0x230 [ 577.389000][T13157] ? _raw_spin_unlock+0x24/0x40 [ 577.393887][T13157] ? find_vmap_area+0xf8/0x110 [ 577.398683][T13157] ? __phys_addr_symbol+0x2b/0x70 [ 577.403750][T13157] ? __check_object_size+0x4f6/0xa70 [ 577.409071][T13157] netlink_sendmsg+0x755/0xbd0 [ 577.413875][T13157] ? netlink_getsockopt+0x550/0x550 [ 577.419109][T13157] ? apparmor_socket_sendmsg+0x8a/0x330 [ 577.424691][T13157] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 577.429998][T13157] ? security_socket_sendmsg+0x7c/0xa0 [ 577.435486][T13157] ? netlink_getsockopt+0x550/0x550 [ 577.440714][T13157] ____sys_sendmsg+0x5ed/0x9a0 [ 577.445508][T13157] ? __sys_sendmsg_sock+0x30/0x30 [ 577.450555][T13157] ? __import_iovec+0x306/0x510 [ 577.455440][T13157] ? import_iovec+0x6f/0xa0 [ 577.460008][T13157] ___sys_sendmsg+0x2a2/0x360 [ 577.464715][T13157] ? __sys_sendmsg+0x2a0/0x2a0 [ 577.469542][T13157] __se_sys_sendmsg+0x1c3/0x2b0 [ 577.474418][T13157] ? __x64_sys_sendmsg+0x80/0x80 [ 577.479391][T13157] ? lockdep_hardirqs_on+0x94/0x140 [ 577.484607][T13157] do_syscall_64+0x4c/0xa0 [ 577.489068][T13157] ? clear_bhb_loop+0x60/0xb0 [ 577.493784][T13157] ? clear_bhb_loop+0x60/0xb0 [ 577.498495][T13157] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 577.504433][T13157] RIP: 0033:0x7fb88879de99 [ 577.508872][T13157] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 577.528515][T13157] RSP: 002b:00007fb88969f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 577.536952][T13157] RAX: ffffffffffffffda RBX: 00007fb888a25fa0 RCX: 00007fb88879de99 [ 577.544942][T13157] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 577.552934][T13157] RBP: 00007fb888833eaf R08: 0000000000000000 R09: 0000000000000000 [ 577.560926][T13157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 577.568960][T13157] R13: 00007fb888a26038 R14: 00007fb888a25fa0 R15: 00007ffd328af938 [ 577.576985][T13157] [ 577.580201][T13157] Kernel Offset: disabled [ 577.584544][T13157] Rebooting in 86400 seconds..