last executing test programs: 6.504047851s ago: executing program 2 (id=1893): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000400700000000000001000084060000000000000001"], 0x0, 0x42}, 0x20) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8cd2bb9f04693392, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000040)={'wlan1\x00', @random="8dffffffffff"}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000340)=@o_path={&(0x7f0000000300)='./file0\x00', 0x0, 0x0, r0}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x6, '\x00', 0x0, r0, 0x0, 0x1, 0x1}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="9feb010018000000000000000c0013000c000000020000000000000000000004000000000000eb9ef3418ebb6cc6f5331bc2f5630d248a2f097364d6c90cb7a1c1d6976f0ba274fd2fa8223afa067d1da5a8a884ab253a1d6576bd6c59b06a97074f1f5fe276d970b79b1e"], 0x0, 0x26}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000004c0)={0x3e}, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x4156, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffc, 0x1}, 0x18404, 0x0, 0xfffffffe, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x2, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b08d25a80648c7494f90224fc605800024004000400050082c137153e3719ac018015ac1720d1bd", 0x33fe0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400000000000}, 0x0, 0xfff, 0x0, 0x0, 0xf60}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x30a) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @random="ada68a2f96c6"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r3}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="df94b55b40d3aab6", @ANYRESOCT=r2], &(0x7f0000000500)=""/246, 0x26, 0xf6, 0x80000081, 0x2}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000380)={0x400}, 0x8) 5.845931s ago: executing program 3 (id=1898): socket$kcm(0x2, 0x3, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x88) socketpair(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x4, 0x4, 0xe02}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x14, 0x4, 0x4, 0x201}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r1, 0x0}, 0x20) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) 4.424112005s ago: executing program 3 (id=1903): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYRES32=0x0], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x14, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000001500000018010000716c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000001000", 0x0, 0x2e00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (fail_nth: 1) 3.875668945s ago: executing program 0 (id=1907): bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000180)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4'], 0xa) 3.864057966s ago: executing program 3 (id=1908): r0 = bpf$MAP_CREATE(0x0, 0x0, 0xfc32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000740)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x7, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x326d, 0xe2, &(0x7f0000000380)=""/226, 0x40f00, 0x20, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000780)={0x1, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000840)=[{0x0, 0x2, 0x0, 0x1}, {0x3, 0x3, 0x9, 0x2}, {0x1, 0x5, 0x0, 0x8}, {0x2, 0x5, 0xd, 0x5}], 0x10, 0x924}, 0x94) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x1a, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) mkdir(&(0x7f0000000340)='./file0\x00', 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$kcm(0x29, 0x2, 0x0) r4 = socket$kcm(0x2b, 0x1, 0x0) close(r4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x7, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r5 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r5, 0x0, 0x40) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x3, 0x2, &(0x7f0000000040)={0x0, 0x0}) close(r6) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000000)) close(r4) socketpair$unix(0x1, 0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r9 = openat$cgroup_devices(r8, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r9, &(0x7f0000000000)={'a', ' *:* ', 'w\x00'}, 0x8) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x12, &(0x7f0000000f00)=r3, 0x4) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) syz_clone(0x28000080, 0x0, 0x23, 0x0, 0x0, 0x0) 3.600607755s ago: executing program 2 (id=1911): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xa, &(0x7f0000000180), 0x4) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40021103) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000), 0x97, 0x0, 0x5, 0x3}, 0x28) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000001640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x1, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x5f, 0x5f]}}, &(0x7f00000002c0)=""/4096, 0x28, 0x1000, 0x1}, 0x28) r2 = socket$kcm(0x15, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x114, 0x3, 0x0, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0x66c}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x2d) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000c4c9ccbed892e27f89e9606a7c6905c4e8454f41387a60a7168696b287ffe3755f3a227ae0397dc00e7ed09147c88749fd665f8b53c0a2aa9ddb3d91bb7a73920360b27a706ccaaa8207542642d334fa11f489d25518431ba1790ad08ff47d9e3f314f44731c0a3d8d9e90a9259dc17661bfa842b027d4e86cad60be83b8094e2e27463ec448267e8e2fc6af8b3637561747739162b58d71bc86c455919772c71a4a5e01c85751734656f54e7f8476bafe5dbb2dabe762f90f8445f0f4e8621b48f97bda2d88f4585246a1", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r3, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r4, @ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d80000001e0081054e81f782db4cb9040a1d080006007c095dd2086518000a800d00000003600e1208000f0000000406a80016c0080009", 0x37}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x7, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001540)=ANY=[@ANYBLOB="1e0f31e705347e8f9c35f1c55ab4220ce84f34dfe8d05c2c006d7f4b7a71f6cc6c431e846547000000860000000300c9332d4f493f30aa3748f7d164e4739ce3b523d3a5af60ba2e70becc6064407715ddb7436dd61cb0648ad6ebec085b2a5e5ad0f574380f388a27b04f4433127b5bd7161e400779726b32ab", @ANYRES32=0x1, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="0200000003000000000000000d00"/28], 0x50) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0x10, r0}, 0x18) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@o_path={0x0}, 0x18) socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000014c0)={0x1b, 0x0, 0x0, 0x5dc, 0x0, r6, 0x6, '\x00', 0x0, r0, 0x4, 0x1, 0x2}, 0x50) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001880), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000001000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r7 = socket$kcm(0x10, 0x3, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00-\x00Y'], 0xfe33) 3.599121655s ago: executing program 0 (id=1913): socket$kcm(0x2, 0x3, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x88) socketpair(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x4, 0x4, 0xe02}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x14, 0x4, 0x4, 0x201}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r1, 0x0}, 0x20) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) 2.951996103s ago: executing program 3 (id=1914): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000005600000000000000ffffffff00"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0, 0xffffffffffffffff}, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f00000004c0)={0x0, r0}, 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x1e, &(0x7f0000001240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000350be0fe000000008520000002000000b7080000000000007b8af8ff00000000b7080000050000007b8af0ff00000000bfa15babeaebea14e7d30000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000001140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000003c0)="b87477f89781570f77386d1929eb", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000011c0)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) r4 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r4, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x4e20, @multicast2}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)}, 0x0) close(r3) ioctl$SIOCSIFHWADDR(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="8d00230c1100"}) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x4, 0x18, &(0x7f0000000400)=ANY=[@ANYBLOB="85100000feffffff85100000fbffffff18490000080000000000000000000000852000000200000018000000ff03000000000000e9e90000b7080000000000007b8af8ff00000000b70800002e0a00007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000184a000387897cc19edf530000000000185400000e00"/56], &(0x7f0000000180)='syzkaller\x00', 0x2572, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x18, r3, 0x8, &(0x7f0000000500)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000540)={0x4, 0x8, 0x7, 0x8}, 0x10, 0xffffffffffffffff, r2, 0x2, 0x0, &(0x7f0000000580)=[{0x4, 0x5, 0x0, 0xa}, {0x40000, 0x1, 0xd}], 0x10, 0x4}, 0x94) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r5, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="650a0000ffffffff6111640000000010180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000680)='\x00') socket$kcm(0x2a, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x42, &(0x7f0000000040), 0x3b) 2.552684332s ago: executing program 2 (id=1915): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000280)=@framed={{}, [@printk={@i, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41}, 0x5}}, 0x80, 0x0, 0x0, &(0x7f0000000940)=ANY=[@ANYRES64, @ANYRESDEC, @ANYRESOCT, @ANYRESHEX, @ANYRES16, @ANYRES16, @ANYRES64], 0x1458}, 0x48800) r2 = gettid() r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@base={0xb, 0x5a4, 0x2, 0xd72, 0x100, 0xffffffffffffffff, 0x4, '\x00', 0x0, r1, 0x0, 0x0, 0x2}, 0x50) r4 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000005c0), 0x2, 0x0) r5 = getpid() r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000002140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='initcall_start\x00', r6}, 0x10) r8 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r8, r7, 0x0, 0x1, &(0x7f00000001c0)='\x00'}, 0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r9, &(0x7f0000000440)={&(0x7f0000000200), 0x6e, &(0x7f0000000080)=[{&(0x7f0000000340)=""/69, 0x45}, {&(0x7f00000003c0)=""/127, 0x7f}, {&(0x7f0000000540)=""/197, 0xc5}, {&(0x7f0000000640)=""/90, 0x5a}], 0x4, &(0x7f0000000280)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}], 0x20}, 0x40022122) socketpair(0xa, 0x3, 0xff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r13 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r13, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r13, &(0x7f00000001c0)={&(0x7f00000000c0)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41}, 0x5}}, 0x80, 0x0, 0x0, &(0x7f0000000940)=ANY=[@ANYRES64, @ANYRESDEC=r9, @ANYRESOCT=r12, @ANYRESHEX=r12, @ANYRES16=r10, @ANYRES16=r11, @ANYRES64=r10], 0x1458}, 0x48800) r14 = syz_clone(0x8080000, &(0x7f0000000c80)="48864943c439f2df81a83baeebb6344c6f5e40005bc9d15aba7046", 0x1b, &(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)="50184b8a5553378bdaa24882a39c864c572df41679fada5c62356b69a050f7cd68dd27127b4f505f58702f610e5c756d867c5a46f01328d7246ed00ada84566059964618b4795f064643c5bfe64eebf8f76f69f858eb03aef6689255e8b428113b556220006307b7900db2c9d3441b1f901f1186") r15 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000dc0)='syz1\x00', 0x200002, 0x0) r16 = syz_clone(0x3000080, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000780), &(0x7f0000000940)="1c5717854a9932652c2cab82b82e630fa80c87b515bf") bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000a00)={r16, 0xffffffffffffffff, 0x0, 0x4, &(0x7f00000007c0)='GPL\x00'}, 0x30) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000300)="5b89f4fda1a31811bc8670ba1b8242f51b53467f9c53487c9a6da4906f8731e67046c5860a07852065c55a1457ff9f5fbaeca09c9f115c77cb9d71d9b61a40d3cd56cfacf840159aed7f9568b8e2491f27f36e787dd3b60651ad151bf05b1988897963821f1bd5ffd5f61e842cd5315d579c899d0672effc246d444d72f4f79794b245c2da95d13335300ccd6109ceab94627cd9aa5049c1dc440a737679dd9ede826c057292d588075f9d4a60b42996f2b75ccba6530b26885f43d16ee8655b1f99b8b3c2", 0xc5}, {&(0x7f0000000080)="754771bd0fdd20d5fe262170dc84d333059f8e41b7e764efcccd046dada1ee7c82c1323ce0d4", 0x26}, {&(0x7f00000006c0)="bc3f485d9b70c001744894c976f2a367c85bd8e8f6c89d6b5a97ef39fc43e0176eadca080a56f242b6b4a885df4a0e8826d90461fa4e463c2160558f88361dd967f2346dcef76b464ab3847a45cfbee95baeed81b077013cc6668f8f0c647d85a592f09d77f161a395a9a7c6bdc805a77089bf1cf9f5a5a24699d4d915eaeaec4a077d6708955a20601d39cff9bb22e9de22ee0d", 0x94}, {&(0x7f00000008c0)="873349aa35a6a5baad7210c0f1734be1c1eaa389e1adf97e924d09e188b1947cbd1e513be572aa654d2efd6adc9c45b09b265336e1fc955dc190a9cfb7006afc03f3902fb8dbc4d827727bd854759452797aa56c8552d0ac36ccb18f803307478d1d2c3da3a3ac8d1f17c69ea2922b7a8c64bba4279bedad2c56dfbf7494ca34a178ab7f4adf5bf08d920a19280327bb2574e7986d3e684991e60c6c3a691a492db9a8", 0xa3}, {&(0x7f0000000980)="59cdf7fc3cc58c9ab9bb31077aec55e4abdefe3f4bc5362c7eeacf7c600f90b3e8119c6a0c39da99090347af63964ac8d2bf0679a23493b588aee8144fc52908b2e359edef251364758f1246d7095c0bfb5a30b2d01184ed29fa1f7b7475396f58760f897ac10069bd1940f90cffc5757a72117d1e0801060e386057535b6b2acc217200c687b43eb7e52ad3394197fefb34deb1b01c85b19b1ba7b9aa7f0c135aedf94a2d", 0xa5}, {&(0x7f0000000a40)="fd8f6947400224af73598b6c35566d25a9ca838648067554fe640eb3a55be0caf4e48b9791a2b781418b0f8b1c3831781b33d929ae1c585132df658922861280ba5294e4491968b03b7a894645cdfc1e299d029631f7758e13666fb256e9f10d9c1fe9bcfa5f35f694269afb69ea677b173c7c64445ac0fdee409b3d88a960a7ed805f1711298683574fd9f743f430a236755ede9e9d938da8e92eb444aa3ee9a7ca649cbcd5", 0xa6}, {&(0x7f00000000c0)="3a0a32f1512061abb1b1739c67929328d5c222e73ee0", 0x16}, {&(0x7f0000000200)="45d2ffefba082e41d2be77fc71776bfae0a7899c0b2af2ff17a36dbb7ff268b1ce0afe1918342f7492fbc0e380aae35a2cc4a7135781e8e77fe52e18251b0bbb7bc4f37a78c73543cc1b393af4904984c3b3f276a9c96a21cb9b2d26cab9076ab4260f29b36fd290b217942d0d7446", 0x6f}], 0x8, &(0x7f0000000e00)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r2, 0xffffffffffffffff, 0xee00}}}, @rights={{0x18, 0x1, 0x1, [r1, r0]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x2c, 0x1, 0x1, [r1, r3, r1, r1, r4, r1, r1]}}, @cred={{0x1c, 0x1, 0x2, {r5, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r8, 0x0, r10}}}, @cred={{0x1c, 0x1, 0x2, {r14, 0xee01, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [r0, r0, r15, r1, r1, r1]}}, @cred={{0x1c, 0x1, 0x2, {r16, 0x0, 0xffffffffffffffff}}}], 0x148, 0x24000044}, 0x40) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000a0000000000000a07000000080000000000000b0400000009000000010000130c00000007"], 0x0, 0x4a, 0x0, 0x1, 0x800, 0x10000}, 0x28) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22041800"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r17 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r17, 0x5, 0x1, 0x0, &(0x7f0000000000)="e6", 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2.543291073s ago: executing program 0 (id=1916): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12000000030000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)}, 0x20) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2, 0x2, 0x73) setsockopt$sock_attach_bpf(r3, 0x0, 0x17, 0x0, 0x0) 2.480071188s ago: executing program 1 (id=1917): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000085000000080000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x4, 0xd4, &(0x7f0000000040)=""/212, 0x0, 0x28}, 0x94) r3 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYRES16=0x0], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"/16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x6, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181014100000000010000000000000e000a000f00000002800200121f", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0, 0x0, 0x900}, 0x60) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x81, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) socket$kcm(0x11, 0x3, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="16000000000000000400000002000000e0000000", @ANYRES32, @ANYBLOB="00000000005c1000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r9) syz_clone(0x20346480, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f90724fc6004000b000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x74000000}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000000480)=r1, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@cgroup, 0x1d, 0x0, 0x2, &(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0]}, 0x40) 2.18863625s ago: executing program 3 (id=1919): r0 = socket$kcm(0x2a, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x480, 0x0, 0xc2ba, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x8905, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000178500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x541b, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000140)=@framed, &(0x7f0000000180)='GPL\x00'}, 0x80) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0xe, &(0x7f0000000840)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xc}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}], &(0x7f0000000080)='GPL\x00', 0x2, 0x9a, &(0x7f0000000180)=""/154, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x90) 2.187334419s ago: executing program 0 (id=1920): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x0, 0x0, 0x19e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000009000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200001400dd94b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0xa, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904021d080005000300e8fe55a1180015000600142603600e120900210000000401a80016000a00014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xfffffffffffffff8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x410000, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffc) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000240)={0x2, 0x80, 0x7, 0xc9, 0x7, 0x0, 0x0, 0x6, 0x80a00, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000200), 0x4}, 0x8100, 0xfffffffffffffffe, 0x1b, 0x9, 0x9, 0xa, 0x3, 0x0, 0x1, 0x0, 0xd6}) r3 = gettid() r4 = perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0xf1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x21108, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x5, @perf_config_ext={0x2, 0x9}, 0x104101, 0x0, 0x0, 0x1, 0x200002, 0x1, 0x2, 0x0, 0x80000000, 0x0, 0xfffffffffffff7fe}, r3, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[@ANYRESOCT=r4, @ANYRESOCT=r5], 0xfe33) 2.108001485s ago: executing program 4 (id=1921): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x1, 0x20, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x8, 0x7, 0xb, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000038410511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a00018025641d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) 1.828066826s ago: executing program 4 (id=1922): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000efccac519cbfd9820000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x10, &(0x7f0000000000), 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r1}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e01f3440cee51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cad32b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337602d3e5a815232f5e16c1b30c3a6abc85018e5ff2c91018afc9ffc2cc788bee1b47683db012469398685211dfbbae3e2ed0a50e7393bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d300006aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7af22e30d46a9d26d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977fb536a9caab37d9ac4cfc1c7b400000000000007ffc826b956ba859ac8e3c177b91bd7d5e41ff83ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d000069a16203a967c1bbe09315c29877a308bcc87dc3addb08142bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8240000e3428d2129369ee1b85af9ffffff0d0df414b315f651c8412392191fa83ee830548f11be359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92000000000f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb74d4ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905de328c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a978ee56c83a3466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342e0eaf6f330e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea95ec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf81700cd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be3827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f969369de47422604e2fc5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293b6c833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b612272d40f522d8c98c879aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbe71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd46dbd61627a2e0a74b5e6aefb7eee403502734137ff47a57f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a125e3af1130d66a7b66837ae7e7123dde7404a067ad0a6a2d6bec9411b61cad4121be3c72ff3a04713042253d438e7becf8120de3895b8ce974958bde39cb8da3427a2e9e2de936431e67fed5ab5684db07de39083d8948cc4c8a2608100000000000000000000aecb8b0b7941088f971ce17427eec32a012295cc0cdd32955176b6ad5a4bb953e58ccfa9428f452cfb5a48a9fda26db3985c8be3c2f99827da074825b01c4a3a71fb59d5798100000000000000c76b05a45d2dd8c20d971e2f3e4369168f5cb83d6ff3a18733fec726034fbfa95624135bee374414b2c8c61f52357a520efd6a10aff244bc8a62ed367981fb4d5d77f7bc093958ff46527499957da4934cd4b370cf76f72dd05fa80cdfb68c836fd81be7a58532e041a87f9222f157610a4bcdc05b2a55308c8e7568b90f7a338557e816a16972aea79dff5becefa6f9c5ce6c58fb38da9e7532dc53cfdc2e789b76f7d32aca1bfea2aa62621b78dded30fc07171866bf3d552900000000a32dda61eeda1750e157c2d569b9d08f583c0ee28daec2e8bb85f3c8e91c4448096ee953def18dc73e55cb30f9cd069d8780b00eaba382f0c3ae391c30a5f1b0f36dd0c2193b791995d2890327a10d7abac76d1202f72e97f0105184d7aaaab8d3e29c9a8d263f076b55cf53c5bb9c0662a3d19a6722d7f83ae4331d3256f90af0857788b380ccc3b266c418e66d1d756d5df6423dd0cea67bc235d3776d22270fc19301ead09f156893e91a8322e39d998cf95eceb2afdff4674575ff6a3fac0bce5ba929d717204966a8e2438b257ffb4e17d3ee539a8ad0081395046f1b2df9d3d104bbe930e810776f0bcb1c81f8b337352e47c323508157daf8ab0d057d4d87da8ad14225f77d1d4bc353054c7af3c0c2226944e45ddb2b94e801fd5f00e61fd1783f9e9bd01506c734de5945028a9d48dc3eadc4b49f840ab44eac469cca98", @ANYRESHEX, @ANYRES64=r2], &(0x7f0000000040)='syzkaller\x00', 0x0, 0xfebc, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5c, 0x0, 0xffffffffffffffff, 0xffffffffffffff7f}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff00124000632f77fbac14fe16e000030a07080403fe80000020006558845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0x24, 0x60000000}, 0x2c) r4 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x3, 0x0, 0x10000}, {0x10000002, 0x0, 0x0, 0x9}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) close(r4) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10, 0x0}, 0x10) socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x6e, &(0x7f0000000000)=r7, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r8, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r9, &(0x7f0000000000)='<', &(0x7f0000000040)=""/74}, 0x20) r10 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)=@tipc=@nameseq={0x1e, 0x1, 0x2, {0x2, 0x2, 0x2}}, 0x80, 0x0}, 0x4000) sendmsg$kcm(r10, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) recvmsg(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000040), 0x60}, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.799114368s ago: executing program 0 (id=1923): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0xff, 0x0, 0x0, 0x0, 0x20008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x2, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) (rerun: 64) close(r0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfd, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e0000007b008188040f46ecdb4cb9cca7480ef43c000000e3bd6efb440009000e000a0010000000ba8000001201", 0x2e}], 0x1}, 0x0) (async, rerun: 32) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') (rerun: 32) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={r0}, 0x4) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$kcm(0x2, 0x1000000000000002, 0x0) (async, rerun: 32) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) (async, rerun: 64) r3 = socket$kcm(0x2c, 0x3, 0x0) (rerun: 64) setsockopt$sock_attach_bpf(r3, 0x11b, 0x4, 0x0, 0x0) (async) r4 = socket$kcm(0xa, 0x5, 0x0) (async, rerun: 64) r5 = socket$kcm(0xa, 0x5, 0x0) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000e8ffffffffffff05000000", @ANYRES32=0x1], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x8916, &(0x7f0000000000)={r5}) (async, rerun: 64) r6 = socket$kcm(0xa, 0x5, 0x0) (rerun: 64) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x8916, &(0x7f0000000000)={r6}) (async) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x8936, &(0x7f0000000000)={r5}) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000640)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0xa) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r8 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r7, 0x4) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={0xffffffffffffffff, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r8, 0x4) 1.685886806s ago: executing program 3 (id=1924): socket$kcm(0x2, 0x0, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x14, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e488a8637286dd"], 0xb2) 1.604153432s ago: executing program 1 (id=1925): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xa, &(0x7f0000000180), 0x4) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40021103) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000), 0x97, 0x0, 0x5, 0x3}, 0x28) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000001640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x1, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x5f, 0x5f]}}, &(0x7f00000002c0)=""/4096, 0x28, 0x1000, 0x1}, 0x28) r2 = socket$kcm(0x15, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x114, 0x3, 0x0, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0x66c}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x2d) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000c4c9ccbed892e27f89e9606a7c6905c4e8454f41387a60a7168696b287ffe3755f3a227ae0397dc00e7ed09147c88749fd665f8b53c0a2aa9ddb3d91bb7a73920360b27a706ccaaa8207542642d334fa11f489d25518431ba1790ad08ff47d9e3f314f44731c0a3d8d9e90a9259dc17661bfa842b027d4e86cad60be83b8094e2e27463ec448267e8e2fc6af8b3637561747739162b58d71bc86c455919772c71a4a5e01c85751734656f54e7f8476bafe5dbb2dabe762f90f8445f0f4e8621b48f97bda2d88f4585246a1", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r3, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r4, @ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d80000001e0081054e81f782db4cb9040a1d080006007c095dd2086518000a800d00000003600e1208000f0000000406a80016c0080009", 0x37}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x7, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001540)=ANY=[@ANYBLOB="1e0f31e705347e8f9c35f1c55ab4220ce84f34dfe8d05c2c006d7f4b7a71f6cc6c431e846547000000860000000300c9332d4f493f30aa3748f7d164e4739ce3b523d3a5af60ba2e70becc6064407715ddb7436dd61cb0648ad6ebec085b2a5e5ad0f574380f388a27b04f4433127b5bd7161e400779726b32ab", @ANYRES32=0x1, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="0200000003000000000000000d00"/28], 0x50) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0x10, r0}, 0x18) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@o_path={0x0}, 0x18) socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000014c0)={0x1b, 0x0, 0x0, 0x5dc, 0x0, r6, 0x6, '\x00', 0x0, r0, 0x4, 0x1, 0x2}, 0x50) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001880), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000001000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r7 = socket$kcm(0x10, 0x3, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00-\x00Y'], 0xfe33) 1.520799418s ago: executing program 0 (id=1926): socket$kcm(0x2, 0x3, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x88) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x4, 0x4, 0xe02}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x14, 0x4, 0x4, 0x201}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r1, 0x0}, 0x20) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) 1.478936902s ago: executing program 2 (id=1927): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}, [@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf}}, @ldst={0x0, 0x0, 0x0, 0x8, 0x6, 0x40, 0xffffffffffffffff}]}, &(0x7f0000000300)='syzkaller\x00'}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r3 = getpid() perf_event_open(&(0x7f0000000240)={0x4, 0x80, 0x80, 0x68, 0x8, 0x4, 0x0, 0x6, 0x2, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000200), 0x1}, 0x410, 0x7fffffff, 0x3, 0x6, 0x6, 0xfffffff8, 0x4576, 0x0, 0x3}, r3, 0x9, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1a, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r2, 0x8b1b, &(0x7f0000000000)={'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}) 1.342150162s ago: executing program 1 (id=1928): bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x13, &(0x7f0000000400)=ANY=[@ANYBLOB="18030000001e000000000000000000001801000011af000000000000002020207b1af8ff0000000000a100000000000007010000f8ffffffb702000008000000d5030000020000838500b3642964600aa7870000202075200acdb20c5bfbd5a87d948f8efe070e63403f1f4b51dc1a50e292f18c840ce73b44e201cb6c25c9536905da11a4ddb44431faffb40d1aee7c75d4e002aac708218d8d77c5930aed08196760686d9f94b945944d6294800541ca2b8b830266ee9f877a0438e37b0e8075b74fea0817e5144ad668145bad0561a441a6a80a07c93b470bb9256a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r3, 0x0, 0x0}, 0x20) ioctl$SIOCSIFHWADDR(r2, 0x8b26, &(0x7f0000000280)={'wlan1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, 0x0, 0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r5, 0x0, 0x3000c085) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r7, 0x84, 0x14, &(0x7f0000000000), 0x4) write$cgroup_subtree(r6, 0x0, 0xfe33) recvmsg(r6, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000000000}, 0x0, 0x0, 0x0, 0x0, 0xf60, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f00000000c0)=r10, 0x4) sendmsg$unix(r9, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8894}, 0x0) 923.996152ms ago: executing program 2 (id=1929): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000005600000000000000ffffffff00"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0, 0xffffffffffffffff}, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f00000004c0)={0x0, r0}, 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x1e, &(0x7f0000001240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000350be0fe000000008520000002000000b7080000000000007b8af8ff00000000b7080000050000007b8af0ff00000000bfa15babeaebea14e7d30000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000001140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000003c0)="b87477f89781570f77386d1929eb", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000011c0)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) r4 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r4, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x4e20, @multicast2}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)}, 0x0) close(r3) ioctl$SIOCSIFHWADDR(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="8d00230c1100"}) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x4, 0x18, &(0x7f0000000400)=ANY=[@ANYBLOB="85100000feffffff85100000fbffffff18490000080000000000000000000000852000000200000018000000ff03000000000000e9e90000b7080000000000007b8af8ff00000000b70800002e0a00007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000184a000387897cc19edf530000000000185400000e00"/56], &(0x7f0000000180)='syzkaller\x00', 0x2572, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x18, r3, 0x8, &(0x7f0000000500)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000540)={0x4, 0x8, 0x7, 0x8}, 0x10, 0xffffffffffffffff, r2, 0x2, 0x0, &(0x7f0000000580)=[{0x4, 0x5, 0x0, 0xa}, {0x40000, 0x1, 0xd}], 0x10, 0x4}, 0x94) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r5, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="650a0000ffffffff6111640000000010180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000680)='\x00') socket$kcm(0x2a, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x42, &(0x7f0000000040), 0x3b) 829.46051ms ago: executing program 1 (id=1930): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12000000030000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)}, 0x20) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2, 0x2, 0x73) setsockopt$sock_attach_bpf(r3, 0x0, 0x17, 0x0, 0x0) 816.00556ms ago: executing program 4 (id=1931): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x109628, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) (async) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x8, 0x2}, 0x80, &(0x7f0000002540)=[{&(0x7f0000000100)='b', 0x1}], 0x1}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80296, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x17, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7ffff}, 0x2, 0xf, 0xffff8000, 0x2, 0x0, 0xfffffffd, 0x0, 0x0, 0x80000001, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x80000) (async) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x2) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) (async) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) (async) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x38) setsockopt$sock_attach_bpf(r1, 0x84, 0x9, &(0x7f00000001c0), 0x4) (async) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003505d25a806f8c6394f97e24fc60", 0x14}], 0x1, 0x0, 0x0, 0x74000000}, 0x10) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000100)=r2, 0x4) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) sendmsg$kcm(0xffffffffffffffff, 0x0, 0xe53d095caacafea) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x8902, 0x7ffffffff000) 601.563586ms ago: executing program 2 (id=1932): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0xc000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x3d, 0x0, 0x1, 0x20}, {0x4d}]}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) close(r0) openat$cgroup_freezer_state(r2, &(0x7f00000000c0), 0x2, 0x0) 527.479202ms ago: executing program 1 (id=1933): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$kcm(0x10, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x0, 0x0, 0x19e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000009000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400dd94b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') 456.140107ms ago: executing program 4 (id=1934): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)=""/30, 0x1e}, {&(0x7f0000000200)=""/151, 0x97}], 0x2, &(0x7f0000000540)=""/211, 0xd3}, 0x80000102) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xc29a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0}, 0x94) socket$kcm(0x29, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xf7ffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000020000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f00000008c0)='fib6_table_lookup\x00', r1}, 0x10) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f00000003c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000100)="b7", 0x1}], 0x1}, 0x40080c0) 163.460068ms ago: executing program 4 (id=1935): r0 = socket$kcm(0x2a, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x480, 0x0, 0xc2ba, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x8905, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000178500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x541b, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000140)=@framed, &(0x7f0000000180)='GPL\x00'}, 0x80) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0xe, &(0x7f0000000840)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xc}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}], &(0x7f0000000080)='GPL\x00', 0x2, 0x9a, &(0x7f0000000180)=""/154, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x90) 108.289193ms ago: executing program 1 (id=1936): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000940)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x7, 0x4, 0x100, 0x4, 0x20, 0x1, 0x40000000}, 0x50) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x2, 0x73) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100808, 0x0, 0x400, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000240)=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0xfd60, &(0x7f0000000580)="b9ff03076804d773000000100000", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50) 0s ago: executing program 4 (id=1937): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc29a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x23, 0x0, 0x0) recvmsg$unix(r0, &(0x7f0000002500)={0x0, 0x2a, 0x0, 0x0, 0xfffffffffffffffd, 0x1000000}, 0x0) sendmsg$inet(r1, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x2063) sendmsg$inet(0xffffffffffffffff, 0x0, 0x80) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4051) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2122) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000095"], &(0x7f0000000000)='GPL\x00', 0x2000000, 0xffffffffffffffd9, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x59f00000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x80000000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs$namespace(0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfe33) socket$kcm(0x2, 0x3, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000002000000000000000000001304000000000000000100000500110000000000000300000000000000000000000000000901"], 0x0, 0x4a}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b00000006000000ef4f00001f0000008b2db91d", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) kernel console output (not intermixed with test programs): 53] ? __fget_files+0x28/0x4d0 [ 264.226362][ T7253] ? __fget_files+0x44a/0x4d0 [ 264.231182][ T7253] ? __fdget_pos+0x2ae/0x360 [ 264.235844][ T7253] ? ksys_read+0x71/0x240 [ 264.240262][ T7253] ksys_read+0x143/0x240 [ 264.244601][ T7253] ? vfs_write+0x960/0x960 [ 264.249119][ T7253] ? lockdep_hardirqs_on+0x94/0x140 [ 264.254406][ T7253] do_syscall_64+0x4c/0xa0 [ 264.258886][ T7253] ? clear_bhb_loop+0x60/0xb0 [ 264.263624][ T7253] ? clear_bhb_loop+0x60/0xb0 [ 264.268410][ T7253] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 264.274365][ T7253] RIP: 0033:0x7fc43c98e15c [ 264.278849][ T7253] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 264.298612][ T7253] RSP: 002b:00007fc43d898030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 264.307102][ T7253] RAX: ffffffffffffffda RBX: 00007fc43cbe5fa0 RCX: 00007fc43c98e15c [ 264.315145][ T7253] RDX: 000000000000000f RSI: 00007fc43d8980a0 RDI: 0000000000000006 [ 264.323179][ T7253] RBP: 00007fc43d898090 R08: 0000000000000000 R09: 0000000000000000 [ 264.331213][ T7253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 264.339249][ T7253] R13: 00007fc43cbe6038 R14: 00007fc43cbe5fa0 R15: 00007ffc59f1a578 [ 264.347382][ T7253] [ 264.370603][ T7254] netlink: 'syz.3.950': attribute type 10 has an invalid length. [ 264.394291][ T7262] sctp: [Deprecated]: syz.0.948 (pid 7262) Use of int in max_burst socket option deprecated. [ 264.394291][ T7262] Use struct sctp_assoc_value instead [ 264.398281][ T7254] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.950'. [ 265.029148][ T7282] netlink: 'syz.1.959': attribute type 3 has an invalid length. [ 265.045750][ T7282] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.959'. [ 265.249422][ T7288] bridge0: port 3(team0) entered disabled state [ 265.256236][ T7288] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.264145][ T7288] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.390246][ T7291] netlink: 'syz.4.961': attribute type 1 has an invalid length. [ 265.554464][ T7285] bridge0: port 3(team0) entered disabled state [ 265.842386][ T7285] device bridge_slave_1 left promiscuous mode [ 265.849234][ T7285] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.859764][ T7285] device bridge_slave_0 left promiscuous mode [ 265.866231][ T7285] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.264203][ T7308] netlink: 'syz.4.967': attribute type 10 has an invalid length. [ 266.272380][ T7308] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.967'. [ 266.550174][ T7314] sctp: [Deprecated]: syz.4.971 (pid 7314) Use of int in max_burst socket option deprecated. [ 266.550174][ T7314] Use struct sctp_assoc_value instead [ 266.861307][ T7321] netlink: 'syz.3.973': attribute type 3 has an invalid length. [ 266.907343][ T7321] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.973'. [ 267.260733][ T7332] netlink: 'syz.3.976': attribute type 1 has an invalid length. [ 267.468342][ T7335] device ipvlan1 entered promiscuous mode [ 269.212868][ T7373] netlink: 'syz.0.989': attribute type 3 has an invalid length. [ 269.229094][ T7373] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.989'. [ 271.131419][ T7420] netlink: 'syz.1.1005': attribute type 3 has an invalid length. [ 271.194797][ T7420] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1005'. [ 271.311430][ T7425] netlink: 'syz.2.1007': attribute type 21 has an invalid length. [ 271.334360][ T7425] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1007'. [ 272.280768][ T7441] netlink: 'syz.1.1011': attribute type 10 has an invalid length. [ 272.332213][ T7441] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.1011'. [ 273.756058][ T7473] netlink: 'syz.1.1023': attribute type 3 has an invalid length. [ 273.830075][ T7473] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1023'. [ 274.115529][ T7484] netlink: 'syz.3.1026': attribute type 10 has an invalid length. [ 274.134225][ T7484] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.1026'. [ 274.454407][ T7495] FAULT_INJECTION: forcing a failure. [ 274.454407][ T7495] name failslab, interval 1, probability 0, space 0, times 0 [ 274.519906][ T7495] CPU: 1 PID: 7495 Comm: syz.3.1032 Not tainted syzkaller #0 [ 274.527406][ T7495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 274.537528][ T7495] Call Trace: [ 274.540849][ T7495] [ 274.543819][ T7495] dump_stack_lvl+0x168/0x22e [ 274.548558][ T7495] ? show_regs_print_info+0x12/0x12 [ 274.553818][ T7495] ? load_image+0x3b0/0x3b0 [ 274.558375][ T7495] ? __might_sleep+0xd0/0xd0 [ 274.563033][ T7495] ? __lock_acquire+0x7c50/0x7c50 [ 274.568119][ T7495] should_fail_ex+0x399/0x4d0 [ 274.572868][ T7495] should_failslab+0x5/0x20 [ 274.577514][ T7495] slab_pre_alloc_hook+0x59/0x310 [ 274.582592][ T7495] ? bpf_prog_test_run_skb+0x22b/0x11b0 [ 274.588206][ T7495] __kmem_cache_alloc_node+0x4f/0x260 [ 274.593634][ T7495] ? bpf_prog_test_run_skb+0x22b/0x11b0 [ 274.599229][ T7495] __kmalloc+0xa0/0x240 [ 274.603436][ T7495] bpf_prog_test_run_skb+0x22b/0x11b0 [ 274.608861][ T7495] ? __fget_files+0x28/0x4d0 [ 274.613506][ T7495] ? __fget_files+0x44a/0x4d0 [ 274.618243][ T7495] ? cpu_online+0xa0/0xa0 [ 274.622619][ T7495] bpf_prog_test_run+0x31e/0x390 [ 274.627608][ T7495] __sys_bpf+0x593/0x6d0 [ 274.631893][ T7495] ? bpf_link_show_fdinfo+0x340/0x340 [ 274.637308][ T7495] ? lock_chain_count+0x20/0x20 [ 274.642195][ T7495] __x64_sys_bpf+0x78/0x90 [ 274.646642][ T7495] do_syscall_64+0x4c/0xa0 [ 274.651110][ T7495] ? clear_bhb_loop+0x60/0xb0 [ 274.655811][ T7495] ? clear_bhb_loop+0x60/0xb0 [ 274.660512][ T7495] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 274.666428][ T7495] RIP: 0033:0x7f66f898f749 [ 274.670867][ T7495] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 274.690502][ T7495] RSP: 002b:00007f66f6bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 274.698953][ T7495] RAX: ffffffffffffffda RBX: 00007f66f8be5fa0 RCX: 00007f66f898f749 [ 274.706972][ T7495] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 274.715004][ T7495] RBP: 00007f66f6bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 274.723106][ T7495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 274.731102][ T7495] R13: 00007f66f8be6038 R14: 00007f66f8be5fa0 R15: 00007fff79fe45f8 [ 274.739110][ T7495] [ 274.919087][ T7503] netlink: 'syz.1.1035': attribute type 3 has an invalid length. [ 274.926935][ T7503] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1035'. [ 275.122063][ T7513] netlink: 'syz.2.1040': attribute type 3 has an invalid length. [ 275.147238][ T7513] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1040'. [ 275.326813][ T7521] netlink: 'syz.1.1042': attribute type 10 has an invalid length. [ 275.357068][ T7521] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.1042'. [ 275.563748][ T7532] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1043'. [ 276.250524][ T7551] netlink: 'syz.2.1054': attribute type 3 has an invalid length. [ 276.287330][ T7551] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1054'. [ 276.493433][ T7560] netlink: 'syz.0.1056': attribute type 10 has an invalid length. [ 276.525554][ T7560] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.1056'. [ 276.569182][ T7562] netlink: 'syz.4.1058': attribute type 29 has an invalid length. [ 276.634069][ T7562] netlink: 'syz.4.1058': attribute type 29 has an invalid length. [ 276.646335][ T7566] netlink: 'syz.4.1058': attribute type 29 has an invalid length. [ 276.690538][ T7562] netlink: 'syz.4.1058': attribute type 29 has an invalid length. [ 276.752136][ T7562] netlink: 'syz.4.1058': attribute type 29 has an invalid length. [ 278.182449][ T7585] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1061'. [ 279.344604][ T7623] netlink: 'syz.3.1077': attribute type 3 has an invalid length. [ 279.399145][ T7623] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1077'. [ 280.104183][ T7637] netlink: 'syz.1.1082': attribute type 10 has an invalid length. [ 280.129261][ T7637] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.1082'. [ 280.590733][ T7649] netlink: 'syz.2.1086': attribute type 29 has an invalid length. [ 280.656095][ T7653] FAULT_INJECTION: forcing a failure. [ 280.656095][ T7653] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 280.677418][ T7653] CPU: 1 PID: 7653 Comm: syz.2.1086 Not tainted syzkaller #0 [ 280.684872][ T7653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 280.694972][ T7653] Call Trace: [ 280.698297][ T7653] [ 280.701444][ T7653] dump_stack_lvl+0x168/0x22e [ 280.706183][ T7653] ? show_regs_print_info+0x12/0x12 [ 280.711427][ T7653] ? load_image+0x3b0/0x3b0 [ 280.715969][ T7653] ? __might_fault+0xa6/0x120 [ 280.720716][ T7653] should_fail_ex+0x399/0x4d0 [ 280.725461][ T7653] copyout+0x1b/0x120 [ 280.729531][ T7653] _copy_to_iter+0x48f/0x1030 [ 280.734294][ T7653] ? iov_iter_init+0x1f0/0x1f0 [ 280.739130][ T7653] ? __virt_addr_valid+0x188/0x540 [ 280.744313][ T7653] ? __virt_addr_valid+0x465/0x540 [ 280.749495][ T7653] ? __phys_addr_symbol+0x2b/0x70 [ 280.754589][ T7653] ? __check_object_size+0x500/0xa40 [ 280.759950][ T7653] __skb_datagram_iter+0xde/0x740 [ 280.765041][ T7653] ? skb_copy_datagram_iter+0x290/0x290 [ 280.770648][ T7653] skb_copy_datagram_iter+0xd7/0x290 [ 280.775994][ T7653] netlink_recvmsg+0x2bd/0xd90 [ 280.780822][ T7653] ? netlink_sendmsg+0xbc0/0xbc0 [ 280.785808][ T7653] ? aa_sk_perm+0x7e5/0x920 [ 280.790362][ T7653] ? aa_af_perm+0x2b0/0x2b0 [ 280.794910][ T7653] ? __might_fault+0xa6/0x120 [ 280.799645][ T7653] ? bpf_lsm_socket_recvmsg+0x5/0x10 [ 280.804977][ T7653] ? security_socket_recvmsg+0x85/0xb0 [ 280.810494][ T7653] ? netlink_sendmsg+0xbc0/0xbc0 [ 280.815481][ T7653] ____sys_recvmsg+0x292/0x580 [ 280.820301][ T7653] ? __sys_recvmsg_sock+0x40/0x40 [ 280.825384][ T7653] ? import_iovec+0x6f/0xa0 [ 280.829952][ T7653] ___sys_recvmsg+0x1b2/0x510 [ 280.834677][ T7653] ? __sys_recvmsg+0x270/0x270 [ 280.839496][ T7653] ? common_file_perm+0x171/0x1c0 [ 280.844586][ T7653] ? __fget_files+0x44a/0x4d0 [ 280.849321][ T7653] ? __fdget+0x17c/0x200 [ 280.853618][ T7653] __x64_sys_recvmsg+0x1eb/0x2b0 [ 280.858607][ T7653] ? ct_nmi_exit+0x145/0x1c0 [ 280.863277][ T7653] ? ___sys_recvmsg+0x510/0x510 [ 280.868187][ T7653] ? lockdep_hardirqs_on+0x94/0x140 [ 280.873483][ T7653] do_syscall_64+0x4c/0xa0 [ 280.877955][ T7653] ? clear_bhb_loop+0x60/0xb0 [ 280.882677][ T7653] ? clear_bhb_loop+0x60/0xb0 [ 280.887407][ T7653] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 280.893375][ T7653] RIP: 0033:0x7f52d9f8f749 [ 280.897838][ T7653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 280.917528][ T7653] RSP: 002b:00007f52dada7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 280.925991][ T7653] RAX: ffffffffffffffda RBX: 00007f52da1e6090 RCX: 00007f52d9f8f749 [ 280.934008][ T7653] RDX: 0000000040012100 RSI: 0000200000000000 RDI: 0000000000000003 [ 280.942120][ T7653] RBP: 00007f52dada7090 R08: 0000000000000000 R09: 0000000000000000 [ 280.950119][ T7653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 280.958132][ T7653] R13: 00007f52da1e6128 R14: 00007f52da1e6090 R15: 00007fff9c4fd4f8 [ 280.966175][ T7653] [ 281.254154][ T7659] sctp: [Deprecated]: syz.2.1089 (pid 7659) Use of int in max_burst socket option deprecated. [ 281.254154][ T7659] Use struct sctp_assoc_value instead [ 281.298738][ T7658] validate_nla: 2 callbacks suppressed [ 281.298758][ T7658] netlink: 'syz.3.1090': attribute type 3 has an invalid length. [ 281.354318][ T7658] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1090'. [ 281.592472][ T7670] netlink: 'syz.4.1095': attribute type 39 has an invalid length. [ 281.620816][ T7670] netlink: 'syz.4.1095': attribute type 33 has an invalid length. [ 281.648785][ T7670] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1095'. [ 281.735755][ T7679] netlink: 'syz.3.1097': attribute type 10 has an invalid length. [ 281.769034][ T7679] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.1097'. [ 282.047949][ T7687] netlink: 'syz.2.1099': attribute type 2 has an invalid length. [ 282.055764][ T7687] netlink: 'syz.2.1099': attribute type 8 has an invalid length. [ 282.075086][ T7687] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1099'. [ 282.470754][ T7701] netlink: 463 bytes leftover after parsing attributes in process `syz.4.1106'. [ 282.658469][ T7703] netlink: 'syz.3.1107': attribute type 2 has an invalid length. [ 282.691910][ T7703] device 0 entered promiscuous mode [ 282.750496][ T7706] netlink: 'syz.0.1108': attribute type 3 has an invalid length. [ 282.779217][ T7706] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1108'. [ 283.080649][ T7714] netlink: 'syz.4.1112': attribute type 10 has an invalid length. [ 283.116268][ T7714] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.1112'. [ 284.578215][ T7745] FAULT_INJECTION: forcing a failure. [ 284.578215][ T7745] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 284.637530][ T7745] CPU: 1 PID: 7745 Comm: syz.1.1121 Not tainted syzkaller #0 [ 284.645082][ T7745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 284.655189][ T7745] Call Trace: [ 284.658511][ T7745] [ 284.661482][ T7745] dump_stack_lvl+0x168/0x22e [ 284.666229][ T7745] ? show_regs_print_info+0x12/0x12 [ 284.671480][ T7745] ? load_image+0x3b0/0x3b0 [ 284.676032][ T7745] ? __lock_acquire+0x7c50/0x7c50 [ 284.681133][ T7745] should_fail_ex+0x399/0x4d0 [ 284.685909][ T7745] _copy_from_user+0x2c/0x170 [ 284.690646][ T7745] __sys_bpf+0x265/0x6d0 [ 284.694944][ T7745] ? bpf_link_show_fdinfo+0x340/0x340 [ 284.700388][ T7745] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 284.706605][ T7745] __x64_sys_bpf+0x78/0x90 [ 284.711086][ T7745] do_syscall_64+0x4c/0xa0 [ 284.715564][ T7745] ? clear_bhb_loop+0x60/0xb0 [ 284.720290][ T7745] ? clear_bhb_loop+0x60/0xb0 [ 284.725024][ T7745] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 284.730981][ T7745] RIP: 0033:0x7fc43c98f749 [ 284.735437][ T7745] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 284.755521][ T7745] RSP: 002b:00007fc43d898038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 284.763988][ T7745] RAX: ffffffffffffffda RBX: 00007fc43cbe5fa0 RCX: 00007fc43c98f749 [ 284.771998][ T7745] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 284.779998][ T7745] RBP: 00007fc43d898090 R08: 0000000000000000 R09: 0000000000000000 [ 284.787997][ T7745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 284.796170][ T7745] R13: 00007fc43cbe6038 R14: 00007fc43cbe5fa0 R15: 00007ffc59f1a578 [ 284.804190][ T7745] [ 285.281197][ T7756] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1125'. [ 285.758033][ T7764] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1128'. [ 286.038949][ T7776] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1132'. [ 286.409440][ T7786] FAULT_INJECTION: forcing a failure. [ 286.409440][ T7786] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 286.472467][ T7786] CPU: 1 PID: 7786 Comm: syz.3.1136 Not tainted syzkaller #0 [ 286.479933][ T7786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 286.490206][ T7786] Call Trace: [ 286.493515][ T7786] [ 286.496472][ T7786] dump_stack_lvl+0x168/0x22e [ 286.501187][ T7786] ? show_regs_print_info+0x12/0x12 [ 286.506416][ T7786] ? load_image+0x3b0/0x3b0 [ 286.511040][ T7786] ? __lock_acquire+0x7c50/0x7c50 [ 286.516105][ T7786] ? verify_lock_unused+0x140/0x140 [ 286.521343][ T7786] should_fail_ex+0x399/0x4d0 [ 286.526058][ T7786] _copy_from_user+0x2c/0x170 [ 286.530770][ T7786] ___sys_sendmsg+0x155/0x290 [ 286.535474][ T7786] ? __sys_sendmsg+0x270/0x270 [ 286.540292][ T7786] ? __lock_acquire+0x7c50/0x7c50 [ 286.545367][ T7786] ? __fdget+0x17c/0x200 [ 286.549644][ T7786] __se_sys_sendmsg+0x19e/0x270 [ 286.554524][ T7786] ? __x64_sys_sendmsg+0x80/0x80 [ 286.559516][ T7786] ? lockdep_hardirqs_on+0x94/0x140 [ 286.564793][ T7786] do_syscall_64+0x4c/0xa0 [ 286.569277][ T7786] ? clear_bhb_loop+0x60/0xb0 [ 286.574002][ T7786] ? clear_bhb_loop+0x60/0xb0 [ 286.578756][ T7786] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 286.584684][ T7786] RIP: 0033:0x7f66f898f749 [ 286.589128][ T7786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 286.608856][ T7786] RSP: 002b:00007f66f6bf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 286.617299][ T7786] RAX: ffffffffffffffda RBX: 00007f66f8be5fa0 RCX: 00007f66f898f749 [ 286.625344][ T7786] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 286.633355][ T7786] RBP: 00007f66f6bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 286.641359][ T7786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.649365][ T7786] R13: 00007f66f8be6038 R14: 00007f66f8be5fa0 R15: 00007fff79fe45f8 [ 286.657388][ T7786] [ 287.100245][ T7796] device wg2 entered promiscuous mode [ 287.371099][ T7803] netlink: 'syz.2.1141': attribute type 3 has an invalid length. [ 287.439144][ T7803] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1141'. [ 288.142647][ T7824] netlink: 'syz.0.1149': attribute type 21 has an invalid length. [ 288.216721][ T7824] netlink: 'syz.0.1149': attribute type 3 has an invalid length. [ 288.280538][ T7824] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1149'. [ 288.421009][ T7825] netlink: 'syz.0.1149': attribute type 21 has an invalid length. [ 288.507916][ T7825] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1149'. [ 288.601453][ T7839] netlink: 'syz.1.1153': attribute type 10 has an invalid length. [ 288.611445][ T7839] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.1153'. [ 288.806301][ T7843] netlink: 157116 bytes leftover after parsing attributes in process `syz.3.1154'. [ 289.050436][ T7850] sctp: [Deprecated]: syz.2.1157 (pid 7850) Use of int in max_burst socket option deprecated. [ 289.050436][ T7850] Use struct sctp_assoc_value instead [ 289.284196][ T7855] netlink: 'syz.1.1159': attribute type 3 has an invalid length. [ 289.317352][ T7855] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1159'. [ 289.470796][ T7863] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1161'. [ 289.513751][ T7863] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1161'. [ 289.540660][ T7862] FAULT_INJECTION: forcing a failure. [ 289.540660][ T7862] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 289.557954][ T7859] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1161'. [ 289.596612][ T7859] syz.2.1161 uses obsolete (PF_INET,SOCK_PACKET) [ 289.647558][ T7862] CPU: 1 PID: 7862 Comm: syz.3.1163 Not tainted syzkaller #0 [ 289.655076][ T7862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 289.665236][ T7862] Call Trace: [ 289.668610][ T7862] [ 289.671631][ T7862] dump_stack_lvl+0x168/0x22e [ 289.676449][ T7862] ? show_regs_print_info+0x12/0x12 [ 289.681769][ T7862] ? load_image+0x3b0/0x3b0 [ 289.686423][ T7862] ? __lock_acquire+0x7c50/0x7c50 [ 289.691613][ T7862] should_fail_ex+0x399/0x4d0 [ 289.696449][ T7862] _copy_from_user+0x2c/0x170 [ 289.701247][ T7862] __sys_bpf+0x265/0x6d0 [ 289.705623][ T7862] ? bpf_link_show_fdinfo+0x340/0x340 [ 289.711211][ T7862] ? lock_chain_count+0x20/0x20 [ 289.716245][ T7862] __x64_sys_bpf+0x78/0x90 [ 289.720786][ T7862] do_syscall_64+0x4c/0xa0 [ 289.725310][ T7862] ? clear_bhb_loop+0x60/0xb0 [ 289.730089][ T7862] ? clear_bhb_loop+0x60/0xb0 [ 289.734884][ T7862] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 289.740871][ T7862] RIP: 0033:0x7f66f898f749 [ 289.745389][ T7862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 289.765287][ T7862] RSP: 002b:00007f66f6bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 289.773913][ T7862] RAX: ffffffffffffffda RBX: 00007f66f8be5fa0 RCX: 00007f66f898f749 [ 289.782069][ T7862] RDX: 0000000000000020 RSI: 00002000000000c0 RDI: 0000000000000002 [ 289.790134][ T7862] RBP: 00007f66f6bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 289.798205][ T7862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 289.806448][ T7862] R13: 00007f66f8be6038 R14: 00007f66f8be5fa0 R15: 00007fff79fe45f8 [ 289.814644][ T7862] [ 290.119762][ T7873] netlink: 'syz.2.1166': attribute type 10 has an invalid length. [ 290.150873][ T7873] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.1166'. [ 290.703770][ T7892] netlink: 'syz.2.1174': attribute type 1 has an invalid length. [ 290.758771][ T7894] syzkaller1: tun_chr_ioctl cmd 35108 [ 290.908039][ T7900] FAULT_INJECTION: forcing a failure. [ 290.908039][ T7900] name failslab, interval 1, probability 0, space 0, times 0 [ 290.981818][ T7900] CPU: 1 PID: 7900 Comm: syz.2.1177 Not tainted syzkaller #0 [ 290.989296][ T7900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 290.999402][ T7900] Call Trace: [ 291.002730][ T7900] [ 291.005711][ T7900] dump_stack_lvl+0x168/0x22e [ 291.010449][ T7900] ? show_regs_print_info+0x12/0x12 [ 291.015703][ T7900] ? load_image+0x3b0/0x3b0 [ 291.020259][ T7900] ? __might_sleep+0xd0/0xd0 [ 291.024909][ T7900] ? __lock_acquire+0x7c50/0x7c50 [ 291.029979][ T7900] ? perf_trace_lock_acquire+0xf7/0x3c0 [ 291.035576][ T7900] should_fail_ex+0x399/0x4d0 [ 291.040323][ T7900] should_failslab+0x5/0x20 [ 291.044882][ T7900] slab_pre_alloc_hook+0x59/0x310 [ 291.049962][ T7900] ? bpf_prog_test_run_flow_dissector+0x22d/0x600 [ 291.056430][ T7900] __kmem_cache_alloc_node+0x4f/0x260 [ 291.061854][ T7900] ? bpf_prog_test_run_flow_dissector+0x22d/0x600 [ 291.068361][ T7900] __kmalloc+0xa0/0x240 [ 291.072570][ T7900] bpf_prog_test_run_flow_dissector+0x22d/0x600 [ 291.078874][ T7900] ? xdp_convert_buff_to_md+0x200/0x200 [ 291.084462][ T7900] ? __fget_files+0x28/0x4d0 [ 291.089089][ T7900] ? __fget_files+0x44a/0x4d0 [ 291.093802][ T7900] ? xdp_convert_buff_to_md+0x200/0x200 [ 291.099469][ T7900] bpf_prog_test_run+0x31e/0x390 [ 291.104443][ T7900] __sys_bpf+0x593/0x6d0 [ 291.108715][ T7900] ? bpf_link_show_fdinfo+0x340/0x340 [ 291.114126][ T7900] ? lock_chain_count+0x20/0x20 [ 291.119014][ T7900] __x64_sys_bpf+0x78/0x90 [ 291.123456][ T7900] do_syscall_64+0x4c/0xa0 [ 291.127903][ T7900] ? clear_bhb_loop+0x60/0xb0 [ 291.132602][ T7900] ? clear_bhb_loop+0x60/0xb0 [ 291.137335][ T7900] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 291.143258][ T7900] RIP: 0033:0x7f52d9f8f749 [ 291.147697][ T7900] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 291.167340][ T7900] RSP: 002b:00007f52dadc8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 291.175788][ T7900] RAX: ffffffffffffffda RBX: 00007f52da1e5fa0 RCX: 00007f52d9f8f749 [ 291.183798][ T7900] RDX: 0000000000000050 RSI: 0000200000000440 RDI: 000000000000000a [ 291.191813][ T7900] RBP: 00007f52dadc8090 R08: 0000000000000000 R09: 0000000000000000 [ 291.199818][ T7900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 291.207814][ T7900] R13: 00007f52da1e6038 R14: 00007f52da1e5fa0 R15: 00007fff9c4fd4f8 [ 291.215825][ T7900] [ 291.605716][ T7906] netlink: 'syz.0.1180': attribute type 10 has an invalid length. [ 292.848135][ T7928] TCP: TCP_TX_DELAY enabled [ 293.433080][ T7943] __nla_validate_parse: 4 callbacks suppressed [ 293.433119][ T7943] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.1193'. [ 293.507584][ T7942] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.1193'. [ 294.407416][ T7962] sctp: [Deprecated]: syz.0.1198 (pid 7962) Use of int in max_burst socket option deprecated. [ 294.407416][ T7962] Use struct sctp_assoc_value instead [ 297.211190][ T7956] netlink: 'syz.1.1197': attribute type 10 has an invalid length. [ 297.227260][ T7956] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.1197'. [ 297.668684][ T7978] netlink: 'syz.0.1202': attribute type 46 has an invalid length. [ 297.763156][ T7978] netlink: 'syz.0.1202': attribute type 3 has an invalid length. [ 297.798359][ T7978] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1202'. [ 301.001215][ T8005] netlink: 'syz.4.1209': attribute type 3 has an invalid length. [ 301.015298][ T8004] netlink: 'syz.1.1210': attribute type 3 has an invalid length. [ 301.032480][ T8007] sctp: [Deprecated]: syz.2.1212 (pid 8007) Use of int in max_burst socket option deprecated. [ 301.032480][ T8007] Use struct sctp_assoc_value instead [ 301.048580][ T8004] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1210'. [ 301.059905][ T8005] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1209'. [ 301.133037][ T8010] netlink: 'syz.0.1211': attribute type 10 has an invalid length. [ 301.151597][ T8010] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.1211'. [ 302.689308][ T8045] sctp: [Deprecated]: syz.0.1224 (pid 8045) Use of int in max_burst socket option deprecated. [ 302.689308][ T8045] Use struct sctp_assoc_value instead [ 302.773504][ T8049] netlink: 'syz.4.1226': attribute type 3 has an invalid length. [ 302.806030][ T8049] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1226'. [ 305.582403][ T8057] netlink: 'syz.2.1227': attribute type 3 has an invalid length. [ 305.611539][ T8057] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1227'. [ 305.748288][ T8060] netlink: 'syz.0.1228': attribute type 10 has an invalid length. [ 305.756206][ T8060] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.1228'. [ 305.963684][ T8069] netlink: 'syz.2.1232': attribute type 4 has an invalid length. [ 305.987440][ T8069] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1232'. [ 306.168821][ T8081] netlink: 'syz.0.1235': attribute type 10 has an invalid length. [ 306.176748][ T8081] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1235'. [ 306.298438][ T8080] netlink: 'syz.0.1235': attribute type 10 has an invalid length. [ 306.306340][ T8080] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1235'. [ 306.580450][ T8088] sctp: [Deprecated]: syz.2.1239 (pid 8088) Use of int in max_burst socket option deprecated. [ 306.580450][ T8088] Use struct sctp_assoc_value instead [ 306.834032][ T8092] netlink: 'syz.4.1240': attribute type 3 has an invalid length. [ 306.853282][ T8092] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1240'. [ 309.825052][ T8133] netlink: 'syz.3.1262': attribute type 21 has an invalid length. [ 309.865453][ T8133] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1262'. [ 309.922196][ T8133] netlink: 'syz.3.1262': attribute type 4 has an invalid length. [ 309.951332][ T8133] netlink: 'syz.3.1262': attribute type 5 has an invalid length. [ 310.027628][ T8133] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1262'. [ 310.123606][ T8140] sctp: [Deprecated]: syz.1.1255 (pid 8140) Use of int in max_burst socket option deprecated. [ 310.123606][ T8140] Use struct sctp_assoc_value instead [ 310.152572][ T8143] netlink: 'syz.4.1256': attribute type 10 has an invalid length. [ 310.169881][ T8143] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.1256'. [ 310.376473][ T8146] netlink: 'syz.2.1257': attribute type 41 has an invalid length. [ 310.426451][ T8146] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1257'. [ 310.477857][ T8146] netlink: 'syz.2.1257': attribute type 41 has an invalid length. [ 310.548119][ T8146] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1257'. [ 310.950701][ T8157] FAULT_INJECTION: forcing a failure. [ 310.950701][ T8157] name failslab, interval 1, probability 0, space 0, times 0 [ 310.993813][ T8157] CPU: 0 PID: 8157 Comm: syz.3.1261 Not tainted syzkaller #0 [ 311.001316][ T8157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 311.011439][ T8157] Call Trace: [ 311.014781][ T8157] [ 311.017781][ T8157] dump_stack_lvl+0x168/0x22e [ 311.022558][ T8157] ? show_regs_print_info+0x12/0x12 [ 311.027838][ T8157] ? load_image+0x3b0/0x3b0 [ 311.032472][ T8157] should_fail_ex+0x399/0x4d0 [ 311.037250][ T8157] should_failslab+0x5/0x20 [ 311.041823][ T8157] slab_pre_alloc_hook+0x59/0x310 [ 311.046905][ T8157] ? sock_def_readable+0x1e/0x280 [ 311.052031][ T8157] kmem_cache_alloc+0x56/0x2f0 [ 311.056854][ T8157] ? skb_clone+0x1e7/0x370 [ 311.061372][ T8157] skb_clone+0x1e7/0x370 [ 311.065684][ T8157] ? pfkey_broadcast_one+0x7d/0x340 [ 311.070966][ T8157] pfkey_broadcast_one+0x9b/0x340 [ 311.076056][ T8157] ? pfkey_broadcast+0x208/0x3e0 [ 311.081079][ T8157] pfkey_broadcast+0x218/0x3e0 [ 311.085949][ T8157] ? pfkey_broadcast+0x48/0x3e0 [ 311.090884][ T8157] pfkey_promisc+0x1c3/0x380 [ 311.095558][ T8157] pfkey_sendmsg+0xb97/0xff0 [ 311.100217][ T8157] ? perf_trace_lock+0x2ec/0x370 [ 311.105287][ T8157] ? pfkey_release+0x310/0x310 [ 311.110239][ T8157] ? aa_sock_msg_perm+0x94/0x150 [ 311.115263][ T8157] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 311.120608][ T8157] ? security_socket_sendmsg+0x7c/0xa0 [ 311.126154][ T8157] ? pfkey_release+0x310/0x310 [ 311.130981][ T8157] ____sys_sendmsg+0x59b/0x970 [ 311.135940][ T8157] ? __sys_sendmsg_sock+0x30/0x30 [ 311.141028][ T8157] ? __import_iovec+0x315/0x500 [ 311.145986][ T8157] ? import_iovec+0x6f/0xa0 [ 311.150580][ T8157] ___sys_sendmsg+0x21c/0x290 [ 311.155354][ T8157] ? __sys_sendmsg+0x270/0x270 [ 311.160297][ T8157] ? __lock_acquire+0x7c50/0x7c50 [ 311.165488][ T8157] ? __fdget+0x17c/0x200 [ 311.169824][ T8157] __se_sys_sendmsg+0x19e/0x270 [ 311.174758][ T8157] ? __x64_sys_sendmsg+0x80/0x80 [ 311.179842][ T8157] ? lockdep_hardirqs_on+0x94/0x140 [ 311.185127][ T8157] do_syscall_64+0x4c/0xa0 [ 311.189606][ T8157] ? clear_bhb_loop+0x60/0xb0 [ 311.194349][ T8157] ? clear_bhb_loop+0x60/0xb0 [ 311.199202][ T8157] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 311.205158][ T8157] RIP: 0033:0x7f66f898f749 [ 311.209642][ T8157] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 311.229308][ T8157] RSP: 002b:00007f66f6bf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 311.237795][ T8157] RAX: ffffffffffffffda RBX: 00007f66f8be5fa0 RCX: 00007f66f898f749 [ 311.245821][ T8157] RDX: 0000000024000800 RSI: 00002000000011c0 RDI: 0000000000000005 [ 311.253863][ T8157] RBP: 00007f66f6bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 311.261991][ T8157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 311.270019][ T8157] R13: 00007f66f8be6038 R14: 00007f66f8be5fa0 R15: 00007fff79fe45f8 [ 311.278125][ T8157] [ 311.676944][ T8180] netlink: 'syz.4.1270': attribute type 10 has an invalid length. [ 311.694842][ T8180] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.1270'. [ 312.793185][ T8200] netlink: 'syz.2.1286': attribute type 21 has an invalid length. [ 312.863375][ T8200] netlink: 'syz.2.1286': attribute type 3 has an invalid length. [ 312.917412][ T8200] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1286'. [ 312.922001][ T8201] netlink: 'syz.3.1276': attribute type 41 has an invalid length. [ 312.945434][ T8203] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1277'. [ 312.959300][ T8201] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1276'. [ 312.995736][ T8205] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1277'. [ 313.014062][ T8200] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1286'. [ 313.055115][ T8201] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1276'. [ 313.151325][ T8209] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1278'. [ 313.465530][ T8220] sctp: [Deprecated]: syz.3.1281 (pid 8220) Use of int in max_burst socket option deprecated. [ 313.465530][ T8220] Use struct sctp_assoc_value instead [ 313.600580][ T8222] sctp: [Deprecated]: syz.2.1282 (pid 8222) Use of int in max_burst socket option deprecated. [ 313.600580][ T8222] Use struct sctp_assoc_value instead [ 313.750328][ T8229] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 314.054325][ T8235] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1283'. [ 314.954677][ T8245] validate_nla: 7 callbacks suppressed [ 314.954714][ T8245] netlink: 'syz.1.1290': attribute type 1 has an invalid length. [ 315.627449][ T8256] netlink: 'syz.0.1293': attribute type 21 has an invalid length. [ 315.673448][ T8256] netlink: 'syz.0.1293': attribute type 3 has an invalid length. [ 315.699348][ T8249] netlink: 'syz.3.1292': attribute type 3 has an invalid length. [ 315.764089][ T8256] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1293'. [ 315.816192][ T8259] netlink: 'syz.0.1293': attribute type 21 has an invalid length. [ 316.178740][ T8269] netlink: 'syz.3.1297': attribute type 10 has an invalid length. [ 316.532462][ T8278] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 317.099430][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.105849][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.202208][ T8294] sctp: [Deprecated]: syz.1.1307 (pid 8294) Use of int in max_burst socket option deprecated. [ 317.202208][ T8294] Use struct sctp_assoc_value instead [ 317.887846][ T8310] netlink: 'syz.3.1312': attribute type 10 has an invalid length. [ 317.905618][ T8306] netlink: 'syz.4.1308': attribute type 3 has an invalid length. [ 317.929473][ T8310] __nla_validate_parse: 3 callbacks suppressed [ 317.929491][ T8310] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.1312'. [ 318.061165][ T8313] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1311'. [ 318.387788][ T8320] cgroup: fork rejected by pids controller in /syz3 [ 319.441860][ T8341] sctp: [Deprecated]: syz.2.1321 (pid 8341) Use of int in max_burst socket option deprecated. [ 319.441860][ T8341] Use struct sctp_assoc_value instead [ 321.246195][ T8334] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1319'. [ 321.964916][ T8348] netlink: 'syz.0.1325': attribute type 3 has an invalid length. [ 322.025037][ T8352] netlink: 'syz.1.1326': attribute type 21 has an invalid length. [ 322.119026][ T8352] netlink: 'syz.1.1326': attribute type 3 has an invalid length. [ 322.178841][ T8352] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1326'. [ 322.276973][ T8356] netlink: 'syz.1.1326': attribute type 21 has an invalid length. [ 322.315557][ T8356] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1326'. [ 322.346893][ T8361] FAULT_INJECTION: forcing a failure. [ 322.346893][ T8361] name failslab, interval 1, probability 0, space 0, times 0 [ 322.403723][ T8358] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1328'. [ 322.432181][ T8361] CPU: 1 PID: 8361 Comm: syz.0.1329 Not tainted syzkaller #0 [ 322.439748][ T8361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 322.449861][ T8361] Call Trace: [ 322.453183][ T8361] [ 322.456149][ T8361] dump_stack_lvl+0x168/0x22e [ 322.460896][ T8361] ? show_regs_print_info+0x12/0x12 [ 322.466157][ T8361] ? load_image+0x3b0/0x3b0 [ 322.470723][ T8361] ? perf_trace_lock+0xf3/0x370 [ 322.475640][ T8361] should_fail_ex+0x399/0x4d0 [ 322.480380][ T8361] should_failslab+0x5/0x20 [ 322.484923][ T8361] slab_pre_alloc_hook+0x59/0x310 [ 322.489981][ T8361] kmem_cache_alloc+0x56/0x2f0 [ 322.494819][ T8361] ? skb_clone+0x1e7/0x370 [ 322.499289][ T8361] skb_clone+0x1e7/0x370 [ 322.503561][ T8361] __netlink_deliver_tap+0x3ed/0x800 [ 322.508897][ T8361] ? netlink_deliver_tap+0x2e/0x1b0 [ 322.514126][ T8361] netlink_deliver_tap+0x19c/0x1b0 [ 322.519362][ T8361] netlink_dump+0x804/0xcd0 [ 322.523921][ T8361] ? netlink_lookup+0x200/0x200 [ 322.528904][ T8361] ? netlink_recvmsg+0x5c0/0xd90 [ 322.533874][ T8361] ? kmem_cache_free+0xf7/0x290 [ 322.538766][ T8361] netlink_recvmsg+0x668/0xd90 [ 322.543568][ T8361] ? netlink_sendmsg+0xbc0/0xbc0 [ 322.548529][ T8361] ? aa_sk_perm+0x7e5/0x920 [ 322.553073][ T8361] ? aa_af_perm+0x2b0/0x2b0 [ 322.557608][ T8361] ? __might_fault+0xa6/0x120 [ 322.562318][ T8361] ? bpf_lsm_socket_recvmsg+0x5/0x10 [ 322.567639][ T8361] ? security_socket_recvmsg+0x85/0xb0 [ 322.573147][ T8361] ? netlink_sendmsg+0xbc0/0xbc0 [ 322.578113][ T8361] ____sys_recvmsg+0x292/0x580 [ 322.582923][ T8361] ? __sys_recvmsg_sock+0x40/0x40 [ 322.588000][ T8361] ? import_iovec+0x6f/0xa0 [ 322.592542][ T8361] ___sys_recvmsg+0x1b2/0x510 [ 322.597262][ T8361] ? __sys_recvmsg+0x270/0x270 [ 322.602061][ T8361] ? common_file_perm+0x171/0x1c0 [ 322.607138][ T8361] ? __fget_files+0x44a/0x4d0 [ 322.611864][ T8361] ? __fdget+0x17c/0x200 [ 322.616150][ T8361] __x64_sys_recvmsg+0x1eb/0x2b0 [ 322.621126][ T8361] ? ___sys_recvmsg+0x510/0x510 [ 322.626022][ T8361] ? lockdep_hardirqs_on+0x94/0x140 [ 322.631279][ T8361] do_syscall_64+0x4c/0xa0 [ 322.635734][ T8361] ? clear_bhb_loop+0x60/0xb0 [ 322.640441][ T8361] ? clear_bhb_loop+0x60/0xb0 [ 322.645155][ T8361] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 322.651083][ T8361] RIP: 0033:0x7fb64878f749 [ 322.655539][ T8361] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 322.675264][ T8361] RSP: 002b:00007fb64956a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 322.683720][ T8361] RAX: ffffffffffffffda RBX: 00007fb6489e5fa0 RCX: 00007fb64878f749 [ 322.691733][ T8361] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 322.699727][ T8361] RBP: 00007fb64956a090 R08: 0000000000000000 R09: 0000000000000000 [ 322.707730][ T8361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 322.715817][ T8361] R13: 00007fb6489e6038 R14: 00007fb6489e5fa0 R15: 00007ffd6755e888 [ 322.723833][ T8361] [ 323.011465][ T4269] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 323.020745][ T4269] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 323.029330][ T4269] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 323.047375][ T4269] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 323.055038][ T4269] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 323.062689][ T4269] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 323.411554][ T4482] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.621436][ T4482] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.832571][ T4482] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.906840][ T8366] chnl_net:caif_netlink_parms(): no params data found [ 324.000316][ T4482] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.738496][ T8366] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.745764][ T8366] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.755059][ T8366] device bridge_slave_0 entered promiscuous mode [ 324.787592][ T8396] netlink: 64967 bytes leftover after parsing attributes in process `syz.1.1338'. [ 324.822437][ T8366] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.834208][ T8366] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.855479][ T8366] device bridge_slave_1 entered promiscuous mode [ 324.889378][ T8407] sctp: [Deprecated]: syz.4.1340 (pid 8407) Use of int in max_burst socket option deprecated. [ 324.889378][ T8407] Use struct sctp_assoc_value instead [ 325.001668][ T8366] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 325.089058][ T8366] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 325.098589][ T4271] Bluetooth: hci0: command 0x0409 tx timeout [ 325.165083][ T8409] netlink: 'syz.2.1341': attribute type 3 has an invalid length. [ 325.241728][ T4482] device 0 left promiscuous mode [ 325.381491][ T8366] team0: Port device team_slave_0 added [ 325.449892][ T8366] team0: Port device team_slave_1 added [ 325.765461][ T8366] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 325.774569][ T8366] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.810118][ T8425] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1344'. [ 325.917179][ T8366] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 326.017036][ T8366] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 326.027660][ T8366] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.087319][ T8366] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 326.313836][ T8432] netlink: 'syz.4.1347': attribute type 21 has an invalid length. [ 326.354671][ T8432] netlink: 'syz.4.1347': attribute type 3 has an invalid length. [ 326.384025][ T8432] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1347'. [ 326.447255][ T8434] netlink: 'syz.4.1347': attribute type 21 has an invalid length. [ 326.494998][ T8434] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1347'. [ 326.665126][ T8366] device hsr_slave_0 entered promiscuous mode [ 326.699472][ T8366] device hsr_slave_1 entered promiscuous mode [ 326.714979][ T8366] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 326.727801][ T8366] Cannot create hsr debugfs directory [ 327.060217][ T8460] sctp: [Deprecated]: syz.0.1354 (pid 8460) Use of int in max_burst socket option deprecated. [ 327.060217][ T8460] Use struct sctp_assoc_value instead [ 327.214244][ T4271] Bluetooth: hci0: command 0x041b tx timeout [ 327.950002][ T8473] device bridge0 entered promiscuous mode [ 328.595699][ T8489] netlink: 'syz.2.1362': attribute type 21 has an invalid length. [ 328.604060][ T8489] netlink: 'syz.2.1362': attribute type 3 has an invalid length. [ 328.614253][ T8489] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1362'. [ 328.625421][ T8484] netlink: 'syz.2.1362': attribute type 21 has an invalid length. [ 328.633892][ T8484] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1362'. [ 328.725292][ T8492] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1364'. [ 328.781010][ T4482] device hsr_slave_0 left promiscuous mode [ 328.802252][ T4482] device hsr_slave_1 left promiscuous mode [ 328.864897][ T4482] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 328.885162][ T4482] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 328.902348][ T4482] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 328.917469][ T4482] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 328.942749][ T4482] device bridge_slave_1 left promiscuous mode [ 328.968808][ T4482] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.991268][ T4482] device bridge_slave_0 left promiscuous mode [ 328.999933][ T4482] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.067175][ T4482] device veth1_macvtap left promiscuous mode [ 329.073907][ T4482] device veth0_macvtap left promiscuous mode [ 329.080506][ T4482] device veth1_vlan left promiscuous mode [ 329.086745][ T4482] device veth0_vlan left promiscuous mode [ 329.161787][ T8508] sctp: [Deprecated]: syz.2.1368 (pid 8508) Use of int in max_burst socket option deprecated. [ 329.161787][ T8508] Use struct sctp_assoc_value instead [ 329.276433][ T4271] Bluetooth: hci0: command 0x040f tx timeout [ 329.920688][ T4482] team0 (unregistering): Port device team_slave_1 removed [ 329.963423][ T4482] team0 (unregistering): Port device team_slave_0 removed [ 330.010908][ T4482] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 330.053384][ T4482] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 330.374704][ T4482] team0 (unregistering): Port device bond0 removed [ 330.505088][ T4482] bond0 (unregistering): Released all slaves [ 330.841686][ T8518] netlink: 'syz.4.1369': attribute type 2 has an invalid length. [ 330.928793][ T8517] netlink: 'syz.2.1370': attribute type 10 has an invalid length. [ 330.936818][ T8517] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.1370'. [ 331.076979][ T8526] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1372'. [ 331.210831][ T8366] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 331.338439][ T4271] Bluetooth: hci0: command 0x0419 tx timeout [ 331.411132][ T8366] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 331.426932][ T8366] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 331.514104][ T8366] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 331.821417][ T8549] FAULT_INJECTION: forcing a failure. [ 331.821417][ T8549] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 331.917367][ T8549] CPU: 1 PID: 8549 Comm: syz.0.1377 Not tainted syzkaller #0 [ 331.924954][ T8549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 331.935066][ T8549] Call Trace: [ 331.938395][ T8549] [ 331.941383][ T8549] dump_stack_lvl+0x168/0x22e [ 331.946219][ T8549] ? show_regs_print_info+0x12/0x12 [ 331.951572][ T8549] ? load_image+0x3b0/0x3b0 [ 331.956147][ T8549] should_fail_ex+0x399/0x4d0 [ 331.960902][ T8549] _copy_from_user+0x2c/0x170 [ 331.965642][ T8549] iovec_from_user+0x143/0x360 [ 331.970545][ T8549] __import_iovec+0x6d/0x500 [ 331.975170][ T8549] ? __might_fault+0xa6/0x120 [ 331.979881][ T8549] import_iovec+0x6f/0xa0 [ 331.984336][ T8549] ___sys_recvmsg+0x433/0x510 [ 331.989067][ T8549] ? __sys_recvmsg+0x270/0x270 [ 331.993871][ T8549] ? lock_chain_count+0x20/0x20 [ 331.998768][ T8549] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 332.004968][ T8549] __x64_sys_recvmsg+0x1eb/0x2b0 [ 332.009933][ T8549] ? perf_trace_preemptirq_template+0x287/0x330 [ 332.016258][ T8549] ? ___sys_recvmsg+0x510/0x510 [ 332.021244][ T8549] ? lockdep_hardirqs_on+0x94/0x140 [ 332.026483][ T8549] do_syscall_64+0x4c/0xa0 [ 332.030943][ T8549] ? clear_bhb_loop+0x60/0xb0 [ 332.035661][ T8549] ? clear_bhb_loop+0x60/0xb0 [ 332.040386][ T8549] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 332.046324][ T8549] RIP: 0033:0x7fb64878f749 [ 332.050776][ T8549] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 332.070587][ T8549] RSP: 002b:00007fb64956a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 332.079032][ T8549] RAX: ffffffffffffffda RBX: 00007fb6489e5fa0 RCX: 00007fb64878f749 [ 332.087037][ T8549] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000009 [ 332.095039][ T8549] RBP: 00007fb64956a090 R08: 0000000000000000 R09: 0000000000000000 [ 332.103041][ T8549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 332.111039][ T8549] R13: 00007fb6489e6038 R14: 00007fb6489e5fa0 R15: 00007ffd6755e888 [ 332.119058][ T8549] [ 332.174075][ T8366] 8021q: adding VLAN 0 to HW filter on device bond0 [ 332.225978][ T4498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 332.265927][ T4498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 332.294349][ T8366] 8021q: adding VLAN 0 to HW filter on device team0 [ 332.368820][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 332.404330][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 332.434307][ T4489] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.441555][ T4489] bridge0: port 1(bridge_slave_0) entered forwarding state [ 332.472519][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 332.501842][ T8561] sctp: [Deprecated]: syz.2.1380 (pid 8561) Use of int in max_burst socket option deprecated. [ 332.501842][ T8561] Use struct sctp_assoc_value instead [ 332.579599][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 332.605644][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 332.652321][ T4491] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.659622][ T4491] bridge0: port 2(bridge_slave_1) entered forwarding state [ 332.705347][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 332.837665][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 332.939165][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 332.974985][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 332.992914][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 333.004440][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 333.020153][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 333.039746][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 333.074324][ T8366] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 333.119261][ T8366] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 333.210117][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 333.229205][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 333.270191][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 333.309897][ T8571] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1382'. [ 333.475717][ T8576] netlink: 'syz.2.1383': attribute type 10 has an invalid length. [ 333.557366][ T8576] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.1383'. [ 333.709991][ T8580] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1384'. [ 334.147228][ T8593] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1388'. [ 334.707863][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 334.715751][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 334.783883][ T8366] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 334.879333][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 334.917863][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 335.013146][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 335.024112][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 335.064494][ T8366] device veth0_vlan entered promiscuous mode [ 335.078533][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 335.097671][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 335.132444][ T8366] device veth1_vlan entered promiscuous mode [ 335.329535][ T4498] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 335.349002][ T4498] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 335.379528][ T4498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 335.406788][ T4498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 335.446092][ T8366] device veth0_macvtap entered promiscuous mode [ 335.475214][ T8366] device veth1_macvtap entered promiscuous mode [ 335.576616][ T8624] sctp: [Deprecated]: syz.0.1395 (pid 8624) Use of int in max_burst socket option deprecated. [ 335.576616][ T8624] Use struct sctp_assoc_value instead [ 335.608406][ T8366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.646646][ T8366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.687725][ T8366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.718639][ T8366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.754724][ T8366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.796436][ T8366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.812340][ T8366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.824377][ T8366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.846125][ T8366] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 335.877228][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 335.896015][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 335.934188][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 335.948409][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 335.991028][ T8626] netlink: 'syz.2.1396': attribute type 21 has an invalid length. [ 336.011223][ T8626] netlink: 'syz.2.1396': attribute type 3 has an invalid length. [ 336.054868][ T8626] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1396'. [ 336.106430][ T8628] netlink: 'syz.2.1396': attribute type 21 has an invalid length. [ 336.137004][ T8628] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1396'. [ 336.179614][ T8366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.215932][ T8366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.235266][ T8366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.246740][ T8366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.263135][ T8366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.274135][ T8366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.292225][ T8366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.304184][ T8366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.322988][ T8366] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 336.348681][ T8641] netlink: 'syz.0.1399': attribute type 2 has an invalid length. [ 336.366945][ T8641] netlink: 'syz.0.1399': attribute type 1 has an invalid length. [ 336.393569][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 336.428104][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 336.454473][ T8366] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.480651][ T8366] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.499866][ T8366] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.519098][ T8366] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.548662][ T8641] netlink: 'syz.0.1399': attribute type 5 has an invalid length. [ 336.770412][ T4351] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.831870][ T8653] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1402'. [ 336.842982][ T4351] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.896858][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 336.909725][ T8658] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1404'. [ 336.951223][ T4351] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.972476][ T4351] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.027005][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 337.729622][ T8681] sctp: [Deprecated]: syz.3.1409 (pid 8681) Use of int in max_burst socket option deprecated. [ 337.729622][ T8681] Use struct sctp_assoc_value instead [ 337.988055][ T8691] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1410'. [ 338.071696][ T8689] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 338.112315][ T8691] netlink: 'syz.1.1410': attribute type 12 has an invalid length. [ 338.139284][ T8691] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1410'. [ 338.179260][ T8693] netlink: 'syz.4.1414': attribute type 21 has an invalid length. [ 338.197389][ T8693] netlink: 'syz.4.1414': attribute type 3 has an invalid length. [ 338.249501][ T8693] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1414'. [ 338.293748][ T8695] netlink: 'syz.4.1414': attribute type 21 has an invalid length. [ 338.346019][ T8695] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1414'. [ 338.384099][ T8702] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1415'. [ 338.849726][ T8711] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 338.923684][ T8715] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1418'. [ 339.346341][ T8730] sctp: [Deprecated]: syz.1.1425 (pid 8730) Use of int in max_burst socket option deprecated. [ 339.346341][ T8730] Use struct sctp_assoc_value instead [ 340.774838][ T8764] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 341.020830][ T8775] sctp: [Deprecated]: syz.3.1441 (pid 8775) Use of int in max_burst socket option deprecated. [ 341.020830][ T8775] Use struct sctp_assoc_value instead [ 341.648872][ T8797] validate_nla: 10 callbacks suppressed [ 341.648892][ T8797] netlink: 'syz.0.1450': attribute type 10 has an invalid length. [ 341.667662][ T8797] __nla_validate_parse: 6 callbacks suppressed [ 341.667679][ T8797] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.1450'. [ 341.725753][ T8794] netlink: 'syz.3.1449': attribute type 21 has an invalid length. [ 341.767460][ T8794] netlink: 'syz.3.1449': attribute type 3 has an invalid length. [ 341.779982][ T8794] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1449'. [ 342.205773][ T8803] bridge0: port 4(batadv0) entered disabled state [ 342.224127][ T8803] bridge0: port 3(team0) entered disabled state [ 342.242443][ T8803] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.268343][ T8803] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.779760][ T8808] bridge0: port 4(batadv0) entered disabled state [ 343.546284][ T8833] sctp: [Deprecated]: syz.2.1459 (pid 8833) Use of int in max_burst socket option deprecated. [ 343.546284][ T8833] Use struct sctp_assoc_value instead [ 343.579844][ T8808] device team0 left promiscuous mode [ 343.602087][ T8808] device team_slave_0 left promiscuous mode [ 343.627255][ T8808] device team_slave_1 left promiscuous mode [ 343.650037][ T8808] device bond0 left promiscuous mode [ 343.676830][ T8808] device bond_slave_0 left promiscuous mode [ 343.691223][ T8808] device bond_slave_1 left promiscuous mode [ 343.721974][ T8808] bridge0: port 3(team0) entered disabled state [ 343.776301][ T8808] device bridge_slave_1 left promiscuous mode [ 343.793191][ T8808] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.823652][ T8808] device bridge_slave_0 left promiscuous mode [ 343.851431][ T8808] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.947470][ T8823] netlink: 'syz.0.1457': attribute type 10 has an invalid length. [ 344.000469][ T8823] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 344.016210][ T8824] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1457'. [ 344.500938][ T8846] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1462'. [ 344.631929][ T8849] netlink: 'syz.2.1465': attribute type 10 has an invalid length. [ 344.652374][ T8849] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.1465'. [ 344.682286][ T8848] netlink: 'syz.0.1462': attribute type 12 has an invalid length. [ 344.700766][ T8848] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1462'. [ 344.768222][ T8850] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 344.999078][ T8856] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1467'. [ 345.562150][ T8871] FAULT_INJECTION: forcing a failure. [ 345.562150][ T8871] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 345.606626][ T8871] CPU: 0 PID: 8871 Comm: syz.1.1472 Not tainted syzkaller #0 [ 345.614094][ T8871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 345.624207][ T8871] Call Trace: [ 345.627537][ T8871] [ 345.630513][ T8871] dump_stack_lvl+0x168/0x22e [ 345.635275][ T8871] ? show_regs_print_info+0x12/0x12 [ 345.640657][ T8871] ? load_image+0x3b0/0x3b0 [ 345.645235][ T8871] ? __lock_acquire+0x7c50/0x7c50 [ 345.650340][ T8871] ? snprintf+0xd7/0x120 [ 345.654655][ T8871] should_fail_ex+0x399/0x4d0 [ 345.659552][ T8871] _copy_to_user+0x2c/0x130 [ 345.664118][ T8871] simple_read_from_buffer+0xe3/0x150 [ 345.669556][ T8871] proc_fail_nth_read+0x19a/0x210 [ 345.674624][ T8871] ? proc_fault_inject_write+0x2f0/0x2f0 [ 345.680317][ T8871] ? fsnotify_perm+0x248/0x550 [ 345.685111][ T8871] ? proc_fault_inject_write+0x2f0/0x2f0 [ 345.690792][ T8871] vfs_read+0x2c0/0x920 [ 345.694995][ T8871] ? kernel_read+0x1e0/0x1e0 [ 345.699624][ T8871] ? __fget_files+0x28/0x4d0 [ 345.704256][ T8871] ? __fget_files+0x44a/0x4d0 [ 345.708970][ T8871] ? __fdget_pos+0x2ae/0x360 [ 345.713596][ T8871] ? ksys_read+0x71/0x240 [ 345.717991][ T8871] ksys_read+0x143/0x240 [ 345.722311][ T8871] ? vfs_write+0x960/0x960 [ 345.726780][ T8871] ? lockdep_hardirqs_on+0x94/0x140 [ 345.732014][ T8871] do_syscall_64+0x4c/0xa0 [ 345.736467][ T8871] ? clear_bhb_loop+0x60/0xb0 [ 345.741197][ T8871] ? clear_bhb_loop+0x60/0xb0 [ 345.745920][ T8871] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 345.751852][ T8871] RIP: 0033:0x7fc43c98e15c [ 345.756295][ T8871] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 345.776027][ T8871] RSP: 002b:00007fc43d898030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 345.784474][ T8871] RAX: ffffffffffffffda RBX: 00007fc43cbe5fa0 RCX: 00007fc43c98e15c [ 345.792493][ T8871] RDX: 000000000000000f RSI: 00007fc43d8980a0 RDI: 0000000000000004 [ 345.800505][ T8871] RBP: 00007fc43d898090 R08: 0000000000000000 R09: 0000000000000000 [ 345.808498][ T8871] R10: 0000200000002640 R11: 0000000000000246 R12: 0000000000000001 [ 345.816512][ T8871] R13: 00007fc43cbe6038 R14: 00007fc43cbe5fa0 R15: 00007ffc59f1a578 [ 345.824538][ T8871] [ 346.344268][ T8882] sctp: [Deprecated]: syz.2.1475 (pid 8882) Use of int in max_burst socket option deprecated. [ 346.344268][ T8882] Use struct sctp_assoc_value instead [ 347.346963][ T8886] netlink: 'syz.1.1477': attribute type 10 has an invalid length. [ 347.405036][ T8886] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.1477'. [ 348.034684][ T8903] netlink: 'syz.1.1481': attribute type 3 has an invalid length. [ 348.384723][ T8912] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1486'. [ 348.519207][ T8915] netlink: 'syz.0.1487': attribute type 21 has an invalid length. [ 348.546938][ T8915] netlink: 'syz.0.1487': attribute type 3 has an invalid length. [ 348.557499][ T8915] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1487'. [ 349.080768][ T8924] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1489'. [ 349.100179][ T8926] netlink: 'syz.3.1490': attribute type 10 has an invalid length. [ 349.421849][ T8927] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 349.462367][ T8927] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 349.542327][ T8935] netlink: 'syz.0.1492': attribute type 10 has an invalid length. [ 349.551203][ T8922] delete_channel: no stack [ 349.567386][ T8935] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.1492'. [ 349.971746][ T8945] netlink: 'syz.0.1495': attribute type 21 has an invalid length. [ 350.029303][ T8945] netlink: 'syz.0.1495': attribute type 3 has an invalid length. [ 350.158971][ T8945] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1495'. [ 350.204111][ T8954] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1499'. [ 350.299287][ T8952] netlink: 'syz.2.1498': attribute type 21 has an invalid length. [ 350.326403][ T8952] netlink: 'syz.2.1498': attribute type 3 has an invalid length. [ 350.382495][ T8952] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1498'. [ 350.725746][ T8967] sctp: [Deprecated]: syz.3.1502 (pid 8967) Use of int in max_burst socket option deprecated. [ 350.725746][ T8967] Use struct sctp_assoc_value instead [ 350.988670][ T8973] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.1505'. [ 351.149436][ T8976] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1506'. [ 351.231689][ T8978] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 351.358646][ T8975] delete_channel: no stack [ 351.633368][ T8987] FAULT_INJECTION: forcing a failure. [ 351.633368][ T8987] name failslab, interval 1, probability 0, space 0, times 0 [ 351.692295][ T8987] CPU: 0 PID: 8987 Comm: syz.1.1508 Not tainted syzkaller #0 [ 351.699786][ T8987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 351.709910][ T8987] Call Trace: [ 351.713271][ T8987] [ 351.716246][ T8987] dump_stack_lvl+0x168/0x22e [ 351.721014][ T8987] ? show_regs_print_info+0x12/0x12 [ 351.726297][ T8987] ? load_image+0x3b0/0x3b0 [ 351.730885][ T8987] ? verify_lock_unused+0x140/0x140 [ 351.736181][ T8987] should_fail_ex+0x399/0x4d0 [ 351.740948][ T8987] should_failslab+0x5/0x20 [ 351.745520][ T8987] slab_pre_alloc_hook+0x59/0x310 [ 351.750630][ T8987] kmem_cache_alloc+0x56/0x2f0 [ 351.755467][ T8987] ? skb_clone+0x1e7/0x370 [ 351.759954][ T8987] skb_clone+0x1e7/0x370 [ 351.764305][ T8987] __netlink_deliver_tap+0x3ed/0x800 [ 351.769742][ T8987] ? netlink_deliver_tap+0x2e/0x1b0 [ 351.775029][ T8987] netlink_deliver_tap+0x19c/0x1b0 [ 351.780223][ T8987] netlink_sendskb+0x64/0x130 [ 351.785025][ T8987] netlink_ack+0xc7a/0x1100 [ 351.789612][ T8987] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 351.795445][ T8987] ? netlink_dump+0xcd0/0xcd0 [ 351.800202][ T8987] ? __skb_clone+0x480/0x790 [ 351.804896][ T8987] netlink_rcv_skb+0x263/0x420 [ 351.809733][ T8987] ? rtnetlink_bind+0x80/0x80 [ 351.814479][ T8987] ? netlink_ack+0x1100/0x1100 [ 351.819335][ T8987] ? netlink_deliver_tap+0x2e/0x1b0 [ 351.824616][ T8987] netlink_unicast+0x74d/0x8d0 [ 351.829572][ T8987] netlink_sendmsg+0x89e/0xbc0 [ 351.834430][ T8987] ? netlink_getsockopt+0x540/0x540 [ 351.839711][ T8987] ? aa_sock_msg_perm+0x94/0x150 [ 351.844725][ T8987] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 351.850074][ T8987] ? security_socket_sendmsg+0x7c/0xa0 [ 351.855613][ T8987] ? netlink_getsockopt+0x540/0x540 [ 351.860885][ T8987] ____sys_sendmsg+0x59b/0x970 [ 351.865743][ T8987] ? __sys_sendmsg_sock+0x30/0x30 [ 351.870851][ T8987] ? __import_iovec+0x315/0x500 [ 351.875791][ T8987] ? import_iovec+0x6f/0xa0 [ 351.880368][ T8987] ___sys_sendmsg+0x21c/0x290 [ 351.885122][ T8987] ? __sys_sendmsg+0x270/0x270 [ 351.889991][ T8987] ? __lock_acquire+0x7c50/0x7c50 [ 351.895125][ T8987] ? __fdget+0x17c/0x200 [ 351.899456][ T8987] __se_sys_sendmsg+0x19e/0x270 [ 351.904393][ T8987] ? __x64_sys_sendmsg+0x80/0x80 [ 351.909432][ T8987] ? lockdep_hardirqs_on+0x94/0x140 [ 351.914717][ T8987] do_syscall_64+0x4c/0xa0 [ 351.919205][ T8987] ? clear_bhb_loop+0x60/0xb0 [ 351.923950][ T8987] ? clear_bhb_loop+0x60/0xb0 [ 351.928697][ T8987] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 351.934658][ T8987] RIP: 0033:0x7fc43c98f749 [ 351.939136][ T8987] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 351.958830][ T8987] RSP: 002b:00007fc43d898038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 351.967312][ T8987] RAX: ffffffffffffffda RBX: 00007fc43cbe5fa0 RCX: 00007fc43c98f749 [ 351.975345][ T8987] RDX: 0000000004000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 351.983385][ T8987] RBP: 00007fc43d898090 R08: 0000000000000000 R09: 0000000000000000 [ 351.991417][ T8987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 351.999466][ T8987] R13: 00007fc43cbe6038 R14: 00007fc43cbe5fa0 R15: 00007ffc59f1a578 [ 352.007534][ T8987] [ 352.549175][ T9006] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.561535][ T9006] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.676514][ T9008] __nla_validate_parse: 4 callbacks suppressed [ 352.676536][ T9008] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1515'. [ 352.732485][ T9009] device bridge_slave_1 left promiscuous mode [ 352.773927][ T9009] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.817622][ T9009] device bridge_slave_0 left promiscuous mode [ 352.848207][ T9009] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.865461][ T9020] sctp: [Deprecated]: syz.0.1517 (pid 9020) Use of int in max_burst socket option deprecated. [ 352.865461][ T9020] Use struct sctp_assoc_value instead [ 353.386175][ T9026] validate_nla: 4 callbacks suppressed [ 353.386202][ T9026] netlink: 'syz.1.1518': attribute type 10 has an invalid length. [ 353.406438][ T9024] netlink: 'syz.4.1519': attribute type 3 has an invalid length. [ 353.444533][ T9026] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.1518'. [ 353.604806][ T9033] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1521'. [ 353.651800][ T9033] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 353.742319][ T9035] netlink: 'syz.2.1522': attribute type 21 has an invalid length. [ 353.767632][ T9032] delete_channel: no stack [ 353.771910][ T9035] netlink: 'syz.2.1522': attribute type 3 has an invalid length. [ 353.789187][ T9035] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1522'. [ 354.499470][ T9055] netlink: 'syz.4.1528': attribute type 21 has an invalid length. [ 354.538247][ T9055] netlink: 'syz.4.1528': attribute type 3 has an invalid length. [ 354.546086][ T9055] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1528'. [ 354.924842][ T9062] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1532'. [ 355.088600][ T9065] netlink: 'syz.1.1532': attribute type 16 has an invalid length. [ 355.345631][ T9078] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1538'. [ 355.518318][ T9083] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1539'. [ 355.618677][ T9083] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 355.708441][ T9083] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 355.898597][ T9082] delete_channel: no stack [ 356.424749][ T9102] netlink: 'syz.2.1546': attribute type 21 has an invalid length. [ 356.504487][ T9102] netlink: 'syz.2.1546': attribute type 3 has an invalid length. [ 356.561223][ T9102] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1546'. [ 357.091241][ T9111] netlink: 'syz.1.1549': attribute type 21 has an invalid length. [ 357.100751][ T9111] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1549'. [ 357.783860][ T9119] batman_adv: batadv0: Adding interface: wlan0 [ 357.797756][ T9119] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 357.907788][ T9119] batman_adv: batadv0: Interface activated: wlan0 [ 358.523208][ T9135] __nla_validate_parse: 2 callbacks suppressed [ 358.523227][ T9135] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1561'. [ 359.348831][ T9155] validate_nla: 6 callbacks suppressed [ 359.348851][ T9155] netlink: 'syz.4.1567': attribute type 3 has an invalid length. [ 360.244871][ T9175] FAULT_INJECTION: forcing a failure. [ 360.244871][ T9175] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 360.301615][ T9175] CPU: 0 PID: 9175 Comm: syz.4.1575 Not tainted syzkaller #0 [ 360.309086][ T9175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 360.319192][ T9175] Call Trace: [ 360.322508][ T9175] [ 360.325483][ T9175] dump_stack_lvl+0x168/0x22e [ 360.330241][ T9175] ? show_regs_print_info+0x12/0x12 [ 360.335514][ T9175] ? load_image+0x3b0/0x3b0 [ 360.340096][ T9175] ? __lock_acquire+0x7c50/0x7c50 [ 360.345187][ T9175] should_fail_ex+0x399/0x4d0 [ 360.349934][ T9175] _copy_from_user+0x2c/0x170 [ 360.354666][ T9175] __sys_bpf+0x265/0x6d0 [ 360.358969][ T9175] ? bpf_link_show_fdinfo+0x340/0x340 [ 360.364418][ T9175] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 360.370669][ T9175] __x64_sys_bpf+0x78/0x90 [ 360.375147][ T9175] do_syscall_64+0x4c/0xa0 [ 360.379631][ T9175] ? clear_bhb_loop+0x60/0xb0 [ 360.384367][ T9175] ? clear_bhb_loop+0x60/0xb0 [ 360.389104][ T9175] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 360.395060][ T9175] RIP: 0033:0x7f0354b8f749 [ 360.399529][ T9175] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 360.419185][ T9175] RSP: 002b:00007f0355963038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 360.427663][ T9175] RAX: ffffffffffffffda RBX: 00007f0354de5fa0 RCX: 00007f0354b8f749 [ 360.435694][ T9175] RDX: 0000000000000050 RSI: 0000200000000580 RDI: 000000000000000a [ 360.443819][ T9175] RBP: 00007f0355963090 R08: 0000000000000000 R09: 0000000000000000 [ 360.451931][ T9175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 360.459963][ T9175] R13: 00007f0354de6038 R14: 00007f0354de5fa0 R15: 00007ffc7fa2b948 [ 360.468098][ T9175] [ 360.553388][ T9183] netlink: 'syz.2.1577': attribute type 21 has an invalid length. [ 360.570876][ T9183] netlink: 'syz.2.1577': attribute type 3 has an invalid length. [ 360.600154][ T9183] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1577'. [ 361.016056][ T9189] netlink: 'syz.0.1580': attribute type 21 has an invalid length. [ 361.026738][ T9189] netlink: 'syz.0.1580': attribute type 3 has an invalid length. [ 361.035505][ T9189] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1580'. [ 361.045018][ T9191] netlink: 'syz.4.1582': attribute type 10 has an invalid length. [ 361.064344][ T9191] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.1582'. [ 361.093075][ T9193] netlink: 'syz.1.1581': attribute type 21 has an invalid length. [ 361.166238][ T9193] netlink: 'syz.1.1581': attribute type 3 has an invalid length. [ 361.177991][ T9193] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1581'. [ 361.946830][ T9203] netlink: 'syz.4.1585': attribute type 3 has an invalid length. [ 362.395081][ T9222] device wlan0 entered promiscuous mode [ 363.221355][ T9229] netlink: 'syz.0.1595': attribute type 10 has an invalid length. [ 363.257681][ T9229] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.1595'. [ 363.885725][ T9239] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1599'. [ 363.962637][ T9240] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1601'. [ 363.998731][ T9242] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.1610'. [ 364.570910][ T9245] validate_nla: 5 callbacks suppressed [ 364.570932][ T9245] netlink: 'syz.3.1600': attribute type 21 has an invalid length. [ 364.609580][ T9245] netlink: 'syz.3.1600': attribute type 3 has an invalid length. [ 364.747431][ T9245] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1600'. [ 365.167531][ T9250] sock: sock_set_timeout: `syz.0.1603' (pid 9250) tries to set negative timeout [ 366.060914][ T9261] netlink: 'syz.4.1607': attribute type 3 has an invalid length. [ 366.193317][ T9264] netlink: 'syz.1.1608': attribute type 3 has an invalid length. [ 366.894046][ T9275] netlink: 'syz.1.1614': attribute type 10 has an invalid length. [ 366.933074][ T9275] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.1614'. [ 367.270356][ T9279] sctp: [Deprecated]: syz.0.1615 (pid 9279) Use of int in max_burst socket option deprecated. [ 367.270356][ T9279] Use struct sctp_assoc_value instead [ 367.299857][ T9280] netlink: 'syz.2.1616': attribute type 21 has an invalid length. [ 367.337447][ T9280] netlink: 'syz.2.1616': attribute type 3 has an invalid length. [ 367.345295][ T9280] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1616'. [ 367.974397][ T9291] netlink: 'syz.3.1618': attribute type 21 has an invalid length. [ 368.043473][ T9291] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1618'. [ 368.636370][ T9302] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1623'. [ 369.220215][ T9309] netlink: 'syz.3.1624': attribute type 3 has an invalid length. [ 370.920090][ T9327] netlink: 'syz.0.1629': attribute type 10 has an invalid length. [ 370.956131][ T9327] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.1629'. [ 371.233148][ T9331] sctp: [Deprecated]: syz.2.1630 (pid 9331) Use of int in max_burst socket option deprecated. [ 371.233148][ T9331] Use struct sctp_assoc_value instead [ 371.294085][ T9325] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 371.543548][ T9334] netlink: 'syz.4.1631': attribute type 21 has an invalid length. [ 371.587392][ T9334] netlink: 'syz.4.1631': attribute type 3 has an invalid length. [ 371.595325][ T9334] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1631'. [ 371.851461][ T9337] netlink: 'syz.0.1633': attribute type 21 has an invalid length. [ 371.900879][ T9337] netlink: 'syz.0.1633': attribute type 3 has an invalid length. [ 371.941800][ T9337] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1633'. [ 372.885519][ T9350] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1635'. [ 373.223253][ T9354] netlink: 'syz.0.1637': attribute type 21 has an invalid length. [ 373.277526][ T9354] netlink: 'syz.0.1637': attribute type 3 has an invalid length. [ 373.285357][ T9354] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1637'. [ 373.949286][ T4476] wlan1: Trigger new scan to find an IBSS to join [ 374.144379][ T9364] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1650'. [ 374.363247][ T9365] netlink: 'syz.3.1640': attribute type 3 has an invalid length. [ 374.882530][ T9371] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1641'. [ 375.197384][ T9377] sctp: [Deprecated]: syz.4.1644 (pid 9377) Use of int in max_burst socket option deprecated. [ 375.197384][ T9377] Use struct sctp_assoc_value instead [ 375.615581][ T9385] FAULT_INJECTION: forcing a failure. [ 375.615581][ T9385] name failslab, interval 1, probability 0, space 0, times 0 [ 375.636019][ T9381] netlink: 'syz.1.1643': attribute type 10 has an invalid length. [ 375.672130][ T9381] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.1643'. [ 375.696888][ T9385] CPU: 1 PID: 9385 Comm: syz.3.1645 Not tainted syzkaller #0 [ 375.704423][ T9385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 375.714573][ T9385] Call Trace: [ 375.717931][ T9385] [ 375.720940][ T9385] dump_stack_lvl+0x168/0x22e [ 375.725711][ T9385] ? show_regs_print_info+0x12/0x12 [ 375.730988][ T9385] ? load_image+0x3b0/0x3b0 [ 375.735588][ T9385] ? __might_sleep+0xd0/0xd0 [ 375.740351][ T9385] ? __lock_acquire+0x7c50/0x7c50 [ 375.745450][ T9385] ? aa_file_perm+0x3ef/0xec0 [ 375.750212][ T9385] should_fail_ex+0x399/0x4d0 [ 375.754992][ T9385] should_failslab+0x5/0x20 [ 375.759566][ T9385] slab_pre_alloc_hook+0x59/0x310 [ 375.764703][ T9385] ? kernfs_fop_write_iter+0x155/0x520 [ 375.770263][ T9385] __kmem_cache_alloc_node+0x4f/0x260 [ 375.775744][ T9385] ? kernfs_fop_write_iter+0x155/0x520 [ 375.781285][ T9385] __kmalloc+0xa0/0x240 [ 375.785538][ T9385] kernfs_fop_write_iter+0x155/0x520 [ 375.790930][ T9385] vfs_write+0x44c/0x960 [ 375.795288][ T9385] ? file_end_write+0x250/0x250 [ 375.800253][ T9385] ? __fget_files+0x44a/0x4d0 [ 375.805138][ T9385] ? __fdget_pos+0x2ae/0x360 [ 375.809797][ T9385] ? ksys_write+0x71/0x240 [ 375.814298][ T9385] ksys_write+0x143/0x240 [ 375.818746][ T9385] ? __ia32_sys_read+0x80/0x80 [ 375.823629][ T9385] ? lockdep_hardirqs_on+0x94/0x140 [ 375.828971][ T9385] do_syscall_64+0x4c/0xa0 [ 375.833479][ T9385] ? clear_bhb_loop+0x60/0xb0 [ 375.838318][ T9385] ? clear_bhb_loop+0x60/0xb0 [ 375.843113][ T9385] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 375.849095][ T9385] RIP: 0033:0x7febc598f749 [ 375.853590][ T9385] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 375.873268][ T9385] RSP: 002b:00007febc3bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 375.881802][ T9385] RAX: ffffffffffffffda RBX: 00007febc5be5fa0 RCX: 00007febc598f749 [ 375.889833][ T9385] RDX: 0000000000000007 RSI: 0000200000000400 RDI: 0000000000000004 [ 375.897866][ T9385] RBP: 00007febc3bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 375.905919][ T9385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 375.913958][ T9385] R13: 00007febc5be6038 R14: 00007febc5be5fa0 R15: 00007ffd4bce64b8 [ 375.922081][ T9385] [ 376.457021][ T9389] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.1646'. [ 377.170567][ T9392] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1647'. [ 377.226749][ T9392] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 377.285402][ T9392] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 377.466453][ T9391] delete_channel: no stack [ 377.745366][ T9403] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 377.836235][ T9403] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 377.989570][ T9404] netlink: 'syz.3.1649': attribute type 21 has an invalid length. [ 378.014403][ T9404] netlink: 'syz.3.1649': attribute type 3 has an invalid length. [ 378.117407][ T9404] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1649'. [ 378.550683][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.557396][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.777579][ T4476] wlan1: Trigger new scan to find an IBSS to join [ 379.139254][ T9414] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1654'. [ 379.704413][ T9423] netlink: 'syz.0.1658': attribute type 3 has an invalid length. [ 379.749911][ T4476] wlan1: Creating new IBSS network, BSSID a6:6c:f6:8d:22:57 [ 379.972967][ T9425] sock: sock_set_timeout: `syz.4.1659' (pid 9425) tries to set negative timeout [ 380.837505][ T9437] netlink: 'syz.1.1662': attribute type 10 has an invalid length. [ 380.850886][ T9438] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1663'. [ 380.872586][ T9437] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.1662'. [ 380.956820][ T9438] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 381.157900][ T9432] delete_channel: no stack [ 387.117262][ T9450] netlink: 'syz.2.1667': attribute type 21 has an invalid length. [ 387.125205][ T9450] netlink: 'syz.2.1667': attribute type 3 has an invalid length. [ 387.143370][ T9450] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1667'. [ 387.170134][ T9453] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 387.326390][ T9456] FAULT_INJECTION: forcing a failure. [ 387.326390][ T9456] name failslab, interval 1, probability 0, space 0, times 0 [ 387.367226][ T9456] CPU: 1 PID: 9456 Comm: syz.4.1669 Not tainted syzkaller #0 [ 387.374783][ T9456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 387.384884][ T9456] Call Trace: [ 387.388206][ T9456] [ 387.391177][ T9456] dump_stack_lvl+0x168/0x22e [ 387.395910][ T9456] ? show_regs_print_info+0x12/0x12 [ 387.401168][ T9456] ? load_image+0x3b0/0x3b0 [ 387.405726][ T9456] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 387.411770][ T9456] ? lock_chain_count+0x20/0x20 [ 387.416685][ T9456] should_fail_ex+0x399/0x4d0 [ 387.421430][ T9456] should_failslab+0x5/0x20 [ 387.425984][ T9456] slab_pre_alloc_hook+0x59/0x310 [ 387.431060][ T9456] kmem_cache_alloc+0x56/0x2f0 [ 387.435889][ T9456] ? __build_skb+0x2a/0x3c0 [ 387.440459][ T9456] __build_skb+0x2a/0x3c0 [ 387.444846][ T9456] build_skb+0x1e/0x230 [ 387.449062][ T9456] bpf_prog_test_run_skb+0x372/0x11b0 [ 387.454494][ T9456] ? __fget_files+0x28/0x4d0 [ 387.459142][ T9456] ? __fget_files+0x44a/0x4d0 [ 387.463877][ T9456] ? cpu_online+0xa0/0xa0 [ 387.468262][ T9456] bpf_prog_test_run+0x31e/0x390 [ 387.473239][ T9456] __sys_bpf+0x593/0x6d0 [ 387.477514][ T9456] ? bpf_link_show_fdinfo+0x340/0x340 [ 387.482929][ T9456] ? lock_chain_count+0x20/0x20 [ 387.487817][ T9456] __x64_sys_bpf+0x78/0x90 [ 387.492267][ T9456] do_syscall_64+0x4c/0xa0 [ 387.496732][ T9456] ? clear_bhb_loop+0x60/0xb0 [ 387.501450][ T9456] ? clear_bhb_loop+0x60/0xb0 [ 387.506161][ T9456] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 387.512088][ T9456] RIP: 0033:0x7f0354b8f749 [ 387.516526][ T9456] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 387.536176][ T9456] RSP: 002b:00007f0355963038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 387.544616][ T9456] RAX: ffffffffffffffda RBX: 00007f0354de5fa0 RCX: 00007f0354b8f749 [ 387.552622][ T9456] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 387.560616][ T9456] RBP: 00007f0355963090 R08: 0000000000000000 R09: 0000000000000000 [ 387.568629][ T9456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 387.576645][ T9456] R13: 00007f0354de6038 R14: 00007f0354de5fa0 R15: 00007ffc7fa2b948 [ 387.584685][ T9456] [ 387.636122][ T9462] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1672'. [ 387.776278][ T9469] netlink: 'syz.1.1674': attribute type 2 has an invalid length. [ 387.829455][ T9474] netlink: 'syz.3.1673': attribute type 3 has an invalid length. [ 388.006365][ T9469] device 0 entered promiscuous mode [ 388.059755][ T9473] netlink: 'syz.1.1674': attribute type 9 has an invalid length. [ 388.068721][ T9473] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1674'. [ 388.078183][ T9477] netlink: 'syz.4.1676': attribute type 10 has an invalid length. [ 388.086452][ T9477] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.1676'. [ 388.143736][ T9484] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1677'. [ 388.177866][ T9484] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1677'. [ 388.195613][ T9481] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1677'. [ 388.235647][ T9485] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1677'. [ 388.669348][ T9496] netlink: 'syz.0.1683': attribute type 21 has an invalid length. [ 388.692320][ T9496] netlink: 'syz.0.1683': attribute type 3 has an invalid length. [ 388.734419][ T9496] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1683'. [ 389.376938][ T9512] netlink: 'syz.1.1688': attribute type 3 has an invalid length. [ 389.565659][ T9515] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1690'. [ 389.748253][ T9519] netlink: 'syz.4.1691': attribute type 10 has an invalid length. [ 390.110370][ T9528] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 390.237547][ T9527] delete_channel: no stack [ 391.898847][ T9574] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 391.941528][ T9573] delete_channel: no stack [ 392.636163][ T9598] validate_nla: 9 callbacks suppressed [ 392.636181][ T9598] netlink: 'syz.2.1720': attribute type 10 has an invalid length. [ 392.697267][ T9598] __nla_validate_parse: 9 callbacks suppressed [ 392.697285][ T9598] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.1720'. [ 393.062760][ T9605] netlink: 'syz.3.1721': attribute type 3 has an invalid length. [ 393.205069][ T9609] FAULT_INJECTION: forcing a failure. [ 393.205069][ T9609] name failslab, interval 1, probability 0, space 0, times 0 [ 393.261635][ T9609] CPU: 0 PID: 9609 Comm: syz.2.1722 Not tainted syzkaller #0 [ 393.269100][ T9609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 393.279200][ T9609] Call Trace: [ 393.282519][ T9609] [ 393.285490][ T9609] dump_stack_lvl+0x168/0x22e [ 393.290241][ T9609] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 393.296457][ T9609] ? show_regs_print_info+0x12/0x12 [ 393.301729][ T9609] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 393.307954][ T9609] should_fail_ex+0x399/0x4d0 [ 393.312686][ T9609] should_failslab+0x5/0x20 [ 393.317250][ T9609] slab_pre_alloc_hook+0x59/0x310 [ 393.322416][ T9609] kmem_cache_alloc_node+0x5a/0x320 [ 393.327681][ T9609] ? __alloc_skb+0xfc/0x7e0 [ 393.332339][ T9609] __alloc_skb+0xfc/0x7e0 [ 393.336727][ T9609] ? netlink_autobind+0xda/0x300 [ 393.341727][ T9609] netlink_sendmsg+0x645/0xbc0 [ 393.346554][ T9609] ? netlink_getsockopt+0x540/0x540 [ 393.351809][ T9609] ? aa_sock_msg_perm+0x94/0x150 [ 393.356817][ T9609] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 393.362156][ T9609] ? security_socket_sendmsg+0x7c/0xa0 [ 393.367681][ T9609] ? netlink_getsockopt+0x540/0x540 [ 393.372933][ T9609] ____sys_sendmsg+0x59b/0x970 [ 393.377765][ T9609] ? __sys_sendmsg_sock+0x30/0x30 [ 393.382845][ T9609] ? __import_iovec+0x315/0x500 [ 393.387755][ T9609] ? import_iovec+0x6f/0xa0 [ 393.392315][ T9609] ___sys_sendmsg+0x21c/0x290 [ 393.397045][ T9609] ? __sys_sendmsg+0x270/0x270 [ 393.401907][ T9609] ? __fdget+0x17c/0x200 [ 393.406210][ T9609] __se_sys_sendmsg+0x19e/0x270 [ 393.411112][ T9609] ? __x64_sys_sendmsg+0x80/0x80 [ 393.416126][ T9609] ? syscall_enter_from_user_mode+0x2a/0x80 [ 393.422082][ T9609] do_syscall_64+0x4c/0xa0 [ 393.426680][ T9609] ? clear_bhb_loop+0x60/0xb0 [ 393.431413][ T9609] ? clear_bhb_loop+0x60/0xb0 [ 393.436149][ T9609] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 393.442099][ T9609] RIP: 0033:0x7f52d9f8f749 [ 393.446566][ T9609] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 393.466231][ T9609] RSP: 002b:00007f52dadc8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 393.474795][ T9609] RAX: ffffffffffffffda RBX: 00007f52da1e5fa0 RCX: 00007f52d9f8f749 [ 393.482836][ T9609] RDX: 0000000000000000 RSI: 0000200000000a40 RDI: 0000000000000003 [ 393.490865][ T9609] RBP: 00007f52dadc8090 R08: 0000000000000000 R09: 0000000000000000 [ 393.498903][ T9609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 393.506925][ T9609] R13: 00007f52da1e6038 R14: 00007f52da1e5fa0 R15: 00007fff9c4fd4f8 [ 393.514989][ T9609] [ 393.681445][ T9620] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1727'. [ 393.707604][ T9620] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 393.814917][ T9619] delete_channel: no stack [ 394.297870][ T9635] sctp: [Deprecated]: syz.4.1732 (pid 9635) Use of int in max_burst socket option deprecated. [ 394.297870][ T9635] Use struct sctp_assoc_value instead [ 394.395208][ T9640] netlink: 'syz.0.1733': attribute type 10 has an invalid length. [ 394.416686][ T9640] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.1733'. [ 394.611402][ T9645] sctp: [Deprecated]: syz.3.1734 (pid 9645) Use of int in max_burst socket option deprecated. [ 394.611402][ T9645] Use struct sctp_assoc_value instead [ 395.231096][ T9665] FAULT_INJECTION: forcing a failure. [ 395.231096][ T9665] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 395.244561][ T9665] CPU: 1 PID: 9665 Comm: syz.3.1742 Not tainted syzkaller #0 [ 395.251980][ T9665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 395.262076][ T9665] Call Trace: [ 395.265483][ T9665] [ 395.268451][ T9665] dump_stack_lvl+0x168/0x22e [ 395.273181][ T9665] ? show_regs_print_info+0x12/0x12 [ 395.278432][ T9665] ? load_image+0x3b0/0x3b0 [ 395.282988][ T9665] ? __lock_acquire+0x7c50/0x7c50 [ 395.288077][ T9665] should_fail_ex+0x399/0x4d0 [ 395.292890][ T9665] _copy_from_user+0x2c/0x170 [ 395.297646][ T9665] do_ipv6_setsockopt+0x2b3/0x3b20 [ 395.302826][ T9665] ? sk_dst_reset+0xa0/0xa0 [ 395.307391][ T9665] ? verify_lock_unused+0x140/0x140 [ 395.312644][ T9665] ? mark_lock+0x94/0x320 [ 395.317025][ T9665] ? __lock_acquire+0x12e5/0x7c50 [ 395.322119][ T9665] ? get_pid_task+0x1c/0x1e0 [ 395.326764][ T9665] ? verify_lock_unused+0x140/0x140 [ 395.332013][ T9665] ? aa_label_sk_perm+0x3e7/0x500 [ 395.337075][ T9665] ? aa_sk_perm+0x920/0x920 [ 395.341622][ T9665] ? __might_sleep+0xd0/0xd0 [ 395.346262][ T9665] ? __fget_files+0x28/0x4d0 [ 395.350888][ T9665] ? __lock_acquire+0x7c50/0x7c50 [ 395.355946][ T9665] ? aa_sk_perm+0x7e5/0x920 [ 395.360488][ T9665] ? aa_af_perm+0x2b0/0x2b0 [ 395.365020][ T9665] ? __fget_files+0x44a/0x4d0 [ 395.369731][ T9665] ? aa_sock_opt_perm+0x74/0x100 [ 395.374703][ T9665] ipv6_setsockopt+0x55/0x190 [ 395.379413][ T9665] ? sock_common_recvmsg+0x1a0/0x1a0 [ 395.384736][ T9665] __sys_setsockopt+0x2bf/0x3d0 [ 395.389614][ T9665] __x64_sys_setsockopt+0xb1/0xc0 [ 395.394674][ T9665] do_syscall_64+0x4c/0xa0 [ 395.399121][ T9665] ? clear_bhb_loop+0x60/0xb0 [ 395.403836][ T9665] ? clear_bhb_loop+0x60/0xb0 [ 395.408550][ T9665] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 395.414477][ T9665] RIP: 0033:0x7febc598f749 [ 395.418916][ T9665] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 395.438546][ T9665] RSP: 002b:00007febc3bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 395.446987][ T9665] RAX: ffffffffffffffda RBX: 00007febc5be5fa0 RCX: 00007febc598f749 [ 395.455074][ T9665] RDX: 000000000000000b RSI: 0000000000000029 RDI: 0000000000000003 [ 395.463064][ T9665] RBP: 00007febc3bf6090 R08: 00000000000000b9 R09: 0000000000000000 [ 395.471052][ T9665] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 395.479051][ T9665] R13: 00007febc5be6038 R14: 00007febc5be5fa0 R15: 00007ffd4bce64b8 [ 395.487066][ T9665] [ 395.720454][ T9668] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1743'. [ 395.840245][ T9671] netlink: 'syz.3.1744': attribute type 29 has an invalid length. [ 396.485864][ T9667] delete_channel: no stack [ 397.506576][ T9668] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 397.525416][ T9668] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 397.541477][ T9671] netlink: 'syz.3.1744': attribute type 29 has an invalid length. [ 397.765469][ T9681] FAULT_INJECTION: forcing a failure. [ 397.765469][ T9681] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 397.779860][ T9681] CPU: 1 PID: 9681 Comm: syz.3.1748 Not tainted syzkaller #0 [ 397.787304][ T9681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 397.797409][ T9681] Call Trace: [ 397.800728][ T9681] [ 397.803692][ T9681] dump_stack_lvl+0x168/0x22e [ 397.808449][ T9681] ? show_regs_print_info+0x12/0x12 [ 397.813701][ T9681] ? load_image+0x3b0/0x3b0 [ 397.818314][ T9681] ? __lock_acquire+0x7c50/0x7c50 [ 397.823414][ T9681] should_fail_ex+0x399/0x4d0 [ 397.828157][ T9681] _copy_to_user+0x2c/0x130 [ 397.832712][ T9681] bpf_test_finish+0x4fa/0x600 [ 397.837537][ T9681] ? convert_skb_to___skb+0x420/0x420 [ 397.842969][ T9681] ? bpf_test_init+0x134/0x150 [ 397.847786][ T9681] bpf_prog_test_run_xdp+0x782/0xe50 [ 397.853134][ T9681] ? dev_put+0x80/0x80 [ 397.857261][ T9681] ? dev_put+0x80/0x80 [ 397.861378][ T9681] bpf_prog_test_run+0x31e/0x390 [ 397.866376][ T9681] __sys_bpf+0x593/0x6d0 [ 397.870671][ T9681] ? bpf_link_show_fdinfo+0x340/0x340 [ 397.876108][ T9681] ? lock_chain_count+0x20/0x20 [ 397.881017][ T9681] __x64_sys_bpf+0x78/0x90 [ 397.885477][ T9681] do_syscall_64+0x4c/0xa0 [ 397.889974][ T9681] ? clear_bhb_loop+0x60/0xb0 [ 397.894705][ T9681] ? clear_bhb_loop+0x60/0xb0 [ 397.899422][ T9681] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 397.905353][ T9681] RIP: 0033:0x7febc598f749 [ 397.909793][ T9681] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 397.929425][ T9681] RSP: 002b:00007febc3bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 397.937867][ T9681] RAX: ffffffffffffffda RBX: 00007febc5be5fa0 RCX: 00007febc598f749 [ 397.945871][ T9681] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 000000000000000a [ 397.953870][ T9681] RBP: 00007febc3bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 397.961871][ T9681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 397.969863][ T9681] R13: 00007febc5be6038 R14: 00007febc5be5fa0 R15: 00007ffd4bce64b8 [ 397.977874][ T9681] [ 398.016336][ T9686] netlink: 'syz.2.1749': attribute type 10 has an invalid length. [ 398.044918][ T9686] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.1749'. [ 398.186348][ T9696] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1752'. [ 398.493189][ T9703] sctp: [Deprecated]: syz.2.1753 (pid 9703) Use of int in max_burst socket option deprecated. [ 398.493189][ T9703] Use struct sctp_assoc_value instead [ 398.608063][ T9701] netlink: 'syz.4.1754': attribute type 4 has an invalid length. [ 398.687639][ T9701] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1754'. [ 398.957016][ T9715] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1758'. [ 398.996783][ T9715] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 399.029826][ T9715] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 399.090380][ T9714] delete_channel: no stack [ 399.390048][ T9729] netlink: 'syz.4.1763': attribute type 2 has an invalid length. [ 399.398588][ T9731] netlink: 'syz.3.1764': attribute type 10 has an invalid length. [ 399.418139][ T9731] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.1764'. [ 399.428898][ T9729] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1763'. [ 399.448589][ T9729] netlink: 15743 bytes leftover after parsing attributes in process `syz.4.1763'. [ 399.692579][ T9740] netlink: 15231 bytes leftover after parsing attributes in process `syz.3.1767'. [ 399.856639][ T9740] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.1767'. [ 400.286709][ T9751] sctp: [Deprecated]: syz.0.1771 (pid 9751) Use of int in max_burst socket option deprecated. [ 400.286709][ T9751] Use struct sctp_assoc_value instead [ 400.472180][ T9756] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1773'. [ 400.506759][ T9756] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 400.581772][ T9765] sock: sock_set_timeout: `syz.3.1775' (pid 9765) tries to set negative timeout [ 400.614175][ T9755] delete_channel: no stack [ 400.714236][ T9767] netlink: 'syz.0.1777': attribute type 10 has an invalid length. [ 400.863012][ T9773] netlink: 'syz.1.1779': attribute type 21 has an invalid length. [ 400.916212][ T9771] netlink: 'syz.4.1780': attribute type 3 has an invalid length. [ 401.312570][ T9784] netlink: 'syz.4.1786': attribute type 10 has an invalid length. [ 402.077797][ T9803] sctp: [Deprecated]: syz.1.1789 (pid 9803) Use of int in max_burst socket option deprecated. [ 402.077797][ T9803] Use struct sctp_assoc_value instead [ 402.839405][ T9814] netlink: 'syz.0.1793': attribute type 10 has an invalid length. [ 403.287667][ T9818] __nla_validate_parse: 3 callbacks suppressed [ 403.287686][ T9818] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1796'. [ 403.471228][ T9818] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 403.715522][ T9817] delete_channel: no stack [ 404.195610][ T9831] netlink: 'syz.0.1800': attribute type 10 has an invalid length. [ 404.232618][ T9831] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1800'. [ 404.232855][ T9820] netlink: 'syz.1.1797': attribute type 3 has an invalid length. [ 404.669194][ T9843] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1806'. [ 404.710105][ T9844] sctp: [Deprecated]: syz.3.1805 (pid 9844) Use of int in max_burst socket option deprecated. [ 404.710105][ T9844] Use struct sctp_assoc_value instead [ 404.849634][ T9847] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.1803'. [ 404.892084][ T9843] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 404.916477][ T9843] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 404.962845][ T9851] netlink: 'syz.4.1808': attribute type 10 has an invalid length. [ 404.978820][ T9840] delete_channel: no stack [ 404.993617][ T9851] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.1808'. [ 405.317014][ T9861] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1812'. [ 405.454967][ T9861] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 405.540800][ T9859] delete_channel: no stack [ 405.564210][ T9868] FAULT_INJECTION: forcing a failure. [ 405.564210][ T9868] name failslab, interval 1, probability 0, space 0, times 0 [ 405.597311][ T9868] CPU: 1 PID: 9868 Comm: syz.1.1814 Not tainted syzkaller #0 [ 405.604784][ T9868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 405.615052][ T9868] Call Trace: [ 405.618382][ T9868] [ 405.621355][ T9868] dump_stack_lvl+0x168/0x22e [ 405.626142][ T9868] ? show_regs_print_info+0x12/0x12 [ 405.631416][ T9868] ? load_image+0x3b0/0x3b0 [ 405.636018][ T9868] ? perf_trace_lock_acquire+0xf7/0x3c0 [ 405.641627][ T9868] ? verify_lock_unused+0x140/0x140 [ 405.646897][ T9868] ? perf_trace_lock_acquire+0xf7/0x3c0 [ 405.652501][ T9868] should_fail_ex+0x399/0x4d0 [ 405.657246][ T9868] should_failslab+0x5/0x20 [ 405.661813][ T9868] slab_pre_alloc_hook+0x59/0x310 [ 405.666909][ T9868] kmem_cache_alloc+0x56/0x2f0 [ 405.671749][ T9868] ? skb_clone+0x1e7/0x370 [ 405.676227][ T9868] skb_clone+0x1e7/0x370 [ 405.680579][ T9868] __netlink_deliver_tap+0x3ed/0x800 [ 405.685947][ T9868] ? netlink_deliver_tap+0x2e/0x1b0 [ 405.691223][ T9868] netlink_deliver_tap+0x19c/0x1b0 [ 405.696393][ T9868] netlink_unicast+0x728/0x8d0 [ 405.701245][ T9868] netlink_sendmsg+0x89e/0xbc0 [ 405.706083][ T9868] ? netlink_getsockopt+0x540/0x540 [ 405.711345][ T9868] ? aa_sock_msg_perm+0x94/0x150 [ 405.716440][ T9868] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 405.721778][ T9868] ? security_socket_sendmsg+0x7c/0xa0 [ 405.727305][ T9868] ? netlink_getsockopt+0x540/0x540 [ 405.732558][ T9868] ____sys_sendmsg+0x59b/0x970 [ 405.737388][ T9868] ? __sys_sendmsg_sock+0x30/0x30 [ 405.742459][ T9868] ? __import_iovec+0x315/0x500 [ 405.747375][ T9868] ? import_iovec+0x6f/0xa0 [ 405.751963][ T9868] ___sys_sendmsg+0x21c/0x290 [ 405.756699][ T9868] ? __sys_sendmsg+0x270/0x270 [ 405.761549][ T9868] ? __lock_acquire+0x7c50/0x7c50 [ 405.766654][ T9868] ? __fdget+0x17c/0x200 [ 405.770967][ T9868] __se_sys_sendmsg+0x19e/0x270 [ 405.775950][ T9868] ? __x64_sys_sendmsg+0x80/0x80 [ 405.780986][ T9868] ? lockdep_hardirqs_on+0x94/0x140 [ 405.786255][ T9868] do_syscall_64+0x4c/0xa0 [ 405.790737][ T9868] ? clear_bhb_loop+0x60/0xb0 [ 405.795468][ T9868] ? clear_bhb_loop+0x60/0xb0 [ 405.800210][ T9868] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 405.806182][ T9868] RIP: 0033:0x7fc43c98f749 [ 405.810693][ T9868] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 405.830356][ T9868] RSP: 002b:00007fc43d898038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 405.838835][ T9868] RAX: ffffffffffffffda RBX: 00007fc43cbe5fa0 RCX: 00007fc43c98f749 [ 405.846929][ T9868] RDX: 0000000000000894 RSI: 0000200000000000 RDI: 0000000000000003 [ 405.854959][ T9868] RBP: 00007fc43d898090 R08: 0000000000000000 R09: 0000000000000000 [ 405.862990][ T9868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 405.871023][ T9868] R13: 00007fc43cbe6038 R14: 00007fc43cbe5fa0 R15: 00007ffc59f1a578 [ 405.879074][ T9868] [ 406.077606][ T9868] netlink: 'syz.1.1814': attribute type 6 has an invalid length. [ 406.511370][ T9884] sctp: [Deprecated]: syz.1.1820 (pid 9884) Use of int in max_burst socket option deprecated. [ 406.511370][ T9884] Use struct sctp_assoc_value instead [ 406.691673][ T9888] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1822'. [ 406.757038][ T9888] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 406.833553][ T9890] netlink: 'syz.4.1823': attribute type 10 has an invalid length. [ 406.841778][ T9890] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.1823'. [ 406.858411][ T9887] delete_channel: no stack [ 407.414129][ T9894] netlink: 202920 bytes leftover after parsing attributes in process `syz.1.1825'. [ 407.950164][ T9923] netlink: 'syz.1.1833': attribute type 3 has an invalid length. [ 408.497217][ T9924] netlink: 'syz.0.1834': attribute type 3 has an invalid length. [ 408.865111][ T9932] sctp: [Deprecated]: syz.3.1835 (pid 9932) Use of int in max_burst socket option deprecated. [ 408.865111][ T9932] Use struct sctp_assoc_value instead [ 411.199954][ T9931] netlink: 'syz.0.1837': attribute type 10 has an invalid length. [ 411.223686][ T9931] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.1837'. [ 411.476316][ T9943] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1841'. [ 411.530202][ T9945] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 411.593130][ T9945] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 411.673573][ T9942] delete_channel: no stack [ 411.822034][ T4480] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 411.995961][ T9950] netlink: 202920 bytes leftover after parsing attributes in process `syz.4.1844'. [ 412.388518][ T9966] netlink: 'syz.3.1851': attribute type 10 has an invalid length. [ 412.407609][ T9964] sctp: [Deprecated]: syz.2.1849 (pid 9964) Use of int in max_burst socket option deprecated. [ 412.407609][ T9964] Use struct sctp_assoc_value instead [ 412.433831][ T9966] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.1851'. [ 412.458511][ T9971] FAULT_INJECTION: forcing a failure. [ 412.458511][ T9971] name failslab, interval 1, probability 0, space 0, times 0 [ 412.507427][ T9971] CPU: 0 PID: 9971 Comm: syz.0.1852 Not tainted syzkaller #0 [ 412.514893][ T9971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 412.525001][ T9971] Call Trace: [ 412.528323][ T9971] [ 412.531300][ T9971] dump_stack_lvl+0x168/0x22e [ 412.536048][ T9971] ? show_regs_print_info+0x12/0x12 [ 412.541313][ T9971] ? load_image+0x3b0/0x3b0 [ 412.545862][ T9971] ? perf_trace_lock+0xf3/0x370 [ 412.550767][ T9971] ? verify_lock_unused+0x140/0x140 [ 412.556027][ T9971] ? perf_trace_lock+0xf3/0x370 [ 412.560953][ T9971] should_fail_ex+0x399/0x4d0 [ 412.565703][ T9971] should_failslab+0x5/0x20 [ 412.570271][ T9971] slab_pre_alloc_hook+0x59/0x310 [ 412.575357][ T9971] kmem_cache_alloc+0x56/0x2f0 [ 412.580178][ T9971] ? skb_clone+0x1e7/0x370 [ 412.584650][ T9971] skb_clone+0x1e7/0x370 [ 412.588954][ T9971] __netlink_deliver_tap+0x3ed/0x800 [ 412.594310][ T9971] ? netlink_deliver_tap+0x2e/0x1b0 [ 412.599566][ T9971] netlink_deliver_tap+0x19c/0x1b0 [ 412.604734][ T9971] netlink_unicast+0x728/0x8d0 [ 412.609575][ T9971] netlink_sendmsg+0x89e/0xbc0 [ 412.614399][ T9971] ? netlink_getsockopt+0x540/0x540 [ 412.619652][ T9971] ? aa_sock_msg_perm+0x94/0x150 [ 412.624712][ T9971] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 412.630069][ T9971] ? security_socket_sendmsg+0x7c/0xa0 [ 412.635598][ T9971] ? netlink_getsockopt+0x540/0x540 [ 412.640856][ T9971] ____sys_sendmsg+0x59b/0x970 [ 412.645679][ T9971] ? __sys_sendmsg_sock+0x30/0x30 [ 412.650759][ T9971] ? __import_iovec+0x315/0x500 [ 412.655709][ T9971] ? import_iovec+0x6f/0xa0 [ 412.660271][ T9971] ___sys_sendmsg+0x21c/0x290 [ 412.665008][ T9971] ? __sys_sendmsg+0x270/0x270 [ 412.669865][ T9971] ? __lock_acquire+0x7c50/0x7c50 [ 412.674976][ T9971] ? __fdget+0x17c/0x200 [ 412.679297][ T9971] __se_sys_sendmsg+0x19e/0x270 [ 412.684205][ T9971] ? ct_nmi_exit+0x145/0x1c0 [ 412.688860][ T9971] ? __x64_sys_sendmsg+0x80/0x80 [ 412.693871][ T9971] ? lockdep_hardirqs_on+0x94/0x140 [ 412.699262][ T9971] do_syscall_64+0x4c/0xa0 [ 412.703749][ T9971] ? clear_bhb_loop+0x60/0xb0 [ 412.708485][ T9971] ? clear_bhb_loop+0x60/0xb0 [ 412.713224][ T9971] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 412.719181][ T9971] RIP: 0033:0x7fb64878f749 [ 412.723648][ T9971] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 412.743311][ T9971] RSP: 002b:00007fb64956a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 412.751826][ T9971] RAX: ffffffffffffffda RBX: 00007fb6489e5fa0 RCX: 00007fb64878f749 [ 412.759858][ T9971] RDX: 0000000020040010 RSI: 00002000000000c0 RDI: 0000000000000005 [ 412.767881][ T9971] RBP: 00007fb64956a090 R08: 0000000000000000 R09: 0000000000000000 [ 412.775900][ T9971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 412.784034][ T9971] R13: 00007fb6489e6038 R14: 00007fb6489e5fa0 R15: 00007ffd6755e888 [ 412.792174][ T9971] [ 413.258662][ T9980] FAULT_INJECTION: forcing a failure. [ 413.258662][ T9980] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 413.296878][ T9980] CPU: 0 PID: 9980 Comm: syz.4.1857 Not tainted syzkaller #0 [ 413.304461][ T9980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 413.314563][ T9980] Call Trace: [ 413.317892][ T9980] [ 413.320909][ T9980] dump_stack_lvl+0x168/0x22e [ 413.325653][ T9980] ? show_regs_print_info+0x12/0x12 [ 413.330909][ T9980] ? load_image+0x3b0/0x3b0 [ 413.335465][ T9980] ? __lock_acquire+0x7c50/0x7c50 [ 413.340565][ T9980] should_fail_ex+0x399/0x4d0 [ 413.345319][ T9980] _copy_from_user+0x2c/0x170 [ 413.350066][ T9980] bpf_ctx_init+0x136/0x1a0 [ 413.354633][ T9980] bpf_prog_test_run_sk_lookup+0x299/0xb70 [ 413.360514][ T9980] ? __lock_acquire+0x7c50/0x7c50 [ 413.365623][ T9980] ? bpf_test_timer_leave+0x150/0x150 [ 413.371069][ T9980] ? bpf_test_timer_leave+0x150/0x150 [ 413.376498][ T9980] bpf_prog_test_run+0x31e/0x390 [ 413.381491][ T9980] __sys_bpf+0x593/0x6d0 [ 413.385781][ T9980] ? bpf_link_show_fdinfo+0x340/0x340 [ 413.391227][ T9980] ? lock_chain_count+0x20/0x20 [ 413.396167][ T9980] __x64_sys_bpf+0x78/0x90 [ 413.400648][ T9980] do_syscall_64+0x4c/0xa0 [ 413.405110][ T9980] ? clear_bhb_loop+0x60/0xb0 [ 413.409837][ T9980] ? clear_bhb_loop+0x60/0xb0 [ 413.414549][ T9980] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 413.420474][ T9980] RIP: 0033:0x7f0354b8f749 [ 413.424918][ T9980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 413.444592][ T9980] RSP: 002b:00007f0355963038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 413.453040][ T9980] RAX: ffffffffffffffda RBX: 00007f0354de5fa0 RCX: 00007f0354b8f749 [ 413.461047][ T9980] RDX: 0000000000000031 RSI: 0000200000000500 RDI: 000000000000000a [ 413.469051][ T9980] RBP: 00007f0355963090 R08: 0000000000000000 R09: 0000000000000000 [ 413.477087][ T9980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 413.485111][ T9980] R13: 00007f0354de6038 R14: 00007f0354de5fa0 R15: 00007ffc7fa2b948 [ 413.493133][ T9980] [ 413.568403][ T9990] netlink: 192 bytes leftover after parsing attributes in process `syz.3.1858'. [ 414.166385][ T9997] bond0: (slave macvlan0): Error: Slave device does not support XDP [ 414.312653][T10009] netlink: 'syz.1.1864': attribute type 10 has an invalid length. [ 414.334994][ T9999] netlink: 202920 bytes leftover after parsing attributes in process `syz.3.1859'. [ 414.341520][T10009] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.1864'. [ 414.405220][T10012] sctp: [Deprecated]: syz.2.1865 (pid 10012) Use of int in max_burst socket option deprecated. [ 414.405220][T10012] Use struct sctp_assoc_value instead [ 414.964968][T10029] netlink: 'syz.1.1872': attribute type 19 has an invalid length. [ 415.244820][T10034] netlink: 'syz.0.1874': attribute type 12 has an invalid length. [ 415.474058][T10042] netlink: 'syz.4.1877': attribute type 21 has an invalid length. [ 415.524301][T10042] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1877'. [ 415.663236][T10042] netlink: 'syz.4.1877': attribute type 1 has an invalid length. [ 415.932875][T10049] netlink: 'syz.1.1879': attribute type 10 has an invalid length. [ 415.970322][T10049] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.1879'. [ 416.018799][T10053] sctp: [Deprecated]: syz.3.1881 (pid 10053) Use of int in max_burst socket option deprecated. [ 416.018799][T10053] Use struct sctp_assoc_value instead [ 416.386447][T10064] sock: sock_set_timeout: `syz.4.1885' (pid 10064) tries to set negative timeout [ 417.517329][T10082] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1893'. [ 417.557679][T10082] netlink: zone id is out of range [ 417.563188][T10082] netlink: zone id is out of range [ 417.595126][T10082] netlink: zone id is out of range [ 417.637751][T10082] netlink: zone id is out of range [ 417.694255][T10082] netlink: zone id is out of range [ 417.747198][T10082] netlink: zone id is out of range [ 417.752808][T10082] netlink: zone id is out of range [ 417.766039][T10082] netlink: zone id is out of range [ 417.786163][T10082] netlink: zone id is out of range [ 417.809922][T10082] netlink: zone id is out of range [ 417.827249][T10096] sctp: [Deprecated]: syz.0.1897 (pid 10096) Use of int in max_burst socket option deprecated. [ 417.827249][T10096] Use struct sctp_assoc_value instead [ 417.955811][T10091] netlink: 'syz.4.1896': attribute type 10 has an invalid length. [ 417.974478][T10091] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.1896'. [ 419.202140][T10118] FAULT_INJECTION: forcing a failure. [ 419.202140][T10118] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 419.246518][T10118] CPU: 0 PID: 10118 Comm: syz.3.1903 Not tainted syzkaller #0 [ 419.254252][T10118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 419.264367][T10118] Call Trace: [ 419.267697][T10118] [ 419.270714][T10118] dump_stack_lvl+0x168/0x22e [ 419.275547][T10118] ? show_regs_print_info+0x12/0x12 [ 419.280842][T10118] ? load_image+0x3b0/0x3b0 [ 419.285409][T10118] ? __lock_acquire+0x7c50/0x7c50 [ 419.290509][T10118] should_fail_ex+0x399/0x4d0 [ 419.295254][T10118] _copy_from_user+0x2c/0x170 [ 419.299995][T10118] __sys_bpf+0x265/0x6d0 [ 419.304297][T10118] ? bpf_link_show_fdinfo+0x340/0x340 [ 419.309732][T10118] ? lock_chain_count+0x20/0x20 [ 419.314636][T10118] __x64_sys_bpf+0x78/0x90 [ 419.319080][T10118] do_syscall_64+0x4c/0xa0 [ 419.323525][T10118] ? clear_bhb_loop+0x60/0xb0 [ 419.328231][T10118] ? clear_bhb_loop+0x60/0xb0 [ 419.332936][T10118] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 419.338858][T10118] RIP: 0033:0x7febc598f749 [ 419.343301][T10118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 419.363022][T10118] RSP: 002b:00007febc3bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 419.371465][T10118] RAX: ffffffffffffffda RBX: 00007febc5be5fa0 RCX: 00007febc598f749 [ 419.379464][T10118] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 419.387499][T10118] RBP: 00007febc3bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 419.395518][T10118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 419.403548][T10118] R13: 00007febc5be6038 R14: 00007febc5be5fa0 R15: 00007ffd4bce64b8 [ 419.411561][T10118] [ 419.674903][T10124] netlink: 'syz.1.1906': attribute type 3 has an invalid length. [ 419.995573][T10135] FAULT_INJECTION: forcing a failure. [ 419.995573][T10135] name failslab, interval 1, probability 0, space 0, times 0 [ 420.008670][T10135] CPU: 1 PID: 10135 Comm: syz.1.1910 Not tainted syzkaller #0 [ 420.016180][T10135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 420.026543][T10135] Call Trace: [ 420.029869][T10135] [ 420.032836][T10135] dump_stack_lvl+0x168/0x22e [ 420.037571][T10135] ? show_regs_print_info+0x12/0x12 [ 420.042830][T10135] ? load_image+0x3b0/0x3b0 [ 420.047411][T10135] should_fail_ex+0x399/0x4d0 [ 420.052148][T10135] should_failslab+0x5/0x20 [ 420.056712][T10135] slab_pre_alloc_hook+0x59/0x310 [ 420.061784][T10135] ? __kernel_text_address+0x9/0x30 [ 420.067039][T10135] kmem_cache_alloc+0x56/0x2f0 [ 420.071847][T10135] ? dst_alloc+0x101/0x160 [ 420.076386][T10135] dst_alloc+0x101/0x160 [ 420.080693][T10135] ip_route_output_key_hash_rcu+0x14a4/0x23f0 [ 420.086824][T10135] ? ip_route_output_key_hash+0x12b/0x340 [ 420.092597][T10135] ip_route_output_key_hash+0x207/0x340 [ 420.098187][T10135] ? __kmalloc_node_track_caller+0xae/0x230 [ 420.104134][T10135] ? pskb_expand_head+0x1a6/0x12a0 [ 420.109285][T10135] ? ipgre_xmit+0x463/0xb20 [ 420.113858][T10135] ? ip_route_input_rcu+0x30a0/0x30a0 [ 420.119281][T10135] ? bpf_prog_208b094576c80b22+0x56/0x5b [ 420.124979][T10135] ? memset+0x1e/0x40 [ 420.129012][T10135] ip_route_output_flow+0x26/0x150 [ 420.134179][T10135] ip_tunnel_xmit+0x943/0x2360 [ 420.138997][T10135] ? ip_tunnel_xmit+0xb0/0x2360 [ 420.143908][T10135] ? ip4_dst_hoplimit+0x2d0/0x2d0 [ 420.148993][T10135] ? skb_push+0x8a/0xd0 [ 420.153203][T10135] ? gre_build_header+0x25b/0x9a0 [ 420.158293][T10135] ipgre_xmit+0x79d/0xb20 [ 420.162700][T10135] dev_hard_start_xmit+0x262/0x870 [ 420.167887][T10135] __dev_queue_xmit+0x1bf1/0x3760 [ 420.172959][T10135] ? __dev_queue_xmit+0x26f/0x3760 [ 420.178112][T10135] ? netdev_core_pick_tx+0x340/0x340 [ 420.183453][T10135] ? __kmem_cache_alloc_node+0x140/0x260 [ 420.189118][T10135] ? skb_release_data+0x1d2/0x7c0 [ 420.194177][T10135] __bpf_redirect+0x915/0x1180 [ 420.199019][T10135] bpf_clone_redirect+0x26c/0x3c0 [ 420.204088][T10135] bpf_prog_208b094576c80b22+0x56/0x5b [ 420.209584][T10135] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 420.215623][T10135] ? lock_chain_count+0x20/0x20 [ 420.220536][T10135] ? seqcount_lockdep_reader_access+0x120/0x1c0 [ 420.226812][T10135] ? lockdep_hardirqs_on+0x94/0x140 [ 420.232043][T10135] ? ktime_get+0x7b/0x270 [ 420.236398][T10135] ? seqcount_lockdep_reader_access+0x172/0x1c0 [ 420.242750][T10135] ? ktime_get_real_ts64+0x420/0x420 [ 420.248066][T10135] ? read_lock_is_recursive+0x10/0x10 [ 420.253477][T10135] ? __cant_sleep+0x210/0x210 [ 420.258202][T10135] ? ktime_get+0x247/0x270 [ 420.262649][T10135] bpf_test_run+0x29e/0x810 [ 420.267204][T10135] ? convert___skb_to_skb+0x580/0x580 [ 420.272625][T10135] ? eth_get_headlen+0x1f0/0x1f0 [ 420.277588][T10135] ? __build_skb+0x257/0x3c0 [ 420.282217][T10135] ? convert___skb_to_skb+0x3d/0x580 [ 420.287539][T10135] bpf_prog_test_run_skb+0xa40/0x11b0 [ 420.292962][T10135] ? cpu_online+0xa0/0xa0 [ 420.297316][T10135] bpf_prog_test_run+0x31e/0x390 [ 420.302292][T10135] __sys_bpf+0x593/0x6d0 [ 420.306569][T10135] ? bpf_link_show_fdinfo+0x340/0x340 [ 420.311989][T10135] ? lock_chain_count+0x20/0x20 [ 420.316885][T10135] __x64_sys_bpf+0x78/0x90 [ 420.321337][T10135] do_syscall_64+0x4c/0xa0 [ 420.325786][T10135] ? clear_bhb_loop+0x60/0xb0 [ 420.330495][T10135] ? clear_bhb_loop+0x60/0xb0 [ 420.335204][T10135] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 420.341129][T10135] RIP: 0033:0x7fc43c98f749 [ 420.345582][T10135] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 420.365256][T10135] RSP: 002b:00007fc43d898038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 420.373703][T10135] RAX: ffffffffffffffda RBX: 00007fc43cbe5fa0 RCX: 00007fc43c98f749 [ 420.381707][T10135] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 420.389731][T10135] RBP: 00007fc43d898090 R08: 0000000000000000 R09: 0000000000000000 [ 420.397731][T10135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 420.405732][T10135] R13: 00007fc43cbe6038 R14: 00007fc43cbe5fa0 R15: 00007ffc59f1a578 [ 420.413744][T10135] [ 420.456606][T10136] netlink: 'syz.2.1911': attribute type 10 has an invalid length. [ 420.464781][T10136] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.1911'. [ 420.485949][T10140] sctp: [Deprecated]: syz.4.1912 (pid 10140) Use of int in max_burst socket option deprecated. [ 420.485949][T10140] Use struct sctp_assoc_value instead [ 421.176078][T10156] netlink: 'syz.1.1917': attribute type 10 has an invalid length. [ 421.229815][T10156] device geneve0 entered promiscuous mode [ 421.444715][T10156] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 421.471621][T10164] netlink: 'syz.1.1917': attribute type 1 has an invalid length. [ 421.552262][T10164] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1917'. [ 421.576094][T10167] netlink: 'syz.0.1920': attribute type 3 has an invalid length. [ 421.974855][T10183] netlink: 'syz.1.1925': attribute type 10 has an invalid length. [ 421.992609][T10183] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.1925'. [ 422.454705][T10196] sctp: [Deprecated]: syz.1.1928 (pid 10196) Use of int in max_burst socket option deprecated. [ 422.454705][T10196] Use struct sctp_assoc_value instead [ 422.745732][T10199] net_ratelimit: 4 callbacks suppressed [ 422.745753][T10199] sock: sock_set_timeout: `syz.2.1929' (pid 10199) tries to set negative timeout [ 423.599555][T10219] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 423.607537][T10219] #PF: supervisor instruction fetch in kernel mode [ 423.614075][T10219] #PF: error_code(0x0010) - not-present page [ 423.620094][T10219] PGD 46b4d067 P4D 46b4d067 PUD 0 [ 423.625251][T10219] Oops: 0010 [#1] PREEMPT SMP KASAN [ 423.630469][T10219] CPU: 0 PID: 10219 Comm: syz.1.1936 Not tainted syzkaller #0 [ 423.637944][T10219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 423.648023][T10219] RIP: 0010:0x0 [ 423.651511][T10219] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 423.658905][T10219] RSP: 0018:ffffc9000e5f7458 EFLAGS: 00010246 [ 423.664998][T10219] RAX: 1ffffffff15eca1f RBX: 0000000000000007 RCX: 0000000000000001 [ 423.673054][T10219] RDX: ffffc9000e5f7500 RSI: 0000000000000001 RDI: ffff888057f5e000 [ 423.681050][T10219] RBP: ffffc9000e5f7570 R08: dffffc0000000000 R09: ffffed100afebc08 [ 423.689056][T10219] R10: ffffed100afebc08 R11: 1ffff1100afebc07 R12: ffffe8ffffc46a58 [ 423.697084][T10219] R13: ffffffff8af650f8 R14: 0000000000000001 R15: ffff888057f5e000 [ 423.705082][T10219] FS: 00007fc43d8986c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 423.714033][T10219] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 423.720647][T10219] CR2: ffffffffffffffd6 CR3: 00000000628ab000 CR4: 00000000003506f0 [ 423.729108][T10219] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 423.737104][T10219] DR3: 0000000000000000 DR6: 00000000ffff0ff1 DR7: 0000000000000600 [ 423.745183][T10219] Call Trace: [ 423.748487][T10219] [ 423.751440][T10219] bond_xdp_xmit+0x309/0x520 [ 423.756068][T10219] ? bond_xdp_xmit+0x93/0x520 [ 423.760828][T10219] ? bond_xdp+0x840/0x840 [ 423.765214][T10219] ? __schedule+0x10f4/0x40b0 [ 423.769941][T10219] bq_xmit_all+0xcb8/0x10f0 [ 423.774506][T10219] ? lock_chain_count+0x20/0x20 [ 423.779392][T10219] ? __sched_text_start+0x8/0x8 [ 423.784295][T10219] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 423.790073][T10219] ? __dev_flush+0x1b0/0x1b0 [ 423.794708][T10219] ? preempt_schedule+0xa7/0xb0 [ 423.799605][T10219] ? bpf_test_run_xdp_live+0x45c/0x1990 [ 423.805214][T10219] ? preempt_schedule_common+0xa5/0xd0 [ 423.810725][T10219] ? schedule_preempt_disabled+0x20/0x20 [ 423.816440][T10219] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 423.822471][T10219] ? lockdep_softirqs_on+0x570/0x570 [ 423.827787][T10219] ? bq_enqueue+0x2ee/0x3d0 [ 423.832346][T10219] ? rcu_is_watching+0x11/0xa0 [ 423.837173][T10219] ? trace_xdp_redirect+0xb3/0x2b0 [ 423.842345][T10219] __dev_flush+0xbf/0x1b0 [ 423.846727][T10219] xdp_do_flush+0xa/0x20 [ 423.851002][T10219] bpf_test_run_xdp_live+0x1489/0x1990 [ 423.856503][T10219] ? bpf_test_run_xdp_live+0x45c/0x1990 [ 423.862083][T10219] ? xdp_convert_md_to_buff+0x330/0x330 [ 423.867672][T10219] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 423.873981][T10219] ? xdp_convert_md_to_buff+0x5b/0x330 [ 423.879523][T10219] bpf_prog_test_run_xdp+0x6f1/0xe50 [ 423.884952][T10219] ? dev_put+0x80/0x80 [ 423.889078][T10219] ? dev_put+0x80/0x80 [ 423.893191][T10219] bpf_prog_test_run+0x31e/0x390 [ 423.898169][T10219] __sys_bpf+0x593/0x6d0 [ 423.902445][T10219] ? bpf_link_show_fdinfo+0x340/0x340 [ 423.907882][T10219] ? lock_chain_count+0x20/0x20 [ 423.912770][T10219] __x64_sys_bpf+0x78/0x90 [ 423.917218][T10219] do_syscall_64+0x4c/0xa0 [ 423.921671][T10219] ? clear_bhb_loop+0x60/0xb0 [ 423.926375][T10219] ? clear_bhb_loop+0x60/0xb0 [ 423.931081][T10219] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 423.937031][T10219] RIP: 0033:0x7fc43c98f749 [ 423.941503][T10219] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 423.961141][T10219] RSP: 002b:00007fc43d898038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 423.969581][T10219] RAX: ffffffffffffffda RBX: 00007fc43cbe5fa0 RCX: 00007fc43c98f749 [ 423.977664][T10219] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 423.985651][T10219] RBP: 00007fc43ca13f91 R08: 0000000000000000 R09: 0000000000000000 [ 423.993644][T10219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 424.001630][T10219] R13: 00007fc43cbe6038 R14: 00007fc43cbe5fa0 R15: 00007ffc59f1a578 [ 424.009633][T10219] [ 424.012683][T10219] Modules linked in: [ 424.016611][T10219] CR2: 0000000000000000 [ 424.020793][T10219] ---[ end trace 0000000000000000 ]--- [ 424.026262][T10219] RIP: 0010:0x0 [ 424.029748][T10219] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 424.037134][T10219] RSP: 0018:ffffc9000e5f7458 EFLAGS: 00010246 [ 424.043249][T10219] RAX: 1ffffffff15eca1f RBX: 0000000000000007 RCX: 0000000000000001 [ 424.051240][T10219] RDX: ffffc9000e5f7500 RSI: 0000000000000001 RDI: ffff888057f5e000 [ 424.059233][T10219] RBP: ffffc9000e5f7570 R08: dffffc0000000000 R09: ffffed100afebc08 [ 424.067233][T10219] R10: ffffed100afebc08 R11: 1ffff1100afebc07 R12: ffffe8ffffc46a58 [ 424.075242][T10219] R13: ffffffff8af650f8 R14: 0000000000000001 R15: ffff888057f5e000 [ 424.083237][T10219] FS: 00007fc43d8986c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 424.092211][T10219] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 424.098905][T10219] CR2: ffffffffffffffd6 CR3: 00000000628ab000 CR4: 00000000003506f0 [ 424.106953][T10219] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 424.114954][T10219] DR3: 0000000000000000 DR6: 00000000ffff0ff1 DR7: 0000000000000600 [ 424.122952][T10219] Kernel panic - not syncing: Fatal exception in interrupt [ 424.130727][T10219] Kernel Offset: disabled [ 424.135058][T10219] Rebooting in 86400 seconds..