last executing test programs: 7.325701537s ago: executing program 3 (id=1312): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x8}, 0x10c002, 0x6, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x29, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000020000000000000000000000180100002020000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000808500000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000540)="50bc623d", 0x4}], 0x2}, 0x40080) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x28108, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x17, 0xd, 0x1, 0x4, 0x44008, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x5}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={r4, 0x58, &(0x7f0000000340)}, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000900)="928e04b416cac951c35f7f4586e6", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.00137156s ago: executing program 3 (id=1304): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x7, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x41, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa06a6, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x5, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000bc0)={0x2, 0x80, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200001, 0x1, @perf_bp={0x0, 0x3}, 0x10781, 0x10, 0x0, 0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_open_procfs$namespace(0x0, 0xfffffffffffffffc) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0xc, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000a479df"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x16, 0xc, &(0x7f0000000a80)=ANY=[], &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000b80)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1c, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x60}, 0x94) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x81}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000006c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4, 0x96, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0, 0x2, 0xffffffffffffffff, 0x8) r6 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x890c, &(0x7f0000000540)) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r7 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r7, &(0x7f0000000340)={&(0x7f0000000380)=@hci={0x1f, 0xffffffffffffffff}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000440)="80", 0x1}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r8 = socket$kcm(0x11, 0x2, 0x0) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000540)=ANY=[], &(0x7f0000000580)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[@ANYBLOB="8fedcb7968dd986c6a6700020006aa"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x0, &(0x7f0000000680)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x3, 0xc, &(0x7f0000001580)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001600)={0x3, 0xc, &(0x7f00000016c0)=ANY=[@ANYBLOB="180200000300000000000000000000008500000011000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000001740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001780)={r10, 0x0, 0xe, 0x0, &(0x7f0000001800)="196a348fbba6e75ce3e37fd3d3fc", 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000c40)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000f40)=[{&(0x7f0000000cc0)="9d297dabeb922282398fa763e079bb7d45654a8a5421c1a76582c88125014d938f3330720b1cce5fe8f774c6409eb03d0717938de2e5ff2d02cf93885b0c70475b0067e1d8ebce7fffc3ce1fb099be50ef5abf1b342425aff0b429", 0x5b}, {&(0x7f0000000d40)="6d92a90f0f51b31cdf2e7b7691e4fdd62f66dc0732eea21174cd67b9f4656ab843dff8e0185281660bc63ec2b26a7707ca6c4f347dd5bb6b34d6c6b424c4432fb16bff640e82a6c31a401bb4f2bbdefaa931b225d1cf", 0x56}, {&(0x7f0000000dc0)="65958b9c0a029f93b7c56f8bdddc9100c437153e40c0a85171aa45ccee82bf8dfd09abcfbd7be1d1651e68dc80517b7670b8698df24f0880a3e50526d7a67d83149b0c4c7f5b5045ecb7409538702a73959922af0318bb7227eccc1529a7facde05a256a99cfe743caa36bdbf17a7eb1cfea1617ed77b769924e6e9c92", 0x7d}, {&(0x7f0000000e40)="4ce0f1a470492030f15bcc379fdce612118d2f203c23c74243684b31d2fc1071de66a815483eb20c8b5b08b5bc6dbb7a5cbffc98abaa232d22f93aa7b713c65277b843739ccf7f0bd9cfcb69f678aab0ea52ffa5d0adb97ee197bedc", 0x5c}, {&(0x7f0000000ec0)="16fcff33457a82c3eab42ca8fb61bf2759386208dff4da259726983cc8b0ac7144f8596f606b4ac66885dda2a849f61f5c2e4daa24f8526e2b78f412261a9eebf3f2c1c6914f9f6000596c2f9c582cea89e6a684c14576f4dbad2836b6e4a9e084facf9f4b6f2ad59b2f46e4755bd83bde3d6ce006d2", 0x76}], 0x5, &(0x7f0000001840)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00, 0xffffffffffffffff}}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [r9, 0xffffffffffffffff, r2, r1]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r10, r4, r8, r5]}}], 0x88, 0x4040800}, 0x4008001) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) 4.737899602s ago: executing program 3 (id=1316): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x8}, 0x10c002, 0x6, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x29, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000020000000000000000000000180100002020000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000808500000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000540)="50bc623d", 0x4}], 0x2}, 0x40080) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x28108, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x17, 0xd, 0x1, 0x4, 0x44008, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x5}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={r4, 0x58, &(0x7f0000000340)}, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000900)="928e04b416cac951c35f7f4586e6", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.552031897s ago: executing program 0 (id=1318): r0 = socket$kcm(0x11, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) r1 = perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x10, 0x7, 0x7, 0x1, 0x0, 0x2, 0x8000, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xdb, 0x1, @perf_config_ext={0x2, 0x8001}, 0x101, 0x0, 0x2, 0x2, 0x6, 0xd1bd, 0x5, 0x0, 0x9, 0x0, 0x8}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x1) r2 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x120a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2b8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x5, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x4, &(0x7f00000004c0)=@raw=[@generic={0x85, 0x0, 0x0, 0x0, 0x9e}, @generic={0xbf, 0x1}, @generic={0x85, 0x0, 0x0, 0x0, 0x56}, @generic={0x95}], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000080)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000100)=[{&(0x7f00000001c0)="27030200590214000600002fb96dbcf706e10500000086dd078f1144ee162fd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e57000097", 0x40}], 0x1}, 0x0) 3.538394732s ago: executing program 3 (id=1320): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="2e0000fe10008188040f80ec59acbc0413a1810039000000000b0000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x40000) 3.485879313s ago: executing program 0 (id=1321): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x8}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x200040c4) r1 = socket$kcm(0xf, 0x3, 0x2) perf_event_open(&(0x7f00000003c0)={0x3, 0x80, 0x0, 0x45, 0x0, 0xfd, 0x0, 0x9c, 0x10803, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400001, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0xffff, 0x5, 0x4, 0x2, 0x200000a, 0x48, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x23, &(0x7f0000000440), 0xcf) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x1f, 0x3, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80}}, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$inet(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000006c0)="0212000902000000e4a1", 0xa}], 0x1}, 0x0) perf_event_open(&(0x7f0000000700)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000780), 0x4}, 0x4869, 0x6, 0xfffffffe, 0xf, 0x0, 0x0, 0x2000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000007c0)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000880), 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f00000008c0)='cgroup.freeze\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000900)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000940), 0x12) write$cgroup_int(r5, &(0x7f0000000980)=0x1, 0x12) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)=0x1, 0x12) r7 = openat$cgroup_devices(r6, &(0x7f0000000280)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="5c000000000066db00a9592d1a3bd8367aae67f7e5a7a296141a7c9290b8505e0a3250ef5bc3da50cc75eaa9524d808c93fede4a9ab4d9218dfb1413fe7d13d9df82445087e8de1e99ff6235d5eea357840ad36be1d0bb13a209eb8a8343febf95b292305d306bdc7d4498bccb412d6d684b61ca67073f5b6ed3b57863d03a370178d7cfede1562f2d36a6bac1131496b1"], 0x9) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000000), 0x2, 0x0) 3.485292433s ago: executing program 2 (id=1322): bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8020, 0x0, 0x1780, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x6, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) recvmsg$kcm(r0, 0x0, 0x3) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000008c0)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{r1, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000800)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x10, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000a80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000ac0)={r4, 0x0, 0xe, 0x48000000, &(0x7f0000000b40)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x89fb, &(0x7f0000000040)={'sit0\x00', @random="2000230c1100"}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) r6 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r6, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, &(0x7f00000011c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}], 0x20}, 0x400c844) sendmsg$inet(r6, 0x0, 0x0) recvmsg(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000012c0)}, 0x40010040) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) 3.337675367s ago: executing program 3 (id=1325): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x886c25ef308ee361, @perf_config_ext={0x20003, 0x2d1}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000a40)='GPL\x00'}, 0x48) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x6, 0xf, &(0x7f0000000b40)=ANY=[@ANYBLOB="7a0af8ff000000007a0af0ff000000007a0ae8ff000000007a0ae0ff000000007a0ad8ff000000007a0ad0ff000000007a0ac8ff000000007a0ac0ff00000000bfa100000000000007010000d8ffffffbfa200000000000007020000c0ffffff85000000ce000000b70000000200000095"], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c00)={r2, 0xffff0000, 0x40f, 0xfffffffffffffe4a, &(0x7f0000000c80)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) socketpair(0x1, 0x1, 0xfffffffb, &(0x7f00000000c0)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x6, 0xc, 0x0, 0x0, 0x0, 0x2000, 0x80001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0xfff, 0x3}, 0x100000, 0xc, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x9) socket$kcm(0x22, 0x2, 0x26) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) socket$kcm(0x21, 0x2, 0x2) r5 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000280)={r6, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r7, 0x0, 0x0) close(r7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) r9 = getpid() sendmsg$unix(r8, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r9, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r4, @ANYBLOB="07e04029"], 0x38, 0x81}, 0x40) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89a0, &(0x7f0000000080)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)) 3.093683703s ago: executing program 0 (id=1326): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f00000001c0)={&(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000240)=[{0x0, 0x80}], 0x1, &(0x7f0000000280)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @local}}}], 0x20, 0x604}, 0x4004) 2.965266106s ago: executing program 0 (id=1327): socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xc, 0xe, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000001600)='syzkaller\x00'}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000001640), 0x4) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001680)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x3a, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0}, 0x10) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r1, 0x40047459, &(0x7f0000000540)) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, &(0x7f0000000700)=""/166}, 0xfffffffffffffd45) socketpair(0x21, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000800)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ceb71c0010ec90db133c22a690ae7080000000000040875b0089"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000840)=ANY=[@ANYBLOB="8fedcb7907009875f375ffff86dd6317ce62070000000000000000431ccaf57b000000000000000001"], 0xfe1b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x0, 0x5, &(0x7f0000000940)=ANY=[@ANYBLOB="851000000000000018100000", @ANYRES32, @ANYBLOB="0000000000000000950000000000000045"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000009c0)={'gretap0\x00', 0x1}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f3, &(0x7f0000000a00)) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000580), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x4004743d, 0x110e22fff6) write$cgroup_type(r4, &(0x7f00000005c0), 0x9) close(0x3) close(0x4) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x40}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x7, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100080, 0x0, 0x0, 0x1}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) 2.910346908s ago: executing program 1 (id=1328): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848340000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x4800) (fail_nth: 11) 2.909685248s ago: executing program 3 (id=1329): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000010000006d05000002"], 0x48) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000015c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x11, 0x10, &(0x7f0000001700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1fffffff}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f0000001780)='GPL\x00', 0x5, 0xffd, &(0x7f00000017c0)=""/4093}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000e40)='GPL\x00', 0x5, 0xc3, &(0x7f0000000e80)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000fc0), &(0x7f0000001000), 0xfffffffb, r0}, 0x38) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001000)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xc, 0xe, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], &(0x7f0000001280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000012c0), 0x0, 0x10, &(0x7f0000001300), 0x2ca}, 0x48) perf_event_open(&(0x7f0000001340)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x1}, 0x800, 0x2, 0xfffffffd, 0x1, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000013c0)={r4, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000001440)="b90103600033f0000000000081001fffffe100004000638877fbac141411e0000601be3e7d2a", 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000fc0)={0x0, r4}, 0x8) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001080), &(0x7f00000010c0), 0x1000, r0, 0x0, 0x11000000}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x4, &(0x7f0000001580)=ANY=[@ANYBLOB="b40000000000000069106b0000000000040000003b83b93ea23e094eb9121bf6e7a2c0000000009500000000000000"], &(0x7f0000000e00)='GPL\x00', 0x2, 0x3f7, &(0x7f0000001480)=""/195}, 0x48) r5 = syz_clone(0x0, &(0x7f0000000200)="3a7c4b8647f65987c9d9b4680012db8c2b4c82887baa99a9fb245185a275e0ece750d00650d4788f3cd0aff8d23771daaeadaf834005a2f48676b2dec235faf6f2dc694d83e03f7546d9bc685eef434e39005d80e8f516ff12223ac18d81ee555ba5105c4469a1069101fc2727ef9173ff3734b763d5202406e521575c16c4ccf0130c576fbe279359294c0157258b10c3d0a290621d4f1ad10cb58ffd802e98b505d236b67d785574e0fb60b4f2b29f9575f1913efe5b47ae289f", 0xbb, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="639f4b535cc1dc79bc7b972137cd27bc2ab3164ca04314f6ae9ee1d86df525b0b1cc43f6f4981c19ec89fa351b1758011f81c64e2dacf1754845214d87f4f13fb1f4f2e6d2b6144525949a426f") perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7, 0x387e6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x5e02, 0x0, 0x0, 0x9, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 2.909374858s ago: executing program 4 (id=1330): r0 = socket$kcm(0x15, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x114, 0x1d, 0x0, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)) close(0xffffffffffffffff) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x9, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffffffc, 0x7fffffff}, 0x11c000, 0x58d0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x15, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200, 0x0, 0x0, 0x39a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000e40)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000e80)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@cred={{0x1c}}], 0x20}, 0x1c0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000f40)=ANY=[@ANYRES8=r1, @ANYBLOB="3ec8", @ANYRES8=r2], 0x9a) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001000)={0x6, 0x19, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x400}, [@alu={0x7, 0x1, 0xa, 0xb, 0x2, 0x100, 0xfffffffffffffff0}, @tail_call, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0xc0}]}, &(0x7f0000000740)='GPL\x00', 0x62, 0xd9, &(0x7f0000000780)=""/217, 0x40f00, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000ac0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000b00)={0x4, 0x3, 0x8, 0x7}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000f80)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000fc0)=[{0x2, 0x3, 0x3, 0x9}, {0x2, 0x1, 0x3, 0x4}, {0x1, 0x4, 0x3, 0x1}], 0x10, 0x6}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000}, 0x94) socketpair(0x1e, 0x1, 0x0, &(0x7f00000003c0)={0x0, 0x0}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4040005) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000005c0)={'macsec0\x00', @remote}) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r5 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r5, 0x88, 0x66, &(0x7f0000000600), 0x4) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 2.8397056s ago: executing program 2 (id=1331): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x8}, 0x10c002, 0x6, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x29, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000020000000000000000000000180100002020000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000808500000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000540)="50bc623d", 0x4}], 0x2}, 0x40080) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x28108, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x17, 0xd, 0x1, 0x4, 0x44008, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x5}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={r4, 0x58, &(0x7f0000000340)}, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000900)="928e04b416cac951c35f7f4586e6", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.702139513s ago: executing program 1 (id=1332): r0 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0x14, &(0x7f0000000b40), 0x4) socket$kcm(0x29, 0x2, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000000)={r0}) 2.551372847s ago: executing program 1 (id=1333): r0 = perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x1}, 0x201, 0x0, 0xc2ba, 0x0, 0x4000000, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000f80)='GPL\x00', 0x5, 0x252, &(0x7f0000000fc0)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x5) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xc, 0x7, &(0x7f00000000c0)=ANY=[@ANYBLOB="7911a800000000005501020000000000b7000000000000009500000000000000850000008b000000b70000000000000095"], &(0x7f0000000100)='GPL\x00', 0x2, 0x20000, &(0x7f00000010c0)=""/131072, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x4}, 0x100000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x1, 0x6}, 0x1080, 0x0, 0x51, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x203}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x10, &(0x7f0000000440), 0x4) sendmsg$inet(r4, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r5 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000540)="39000000140081ae00002c000500015601618575e285af0180007a1b31d569d9ae527048ffffffffffffffff56fabcb3b2aa9be3da9212d744", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x40800) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000300)={r3, &(0x7f0000000340)}, 0x20) 1.378388916s ago: executing program 0 (id=1334): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000bc0)=@bpf_lsm={0x6, 0x3, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000cc0)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000d00)={r2, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d80)=@bpf_lsm={0x6, 0x3, &(0x7f0000000e40)=ANY=[], &(0x7f0000000e80)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000ec0)={r3, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000f40)={0x0, 0xfffffffe, &(0x7f0000000f80)=[{&(0x7f0000000fc0)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x900) r5 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x3, 0x0, 0x4, 0x0, 0x3, 0x101, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x1, 0x450, 0x16ac, 0x209, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x40004, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef) r6 = socket$kcm(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x1f, 0xc, &(0x7f0000000980)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) r7 = perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x7, 0xc, &(0x7f0000000b40)=ANY=[], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)="3c00000033000b1229ae3f7f03b261130124fc60100c034001410000002000179215a2681cf6e50400003d490d20b735b16b6a44799406db26a57b35", 0x3c}], 0x1}, 0x0) r9 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r9, &(0x7f0000000080)={0x0, 0xffffff2d, &(0x7f00000000c0)=[{&(0x7f0000000300)="c00e020022003504d25a806f8c6394f90924fc600d001141040005004700000037153e370400018000f00600d1bd", 0x33fe0}], 0x1}, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0xd, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000200000000006000000850000006100000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r11, 0x0, 0x7f, 0xe40, &(0x7f00000007c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000800)=""/8, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="180002000000000000000000000095", @ANYRES16=r1, @ANYRES32=r0, @ANYRESOCT=r1, @ANYRES64=r5, @ANYRES8=r9], 0x0}, 0x94) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r12, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b9040200000000806c0100001500100014000000001209000d2000000401a80018000a000e4006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee062e1c547cbc7225e6756cfb39b0590b4800089e408e8d8ef52b49816277cf4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db701000000eafad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d939acd92637429397f632838", 0xd8}], 0x1}, 0x0) 1.378108256s ago: executing program 4 (id=1335): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x10c040, 0xac5d, 0x0, 0x5, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x0, 0x19, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000100), 0x1001) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f00000000c0), 0x4) ioctl$SIOCSIFHWADDR(r1, 0x4030582b, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(r3, &(0x7f00000002c0)=ANY=[], 0x8) socket$kcm(0xa, 0x5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8941, 0x0) 1.347532977s ago: executing program 2 (id=1336): r0 = perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x88020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xe, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=@base={0x7, 0x4, 0x8, 0x8, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x3, 0x5, &(0x7f0000001040)=@framed={{0x18, 0x8}, [@map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000001080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1, 0x5, &(0x7f0000000840)=ANY=[@ANYBLOB="18110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r4, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)='%ps \x00'}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={&(0x7f00000009c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x10000003, 0x3}}]}}, &(0x7f0000000a00)=""/252, 0x32, 0xfc, 0x1}, 0x28) socket$kcm(0x2, 0x5, 0x84) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000d40)={r5, 0x58, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000d80)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ec0)={0x6, 0xc, &(0x7f0000000c00)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xd}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @generic={0x4, 0x3, 0x0, 0x1, 0x8000}], &(0x7f0000000c80)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x8, '\x00', r6, 0x25, r7, 0x8, &(0x7f0000000dc0)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000e00)={0x1, 0x2, 0x3, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000e40)=[r4, r5, r5, r5, r4, r5, r5], 0x0, 0x10, 0x9}, 0x94) socket$kcm(0x2, 0xa, 0x2) perf_event_open(&(0x7f0000000b80)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000010c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x1e, 0x4, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001200)={0x0, 0x4, 0x3, 0x5}, 0x10}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000001240), 0x43) r8 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f0000001280), 0x43) r9 = socket$kcm(0x10, 0x2, 0x10) sendmsg$inet(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000006c0)="5c00000027006b2c7a5d93d9fd41ab6e04400000006e6cfe000a887ea6ea656700004e000000000090f9c3dc90f8f41f8ecff32c6e020075e300250045586ccda718ad4b4460bc24eab556000000008b1094e6bcfc1c6a51f60a64c9", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={r5}, 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x11, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000400008500000007000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x18000000000002a0, 0x48, 0x62, &(0x7f0000000680)="b9ff03075fe9008cb89e08e09900", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x28) perf_event_open(&(0x7f00000000c0)={0x2, 0x44, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1408, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x60, 0x8}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.273714859s ago: executing program 1 (id=1337): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000001c0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x5e20, @loopback}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x68000000}, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x1f, &(0x7f0000000240), 0x120) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{}, 0x0, &(0x7f0000000300)}, 0x20) perf_event_open(&(0x7f00000029c0)={0x1, 0x80, 0x6, 0x0, 0x0, 0x5, 0x0, 0x400, 0x48000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000005c0), 0x4}, 0x6000, 0x0, 0x4, 0x3, 0xe, 0x3ff, 0xfffc, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x4, 0xffffffffffffffff, 0xd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000002ac0)="e03f030033000b35d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c06", 0x27}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002b00)={0x0, 0x0, &(0x7f0000002b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000002b80)='@', 0x1}], 0x4}, 0x80) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002bc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002c00)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) r1 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000002e40), 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002e80)={0x12, 0x13, &(0x7f0000002f40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) write$cgroup_subtree(r2, &(0x7f0000002fc0)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) perf_event_open(&(0x7f00000028c0)={0x1, 0x80, 0x1b, 0x80, 0x0, 0x0, 0x0, 0x0, 0x20000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x1, @perf_config_ext={0x2000000, 0x3e}, 0x6040, 0x9, 0x8, 0x6, 0xfffffffffdf7bbfe, 0x0, 0x5, 0x0, 0xfffffffd, 0x0, 0x8}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000002940)={'ip6gre0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000002980)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f00000029c0)) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a80)={0xffffffffffffffff, 0x0, 0x7, 0x0, &(0x7f0000001b00)="6eee773f1c8e29", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe3}, 0x50) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000001b40), 0x4) sendmsg$kcm(r5, &(0x7f0000001b80)={&(0x7f0000001bc0)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000001c40)=[{&(0x7f0000001c80)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000002b21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000001d00)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0xfca6}, {&(0x7f0000001dc0)="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", 0xa91}], 0x3}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001a40)={&(0x7f0000000480), 0x80, &(0x7f0000001940)=[{&(0x7f0000000600)=""/4081, 0xff1}, {&(0x7f0000000500)=""/169, 0xa9}, {&(0x7f00000016c0)=""/54, 0x36}, {&(0x7f0000000340)=""/127, 0x7f}, {&(0x7f00000017c0)=""/127, 0x7f}, {&(0x7f0000001840)=""/207, 0xcf}], 0x6, &(0x7f0000000400)=""/89, 0x59}, 0x12120) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="d800000018000100000000000000b904021d080406037c09e8fe55a10a0015400400142603604ef02f00160006000600a80006f0200002400700027c035c0461c1d67f6f94007134cf6efbbca68000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x48040) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a00000001000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003000)={0x1b, 0x0, 0x0, &(0x7f00000030c0)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000003100)={0x1, 0x7, &(0x7f0000001600)=ANY=[@ANYBLOB="180000000000007b0af0ff000000001811000049fdd50eab5652ebdf65475e6fa2cbed133d1433477093e30e6c6e111e", @ANYRES64=r1, @ANYBLOB="00000000200000835758252a25f7c7a5ea9fe800bfa20000000001009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000003200)={'ip6_vti0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000003240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, &(0x7f0000003280)) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400), &(0x7f0000000440), 0x80000002, r6}, 0x38) 1.148745052s ago: executing program 4 (id=1338): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000c0000000000000000850000009e0000009500"/32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000002300000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone(0x20102400, 0x0, 0x0, 0x0, 0x0, 0x0) 914.370428ms ago: executing program 4 (id=1339): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000001a40)="5cffa10013006bcd9e3fe3dc6e48aa310b6b87033c0000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x63}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 709.811383ms ago: executing program 2 (id=1340): perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x830d}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000140)={0x0, &(0x7f0000000180)=""/251, &(0x7f0000000280), &(0x7f00000002c0), 0xa7c, r0}, 0x39) (fail_nth: 12) 605.625675ms ago: executing program 4 (id=1341): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b0000a9ed805000040000004f0c000001000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r0 = socket$kcm(0x10, 0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="b4055c1728951dc0eb4ff3a8bb9f7f0000000000007910a20000000000070000000000f9399500000000000000bcc5fb15f5d97e21d8189e9a5a1f24fc24e6d84288cd65b63ef29c526245e09df3"], &(0x7f0000000100)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000380), 0x22e, 0x10, &(0x7f00000003c0), 0x1dd}, 0x48) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x7, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7030000000100008500faff1b000000b70000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000540)={0x5, 0x80, 0x0, 0xfe, 0xff, 0x5, 0x0, 0x1, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000005c0), 0x9e7c835694fa27e5}, 0x1590, 0x0, 0x8, 0x3, 0x8, 0x6}, 0x0, 0xd, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="180200000000000000010000000000009500000000000000e0f5ad53c93bc61630380b0b4a44ecf473e9e7baff8ad91f4e9dec0fa904c5f4a3f256d10e99bb2cd77c6579600ffcdc10eda69e36c35102ac08b0446d414fcca1c4fa044ebfe0f21246a3c3f672921d9f547fb62af0d25ef04711865c661b7e3b3205fcf3e3e513ce46ae0159b19bccf6766a5ed03b4450ae7807c83a"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r3, 0x0, 0xe, 0x0, &(0x7f0000000900)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x1, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0xa, 0x3, 0x73) setsockopt$sock_attach_bpf(r4, 0x29, 0x21, &(0x7f00000009c0), 0x4) sendmsg$kcm(r4, &(0x7f0000000a00)={&(0x7f0000000a40)=@l2tp6={0xa, 0x0, 0xff, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000290000000b000000000000000000000010000000000000000a010000080000"], 0x28}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000b00)='ns/ipc\x00') sendmsg$inet(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000bc0)="5c00000012006b7d373be35c6e17aa31046b876c1d0000007ea60864160af36508001dc0c30002000c0031009ee517d34460bc24eab556a705251e618294ff0051f60a84c9f472736f67c5e73bb9e5c446fa30be62cbd4938037e786", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000cc0)="2e00000011008108090f9becdb4cb9200a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d80)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000e00)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_config_ext={0xcf, 0xd}, 0x63, 0x0, 0x0, 0x4, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000e80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x3}, 0x0, 0x0, 0x4}, 0x0, 0x5, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x6, 0x4, &(0x7f0000001240)=ANY=[@ANYBLOB="1802000000200000000000001d000010850000dbd1cdec0083875b3e664e2e15b38f1677eb33d7152471dba303a596ec9e1a0f1723631572036bc49e2f457d5f3b1a3caaf3cb2667c0e646d8cbd68ab49db60c70ff3cff088c078024fbef5ad64eec6ba4eb5c4d493f0a8daf2edea965ed1cd9ed092defca508f815d2724db85e0fca7fede851ad0f8072562b002b6bf540efb7928e64d47cddf5563e8d92420c7ad4f1ba4588691aae569a595e55326ee14dd8e237ce2040804db9cfb34299df5f4be4c7c0cbd4b4d82b32024c5d766f79d25cd4470875d982ac93c6b595651c65e40c1d0aa39b83c066e02abf16e3c1343eabc04fb"], &(0x7f0000001000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001040)={&(0x7f0000001340)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c00627052976505696e5f6c6f636b006c6f6395c466b2cf1b965e7415d60ca0a8b12f7ee59a526a065768d28ad916ad242a4dd4ffaf015a01415073bad621859d39bfa0a1d25a5689331a5e5cfcb3b65d0f2787bdd2fa88ffe600d97ec63e7c02deea15ba4d9e67f90b36ea05fede1de3"], 0x0, 0x80}, 0x28) perf_event_open(&(0x7f0000001100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) write$cgroup_devices(r3, &(0x7f00000001c0)={'b', ' *:* ', 'rw\x00'}, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001200)) 308.507843ms ago: executing program 2 (id=1342): r0 = socket$kcm(0xa, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x7, 0x6, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x5, 0xc3, &(0x7f0000000540)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={r1, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x15, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x20000a0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) setsockopt$sock_attach_bpf(r0, 0x29, 0x31, 0x0, 0x5a) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x7, 0xc, &(0x7f00000010c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$cgroup_ro(r5, &(0x7f0000001100)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001140)={@fallback=r4, 0x0, 0x1, 0x5, &(0x7f0000001180)=[0x0, 0x0], 0x2, 0x0, &(0x7f00000011c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, &(0x7f0000001200), 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001240)={@map=r6, r4, 0xf, 0x20, 0x0, @void, @void, @void, @value, r7}, 0x20) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000012c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x9, '\x00', r2, 0xffffffffffffffff, 0x2, 0x2}, 0x50) r9 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000001340), 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001280)={@map=r8, r1, 0x34, 0x2001, r1, @value=r9, @void, @void, @void, r7}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0xf, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000000000004850000008600000095"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000980)=r3, 0x4) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000a00)='memory.swap.current\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000ac0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000a40), &(0x7f0000000a80)=r1}, 0x20) r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000f00)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000ffff000005000000000030d26477c86aa4491c4e6b12f97de2290a0000e111d565af482bc2002c3b1aab60a41dd27a293dfb35fb170bb4824a156e030dc48b3aecca49cfc2b3edf620a4fa9d3fe8aeed1bd67a86c0756ff2fcb08a0b69fd0c491acae1f7efb19f74b40bc60934cad76b9610ff254c1dc4b31f4cf332a34450aca9adafbade7e7514eba0bc23f576bc"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000b80)={r14}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x3, 0x11, &(0x7f0000000c80)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r14, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000d40)='GPL\x00'}, 0x90) r15 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000d80)={0x0, 0xffffffff, 0x8}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e40)={0x6, 0x23, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xffffa900, 0x0, 0x0, 0x0, 0x4}, @exit, @cb_func={0x18, 0x0, 0x4, 0x0, 0x7}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x64}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r10}}, @ldst={0x1, 0x2, 0x8f6829223f37e3bc, 0x8, 0x4, 0x100, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000840)='GPL\x00', 0x0, 0xe7, &(0x7f0000000880)=""/231, 0x41100, 0x8, '\x00', 0x0, 0x25, r11, 0x8, 0x0, 0x0, 0x10, &(0x7f00000009c0)={0x2}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000dc0)=[r12, r13, r14, r15], &(0x7f0000000e00)=[{0x5, 0x4, 0x8, 0xa}, {0x3, 0x3}], 0x10, 0x7}, 0x94) 167.082896ms ago: executing program 1 (id=1343): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0}, 0x10) socketpair(0x1e, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000002800)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f0000002880)={&(0x7f00000028c0)=@l2tp6={0xa, 0xf5, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f0000002940)=[{&(0x7f0000002980)='\x00\x00', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 145.678157ms ago: executing program 0 (id=1344): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0a8187bae53dca2b007ea23e163ec40028e82fccdc09da15fef6a608649e7531765f0ef82e3c0076a705259a3651f60a84c9f4d4938037e70e4509c5bb0c9246444351db86078475483687054c", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) recvmsg$kcm(r0, &(0x7f0000003dc0)={0x0, 0x0, 0x0}, 0x20) 45.980939ms ago: executing program 2 (id=1345): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x10, 0x0, 0x0, 0x8, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0x10, 0x2, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f00000001c0), &(0x7f0000000200)=r1}, 0x20) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x2, &(0x7f00000002c0)={0x3, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000032000b07d25a806f8c6394f90824fc60", 0x14}], 0x1}, 0x0) 43.183739ms ago: executing program 4 (id=1346): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x8}, 0x10c002, 0x6, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x29, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000020000000000000000000000180100002020000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000808500000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000540)="50bc623d", 0x4}], 0x2}, 0x40080) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x28108, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x17, 0xd, 0x1, 0x4, 0x44008, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x5}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={r4, 0x58, &(0x7f0000000340)}, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000900)="928e04b416cac951c35f7f4586e6", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 1 (id=1347): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x86, &(0x7f0000000140)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x8b, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b40000000000000069108300623bffff0400"/32], &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r0}, 0x94) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8020, 0x0, 0x1780, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x6, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x10d, 0x2, &(0x7f0000000700)=r2, 0x4) recvmsg$kcm(r1, &(0x7f0000000740)={&(0x7f0000000780)=@nl=@unspec, 0x80, 0x0, 0x0, &(0x7f0000000880)=""/48, 0x30}, 0x3) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000008c0)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0xb, 0x5, &(0x7f0000000e80)=ANY=[@ANYBLOB="180000000100010000000000000010008500000008000000850000002300000095"], &(0x7f0000000ec0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001000)='./cgroup.net/syz1\x00', 0x200002, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) perf_event_open(&(0x7f00000010c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x12, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) r3 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r3, &(0x7f0000001140)={&(0x7f0000001180)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000011c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}], 0x20}, 0x400c844) sendmsg$inet(r3, &(0x7f0000001200)={&(0x7f0000001240)={0x2, 0x4e20, @remote}, 0x10, 0x0}, 0x0) recvmsg(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000012c0)}, 0x40010040) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x12) kernel console output (not intermixed with test programs): IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 408.786120][ T4321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 408.796899][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 408.817477][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 408.826164][ T4349] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.833361][ T4349] bridge0: port 2(bridge_slave_1) entered forwarding state [ 408.850338][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 408.858725][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 408.906562][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 408.923625][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 408.935900][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 408.953387][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 408.965683][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 408.982024][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 409.017817][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 409.026185][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 409.036517][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 409.051845][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 409.063555][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 409.080999][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 409.090729][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 409.105999][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 409.115324][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 409.149183][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 409.158577][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 409.166401][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 409.175402][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 409.186622][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 409.196165][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 409.211454][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 409.220360][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 409.228789][ T4329] device veth0_vlan entered promiscuous mode [ 409.237269][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 409.244824][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 409.255225][ T4321] device veth0_vlan entered promiscuous mode [ 409.264276][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 409.273597][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 409.296304][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 409.314661][ T4325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 409.332969][ T4321] device veth1_vlan entered promiscuous mode [ 409.349309][ T4329] device veth1_vlan entered promiscuous mode [ 409.369334][ T4333] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 409.435157][ T4329] device veth0_macvtap entered promiscuous mode [ 409.453005][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 409.463762][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 409.472923][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 409.482143][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 409.509444][ T4329] device veth1_macvtap entered promiscuous mode [ 409.517723][ T4338] Bluetooth: hci1: command 0x040f tx timeout [ 409.518938][ T4330] Bluetooth: hci2: command 0x040f tx timeout [ 409.533116][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 409.544213][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 409.552924][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 409.562238][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 409.582812][ T4321] device veth0_macvtap entered promiscuous mode [ 409.595083][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 409.604021][ T4330] Bluetooth: hci0: command 0x040f tx timeout [ 409.610299][ T4328] Bluetooth: hci4: command 0x040f tx timeout [ 409.610309][ T4338] Bluetooth: hci3: command 0x040f tx timeout [ 409.637909][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 409.657809][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 409.685984][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 409.701795][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 409.712874][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 409.725322][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 409.739412][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 409.759140][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 409.773528][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 409.784028][ T4325] device veth0_vlan entered promiscuous mode [ 409.801091][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 409.817593][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 409.826401][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 409.836486][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 409.846056][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 409.855844][ T4321] device veth1_macvtap entered promiscuous mode [ 409.871952][ T4329] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.881816][ T4329] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.890943][ T4329] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.900325][ T4329] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.915203][ T4325] device veth1_vlan entered promiscuous mode [ 409.923971][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 409.936694][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 409.945168][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 409.953320][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 409.968513][ T4333] device veth0_vlan entered promiscuous mode [ 409.998729][ T4322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 410.005863][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 410.014460][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 410.022944][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 410.032705][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 410.049670][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.064050][ T4321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 410.114589][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 410.134664][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 410.147738][ T4333] device veth1_vlan entered promiscuous mode [ 410.157996][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 410.166351][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 410.179670][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 410.191160][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.223019][ T4321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 410.249687][ T4325] device veth0_macvtap entered promiscuous mode [ 410.266869][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 410.275912][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 410.291168][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 410.302103][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 410.315707][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 410.349625][ T4325] device veth1_macvtap entered promiscuous mode [ 410.389686][ T4321] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.407193][ T4321] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.415963][ T4321] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.430382][ T4321] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.500643][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 410.512153][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.523432][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 410.534109][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.545855][ T4325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 410.575341][ T4333] device veth0_macvtap entered promiscuous mode [ 410.584238][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 410.594778][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 410.610570][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 410.623672][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 410.636034][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 410.651609][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 410.665346][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 410.676973][ T4349] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.695256][ T4349] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.697356][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.727092][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 410.737754][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.748944][ T4325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 410.760648][ T4333] device veth1_macvtap entered promiscuous mode [ 410.784184][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 410.796690][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 410.806720][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 410.816427][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 410.836029][ T4325] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.845338][ T4325] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.854654][ T4325] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.863651][ T4325] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.887686][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 410.896456][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 410.943760][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.944005][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 410.969291][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.977921][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.988022][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 410.999041][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.009075][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.028391][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.040406][ T4333] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 411.056117][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 411.067450][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.078080][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 411.088596][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.099917][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 411.110609][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.122237][ T4333] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 411.136094][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 411.148409][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 411.157335][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 411.166040][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 411.174852][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 411.183347][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 411.192243][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 411.201851][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 411.211440][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 411.220919][ T4322] device veth0_vlan entered promiscuous mode [ 411.237656][ T4333] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.246403][ T4333] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.256064][ T4333] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.268724][ T4333] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.316988][ T4322] device veth1_vlan entered promiscuous mode [ 411.396464][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 411.419932][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.452750][ T4322] device veth0_macvtap entered promiscuous mode [ 411.470305][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 411.486154][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 411.495973][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 411.505077][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 411.534701][ T4322] device veth1_macvtap entered promiscuous mode [ 411.567362][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 411.575288][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.597710][ T4328] Bluetooth: hci2: command 0x0419 tx timeout [ 411.603791][ T4328] Bluetooth: hci1: command 0x0419 tx timeout [ 411.611340][ T4349] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 411.626470][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 411.635162][ T4349] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.645341][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 411.662244][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 411.677699][ T4328] Bluetooth: hci4: command 0x0419 tx timeout [ 411.683871][ T4328] Bluetooth: hci0: command 0x0419 tx timeout [ 411.690778][ T4330] Bluetooth: hci3: command 0x0419 tx timeout [ 411.705024][ T4322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.732360][ T4322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.747747][ T4322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.759139][ T4322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.786602][ T4322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.797940][ T4322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.808224][ T4322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.818787][ T4322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.831031][ T4322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 411.846222][ T4322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 411.857101][ T4322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.866941][ T4322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 411.879101][ T4322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.890007][ T4322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 411.900937][ T4322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.910954][ T4322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 411.922803][ T4322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.935640][ T4322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 411.970596][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 411.980188][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 411.990032][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 412.002795][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 412.019354][ T4322] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.035344][ T4322] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.046398][ T4322] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.060564][ T4322] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.088567][ T4349] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.096657][ T4349] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.145751][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 412.181712][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.181712][ T4349] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.195703][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.234866][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 412.259150][ T4349] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.301156][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 412.357998][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.365932][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.413738][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 412.450694][ T4351] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.467747][ T4351] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.495827][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 412.607054][ C0] hrtimer: interrupt took 68711 ns [ 412.653665][ T4454] Zero length message leads to an empty skb [ 413.716158][ T4462] netlink: 'syz.4.8': attribute type 10 has an invalid length. [ 413.785543][ T4461] delete_channel: no stack [ 414.122793][ T4480] netlink: 'syz.4.14': attribute type 10 has an invalid length. [ 414.167956][ T4480] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port [ 414.222920][ T4482] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 414.234248][ T4482] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 414.256744][ T4482] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 414.289490][ T4482] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 414.788519][ T4501] netlink: 'syz.4.24': attribute type 10 has an invalid length. [ 414.796672][ T4501] FAULT_INJECTION: forcing a failure. [ 414.796672][ T4501] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 414.825149][ T4501] CPU: 1 PID: 4501 Comm: syz.4.24 Not tainted syzkaller #0 [ 414.832432][ T4501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 414.842565][ T4501] Call Trace: [ 414.846033][ T4501] [ 414.849040][ T4501] dump_stack_lvl+0x188/0x24e [ 414.853847][ T4501] ? show_regs_print_info+0x12/0x12 [ 414.859061][ T4501] ? load_image+0x410/0x410 [ 414.863576][ T4501] ? __lock_acquire+0x7ea0/0x7ea0 [ 414.868631][ T4501] should_fail_ex+0x390/0x4c0 [ 414.873334][ T4501] _copy_from_user+0x2c/0x170 [ 414.878031][ T4501] kstrtouint_from_user+0xda/0x170 [ 414.883190][ T4501] ? kstrtol_from_user+0x190/0x190 [ 414.888329][ T4501] proc_fail_nth_write+0x8b/0x200 [ 414.893369][ T4501] ? proc_fail_nth_read+0x220/0x220 [ 414.898578][ T4501] ? common_file_perm+0x171/0x1c0 [ 414.903624][ T4501] ? proc_fail_nth_read+0x220/0x220 [ 414.908858][ T4501] vfs_write+0x2dc/0x9a0 [ 414.913151][ T4501] ? file_end_write+0x250/0x250 [ 414.918039][ T4501] ? __fget_files+0x28/0x460 [ 414.922642][ T4501] ? __fget_files+0x3fc/0x460 [ 414.927340][ T4501] ? __fdget_pos+0x2ae/0x360 [ 414.931970][ T4501] ? ksys_write+0x70/0x260 [ 414.936406][ T4501] ksys_write+0x14d/0x260 [ 414.940761][ T4501] ? __ia32_sys_read+0x80/0x80 [ 414.945549][ T4501] ? lockdep_hardirqs_on+0x94/0x140 [ 414.950856][ T4501] do_syscall_64+0x4c/0xa0 [ 414.955288][ T4501] ? clear_bhb_loop+0x60/0xb0 [ 414.959981][ T4501] ? clear_bhb_loop+0x60/0xb0 [ 414.964681][ T4501] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 414.970632][ T4501] RIP: 0033:0x7f5c6415ed8e [ 414.975149][ T4501] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 414.994921][ T4501] RSP: 002b:00007f5c64fc9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 415.003442][ T4501] RAX: ffffffffffffffda RBX: 00007f5c64fca6c0 RCX: 00007f5c6415ed8e [ 415.011423][ T4501] RDX: 0000000000000001 RSI: 00007f5c64fca0a0 RDI: 0000000000000004 [ 415.019404][ T4501] RBP: 00007f5c64fca090 R08: 0000000000000000 R09: 0000000000000000 [ 415.027385][ T4501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 415.035370][ T4501] R13: 00007f5c64426038 R14: 00007f5c64425fa0 R15: 00007ffd728ca748 [ 415.043368][ T4501] [ 415.809334][ T4514] netlink: 'syz.0.28': attribute type 29 has an invalid length. [ 415.833489][ T4514] netlink: 'syz.0.28': attribute type 29 has an invalid length. [ 415.892734][ T4520] netlink: 'syz.0.28': attribute type 29 has an invalid length. [ 417.038581][ T4546] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 417.068091][ T4546] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 417.786384][ T4546] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 417.795640][ T4546] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 417.939398][ T4401] rxe_eth0 speed is unknown, defaulting to 1000 [ 418.018803][ T4568] netlink: 'syz.4.42': attribute type 29 has an invalid length. [ 418.055021][ T4568] netlink: 'syz.4.42': attribute type 29 has an invalid length. [ 418.119201][ T4571] netlink: 'syz.4.42': attribute type 29 has an invalid length. [ 419.742669][ T4624] netlink: 'syz.3.56': attribute type 29 has an invalid length. [ 419.752173][ T4624] netlink: 'syz.3.56': attribute type 29 has an invalid length. [ 419.769343][ T4624] netlink: 'syz.3.56': attribute type 29 has an invalid length. [ 422.002946][ T4666] raw_sendmsg: syz.0.71 forgot to set AF_INET. Fix it! [ 422.022868][ T4666] netlink: 128 bytes leftover after parsing attributes in process `syz.0.71'. [ 422.067479][ T4666] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 422.070705][ T4665] netlink: 'syz.3.69': attribute type 29 has an invalid length. [ 423.130705][ T4665] netlink: 'syz.3.69': attribute type 29 has an invalid length. [ 424.060087][ T4706] FAULT_INJECTION: forcing a failure. [ 424.060087][ T4706] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 424.083018][ T4706] CPU: 1 PID: 4706 Comm: syz.0.84 Not tainted syzkaller #0 [ 424.090307][ T4706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 424.100391][ T4706] Call Trace: [ 424.103777][ T4706] [ 424.106720][ T4706] dump_stack_lvl+0x188/0x24e [ 424.111426][ T4706] ? show_regs_print_info+0x12/0x12 [ 424.116744][ T4706] ? load_image+0x410/0x410 [ 424.121295][ T4706] ? __lock_acquire+0x7ea0/0x7ea0 [ 424.126726][ T4706] should_fail_ex+0x390/0x4c0 [ 424.131449][ T4706] _copy_to_user+0x2c/0x130 [ 424.135988][ T4706] bpf_verifier_vlog+0x172/0x3a0 [ 424.140951][ T4706] __btf_verifier_log+0xdf/0x130 [ 424.145923][ T4706] ? btf_check_sec_info+0x350/0x350 [ 424.151157][ T4706] ? btf_parse_hdr+0x1dd/0x7d0 [ 424.155951][ T4706] btf_parse_hdr+0x480/0x7d0 [ 424.160585][ T4706] btf_new_fd+0x367/0x760 [ 424.164944][ T4706] __sys_bpf+0x612/0x780 [ 424.169226][ T4706] ? bpf_link_show_fdinfo+0x380/0x380 [ 424.174655][ T4706] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 424.180855][ T4706] __x64_sys_bpf+0x78/0x90 [ 424.185299][ T4706] do_syscall_64+0x4c/0xa0 [ 424.189742][ T4706] ? clear_bhb_loop+0x60/0xb0 [ 424.194444][ T4706] ? clear_bhb_loop+0x60/0xb0 [ 424.199153][ T4706] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 424.205074][ T4706] RIP: 0033:0x7f28ed79e559 [ 424.209523][ T4706] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 424.229162][ T4706] RSP: 002b:00007f28ee698028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 424.237601][ T4706] RAX: ffffffffffffffda RBX: 00007f28eda25fa0 RCX: 00007f28ed79e559 [ 424.245595][ T4706] RDX: 0000000000000028 RSI: 0000200000001d80 RDI: 0000000000000012 [ 424.253590][ T4706] RBP: 00007f28ee698090 R08: 0000000000000000 R09: 0000000000000000 [ 424.261681][ T4706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 424.269850][ T4706] R13: 00007f28eda26038 R14: 00007f28eda25fa0 R15: 00007ffffa61cd78 [ 424.277867][ T4706] [ 424.567158][ T4711] netlink: 'syz.4.85': attribute type 29 has an invalid length. [ 424.575984][ T4711] netlink: 'syz.4.85': attribute type 29 has an invalid length. [ 424.693398][ T4718] netlink: 'syz.4.85': attribute type 29 has an invalid length. [ 424.817561][ T4719] netlink: 'syz.2.88': attribute type 3 has an invalid length. [ 424.836152][ T4719] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.88'. [ 424.894293][ T4716] rxe_eth0 speed is unknown, defaulting to 1000 [ 425.729062][ T4729] netlink: 'syz.4.92': attribute type 3 has an invalid length. [ 425.746264][ T4729] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.92'. [ 426.448277][ T4748] netlink: 'syz.2.100': attribute type 29 has an invalid length. [ 426.535989][ T4748] netlink: 'syz.2.100': attribute type 29 has an invalid length. [ 426.566177][ T4749] netlink: 'syz.2.100': attribute type 29 has an invalid length. [ 428.075959][ T4778] netlink: 'syz.2.112': attribute type 29 has an invalid length. [ 428.120948][ T4778] netlink: 'syz.2.112': attribute type 29 has an invalid length. [ 428.139535][ T4781] netlink: 'syz.2.112': attribute type 29 has an invalid length. [ 428.149586][ T4769] rxe_eth0 speed is unknown, defaulting to 1000 [ 428.327904][ T4783] FAULT_INJECTION: forcing a failure. [ 428.327904][ T4783] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 428.388284][ T4783] CPU: 0 PID: 4783 Comm: syz.1.114 Not tainted syzkaller #0 [ 428.395675][ T4783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 428.405777][ T4783] Call Trace: [ 428.409093][ T4783] [ 428.412073][ T4783] dump_stack_lvl+0x188/0x24e [ 428.416814][ T4783] ? show_regs_print_info+0x12/0x12 [ 428.422073][ T4783] ? load_image+0x410/0x410 [ 428.426636][ T4783] ? __lock_acquire+0x7ea0/0x7ea0 [ 428.431738][ T4783] should_fail_ex+0x390/0x4c0 [ 428.436616][ T4783] _copy_from_user+0x2c/0x170 [ 428.441365][ T4783] __sys_bpf+0x2ea/0x780 [ 428.445681][ T4783] ? bpf_link_show_fdinfo+0x380/0x380 [ 428.451164][ T4783] ? lock_chain_count+0x20/0x20 [ 428.456109][ T4783] __x64_sys_bpf+0x78/0x90 [ 428.460597][ T4783] do_syscall_64+0x4c/0xa0 [ 428.465095][ T4783] ? clear_bhb_loop+0x60/0xb0 [ 428.469856][ T4783] ? clear_bhb_loop+0x60/0xb0 [ 428.474858][ T4783] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 428.480802][ T4783] RIP: 0033:0x7fa77f59e559 [ 428.485266][ T4783] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 428.505013][ T4783] RSP: 002b:00007fa780540028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 428.513485][ T4783] RAX: ffffffffffffffda RBX: 00007fa77f825fa0 RCX: 00007fa77f59e559 [ 428.521504][ T4783] RDX: 0000000000000021 RSI: 0000200000000c80 RDI: 000000000000001d [ 428.529959][ T4783] RBP: 00007fa780540090 R08: 0000000000000000 R09: 0000000000000000 [ 428.537983][ T4783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 428.546002][ T4783] R13: 00007fa77f826038 R14: 00007fa77f825fa0 R15: 00007ffc27a1b718 [ 428.554072][ T4783] [ 428.614951][ T4766] delete_channel: no stack [ 430.346956][ T4814] netlink: 'syz.2.126': attribute type 29 has an invalid length. [ 430.391771][ T4814] netlink: 'syz.2.126': attribute type 29 has an invalid length. [ 430.442462][ T4821] netlink: 'syz.2.126': attribute type 29 has an invalid length. [ 433.383482][ T4859] netlink: 'syz.1.140': attribute type 29 has an invalid length. [ 434.285919][ T4859] netlink: 'syz.1.140': attribute type 29 has an invalid length. [ 436.048775][ T4899] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 436.067542][ T4899] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 436.091799][ T4899] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 436.106923][ T4899] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 436.174239][ T4903] netlink: 'syz.0.155': attribute type 29 has an invalid length. [ 436.395277][ T4901] netlink: 4 bytes leftover after parsing attributes in process `syz.1.154'. [ 436.418408][ T4903] netlink: 'syz.0.155': attribute type 29 has an invalid length. [ 436.453193][ T4911] netlink: 'syz.0.155': attribute type 29 has an invalid length. [ 438.580099][ T4944] netlink: 'syz.4.171': attribute type 29 has an invalid length. [ 438.589904][ T4944] netlink: 'syz.4.171': attribute type 29 has an invalid length. [ 438.599859][ T4944] netlink: 'syz.4.171': attribute type 29 has an invalid length. [ 440.001737][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.008543][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.196043][ T4978] netlink: 'syz.0.184': attribute type 29 has an invalid length. [ 440.302342][ T4978] netlink: 'syz.0.184': attribute type 29 has an invalid length. [ 440.365473][ T4981] netlink: 'syz.0.184': attribute type 29 has an invalid length. [ 441.540700][ T5020] netlink: 'syz.1.198': attribute type 29 has an invalid length. [ 441.555052][ T5020] netlink: 'syz.1.198': attribute type 29 has an invalid length. [ 441.565270][ T5020] netlink: 'syz.1.198': attribute type 29 has an invalid length. [ 443.082429][ T5049] netlink: 'syz.2.210': attribute type 29 has an invalid length. [ 443.137668][ T5049] netlink: 'syz.2.210': attribute type 29 has an invalid length. [ 443.163926][ T5057] netlink: 'syz.2.210': attribute type 29 has an invalid length. [ 444.368963][ T5089] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 444.379502][ T5090] netlink: 'syz.2.224': attribute type 29 has an invalid length. [ 444.392032][ T5089] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 444.414047][ T5089] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 444.423845][ T5089] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 445.033488][ T5090] netlink: 'syz.2.224': attribute type 29 has an invalid length. [ 445.042638][ T5094] netlink: 'syz.2.224': attribute type 29 has an invalid length. [ 446.775796][ T5133] netlink: 'syz.3.242': attribute type 29 has an invalid length. [ 446.806182][ T5133] netlink: 'syz.3.242': attribute type 29 has an invalid length. [ 446.823129][ T5136] netlink: 'syz.3.242': attribute type 29 has an invalid length. [ 447.291148][ T5144] FAULT_INJECTION: forcing a failure. [ 447.291148][ T5144] name failslab, interval 1, probability 0, space 0, times 1 [ 447.309231][ T5144] CPU: 0 PID: 5144 Comm: syz.1.244 Not tainted syzkaller #0 [ 447.316601][ T5144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 447.326679][ T5144] Call Trace: [ 447.329975][ T5144] [ 447.332922][ T5144] dump_stack_lvl+0x188/0x24e [ 447.337641][ T5144] ? show_regs_print_info+0x12/0x12 [ 447.342860][ T5144] ? load_image+0x410/0x410 [ 447.347387][ T5144] ? __might_sleep+0xd0/0xd0 [ 447.352271][ T5144] ? __lock_acquire+0x7ea0/0x7ea0 [ 447.357336][ T5144] should_fail_ex+0x390/0x4c0 [ 447.362056][ T5144] should_failslab+0x5/0x20 [ 447.366578][ T5144] slab_pre_alloc_hook+0x59/0x300 [ 447.371633][ T5144] ? vmemdup_user+0x45/0x1d0 [ 447.376269][ T5144] __kmem_cache_alloc_node+0x4f/0x270 [ 447.381677][ T5144] ? vmemdup_user+0x45/0x1d0 [ 447.386290][ T5144] __kmalloc_node+0xa2/0x240 [ 447.390906][ T5144] vmemdup_user+0x45/0x1d0 [ 447.395441][ T5144] map_get_next_key+0x21d/0x620 [ 447.400318][ T5144] ? bpf_lsm_bpf+0x5/0x10 [ 447.404679][ T5144] __sys_bpf+0x466/0x780 [ 447.408948][ T5144] ? bpf_link_show_fdinfo+0x380/0x380 [ 447.414357][ T5144] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 447.420549][ T5144] __x64_sys_bpf+0x78/0x90 [ 447.424991][ T5144] do_syscall_64+0x4c/0xa0 [ 447.429429][ T5144] ? clear_bhb_loop+0x60/0xb0 [ 447.434304][ T5144] ? clear_bhb_loop+0x60/0xb0 [ 447.439010][ T5144] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 447.444930][ T5144] RIP: 0033:0x7fa77f59e559 [ 447.449361][ T5144] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 447.468999][ T5144] RSP: 002b:00007fa780540028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 447.477443][ T5144] RAX: ffffffffffffffda RBX: 00007fa77f825fa0 RCX: 00007fa77f59e559 [ 447.485453][ T5144] RDX: 0000000000000020 RSI: 00002000000006c0 RDI: 0000000000000004 [ 447.493442][ T5144] RBP: 00007fa780540090 R08: 0000000000000000 R09: 0000000000000000 [ 447.501447][ T5144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 447.509436][ T5144] R13: 00007fa77f826038 R14: 00007fa77f825fa0 R15: 00007ffc27a1b718 [ 447.517450][ T5144] [ 448.647981][ T5168] netlink: 'syz.4.256': attribute type 29 has an invalid length. [ 448.669501][ T5168] netlink: 'syz.4.256': attribute type 29 has an invalid length. [ 448.686320][ T5168] netlink: 'syz.4.256': attribute type 29 has an invalid length. [ 449.238048][ T5182] netlink: 'syz.3.261': attribute type 1 has an invalid length. [ 450.113898][ T5203] netlink: 'syz.3.270': attribute type 29 has an invalid length. [ 450.138392][ T5203] netlink: 'syz.3.270': attribute type 29 has an invalid length. [ 450.180080][ T5208] netlink: 'syz.3.270': attribute type 29 has an invalid length. [ 451.893018][ T5247] FAULT_INJECTION: forcing a failure. [ 451.893018][ T5247] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 451.948797][ T5251] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 451.957463][ T5247] CPU: 0 PID: 5247 Comm: syz.0.287 Not tainted syzkaller #0 [ 451.964789][ T5247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 451.974865][ T5247] Call Trace: [ 451.978166][ T5247] [ 451.981126][ T5247] dump_stack_lvl+0x188/0x24e [ 451.985849][ T5247] ? show_regs_print_info+0x12/0x12 [ 451.991083][ T5247] ? load_image+0x410/0x410 [ 451.995622][ T5247] ? __lock_acquire+0x7ea0/0x7ea0 [ 452.000706][ T5247] ? migrate_enable+0x148/0x220 [ 452.005601][ T5247] should_fail_ex+0x390/0x4c0 [ 452.010321][ T5247] _copy_to_user+0x2c/0x130 [ 452.014843][ T5247] bpf_test_finish+0x202/0x600 [ 452.019635][ T5247] ? convert_skb_to___skb+0x420/0x420 [ 452.025029][ T5247] ? __build_skb+0x24b/0x3b0 [ 452.029633][ T5247] bpf_prog_test_run_skb+0x1129/0x18e0 [ 452.035119][ T5247] ? cpu_online+0xa0/0xa0 [ 452.039461][ T5247] bpf_prog_test_run+0x31c/0x390 [ 452.044419][ T5247] __sys_bpf+0x62b/0x780 [ 452.048671][ T5247] ? bpf_link_show_fdinfo+0x380/0x380 [ 452.054065][ T5247] ? lock_chain_count+0x20/0x20 [ 452.058931][ T5247] __x64_sys_bpf+0x78/0x90 [ 452.063364][ T5247] do_syscall_64+0x4c/0xa0 [ 452.067792][ T5247] ? clear_bhb_loop+0x60/0xb0 [ 452.072477][ T5247] ? clear_bhb_loop+0x60/0xb0 [ 452.077165][ T5247] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 452.083103][ T5247] RIP: 0033:0x7f28ed79e559 [ 452.087543][ T5247] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 452.107155][ T5247] RSP: 002b:00007f28ee698028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 452.115591][ T5247] RAX: ffffffffffffffda RBX: 00007f28eda25fa0 RCX: 00007f28ed79e559 [ 452.123588][ T5247] RDX: 000000000000004c RSI: 0000200000000f00 RDI: 000000000000000a [ 452.131563][ T5247] RBP: 00007f28ee698090 R08: 0000000000000000 R09: 0000000000000000 [ 452.139554][ T5247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 452.147543][ T5247] R13: 00007f28eda26038 R14: 00007f28eda25fa0 R15: 00007ffffa61cd78 [ 452.155541][ T5247] [ 452.190359][ T5251] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 452.358176][ T5251] syz.1.288 (5251) used greatest stack depth: 20720 bytes left [ 453.474333][ T5279] validate_nla: 4 callbacks suppressed [ 453.474453][ T5279] netlink: 'syz.3.296': attribute type 29 has an invalid length. [ 453.515187][ T5279] netlink: 'syz.3.296': attribute type 29 has an invalid length. [ 453.549190][ T5279] netlink: 'syz.3.296': attribute type 29 has an invalid length. [ 453.741310][ T5291] FAULT_INJECTION: forcing a failure. [ 453.741310][ T5291] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 453.760363][ T5291] CPU: 0 PID: 5291 Comm: syz.3.304 Not tainted syzkaller #0 [ 453.767726][ T5291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 453.777807][ T5291] Call Trace: [ 453.781365][ T5291] [ 453.784313][ T5291] dump_stack_lvl+0x188/0x24e [ 453.789023][ T5291] ? show_regs_print_info+0x12/0x12 [ 453.794261][ T5291] ? load_image+0x410/0x410 [ 453.798773][ T5291] ? __lock_acquire+0x7ea0/0x7ea0 [ 453.803805][ T5291] ? __might_sleep+0xd0/0xd0 [ 453.808403][ T5291] should_fail_ex+0x390/0x4c0 [ 453.813105][ T5291] _copy_from_user+0x2c/0x170 [ 453.817793][ T5291] generic_map_update_batch+0x4dc/0x7f0 [ 453.823358][ T5291] ? rcu_read_unlock+0xa0/0xa0 [ 453.828127][ T5291] ? __fdget+0x17c/0x200 [ 453.832412][ T5291] ? rcu_read_unlock+0xa0/0xa0 [ 453.837181][ T5291] bpf_map_do_batch+0x475/0x5f0 [ 453.842055][ T5291] ? bpf_lsm_audit_rule_known+0x10/0x10 [ 453.847605][ T5291] __sys_bpf+0x6f7/0x780 [ 453.851884][ T5291] ? bpf_link_show_fdinfo+0x380/0x380 [ 453.857288][ T5291] ? lock_chain_count+0x20/0x20 [ 453.862151][ T5291] __x64_sys_bpf+0x78/0x90 [ 453.866590][ T5291] do_syscall_64+0x4c/0xa0 [ 453.871014][ T5291] ? clear_bhb_loop+0x60/0xb0 [ 453.875695][ T5291] ? clear_bhb_loop+0x60/0xb0 [ 453.880381][ T5291] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 453.886285][ T5291] RIP: 0033:0x7f8ef579e559 [ 453.890726][ T5291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 453.910337][ T5291] RSP: 002b:00007f8ef65dd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 453.918759][ T5291] RAX: ffffffffffffffda RBX: 00007f8ef5a25fa0 RCX: 00007f8ef579e559 [ 453.926739][ T5291] RDX: 0000000000000038 RSI: 0000200000000300 RDI: 000000000000001a [ 453.934723][ T5291] RBP: 00007f8ef65dd090 R08: 0000000000000000 R09: 0000000000000000 [ 453.942704][ T5291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 453.950696][ T5291] R13: 00007f8ef5a26038 R14: 00007f8ef5a25fa0 R15: 00007ffe8f2fdba8 [ 453.958686][ T5291] [ 455.346850][ T5318] netlink: 'syz.1.314': attribute type 29 has an invalid length. [ 455.410015][ T5318] netlink: 'syz.1.314': attribute type 29 has an invalid length. [ 455.419499][ T5323] netlink: 'syz.1.314': attribute type 29 has an invalid length. [ 457.910278][ T5366] netlink: 'syz.3.332': attribute type 29 has an invalid length. [ 457.978301][ T5366] netlink: 'syz.3.332': attribute type 29 has an invalid length. [ 458.046473][ T5373] netlink: 'syz.3.332': attribute type 29 has an invalid length. [ 458.913331][ T5398] device sit0 entered promiscuous mode [ 459.222322][ T5410] netlink: 'syz.2.349': attribute type 29 has an invalid length. [ 459.280425][ T5403] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 459.288718][ T5403] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 459.303039][ T5403] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 459.317462][ T5403] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 459.471296][ T5410] netlink: 'syz.2.349': attribute type 29 has an invalid length. [ 459.483945][ T5413] netlink: 'syz.2.349': attribute type 29 has an invalid length. [ 459.684069][ T5424] FAULT_INJECTION: forcing a failure. [ 459.684069][ T5424] name failslab, interval 1, probability 0, space 0, times 0 [ 459.697982][ T5424] CPU: 1 PID: 5424 Comm: syz.2.353 Not tainted syzkaller #0 [ 459.705318][ T5424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 459.715386][ T5424] Call Trace: [ 459.718678][ T5424] [ 459.721634][ T5424] dump_stack_lvl+0x188/0x24e [ 459.726343][ T5424] ? show_regs_print_info+0x12/0x12 [ 459.731546][ T5424] ? load_image+0x410/0x410 [ 459.736145][ T5424] ? __might_sleep+0xd0/0xd0 [ 459.740749][ T5424] ? __lock_acquire+0x7ea0/0x7ea0 [ 459.745797][ T5424] should_fail_ex+0x390/0x4c0 [ 459.750490][ T5424] should_failslab+0x5/0x20 [ 459.755010][ T5424] slab_pre_alloc_hook+0x59/0x300 [ 459.760075][ T5424] ? exc_page_fault+0x88/0x100 [ 459.764847][ T5424] ? sk_prot_alloc+0xe7/0x210 [ 459.769536][ T5424] __kmem_cache_alloc_node+0x4f/0x270 [ 459.774946][ T5424] ? exc_page_fault+0x88/0x100 [ 459.779757][ T5424] ? sk_prot_alloc+0xe7/0x210 [ 459.784446][ T5424] __kmalloc+0xa3/0x240 [ 459.788640][ T5424] sk_prot_alloc+0xe7/0x210 [ 459.793158][ T5424] ? sk_alloc+0x20/0x330 [ 459.797412][ T5424] sk_alloc+0x36/0x330 [ 459.801492][ T5424] ? bpf_ctx_init+0x154/0x190 [ 459.806190][ T5424] bpf_prog_test_run_skb+0x36d/0x18e0 [ 459.811588][ T5424] ? __fget_files+0x28/0x460 [ 459.816210][ T5424] ? __fget_files+0x3fc/0x460 [ 459.820937][ T5424] ? cpu_online+0xa0/0xa0 [ 459.825290][ T5424] bpf_prog_test_run+0x31c/0x390 [ 459.830250][ T5424] __sys_bpf+0x62b/0x780 [ 459.834525][ T5424] ? bpf_link_show_fdinfo+0x380/0x380 [ 459.839946][ T5424] ? lock_chain_count+0x20/0x20 [ 459.844807][ T5424] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 459.850805][ T5424] __x64_sys_bpf+0x78/0x90 [ 459.855239][ T5424] do_syscall_64+0x4c/0xa0 [ 459.859664][ T5424] ? clear_bhb_loop+0x60/0xb0 [ 459.864352][ T5424] ? clear_bhb_loop+0x60/0xb0 [ 459.869037][ T5424] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 459.874948][ T5424] RIP: 0033:0x7fca9939e559 [ 459.879378][ T5424] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 459.899172][ T5424] RSP: 002b:00007fca9a1e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 459.907628][ T5424] RAX: ffffffffffffffda RBX: 00007fca99625fa0 RCX: 00007fca9939e559 [ 459.915606][ T5424] RDX: 0000000000000050 RSI: 00002000000024c0 RDI: 000000000000000a [ 459.923594][ T5424] RBP: 00007fca9a1e4090 R08: 0000000000000000 R09: 0000000000000000 [ 459.931620][ T5424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 459.939598][ T5424] R13: 00007fca99626038 R14: 00007fca99625fa0 R15: 00007ffc590b0c78 [ 459.947592][ T5424] [ 460.430335][ T5440] netlink: 'syz.3.362': attribute type 29 has an invalid length. [ 460.468339][ T5440] netlink: 'syz.3.362': attribute type 29 has an invalid length. [ 460.514650][ T5447] netlink: 'syz.3.362': attribute type 29 has an invalid length. [ 460.659975][ T5445] delete_channel: no stack [ 461.167626][ T5468] netlink: 'syz.4.369': attribute type 10 has an invalid length. [ 461.216356][ T5468] netlink: 55 bytes leftover after parsing attributes in process `syz.4.369'. [ 461.650154][ T5481] netlink: 'syz.4.377': attribute type 29 has an invalid length. [ 461.669708][ T5481] netlink: 'syz.4.377': attribute type 29 has an invalid length. [ 461.686278][ T5481] netlink: 'syz.4.377': attribute type 29 has an invalid length. [ 462.889822][ T5518] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.393'. [ 465.110207][ T5599] validate_nla: 8 callbacks suppressed [ 465.110239][ T5599] netlink: 'syz.0.422': attribute type 29 has an invalid length. [ 465.138346][ T5599] netlink: 'syz.0.422': attribute type 29 has an invalid length. [ 465.166563][ T5604] netlink: 'syz.0.422': attribute type 29 has an invalid length. [ 466.321143][ T5634] netlink: 'syz.3.437': attribute type 29 has an invalid length. [ 466.334250][ T5634] netlink: 'syz.3.437': attribute type 29 has an invalid length. [ 466.344855][ T5634] netlink: 'syz.3.437': attribute type 29 has an invalid length. [ 466.595917][ T5647] netlink: 'syz.1.443': attribute type 3 has an invalid length. [ 466.604254][ T5647] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.443'. [ 466.984960][ T5664] FAULT_INJECTION: forcing a failure. [ 466.984960][ T5664] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 467.001361][ T5664] CPU: 0 PID: 5664 Comm: syz.3.450 Not tainted syzkaller #0 [ 467.008693][ T5664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 467.018756][ T5664] Call Trace: [ 467.022043][ T5664] [ 467.024999][ T5664] dump_stack_lvl+0x188/0x24e [ 467.029707][ T5664] ? show_regs_print_info+0x12/0x12 [ 467.034955][ T5664] ? load_image+0x410/0x410 [ 467.039509][ T5664] ? __lock_acquire+0x7ea0/0x7ea0 [ 467.044563][ T5664] should_fail_ex+0x390/0x4c0 [ 467.049259][ T5664] _copy_from_user+0x2c/0x170 [ 467.053945][ T5664] ___sys_sendmsg+0x1c3/0x360 [ 467.058638][ T5664] ? __sys_sendmsg+0x2a0/0x2a0 [ 467.063461][ T5664] ? __lock_acquire+0x7ea0/0x7ea0 [ 467.068554][ T5664] __se_sys_sendmsg+0x1c3/0x2b0 [ 467.073413][ T5664] ? ct_nmi_exit+0x145/0x1c0 [ 467.078023][ T5664] ? __x64_sys_sendmsg+0x80/0x80 [ 467.082985][ T5664] ? lockdep_hardirqs_on+0x94/0x140 [ 467.088217][ T5664] do_syscall_64+0x4c/0xa0 [ 467.092647][ T5664] ? clear_bhb_loop+0x60/0xb0 [ 467.097334][ T5664] ? clear_bhb_loop+0x60/0xb0 [ 467.102021][ T5664] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 467.107985][ T5664] RIP: 0033:0x7f8ef579e559 [ 467.112409][ T5664] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 467.132020][ T5664] RSP: 002b:00007f8ef65dd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 467.140447][ T5664] RAX: ffffffffffffffda RBX: 00007f8ef5a25fa0 RCX: 00007f8ef579e559 [ 467.148428][ T5664] RDX: 0000000000000000 RSI: 0000200000000ec0 RDI: 0000000000000003 [ 467.156417][ T5664] RBP: 00007f8ef65dd090 R08: 0000000000000000 R09: 0000000000000000 [ 467.164406][ T5664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 467.172606][ T5664] R13: 00007f8ef5a26038 R14: 00007f8ef5a25fa0 R15: 00007ffe8f2fdba8 [ 467.180952][ T5664] [ 467.211359][ T5666] netlink: 'syz.0.451': attribute type 29 has an invalid length. [ 467.221447][ T5666] netlink: 'syz.0.451': attribute type 29 has an invalid length. [ 467.241256][ T5666] netlink: 'syz.0.451': attribute type 29 has an invalid length. [ 467.864202][ T5683] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.458'. [ 468.520949][ T5615] syz.4.429 (5615) used greatest stack depth: 16912 bytes left [ 468.864775][ T5720] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.472'. [ 469.128357][ T5728] FAULT_INJECTION: forcing a failure. [ 469.128357][ T5728] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 469.178430][ T5728] CPU: 0 PID: 5728 Comm: syz.3.475 Not tainted syzkaller #0 [ 469.185795][ T5728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 469.195878][ T5728] Call Trace: [ 469.199181][ T5728] [ 469.202139][ T5728] dump_stack_lvl+0x188/0x24e [ 469.206870][ T5728] ? show_regs_print_info+0x12/0x12 [ 469.212107][ T5728] ? load_image+0x410/0x410 [ 469.216640][ T5728] ? __lock_acquire+0x7ea0/0x7ea0 [ 469.221705][ T5728] should_fail_ex+0x390/0x4c0 [ 469.226418][ T5728] _copy_to_user+0x2c/0x130 [ 469.231039][ T5728] bpf_test_finish+0x266/0x600 [ 469.235863][ T5728] ? convert_skb_to___skb+0x420/0x420 [ 469.241273][ T5728] ? __build_skb+0x24b/0x3b0 [ 469.245895][ T5728] bpf_prog_test_run_skb+0x1129/0x18e0 [ 469.251407][ T5728] ? cpu_online+0xa0/0xa0 [ 469.255767][ T5728] bpf_prog_test_run+0x31c/0x390 [ 469.260744][ T5728] __sys_bpf+0x62b/0x780 [ 469.265281][ T5728] ? bpf_link_show_fdinfo+0x380/0x380 [ 469.270700][ T5728] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 469.276896][ T5728] __x64_sys_bpf+0x78/0x90 [ 469.281350][ T5728] do_syscall_64+0x4c/0xa0 [ 469.285792][ T5728] ? clear_bhb_loop+0x60/0xb0 [ 469.290489][ T5728] ? clear_bhb_loop+0x60/0xb0 [ 469.295214][ T5728] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 469.301136][ T5728] RIP: 0033:0x7f8ef579e559 [ 469.305571][ T5728] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 469.325212][ T5728] RSP: 002b:00007f8ef65dd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 469.333656][ T5728] RAX: ffffffffffffffda RBX: 00007f8ef5a25fa0 RCX: 00007f8ef579e559 [ 469.341674][ T5728] RDX: 0000000000000048 RSI: 0000200000000b00 RDI: 000000000000000a [ 469.349679][ T5728] RBP: 00007f8ef65dd090 R08: 0000000000000000 R09: 0000000000000000 [ 469.357839][ T5728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 469.365833][ T5728] R13: 00007f8ef5a26038 R14: 00007f8ef5a25fa0 R15: 00007ffe8f2fdba8 [ 469.373844][ T5728] [ 469.417307][ T5730] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.476'. [ 469.990431][ T5751] rxe_eth0 speed is unknown, defaulting to 1000 [ 470.254849][ T5760] validate_nla: 12 callbacks suppressed [ 470.254887][ T5760] netlink: 'syz.3.488': attribute type 3 has an invalid length. [ 470.279949][ T5760] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.488'. [ 470.491828][ T5771] FAULT_INJECTION: forcing a failure. [ 470.491828][ T5771] name failslab, interval 1, probability 0, space 0, times 0 [ 470.576840][ T5773] netlink: 'syz.0.493': attribute type 3 has an invalid length. [ 470.584994][ T5771] CPU: 0 PID: 5771 Comm: syz.3.492 Not tainted syzkaller #0 [ 470.592321][ T5771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 470.602411][ T5771] Call Trace: [ 470.605716][ T5771] [ 470.608675][ T5771] dump_stack_lvl+0x188/0x24e [ 470.613396][ T5771] ? show_regs_print_info+0x12/0x12 [ 470.618632][ T5771] ? load_image+0x410/0x410 [ 470.623177][ T5771] ? __lock_acquire+0x7ea0/0x7ea0 [ 470.628450][ T5771] should_fail_ex+0x390/0x4c0 [ 470.633174][ T5771] should_failslab+0x5/0x20 [ 470.637704][ T5771] slab_pre_alloc_hook+0x59/0x300 [ 470.642765][ T5771] ? rxrpc_alloc_call+0x354/0xbf0 [ 470.647826][ T5771] __kmem_cache_alloc_node+0x4f/0x270 [ 470.653329][ T5771] ? rxrpc_alloc_call+0x354/0xbf0 [ 470.658476][ T5771] kmalloc_trace+0x26/0xe0 [ 470.662938][ T5771] rxrpc_alloc_call+0x354/0xbf0 [ 470.667866][ T5771] rxrpc_new_client_call+0xe7/0xe10 [ 470.673104][ T5771] ? rxrpc_do_sendmsg+0xbd7/0x10e0 [ 470.678245][ T5771] ? do_raw_read_unlock+0x39/0x70 [ 470.683311][ T5771] ? _raw_read_unlock+0x24/0x40 [ 470.688289][ T5771] rxrpc_do_sendmsg+0xbd7/0x10e0 [ 470.693261][ T5771] ? rxrpc_process_local_events+0xa40/0xa40 [ 470.699209][ T5771] ? rxrpc_look_up_server_security+0x530/0x530 [ 470.705411][ T5771] ? rxrpc_sendmsg+0x45b/0x890 [ 470.710245][ T5771] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 470.715567][ T5771] ? rxrpc_getsockopt+0x150/0x150 [ 470.720629][ T5771] ____sys_sendmsg+0x5ed/0x9a0 [ 470.725432][ T5771] ? __lock_acquire+0x7ea0/0x7ea0 [ 470.729415][ T5778] netlink: 'syz.2.495': attribute type 29 has an invalid length. [ 470.730482][ T5771] ? __sys_sendmsg_sock+0x30/0x30 [ 470.730545][ T5771] ? __import_iovec+0x306/0x510 [ 470.748186][ T5771] ? import_iovec+0x6f/0xa0 [ 470.752733][ T5771] ___sys_sendmsg+0x2a2/0x360 [ 470.757469][ T5771] ? __sys_sendmsg+0x2a0/0x2a0 [ 470.762292][ T5771] ? __lock_acquire+0x7ea0/0x7ea0 [ 470.767375][ T5771] __se_sys_sendmsg+0x1c3/0x2b0 [ 470.772261][ T5771] ? __x64_sys_sendmsg+0x80/0x80 [ 470.775988][ T5778] netlink: 'syz.2.495': attribute type 29 has an invalid length. [ 470.777227][ T5771] ? lockdep_hardirqs_on+0x94/0x140 [ 470.777264][ T5771] do_syscall_64+0x4c/0xa0 [ 470.777281][ T5771] ? clear_bhb_loop+0x60/0xb0 [ 470.777299][ T5771] ? clear_bhb_loop+0x60/0xb0 [ 470.777320][ T5771] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 470.777339][ T5771] RIP: 0033:0x7f8ef579e559 [ 470.777357][ T5771] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 470.777372][ T5771] RSP: 002b:00007f8ef65dd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 470.777393][ T5771] RAX: ffffffffffffffda RBX: 00007f8ef5a25fa0 RCX: 00007f8ef579e559 [ 470.850435][ T5771] RDX: 0000000000000080 RSI: 00002000000006c0 RDI: 0000000000000005 [ 470.858616][ T5771] RBP: 00007f8ef65dd090 R08: 0000000000000000 R09: 0000000000000000 [ 470.866619][ T5771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 470.874635][ T5771] R13: 00007f8ef5a26038 R14: 00007f8ef5a25fa0 R15: 00007ffe8f2fdba8 [ 470.882656][ T5771] [ 470.916084][ T5779] netlink: 'syz.2.495': attribute type 29 has an invalid length. [ 470.927948][ T5773] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.493'. [ 471.645196][ T5797] netlink: 'syz.0.503': attribute type 3 has an invalid length. [ 471.663871][ T5797] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.503'. [ 472.227422][ T5816] netlink: 'syz.3.511': attribute type 3 has an invalid length. [ 472.235412][ T5816] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.511'. [ 472.261773][ T5818] netlink: 'syz.4.510': attribute type 29 has an invalid length. [ 472.274718][ T5818] netlink: 'syz.4.510': attribute type 29 has an invalid length. [ 472.328125][ T5820] netlink: 'syz.4.510': attribute type 29 has an invalid length. [ 472.847906][ T5836] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.517'. [ 473.975605][ T5866] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.529'. [ 474.157760][ T5870] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.531'. [ 475.614036][ T5908] validate_nla: 9 callbacks suppressed [ 475.614073][ T5908] netlink: 'syz.4.544': attribute type 3 has an invalid length. [ 475.650412][ T5908] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.544'. [ 475.754967][ T5916] netlink: 'syz.3.548': attribute type 3 has an invalid length. [ 475.781615][ T5916] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.548'. [ 476.224889][ T5929] netlink: 'syz.0.554': attribute type 29 has an invalid length. [ 476.251492][ T5929] netlink: 'syz.0.554': attribute type 29 has an invalid length. [ 476.285836][ T5932] netlink: 'syz.0.554': attribute type 29 has an invalid length. [ 476.917801][ T5949] netlink: 'syz.1.561': attribute type 23 has an invalid length. [ 477.163448][ T5954] netlink: 'syz.2.562': attribute type 3 has an invalid length. [ 477.208782][ T5954] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.562'. [ 477.563974][ T5959] netlink: 'syz.0.564': attribute type 3 has an invalid length. [ 477.584729][ T5959] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.564'. [ 477.913411][ T5973] netlink: 'syz.4.569': attribute type 29 has an invalid length. [ 477.968140][ T5973] netlink: 'syz.4.569': attribute type 29 has an invalid length. [ 478.692191][ T5998] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.576'. [ 478.914515][ T6004] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.581'. [ 479.353601][ T6010] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.584'. [ 479.987967][ T6046] netlink: 4 bytes leftover after parsing attributes in process `syz.4.599'. [ 480.166872][ T6054] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.603'. [ 480.169009][ T6048] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.600'. [ 481.229711][ T6090] validate_nla: 14 callbacks suppressed [ 481.229752][ T6090] netlink: 'syz.0.617': attribute type 3 has an invalid length. [ 481.232666][ T6096] netlink: 'syz.2.619': attribute type 3 has an invalid length. [ 481.253449][ T6090] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.617'. [ 481.302204][ T6096] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.619'. [ 482.400618][ T6125] netlink: 'syz.2.629': attribute type 29 has an invalid length. [ 482.434363][ T6125] netlink: 'syz.2.629': attribute type 29 has an invalid length. [ 482.479864][ T6127] netlink: 'syz.2.629': attribute type 29 has an invalid length. [ 483.011013][ T6141] netlink: 'syz.3.634': attribute type 3 has an invalid length. [ 483.029813][ T6141] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.634'. [ 483.170505][ T6150] netlink: 'syz.1.635': attribute type 3 has an invalid length. [ 483.183127][ T6150] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.635'. [ 484.262802][ T6172] netlink: 'syz.4.644': attribute type 29 has an invalid length. [ 484.276301][ T6172] netlink: 'syz.4.644': attribute type 29 has an invalid length. [ 484.288857][ T6172] netlink: 'syz.4.644': attribute type 29 has an invalid length. [ 484.649449][ T6184] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.649'. [ 484.651207][ T6188] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.651'. [ 485.496626][ T6196] device syzkaller0 entered promiscuous mode [ 485.595973][ T6207] FAULT_INJECTION: forcing a failure. [ 485.595973][ T6207] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 485.617436][ T6207] CPU: 0 PID: 6207 Comm: syz.0.658 Not tainted syzkaller #0 [ 485.624795][ T6207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 485.634880][ T6207] Call Trace: [ 485.638196][ T6207] [ 485.641240][ T6207] dump_stack_lvl+0x188/0x24e [ 485.645957][ T6207] ? show_regs_print_info+0x12/0x12 [ 485.651186][ T6207] ? load_image+0x410/0x410 [ 485.655724][ T6207] ? __lock_acquire+0x7ea0/0x7ea0 [ 485.660786][ T6207] should_fail_ex+0x390/0x4c0 [ 485.665512][ T6207] _copy_from_user+0x2c/0x170 [ 485.670226][ T6207] __sys_bpf+0x2ea/0x780 [ 485.674510][ T6207] ? bpf_link_show_fdinfo+0x380/0x380 [ 485.679930][ T6207] ? lock_chain_count+0x20/0x20 [ 485.684833][ T6207] __x64_sys_bpf+0x78/0x90 [ 485.689251][ T6207] do_syscall_64+0x4c/0xa0 [ 485.693665][ T6207] ? clear_bhb_loop+0x60/0xb0 [ 485.698360][ T6207] ? clear_bhb_loop+0x60/0xb0 [ 485.703047][ T6207] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 485.708965][ T6207] RIP: 0033:0x7f28ed79e559 [ 485.713400][ T6207] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 485.733029][ T6207] RSP: 002b:00007f28ee698028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 485.741484][ T6207] RAX: ffffffffffffffda RBX: 00007f28eda25fa0 RCX: 00007f28ed79e559 [ 485.749492][ T6207] RDX: 0000000000000006 RSI: 0000200000000fc0 RDI: 000000000000000f [ 485.757498][ T6207] RBP: 00007f28ee698090 R08: 0000000000000000 R09: 0000000000000000 [ 485.765497][ T6207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 485.773497][ T6207] R13: 00007f28eda26038 R14: 00007f28eda25fa0 R15: 00007ffffa61cd78 [ 485.781503][ T6207] [ 487.435582][ T6233] validate_nla: 3 callbacks suppressed [ 487.435617][ T6233] netlink: 'syz.0.666': attribute type 3 has an invalid length. [ 487.450390][ T6233] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.666'. [ 487.652939][ T6239] netlink: 'syz.4.668': attribute type 3 has an invalid length. [ 487.662454][ T6239] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.668'. [ 488.268969][ T6210] netlink: 'syz.2.659': attribute type 29 has an invalid length. [ 488.604106][ T6249] FAULT_INJECTION: forcing a failure. [ 488.604106][ T6249] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 488.618936][ T6249] CPU: 1 PID: 6249 Comm: syz.0.672 Not tainted syzkaller #0 [ 488.626276][ T6249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 488.636402][ T6249] Call Trace: [ 488.639701][ T6249] [ 488.642663][ T6249] dump_stack_lvl+0x188/0x24e [ 488.647726][ T6249] ? show_regs_print_info+0x12/0x12 [ 488.653046][ T6249] ? load_image+0x410/0x410 [ 488.657637][ T6249] ? __lock_acquire+0x7ea0/0x7ea0 [ 488.663053][ T6249] should_fail_ex+0x390/0x4c0 [ 488.667773][ T6249] _copy_from_user+0x2c/0x170 [ 488.672491][ T6249] ppp_write+0x18b/0x3e0 [ 488.676766][ T6249] ? ppp_read+0x860/0x860 [ 488.681121][ T6249] vfs_write+0x2dc/0x9a0 [ 488.685408][ T6249] ? file_end_write+0x250/0x250 [ 488.690313][ T6249] ? __fget_files+0x28/0x460 [ 488.694959][ T6249] ? __fget_files+0x3fc/0x460 [ 488.699679][ T6249] ? __fdget_pos+0x1d4/0x360 [ 488.704299][ T6249] ? ksys_write+0x70/0x260 [ 488.708760][ T6249] ksys_write+0x14d/0x260 [ 488.713127][ T6249] ? __ia32_sys_read+0x80/0x80 [ 488.717925][ T6249] ? lockdep_hardirqs_on+0x94/0x140 [ 488.723154][ T6249] do_syscall_64+0x4c/0xa0 [ 488.727586][ T6249] ? clear_bhb_loop+0x60/0xb0 [ 488.732276][ T6249] ? clear_bhb_loop+0x60/0xb0 [ 488.736965][ T6249] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 488.742864][ T6249] RIP: 0033:0x7f28ed79e559 [ 488.747298][ T6249] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 488.767003][ T6249] RSP: 002b:00007f28ee698028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 488.775632][ T6249] RAX: ffffffffffffffda RBX: 00007f28eda25fa0 RCX: 00007f28ed79e559 [ 488.783635][ T6249] RDX: 0000000000000009 RSI: 0000200000000280 RDI: 000000000000000b [ 488.791634][ T6249] RBP: 00007f28ee698090 R08: 0000000000000000 R09: 0000000000000000 [ 488.799622][ T6249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 488.807600][ T6249] R13: 00007f28eda26038 R14: 00007f28eda25fa0 R15: 00007ffffa61cd78 [ 488.815638][ T6249] [ 489.539188][ T6277] netlink: 'syz.4.680': attribute type 29 has an invalid length. [ 489.696814][ T6277] netlink: 'syz.4.680': attribute type 29 has an invalid length. [ 489.712045][ T6279] netlink: 'syz.4.680': attribute type 29 has an invalid length. [ 489.870999][ T6290] netlink: 4 bytes leftover after parsing attributes in process `syz.4.683'. [ 489.896071][ T6286] netlink: 'syz.0.684': attribute type 3 has an invalid length. [ 489.922236][ T6286] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.684'. [ 489.946211][ T6288] netlink: 'syz.2.682': attribute type 3 has an invalid length. [ 489.980002][ T6288] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.682'. [ 490.541023][ T6314] netlink: 'syz.0.693': attribute type 29 has an invalid length. [ 490.550680][ T6314] netlink: 'syz.0.693': attribute type 29 has an invalid length. [ 491.063953][ T6323] netlink: 156 bytes leftover after parsing attributes in process `syz.2.696'. [ 491.086423][ T6323] netlink: 156 bytes leftover after parsing attributes in process `syz.2.696'. [ 491.378343][ T6335] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.699'. [ 491.443152][ T6339] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.700'. [ 491.526744][ T6345] syz.0.703 uses obsolete (PF_INET,SOCK_PACKET) [ 491.539453][ T6345] device lo entered promiscuous mode [ 491.972835][ T6362] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.710'. [ 492.621242][ T6377] validate_nla: 9 callbacks suppressed [ 492.621262][ T6377] netlink: 'syz.1.715': attribute type 3 has an invalid length. [ 492.637359][ T6377] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.715'. [ 492.975702][ T6380] netlink: 'syz.0.716': attribute type 3 has an invalid length. [ 493.013314][ T6380] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.716'. [ 493.067689][ T4328] Bluetooth: hci4: SCO packet for unknown connection handle 8 [ 493.376307][ T6400] netlink: 'syz.1.725': attribute type 29 has an invalid length. [ 493.408239][ T6400] netlink: 'syz.1.725': attribute type 29 has an invalid length. [ 493.445249][ T6403] netlink: 'syz.1.725': attribute type 29 has an invalid length. [ 494.121856][ T6417] netlink: 'syz.2.731': attribute type 3 has an invalid length. [ 494.614134][ T6430] netlink: 'syz.2.735': attribute type 3 has an invalid length. [ 496.505591][ T6457] netlink: 'syz.0.743': attribute type 29 has an invalid length. [ 496.538317][ T6457] netlink: 'syz.0.743': attribute type 29 has an invalid length. [ 496.579738][ T6462] netlink: 'syz.0.743': attribute type 29 has an invalid length. [ 496.751545][ T6467] __nla_validate_parse: 2 callbacks suppressed [ 496.751603][ T6467] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.746'. [ 497.745774][ T6490] validate_nla: 1 callbacks suppressed [ 497.745813][ T6490] netlink: 'syz.3.755': attribute type 3 has an invalid length. [ 497.797221][ T6490] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.755'. [ 497.834710][ T6495] netlink: 'syz.2.757': attribute type 29 has an invalid length. [ 497.864773][ T6495] netlink: 'syz.2.757': attribute type 29 has an invalid length. [ 497.911106][ T6500] netlink: 'syz.2.757': attribute type 29 has an invalid length. [ 498.828513][ T6523] netlink: 132 bytes leftover after parsing attributes in process `syz.4.767'. [ 498.890834][ T6521] netlink: 'syz.0.764': attribute type 3 has an invalid length. [ 498.929064][ T6521] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.764'. [ 499.005068][ T6529] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 499.013069][ T6529] IPv6: NLM_F_CREATE should be set when creating new route [ 499.021111][ T6529] IPv6: NLM_F_CREATE should be set when creating new route [ 499.028542][ T6529] IPv6: NLM_F_CREATE should be set when creating new route [ 499.071948][ T6537] netlink: 'syz.2.771': attribute type 29 has an invalid length. [ 499.089246][ T6536] netlink: 'syz.1.770': attribute type 3 has an invalid length. [ 499.092573][ T6537] netlink: 'syz.2.771': attribute type 29 has an invalid length. [ 499.099425][ T6536] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.770'. [ 499.129741][ T6539] netlink: 'syz.2.771': attribute type 29 has an invalid length. [ 500.755243][ T6577] netlink: 'syz.1.783': attribute type 3 has an invalid length. [ 500.764143][ T6577] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.783'. [ 501.449284][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.455675][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.139414][ T6582] netlink: 'syz.2.784': attribute type 29 has an invalid length. [ 503.306016][ T6586] netlink: 'syz.0.786': attribute type 3 has an invalid length. [ 503.314989][ T6586] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.786'. [ 504.271613][ T6582] netlink: 'syz.2.784': attribute type 29 has an invalid length. [ 504.431359][ T6594] tun0: tun_chr_ioctl cmd 1074025677 [ 504.447950][ T6594] tun0: linktype set to 805 [ 504.462229][ T6594] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.789'. [ 505.244593][ T6597] device vcan0 entered promiscuous mode [ 505.257968][ T6597] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 505.384499][ T6610] FAULT_INJECTION: forcing a failure. [ 505.384499][ T6610] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 505.401292][ T6610] CPU: 0 PID: 6610 Comm: syz.3.796 Not tainted syzkaller #0 [ 505.408674][ T6610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 505.418768][ T6610] Call Trace: [ 505.422100][ T6610] [ 505.425038][ T6610] dump_stack_lvl+0x188/0x24e [ 505.429763][ T6610] ? show_regs_print_info+0x12/0x12 [ 505.435235][ T6610] ? load_image+0x410/0x410 [ 505.439754][ T6610] ? __lock_acquire+0x7ea0/0x7ea0 [ 505.444800][ T6610] should_fail_ex+0x390/0x4c0 [ 505.449497][ T6610] prepare_alloc_pages+0x1e1/0x5b0 [ 505.454725][ T6610] __alloc_pages+0x130/0x4f0 [ 505.459359][ T6610] ? __kasan_kmalloc_large+0x8b/0xd0 [ 505.464743][ T6610] ? zone_statistics+0x170/0x170 [ 505.469699][ T6610] ? alloc_skb_with_frags+0xa7/0x710 [ 505.474996][ T6610] ? trace_kmalloc+0x22/0xa0 [ 505.479596][ T6610] ? alloc_pages+0x4dd/0x740 [ 505.484385][ T6610] alloc_skb_with_frags+0x20b/0x710 [ 505.489607][ T6610] sock_alloc_send_pskb+0x87f/0x9a0 [ 505.494831][ T6610] ? sock_kzfree_s+0x50/0x50 [ 505.499440][ T6610] ? __lock_acquire+0x142d/0x7ea0 [ 505.504477][ T6610] ? __kmem_cache_free+0xb6/0x200 [ 505.509539][ T6610] ? dev_get_by_index+0x1e/0x2d0 [ 505.514484][ T6610] ? dev_get_by_index+0x1e/0x2d0 [ 505.519434][ T6610] packet_sendmsg+0x31b9/0x4c30 [ 505.524319][ T6610] ? __might_sleep+0xd0/0xd0 [ 505.528918][ T6610] ? verify_lock_unused+0x140/0x140 [ 505.534308][ T6610] ? aa_sk_perm+0x81f/0x950 [ 505.538830][ T6610] ? aa_af_perm+0x340/0x340 [ 505.543336][ T6610] ? packet_getsockopt+0x980/0x980 [ 505.548465][ T6610] ? apparmor_socket_sendmsg+0x8a/0x330 [ 505.554030][ T6610] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 505.559349][ T6610] ? security_socket_sendmsg+0x7c/0xa0 [ 505.564820][ T6610] ? packet_getsockopt+0x980/0x980 [ 505.569953][ T6610] ____sys_sendmsg+0x5ed/0x9a0 [ 505.574739][ T6610] ? __sys_sendmsg_sock+0x30/0x30 [ 505.579776][ T6610] ? __import_iovec+0x306/0x510 [ 505.585214][ T6610] ? import_iovec+0x6f/0xa0 [ 505.589748][ T6610] ___sys_sendmsg+0x2a2/0x360 [ 505.594449][ T6610] ? __sys_sendmsg+0x2a0/0x2a0 [ 505.599277][ T6610] ? __lock_acquire+0x7ea0/0x7ea0 [ 505.604334][ T6610] __se_sys_sendmsg+0x1c3/0x2b0 [ 505.609230][ T6610] ? __x64_sys_sendmsg+0x80/0x80 [ 505.614186][ T6610] ? lockdep_hardirqs_on+0x94/0x140 [ 505.619493][ T6610] do_syscall_64+0x4c/0xa0 [ 505.623924][ T6610] ? clear_bhb_loop+0x60/0xb0 [ 505.628615][ T6610] ? clear_bhb_loop+0x60/0xb0 [ 505.633304][ T6610] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 505.639230][ T6610] RIP: 0033:0x7f8ef579e559 [ 505.643680][ T6610] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 505.663480][ T6610] RSP: 002b:00007f8ef65dd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 505.671993][ T6610] RAX: ffffffffffffffda RBX: 00007f8ef5a25fa0 RCX: 00007f8ef579e559 [ 505.680183][ T6610] RDX: 0000000000008045 RSI: 0000200000001d80 RDI: 0000000000000003 [ 505.688171][ T6610] RBP: 00007f8ef65dd090 R08: 0000000000000000 R09: 0000000000000000 [ 505.696237][ T6610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 505.704216][ T6610] R13: 00007f8ef5a26038 R14: 00007f8ef5a25fa0 R15: 00007ffe8f2fdba8 [ 505.712297][ T6610] [ 505.890029][ T6618] netlink: 'syz.2.798': attribute type 29 has an invalid length. [ 505.919397][ T6618] netlink: 'syz.2.798': attribute type 29 has an invalid length. [ 505.958331][ T6625] netlink: 'syz.2.798': attribute type 29 has an invalid length. [ 505.969803][ T6622] netlink: 'syz.0.800': attribute type 3 has an invalid length. [ 505.998170][ T6622] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.800'. [ 506.016290][ T6626] netlink: 'syz.4.801': attribute type 3 has an invalid length. [ 506.037213][ T6626] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.801'. [ 507.339388][ T6660] netlink: 'syz.3.813': attribute type 29 has an invalid length. [ 510.116806][ T6660] netlink: 'syz.3.813': attribute type 29 has an invalid length. [ 510.511669][ T6684] netlink: 'syz.4.818': attribute type 3 has an invalid length. [ 510.536459][ T6684] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.818'. [ 510.718778][ T6690] netlink: 'syz.3.816': attribute type 10 has an invalid length. [ 511.286012][ T6698] netlink: 'syz.1.819': attribute type 3 has an invalid length. [ 511.294908][ T6698] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.819'. [ 512.490540][ T6712] netlink: 'syz.2.826': attribute type 29 has an invalid length. [ 512.513070][ T6712] netlink: 'syz.2.826': attribute type 29 has an invalid length. [ 512.531512][ T6712] netlink: 'syz.2.826': attribute type 29 has an invalid length. [ 512.582926][ T6708] dvmrp1: tun_chr_ioctl cmd 35636 [ 512.764315][ T6719] netlink: 'syz.4.829': attribute type 11 has an invalid length. [ 513.697745][ T6740] netlink: 'syz.2.836': attribute type 3 has an invalid length. [ 513.705919][ T6740] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.836'. [ 514.003613][ T6743] netlink: 'syz.0.838': attribute type 3 has an invalid length. [ 514.012153][ T6743] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.838'. [ 514.340929][ T6762] FAULT_INJECTION: forcing a failure. [ 514.340929][ T6762] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 514.417967][ T6762] CPU: 1 PID: 6762 Comm: syz.3.846 Not tainted syzkaller #0 [ 514.425330][ T6762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 514.435410][ T6762] Call Trace: [ 514.438884][ T6762] [ 514.442091][ T6762] dump_stack_lvl+0x188/0x24e [ 514.446907][ T6762] ? show_regs_print_info+0x12/0x12 [ 514.452147][ T6762] ? load_image+0x410/0x410 [ 514.456689][ T6762] ? __lock_acquire+0x7ea0/0x7ea0 [ 514.461755][ T6762] should_fail_ex+0x390/0x4c0 [ 514.466474][ T6762] _copy_from_user+0x2c/0x170 [ 514.471187][ T6762] iovec_from_user+0x143/0x360 [ 514.475990][ T6762] __import_iovec+0x6c/0x510 [ 514.480644][ T6762] import_iovec+0x6f/0xa0 [ 514.485019][ T6762] ___sys_sendmsg+0x252/0x360 [ 514.489759][ T6762] ? __sys_sendmsg+0x2a0/0x2a0 [ 514.494572][ T6762] ? __lock_acquire+0x7ea0/0x7ea0 [ 514.499656][ T6762] __se_sys_sendmsg+0x1c3/0x2b0 [ 514.504542][ T6762] ? __x64_sys_sendmsg+0x80/0x80 [ 514.509522][ T6762] ? lockdep_hardirqs_on+0x94/0x140 [ 514.514768][ T6762] do_syscall_64+0x4c/0xa0 [ 514.519215][ T6762] ? clear_bhb_loop+0x60/0xb0 [ 514.523925][ T6762] ? clear_bhb_loop+0x60/0xb0 [ 514.528637][ T6762] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 514.534826][ T6762] RIP: 0033:0x7f8ef579e559 [ 514.539268][ T6762] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 514.558912][ T6762] RSP: 002b:00007f8ef65dd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 514.567451][ T6762] RAX: ffffffffffffffda RBX: 00007f8ef5a25fa0 RCX: 00007f8ef579e559 [ 514.575460][ T6762] RDX: 000000002600c055 RSI: 0000200000001b00 RDI: 0000000000000003 [ 514.583504][ T6762] RBP: 00007f8ef65dd090 R08: 0000000000000000 R09: 0000000000000000 [ 514.591591][ T6762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 514.599593][ T6762] R13: 00007f8ef5a26038 R14: 00007f8ef5a25fa0 R15: 00007ffe8f2fdba8 [ 514.607610][ T6762] [ 514.687330][ T6756] rxe_eth0 speed is unknown, defaulting to 1000 [ 515.501040][ T6777] validate_nla: 3 callbacks suppressed [ 515.501077][ T6777] netlink: 'syz.3.851': attribute type 3 has an invalid length. [ 515.537677][ T6777] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.851'. [ 515.944675][ T6787] netlink: 'syz.4.854': attribute type 29 has an invalid length. [ 516.008011][ T6787] netlink: 'syz.4.854': attribute type 29 has an invalid length. [ 516.037561][ T6789] netlink: 'syz.4.854': attribute type 29 has an invalid length. [ 516.339272][ T6796] netlink: 'syz.0.856': attribute type 3 has an invalid length. [ 516.357409][ T6796] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.856'. [ 517.703719][ T6813] tap0: tun_chr_ioctl cmd 1074025677 [ 517.726564][ T6813] tap0: linktype set to 774 [ 517.737226][ T6816] FAULT_INJECTION: forcing a failure. [ 517.737226][ T6816] name failslab, interval 1, probability 0, space 0, times 0 [ 517.751822][ T6813] netlink: 'syz.4.863': attribute type 3 has an invalid length. [ 517.767134][ T6813] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.863'. [ 517.767411][ T6816] CPU: 1 PID: 6816 Comm: syz.2.864 Not tainted syzkaller #0 [ 517.783685][ T6816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 517.793779][ T6816] Call Trace: [ 517.797292][ T6816] [ 517.800246][ T6816] dump_stack_lvl+0x188/0x24e [ 517.804966][ T6816] ? show_regs_print_info+0x12/0x12 [ 517.810198][ T6816] ? load_image+0x410/0x410 [ 517.814731][ T6816] ? __lock_acquire+0x1359/0x7ea0 [ 517.819804][ T6816] should_fail_ex+0x390/0x4c0 [ 517.824536][ T6816] should_failslab+0x5/0x20 [ 517.829081][ T6816] slab_pre_alloc_hook+0x59/0x300 [ 517.834152][ T6816] kmem_cache_alloc+0x56/0x2f0 [ 517.838946][ T6816] ? dst_alloc+0x101/0x160 [ 517.843394][ T6816] dst_alloc+0x101/0x160 [ 517.847669][ T6816] ip_route_output_key_hash_rcu+0x14e4/0x23f0 [ 517.853772][ T6816] ? ip_route_output_key_hash+0x139/0x330 [ 517.859510][ T6816] ip_route_output_key_hash+0x1ef/0x330 [ 517.865072][ T6816] ? ip_route_input_rcu+0x30a0/0x30a0 [ 517.870474][ T6816] ? __lock_acquire+0x7ea0/0x7ea0 [ 517.875873][ T6816] ip_route_output_flow+0x26/0x150 [ 517.881000][ T6816] ? security_sk_classify_flow+0x77/0x90 [ 517.886661][ T6816] udp_sendmsg+0x1637/0x23d0 [ 517.891279][ T6816] ? ip_skb_dst_mtu+0x870/0x870 [ 517.896148][ T6816] ? udp_cmsg_send+0x350/0x350 [ 517.900953][ T6816] ? verify_lock_unused+0x140/0x140 [ 517.906197][ T6816] ? udp_lib_get_port+0x15ea/0x1c20 [ 517.911419][ T6816] udpv6_sendmsg+0x7df/0x22c0 [ 517.916125][ T6816] ? print_unlock_imbalance_bug+0x160/0x160 [ 517.922160][ T6816] ? udp_v6_early_demux+0xf00/0xf00 [ 517.927384][ T6816] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 517.933393][ T6816] ? __local_bh_enable_ip+0x136/0x1c0 [ 517.938809][ T6816] ? _local_bh_enable+0xa0/0xa0 [ 517.943694][ T6816] ? inet_send_prepare+0x1aa/0x250 [ 517.948818][ T6816] ? inet_send_prepare+0x1aa/0x250 [ 517.953944][ T6816] ? inet6_sendmsg+0x5b/0xd0 [ 517.958538][ T6816] ? inet6_compat_ioctl+0x3c0/0x3c0 [ 517.963750][ T6816] ____sys_sendmsg+0x5ed/0x9a0 [ 517.968526][ T6816] ? __lock_acquire+0x7ea0/0x7ea0 [ 517.973570][ T6816] ? __sys_sendmsg_sock+0x30/0x30 [ 517.978608][ T6816] ? __import_iovec+0x306/0x510 [ 517.983501][ T6816] ? import_iovec+0x6f/0xa0 [ 517.988022][ T6816] ___sys_sendmsg+0x2a2/0x360 [ 517.992725][ T6816] ? __sys_sendmsg+0x2a0/0x2a0 [ 517.997513][ T6816] ? __lock_acquire+0x7ea0/0x7ea0 [ 518.002571][ T6816] __se_sys_sendmsg+0x1c3/0x2b0 [ 518.007443][ T6816] ? __x64_sys_sendmsg+0x80/0x80 [ 518.012407][ T6816] ? lockdep_hardirqs_on+0x94/0x140 [ 518.017627][ T6816] do_syscall_64+0x4c/0xa0 [ 518.022055][ T6816] ? clear_bhb_loop+0x60/0xb0 [ 518.026763][ T6816] ? clear_bhb_loop+0x60/0xb0 [ 518.031451][ T6816] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 518.037353][ T6816] RIP: 0033:0x7fca9939e559 [ 518.041774][ T6816] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 518.061648][ T6816] RSP: 002b:00007fca9a1e4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 518.070073][ T6816] RAX: ffffffffffffffda RBX: 00007fca99625fa0 RCX: 00007fca9939e559 [ 518.078048][ T6816] RDX: 0000000000008004 RSI: 0000200000000400 RDI: 0000000000000003 [ 518.086031][ T6816] RBP: 00007fca9a1e4090 R08: 0000000000000000 R09: 0000000000000000 [ 518.094016][ T6816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 518.102007][ T6816] R13: 00007fca99626038 R14: 00007fca99625fa0 R15: 00007ffc590b0c78 [ 518.110005][ T6816] [ 518.164053][ T6823] netlink: 'syz.3.866': attribute type 3 has an invalid length. [ 518.177256][ T6823] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.866'. [ 518.227728][ T6833] netlink: 'syz.4.863': attribute type 3 has an invalid length. [ 518.286283][ T6833] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.863'. [ 518.390859][ T6838] netlink: 'syz.1.865': attribute type 29 has an invalid length. [ 520.744869][ T6830] tap0: tun_chr_ioctl cmd 1074025673 [ 520.755375][ T6831] tap0: tun_chr_ioctl cmd 1074025677 [ 520.761381][ T6831] tap0: linktype set to 774 [ 520.944385][ T6855] netlink: 'syz.2.870': attribute type 29 has an invalid length. [ 521.928829][ T6855] netlink: 'syz.2.870': attribute type 29 has an invalid length. [ 522.160906][ T6875] netlink: 'syz.2.878': attribute type 3 has an invalid length. [ 522.197228][ T6875] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.878'. [ 522.243396][ T6877] netlink: 'syz.4.879': attribute type 3 has an invalid length. [ 522.316445][ T6877] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.879'. [ 522.406628][ T6884] netlink: 'syz.3.882': attribute type 3 has an invalid length. [ 522.427238][ T6884] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.882'. [ 522.526526][ T6887] netlink: 'syz.1.883': attribute type 3 has an invalid length. [ 522.561895][ T6887] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.883'. [ 523.006273][ T6906] netlink: 'syz.4.890': attribute type 29 has an invalid length. [ 523.016858][ T6906] netlink: 'syz.4.890': attribute type 29 has an invalid length. [ 523.032161][ T6906] netlink: 'syz.4.890': attribute type 29 has an invalid length. [ 524.230215][ T6919] netlink: 'syz.0.895': attribute type 3 has an invalid length. [ 524.261413][ T6919] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.895'. [ 524.713942][ T6936] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.904'. [ 526.552881][ T6971] validate_nla: 7 callbacks suppressed [ 526.552913][ T6971] netlink: 'syz.3.915': attribute type 29 has an invalid length. [ 526.576485][ T6971] netlink: 'syz.3.915': attribute type 29 has an invalid length. [ 526.592276][ T6971] netlink: 'syz.3.915': attribute type 29 has an invalid length. [ 526.612696][ T6967] netlink: 'syz.1.913': attribute type 3 has an invalid length. [ 526.621239][ T6967] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.913'. [ 527.183280][ T6992] netlink: 'syz.1.923': attribute type 3 has an invalid length. [ 527.191322][ T6992] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.923'. [ 527.900528][ T7001] netlink: 'syz.2.927': attribute type 29 has an invalid length. [ 527.911046][ T7001] netlink: 'syz.2.927': attribute type 29 has an invalid length. [ 527.932760][ T7001] netlink: 'syz.2.927': attribute type 29 has an invalid length. [ 528.132821][ T7007] netlink: 'syz.0.930': attribute type 3 has an invalid length. [ 528.158387][ T7005] netlink: 'syz.4.929': attribute type 3 has an invalid length. [ 528.161211][ T7007] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.930'. [ 528.208604][ T7005] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.929'. [ 529.117498][ T4335] Bluetooth: hci1: command 0x0406 tx timeout [ 529.117697][ T4328] Bluetooth: hci4: command 0x0406 tx timeout [ 529.123634][ T4335] Bluetooth: hci3: command 0x0406 tx timeout [ 529.130764][ T4328] Bluetooth: hci2: command 0x0406 tx timeout [ 529.135913][ T4330] Bluetooth: hci0: command 0x0406 tx timeout [ 529.672423][ T7035] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.938'. [ 531.430232][ T7062] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.949'. [ 532.091221][ T7064] validate_nla: 5 callbacks suppressed [ 532.091283][ T7064] netlink: 'syz.2.950': attribute type 3 has an invalid length. [ 532.117833][ T7064] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.950'. [ 532.265835][ T7078] netlink: 'syz.1.956': attribute type 29 has an invalid length. [ 532.284441][ T7078] netlink: 'syz.1.956': attribute type 29 has an invalid length. [ 532.296729][ T7078] netlink: 'syz.1.956': attribute type 29 has an invalid length. [ 532.298832][ T7076] netlink: 'syz.4.955': attribute type 3 has an invalid length. [ 532.327981][ T7076] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.955'. [ 533.569969][ T7104] netlink: 'syz.2.964': attribute type 3 has an invalid length. [ 533.597105][ T7104] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.964'. [ 534.384063][ T7111] netlink: 'syz.1.968': attribute type 3 has an invalid length. [ 534.457812][ T7111] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.968'. [ 534.686504][ T7127] netlink: 'syz.3.973': attribute type 29 has an invalid length. [ 534.698402][ T7127] netlink: 'syz.3.973': attribute type 29 has an invalid length. [ 534.719053][ T7127] netlink: 'syz.3.973': attribute type 29 has an invalid length. [ 534.731465][ T7123] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.972'. [ 535.051874][ T7139] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.977'. [ 536.276658][ T7160] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.985'. [ 537.419614][ T7172] validate_nla: 9 callbacks suppressed [ 537.419649][ T7172] netlink: 'syz.3.991': attribute type 3 has an invalid length. [ 537.465492][ T7172] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.991'. [ 537.690254][ T7185] netlink: 'syz.1.994': attribute type 29 has an invalid length. [ 537.696623][ T7183] netlink: 'syz.0.1004': attribute type 3 has an invalid length. [ 537.705975][ T7185] netlink: 'syz.1.994': attribute type 29 has an invalid length. [ 537.741586][ T7185] netlink: 'syz.1.994': attribute type 29 has an invalid length. [ 537.790128][ T7183] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1004'. [ 538.070211][ T7195] netlink: 'syz.0.999': attribute type 29 has an invalid length. [ 538.088558][ T7195] netlink: 'syz.0.999': attribute type 29 has an invalid length. [ 538.103155][ T7195] netlink: 'syz.0.999': attribute type 29 has an invalid length. [ 538.273619][ T7204] netlink: 'syz.0.1000': attribute type 3 has an invalid length. [ 538.281911][ T7204] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1000'. [ 539.535652][ T7216] netlink: 'syz.3.1006': attribute type 3 has an invalid length. [ 539.556097][ T7216] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1006'. [ 540.250015][ T7237] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1012'. [ 542.117532][ T7264] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1022'. [ 542.574888][ T7276] validate_nla: 8 callbacks suppressed [ 542.574930][ T7276] netlink: 'syz.4.1028': attribute type 3 has an invalid length. [ 542.618897][ T7276] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1028'. [ 544.508894][ T7307] netlink: 'syz.3.1038': attribute type 3 has an invalid length. [ 544.516691][ T7307] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1038'. [ 544.781278][ T7312] netlink: 'syz.2.1040': attribute type 3 has an invalid length. [ 544.837899][ T7312] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1040'. [ 545.245085][ T7316] netlink: 'syz.4.1041': attribute type 29 has an invalid length. [ 545.296437][ T7316] netlink: 'syz.4.1041': attribute type 29 has an invalid length. [ 545.328047][ T7321] netlink: 'syz.4.1041': attribute type 29 has an invalid length. [ 545.500589][ T7324] netlink: 'syz.3.1053': attribute type 3 has an invalid length. [ 545.537236][ T7324] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1053'. [ 548.178161][ T7362] netlink: 'syz.1.1055': attribute type 3 has an invalid length. [ 548.208431][ T7362] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1055'. [ 549.304177][ T7373] netlink: 'syz.0.1061': attribute type 3 has an invalid length. [ 549.317675][ T7373] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1061'. [ 549.967313][ T7393] netlink: 'syz.0.1078': attribute type 3 has an invalid length. [ 549.998724][ T7393] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1078'. [ 550.656585][ T7422] netlink: 'syz.0.1074': attribute type 3 has an invalid length. [ 550.682287][ T7422] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1074'. [ 550.698742][ T7423] netlink: 'syz.1.1075': attribute type 3 has an invalid length. [ 550.708001][ T7423] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1075'. [ 552.838273][ T7457] netlink: 'syz.4.1087': attribute type 3 has an invalid length. [ 552.847698][ T7457] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1087'. [ 553.624644][ T7459] netlink: 'syz.0.1088': attribute type 3 has an invalid length. [ 553.633412][ T7459] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1088'. [ 554.841852][ T7477] netlink: 'syz.0.1106': attribute type 3 has an invalid length. [ 554.849993][ T7477] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1106'. [ 554.982527][ T7480] netlink: 'syz.2.1094': attribute type 3 has an invalid length. [ 555.001099][ T7480] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1094'. [ 555.279511][ T7488] netlink: 'syz.1.1098': attribute type 3 has an invalid length. [ 555.314269][ T7488] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1098'. [ 555.437659][ T7492] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 555.444998][ T7492] IPv6: NLM_F_CREATE should be set when creating new route [ 555.452432][ T7492] IPv6: NLM_F_CREATE should be set when creating new route [ 555.459757][ T7492] IPv6: NLM_F_CREATE should be set when creating new route [ 556.371945][ T7511] netlink: 'syz.3.1107': attribute type 3 has an invalid length. [ 556.382258][ T7511] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1107'. [ 557.351208][ T7523] netlink: 'syz.2.1111': attribute type 3 has an invalid length. [ 557.366082][ T7523] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1111'. [ 557.487352][ T7525] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 557.689533][ T7534] netlink: 'syz.3.1115': attribute type 3 has an invalid length. [ 557.710939][ T7534] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1115'. [ 557.780397][ T7532] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 557.787880][ T7532] IPv6: NLM_F_CREATE should be set when creating new route [ 557.795269][ T7532] IPv6: NLM_F_CREATE should be set when creating new route [ 557.802666][ T7532] IPv6: NLM_F_CREATE should be set when creating new route [ 560.325099][ T7573] netlink: 'syz.0.1127': attribute type 3 has an invalid length. [ 560.343609][ T7573] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1127'. [ 561.716529][ T7590] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 562.683538][ T7607] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1139'. [ 562.763084][ T7610] netlink: 'syz.2.1142': attribute type 29 has an invalid length. [ 562.788013][ T7610] netlink: 'syz.2.1142': attribute type 29 has an invalid length. [ 562.873520][ T7621] netlink: 'syz.2.1142': attribute type 29 has an invalid length. [ 562.893447][ T7613] netlink: 'syz.4.1139': attribute type 10 has an invalid length. [ 562.932439][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.939033][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.146000][ T7626] netlink: 'syz.3.1145': attribute type 3 has an invalid length. [ 563.157924][ T7626] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1145'. [ 565.366033][ T7664] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1154'. [ 565.415251][ T7664] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1154'. [ 565.450289][ T7664] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1154'. [ 565.556238][ T7667] netlink: 'syz.3.1156': attribute type 29 has an invalid length. [ 565.583096][ T7664] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1154'. [ 565.593185][ T7664] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1154'. [ 565.614082][ T7664] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1154'. [ 565.628854][ T7664] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1154'. [ 565.717465][ T7667] netlink: 'syz.3.1156': attribute type 29 has an invalid length. [ 565.746288][ T7677] netlink: 'syz.4.1158': attribute type 2 has an invalid length. [ 565.767626][ T7677] netlink: 'syz.4.1158': attribute type 8 has an invalid length. [ 565.775423][ T7677] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1158'. [ 565.820754][ T7675] netlink: 'syz.3.1156': attribute type 29 has an invalid length. [ 565.904067][ T7682] netlink: 'syz.2.1160': attribute type 29 has an invalid length. [ 565.915316][ T7682] netlink: 'syz.2.1160': attribute type 29 has an invalid length. [ 565.956590][ T7685] netlink: 'syz.2.1160': attribute type 29 has an invalid length. [ 565.965856][ T7682] netlink: 'syz.2.1160': attribute type 29 has an invalid length. [ 565.988209][ T7682] netlink: 'syz.2.1160': attribute type 29 has an invalid length. [ 566.120219][ T7694] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1163'. [ 567.145731][ T7710] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1170'. [ 567.347709][ T7717] device dummy0 entered promiscuous mode [ 567.392212][ T7717] bridge0: port 3(dummy0) entered blocking state [ 567.404471][ T7717] bridge0: port 3(dummy0) entered disabled state [ 567.413447][ T7717] bridge0: port 3(dummy0) entered blocking state [ 567.420236][ T7717] bridge0: port 3(dummy0) entered forwarding state [ 568.567577][ T7743] sctp: [Deprecated]: syz.3.1184 (pid 7743) Use of int in maxseg socket option. [ 568.567577][ T7743] Use struct sctp_assoc_value instead [ 568.673282][ T7750] FAULT_INJECTION: forcing a failure. [ 568.673282][ T7750] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 568.818685][ T7750] CPU: 0 PID: 7750 Comm: syz.2.1186 Not tainted syzkaller #0 [ 568.826138][ T7750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 568.836301][ T7750] Call Trace: [ 568.839627][ T7750] [ 568.842555][ T7750] dump_stack_lvl+0x188/0x24e [ 568.847283][ T7750] ? show_regs_print_info+0x12/0x12 [ 568.852506][ T7750] ? load_image+0x410/0x410 [ 568.857089][ T7750] ? __lock_acquire+0x7ea0/0x7ea0 [ 568.862155][ T7750] should_fail_ex+0x390/0x4c0 [ 568.866875][ T7750] _copy_from_user+0x2c/0x170 [ 568.871589][ T7750] iovec_from_user+0x143/0x360 [ 568.876412][ T7750] __import_iovec+0x6c/0x510 [ 568.881054][ T7750] import_iovec+0x6f/0xa0 [ 568.885513][ T7750] ___sys_sendmsg+0x252/0x360 [ 568.890233][ T7750] ? __sys_sendmsg+0x2a0/0x2a0 [ 568.895045][ T7750] ? trace_call_bpf+0xbf/0x6b0 [ 568.899871][ T7750] __se_sys_sendmsg+0x1c3/0x2b0 [ 568.904763][ T7750] ? perf_trace_preemptirq_template+0x268/0x320 [ 568.911048][ T7750] ? __x64_sys_sendmsg+0x80/0x80 [ 568.916025][ T7750] ? lockdep_hardirqs_on+0x94/0x140 [ 568.921272][ T7750] do_syscall_64+0x4c/0xa0 [ 568.925728][ T7750] ? clear_bhb_loop+0x60/0xb0 [ 568.930448][ T7750] ? clear_bhb_loop+0x60/0xb0 [ 568.935170][ T7750] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 568.941094][ T7750] RIP: 0033:0x7fca9939e559 [ 568.945542][ T7750] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 568.965176][ T7750] RSP: 002b:00007fca9a1e4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 568.973616][ T7750] RAX: ffffffffffffffda RBX: 00007fca99625fa0 RCX: 00007fca9939e559 [ 568.981795][ T7750] RDX: 0000000000044000 RSI: 0000200000002e00 RDI: 0000000000000003 [ 568.989826][ T7750] RBP: 00007fca9a1e4090 R08: 0000000000000000 R09: 0000000000000000 [ 568.997860][ T7750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 569.005856][ T7750] R13: 00007fca99626038 R14: 00007fca99625fa0 R15: 00007ffc590b0c78 [ 569.013956][ T7750] [ 572.360214][ T7782] __nla_validate_parse: 11 callbacks suppressed [ 572.360290][ T7782] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1197'. [ 572.410570][ T7782] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1197'. [ 572.431002][ T7782] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1197'. [ 572.450603][ T7782] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1197'. [ 572.469105][ T7782] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1197'. [ 572.490249][ T7782] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1197'. [ 572.500170][ T7782] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1197'. [ 572.563601][ T7790] validate_nla: 3 callbacks suppressed [ 572.563621][ T7790] netlink: 'syz.4.1201': attribute type 3 has an invalid length. [ 572.600886][ T7790] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1201'. [ 572.863087][ T7801] FAULT_INJECTION: forcing a failure. [ 572.863087][ T7801] name failslab, interval 1, probability 0, space 0, times 0 [ 572.903101][ T7801] CPU: 1 PID: 7801 Comm: syz.0.1204 Not tainted syzkaller #0 [ 572.910566][ T7801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 572.920690][ T7801] Call Trace: [ 572.924000][ T7801] [ 572.926934][ T7801] dump_stack_lvl+0x188/0x24e [ 572.931636][ T7801] ? verify_lock_unused+0x140/0x140 [ 572.936886][ T7801] ? show_regs_print_info+0x12/0x12 [ 572.939725][ T7804] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1206'. [ 572.942115][ T7801] ? load_image+0x410/0x410 [ 572.942188][ T7801] should_fail_ex+0x390/0x4c0 [ 572.951908][ T7804] openvswitch: netlink: Message has 6 unknown bytes. [ 572.955667][ T7801] should_failslab+0x5/0x20 [ 572.971638][ T7801] slab_pre_alloc_hook+0x59/0x300 [ 572.976727][ T7801] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 572.983063][ T7801] kmem_cache_alloc+0x56/0x2f0 [ 572.987905][ T7801] ? skb_clone+0x1e7/0x370 [ 572.992388][ T7801] skb_clone+0x1e7/0x370 [ 572.996695][ T7801] bpf_clone_redirect+0x169/0x4a0 [ 573.001822][ T7801] bpf_prog_5a852fc91b8e417a+0x19/0x1d [ 573.007342][ T7801] bpf_test_run+0x4c1/0x830 [ 573.011964][ T7801] ? dst_hold+0xb0/0xb0 [ 573.016191][ T7801] ? __skb_checksum+0x6fc/0x7a0 [ 573.021101][ T7801] ? eth_get_headlen+0x200/0x200 [ 573.026087][ T7801] ? __build_skb+0x24b/0x3b0 [ 573.030755][ T7801] bpf_prog_test_run_skb+0xdaf/0x18e0 [ 573.036257][ T7801] ? cpu_online+0xa0/0xa0 [ 573.040741][ T7801] bpf_prog_test_run+0x31c/0x390 [ 573.045751][ T7801] __sys_bpf+0x62b/0x780 [ 573.050091][ T7801] ? bpf_link_show_fdinfo+0x380/0x380 [ 573.055574][ T7801] ? lock_chain_count+0x20/0x20 [ 573.060509][ T7801] __x64_sys_bpf+0x78/0x90 [ 573.065245][ T7801] do_syscall_64+0x4c/0xa0 [ 573.069707][ T7801] ? clear_bhb_loop+0x60/0xb0 [ 573.074433][ T7801] ? clear_bhb_loop+0x60/0xb0 [ 573.079171][ T7801] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 573.085155][ T7801] RIP: 0033:0x7f28ed79e559 [ 573.089655][ T7801] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 573.109313][ T7801] RSP: 002b:00007f28ee698028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 573.117816][ T7801] RAX: ffffffffffffffda RBX: 00007f28eda25fa0 RCX: 00007f28ed79e559 [ 573.125835][ T7801] RDX: 0000000000000050 RSI: 0000200000001640 RDI: 000000000000000a [ 573.133852][ T7801] RBP: 00007f28ee698090 R08: 0000000000000000 R09: 0000000000000000 [ 573.141868][ T7801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 573.149897][ T7801] R13: 00007f28eda26038 R14: 00007f28eda25fa0 R15: 00007ffffa61cd78 [ 573.157978][ T7801] [ 574.723666][ T7845] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1213'. [ 574.794435][ T7846] netlink: 'syz.2.1217': attribute type 3 has an invalid length. [ 574.816743][ T7850] netlink: 'syz.3.1216': attribute type 2 has an invalid length. [ 574.838159][ T7850] netlink: 'syz.3.1216': attribute type 8 has an invalid length. [ 575.107735][ T7861] delete_channel: no stack [ 575.112368][ T7861] delete_channel: no stack [ 575.242621][ T7867] netlink: 'syz.0.1223': attribute type 7 has an invalid length. [ 575.479223][ T7881] netlink: 'syz.4.1229': attribute type 21 has an invalid length. [ 575.693802][ T7889] FAULT_INJECTION: forcing a failure. [ 575.693802][ T7889] name failslab, interval 1, probability 0, space 0, times 0 [ 575.708375][ T7889] CPU: 0 PID: 7889 Comm: syz.4.1231 Not tainted syzkaller #0 [ 575.715807][ T7889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 575.725892][ T7889] Call Trace: [ 575.729260][ T7889] [ 575.732208][ T7889] dump_stack_lvl+0x188/0x24e [ 575.736921][ T7889] ? show_regs_print_info+0x12/0x12 [ 575.742136][ T7889] ? load_image+0x410/0x410 [ 575.746653][ T7889] ? __might_sleep+0xd0/0xd0 [ 575.751253][ T7889] ? __lock_acquire+0x7ea0/0x7ea0 [ 575.756428][ T7889] should_fail_ex+0x390/0x4c0 [ 575.761133][ T7889] should_failslab+0x5/0x20 [ 575.765645][ T7889] slab_pre_alloc_hook+0x59/0x300 [ 575.770680][ T7889] ? sctp_association_new+0x86/0x2520 [ 575.776118][ T7889] __kmem_cache_alloc_node+0x4f/0x270 [ 575.781521][ T7889] ? sctp_has_association+0x8e/0x440 [ 575.786863][ T7889] ? sctp_association_new+0x86/0x2520 [ 575.792271][ T7889] kmalloc_trace+0x26/0xe0 [ 575.796699][ T7889] sctp_association_new+0x86/0x2520 [ 575.801915][ T7889] sctp_connect_new_asoc+0x2da/0x6a0 [ 575.807217][ T7889] ? __sctp_connect+0xd80/0xd80 [ 575.812079][ T7889] ? __local_bh_enable_ip+0x136/0x1c0 [ 575.817473][ T7889] ? _local_bh_enable+0xa0/0xa0 [ 575.822422][ T7889] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 575.828243][ T7889] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 575.834066][ T7889] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 575.839637][ T7889] ? security_sctp_bind_connect+0x85/0xb0 [ 575.845384][ T7889] sctp_sendmsg+0x1686/0x2940 [ 575.850092][ T7889] ? sctp_getsockopt+0x8a0/0x8a0 [ 575.855045][ T7889] ? __might_fault+0xa6/0x120 [ 575.859739][ T7889] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 575.866167][ T7889] ? aa_sock_msg_perm+0x94/0x150 [ 575.871132][ T7889] ? inet_sendmsg+0x7a/0x2a0 [ 575.875736][ T7889] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 575.881027][ T7889] ? inet_send_prepare+0x250/0x250 [ 575.886186][ T7889] ____sys_sendmsg+0x5ed/0x9a0 [ 575.890971][ T7889] ? __sys_sendmsg_sock+0x30/0x30 [ 575.896005][ T7889] ? __import_iovec+0x306/0x510 [ 575.900890][ T7889] ? import_iovec+0x6f/0xa0 [ 575.905434][ T7889] ___sys_sendmsg+0x2a2/0x360 [ 575.910137][ T7889] ? __sys_sendmsg+0x2a0/0x2a0 [ 575.914934][ T7889] ? __lock_acquire+0x7ea0/0x7ea0 [ 575.919993][ T7889] __se_sys_sendmsg+0x1c3/0x2b0 [ 575.924981][ T7889] ? __x64_sys_sendmsg+0x80/0x80 [ 575.929943][ T7889] ? lockdep_hardirqs_on+0x94/0x140 [ 575.935163][ T7889] do_syscall_64+0x4c/0xa0 [ 575.939593][ T7889] ? clear_bhb_loop+0x60/0xb0 [ 575.944285][ T7889] ? clear_bhb_loop+0x60/0xb0 [ 575.948983][ T7889] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 575.954926][ T7889] RIP: 0033:0x7f5c6419e559 [ 575.959350][ T7889] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 575.979052][ T7889] RSP: 002b:00007f5c64fca028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 575.987479][ T7889] RAX: ffffffffffffffda RBX: 00007f5c64425fa0 RCX: 00007f5c6419e559 [ 575.995466][ T7889] RDX: 00000000000080d1 RSI: 0000200000001e00 RDI: 0000000000000003 [ 576.003479][ T7889] RBP: 00007f5c64fca090 R08: 0000000000000000 R09: 0000000000000000 [ 576.011494][ T7889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 576.019484][ T7889] R13: 00007f5c64426038 R14: 00007f5c64425fa0 R15: 00007ffd728ca748 [ 576.027478][ T7889] [ 576.133997][ T7894] netlink: 'syz.1.1234': attribute type 3 has an invalid length. [ 576.285081][ T7912] netlink: 'syz.4.1236': attribute type 10 has an invalid length. [ 576.332299][ T7912] team0: Device hsr_slave_0 failed to register rx_handler [ 576.400455][ T7907] tipc: Started in network mode [ 576.421335][ T7907] tipc: Node identity 9215a268, cluster identity 4711 [ 576.428964][ T7907] tipc: Node number set to 2450891368 [ 576.552351][ T7920] IPv6: NLM_F_CREATE should be specified when creating new route [ 578.064785][ T7936] __nla_validate_parse: 9 callbacks suppressed [ 578.064831][ T7936] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.1247'. [ 578.266967][ T7945] FAULT_INJECTION: forcing a failure. [ 578.266967][ T7945] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 578.316464][ T7945] CPU: 0 PID: 7945 Comm: syz.0.1251 Not tainted syzkaller #0 [ 578.323942][ T7945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 578.334054][ T7945] Call Trace: [ 578.337386][ T7945] [ 578.340367][ T7945] dump_stack_lvl+0x188/0x24e [ 578.345179][ T7945] ? show_regs_print_info+0x12/0x12 [ 578.350472][ T7945] ? load_image+0x410/0x410 [ 578.355052][ T7945] ? __lock_acquire+0x7ea0/0x7ea0 [ 578.360164][ T7945] should_fail_ex+0x390/0x4c0 [ 578.364921][ T7945] _copy_from_user+0x2c/0x170 [ 578.369767][ T7945] iovec_from_user+0x143/0x360 [ 578.374609][ T7945] __import_iovec+0x6c/0x510 [ 578.379286][ T7945] import_iovec+0x6f/0xa0 [ 578.383717][ T7945] ___sys_sendmsg+0x252/0x360 [ 578.388477][ T7945] ? __sys_sendmsg+0x2a0/0x2a0 [ 578.393360][ T7945] ? __lock_acquire+0x7ea0/0x7ea0 [ 578.398529][ T7945] __se_sys_sendmsg+0x1c3/0x2b0 [ 578.403454][ T7945] ? __x64_sys_sendmsg+0x80/0x80 [ 578.408507][ T7945] ? lockdep_hardirqs_on+0x94/0x140 [ 578.413798][ T7945] do_syscall_64+0x4c/0xa0 [ 578.418274][ T7945] ? clear_bhb_loop+0x60/0xb0 [ 578.423001][ T7945] ? clear_bhb_loop+0x60/0xb0 [ 578.427749][ T7945] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 578.433707][ T7945] RIP: 0033:0x7f28ed79e559 [ 578.438226][ T7945] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 578.458029][ T7945] RSP: 002b:00007f28ee698028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 578.466477][ T7945] RAX: ffffffffffffffda RBX: 00007f28eda25fa0 RCX: 00007f28ed79e559 [ 578.474511][ T7945] RDX: 0000000000000804 RSI: 00002000000001c0 RDI: 0000000000000005 [ 578.482520][ T7945] RBP: 00007f28ee698090 R08: 0000000000000000 R09: 0000000000000000 [ 578.490559][ T7945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 578.498573][ T7945] R13: 00007f28eda26038 R14: 00007f28eda25fa0 R15: 00007ffffa61cd78 [ 578.506636][ T7945] [ 578.872378][ T7956] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1255'. [ 578.908257][ T7956] openvswitch: netlink: Message has 6 unknown bytes. [ 579.051577][ T7960] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 579.058729][ T7960] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 581.186577][ T7987] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1263'. [ 581.226711][ T7987] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1263'. [ 581.278338][ T7983] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1263'. [ 581.316329][ T7989] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1263'. [ 581.352855][ T7992] netlink: 'syz.4.1264': attribute type 10 has an invalid length. [ 581.388447][ T7992] team0: Device vxcan1 is of different type [ 581.396871][ T7997] FAULT_INJECTION: forcing a failure. [ 581.396871][ T7997] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 581.413784][ T7997] CPU: 1 PID: 7997 Comm: syz.0.1267 Not tainted syzkaller #0 [ 581.421227][ T7997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 581.424140][ T7995] Illegal XDP return value 4294967294 on prog (id 874) dev N/A, expect packet loss! [ 581.431292][ T7997] Call Trace: [ 581.431308][ T7997] [ 581.431316][ T7997] dump_stack_lvl+0x188/0x24e [ 581.431346][ T7997] ? show_regs_print_info+0x12/0x12 [ 581.431364][ T7997] ? load_image+0x410/0x410 [ 581.431380][ T7997] ? __lock_acquire+0x7ea0/0x7ea0 [ 581.431407][ T7997] should_fail_ex+0x390/0x4c0 [ 581.431435][ T7997] _copy_from_user+0x2c/0x170 [ 581.431459][ T7997] ___sys_sendmsg+0x1c3/0x360 [ 581.480654][ T7997] ? __sys_sendmsg+0x2a0/0x2a0 [ 581.485487][ T7997] ? __lock_acquire+0x7ea0/0x7ea0 [ 581.490574][ T7997] __se_sys_sendmsg+0x1c3/0x2b0 [ 581.495478][ T7997] ? __x64_sys_sendmsg+0x80/0x80 [ 581.500467][ T7997] ? lockdep_hardirqs_on+0x94/0x140 [ 581.505825][ T7997] do_syscall_64+0x4c/0xa0 [ 581.510301][ T7997] ? clear_bhb_loop+0x60/0xb0 [ 581.514997][ T7997] ? clear_bhb_loop+0x60/0xb0 [ 581.519707][ T7997] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 581.525633][ T7997] RIP: 0033:0x7f28ed79e559 [ 581.530064][ T7997] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 581.549783][ T7997] RSP: 002b:00007f28ee698028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 581.558218][ T7997] RAX: ffffffffffffffda RBX: 00007f28eda25fa0 RCX: 00007f28ed79e559 [ 581.566228][ T7997] RDX: 0000000030008041 RSI: 00002000000001c0 RDI: 0000000000000003 [ 581.574217][ T7997] RBP: 00007f28ee698090 R08: 0000000000000000 R09: 0000000000000000 [ 581.582653][ T7997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 581.590734][ T7997] R13: 00007f28eda26038 R14: 00007f28eda25fa0 R15: 00007ffffa61cd78 [ 581.598744][ T7997] [ 581.624418][ T7999] netlink: 146340 bytes leftover after parsing attributes in process `syz.2.1266'. [ 581.662282][ T7999] openvswitch: netlink: Key type 386 is out of range max 32 [ 581.839685][ T8007] FAULT_INJECTION: forcing a failure. [ 581.839685][ T8007] name failslab, interval 1, probability 0, space 0, times 0 [ 581.903509][ T8007] CPU: 0 PID: 8007 Comm: syz.4.1269 Not tainted syzkaller #0 [ 581.911016][ T8007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 581.921197][ T8007] Call Trace: [ 581.924506][ T8007] [ 581.927472][ T8007] dump_stack_lvl+0x188/0x24e [ 581.932175][ T8007] ? show_regs_print_info+0x12/0x12 [ 581.937385][ T8007] ? load_image+0x410/0x410 [ 581.941991][ T8007] ? __lock_acquire+0x7ea0/0x7ea0 [ 581.947038][ T8007] should_fail_ex+0x390/0x4c0 [ 581.951787][ T8007] should_failslab+0x5/0x20 [ 581.956330][ T8007] slab_pre_alloc_hook+0x59/0x300 [ 581.961371][ T8007] ? security_sk_alloc+0x47/0x130 [ 581.966428][ T8007] __kmem_cache_alloc_node+0x4f/0x270 [ 581.971833][ T8007] ? security_sk_alloc+0x47/0x130 [ 581.976879][ T8007] __kmalloc+0xa3/0x240 [ 581.981058][ T8007] ? sk_prot_alloc+0xe7/0x210 [ 581.985773][ T8007] security_sk_alloc+0x47/0x130 [ 581.990647][ T8007] sk_prot_alloc+0x101/0x210 [ 581.995261][ T8007] ? sk_alloc+0x20/0x330 [ 581.999544][ T8007] sk_alloc+0x36/0x330 [ 582.003629][ T8007] ? bpf_ctx_init+0x154/0x190 [ 582.008335][ T8007] bpf_prog_test_run_skb+0x36d/0x18e0 [ 582.013830][ T8007] ? __fget_files+0x28/0x460 [ 582.018524][ T8007] ? __fget_files+0x3fc/0x460 [ 582.023227][ T8007] ? cpu_online+0xa0/0xa0 [ 582.027575][ T8007] bpf_prog_test_run+0x31c/0x390 [ 582.032528][ T8007] __sys_bpf+0x62b/0x780 [ 582.036782][ T8007] ? bpf_link_show_fdinfo+0x380/0x380 [ 582.042203][ T8007] ? lock_chain_count+0x20/0x20 [ 582.047080][ T8007] __x64_sys_bpf+0x78/0x90 [ 582.051511][ T8007] do_syscall_64+0x4c/0xa0 [ 582.056202][ T8007] ? clear_bhb_loop+0x60/0xb0 [ 582.060890][ T8007] ? clear_bhb_loop+0x60/0xb0 [ 582.065587][ T8007] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 582.071496][ T8007] RIP: 0033:0x7f5c6419e559 [ 582.075920][ T8007] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 582.095658][ T8007] RSP: 002b:00007f5c64fca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 582.104211][ T8007] RAX: ffffffffffffffda RBX: 00007f5c64425fa0 RCX: 00007f5c6419e559 [ 582.112213][ T8007] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 000000000000000a [ 582.120199][ T8007] RBP: 00007f5c64fca090 R08: 0000000000000000 R09: 0000000000000000 [ 582.128195][ T8007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 582.136449][ T8007] R13: 00007f5c64426038 R14: 00007f5c64425fa0 R15: 00007ffd728ca748 [ 582.144644][ T8007] [ 582.218524][ T8011] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1272'. [ 582.452738][ T8023] netlink: 'syz.3.1274': attribute type 10 has an invalid length. [ 582.473055][ T8023] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.497678][ T8023] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.534209][ T8023] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 582.685217][ T8018] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1274'. [ 582.695222][ T8018] netlink: 'syz.3.1274': attribute type 1 has an invalid length. [ 582.782295][ T8030] netlink: 65027 bytes leftover after parsing attributes in process `syz.4.1278'. [ 582.929898][ T8036] netlink: 'syz.1.1280': attribute type 29 has an invalid length. [ 582.951106][ T8036] netlink: 'syz.1.1280': attribute type 29 has an invalid length. [ 583.020738][ T4408] tipc: Subscription rejected, illegal request [ 583.080093][ T8041] netlink: 'syz.2.1283': attribute type 2 has an invalid length. [ 583.107323][ T8041] netlink: 'syz.2.1283': attribute type 8 has an invalid length. [ 583.140003][ T8041] __nla_validate_parse: 1 callbacks suppressed [ 583.140025][ T8041] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1283'. [ 583.256155][ T8042] netlink: 'syz.1.1280': attribute type 29 has an invalid length. [ 583.275216][ T8043] netlink: 'syz.1.1280': attribute type 2 has an invalid length. [ 583.295831][ T8043] netlink: 'syz.1.1280': attribute type 8 has an invalid length. [ 583.328126][ T8043] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1280'. [ 584.296196][ T8069] netlink: 131088 bytes leftover after parsing attributes in process `syz.0.1297'. [ 584.489508][ T8072] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1289'. [ 584.991588][ T8092] netlink: 131088 bytes leftover after parsing attributes in process `syz.2.1296'. [ 585.196206][ T8102] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1300'. [ 585.280207][ T8093] team0: Device gre0 is of different type [ 585.972035][ T8098] rxe_eth0 speed is unknown, defaulting to 1000 [ 587.376594][ T8129] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.1307'. [ 587.434195][ T8140] FAULT_INJECTION: forcing a failure. [ 587.434195][ T8140] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 587.467523][ T8140] CPU: 1 PID: 8140 Comm: syz.0.1311 Not tainted syzkaller #0 [ 587.475036][ T8140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 587.485136][ T8140] Call Trace: [ 587.488446][ T8140] [ 587.491419][ T8140] dump_stack_lvl+0x188/0x24e [ 587.496235][ T8140] ? show_regs_print_info+0x12/0x12 [ 587.501690][ T8140] ? load_image+0x410/0x410 [ 587.506235][ T8140] ? __lock_acquire+0x7ea0/0x7ea0 [ 587.511316][ T8140] ? unix_ioctl+0x255/0x6a0 [ 587.515875][ T8140] should_fail_ex+0x390/0x4c0 [ 587.520617][ T8140] _copy_from_user+0x2c/0x170 [ 587.525351][ T8140] sock_do_ioctl+0x18c/0x320 [ 587.529997][ T8140] ? sock_show_fdinfo+0xb0/0xb0 [ 587.534915][ T8140] sock_ioctl+0x48a/0x700 [ 587.539305][ T8140] ? sock_poll+0x420/0x420 [ 587.543761][ T8140] ? bpf_lsm_file_ioctl+0x5/0x10 [ 587.548757][ T8140] ? security_file_ioctl+0x7c/0xa0 [ 587.553908][ T8140] ? sock_poll+0x420/0x420 [ 587.558379][ T8140] __se_sys_ioctl+0xfa/0x170 [ 587.563001][ T8140] do_syscall_64+0x4c/0xa0 [ 587.567433][ T8140] ? clear_bhb_loop+0x60/0xb0 [ 587.572135][ T8140] ? clear_bhb_loop+0x60/0xb0 [ 587.576838][ T8140] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 587.582775][ T8140] RIP: 0033:0x7f28ed79e559 [ 587.587210][ T8140] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 587.606844][ T8140] RSP: 002b:00007f28ee698028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 587.615289][ T8140] RAX: ffffffffffffffda RBX: 00007f28eda25fa0 RCX: 00007f28ed79e559 [ 587.623308][ T8140] RDX: 0000200000001180 RSI: 0000000000008927 RDI: 0000000000000005 [ 587.631305][ T8140] RBP: 00007f28ee698090 R08: 0000000000000000 R09: 0000000000000000 [ 587.639296][ T8140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 587.647376][ T8140] R13: 00007f28eda26038 R14: 00007f28eda25fa0 R15: 00007ffffa61cd78 [ 587.655450][ T8140] [ 587.888613][ T8144] validate_nla: 2 callbacks suppressed [ 587.888644][ T8144] netlink: 'syz.4.1309': attribute type 10 has an invalid length. [ 587.968942][ T8144] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.015382][ T8137] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1309'. [ 588.060397][ T8144] device bridge_slave_1 left promiscuous mode [ 588.090613][ T8137] netlink: 'syz.4.1309': attribute type 1 has an invalid length. [ 588.110575][ T8144] bridge0: port 2(bridge_slave_1) entered disabled state [ 589.185535][ T8144] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 589.410899][ T8169] FAULT_INJECTION: forcing a failure. [ 589.410899][ T8169] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 589.478062][ T8169] CPU: 1 PID: 8169 Comm: syz.4.1323 Not tainted syzkaller #0 [ 589.485549][ T8169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 589.495634][ T8169] Call Trace: [ 589.498941][ T8169] [ 589.501904][ T8169] dump_stack_lvl+0x188/0x24e [ 589.506630][ T8169] ? show_regs_print_info+0x12/0x12 [ 589.511875][ T8169] ? load_image+0x410/0x410 [ 589.516417][ T8169] ? __lock_acquire+0x7ea0/0x7ea0 [ 589.521781][ T8169] ? __might_sleep+0xd0/0xd0 [ 589.526414][ T8169] should_fail_ex+0x390/0x4c0 [ 589.531137][ T8169] _copy_from_user+0x2c/0x170 [ 589.535859][ T8169] generic_map_update_batch+0x48d/0x7f0 [ 589.541454][ T8169] ? rcu_read_unlock+0xa0/0xa0 [ 589.546365][ T8169] ? __fdget+0x17c/0x200 [ 589.550783][ T8169] ? rcu_read_unlock+0xa0/0xa0 [ 589.555636][ T8169] bpf_map_do_batch+0x475/0x5f0 [ 589.560528][ T8169] ? bpf_lsm_audit_rule_known+0x10/0x10 [ 589.566095][ T8169] __sys_bpf+0x6f7/0x780 [ 589.570379][ T8169] ? bpf_link_show_fdinfo+0x380/0x380 [ 589.575805][ T8169] ? lock_chain_count+0x20/0x20 [ 589.580705][ T8169] __x64_sys_bpf+0x78/0x90 [ 589.585163][ T8169] do_syscall_64+0x4c/0xa0 [ 589.589619][ T8169] ? clear_bhb_loop+0x60/0xb0 [ 589.594340][ T8169] ? clear_bhb_loop+0x60/0xb0 [ 589.599087][ T8169] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 589.605031][ T8169] RIP: 0033:0x7f5c6419e559 [ 589.609457][ T8169] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 589.629087][ T8169] RSP: 002b:00007f5c64fca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 589.637598][ T8169] RAX: ffffffffffffffda RBX: 00007f5c64425fa0 RCX: 00007f5c6419e559 [ 589.645583][ T8169] RDX: 0000000000000038 RSI: 00002000000003c0 RDI: 000000000000001a [ 589.653596][ T8169] RBP: 00007f5c64fca090 R08: 0000000000000000 R09: 0000000000000000 [ 589.661584][ T8169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 589.669562][ T8169] R13: 00007f5c64426038 R14: 00007f5c64425fa0 R15: 00007ffd728ca748 [ 589.677554][ T8169] [ 589.785346][ T8174] delete_channel: no stack [ 589.903217][ T8184] netlink: 'syz.1.1328': attribute type 10 has an invalid length. [ 589.966387][ T8184] team0: Port device virt_wifi0 added [ 589.999234][ T8187] device veth1_macvtap left promiscuous mode [ 591.580649][ T8207] netlink: 'syz.0.1334': attribute type 10 has an invalid length. [ 591.605413][ T8209] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1336'. [ 591.652725][ T8207] bridge0: port 2(bridge_slave_1) entered disabled state [ 591.862696][ T8207] device bridge_slave_1 left promiscuous mode [ 591.908083][ T8207] bridge0: port 2(bridge_slave_1) entered disabled state [ 591.946804][ T8212] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1334'. [ 592.037133][ T8212] netlink: 'syz.0.1334': attribute type 1 has an invalid length. [ 592.140305][ T8207] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 592.163877][ T8215] netlink: 'syz.1.1337': attribute type 21 has an invalid length. [ 592.182208][ T8215] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1337'. [ 592.207507][ T8215] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1337'. [ 592.236483][ T8231] FAULT_INJECTION: forcing a failure. [ 592.236483][ T8231] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 592.253705][ T8231] CPU: 1 PID: 8231 Comm: syz.2.1340 Not tainted syzkaller #0 [ 592.261163][ T8231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 592.271243][ T8231] Call Trace: [ 592.274537][ T8231] [ 592.277472][ T8231] dump_stack_lvl+0x188/0x24e [ 592.282162][ T8231] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 592.288324][ T8231] ? show_regs_print_info+0x12/0x12 [ 592.293526][ T8231] ? load_image+0x410/0x410 [ 592.298034][ T8231] should_fail_ex+0x390/0x4c0 [ 592.302730][ T8231] _copy_to_user+0x2c/0x130 [ 592.307237][ T8231] generic_map_lookup_batch+0x7cc/0xbf0 [ 592.312802][ T8231] ? bpf_map_update_value+0x670/0x670 [ 592.318310][ T8231] ? bpf_map_update_value+0x670/0x670 [ 592.323761][ T8231] bpf_map_do_batch+0x2e0/0x5f0 [ 592.328657][ T8231] ? bpf_lsm_bpf+0x5/0x10 [ 592.333021][ T8231] ? security_bpf+0x7a/0xa0 [ 592.337536][ T8231] __sys_bpf+0x6f7/0x780 [ 592.341834][ T8231] ? bpf_link_show_fdinfo+0x380/0x380 [ 592.347228][ T8231] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 592.353439][ T8231] __x64_sys_bpf+0x78/0x90 [ 592.357870][ T8231] do_syscall_64+0x4c/0xa0 [ 592.362320][ T8231] ? clear_bhb_loop+0x60/0xb0 [ 592.367018][ T8231] ? clear_bhb_loop+0x60/0xb0 [ 592.371737][ T8231] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 592.377660][ T8231] RIP: 0033:0x7fca9939e559 [ 592.382087][ T8231] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 592.401704][ T8231] RSP: 002b:00007fca9a1e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 592.410215][ T8231] RAX: ffffffffffffffda RBX: 00007fca99625fa0 RCX: 00007fca9939e559 [ 592.418193][ T8231] RDX: 0000000000000039 RSI: 0000200000000140 RDI: 0000000000000018 [ 592.426169][ T8231] RBP: 00007fca9a1e4090 R08: 0000000000000000 R09: 0000000000000000 [ 592.434149][ T8231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 592.442125][ T8231] R13: 00007fca99626038 R14: 00007fca99625fa0 R15: 00007ffc590b0c78 [ 592.450120][ T8231] [ 592.756339][ T8239] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1344'. [ 592.784557][ T8239] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1344'. [ 592.798961][ T8242] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1344'. [ 592.817918][ T8201] ------------[ cut here ]------------ [ 592.823556][ T8201] WARNING: CPU: 0 PID: 8201 at kernel/events/core.c:6602 perf_pending_task+0x353/0x480 [ 592.833430][ T8201] Modules linked in: [ 592.837468][ T8201] CPU: 0 PID: 8201 Comm: syz.3.1329 Not tainted syzkaller #0 [ 592.845474][ T8201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 592.855624][ T8201] RIP: 0010:perf_pending_task+0x353/0x480 [ 592.861486][ T8201] Code: e8 02 5e da ff 84 db 75 10 e8 99 5b da ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 89 5b da ff e8 7c 98 58 ff eb e9 e8 7d 5b da ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 43 80 3c 2f 00 0f 85 0a ff ff [ 592.881191][ T8201] RSP: 0018:ffffc9000635f888 EFLAGS: 00010293 [ 592.887373][ T8201] RAX: ffffffff81a7eb03 RBX: ffff888054170a58 RCX: ffff88807a268000 [ 592.895370][ T8201] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 592.903445][ T8201] RBP: ffff888054170820 R08: ffffc9000635f83f R09: ffffc9000635f830 [ 592.911507][ T8201] R10: dffffc0000000000 R11: fffff52000c6bf08 R12: ffff88807a268000 [ 592.919585][ T8201] R13: ffff888028196960 R14: 0000000000000000 R15: 1ffff1100a82e104 [ 592.927642][ T8201] FS: 0000000000000000(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 592.936612][ T8201] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 592.943324][ T8201] CR2: 00007f5c64f556c8 CR3: 000000000d68e000 CR4: 00000000003506f0 [ 592.951397][ T8201] DR0: 00002000000008c0 DR1: 0000000000000000 DR2: 0000000000000000 [ 592.959716][ T8201] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 592.967881][ T8201] Call Trace: [ 592.971184][ T8201] [ 592.974140][ T8201] task_work_run+0x1d0/0x260 [ 592.978838][ T8201] ? task_work_cancel+0x220/0x220 [ 592.983896][ T8201] ? do_raw_spin_unlock+0x11d/0x230 [ 592.989200][ T8201] do_exit+0x9d5/0x2570 [ 592.993395][ T8201] ? nfs_stat_to_errno+0x170/0x170 [ 592.998608][ T8201] ? put_task_struct+0x80/0x80 [ 593.003403][ T8201] ? ct_nmi_exit+0x145/0x1c0 [ 593.008114][ T8201] ? lock_chain_count+0x20/0x20 [ 593.013008][ T8201] do_group_exit+0x229/0x2e0 [ 593.017697][ T8201] ? lockdep_hardirqs_on+0x94/0x140 [ 593.022945][ T8201] get_signal+0x1259/0x1340 [ 593.027573][ T8201] arch_do_signal_or_restart+0xc4/0x1310 [ 593.033254][ T8201] ? ct_nmi_exit+0x145/0x1c0 [ 593.037947][ T8201] ? get_sigframe_size+0x10/0x10 [ 593.042921][ T8201] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 593.049020][ T8201] ? exit_to_user_mode_loop+0x3b/0x110 [ 593.054531][ T8201] exit_to_user_mode_loop+0x70/0x110 [ 593.059921][ T8201] exit_to_user_mode_prepare+0xee/0x180 [ 593.065506][ T8201] irqentry_exit_to_user_mode+0x5/0x30 [ 593.071069][ T8201] exc_general_protection+0x164/0x1f0 [ 593.076494][ T8201] ? exc_page_fault+0x88/0x100 [ 593.081367][ T8201] asm_exc_general_protection+0x22/0x30 [ 593.086954][ T8201] RIP: 0033:0x7f8ef579e561 [ 593.091468][ T8201] Code: Unable to access opcode bytes at 0x7f8ef579e537. [ 593.098665][ T8201] RSP: 002b:00002000000002b0 EFLAGS: 00010217 [ 593.104764][ T8201] RAX: 0000000000000000 RBX: 00007f8ef5a26270 RCX: 00007f8ef579e559 [ 593.112844][ T8201] RDX: 00002000000002c0 RSI: 00002000000002b0 RDI: 0000000000000000 [ 593.120930][ T8201] RBP: 00007f8ef58358b0 R08: 0000200000000340 R09: 0000200000000340 [ 593.129087][ T8201] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000000 [ 593.137134][ T8201] R13: 00007f8ef5a26308 R14: 00007f8ef5a26270 R15: 00007ffe8f2fdba8 [ 593.145153][ T8201] [ 593.148294][ T8201] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 593.155684][ T8201] CPU: 0 PID: 8201 Comm: syz.3.1329 Not tainted syzkaller #0 [ 593.163160][ T8201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 593.173252][ T8201] Call Trace: [ 593.176546][ T8201] [ 593.179492][ T8201] dump_stack_lvl+0x188/0x24e [ 593.184379][ T8201] ? memcpy+0x3c/0x60 [ 593.188481][ T8201] ? show_regs_print_info+0x12/0x12 [ 593.193713][ T8201] ? load_image+0x410/0x410 [ 593.198301][ T8201] panic+0x2d3/0x710 [ 593.202264][ T8201] ? bpf_jit_dump+0xd0/0xd0 [ 593.206859][ T8201] __warn+0x2f8/0x4f0 [ 593.210888][ T8201] ? perf_pending_task+0x353/0x480 [ 593.216120][ T8201] ? perf_pending_task+0x353/0x480 [ 593.221565][ T8201] report_bug+0x2ba/0x4f0 [ 593.225932][ T8201] ? perf_pending_task+0x353/0x480 [ 593.231080][ T8201] handle_bug+0x3a/0x70 [ 593.235264][ T8201] exc_invalid_op+0x16/0x40 [ 593.239798][ T8201] asm_exc_invalid_op+0x16/0x20 [ 593.244683][ T8201] RIP: 0010:perf_pending_task+0x353/0x480 [ 593.250429][ T8201] Code: e8 02 5e da ff 84 db 75 10 e8 99 5b da ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 89 5b da ff e8 7c 98 58 ff eb e9 e8 7d 5b da ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 43 80 3c 2f 00 0f 85 0a ff ff [ 593.270235][ T8201] RSP: 0018:ffffc9000635f888 EFLAGS: 00010293 [ 593.276327][ T8201] RAX: ffffffff81a7eb03 RBX: ffff888054170a58 RCX: ffff88807a268000 [ 593.284320][ T8201] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 593.292491][ T8201] RBP: ffff888054170820 R08: ffffc9000635f83f R09: ffffc9000635f830 [ 593.300517][ T8201] R10: dffffc0000000000 R11: fffff52000c6bf08 R12: ffff88807a268000 [ 593.308599][ T8201] R13: ffff888028196960 R14: 0000000000000000 R15: 1ffff1100a82e104 [ 593.316627][ T8201] ? perf_pending_task+0x353/0x480 [ 593.321778][ T8201] ? perf_pending_task+0x353/0x480 [ 593.326931][ T8201] task_work_run+0x1d0/0x260 [ 593.331553][ T8201] ? task_work_cancel+0x220/0x220 [ 593.336605][ T8201] ? do_raw_spin_unlock+0x11d/0x230 [ 593.341846][ T8201] do_exit+0x9d5/0x2570 [ 593.346034][ T8201] ? nfs_stat_to_errno+0x170/0x170 [ 593.351200][ T8201] ? put_task_struct+0x80/0x80 [ 593.356052][ T8201] ? ct_nmi_exit+0x145/0x1c0 [ 593.360694][ T8201] ? lock_chain_count+0x20/0x20 [ 593.365584][ T8201] do_group_exit+0x229/0x2e0 [ 593.370208][ T8201] ? lockdep_hardirqs_on+0x94/0x140 [ 593.375446][ T8201] get_signal+0x1259/0x1340 [ 593.379998][ T8201] arch_do_signal_or_restart+0xc4/0x1310 [ 593.385675][ T8201] ? ct_nmi_exit+0x145/0x1c0 [ 593.390353][ T8201] ? get_sigframe_size+0x10/0x10 [ 593.395333][ T8201] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 593.401355][ T8201] ? exit_to_user_mode_loop+0x3b/0x110 [ 593.406867][ T8201] exit_to_user_mode_loop+0x70/0x110 [ 593.412211][ T8201] exit_to_user_mode_prepare+0xee/0x180 [ 593.417797][ T8201] irqentry_exit_to_user_mode+0x5/0x30 [ 593.423319][ T8201] exc_general_protection+0x164/0x1f0 [ 593.428737][ T8201] ? exc_page_fault+0x88/0x100 [ 593.433532][ T8201] asm_exc_general_protection+0x22/0x30 [ 593.439099][ T8201] RIP: 0033:0x7f8ef579e561 [ 593.443537][ T8201] Code: Unable to access opcode bytes at 0x7f8ef579e537. [ 593.450574][ T8201] RSP: 002b:00002000000002b0 EFLAGS: 00010217 [ 593.456800][ T8201] RAX: 0000000000000000 RBX: 00007f8ef5a26270 RCX: 00007f8ef579e559 [ 593.465166][ T8201] RDX: 00002000000002c0 RSI: 00002000000002b0 RDI: 0000000000000000 [ 593.473170][ T8201] RBP: 00007f8ef58358b0 R08: 0000200000000340 R09: 0000200000000340 [ 593.481172][ T8201] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000000 [ 593.489198][ T8201] R13: 00007f8ef5a26308 R14: 00007f8ef5a26270 R15: 00007ffe8f2fdba8 [ 593.497212][ T8201] [ 593.500582][ T8201] Kernel Offset: disabled [ 593.505028][ T8201] Rebooting in 86400 seconds..