last executing test programs: 3.397968957s ago: executing program 2 (id=4468): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xb, 0x2000000000000216, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair(0x1, 0x3, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) close(0xffffffffffffffff) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)="5c00000052006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038021d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d49380e78ff6a1577ae18c819945fb4e37e70e4509c5", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) recvmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20000000) recvmsg$kcm(r2, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x100) recvmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x880e000000000000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(r2, &(0x7f0000002480)={0x0, 0x0, 0x0}, 0x40000120) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) getpid() socketpair(0x1, 0x1, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x5}, 0x8, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000080)="2e00000010008188040f46ecdb4cb9cca7480ef431000000e3bd6efb010509000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x8000) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, &(0x7f0000000080)) socket$kcm(0x10, 0x2, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) 2.794230502s ago: executing program 1 (id=4474): r0 = socket$kcm(0xa, 0x3, 0x3a) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100080, 0x0, 0x0, 0x1}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, 0x0}, 0x0) r3 = socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x10}}], 0x10}, 0x0) setsockopt$sock_attach_bpf(r3, 0x6, 0x13, &(0x7f0000000200), 0x4) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)={[{0x2d, 'hugetlb'}]}, 0x9) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x2d, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x0fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee'}, 0x30) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r6, &(0x7f00000002c0)='io.stat\x00', 0x275a, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x200400d0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000380)="e0a2363b4438a55d1a5e47b8bffc", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) socket$kcm(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x18, 0x3, &(0x7f00000013c0)=@framed, &(0x7f0000001400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x542b, @remote}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000640)="25b2b3cbea40", 0x6}], 0x1, 0x0, 0x0, 0x900}, 0x0) 2.781869622s ago: executing program 2 (id=4475): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000)={0x80000}, 0x59}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x18000000000002a0, 0x44, 0x0, &(0x7f0000000500)="b90103600040f000009e0ff008001fffffe1000040004d3277fb86dd60017f02832d3b54e8744b6442a9693e346991a80caed594ff02002f000000004883644b6750d299", 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.03195628s ago: executing program 1 (id=4476): bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x3, 0x73) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(0xffffffffffffffff, 0x0, 0x200048cc) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffd, 0x1ff}, 0x10c022, 0xac5d, 0x22a, 0x0, 0x0, 0xd38, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) gettid() recvmsg$unix(r1, 0x0, 0x40012140) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvmsg$unix(r2, 0x0, 0x12) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair(0x8, 0x1, 0x1, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8918, &(0x7f0000000040)={'wg1\x00', @random}) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_pressure(r5, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r6, &(0x7f0000000080)={'some', 0x20, 0x2000000005, 0x20, 0x10000000fffff}, 0x2f) close(r6) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x10101, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x0, 0x800027, &(0x7f0000000140), 0x20, 0x10, &(0x7f0000000180), &(0x7f00000002c0), 0x8, 0x56, 0x8, 0x8, &(0x7f0000000300)}}, 0x4a) 1.790176206s ago: executing program 2 (id=4478): mkdir(0x0, 0x6c) r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc81e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x4846, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x6, 0x10, &(0x7f0000000880)=ANY=[@ANYRESOCT=r2, @ANYRES32, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x50) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x2063) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x3) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x6, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x2, 0x3}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x4, 0xfffff162}}, @type_tag={0x4, 0x0, 0x0, 0x12, 0x3}]}, {0x0, [0x57, 0xe5e919b5517ad0d3, 0x61, 0x61]}}, &(0x7f0000001f00)=""/4083, 0x56, 0xff3, 0x3}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1000}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0xa, 0x1, 0x0, 0x3, 0x0, 0x10000000000, 0x41218, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0x6}, 0x4108, 0x8796d7b, 0xfffffffc, 0x6, 0x4000000008, 0x7ffc, 0x806, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0xb) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40305829, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000867700000000000000000000180100002020702500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006ddffff17010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b0000009500000000000000"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0xc}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0xfffffffffffffd5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r7 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0x7, 0x0, 0x0) write$cgroup_devices(r3, &(0x7f00000000c0)={'a', ' *:* ', 'w\x00'}, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) 1.591738601s ago: executing program 1 (id=4480): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000100), 0x0}, 0x20) r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x19, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_ext={0x1c, 0x3, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000600)='GPL\x00', 0x2, 0x2b, &(0x7f0000000640)=""/43, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000006c0)={0x3, 0x4, 0x8, 0x5}, 0x10, 0x28b32, 0xffffffffffffffff, 0x4, &(0x7f0000000700), &(0x7f0000000740)=[{0x5, 0x5, 0xa, 0xb}, {0x0, 0x1, 0x10, 0x8}, {0x4, 0x2, 0x9, 0x1}, {0x4, 0x5, 0x6, 0xb}], 0x10, 0x80000000}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeb1, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="b90103606989068c3c2700406558", 0x0, 0x104, 0x6000000000000000, 0x1e, 0x0, &(0x7f0000000400)="9209558f0c5fb25cd57f98113135c3171b8b331fbc04f0e6955a796ff8e3", 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x8, 0xfd, 0x0, 0x0, 0x0, 0x22201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0x6}, 0x104101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffc}, 0x0, 0x9, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x144540f2249c4cec) socket$kcm(0x10, 0x3, 0x10) r3 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0xcd, &(0x7f0000000040), 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.473821914s ago: executing program 0 (id=4482): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = socket$kcm(0x11, 0x3, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0}, 0x20) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x888a4, 0x0, 0x0, 0x0, 0x6, 0x2f07}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x3) socketpair$unix(0x1, 0x1, 0x0, 0x0) r2 = socket$kcm(0xa, 0x6, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8b04, 0x0) getpid() r5 = getpid() r6 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x11c002, 0x89, 0x0, 0x0, 0x1}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = gettid() r8 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f00000001c0)={r1}) perf_event_open(0x0, r7, 0x1, r6, 0x0) r9 = syz_clone(0x6480, &(0x7f0000000740)="5904516a1f03982ed19dacc92d845c36", 0x10, 0x0, &(0x7f00000007c0), 0x0) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000c40)="c10e020022003505d25a806f8c6394f90435fc60040011000a740100053582c137153e", 0x23}], 0x1}, 0x0) r11 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030020000b12d25a80648c2594f90124fc60100c074002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmsg$unix(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000340)="438fd74f926a04c574611c5d3fff65ef1fbcdee1eabee685a3aa3b73c662e2de9b91bfe5751d36b2de1b133e6e41f516363db7699daf15e1d3f7b14adce1d9721d746ccdabe8edaadcef547735f99d54b90ad1ef1b46fb940efb750819cdee32cd302342b9db47184ad74d90c9054f933836e7f6f54cb93ec0b72c5ae9402f0aa07e35a005a191009c885adece276a6ef1c4952fadb943156a348f17dfdd72a5498d877b2cd97562ab309fba64a70ff2ed22e005b4ae319323", 0xb9}, {&(0x7f0000000440)}, {&(0x7f0000000500)="113a11f5949a17b491122ec76a345556", 0x10}, {&(0x7f0000000540)="554e60df5418a2a40f09d02fabc292ea1e911268424071d96622bc47210d9dddfaa0acbb3d5a47a07c5c0e3ca45a382296709d13b6192d5a7d5cf831023d96feaac82ea28f57eaa247b61baf595ea363ee4a7700749dc8214e7a218f5acbd7ba856e3474db53c82e8c5ba81cb03e", 0x6e}], 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYBLOB='\x00\x00', @ANYRES32=r2, @ANYBLOB="1c000000000000001200000002000000", @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r7, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r9, @ANYRES32, @ANYRES32=0xee01, @ANYRES32=r10, @ANYRES32=0xee00, @ANYBLOB='\x00\x00\x00\x00'], 0xb0, 0x20048040}, 0x40) close(r2) socket$kcm(0x2, 0x2, 0x73) setsockopt$sock_attach_bpf(r2, 0x0, 0x4, 0x0, 0x0) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x3, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="18020000010000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r12, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.377694356s ago: executing program 4 (id=4483): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000100), 0x0}, 0x20) r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x19, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r1}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000980)={{}, 0x0, &(0x7f0000000940)='%pS \x00'}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeb1, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="b90103606989068c3c2700406558", 0x0, 0x104, 0x6000000000000000, 0x1e, 0x0, &(0x7f0000000400)="9209558f0c5fb25cd57f98113135c3171b8b331fbc04f0e6955a796ff8e3", 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x8, 0xfd, 0x0, 0x0, 0x0, 0x22201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0x6}, 0x104101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffc}, 0x0, 0x9, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x144540f2249c4cec) socket$kcm(0x10, 0x3, 0x10) r3 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0xcd, &(0x7f0000000040), 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.323479628s ago: executing program 2 (id=4484): socket$kcm(0x10, 0x2, 0x0) (async) r0 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$TUNGETFEATURES(r2, 0x800454cf, 0x0) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102037300fe08000e40000200875a65969ff57b00ff0200000000000000000001ffaaaaaa"], 0xfdef) (async) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102037300fe08000e40000200875a65969ff57b00ff0200000000000000000001ffaaaaaa"], 0xfdef) openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="5c00000011006bec9e3be35c6e17aa31076b876c1d0000007ea20864160af3653c001ac00400000008000200030001001400000007b556a737c160f9555b4755bb05251e618256000051f60a84c9f4d4938037e786a6", 0x56}, {&(0x7f0000000140)="7e3f15d6d2ee", 0x6}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.316427988s ago: executing program 1 (id=4485): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x1f004, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x64, &(0x7f0000000000)=r4, 0x10) mkdirat$cgroup(r4, &(0x7f0000000140)='syz0\x00', 0x1ff) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000700)={r4, 0x58, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0x20, &(0x7f0000000600)={0x0, 0x0, 0x0, &(0x7f0000000580)=""/122, 0x7a}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x5, 0x3, 0x0, &(0x7f00000007c0)='GPL\x00', 0x5, 0xbb, &(0x7f000000cf3d)=""/187, 0x0, 0x44, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1, 0x2b, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffff}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, @map_val={0x18, 0x2b7729f7eaa023b8, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x8}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffffe}, @map_idx={0x18, 0xa, 0x5, 0x0, 0xc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x67}, @jmp={0x5, 0x0, 0xc07dd6e3041aac60, 0x6, 0xa, 0x2, 0xffffffffffffffff}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000005c0)='GPL\x00', 0x81, 0x66, &(0x7f0000000600)=""/102, 0x0, 0x40, '\x00', r5, @fallback=0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000780)={0x4, 0xb, 0x9, 0x4}, 0x10, r6, r1, 0x1, 0x0, &(0x7f00000007c0)=[{0x4, 0x5, 0x10, 0xb}], 0x10, 0x1c}, 0x94) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="d80000001c0081064e81f782db44b9040a1d08040e00000000000aa1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) 1.186369661s ago: executing program 3 (id=4486): r0 = socket$kcm(0xa, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x18) setsockopt$sock_attach_bpf(r0, 0x29, 0x33, &(0x7f0000000100)=r1, 0x4) 1.170219431s ago: executing program 4 (id=4487): r0 = socket$kcm(0xa, 0x3, 0x3a) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100080, 0x0, 0x0, 0x1}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, 0x0}, 0x0) r3 = socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x10}}], 0x10}, 0x0) setsockopt$sock_attach_bpf(r3, 0x6, 0x13, &(0x7f0000000200), 0x4) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)={[{0x2d, 'hugetlb'}]}, 0x9) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x2d, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x0fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee'}, 0x30) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r6, &(0x7f00000002c0)='io.stat\x00', 0x275a, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x200400d0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000380)="e0a2363b4438a55d1a5e47b8bffc", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) socket$kcm(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x18, 0x3, &(0x7f00000013c0)=@framed, &(0x7f0000001400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x542b, @remote}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000640)="25b2b3cbea40", 0x6}], 0x1, 0x0, 0x0, 0x900}, 0x0) 1.096210943s ago: executing program 3 (id=4488): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ac08789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9c8f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2826b47ad8ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b478abc5b196dd5308cb20c4e2a0bd702651bb39f10523102dcd8ece692159028f314e0d6bfa400475c6699fdc40efe0948e3cef7419a7f113134e5ee20fd87c4521ccfbd32d6f147f743d30866bdd86ca8bf0c7bcc475f4ed53517aaa51f1c151d859a7f0b53abd332c84bdad313e82ac3777a6f7f649ff8a25f6dfe09cb29213896b49a825257bf143e9fa3bbd47009e66fe5705b3ef2b40a182e408c680727d64e00e1ce508f8fd64ac6c84ccc28fc333067de63b9bb5daaa12ce60ee3779ded79651be69d2a413cd948a873dd7ad7017b150828cf100d3df8537f22aff58343c9ee966fceb594bbe10b911427f76a25a219be2f85287b7f83d323a30991067ad1369792166062085ff20c5fb9f6e4f78dd09c7d2d6ca3c8a5d0d26ccbe576f44a1bc94194817", @ANYRESHEX, @ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff3, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000200000000000000000000040000000300000000010000130100000000110c230000000d020000000000"], 0xffffffffffffffff, 0x3e, 0xb1, 0x2}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2, r1}, 0xc9f72c4a25ab2245) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000040000000000000000080000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000020000008500000083000000bf0900000000000055090100000000009500000000000000850000000e000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) close(0xffffffffffffffff) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000880)={r4, 0x58, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d40)={{}, &(0x7f0000000cc0), &(0x7f0000000d00)=r5}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x17, 0x1f, &(0x7f0000000f40)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000a62504007f000000b7080000000000007b8af8ff00000000b7080000030000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6], &(0x7f0000000680)='GPL\x00', 0x40, 0x8a, &(0x7f00000006c0)=""/138, 0x40f00, 0x41, '\x00', r7, @fallback=0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a40)={0x5, 0x2, 0x0, 0x6}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0x0, &(0x7f0000000dc0)=[{0x9, 0x5, 0x1, 0xa}, {0x2, 0x5, 0xc, 0x1}, {0x2, 0x4, 0x6, 0xc}, {0x2, 0x2, 0x3, 0xc}, {0x5, 0x1, 0x2, 0xc}, {0x3, 0x1, 0xb, 0xc}, {0x1, 0x5, 0x8, 0x9}], 0x10, 0x8}, 0x94) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x110c230007) close(r8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000640)="b9ff03076844268cb89e14f088a8", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x50) 1.024010225s ago: executing program 0 (id=4489): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) socket$kcm(0x21, 0x2, 0x2) (async) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x108082, 0xac5d, 0x0, 0x9, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x0, 0x6}, 0x0, 0x0, 0x7, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r2 = socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0xdc}, 0x5d4, 0xc8}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r6, 0x84, 0x17, &(0x7f0000000000), 0x10) (async) close(r5) (async) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0) (async) setsockopt$sock_attach_bpf(r3, 0x84, 0x2, &(0x7f0000000000), 0x8) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000100), 0x0) (async) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'wlan1\x00', @random="0200ac7f7f00"}) (async) ioctl$SIOCSIFHWADDR(r2, 0x8916, &(0x7f0000000040)={'veth0_to_bond\x00', @random="0200ac7f7f00"}) (async) perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1e, 0x17, &(0x7f0000000540)=ANY=[@ANYBLOB="54e30000000000ff00000000002da91e10d0c6fe29908da700000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc09000000000000b609010000000000650000000000000018010000646c6c2500000000002020207b9af8ff00000000cd9100000000000037010000f8ffffffb702000008000000b70300000000000004000000060000003f93000000000000b5030000000000008500000076000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d083901000000000000a1180015000600142603600e120900210003000401a80016000400144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cab98bdace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b4337", 0xd8}], 0x1}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) (async) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000001c0)={0x2, &(0x7f0000000040)=[{0x30, 0xec, 0x5, 0xfffff018}, {0x6, 0x0, 0xfd, 0x100}]}) 938.264097ms ago: executing program 4 (id=4490): perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r0, &(0x7f00000010c0)={&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000480)='\\', 0x1}], 0x1}, 0x4000040) sendmsg$inet(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000180)="84", 0x1}], 0x1, 0x0, 0x0, 0xff00}, 0x8040) 857.784149ms ago: executing program 0 (id=4491): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1000000000000008, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400180000000000791048000000000071041a000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000040)}], 0x1}, 0x0) 709.924792ms ago: executing program 0 (id=4492): socket$kcm(0x21, 0x2, 0x2) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x2, 0x1, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_config_ext={0x7ff, 0x4}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x20000}, 0x0, 0x0, 0x0, 0x6, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000005c0)="2e0000003c000511d25a8069edb0344a0418cb44b0fa0bf4cace8c6394b9027c92b47795140d010000c4d196c6a6", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) sendmsg$kcm(r2, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000002f40)=ANY=[@ANYBLOB="050000040000000c0000000c000000000000", @ANYRES32, @ANYBLOB='\x00'/19, @ANYBLOB], 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={0xffffffffffffffff, r5}, 0xc) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f93924fc60040011000a7403004800000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 672.766233ms ago: executing program 3 (id=4493): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) socket$kcm(0x2, 0x5, 0x84) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r1, 0x12c, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000015c0), 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) (async) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00123d00014008041000020400009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@jmp={0x5, 0x0, 0x7}, @jmp={0x5, 0x0, 0x449a349b67b8a9da, 0x0, 0x0, 0x4}]}, &(0x7f0000000100)='GPL\x00'}, 0x94) 607.962095ms ago: executing program 0 (id=4494): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20e9, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0), 0x8) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000002c0)=r3, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcc9cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b2cdf41dc10d1e8bf076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e4d5b318e2ec0e0700897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe7bc0476619f28d99cd0aa7b73340cc2160a1fe3c184b751c51160fbce841f8a97be6148ba532e6ea09c346dfebd31a08b32808b80200000000009dd27080e71113610e10d859e8327ef03fb6c86adac12233f9a1fb9c2aec61ce63a3462fd50117b89a9ab759b4eeb8cb000067d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0180aabc18cae2ed4b4390af9a9ceafd07ed0030000002cab154ad029a119ca3c972780870014605c83d7d11c3c975d5aec84222fff0d7216fdb0d3a0ec4bfae563112f4b391aafe234870072858dc06e7c337642d3e5a815212f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a46939868d75211bbae0e7313bff5d4c391ddece00fc772dd6b4d4d0a917b239fe12280fc92c88c5b8dcdcc22ee1747790a8992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5dc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffff7f23877a6b24db0e067345560942fa629fbef2461c96a08707671215c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e42e50adab988dd8e12baf5c768a40538be5f76e9c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859adfe38f77b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aae73835d5a3cda9e90d76c1993e0799d4894ee7f8249dc1e3428d2129369ee1b85afa1a5be5f6eb2eea0d0df414b315f65112412392191fa83ee830548ef8e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355a500587b603306a5af8d867d80a07f10d82eafb030621204d3ded6f260af62d91faae95196d5e3ff010000000000000be959096ea948cfa8e7194123e918914a71ad5a8521fb9553bc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c63ebb4380b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989177a30280bc586e79a5dd8076c248e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fc03000000000000001547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5ffff000000000000c24411d415b6b085fb73a2c7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aac029d15af607ad83532ff181c985f54b39370c06e63055b4d6a36fa98a44e379d28307c9912fb097601f3f88a2ca6fd1f9320cfe7fc8e9f7f15f02e177ce23f43a154b42e26f037e8a01377cbd3f509e6e540c9ba9c2a589ac5d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd926891927a7267c47cf897853d160100b39b613faefe16bed1fc105dddd77ab929b837d54aa17eb9fbdc2bdc0e98ae2c3f23a6131e2879f04ff01000030b92dd493be66c2242f8184733b80ba28e8ffffff7f00000000bb2f89049c5f6d63d56995747639964217aacfe548bc869098aa8e07e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d187168d5c9cd848d566cc17587641ed01889c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5a45706bda78ab60200000000000000000000000000000000000000706f78f0a2ea9667fb5b951808545a46830970c2dfae01adbda7d29bf1f7abdaf52e0de6f9d7150808ed086642e64ebf98762b34338b80e41b704c3eefaf0bb5f7d895de17a10b0a0ea15ccc0d7a830b6eb33b6b21675511d693ef5e3c44bbf71cabc5175d879e7499f8baae2a1a09cf38da73297764fbc0e723e1cc3abb12e3076982ed32c94a2ce3e6f37c47e983da4ca5c96187db5a2a2e1742bc93a65d7187126126b3a80f17dd2f7dbbe82d104ede9ba6925afc2ee6cb94f56f1363cad635abf8f983292c49c0ebf5005154c7b58a3a2a2e5a00d2f953a86d2fd92b8661264f781e3fb02d05a28f3f17b64d0258853d45cb5ebde10cd3d82eeed2f1ed925b7cf400304932c5ed0a362b235ce37e1f17700f7d1fecf8be8a2c5d25a9c60657560d05441387ff158a018d19a286c56d0886eb59d509ee89cc2df52881d005b2e5c27563ba54e4153c132d0366a9660000000000000009c1aaec93ec0f925921fb2e9eb202a29bef28224dbabe723de5c584bc398a8792e493048c87f60a51a391e959212181d4bf32ed89c96d421c8171698c49403558fd13c649f90b0911d57eeb298b590581eba1ce383b539ab80fd15445987b1bb4eb512545e1ab65fef310e10b1ee362b51c72f82edf2f502ddf52567775e34a56d1be892f1e62b08950d517fa6fb1b0ef2edf1b67f8644786116b037d4a36fdd30b000063e58c856ec44cbbc2d370553f832af9480215e09aaa3843fe360b1c293a14627f2cfbe278f31d0abc0f5aaa10926dbbfe8a4b131c13a73d4e6d065c2c0fed3ab8442520ce0e0ad7d2d177377ab197ace3ef8b1c24ceb0bdee84bd6e6317633938dd19dc42de7f8f860eca6d9c74525fcd3497526df4c13e3ba5f0d75365a4542ae9440d2fede416d618cdaaf7e038879c5d177b3876fda4121e15a00adb976064a93e8d000000000000903350932d3eef7fdada20c19807066e2c72d0d816eb9fa50be213bf6bbb7ccb9f2e8a153e6ced68f192ebed6e86af0f2cec7335fa8039fd6eb025440bc2a34d071f0a0e6774308a2c5986aa9200a1306ffa5a71ca69e89a6980612b35fc858f37c2c398515a910a35e22ab0573c10b85df4c2972a2fb8b9c080fbb41a753791df727fdeadc5cf218a6eda31312256191c620cce34d1e3bf40a4a207ab1575b399eb8155781bfc7cb5920b49c039935a888d77041814f60fbbcafa487ee96b368e8769da90b44190e569fe8b1d155d0765baaca5c5548b5a78bb43e5d9e47a1d5809bb178184b5672d08e29aecf1f572ac1e6cab7e820751beed5f79de29a67a579150bfb31232d296b9d2977ed027ca90af7088d6466f1501d96a32bfa3cf9ab0dcd626ac9341833e92685af6917ae05473ae4768341426e244159b3c3e002b6f8ee80cbe6e26c816ab92658d956d849cd3a21ebf4b143d338035cd91f087633aa668e0644b05dc5a7937cd5fb62bd08242a858aeeda8c0cbb4fc2478a8155b859e88493f322702277939832bd4a1d8109f98c5a187564c9eb80acc63ac57459593c81ce8998e38ea231b81ebaa6b242ebdf382d70232f1d8e516a8eaf39d09ea40198cf1b72eb5ce5327d3a3861470be47a9a9dbf569e6f6f474fd1448adfd70c4f4a4487edaf193a00a808389a110a4286905ba81309735f6ac5d2ba7ab2be01fa25c11dbb3170258e9d9fed944fd85c03336a49f7016517a1988bc84ee301e167d3cf88c46c4eba6e2bfd099acd2eec5c624679aa7ebab76061a9ca792bffe3d6df4dbe70b5cab6299a51e63826fd0bda4846d06e322ebd745e73da718ba0c93e7567df9ed7ea8d2fdbde44e65a4cd01748b"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0xff6c}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0x75, 0x6000, &(0x7f0000000940)="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", 0x0, 0xfb, 0x60006060, 0x0, 0x0, &(0x7f0000000000), &(0x7f00000007c0)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236808dd10d88c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a914f94ca2935d9f30457a8ffb21aef4a95a155fab70a40b08605690f6333", 0x2, 0x0, 0x1000}, 0x2c) 607.663885ms ago: executing program 4 (id=4495): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000100), 0x0}, 0x20) r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x19, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_ext={0x1c, 0x3, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000600)='GPL\x00', 0x2, 0x2b, &(0x7f0000000640)=""/43, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000006c0)={0x3, 0x4, 0x8, 0x5}, 0x10, 0x28b32, 0xffffffffffffffff, 0x4, &(0x7f0000000700), &(0x7f0000000740)=[{0x5, 0x5, 0xa, 0xb}, {0x0, 0x1, 0x10, 0x8}, {0x4, 0x2, 0x9, 0x1}, {0x4, 0x5, 0x6, 0xb}], 0x10, 0x80000000}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeb1, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="b90103606989068c3c2700406558", 0x0, 0x104, 0x6000000000000000, 0x1e, 0x0, &(0x7f0000000400)="9209558f0c5fb25cd57f98113135c3171b8b331fbc04f0e6955a796ff8e3", 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x8, 0xfd, 0x0, 0x0, 0x0, 0x22201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0x6}, 0x104101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffc}, 0x0, 0x9, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x144540f2249c4cec) socket$kcm(0x10, 0x3, 0x10) r3 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0xcd, &(0x7f0000000040), 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 458.332929ms ago: executing program 3 (id=4496): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae"], 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) close(0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x40eff, 0x3, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) socket$kcm(0x2, 0x1000000000000002, 0x0) close(r2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000021000aac141419e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x4000}, 0x48) 429.347399ms ago: executing program 3 (id=4497): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000100), 0x0}, 0x20) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_ext={0x1c, 0x3, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000600)='GPL\x00', 0x2, 0x2b, &(0x7f0000000640)=""/43, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000006c0)={0x3, 0x4, 0x8, 0x5}, 0x10, 0x28b32, 0xffffffffffffffff, 0x4, &(0x7f0000000700), &(0x7f0000000740)=[{0x5, 0x5, 0xa, 0xb}, {0x0, 0x1, 0x10, 0x8}, {0x4, 0x2, 0x9, 0x1}, {0x4, 0x5, 0x6, 0xb}], 0x10, 0x80000000}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000980)={{}, 0x0, &(0x7f0000000940)='%pS \x00'}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeb1, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="b90103606989068c3c2700406558", 0x0, 0x104, 0x6000000000000000, 0x1e, 0x0, &(0x7f0000000400)="9209558f0c5fb25cd57f98113135c3171b8b331fbc04f0e6955a796ff8e3", 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x8, 0xfd, 0x0, 0x0, 0x0, 0x22201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0x6}, 0x104101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffc}, 0x0, 0x9, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x144540f2249c4cec) socket$kcm(0x10, 0x3, 0x10) r1 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0xcd, &(0x7f0000000040), 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 419.977759ms ago: executing program 4 (id=4498): r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x4ccd, 0x0, 0x1, 0x3, '\x00', 0x0, r0, 0x3, 0x0, 0x3}, 0x50) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001640)={0xffffffffffffffff}) sendmsg$inet(r1, 0x0, 0x8000) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x2, 0x7, 0x2, 0x7f, 0x0, 0x6af, 0x38300, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x101, 0x4, @perf_config_ext={0xc, 0xfff8000000000000}, 0x2000, 0x4, 0x5, 0x5, 0xb, 0x8, 0x400, 0x0, 0x9, 0x0, 0x921}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], 0x0}, 0x94) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="9fedcb7968ddc36c8f263408008daa"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 302.224312ms ago: executing program 0 (id=4499): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = socket$kcm(0x11, 0x3, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0}, 0x20) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x888a4, 0x0, 0x0, 0x0, 0x6, 0x2f07}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x3) socketpair$unix(0x1, 0x1, 0x0, 0x0) r2 = socket$kcm(0xa, 0x6, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8b04, 0x0) getpid() r5 = getpid() r6 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x11c002, 0x89, 0x0, 0x0, 0x1}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = gettid() r8 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f00000001c0)={r1}) perf_event_open(0x0, r7, 0x1, r6, 0x0) r9 = syz_clone(0x6480, &(0x7f0000000740)="5904516a1f03982ed19dacc92d845c36", 0x10, 0x0, &(0x7f00000007c0), 0x0) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000c40)="c10e020022003505d25a806f8c6394f90435fc60040011000a740100053582c137153e", 0x23}], 0x1}, 0x0) r11 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030020000b12d25a80648c2594f90124fc60100c074002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmsg$unix(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000340)="438fd74f926a04c574611c5d3fff65ef1fbcdee1eabee685a3aa3b73c662e2de9b91bfe5751d36b2de1b133e6e41f516363db7699daf15e1d3f7b14adce1d9721d746ccdabe8edaadcef547735f99d54b90ad1ef1b46fb940efb750819cdee32cd302342b9db47184ad74d90c9054f933836e7f6f54cb93ec0b72c5ae9402f0aa07e35a005a191009c885adece276a6ef1c4952fadb943156a348f17dfdd72a5498d877b2cd97562ab309fba64a70ff2ed22e005b4ae319323", 0xb9}, {&(0x7f0000000440)}, {&(0x7f0000000500)="113a11f5949a17b491122ec76a345556", 0x10}, {&(0x7f0000000540)="554e60df5418a2a40f09d02fabc292ea1e911268424071d96622bc47210d9dddfaa0acbb3d5a47a07c5c0e3ca45a382296709d13b6192d5a7d5cf831023d96feaac82ea28f57eaa247b61baf595ea363ee4a7700749dc8214e7a218f5acbd7ba856e3474db53c82e8c5ba81cb03e", 0x6e}], 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="1c000000000000001200000002000000", @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r7, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r9, @ANYRES32, @ANYRES32=0xee01, @ANYRES32=r10, @ANYRES32=0xee00, @ANYBLOB='\x00\x00\x00\x00'], 0xb0, 0x20048040}, 0x40) close(r2) socket$kcm(0x2, 0x2, 0x73) setsockopt$sock_attach_bpf(r2, 0x0, 0x4, 0x0, 0x0) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x3, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="18020000010000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r12, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 300.481732ms ago: executing program 2 (id=4500): r0 = socket$kcm(0xa, 0x3, 0x3a) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100080, 0x0, 0x0, 0x1}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, 0x0}, 0x0) r3 = socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x10}}], 0x10}, 0x0) setsockopt$sock_attach_bpf(r3, 0x6, 0x13, &(0x7f0000000200), 0x4) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)={[{0x2d, 'hugetlb'}]}, 0x9) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x2d, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x0fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee'}, 0x30) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r6, &(0x7f00000002c0)='io.stat\x00', 0x275a, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x200400d0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000380)="e0a2363b4438a55d1a5e47b8bffc", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) socket$kcm(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x18, 0x3, &(0x7f00000013c0)=@framed, &(0x7f0000001400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x542b, @remote}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000640)="25b2b3cbea40", 0x6}], 0x1, 0x0, 0x0, 0x900}, 0x0) 300.215852ms ago: executing program 1 (id=4501): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d030000000000000000000002000000000000000000000009030000000000000063"], 0x0, 0x52}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x300, 0x7ffffffe, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=[{0x10, 0x110, 0xa}], 0x10}, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 249.840474ms ago: executing program 4 (id=4502): r0 = socket$kcm(0x25, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000680)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x80, 0x0, 0xffffffffffffff6c}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="0b0c040007000000017ef500cb0e357454b0d0121c61ae1c0500ef13f98c52a0741a5a4232b26700", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x4, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) write$cgroup_int(0xffffffffffffffff, &(0x7f0000002180)=0x2, 0x12) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0xffff, 0x7, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20) recvmsg$kcm(r1, 0x0, 0x80) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x4, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000003140)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000080), &(0x7f0000000240)=r4}, 0x20) socket$kcm(0x29, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x18000000000002a0, 0x5ee, 0xfd60, &(0x7f0000000580)="b9ff03076804d773000000000100", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50) 230.340984ms ago: executing program 3 (id=4503): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a032, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x1e, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000000)) sendmsg$kcm(r1, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x4}}, 0x80, 0x0}, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) 127.661697ms ago: executing program 1 (id=4504): socket$kcm(0x21, 0x2, 0x2) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x2, 0x1, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_config_ext={0x7ff, 0x4}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x20000}, 0x0, 0x0, 0x0, 0x6, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000005c0)="2e0000003c000511d25a8069edb0344a0418cb44b0fa0bf4cace8c6394b9027c92b47795140d010000c4d196c6a6", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) sendmsg$kcm(r2, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000002f40)=ANY=[@ANYBLOB="050000040000000c0000000c000000000000", @ANYRES32, @ANYBLOB='\x00'/19, @ANYBLOB], 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={0xffffffffffffffff, r5}, 0xc) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f93924fc60040011000a7403004800000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 0s ago: executing program 2 (id=4505): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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", @ANYRESHEX, @ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff3, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000200000000000000000000040000000300000000010000130100000000110c230000000d020000000000"], 0xffffffffffffffff, 0x3e, 0xb1, 0x2}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2, r1}, 0xc9f72c4a25ab2245) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000040000000000000000080000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000020000008500000083000000bf0900000000000055090100000000009500000000000000850000000e000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) close(0xffffffffffffffff) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000880)={r4, 0x58, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d40)={{}, &(0x7f0000000cc0), &(0x7f0000000d00)=r5}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x17, 0x1f, &(0x7f0000000f40)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000a62504007f000000b7080000000000007b8af8ff00000000b7080000030000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6], &(0x7f0000000680)='GPL\x00', 0x40, 0x8a, &(0x7f00000006c0)=""/138, 0x40f00, 0x41, '\x00', r7, @fallback=0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a40)={0x5, 0x2, 0x0, 0x6}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0x0, &(0x7f0000000dc0)=[{0x9, 0x5, 0x1, 0xa}, {0x2, 0x5, 0xc, 0x1}, {0x2, 0x4, 0x6, 0xc}, {0x2, 0x2, 0x3, 0xc}, {0x5, 0x1, 0x2, 0xc}, {0x3, 0x1, 0xb, 0xc}, {0x1, 0x5, 0x8, 0x9}], 0x10, 0x8}, 0x94) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x110c230007) close(r8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000640)="b9ff03076844268cb89e14f088a8", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x50) kernel console output (not intermixed with test programs): rocess `syz.1.3217'. [ 580.479198][ T6608] device hsr_slave_0 left promiscuous mode [ 580.617660][ T6608] device hsr_slave_1 left promiscuous mode [ 580.634544][ T6608] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 580.654579][ T6608] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 580.920808][ T6608] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 580.939964][ T6608] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 581.014067][ T6608] device veth1_vlan left promiscuous mode [ 581.030614][ T6608] device veth0_vlan left promiscuous mode [ 583.311398][T14482] bridge0: port 1(bridge_slave_0) entered forwarding state [ 583.721781][T14237] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 583.775021][T14237] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 583.826804][T14237] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 584.008382][T14237] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 584.695561][T14237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 584.733901][ T6606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 584.749776][ T6606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 584.781509][T14237] 8021q: adding VLAN 0 to HW filter on device team0 [ 584.874497][ T6597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 584.909562][ T6597] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 584.950462][ T6597] bridge0: port 1(bridge_slave_0) entered blocking state [ 584.957606][ T6597] bridge0: port 1(bridge_slave_0) entered forwarding state [ 584.979210][ T6597] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 585.019189][ T6606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 585.063819][ T6606] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 585.083128][ T6606] bridge0: port 2(bridge_slave_1) entered blocking state [ 585.090328][ T6606] bridge0: port 2(bridge_slave_1) entered forwarding state [ 585.152285][ T6606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 585.173495][T14536] netlink: 22 bytes leftover after parsing attributes in process `syz.3.3243'. [ 585.217448][ T6606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 585.254569][T14536] netlink: 'syz.3.3243': attribute type 3 has an invalid length. [ 585.318607][T14536] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3243'. [ 585.491734][T14529] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3241'. [ 586.477090][ T6606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 586.527465][ T6606] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 586.537074][ T6606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 586.561006][ T6606] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 586.581463][ T6606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 586.593009][ T6606] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 586.602041][ T6606] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 586.615492][T14237] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 586.633466][T14237] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 586.673160][ T6597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 586.684821][ T6597] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 587.806481][ T6603] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 587.828288][ T6603] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 587.870512][T14237] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 588.019455][ T6597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 588.034506][ T6597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 588.111725][T14237] device veth0_vlan entered promiscuous mode [ 588.139171][ T6597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 588.163640][ T6597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 588.258884][ T6597] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 588.267455][ T6597] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 588.367469][T14237] device veth1_vlan entered promiscuous mode [ 588.987522][T14612] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.3254'. [ 589.003716][ T6603] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 589.096551][ T6603] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 589.261718][T14237] device veth0_macvtap entered promiscuous mode [ 589.304914][ T6597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 589.332686][T14611] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3253'. [ 589.424019][ T6597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 589.472152][ T6597] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 589.507256][T14237] device veth1_macvtap entered promiscuous mode [ 589.571739][T14625] netlink: 22 bytes leftover after parsing attributes in process `syz.4.3256'. [ 589.627587][T14237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 589.633658][T14625] netlink: 'syz.4.3256': attribute type 3 has an invalid length. [ 589.665730][T14237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.685735][T14237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 589.688577][T14625] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3256'. [ 589.706819][T14237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.719092][T14237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 589.730160][T14237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.740555][T14237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 589.760110][T14237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.792144][T14237] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 589.849526][ T6608] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 589.879686][ T6608] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 589.919756][ T6608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 589.997613][T14237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 590.020668][T14237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 590.075451][T14237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 590.098859][T14237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 590.116662][T14237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 590.142222][T14237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 590.158230][T14237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 590.169474][T14237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 590.181377][T14237] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 590.222936][ T6608] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 590.234144][ T6608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 590.278648][T14237] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.288932][T14237] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.306251][T14237] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.351942][T14237] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.534765][ T6608] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 590.558845][ T6608] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 590.601010][ T6603] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 590.661604][ T6597] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 590.678964][ T6597] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 590.695824][ T6603] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 590.897317][T14659] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.3268'. [ 590.933494][T14661] netlink: 'syz.1.3268': attribute type 29 has an invalid length. [ 590.946097][T14661] netlink: 'syz.1.3268': attribute type 29 has an invalid length. [ 591.185132][T14662] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3270'. [ 592.137022][T14680] netlink: 'syz.0.3274': attribute type 2 has an invalid length. [ 592.176719][T14680] netlink: 'syz.0.3274': attribute type 1 has an invalid length. [ 592.233904][T14680] netlink: 'syz.0.3274': attribute type 10 has an invalid length. [ 592.407273][T14680] team0: Port device geneve1 added [ 592.543622][ T4287] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 592.559700][ T4287] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 592.568143][ T4287] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 592.589513][ T4287] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 592.597144][ T4287] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 592.605052][ T4287] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 593.111251][T13229] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.175963][T14701] netlink: 'syz.2.3281': attribute type 29 has an invalid length. [ 593.371725][T13229] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.417403][T14701] netlink: 'syz.2.3281': attribute type 29 has an invalid length. [ 593.526991][T13229] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.553102][T14706] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3282'. [ 593.664103][T13229] batman_adv: batadv0: Removing interface: netdevsim0 [ 593.673861][T13229] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.783665][T14682] chnl_net:caif_netlink_parms(): no params data found [ 594.329392][T14682] bridge0: port 1(bridge_slave_0) entered blocking state [ 594.336619][T14682] bridge0: port 1(bridge_slave_0) entered disabled state [ 594.412038][T14682] device bridge_slave_0 entered promiscuous mode [ 594.444091][T14682] bridge0: port 2(bridge_slave_1) entered blocking state [ 594.479162][T14682] bridge0: port 2(bridge_slave_1) entered disabled state [ 594.548494][T14682] device bridge_slave_1 entered promiscuous mode [ 594.649232][T13138] Bluetooth: hci5: command 0x0409 tx timeout [ 594.696978][T14735] netlink: 22 bytes leftover after parsing attributes in process `syz.0.3291'. [ 594.798337][T14735] netlink: 'syz.0.3291': attribute type 3 has an invalid length. [ 594.820568][T14735] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3291'. [ 594.975123][T13229] bridge0: port 2(ip6gretap0) entered disabled state [ 595.107352][T13229] device ip6gretap0 left promiscuous mode [ 595.143399][T13229] bridge0: port 2(ip6gretap0) entered disabled state [ 595.277881][T14682] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 595.331262][T14682] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 595.467926][T14749] netlink: 22 bytes leftover after parsing attributes in process `syz.3.3293'. [ 595.601859][T14753] netlink: 'syz.2.3294': attribute type 29 has an invalid length. [ 595.616565][T14749] netlink: 'syz.3.3293': attribute type 3 has an invalid length. [ 595.649859][T14749] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3293'. [ 595.706188][T14682] team0: Port device team_slave_0 added [ 595.837270][T14682] team0: Port device team_slave_1 added [ 595.974918][T14754] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3296'. [ 596.056268][T14682] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 596.085135][T14682] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 596.195619][T14682] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 596.739118][T13138] Bluetooth: hci5: command 0x041b tx timeout [ 596.979415][T14682] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 596.995076][T14682] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 597.035453][T14682] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 597.066883][T14774] validate_nla: 1 callbacks suppressed [ 597.066900][T14774] netlink: 'syz.3.3300': attribute type 6 has an invalid length. [ 597.082811][T14774] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3300'. [ 597.306116][T14682] device hsr_slave_0 entered promiscuous mode [ 597.342297][T14682] device hsr_slave_1 entered promiscuous mode [ 597.366113][T14682] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 597.388929][T14682] Cannot create hsr debugfs directory [ 598.326877][T14806] netlink: 'syz.1.3307': attribute type 29 has an invalid length. [ 598.521574][T14806] netlink: 'syz.1.3307': attribute type 29 has an invalid length. [ 598.823467][T13138] Bluetooth: hci5: command 0x040f tx timeout [ 600.115003][T13229] device hsr_slave_0 left promiscuous mode [ 600.129522][T13229] device hsr_slave_1 left promiscuous mode [ 600.154234][T13229] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 600.168893][T13229] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 600.190765][T13229] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 600.207491][T13229] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 600.216301][T13229] bridge0: port 4(hsr0) entered disabled state [ 600.249944][T13229] device batadv0 left promiscuous mode [ 600.259533][T13229] bridge0: port 3(batadv0) entered disabled state [ 600.281813][T13229] device bridge_slave_0 left promiscuous mode [ 600.295861][T13229] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.327683][T13229] device veth1_vlan left promiscuous mode [ 600.334961][T13229] device veth0_vlan left promiscuous mode [ 600.764926][T13229] team0 (unregistering): Port device vlan0 removed [ 600.899274][T13138] Bluetooth: hci5: command 0x0419 tx timeout [ 601.086739][T13229] team0 (unregistering): Port device team_slave_1 removed [ 601.124060][T13229] team0 (unregistering): Port device team_slave_0 removed [ 601.160698][T13229] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 601.201297][T13229] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 601.243806][T13229] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 601.453872][T13229] team0 (unregistering): Port device bridge0 removed [ 601.481641][T13229] bond0 (unregistering): Released all slaves [ 601.984559][T14844] FAULT_INJECTION: forcing a failure. [ 601.984559][T14844] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 602.043377][T14844] CPU: 0 PID: 14844 Comm: syz.1.3318 Not tainted syzkaller #0 [ 602.050897][T14844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 602.060976][T14844] Call Trace: [ 602.064268][T14844] [ 602.067208][T14844] dump_stack_lvl+0x188/0x24e [ 602.071909][T14844] ? show_regs_print_info+0x12/0x12 [ 602.077124][T14844] ? load_image+0x410/0x410 [ 602.081648][T14844] ? __might_fault+0xa6/0x120 [ 602.086346][T14844] should_fail_ex+0x390/0x4c0 [ 602.091043][T14844] copyin+0x1b/0x120 [ 602.094957][T14844] _copy_from_iter+0x447/0x1130 [ 602.099832][T14844] ? copyout_mc+0x110/0x110 [ 602.104349][T14844] ? txopt_get+0x76/0x3f0 [ 602.108803][T14844] ? txopt_get+0x76/0x3f0 [ 602.113150][T14844] ? txopt_get+0x340/0x3f0 [ 602.117581][T14844] ? fl6_sock_lookup+0xc0/0xc0 [ 602.122368][T14844] rawv6_probe_proto_opt+0x166/0x300 [ 602.127674][T14844] rawv6_sendmsg+0xa6c/0x1710 [ 602.132377][T14844] ? compat_rawv6_ioctl+0x60/0x60 [ 602.137415][T14844] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 602.143420][T14844] ? rcu_is_watching+0x11/0xa0 [ 602.148314][T14844] ? aa_sock_msg_perm+0x94/0x150 [ 602.153283][T14844] ? inet_sendmsg+0x7a/0x2a0 [ 602.157901][T14844] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 602.163210][T14844] ? inet_send_prepare+0x250/0x250 [ 602.168345][T14844] ____sys_sendmsg+0x5ed/0x9a0 [ 602.173141][T14844] ? __sys_sendmsg_sock+0x30/0x30 [ 602.178191][T14844] ? __import_iovec+0x306/0x510 [ 602.183070][T14844] ? import_iovec+0x6f/0xa0 [ 602.187593][T14844] ___sys_sendmsg+0x2a2/0x360 [ 602.192292][T14844] ? __sys_sendmsg+0x2a0/0x2a0 [ 602.197100][T14844] ? ktime_get+0x7b/0x270 [ 602.201555][T14844] __se_sys_sendmsg+0x1c3/0x2b0 [ 602.206438][T14844] ? perf_trace_preemptirq_template+0x268/0x320 [ 602.212701][T14844] ? __x64_sys_sendmsg+0x80/0x80 [ 602.217723][T14844] ? lockdep_hardirqs_on+0x94/0x140 [ 602.222944][T14844] do_syscall_64+0x4c/0xa0 [ 602.227378][T14844] ? clear_bhb_loop+0x60/0xb0 [ 602.232091][T14844] ? clear_bhb_loop+0x60/0xb0 [ 602.236795][T14844] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 602.242727][T14844] RIP: 0033:0x7f7e95f9e0d9 [ 602.247154][T14844] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 602.266819][T14844] RSP: 002b:00007f7e96e26028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 602.275266][T14844] RAX: ffffffffffffffda RBX: 00007f7e96225fa0 RCX: 00007f7e95f9e0d9 [ 602.283252][T14844] RDX: 0000000000000060 RSI: 0000200000000080 RDI: 0000000000000007 [ 602.291237][T14844] RBP: 00007f7e96e26090 R08: 0000000000000000 R09: 0000000000000000 [ 602.299225][T14844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 602.307219][T14844] R13: 00007f7e96226038 R14: 00007f7e96225fa0 R15: 00007ffe33874f08 [ 602.315233][T14844] [ 602.473794][T14682] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 602.516677][T14682] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 602.602668][T14682] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 602.661198][T14682] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 602.752031][T14850] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3319'. [ 602.993424][T14682] 8021q: adding VLAN 0 to HW filter on device bond0 [ 603.033069][ T6603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 603.052140][ T6603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 603.087098][T14682] 8021q: adding VLAN 0 to HW filter on device team0 [ 603.118315][ T6603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 603.141902][ T6603] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 603.183714][ T6603] bridge0: port 1(bridge_slave_0) entered blocking state [ 603.190953][ T6603] bridge0: port 1(bridge_slave_0) entered forwarding state [ 603.238425][ T6603] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 603.299594][ T6598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 603.323856][ T6598] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 603.389659][ T6598] bridge0: port 2(bridge_slave_1) entered blocking state [ 603.396840][ T6598] bridge0: port 2(bridge_slave_1) entered forwarding state [ 603.411434][T14865] netlink: 'syz.1.3320': attribute type 29 has an invalid length. [ 603.432589][T14866] netlink: 'syz.2.3322': attribute type 10 has an invalid length. [ 603.513879][T14866] team0: Port device vlan0 added [ 603.620344][T14865] netlink: 'syz.1.3320': attribute type 29 has an invalid length. [ 603.637286][ T6608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 603.715822][ T6608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 603.744887][ T6608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 603.761029][ T6608] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 603.799586][ T6608] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 603.843159][ T6603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 603.863498][ T6603] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 604.010030][ T6603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 604.042679][ T6603] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 604.065135][T14682] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 604.099596][T14682] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 604.131719][ T6603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 604.157188][ T6603] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 605.019158][T14902] netlink: 'syz.1.3338': attribute type 6 has an invalid length. [ 605.027255][T14902] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3338'. [ 605.494106][ T6598] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 605.509825][ T6598] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 605.544209][T14682] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 605.673628][T14926] netlink: 'syz.0.3334': attribute type 29 has an invalid length. [ 605.718868][T14926] netlink: 'syz.0.3334': attribute type 29 has an invalid length. [ 606.968991][ T6603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 606.983120][ T6603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 607.017883][ T6598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 607.037751][ T6598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 607.057963][ T6598] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 607.084115][ T6598] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 607.108401][T14682] device veth0_vlan entered promiscuous mode [ 607.150851][T14682] device veth1_vlan entered promiscuous mode [ 607.215018][ T6606] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 607.226831][ T6606] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 607.238524][ T6606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 607.249764][ T6606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 607.270986][T14682] device veth0_macvtap entered promiscuous mode [ 607.283426][T14682] device veth1_macvtap entered promiscuous mode [ 607.308033][T14682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 607.325156][T14682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.336159][T14682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 607.352070][T14682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.363321][T14682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 607.382846][T14682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.395290][T14682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 607.411018][T14682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.424755][T14682] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 607.436930][ T6606] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 607.451966][ T6606] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 607.462346][ T6606] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 607.476655][ T6606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 607.497782][T14682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 607.510223][T14682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.527162][T14682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 607.545828][T14682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.555982][T14682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 607.572987][T14682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.584113][T14682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 607.603863][T14682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.626593][T14682] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 607.637881][ T6606] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 607.652309][ T6606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 607.671559][T14682] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.686623][T14682] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.706322][T14682] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.717677][T14682] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.851086][ T6603] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 609.860682][ T6603] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 609.879557][T13229] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 609.927459][ T6606] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 609.938928][ T6606] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 609.953511][ T6608] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 610.107865][T14973] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3345'. [ 610.199318][T14981] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3347'. [ 610.208545][T14981] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3347'. [ 610.285181][T14981] bond0: (slave bond_slave_0): Releasing backup interface [ 610.381561][T14981] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 610.499811][T14993] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3351'. [ 610.512731][T14984] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.3347'. [ 610.631097][T14995] netlink: 26 bytes leftover after parsing attributes in process `syz.4.3350'. [ 610.813528][T14998] netlink: 105 bytes leftover after parsing attributes in process `syz.3.3352'. [ 612.086905][T15042] FAULT_INJECTION: forcing a failure. [ 612.086905][T15042] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 612.165666][T15042] CPU: 1 PID: 15042 Comm: syz.1.3365 Not tainted syzkaller #0 [ 612.173186][T15042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 612.183262][T15042] Call Trace: [ 612.186553][T15042] [ 612.189496][T15042] dump_stack_lvl+0x188/0x24e [ 612.194207][T15042] ? show_regs_print_info+0x12/0x12 [ 612.199425][T15042] ? load_image+0x410/0x410 [ 612.203950][T15042] ? __might_fault+0xa6/0x120 [ 612.208650][T15042] should_fail_ex+0x390/0x4c0 [ 612.213347][T15042] copyin+0x1b/0x120 [ 612.217262][T15042] _copy_from_iter+0x559/0x1130 [ 612.222137][T15042] ? copyout_mc+0x110/0x110 [ 612.226662][T15042] ? __virt_addr_valid+0x188/0x540 [ 612.231793][T15042] ? __virt_addr_valid+0x188/0x540 [ 612.236926][T15042] ? __virt_addr_valid+0x467/0x540 [ 612.242077][T15042] ? __phys_addr_symbol+0x2b/0x70 [ 612.247119][T15042] ? __check_object_size+0x4f6/0xa70 [ 612.252420][T15042] netlink_sendmsg+0x755/0xbd0 [ 612.257211][T15042] ? netlink_getsockopt+0x550/0x550 [ 612.262432][T15042] ? apparmor_socket_sendmsg+0x8a/0x330 [ 612.267998][T15042] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 612.273318][T15042] ? security_socket_sendmsg+0x7c/0xa0 [ 612.278799][T15042] ? netlink_getsockopt+0x550/0x550 [ 612.284022][T15042] ____sys_sendmsg+0x5ed/0x9a0 [ 612.288819][T15042] ? __sys_sendmsg_sock+0x30/0x30 [ 612.293865][T15042] ? __import_iovec+0x306/0x510 [ 612.298737][T15042] ? import_iovec+0x6f/0xa0 [ 612.303258][T15042] ___sys_sendmsg+0x2a2/0x360 [ 612.307962][T15042] ? __sys_sendmsg+0x2a0/0x2a0 [ 612.312781][T15042] ? __lock_acquire+0x7c40/0x7c40 [ 612.317854][T15042] __se_sys_sendmsg+0x1c3/0x2b0 [ 612.322732][T15042] ? __x64_sys_sendmsg+0x80/0x80 [ 612.327712][T15042] ? lockdep_hardirqs_on+0x94/0x140 [ 612.332930][T15042] do_syscall_64+0x4c/0xa0 [ 612.337362][T15042] ? clear_bhb_loop+0x60/0xb0 [ 612.342058][T15042] ? clear_bhb_loop+0x60/0xb0 [ 612.346762][T15042] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 612.352668][T15042] RIP: 0033:0x7f7e95f9e0d9 [ 612.357093][T15042] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 612.376715][T15042] RSP: 002b:00007f7e96e26028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 612.385157][T15042] RAX: ffffffffffffffda RBX: 00007f7e96225fa0 RCX: 00007f7e95f9e0d9 [ 612.393149][T15042] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000003 [ 612.401158][T15042] RBP: 00007f7e96e26090 R08: 0000000000000000 R09: 0000000000000000 [ 612.409148][T15042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 612.417142][T15042] R13: 00007f7e96226038 R14: 00007f7e96225fa0 R15: 00007ffe33874f08 [ 612.425148][T15042] [ 612.770294][T15056] netlink: 26 bytes leftover after parsing attributes in process `syz.0.3366'. [ 612.967903][T15063] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3371'. [ 612.981922][T15062] netlink: 'syz.2.3369': attribute type 3 has an invalid length. [ 613.023286][T15062] netlink: 'syz.2.3369': attribute type 1 has an invalid length. [ 613.036548][T15062] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3369'. [ 613.048887][T15058] netlink: 'syz.3.3371': attribute type 5 has an invalid length. [ 614.660014][T15106] netlink: 'syz.1.3386': attribute type 29 has an invalid length. [ 614.691774][T15106] netlink: 'syz.1.3386': attribute type 29 has an invalid length. [ 615.130067][T15123] netlink: 'syz.2.3391': attribute type 3 has an invalid length. [ 615.179130][T15123] __nla_validate_parse: 3 callbacks suppressed [ 615.179163][T15123] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3391'. [ 615.625604][T15138] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.3396'. [ 615.721985][T15140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 615.927920][T15146] netlink: 'syz.0.3400': attribute type 29 has an invalid length. [ 615.949142][T15146] netlink: 'syz.0.3400': attribute type 29 has an invalid length. [ 616.333582][T15161] netlink: 22 bytes leftover after parsing attributes in process `syz.2.3407'. [ 616.399510][T15161] netlink: 'syz.2.3407': attribute type 3 has an invalid length. [ 616.408289][T15161] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3407'. [ 616.498136][T15155] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3406'. [ 616.777118][T15174] netlink: 26 bytes leftover after parsing attributes in process `syz.1.3411'. [ 617.137766][T15189] netlink: 'syz.0.3417': attribute type 29 has an invalid length. [ 617.433041][T15199] mac80211_hwsim hwsim26 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 617.493949][T15202] netlink: 22 bytes leftover after parsing attributes in process `syz.3.3424'. [ 617.547932][T15202] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3424'. [ 617.675551][T15209] netlink: 1057 bytes leftover after parsing attributes in process `syz.2.3426'. [ 617.711969][T15210] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3423'. [ 618.117449][T15226] FAULT_INJECTION: forcing a failure. [ 618.117449][T15226] name failslab, interval 1, probability 0, space 0, times 0 [ 618.145980][T15226] CPU: 0 PID: 15226 Comm: syz.4.3433 Not tainted syzkaller #0 [ 618.153506][T15226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 618.163577][T15226] Call Trace: [ 618.166871][T15226] [ 618.169808][T15226] dump_stack_lvl+0x188/0x24e [ 618.174495][T15226] ? show_regs_print_info+0x12/0x12 [ 618.179689][T15226] ? load_image+0x410/0x410 [ 618.184185][T15226] ? __lock_acquire+0x7c40/0x7c40 [ 618.189211][T15226] should_fail_ex+0x390/0x4c0 [ 618.193895][T15226] should_failslab+0x5/0x20 [ 618.198388][T15226] slab_pre_alloc_hook+0x59/0x300 [ 618.203412][T15226] ? verify_lock_unused+0x140/0x140 [ 618.208612][T15226] ? bpf_test_init+0x9f/0x140 [ 618.213286][T15226] __kmem_cache_alloc_node+0x4f/0x270 [ 618.218659][T15226] ? bpf_test_init+0x9f/0x140 [ 618.223331][T15226] __kmalloc+0xa3/0x240 [ 618.227485][T15226] bpf_test_init+0x9f/0x140 [ 618.231986][T15226] bpf_prog_test_run_xdp+0x488/0xf80 [ 618.237305][T15226] ? __lock_acquire+0x7c40/0x7c40 [ 618.242334][T15226] ? dev_put+0x80/0x80 [ 618.246404][T15226] ? dev_put+0x80/0x80 [ 618.250467][T15226] bpf_prog_test_run+0x31c/0x390 [ 618.255406][T15226] __sys_bpf+0x62b/0x780 [ 618.259648][T15226] ? bpf_link_show_fdinfo+0x380/0x380 [ 618.265024][T15226] ? lock_chain_count+0x20/0x20 [ 618.269873][T15226] __x64_sys_bpf+0x78/0x90 [ 618.274283][T15226] do_syscall_64+0x4c/0xa0 [ 618.278694][T15226] ? clear_bhb_loop+0x60/0xb0 [ 618.283371][T15226] ? clear_bhb_loop+0x60/0xb0 [ 618.288039][T15226] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 618.293927][T15226] RIP: 0033:0x7fafd4b9e0d9 [ 618.298333][T15226] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 618.317933][T15226] RSP: 002b:00007fafd2df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 618.326381][T15226] RAX: ffffffffffffffda RBX: 00007fafd4e25fa0 RCX: 00007fafd4b9e0d9 [ 618.334346][T15226] RDX: 000000000000002f RSI: 0000200000000000 RDI: 000000000000000a [ 618.342307][T15226] RBP: 00007fafd2df6090 R08: 0000000000000000 R09: 0000000000000000 [ 618.350284][T15226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 618.358267][T15226] R13: 00007fafd4e26038 R14: 00007fafd4e25fa0 R15: 00007ffe720cde88 [ 618.366252][T15226] [ 618.528285][T15233] validate_nla: 2 callbacks suppressed [ 618.528303][T15233] netlink: 'syz.1.3434': attribute type 29 has an invalid length. [ 618.616201][T15233] netlink: 'syz.1.3434': attribute type 29 has an invalid length. [ 618.741639][T15235] device syzkaller0 entered promiscuous mode [ 619.047898][T15239] netlink: 'syz.4.3436': attribute type 29 has an invalid length. [ 619.082899][T15239] netlink: 'syz.4.3436': attribute type 29 has an invalid length. [ 619.849383][ T6604] wlan1: Trigger new scan to find an IBSS to join [ 622.880669][T15282] netlink: 'syz.3.3451': attribute type 29 has an invalid length. [ 622.942533][T15282] netlink: 'syz.3.3451': attribute type 29 has an invalid length. [ 623.146235][T15291] netlink: 'syz.2.3452': attribute type 21 has an invalid length. [ 623.170653][T15291] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3452'. [ 623.192430][T15291] netlink: 'syz.2.3452': attribute type 4 has an invalid length. [ 623.210011][T15291] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3452'. [ 624.055782][T15313] netlink: 22 bytes leftover after parsing attributes in process `syz.0.3462'. [ 624.242720][T15318] netlink: 'syz.0.3462': attribute type 3 has an invalid length. [ 624.285776][T15308] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3461'. [ 624.330691][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.337161][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.353403][T15318] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3462'. [ 624.568550][T15324] netlink: 'syz.1.3465': attribute type 29 has an invalid length. [ 624.694852][T15324] netlink: 'syz.1.3465': attribute type 29 has an invalid length. [ 624.949392][T15331] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3467'. [ 625.034067][T15331] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3467'. [ 625.165684][T15330] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3467'. [ 625.193958][T15336] netlink: 'syz.1.3469': attribute type 8 has an invalid length. [ 625.218181][T15336] netlink: 'syz.1.3469': attribute type 9 has an invalid length. [ 625.291754][T15336] netlink: 'syz.1.3469': attribute type 10 has an invalid length. [ 625.311318][T15336] netlink: 'syz.1.3469': attribute type 11 has an invalid length. [ 625.323124][T15336] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3469'. [ 625.350355][T15334] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3467'. [ 625.849135][ T6597] wlan1: Trigger new scan to find an IBSS to join [ 626.323261][T15366] netlink: 'syz.1.3479': attribute type 29 has an invalid length. [ 626.359373][T15366] netlink: 'syz.1.3479': attribute type 29 has an invalid length. [ 626.404887][T15368] netlink: 'syz.2.3480': attribute type 3 has an invalid length. [ 626.418910][ T4287] Bluetooth: hci0: command 0x0406 tx timeout [ 626.693415][T15378] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 626.862974][T15382] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 627.343102][T13229] wlan1: Creating new IBSS network, BSSID 00:00:00:00:70:25 [ 630.412774][T15398] FAULT_INJECTION: forcing a failure. [ 630.412774][T15398] name failslab, interval 1, probability 0, space 0, times 0 [ 630.447490][T15398] CPU: 1 PID: 15398 Comm: syz.0.3491 Not tainted syzkaller #0 [ 630.455017][T15398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 630.465089][T15398] Call Trace: [ 630.468363][T15398] [ 630.471289][T15398] dump_stack_lvl+0x188/0x24e [ 630.475971][T15398] ? show_regs_print_info+0x12/0x12 [ 630.481178][T15398] ? load_image+0x410/0x410 [ 630.485677][T15398] ? __might_sleep+0xd0/0xd0 [ 630.490261][T15398] ? __lock_acquire+0x7c40/0x7c40 [ 630.495288][T15398] should_fail_ex+0x390/0x4c0 [ 630.499966][T15398] should_failslab+0x5/0x20 [ 630.504462][T15398] slab_pre_alloc_hook+0x59/0x300 [ 630.509496][T15398] ? lock_chain_count+0x20/0x20 [ 630.514365][T15398] ? rtnl_newlink+0x10f/0x1f90 [ 630.519238][T15398] __kmem_cache_alloc_node+0x4f/0x270 [ 630.524611][T15398] ? perf_trace_lock_acquire+0x101/0x3f0 [ 630.530236][T15398] ? rtnl_newlink+0x10f/0x1f90 [ 630.534998][T15398] kmalloc_trace+0x26/0xe0 [ 630.539417][T15398] rtnl_newlink+0x10f/0x1f90 [ 630.544013][T15398] ? __mutex_lock+0x7ec/0xae0 [ 630.548707][T15398] ? __lock_acquire+0x7c40/0x7c40 [ 630.553751][T15398] ? do_raw_spin_lock+0x128/0x2f0 [ 630.558792][T15398] ? rtnl_setlink+0x510/0x510 [ 630.563470][T15398] ? __rwlock_init+0x140/0x140 [ 630.568227][T15398] ? do_raw_spin_unlock+0x11d/0x230 [ 630.573422][T15398] ? __mutex_lock+0x7f6/0xae0 [ 630.578098][T15398] ? __mutex_lock+0x3ba/0xae0 [ 630.582774][T15398] ? rtnetlink_rcv_msg+0x80d/0xfb0 [ 630.587883][T15398] ? mutex_lock_nested+0x10/0x10 [ 630.592828][T15398] ? rtnl_setlink+0x510/0x510 [ 630.597500][T15398] rtnetlink_rcv_msg+0x863/0xfb0 [ 630.602441][T15398] ? rtnetlink_rcv_msg+0x220/0xfb0 [ 630.607550][T15398] ? rtnetlink_bind+0x80/0x80 [ 630.612229][T15398] ? preempt_schedule_thunk+0x16/0x18 [ 630.617635][T15398] ? _raw_spin_unlock+0x40/0x40 [ 630.622476][T15398] ? __dev_queue_xmit+0x1d84/0x3810 [ 630.627676][T15398] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 630.633399][T15398] ? perf_trace_lock+0x301/0x390 [ 630.638333][T15398] ? trace_event_raw_event_lock+0x230/0x230 [ 630.644231][T15398] netlink_rcv_skb+0x1ef/0x440 [ 630.648997][T15398] ? rtnetlink_bind+0x80/0x80 [ 630.653672][T15398] ? netlink_ack+0x1160/0x1160 [ 630.658436][T15398] ? __rcu_read_unlock+0x78/0xd0 [ 630.663364][T15398] ? netlink_deliver_tap+0x2e/0x1b0 [ 630.668559][T15398] netlink_unicast+0x7ad/0x920 [ 630.673331][T15398] netlink_sendmsg+0x8ad/0xbd0 [ 630.678094][T15398] ? netlink_getsockopt+0x550/0x550 [ 630.683297][T15398] ? apparmor_socket_sendmsg+0x8a/0x330 [ 630.688839][T15398] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 630.694222][T15398] ? security_socket_sendmsg+0x7c/0xa0 [ 630.699699][T15398] ? netlink_getsockopt+0x550/0x550 [ 630.704908][T15398] ____sys_sendmsg+0x5ed/0x9a0 [ 630.709676][T15398] ? __sys_sendmsg_sock+0x30/0x30 [ 630.714694][T15398] ? __import_iovec+0x306/0x510 [ 630.719545][T15398] ? import_iovec+0x6f/0xa0 [ 630.724057][T15398] ___sys_sendmsg+0x2a2/0x360 [ 630.728741][T15398] ? __sys_sendmsg+0x2a0/0x2a0 [ 630.733513][T15398] ? trace_call_bpf+0xbf/0x6b0 [ 630.738359][T15398] __se_sys_sendmsg+0x1c3/0x2b0 [ 630.743206][T15398] ? ct_nmi_exit+0x145/0x1c0 [ 630.747789][T15398] ? __x64_sys_sendmsg+0x80/0x80 [ 630.752733][T15398] ? lockdep_hardirqs_on+0x94/0x140 [ 630.757925][T15398] do_syscall_64+0x4c/0xa0 [ 630.762345][T15398] ? clear_bhb_loop+0x60/0xb0 [ 630.767013][T15398] ? clear_bhb_loop+0x60/0xb0 [ 630.771685][T15398] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 630.777571][T15398] RIP: 0033:0x7f699a59e0d9 [ 630.781979][T15398] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 630.801591][T15398] RSP: 002b:00007f699b4de028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 630.810018][T15398] RAX: ffffffffffffffda RBX: 00007f699a825fa0 RCX: 00007f699a59e0d9 [ 630.817985][T15398] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 000000000000000a [ 630.825948][T15398] RBP: 00007f699b4de090 R08: 0000000000000000 R09: 0000000000000000 [ 630.833909][T15398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 630.841869][T15398] R13: 00007f699a826038 R14: 00007f699a825fa0 R15: 00007ffecb863108 [ 630.849844][T15398] [ 631.128421][T15408] netlink: 'syz.3.3494': attribute type 29 has an invalid length. [ 631.251772][T15408] netlink: 'syz.3.3494': attribute type 29 has an invalid length. [ 631.322751][T15410] __nla_validate_parse: 4 callbacks suppressed [ 631.322795][T15410] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3496'. [ 631.685135][T15405] netlink: 22 bytes leftover after parsing attributes in process `syz.0.3493'. [ 631.848255][T15405] netlink: 'syz.0.3493': attribute type 3 has an invalid length. [ 631.891633][T15405] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3493'. [ 632.703278][T15441] netlink: 'syz.3.3508': attribute type 29 has an invalid length. [ 632.748289][T15441] netlink: 'syz.3.3508': attribute type 29 has an invalid length. [ 633.317091][T15450] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3509'. [ 633.352970][T15464] netlink: 22 bytes leftover after parsing attributes in process `syz.3.3515'. [ 633.395956][T15464] netlink: 'syz.3.3515': attribute type 3 has an invalid length. [ 633.413633][T15464] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3515'. [ 634.295779][T15473] bridge0: port 3(batadv0) entered blocking state [ 634.324826][T15473] bridge0: port 3(batadv0) entered disabled state [ 634.396055][T15482] netlink: 'syz.1.3521': attribute type 29 has an invalid length. [ 634.450761][T15473] device batadv0 entered promiscuous mode [ 634.511096][T15473] bridge0: port 3(batadv0) entered blocking state [ 634.518379][T15473] bridge0: port 3(batadv0) entered forwarding state [ 634.545416][T15482] netlink: 'syz.1.3521': attribute type 29 has an invalid length. [ 634.564743][ T6604] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 634.575358][ T6604] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 634.815831][T15493] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3525'. [ 635.003284][T15493] team0: Port device team_slave_0 removed [ 635.042713][T15493] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 635.118190][T15508] netlink: 22 bytes leftover after parsing attributes in process `syz.2.3529'. [ 635.192513][T15508] netlink: 'syz.2.3529': attribute type 3 has an invalid length. [ 635.241684][T15508] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3529'. [ 635.333507][T15504] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3527'. [ 635.810464][T15514] netlink: 'syz.1.3531': attribute type 10 has an invalid length. [ 635.837501][T15514] team0: Port device wlan1 added [ 635.855096][T15517] device batadv0 left promiscuous mode [ 635.865746][T15517] bridge0: port 3(batadv0) entered disabled state [ 635.920897][T15517] device bridge_slave_1 left promiscuous mode [ 635.939453][T15517] bridge0: port 2(bridge_slave_1) entered disabled state [ 635.984909][T15517] device bridge_slave_0 left promiscuous mode [ 636.012248][T15517] bridge0: port 1(bridge_slave_0) entered disabled state [ 636.228256][T15523] validate_nla: 1 callbacks suppressed [ 636.228275][T15523] netlink: 'syz.4.3535': attribute type 29 has an invalid length. [ 636.464239][T15535] __nla_validate_parse: 1 callbacks suppressed [ 636.464259][T15535] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.3539'. [ 636.860970][T15544] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 636.885557][T15544] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 636.981500][T15550] netlink: 22 bytes leftover after parsing attributes in process `syz.2.3544'. [ 637.051823][T15551] netlink: 'syz.2.3544': attribute type 3 has an invalid length. [ 637.088888][T15551] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3544'. [ 637.105650][T15549] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3543'. [ 637.424437][T15565] netlink: 'syz.3.3549': attribute type 29 has an invalid length. [ 637.446342][T15565] netlink: 'syz.3.3549': attribute type 29 has an invalid length. [ 638.451087][T15588] netlink: 146340 bytes leftover after parsing attributes in process `syz.2.3555'. [ 638.463999][T15588] openvswitch: netlink: Key type 386 is out of range max 32 [ 638.675210][T15591] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3559'. [ 638.813520][T15600] netlink: 'syz.2.3561': attribute type 29 has an invalid length. [ 638.834150][T15600] netlink: 'syz.2.3561': attribute type 29 has an invalid length. [ 639.345504][T15606] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.3564'. [ 639.585622][T15613] netlink: 22 bytes leftover after parsing attributes in process `syz.1.3565'. [ 639.683954][T15613] netlink: 'syz.1.3565': attribute type 3 has an invalid length. [ 639.738000][T15613] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3565'. [ 640.698154][T15641] netlink: 'syz.1.3574': attribute type 29 has an invalid length. [ 640.740633][T15641] netlink: 'syz.1.3574': attribute type 29 has an invalid length. [ 640.988036][T15638] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3573'. [ 641.662005][T15666] netlink: 'syz.3.3582': attribute type 39 has an invalid length. [ 641.902280][T15676] netlink: 22 bytes leftover after parsing attributes in process `syz.0.3585'. [ 641.958703][T15676] netlink: 'syz.0.3585': attribute type 3 has an invalid length. [ 641.978287][T15676] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3585'. [ 642.206160][T15680] netlink: 'syz.4.3587': attribute type 29 has an invalid length. [ 642.248351][T15680] netlink: 'syz.4.3587': attribute type 29 has an invalid length. [ 642.408658][T15682] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3588'. [ 642.503907][T15687] netlink: 22 bytes leftover after parsing attributes in process `syz.0.3599'. [ 642.524912][T15690] device bridge_slave_0 left promiscuous mode [ 642.557589][T15690] bridge0: port 1(bridge_slave_0) entered disabled state [ 642.581703][T15687] netlink: 'syz.0.3599': attribute type 3 has an invalid length. [ 642.601472][T15687] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3599'. [ 646.030962][T15714] netlink: 'syz.1.3596': attribute type 11 has an invalid length. [ 646.039496][T15714] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3596'. [ 646.897385][T15712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 649.101004][T15730] netlink: 'syz.1.3601': attribute type 29 has an invalid length. [ 649.229352][T15730] netlink: 'syz.1.3601': attribute type 29 has an invalid length. [ 649.605971][T15741] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3602'. [ 649.778164][T15748] netlink: 22 bytes leftover after parsing attributes in process `syz.2.3608'. [ 649.895124][T15748] netlink: 'syz.2.3608': attribute type 3 has an invalid length. [ 649.924805][T15748] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3608'. [ 650.058406][T15753] netlink: 'syz.0.3610': attribute type 11 has an invalid length. [ 650.107046][T15753] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3610'. [ 651.336937][T15774] netlink: 'syz.3.3616': attribute type 29 has an invalid length. [ 651.417666][T15774] netlink: 'syz.3.3616': attribute type 29 has an invalid length. [ 651.585729][T15752] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 651.982627][T15788] tun0: tun_chr_ioctl cmd 1074025675 [ 651.990844][T15788] tun0: persist enabled [ 652.001289][T15788] tun0: tun_chr_ioctl cmd 1074025675 [ 652.007157][T15788] tun0: persist enabled [ 652.012009][ T4287] Bluetooth: hci3: command 0x0406 tx timeout [ 652.093500][T15804] netlink: 22 bytes leftover after parsing attributes in process `syz.3.3623'. [ 652.112350][T15804] netlink: 'syz.3.3623': attribute type 3 has an invalid length. [ 652.120584][T15804] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3623'. [ 652.251761][T15808] netlink: 'syz.1.3625': attribute type 11 has an invalid length. [ 652.276650][T15808] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3625'. [ 653.169969][T15805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 653.485292][T15822] netlink: 'syz.0.3631': attribute type 29 has an invalid length. [ 654.117443][T15822] netlink: 'syz.0.3631': attribute type 29 has an invalid length. [ 654.125730][T15823] netlink: 'syz.4.3630': attribute type 10 has an invalid length. [ 654.150601][T15823] bridge0: port 2(bridge_slave_1) entered disabled state [ 654.158265][T15823] bridge0: port 1(bridge_slave_0) entered disabled state [ 654.183226][T15823] bridge0: port 2(bridge_slave_1) entered blocking state [ 654.190508][T15823] bridge0: port 2(bridge_slave_1) entered forwarding state [ 654.197948][T15823] bridge0: port 1(bridge_slave_0) entered blocking state [ 654.205112][T15823] bridge0: port 1(bridge_slave_0) entered forwarding state [ 654.315443][T15823] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 654.398382][T15834] FAULT_INJECTION: forcing a failure. [ 654.398382][T15834] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 654.422382][T15834] CPU: 0 PID: 15834 Comm: syz.3.3634 Not tainted syzkaller #0 [ 654.429900][T15834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 654.439977][T15834] Call Trace: [ 654.443264][T15834] [ 654.446198][T15834] dump_stack_lvl+0x188/0x24e [ 654.450902][T15834] ? show_regs_print_info+0x12/0x12 [ 654.456121][T15834] ? load_image+0x410/0x410 [ 654.460640][T15834] ? __lock_acquire+0x7c40/0x7c40 [ 654.465684][T15834] should_fail_ex+0x390/0x4c0 [ 654.470383][T15834] _copy_from_user+0x2c/0x170 [ 654.475075][T15834] bpf_test_init+0xde/0x140 [ 654.479604][T15834] bpf_prog_test_run_xdp+0x488/0xf80 [ 654.484905][T15834] ? __lock_acquire+0x7c40/0x7c40 [ 654.489956][T15834] ? dev_put+0x80/0x80 [ 654.494053][T15834] ? dev_put+0x80/0x80 [ 654.498138][T15834] bpf_prog_test_run+0x31c/0x390 [ 654.503103][T15834] __sys_bpf+0x62b/0x780 [ 654.507384][T15834] ? bpf_link_show_fdinfo+0x380/0x380 [ 654.512799][T15834] ? lock_chain_count+0x20/0x20 [ 654.517687][T15834] __x64_sys_bpf+0x78/0x90 [ 654.522126][T15834] do_syscall_64+0x4c/0xa0 [ 654.526567][T15834] ? clear_bhb_loop+0x60/0xb0 [ 654.531269][T15834] ? clear_bhb_loop+0x60/0xb0 [ 654.535967][T15834] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 654.541883][T15834] RIP: 0033:0x7f0abed9e0d9 [ 654.546310][T15834] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 654.565941][T15834] RSP: 002b:00007f0abfd0b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 654.574380][T15834] RAX: ffffffffffffffda RBX: 00007f0abf025fa0 RCX: 00007f0abed9e0d9 [ 654.582374][T15834] RDX: 000000000000002f RSI: 0000200000000000 RDI: 000000000000000a [ 654.590364][T15834] RBP: 00007f0abfd0b090 R08: 0000000000000000 R09: 0000000000000000 [ 654.598356][T15834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 654.606351][T15834] R13: 00007f0abf026038 R14: 00007f0abf025fa0 R15: 00007ffdc79f3fb8 [ 654.614360][T15834] [ 654.870681][T15846] netlink: 22 bytes leftover after parsing attributes in process `syz.3.3638'. [ 654.933609][T15846] netlink: 'syz.3.3638': attribute type 3 has an invalid length. [ 654.973183][T15846] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3638'. [ 655.246887][T15856] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3642'. [ 655.380178][T15861] netlink: 'syz.0.3643': attribute type 29 has an invalid length. [ 655.388596][T15861] netlink: 'syz.0.3643': attribute type 29 has an invalid length. [ 656.115384][T15867] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3646'. [ 656.471347][T15875] netlink: 'syz.2.3647': attribute type 10 has an invalid length. [ 656.502446][T15875] bridge0: port 2(bridge_slave_1) entered disabled state [ 656.510129][T15875] bridge0: port 1(bridge_slave_0) entered disabled state [ 656.652384][T15875] bridge0: port 2(bridge_slave_1) entered blocking state [ 656.659647][T15875] bridge0: port 2(bridge_slave_1) entered forwarding state [ 656.667118][T15875] bridge0: port 1(bridge_slave_0) entered blocking state [ 656.674353][T15875] bridge0: port 1(bridge_slave_0) entered forwarding state [ 656.696058][T15878] netlink: 22 bytes leftover after parsing attributes in process `syz.0.3648'. [ 656.759767][T15878] netlink: 'syz.0.3648': attribute type 3 has an invalid length. [ 656.767896][T15878] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3648'. [ 656.773071][T15875] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 657.127809][T15887] device syzkaller0 entered promiscuous mode [ 657.224372][T15899] netlink: 'syz.0.3664': attribute type 29 has an invalid length. [ 657.362351][ T6606] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 657.798966][T15897] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3655'. [ 658.256866][T15909] netlink: 22 bytes leftover after parsing attributes in process `syz.1.3657'. [ 658.291521][T15909] netlink: 'syz.1.3657': attribute type 3 has an invalid length. [ 658.308962][T15909] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3657'. [ 658.634148][T15914] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3659'. [ 660.055035][T15899] netlink: 'syz.0.3664': attribute type 29 has an invalid length. [ 660.065318][T15912] netlink: 'syz.2.3658': attribute type 16 has an invalid length. [ 660.083547][T15912] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3658'. [ 660.114738][T15912] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 660.360657][T15939] netlink: 'syz.0.3665': attribute type 10 has an invalid length. [ 660.559683][T15938] netlink: 'syz.4.3666': attribute type 10 has an invalid length. [ 660.568294][T15938] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3666'. [ 660.614840][T15938] device hsr0 entered promiscuous mode [ 660.650817][T15938] bridge0: port 3(hsr0) entered blocking state [ 660.678463][T15938] bridge0: port 3(hsr0) entered disabled state [ 660.868175][T15938] bridge0: port 3(hsr0) entered blocking state [ 660.876960][T15938] bridge0: port 3(hsr0) entered forwarding state [ 661.001934][T15954] netlink: 'syz.3.3673': attribute type 3 has an invalid length. [ 661.038843][T15954] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3673'. [ 661.131442][T15961] netlink: 22 bytes leftover after parsing attributes in process `syz.1.3674'. [ 661.195575][T15961] netlink: 'syz.1.3674': attribute type 3 has an invalid length. [ 661.234599][T15961] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3674'. [ 661.885212][T15969] netlink: 'syz.4.3675': attribute type 29 has an invalid length. [ 661.901953][T15969] netlink: 'syz.4.3675': attribute type 29 has an invalid length. [ 662.151378][T15981] FAULT_INJECTION: forcing a failure. [ 662.151378][T15981] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 662.203757][T15981] CPU: 0 PID: 15981 Comm: syz.4.3682 Not tainted syzkaller #0 [ 662.211279][T15981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 662.221362][T15981] Call Trace: [ 662.224661][T15981] [ 662.227606][T15981] dump_stack_lvl+0x188/0x24e [ 662.232314][T15981] ? show_regs_print_info+0x12/0x12 [ 662.237540][T15981] ? load_image+0x410/0x410 [ 662.242068][T15981] ? __lock_acquire+0x7c40/0x7c40 [ 662.247122][T15981] should_fail_ex+0x390/0x4c0 [ 662.251832][T15981] _copy_from_user+0x2c/0x170 [ 662.256536][T15981] __sys_bpf+0x2ea/0x780 [ 662.260807][T15981] ? bpf_link_show_fdinfo+0x380/0x380 [ 662.266214][T15981] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 662.272403][T15981] __x64_sys_bpf+0x78/0x90 [ 662.276846][T15981] do_syscall_64+0x4c/0xa0 [ 662.281280][T15981] ? clear_bhb_loop+0x60/0xb0 [ 662.285976][T15981] ? clear_bhb_loop+0x60/0xb0 [ 662.290674][T15981] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 662.296587][T15981] RIP: 0033:0x7fafd4b9e0d9 [ 662.301018][T15981] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 662.320646][T15981] RSP: 002b:00007fafd2df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 662.329086][T15981] RAX: ffffffffffffffda RBX: 00007fafd4e25fa0 RCX: 00007fafd4b9e0d9 [ 662.337088][T15981] RDX: 0000000000000048 RSI: 000020000000e000 RDI: 0000000000000005 [ 662.345081][T15981] RBP: 00007fafd2df6090 R08: 0000000000000000 R09: 0000000000000000 [ 662.353075][T15981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 662.361075][T15981] R13: 00007fafd4e26038 R14: 00007fafd4e25fa0 R15: 00007ffe720cde88 [ 662.369091][T15981] [ 662.388948][T15985] netlink: 'syz.3.3683': attribute type 10 has an invalid length. [ 662.803502][T15993] netlink: 22 bytes leftover after parsing attributes in process `syz.2.3687'. [ 662.864477][T15993] netlink: 'syz.2.3687': attribute type 3 has an invalid length. [ 662.939110][T15993] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3687'. [ 663.403199][T16001] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3689'. [ 663.846807][T16016] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3691'. [ 664.552163][T16028] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3699'. [ 664.561369][T16028] device hsr0 entered promiscuous mode [ 665.068639][T16043] validate_nla: 6 callbacks suppressed [ 665.068655][T16043] netlink: 'syz.4.3706': attribute type 29 has an invalid length. [ 665.110256][T16041] netlink: 'syz.0.3704': attribute type 10 has an invalid length. [ 665.130921][T16041] __nla_validate_parse: 1 callbacks suppressed [ 665.130969][T16041] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3704'. [ 665.268631][T16048] netlink: 'syz.2.3705': attribute type 3 has an invalid length. [ 665.366285][T16048] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3705'. [ 665.387192][T16041] batman_adv: batadv0: Adding interface: virt_wifi0 [ 665.408037][T16041] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 665.452699][T16041] batman_adv: batadv0: Interface activated: virt_wifi0 [ 665.527800][T16043] netlink: 'syz.4.3706': attribute type 29 has an invalid length. [ 665.551192][T16050] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3707'. [ 666.761340][T16082] netlink: 'syz.0.3714': attribute type 10 has an invalid length. [ 666.822461][T16082] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3714'. [ 666.894205][T16082] device hsr0 entered promiscuous mode [ 666.906279][T16087] netlink: 'syz.1.3715': attribute type 29 has an invalid length. [ 666.944669][T16087] netlink: 'syz.1.3715': attribute type 29 has an invalid length. [ 667.165201][T16095] netlink: 22 bytes leftover after parsing attributes in process `syz.1.3718'. [ 667.225219][T16095] netlink: 'syz.1.3718': attribute type 3 has an invalid length. [ 667.254018][T16095] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3718'. [ 667.414023][T16101] netlink: 'syz.4.3721': attribute type 3 has an invalid length. [ 667.432390][T16101] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3721'. [ 667.469353][T16103] netlink: 'syz.2.3722': attribute type 29 has an invalid length. [ 667.564136][T16105] FAULT_INJECTION: forcing a failure. [ 667.564136][T16105] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 667.642799][T16105] CPU: 0 PID: 16105 Comm: syz.1.3723 Not tainted syzkaller #0 [ 667.650319][T16105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 667.660390][T16105] Call Trace: [ 667.663681][T16105] [ 667.666628][T16105] dump_stack_lvl+0x188/0x24e [ 667.671336][T16105] ? show_regs_print_info+0x12/0x12 [ 667.676562][T16105] ? load_image+0x410/0x410 [ 667.681096][T16105] ? __lock_acquire+0x7c40/0x7c40 [ 667.686151][T16105] ? snprintf+0xe5/0x140 [ 667.690412][T16105] should_fail_ex+0x390/0x4c0 [ 667.695117][T16105] _copy_to_user+0x2c/0x130 [ 667.699645][T16105] simple_read_from_buffer+0xe3/0x150 [ 667.705028][T16105] proc_fail_nth_read+0x1a6/0x220 [ 667.710051][T16105] ? proc_fault_inject_write+0x310/0x310 [ 667.715677][T16105] ? fsnotify_perm+0x248/0x550 [ 667.720433][T16105] ? proc_fault_inject_write+0x310/0x310 [ 667.726059][T16105] vfs_read+0x2db/0x960 [ 667.730217][T16105] ? kernel_read+0x1e0/0x1e0 [ 667.734832][T16105] ? __fget_files+0x28/0x460 [ 667.739417][T16105] ? __fget_files+0x3fc/0x460 [ 667.744091][T16105] ? __fdget_pos+0x2ae/0x360 [ 667.748674][T16105] ? ksys_read+0x70/0x260 [ 667.753005][T16105] ksys_read+0x14d/0x260 [ 667.757244][T16105] ? vfs_write+0x9a0/0x9a0 [ 667.761662][T16105] ? lockdep_hardirqs_on+0x94/0x140 [ 667.766851][T16105] do_syscall_64+0x4c/0xa0 [ 667.771267][T16105] ? clear_bhb_loop+0x60/0xb0 [ 667.775935][T16105] ? clear_bhb_loop+0x60/0xb0 [ 667.780604][T16105] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 667.786492][T16105] RIP: 0033:0x7f7e95f5e90e [ 667.790901][T16105] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 667.810494][T16105] RSP: 002b:00007f7e96e25fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 667.818899][T16105] RAX: ffffffffffffffda RBX: 00007f7e96e266c0 RCX: 00007f7e95f5e90e [ 667.826861][T16105] RDX: 000000000000000f RSI: 00007f7e96e260a0 RDI: 0000000000000008 [ 667.834823][T16105] RBP: 00007f7e96e26090 R08: 0000000000000000 R09: 0000000000000000 [ 667.842783][T16105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 667.850745][T16105] R13: 00007f7e96226038 R14: 00007f7e96225fa0 R15: 00007ffe33874f08 [ 667.858743][T16105] [ 668.804530][T16135] netlink: 22 bytes leftover after parsing attributes in process `syz.0.3734'. [ 668.869951][T16135] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3734'. [ 669.012065][T16139] netlink: 22 bytes leftover after parsing attributes in process `syz.1.3736'. [ 669.373901][T16144] batman_adv: batadv0: Adding interface: virt_wifi0 [ 669.382873][T16144] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 669.424483][T16144] batman_adv: batadv0: Interface activated: virt_wifi0 [ 670.182574][T16171] __nla_validate_parse: 3 callbacks suppressed [ 670.182608][T16171] netlink: 22 bytes leftover after parsing attributes in process `syz.4.3748'. [ 670.210923][T16171] validate_nla: 5 callbacks suppressed [ 670.210958][T16171] netlink: 'syz.4.3748': attribute type 3 has an invalid length. [ 670.264977][T16171] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3748'. [ 670.474601][T16179] netlink: 22 bytes leftover after parsing attributes in process `syz.0.3750'. [ 670.528023][T16181] netlink: 'syz.0.3750': attribute type 3 has an invalid length. [ 670.566435][T16183] netlink: 22 bytes leftover after parsing attributes in process `syz.3.3752'. [ 670.577163][T16181] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3750'. [ 670.618285][T16183] netlink: 'syz.3.3752': attribute type 3 has an invalid length. [ 670.628886][T16183] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3752'. [ 670.706472][T16186] netlink: 'syz.4.3754': attribute type 3 has an invalid length. [ 670.777139][T16186] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3754'. [ 671.153464][T16201] netlink: 26 bytes leftover after parsing attributes in process `syz.2.3761'. [ 671.748178][T16218] netlink: 22 bytes leftover after parsing attributes in process `syz.3.3766'. [ 671.806680][T16218] netlink: 'syz.3.3766': attribute type 3 has an invalid length. [ 671.848492][T16218] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3766'. [ 672.490550][T16227] netlink: 'syz.0.3769': attribute type 40 has an invalid length. [ 672.492813][ T4287] Bluetooth: hci1: command 0x0406 tx timeout [ 672.668010][T16237] netlink: 'syz.4.3770': attribute type 7 has an invalid length. [ 675.809168][T16237] netlink: 'syz.4.3770': attribute type 10 has an invalid length. [ 676.122799][T16247] __nla_validate_parse: 1 callbacks suppressed [ 676.122815][T16247] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3775'. [ 676.164514][T16251] device sit0 entered promiscuous mode [ 676.373148][T16260] netlink: 'syz.3.3778': attribute type 10 has an invalid length. [ 676.398941][T16260] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3778'. [ 676.470581][T16260] batman_adv: batadv0: Adding interface: virt_wifi0 [ 676.478479][T16260] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 676.510528][T16260] batman_adv: batadv0: Interface activated: virt_wifi0 [ 676.793002][T16272] FAULT_INJECTION: forcing a failure. [ 676.793002][T16272] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 676.916532][T16272] CPU: 0 PID: 16272 Comm: syz.2.3783 Not tainted syzkaller #0 [ 676.924061][T16272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 676.934135][T16272] Call Trace: [ 676.937434][T16272] [ 676.940373][T16272] dump_stack_lvl+0x188/0x24e [ 676.945078][T16272] ? show_regs_print_info+0x12/0x12 [ 676.950298][T16272] ? load_image+0x410/0x410 [ 676.954816][T16272] ? __might_fault+0xa6/0x120 [ 676.959514][T16272] should_fail_ex+0x390/0x4c0 [ 676.964211][T16272] copyin+0x1b/0x120 [ 676.968125][T16272] _copy_from_iter+0x559/0x1130 [ 676.973001][T16272] ? copyout_mc+0x110/0x110 [ 676.977519][T16272] ? __virt_addr_valid+0x188/0x540 [ 676.982649][T16272] ? __virt_addr_valid+0x188/0x540 [ 676.987780][T16272] ? __virt_addr_valid+0x467/0x540 [ 676.992915][T16272] ? __phys_addr_symbol+0x2b/0x70 [ 676.997955][T16272] ? __check_object_size+0x4f6/0xa70 [ 677.003255][T16272] netlink_sendmsg+0x755/0xbd0 [ 677.008047][T16272] ? netlink_getsockopt+0x550/0x550 [ 677.013271][T16272] ? apparmor_socket_sendmsg+0x8a/0x330 [ 677.018841][T16272] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 677.024147][T16272] ? security_socket_sendmsg+0x7c/0xa0 [ 677.029622][T16272] ? netlink_getsockopt+0x550/0x550 [ 677.034839][T16272] ____sys_sendmsg+0x5ed/0x9a0 [ 677.039636][T16272] ? __sys_sendmsg_sock+0x30/0x30 [ 677.044686][T16272] ? __import_iovec+0x306/0x510 [ 677.049563][T16272] ? import_iovec+0x6f/0xa0 [ 677.054088][T16272] ___sys_sendmsg+0x2a2/0x360 [ 677.058790][T16272] ? __sys_sendmsg+0x2a0/0x2a0 [ 677.063591][T16272] ? __lock_acquire+0x7c40/0x7c40 [ 677.068656][T16272] __se_sys_sendmsg+0x1c3/0x2b0 [ 677.073532][T16272] ? __x64_sys_sendmsg+0x80/0x80 [ 677.078514][T16272] ? lockdep_hardirqs_on+0x94/0x140 [ 677.083734][T16272] do_syscall_64+0x4c/0xa0 [ 677.088170][T16272] ? clear_bhb_loop+0x60/0xb0 [ 677.092868][T16272] ? clear_bhb_loop+0x60/0xb0 [ 677.097567][T16272] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 677.103484][T16272] RIP: 0033:0x7f558e19e0d9 [ 677.107909][T16272] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 677.127537][T16272] RSP: 002b:00007f558f0d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 677.135972][T16272] RAX: ffffffffffffffda RBX: 00007f558e425fa0 RCX: 00007f558e19e0d9 [ 677.143958][T16272] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000003 [ 677.151945][T16272] RBP: 00007f558f0d5090 R08: 0000000000000000 R09: 0000000000000000 [ 677.159927][T16272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 677.167914][T16272] R13: 00007f558e426038 R14: 00007f558e425fa0 R15: 00007ffff02b3048 [ 677.175915][T16272] [ 677.692597][T16279] netlink: 22 bytes leftover after parsing attributes in process `syz.2.3785'. [ 677.735122][T16279] netlink: 'syz.2.3785': attribute type 3 has an invalid length. [ 677.759042][T16279] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3785'. [ 678.016508][T16285] netlink: 'syz.3.3787': attribute type 10 has an invalid length. [ 678.077084][T16285] team0: Port device netdevsim0 added [ 678.333793][T16297] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3793'. [ 678.472620][T16299] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3794'. [ 678.617136][T16310] FAULT_INJECTION: forcing a failure. [ 678.617136][T16310] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 678.709022][T16310] CPU: 1 PID: 16310 Comm: syz.2.3798 Not tainted syzkaller #0 [ 678.716547][T16310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 678.726632][T16310] Call Trace: [ 678.729922][T16310] [ 678.732867][T16310] dump_stack_lvl+0x188/0x24e [ 678.737582][T16310] ? show_regs_print_info+0x12/0x12 [ 678.742808][T16310] ? load_image+0x410/0x410 [ 678.747338][T16310] ? __lock_acquire+0x7c40/0x7c40 [ 678.752402][T16310] should_fail_ex+0x390/0x4c0 [ 678.757105][T16310] strncpy_from_user+0x32/0x340 [ 678.761979][T16310] bpf_prog_load+0x200/0x1530 [ 678.766688][T16310] ? map_freeze+0x390/0x390 [ 678.771213][T16310] ? __might_fault+0xa6/0x120 [ 678.775918][T16310] ? __might_fault+0xa6/0x120 [ 678.780619][T16310] ? __might_fault+0xc2/0x120 [ 678.785311][T16310] ? __might_fault+0xa6/0x120 [ 678.790008][T16310] ? bpf_lsm_bpf+0x5/0x10 [ 678.794360][T16310] ? security_bpf+0x7a/0xa0 [ 678.798883][T16310] __sys_bpf+0x5b8/0x780 [ 678.803154][T16310] ? bpf_link_show_fdinfo+0x380/0x380 [ 678.808558][T16310] ? lock_chain_count+0x20/0x20 [ 678.813435][T16310] __x64_sys_bpf+0x78/0x90 [ 678.817876][T16310] do_syscall_64+0x4c/0xa0 [ 678.822317][T16310] ? clear_bhb_loop+0x60/0xb0 [ 678.827020][T16310] ? clear_bhb_loop+0x60/0xb0 [ 678.831718][T16310] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 678.837631][T16310] RIP: 0033:0x7f558e19e0d9 [ 678.842065][T16310] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 678.861693][T16310] RSP: 002b:00007f558f0d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 678.870129][T16310] RAX: ffffffffffffffda RBX: 00007f558e425fa0 RCX: 00007f558e19e0d9 [ 678.878124][T16310] RDX: 0000000000000070 RSI: 0000200000000440 RDI: 0000000000000005 [ 678.886113][T16310] RBP: 00007f558f0d5090 R08: 0000000000000000 R09: 0000000000000000 [ 678.894108][T16310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 678.902102][T16310] R13: 00007f558e426038 R14: 00007f558e425fa0 R15: 00007ffff02b3048 [ 678.910112][T16310] [ 680.077943][T16337] mac80211_hwsim hwsim26 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 680.219355][T16340] netlink: 'syz.3.3813': attribute type 1 has an invalid length. [ 680.227144][T16340] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.3813'. [ 680.273887][T16342] netlink: 'syz.4.3812': attribute type 39 has an invalid length. [ 681.579212][T16344] netlink: 180 bytes leftover after parsing attributes in process `syz.2.3814'. [ 681.953814][T16367] netlink: 'syz.2.3823': attribute type 4 has an invalid length. [ 681.966920][T16367] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3823'. [ 682.246810][T16382] netlink: 188 bytes leftover after parsing attributes in process `syz.1.3830'. [ 682.300549][T16382] ksmbd: Unknown IPC event: 10, ignore. [ 682.365058][T16382] netlink: 'syz.1.3830': attribute type 29 has an invalid length. [ 682.429838][T16382] netlink: 'syz.1.3830': attribute type 29 has an invalid length. [ 682.454289][T16387] netlink: 'syz.1.3830': attribute type 29 has an invalid length. [ 682.520924][T16392] netlink: 'syz.1.3830': attribute type 29 has an invalid length. [ 682.619472][T16398] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3833'. [ 682.629916][T16382] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3830'. [ 682.734195][T16382] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3830'. [ 682.811067][ T6608] wlan1: Trigger new scan to find an IBSS to join [ 683.336938][T16394] delete_channel: no stack [ 685.781195][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.787555][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.920325][T16431] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 685.955446][T16433] netlink: 'syz.2.3845': attribute type 29 has an invalid length. [ 686.021187][T16433] netlink: 'syz.2.3845': attribute type 29 has an invalid length. [ 686.500628][T16446] netlink: 'syz.4.3844': attribute type 3 has an invalid length. [ 686.530091][T16444] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3848'. [ 686.545654][T16446] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3844'. [ 686.926381][T16460] netlink: 'syz.0.3851': attribute type 1 has an invalid length. [ 687.237293][T16471] netlink: 22 bytes leftover after parsing attributes in process `syz.1.3854'. [ 687.319184][T16471] netlink: 'syz.1.3854': attribute type 3 has an invalid length. [ 687.327124][T16471] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3854'. [ 687.677594][T16481] netlink: 'syz.4.3858': attribute type 29 has an invalid length. [ 687.716842][T16481] netlink: 'syz.4.3858': attribute type 29 has an invalid length. [ 687.816941][T16486] FAULT_INJECTION: forcing a failure. [ 687.816941][T16486] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 687.849512][ T6603] wlan1: Trigger new scan to find an IBSS to join [ 687.865506][T16486] CPU: 0 PID: 16486 Comm: syz.3.3861 Not tainted syzkaller #0 [ 687.873022][T16486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 687.883097][T16486] Call Trace: [ 687.886391][T16486] [ 687.889334][T16486] dump_stack_lvl+0x188/0x24e [ 687.894037][T16486] ? show_regs_print_info+0x12/0x12 [ 687.899260][T16486] ? load_image+0x410/0x410 [ 687.903786][T16486] ? __lock_acquire+0x7c40/0x7c40 [ 687.908843][T16486] should_fail_ex+0x390/0x4c0 [ 687.913546][T16486] _copy_from_user+0x2c/0x170 [ 687.918242][T16486] __sys_bpf+0x2ea/0x780 [ 687.922505][T16486] ? bpf_link_show_fdinfo+0x380/0x380 [ 687.927909][T16486] ? lock_chain_count+0x20/0x20 [ 687.932786][T16486] __x64_sys_bpf+0x78/0x90 [ 687.937227][T16486] do_syscall_64+0x4c/0xa0 [ 687.941669][T16486] ? clear_bhb_loop+0x60/0xb0 [ 687.946368][T16486] ? clear_bhb_loop+0x60/0xb0 [ 687.951072][T16486] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 687.956974][T16486] RIP: 0033:0x7f0abed9e0d9 [ 687.961394][T16486] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 687.981023][T16486] RSP: 002b:00007f0abfd0b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 687.989456][T16486] RAX: ffffffffffffffda RBX: 00007f0abf025fa0 RCX: 00007f0abed9e0d9 [ 687.997435][T16486] RDX: 0000000000000010 RSI: 0000200000000740 RDI: 000000000000000a [ 688.005412][T16486] RBP: 00007f0abfd0b090 R08: 0000000000000000 R09: 0000000000000000 [ 688.013474][T16486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 688.021445][T16486] R13: 00007f0abf026038 R14: 00007f0abf025fa0 R15: 00007ffdc79f3fb8 [ 688.029433][T16486] [ 688.245992][T16497] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.3865'. [ 688.297486][T16497] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.3865'. [ 688.605376][T16493] netlink: 'syz.1.3864': attribute type 3 has an invalid length. [ 688.663663][T16493] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3864'. [ 688.975049][ T6603] wlan1: Creating new IBSS network, BSSID 00:00:00:00:70:25 [ 689.052699][T16507] netlink: 22 bytes leftover after parsing attributes in process `syz.3.3869'. [ 689.066004][T16503] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3867'. [ 689.111418][T16507] netlink: 'syz.3.3869': attribute type 3 has an invalid length. [ 689.155997][T16507] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3869'. [ 689.415172][T16517] netlink: 'syz.3.3873': attribute type 21 has an invalid length. [ 690.537859][T16533] netlink: 146340 bytes leftover after parsing attributes in process `syz.2.3886'. [ 690.572113][T16533] openvswitch: netlink: Key type 386 is out of range max 32 [ 690.735862][T16538] netlink: 'syz.4.3878': attribute type 29 has an invalid length. [ 690.779649][T16538] netlink: 'syz.4.3878': attribute type 29 has an invalid length. [ 690.872186][T16532] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3877'. [ 691.705296][T16550] netlink: 'syz.4.3883': attribute type 3 has an invalid length. [ 691.823605][T16556] ksmbd: Unknown IPC event: 10, ignore. [ 691.897738][T16560] netlink: 'syz.0.3884': attribute type 29 has an invalid length. [ 692.782344][T16580] validate_nla: 3 callbacks suppressed [ 692.782364][T16580] netlink: 'syz.0.3894': attribute type 29 has an invalid length. [ 692.830471][T16580] netlink: 'syz.0.3894': attribute type 29 has an invalid length. [ 692.975618][T13138] Bluetooth: hci2: command 0x0406 tx timeout [ 693.589369][T16588] FAULT_INJECTION: forcing a failure. [ 693.589369][T16588] name failslab, interval 1, probability 0, space 0, times 0 [ 693.604029][T16595] FAULT_INJECTION: forcing a failure. [ 693.604029][T16595] name failslab, interval 1, probability 0, space 0, times 0 [ 693.617969][T16588] CPU: 1 PID: 16588 Comm: syz.2.3897 Not tainted syzkaller #0 [ 693.625468][T16588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 693.626782][T16598] __nla_validate_parse: 5 callbacks suppressed [ 693.626811][T16598] netlink: 22 bytes leftover after parsing attributes in process `syz.1.3899'. [ 693.635533][T16588] Call Trace: [ 693.635550][T16588] [ 693.635559][T16588] dump_stack_lvl+0x188/0x24e [ 693.635589][T16588] ? show_regs_print_info+0x12/0x12 [ 693.635608][T16588] ? load_image+0x410/0x410 [ 693.635628][T16588] ? __might_sleep+0xd0/0xd0 [ 693.635646][T16588] ? __lock_acquire+0x7c40/0x7c40 [ 693.635671][T16588] should_fail_ex+0x390/0x4c0 [ 693.635706][T16588] should_failslab+0x5/0x20 [ 693.635723][T16588] slab_pre_alloc_hook+0x59/0x300 [ 693.635744][T16588] ? apparmor_sk_alloc_security+0x74/0x100 [ 693.635769][T16588] __kmem_cache_alloc_node+0x4f/0x270 [ 693.635791][T16588] ? apparmor_sk_alloc_security+0x74/0x100 [ 693.635813][T16588] kmalloc_trace+0x26/0xe0 [ 693.635839][T16588] apparmor_sk_alloc_security+0x74/0x100 [ 693.635861][T16588] security_sk_alloc+0x6a/0xa0 [ 693.635886][T16588] sk_prot_alloc+0x101/0x210 [ 693.635904][T16588] ? sk_alloc+0x20/0x330 [ 693.635923][T16588] sk_alloc+0x36/0x330 [ 693.635939][T16588] ? bpf_ctx_init+0x154/0x190 [ 693.635961][T16588] bpf_prog_test_run_skb+0x36d/0x18e0 [ 693.749647][T16588] ? __fget_files+0x28/0x460 [ 693.754246][T16588] ? __fget_files+0x3fc/0x460 [ 693.758922][T16588] ? cpu_online+0xa0/0xa0 [ 693.763248][T16588] bpf_prog_test_run+0x31c/0x390 [ 693.768184][T16588] __sys_bpf+0x62b/0x780 [ 693.772422][T16588] ? bpf_link_show_fdinfo+0x380/0x380 [ 693.777794][T16588] ? lock_chain_count+0x20/0x20 [ 693.782643][T16588] __x64_sys_bpf+0x78/0x90 [ 693.787056][T16588] do_syscall_64+0x4c/0xa0 [ 693.791468][T16588] ? clear_bhb_loop+0x60/0xb0 [ 693.796140][T16588] ? clear_bhb_loop+0x60/0xb0 [ 693.800811][T16588] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 693.806694][T16588] RIP: 0033:0x7f558e19e0d9 [ 693.811103][T16588] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 693.830700][T16588] RSP: 002b:00007f558f0d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 693.839106][T16588] RAX: ffffffffffffffda RBX: 00007f558e425fa0 RCX: 00007f558e19e0d9 [ 693.847067][T16588] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 693.855024][T16588] RBP: 00007f558f0d5090 R08: 0000000000000000 R09: 0000000000000000 [ 693.862985][T16588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 693.870946][T16588] R13: 00007f558e426038 R14: 00007f558e425fa0 R15: 00007ffff02b3048 [ 693.878917][T16588] [ 693.890428][T16600] netlink: 'syz.1.3899': attribute type 3 has an invalid length. [ 693.897076][T16595] CPU: 1 PID: 16595 Comm: syz.3.3901 Not tainted syzkaller #0 [ 693.899393][T16600] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3899'. [ 693.905629][T16595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 693.905644][T16595] Call Trace: [ 693.905653][T16595] [ 693.905667][T16595] dump_stack_lvl+0x188/0x24e [ 693.935853][T16595] ? show_regs_print_info+0x12/0x12 [ 693.941060][T16595] ? load_image+0x410/0x410 [ 693.945559][T16595] ? __might_sleep+0xd0/0xd0 [ 693.950142][T16595] ? __lock_acquire+0x7c40/0x7c40 [ 693.955167][T16595] should_fail_ex+0x390/0x4c0 [ 693.959846][T16595] should_failslab+0x5/0x20 [ 693.964338][T16595] slab_pre_alloc_hook+0x59/0x300 [ 693.969353][T16595] ? do_syscall_64+0x4c/0xa0 [ 693.973937][T16595] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 693.979999][T16595] kmem_cache_alloc_node+0x5a/0x310 [ 693.985188][T16595] ? __alloc_skb+0xf9/0x7d0 [ 693.989694][T16595] __alloc_skb+0xf9/0x7d0 [ 693.994026][T16595] netlink_dump+0x1e1/0xcd0 [ 693.998532][T16595] ? netlink_lookup+0x200/0x200 [ 694.003381][T16595] ? __inet_diag_dump_start+0x805/0x970 [ 694.009004][T16595] __netlink_dump_start+0x52c/0x6f0 [ 694.014205][T16595] inet_diag_rcv_msg_compat+0x207/0x420 [ 694.019745][T16595] ? __inet_diag_dump+0x380/0x380 [ 694.024769][T16595] ? sock_diag_rcv_msg+0x137/0x5e0 [ 694.029936][T16595] ? inet_diag_rcv_msg_compat+0x420/0x420 [ 694.035654][T16595] ? inet_diag_dump_start_compat+0x20/0x20 [ 694.041454][T16595] ? inet_diag_dump+0x50/0x50 [ 694.046122][T16595] ? trace_raw_output_contention_end+0xd0/0xd0 [ 694.052276][T16595] ? __inet_diag_dump+0x380/0x380 [ 694.057290][T16595] sock_diag_rcv_msg+0x3c7/0x5e0 [ 694.062225][T16595] netlink_rcv_skb+0x1ef/0x440 [ 694.066984][T16595] ? sock_diag_bind+0xa0/0xa0 [ 694.071661][T16595] ? netlink_ack+0x1160/0x1160 [ 694.076426][T16595] ? netlink_deliver_tap+0x2e/0x1b0 [ 694.081623][T16595] sock_diag_rcv+0x26/0x40 [ 694.086035][T16595] netlink_unicast+0x7ad/0x920 [ 694.090802][T16595] netlink_sendmsg+0x8ad/0xbd0 [ 694.095568][T16595] ? netlink_getsockopt+0x550/0x550 [ 694.100760][T16595] ? apparmor_socket_sendmsg+0x8a/0x330 [ 694.106303][T16595] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 694.111578][T16595] ? security_socket_sendmsg+0x7c/0xa0 [ 694.117033][T16595] ? netlink_getsockopt+0x550/0x550 [ 694.122227][T16595] ____sys_sendmsg+0x5ed/0x9a0 [ 694.126993][T16595] ? __sys_sendmsg_sock+0x30/0x30 [ 694.132008][T16595] ? __import_iovec+0x306/0x510 [ 694.136859][T16595] ? import_iovec+0x6f/0xa0 [ 694.141363][T16595] ___sys_sendmsg+0x2a2/0x360 [ 694.146043][T16595] ? __sys_sendmsg+0x2a0/0x2a0 [ 694.150815][T16595] ? __lock_acquire+0x7c40/0x7c40 [ 694.155851][T16595] __se_sys_sendmsg+0x1c3/0x2b0 [ 694.160699][T16595] ? __x64_sys_sendmsg+0x80/0x80 [ 694.165646][T16595] ? lockdep_hardirqs_on+0x94/0x140 [ 694.170840][T16595] do_syscall_64+0x4c/0xa0 [ 694.175252][T16595] ? clear_bhb_loop+0x60/0xb0 [ 694.179922][T16595] ? clear_bhb_loop+0x60/0xb0 [ 694.184592][T16595] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 694.190481][T16595] RIP: 0033:0x7f0abed9e0d9 [ 694.194888][T16595] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 694.214483][T16595] RSP: 002b:00007f0abfd0b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 694.222927][T16595] RAX: ffffffffffffffda RBX: 00007f0abf025fa0 RCX: 00007f0abed9e0d9 [ 694.230889][T16595] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 694.238850][T16595] RBP: 00007f0abfd0b090 R08: 0000000000000000 R09: 0000000000000000 [ 694.246813][T16595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 694.254775][T16595] R13: 00007f0abf026038 R14: 00007f0abf025fa0 R15: 00007ffdc79f3fb8 [ 694.262774][T16595] [ 694.431810][T16607] netlink: 'syz.1.3902': attribute type 21 has an invalid length. [ 694.452811][T16607] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3902'. [ 694.775401][T16619] netlink: 'syz.0.3908': attribute type 29 has an invalid length. [ 694.812845][T16619] netlink: 'syz.0.3908': attribute type 29 has an invalid length. [ 695.346554][T16643] netlink: 'syz.1.3914': attribute type 4 has an invalid length. [ 695.367545][T16641] netlink: 22 bytes leftover after parsing attributes in process `syz.4.3912'. [ 695.406095][T16643] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3914'. [ 695.462685][T16641] netlink: 'syz.4.3912': attribute type 3 has an invalid length. [ 695.480474][T16641] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3912'. [ 695.518217][T16649] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.3917'. [ 695.913583][T16660] netlink: 'syz.1.3921': attribute type 29 has an invalid length. [ 695.986157][T16660] netlink: 'syz.1.3921': attribute type 29 has an invalid length. [ 696.965741][T16678] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3926'. [ 698.917396][T16692] netlink: 22 bytes leftover after parsing attributes in process `syz.3.3930'. [ 698.966814][T16692] netlink: 'syz.3.3930': attribute type 3 has an invalid length. [ 699.026387][T16692] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3930'. [ 699.468331][T16713] netlink: 86220 bytes leftover after parsing attributes in process `syz.3.3937'. [ 699.530394][T16716] netlink: 'syz.0.3939': attribute type 29 has an invalid length. [ 699.569218][T16716] netlink: 'syz.0.3939': attribute type 29 has an invalid length. [ 699.904630][T16722] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3941'. [ 700.622111][T16740] netlink: 22 bytes leftover after parsing attributes in process `syz.4.3947'. [ 700.668069][T16740] netlink: 'syz.4.3947': attribute type 3 has an invalid length. [ 700.717102][T16740] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3947'. [ 700.918479][T16749] FAULT_INJECTION: forcing a failure. [ 700.918479][T16749] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 700.959145][T16750] netlink: 'syz.0.3952': attribute type 29 has an invalid length. [ 700.976942][T16749] CPU: 0 PID: 16749 Comm: syz.3.3951 Not tainted syzkaller #0 [ 700.984463][T16749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 700.994548][T16749] Call Trace: [ 700.997847][T16749] [ 701.000801][T16749] dump_stack_lvl+0x188/0x24e [ 701.005512][T16749] ? show_regs_print_info+0x12/0x12 [ 701.010744][T16749] ? load_image+0x410/0x410 [ 701.015278][T16749] ? __lock_acquire+0x7c40/0x7c40 [ 701.020326][T16749] ? trace_call_bpf+0xbf/0x6b0 [ 701.025182][T16749] ? trace_call_bpf+0x5d6/0x6b0 [ 701.030067][T16749] should_fail_ex+0x390/0x4c0 [ 701.034788][T16749] _copy_from_user+0x2c/0x170 [ 701.039504][T16749] ___sys_sendmsg+0x1c3/0x360 [ 701.044243][T16749] ? __sys_sendmsg+0x2a0/0x2a0 [ 701.049045][T16749] ? irqentry_enter+0x33/0x50 [ 701.053800][T16749] __se_sys_sendmsg+0x1c3/0x2b0 [ 701.058706][T16749] ? perf_trace_preemptirq_template+0x268/0x320 [ 701.065034][T16749] ? __x64_sys_sendmsg+0x80/0x80 [ 701.070019][T16749] ? lockdep_hardirqs_on+0x94/0x140 [ 701.075249][T16749] do_syscall_64+0x4c/0xa0 [ 701.079705][T16749] ? clear_bhb_loop+0x60/0xb0 [ 701.084398][T16749] ? clear_bhb_loop+0x60/0xb0 [ 701.089084][T16749] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 701.094976][T16749] RIP: 0033:0x7f0abed9e0d9 [ 701.099383][T16749] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 701.118994][T16749] RSP: 002b:00007f0abfd0b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 701.127402][T16749] RAX: ffffffffffffffda RBX: 00007f0abf025fa0 RCX: 00007f0abed9e0d9 [ 701.135380][T16749] RDX: 0000000000000060 RSI: 0000200000000080 RDI: 0000000000000008 [ 701.143354][T16749] RBP: 00007f0abfd0b090 R08: 0000000000000000 R09: 0000000000000000 [ 701.151320][T16749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 701.159284][T16749] R13: 00007f0abf026038 R14: 00007f0abf025fa0 R15: 00007ffdc79f3fb8 [ 701.167260][T16749] [ 701.170892][T16750] netlink: 'syz.0.3952': attribute type 29 has an invalid length. [ 702.310373][T16784] netlink: 22 bytes leftover after parsing attributes in process `syz.0.3963'. [ 702.349651][T16788] netlink: 'syz.3.3964': attribute type 29 has an invalid length. [ 702.358450][T16784] netlink: 'syz.0.3963': attribute type 3 has an invalid length. [ 702.409994][T16784] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3963'. [ 702.422187][T16788] netlink: 'syz.3.3964': attribute type 29 has an invalid length. [ 702.586626][T16783] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3962'. [ 703.928580][T16823] netlink: 'syz.0.3977': attribute type 29 has an invalid length. [ 703.971972][T16823] netlink: 'syz.0.3977': attribute type 29 has an invalid length. [ 704.031272][T16828] bridge0: port 1(bridge_slave_0) entered forwarding state [ 704.090780][T16825] netlink: 'syz.4.3975': attribute type 16 has an invalid length. [ 704.114555][T16825] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3975'. [ 704.126652][T16825] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 704.334241][T16832] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3980'. [ 704.870737][T16850] netlink: 'syz.4.3986': attribute type 13 has an invalid length. [ 704.910459][T16850] netlink: 172 bytes leftover after parsing attributes in process `syz.4.3986'. [ 704.964865][T16850] erspan0: refused to change device tx_queue_len [ 705.163849][T16860] netlink: 'syz.4.3991': attribute type 29 has an invalid length. [ 705.172612][T16860] netlink: 'syz.4.3991': attribute type 29 has an invalid length. [ 705.784679][T16872] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3995'. [ 706.446432][T16897] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.4002'. [ 706.690595][T16903] netlink: 'syz.0.4005': attribute type 29 has an invalid length. [ 706.736839][T16903] netlink: 'syz.0.4005': attribute type 29 has an invalid length. [ 707.302681][T16911] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4006'. [ 708.205141][T16924] netlink: 22 bytes leftover after parsing attributes in process `syz.3.4012'. [ 708.247243][T16923] netlink: 'syz.3.4012': attribute type 3 has an invalid length. [ 708.273135][T16923] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.4012'. [ 708.882935][T16939] netlink: 'syz.0.4019': attribute type 13 has an invalid length. [ 708.920570][T16939] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4019'. [ 708.958559][T16939] erspan0: refused to change device tx_queue_len [ 708.999571][T16939] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 709.074672][T16950] tap0: tun_chr_ioctl cmd 1074025688 [ 709.485810][T16964] netlink: 'syz.4.4026': attribute type 13 has an invalid length. [ 709.493657][T16957] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4025'. [ 709.658851][T16964] netlink: 148 bytes leftover after parsing attributes in process `syz.4.4026'. [ 709.774661][T16964] @: renamed from team_slave_0 [ 709.785418][T16962] netlink: 'syz.4.4026': attribute type 13 has an invalid length. [ 709.845438][T16962] netlink: 148 bytes leftover after parsing attributes in process `syz.4.4026'. [ 711.104950][T16992] tap0: tun_chr_ioctl cmd 1074025677 [ 711.130379][T16992] tap0: linktype set to 773 [ 711.237204][T16995] netlink: 22 bytes leftover after parsing attributes in process `syz.0.4040'. [ 711.297880][T16995] netlink: 'syz.0.4040': attribute type 3 has an invalid length. [ 711.339066][T16995] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.4040'. [ 711.467491][T17000] netlink: 'syz.1.4042': attribute type 29 has an invalid length. [ 711.524862][T17000] netlink: 'syz.1.4042': attribute type 29 has an invalid length. [ 711.599388][T17002] netlink: 'syz.1.4042': attribute type 29 has an invalid length. [ 711.870540][T17005] netlink: 'syz.1.4042': attribute type 29 has an invalid length. [ 711.952862][T17003] can: request_module (can-proto-0) failed. [ 714.129548][T17006] netlink: 'syz.1.4042': attribute type 29 has an invalid length. [ 714.148906][T17005] netlink: 'syz.1.4042': attribute type 29 has an invalid length. [ 715.256994][T17036] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.4052'. [ 715.361089][T17036] device bridge_slave_1 entered promiscuous mode [ 715.830965][T17043] netlink: 'syz.3.4053': attribute type 10 has an invalid length. [ 716.211076][T17048] netlink: 22 bytes leftover after parsing attributes in process `syz.2.4055'. [ 716.269890][T17048] netlink: 'syz.2.4055': attribute type 3 has an invalid length. [ 716.304800][T17048] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.4055'. [ 717.216223][T17075] netlink: 'syz.2.4067': attribute type 17 has an invalid length. [ 717.254948][T17075] netlink: 'syz.2.4067': attribute type 16 has an invalid length. [ 717.286146][T17075] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4067'. [ 717.777163][T17086] netlink: 22 bytes leftover after parsing attributes in process `syz.4.4070'. [ 717.816907][T17086] netlink: 'syz.4.4070': attribute type 3 has an invalid length. [ 717.828989][T17086] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.4070'. [ 717.971192][T17093] device veth1_macvtap left promiscuous mode [ 718.246427][T17103] netlink: 'syz.4.4076': attribute type 10 has an invalid length. [ 718.578799][ T4287] Bluetooth: hci5: command 0x0406 tx timeout [ 719.025571][ T6606] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 719.528866][T17123] netlink: 'syz.3.4084': attribute type 17 has an invalid length. [ 719.536763][T17123] netlink: 'syz.3.4084': attribute type 16 has an invalid length. [ 719.599225][T17123] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4084'. [ 719.872992][T17127] netlink: 22 bytes leftover after parsing attributes in process `syz.0.4086'. [ 719.946897][T17127] netlink: 'syz.0.4086': attribute type 3 has an invalid length. [ 719.966121][T17127] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.4086'. [ 719.968392][T17132] device veth1_macvtap left promiscuous mode [ 720.373464][T17150] netlink: 22 bytes leftover after parsing attributes in process `syz.4.4095'. [ 720.392036][T17150] netlink: 'syz.4.4095': attribute type 3 has an invalid length. [ 720.440927][T17150] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.4095'. [ 720.454480][T17144] netlink: 105 bytes leftover after parsing attributes in process `syz.1.4093'. [ 720.485129][T17144] netlink: 105 bytes leftover after parsing attributes in process `syz.1.4093'. [ 720.763813][T17155] netlink: 180900 bytes leftover after parsing attributes in process `syz.2.4097'. [ 720.781883][T17155] openvswitch: netlink: Flow actions attr not present in new flow. [ 720.949193][T17164] netlink: 'syz.1.4099': attribute type 10 has an invalid length. [ 722.220722][T17172] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4102'. [ 722.496020][T17163] netlink: 'syz.0.4100': attribute type 17 has an invalid length. [ 722.514997][T17163] netlink: 'syz.0.4100': attribute type 16 has an invalid length. [ 722.528014][T17163] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4100'. [ 722.704660][T17180] netlink: 22 bytes leftover after parsing attributes in process `syz.3.4104'. [ 722.787416][T17180] netlink: 'syz.3.4104': attribute type 3 has an invalid length. [ 722.819106][T17180] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.4104'. [ 723.113350][T17189] netlink: 'syz.3.4110': attribute type 10 has an invalid length. [ 723.702829][T17209] netlink: 180900 bytes leftover after parsing attributes in process `syz.4.4115'. [ 723.752316][T17209] openvswitch: netlink: Flow actions attr not present in new flow. [ 724.235713][T17222] netlink: 'syz.2.4120': attribute type 3 has an invalid length. [ 725.336163][T17251] openvswitch: netlink: Flow actions attr not present in new flow. [ 725.673279][T17262] netlink: 'syz.2.4133': attribute type 10 has an invalid length. [ 726.835927][T17262] team0: Port device netdevsim0 added [ 727.537657][T17286] __nla_validate_parse: 5 callbacks suppressed [ 727.537680][T17286] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4142'. [ 728.009532][T17280] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4139'. [ 728.229024][T17292] netlink: 'syz.3.4145': attribute type 10 has an invalid length. [ 728.236934][T17292] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4145'. [ 728.306585][T17292] device dummy0 entered promiscuous mode [ 728.327686][T17292] bridge0: port 3(dummy0) entered blocking state [ 728.349115][T17292] bridge0: port 3(dummy0) entered disabled state [ 728.355940][T17292] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 728.401455][T17293] netlink: 'syz.3.4145': attribute type 10 has an invalid length. [ 728.417152][T17293] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4145'. [ 728.468916][T17293] bridge0: port 3(dummy0) entered blocking state [ 728.475361][T17293] bridge0: port 3(dummy0) entered disabled state [ 728.500085][T17293] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 728.789178][T17312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 728.968669][T17320] netlink: 'syz.1.4152': attribute type 29 has an invalid length. [ 729.015463][T17320] netlink: 'syz.1.4152': attribute type 29 has an invalid length. [ 729.389636][T17329] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.4155'. [ 730.002022][T17338] netlink: 'syz.2.4159': attribute type 10 has an invalid length. [ 730.719596][T17335] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4158'. [ 731.135610][T17349] netlink: 22 bytes leftover after parsing attributes in process `syz.1.4162'. [ 731.236461][T17349] netlink: 'syz.1.4162': attribute type 3 has an invalid length. [ 731.320708][T17349] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4162'. [ 731.659281][T17364] netlink: 'syz.3.4168': attribute type 29 has an invalid length. [ 731.667579][T17364] netlink: 'syz.3.4168': attribute type 29 has an invalid length. [ 732.220910][T17385] syz.0.4176[17385] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 732.221165][T17385] syz.0.4176[17385] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 732.237183][T17387] netlink: 'syz.1.4177': attribute type 10 has an invalid length. [ 732.277900][T17376] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4172'. [ 733.167867][T17398] netlink: 22 bytes leftover after parsing attributes in process `syz.2.4179'. [ 733.214138][T17398] netlink: 'syz.2.4179': attribute type 3 has an invalid length. [ 733.232891][T17398] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.4179'. [ 734.189133][T17402] netlink: 180 bytes leftover after parsing attributes in process `syz.4.4182'. [ 734.383959][T17419] mac80211_hwsim hwsim28 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 734.408240][T17413] netlink: 'syz.2.4184': attribute type 29 has an invalid length. [ 734.444214][T17413] netlink: 'syz.2.4184': attribute type 29 has an invalid length. [ 735.056390][T17437] netlink: 22 bytes leftover after parsing attributes in process `syz.4.4195'. [ 735.100407][T17437] netlink: 'syz.4.4195': attribute type 3 has an invalid length. [ 735.108501][T17437] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.4195'. [ 735.577315][T17450] mac80211_hwsim hwsim22 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 735.915985][T17464] netlink: 'syz.0.4204': attribute type 29 has an invalid length. [ 735.956875][T17464] netlink: 'syz.0.4204': attribute type 29 has an invalid length. [ 736.220357][T17468] TCP: TCP_TX_DELAY enabled [ 737.019507][T17483] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4211'. [ 737.058182][T17483] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4211'. [ 737.110072][T17483] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4211'. [ 737.544080][T17483] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4211'. [ 737.612757][T17498] netlink: 'syz.0.4216': attribute type 10 has an invalid length. [ 737.681286][T17498] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 737.710813][T17498] team0: Port device batadv0 added [ 737.827328][T17505] netlink: 'syz.3.4219': attribute type 29 has an invalid length. [ 737.873628][T17505] netlink: 'syz.3.4219': attribute type 29 has an invalid length. [ 739.874663][T17547] netlink: 'syz.1.4231': attribute type 29 has an invalid length. [ 739.892745][T17547] netlink: 'syz.1.4231': attribute type 29 has an invalid length. [ 740.165601][T17562] netlink: 'syz.4.4239': attribute type 1 has an invalid length. [ 740.216278][T17562] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 741.070661][T17589] netlink: 'syz.2.4248': attribute type 29 has an invalid length. [ 741.099482][T17589] netlink: 'syz.2.4248': attribute type 29 has an invalid length. [ 741.117416][T17593] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.4249'. [ 741.440594][T17587] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4247'. [ 742.405963][T17614] netlink: 'syz.3.4255': attribute type 10 has an invalid length. [ 742.438672][T17614] bridge0: port 2(bridge_slave_1) entered disabled state [ 742.462855][T17614] bridge0: port 2(bridge_slave_1) entered disabled state [ 742.509476][T17614] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 742.670471][T17620] netlink: 'syz.4.4259': attribute type 6 has an invalid length. [ 742.702589][T17620] netlink: 1034 bytes leftover after parsing attributes in process `syz.4.4259'. [ 742.799001][T17625] netlink: 'syz.2.4261': attribute type 29 has an invalid length. [ 742.845806][T17625] netlink: 'syz.2.4261': attribute type 29 has an invalid length. [ 742.935521][T17631] netlink: 'syz.0.4264': attribute type 10 has an invalid length. [ 742.974250][T17631] batman_adv: batadv0: Adding interface: netdevsim0 [ 743.001260][T17631] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 743.046422][T17631] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 743.180743][T17628] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4263'. [ 743.247393][T17634] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4265'. [ 744.548427][T17674] netlink: 22 bytes leftover after parsing attributes in process `syz.3.4279'. [ 744.605884][T17674] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.4279'. [ 745.010624][T17687] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4283'. [ 745.038514][T17700] validate_nla: 1 callbacks suppressed [ 745.038534][T17700] netlink: 'syz.4.4287': attribute type 21 has an invalid length. [ 745.226506][T17689] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4284'. [ 746.133102][T17718] netlink: 22 bytes leftover after parsing attributes in process `syz.2.4294'. [ 746.186652][T17718] netlink: 'syz.2.4294': attribute type 3 has an invalid length. [ 746.210322][T17718] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.4294'. [ 746.666705][T17735] FAULT_INJECTION: forcing a failure. [ 746.666705][T17735] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 746.684285][T17735] CPU: 0 PID: 17735 Comm: syz.2.4300 Not tainted syzkaller #0 [ 746.691807][T17735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 746.701883][T17735] Call Trace: [ 746.705157][T17735] [ 746.708078][T17735] dump_stack_lvl+0x188/0x24e [ 746.712768][T17735] ? show_regs_print_info+0x12/0x12 [ 746.717982][T17735] ? load_image+0x410/0x410 [ 746.722504][T17735] ? __lock_acquire+0x7c40/0x7c40 [ 746.727537][T17735] ? snprintf+0xe5/0x140 [ 746.731794][T17735] should_fail_ex+0x390/0x4c0 [ 746.736523][T17735] _copy_to_user+0x2c/0x130 [ 746.741059][T17735] simple_read_from_buffer+0xe3/0x150 [ 746.746442][T17735] proc_fail_nth_read+0x1a6/0x220 [ 746.751479][T17735] ? proc_fault_inject_write+0x310/0x310 [ 746.757114][T17735] ? fsnotify_perm+0x248/0x550 [ 746.761909][T17735] ? proc_fault_inject_write+0x310/0x310 [ 746.767564][T17735] vfs_read+0x2db/0x960 [ 746.771738][T17735] ? kernel_read+0x1e0/0x1e0 [ 746.776323][T17735] ? __fget_files+0x28/0x460 [ 746.780931][T17735] ? __fget_files+0x3fc/0x460 [ 746.785609][T17735] ? __fdget_pos+0x2ae/0x360 [ 746.790215][T17735] ? ksys_read+0x70/0x260 [ 746.794554][T17735] ksys_read+0x14d/0x260 [ 746.798799][T17735] ? vfs_write+0x9a0/0x9a0 [ 746.803213][T17735] ? lockdep_hardirqs_on+0x94/0x140 [ 746.808403][T17735] do_syscall_64+0x4c/0xa0 [ 746.812815][T17735] ? clear_bhb_loop+0x60/0xb0 [ 746.817502][T17735] ? clear_bhb_loop+0x60/0xb0 [ 746.822178][T17735] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 746.828089][T17735] RIP: 0033:0x7f558e15e90e [ 746.832499][T17735] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 746.852103][T17735] RSP: 002b:00007f558f0d4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 746.860530][T17735] RAX: ffffffffffffffda RBX: 00007f558f0d56c0 RCX: 00007f558e15e90e [ 746.868512][T17735] RDX: 000000000000000f RSI: 00007f558f0d50a0 RDI: 0000000000000006 [ 746.876475][T17735] RBP: 00007f558f0d5090 R08: 0000000000000000 R09: 0000000000000000 [ 746.884442][T17735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 746.892409][T17735] R13: 00007f558e426038 R14: 00007f558e425fa0 R15: 00007ffff02b3048 [ 746.900386][T17735] [ 747.165346][T17743] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4303'. [ 747.197483][T17743] netlink: 180 bytes leftover after parsing attributes in process `syz.0.4303'. [ 747.211193][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.217608][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.289430][T17749] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4303'. [ 747.328610][T17749] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 747.386666][T17749] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 748.384692][T17755] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4308'. [ 748.589236][T17776] netlink: 'syz.1.4314': attribute type 2 has an invalid length. [ 748.638005][T17776] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4314'. [ 750.035007][ T6597] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 750.522483][T17827] netlink: 'syz.1.4331': attribute type 39 has an invalid length. [ 751.006203][T17817] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4328'. [ 751.566450][T17848] netlink: 22 bytes leftover after parsing attributes in process `syz.1.4340'. [ 751.600451][T17848] netlink: 'syz.1.4340': attribute type 3 has an invalid length. [ 751.649100][T17848] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4340'. [ 751.711664][T17850] FAULT_INJECTION: forcing a failure. [ 751.711664][T17850] name failslab, interval 1, probability 0, space 0, times 0 [ 751.728888][T17850] CPU: 0 PID: 17850 Comm: syz.4.4341 Not tainted syzkaller #0 [ 751.736410][T17850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 751.746486][T17850] Call Trace: [ 751.749775][T17850] [ 751.752715][T17850] dump_stack_lvl+0x188/0x24e [ 751.757408][T17850] ? show_regs_print_info+0x12/0x12 [ 751.762612][T17850] ? load_image+0x410/0x410 [ 751.767128][T17850] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 751.773110][T17850] should_fail_ex+0x390/0x4c0 [ 751.777788][T17850] should_failslab+0x5/0x20 [ 751.782296][T17850] slab_pre_alloc_hook+0x59/0x300 [ 751.787329][T17850] kmem_cache_alloc+0x56/0x2f0 [ 751.792092][T17850] ? __build_skb+0x27/0x3b0 [ 751.796615][T17850] __build_skb+0x27/0x3b0 [ 751.800938][T17850] ? build_skb+0x14/0x230 [ 751.805262][T17850] build_skb+0x1e/0x230 [ 751.809414][T17850] bpf_prog_test_run_skb+0x38d/0x18e0 [ 751.814790][T17850] ? __fget_files+0x28/0x460 [ 751.819375][T17850] ? __fget_files+0x3fc/0x460 [ 751.824053][T17850] ? cpu_online+0xa0/0xa0 [ 751.828372][T17850] bpf_prog_test_run+0x31c/0x390 [ 751.833320][T17850] __sys_bpf+0x62b/0x780 [ 751.837557][T17850] ? bpf_link_show_fdinfo+0x380/0x380 [ 751.842932][T17850] ? lock_chain_count+0x20/0x20 [ 751.847782][T17850] __x64_sys_bpf+0x78/0x90 [ 751.852192][T17850] do_syscall_64+0x4c/0xa0 [ 751.856601][T17850] ? clear_bhb_loop+0x60/0xb0 [ 751.861273][T17850] ? clear_bhb_loop+0x60/0xb0 [ 751.865948][T17850] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 751.871837][T17850] RIP: 0033:0x7fafd4b9e0d9 [ 751.876244][T17850] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 751.895843][T17850] RSP: 002b:00007fafd2df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 751.904246][T17850] RAX: ffffffffffffffda RBX: 00007fafd4e25fa0 RCX: 00007fafd4b9e0d9 [ 751.912210][T17850] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 751.920172][T17850] RBP: 00007fafd2df6090 R08: 0000000000000000 R09: 0000000000000000 [ 751.928134][T17850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 751.936100][T17850] R13: 00007fafd4e26038 R14: 00007fafd4e25fa0 R15: 00007ffe720cde88 [ 751.944076][T17850] [ 752.551505][T17874] netlink: 'syz.0.4346': attribute type 2 has an invalid length. [ 752.620302][T17874] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4346'. [ 753.286033][T17881] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4350'. [ 753.456213][T17893] netlink: 22 bytes leftover after parsing attributes in process `syz.2.4354'. [ 753.510367][T17894] netlink: 'syz.2.4354': attribute type 3 has an invalid length. [ 753.566339][T17894] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.4354'. [ 753.825000][ T4287] Bluetooth: hci2: ISO packet for unknown connection handle 3847 [ 754.642594][T17918] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4365'. [ 754.664257][T17918] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 754.810849][T17920] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4365'. [ 754.839200][T17920] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 754.890223][T17920] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 754.922755][T17921] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4366'. [ 754.943721][T17929] netlink: 'syz.4.4367': attribute type 2 has an invalid length. [ 754.994004][T17929] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4367'. [ 755.067195][T17932] netlink: 'syz.0.4368': attribute type 3 has an invalid length. [ 755.207800][T17936] FAULT_INJECTION: forcing a failure. [ 755.207800][T17936] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 755.259171][T17936] CPU: 0 PID: 17936 Comm: syz.3.4370 Not tainted syzkaller #0 [ 755.266698][T17936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 755.276778][T17936] Call Trace: [ 755.280079][T17936] [ 755.283031][T17936] dump_stack_lvl+0x188/0x24e [ 755.287750][T17936] ? show_regs_print_info+0x12/0x12 [ 755.292990][T17936] ? load_image+0x410/0x410 [ 755.297532][T17936] ? __lock_acquire+0x7c40/0x7c40 [ 755.302598][T17936] ? perf_trace_lock+0xf8/0x390 [ 755.307475][T17936] should_fail_ex+0x390/0x4c0 [ 755.312178][T17936] strncpy_from_user+0x32/0x340 [ 755.317070][T17936] bpf_prog_load+0x200/0x1530 [ 755.321795][T17936] ? map_freeze+0x390/0x390 [ 755.326326][T17936] ? __might_fault+0xa6/0x120 [ 755.331026][T17936] ? __might_fault+0xa6/0x120 [ 755.335697][T17936] ? __might_fault+0xc2/0x120 [ 755.340366][T17936] ? __might_fault+0xa6/0x120 [ 755.345042][T17936] ? bpf_lsm_bpf+0x5/0x10 [ 755.349386][T17936] ? security_bpf+0x7a/0xa0 [ 755.353890][T17936] __sys_bpf+0x5b8/0x780 [ 755.358130][T17936] ? bpf_link_show_fdinfo+0x380/0x380 [ 755.363508][T17936] ? lock_chain_count+0x20/0x20 [ 755.368364][T17936] __x64_sys_bpf+0x78/0x90 [ 755.372781][T17936] do_syscall_64+0x4c/0xa0 [ 755.377197][T17936] ? clear_bhb_loop+0x60/0xb0 [ 755.381870][T17936] ? clear_bhb_loop+0x60/0xb0 [ 755.386546][T17936] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 755.392431][T17936] RIP: 0033:0x7f0abed9e0d9 [ 755.396839][T17936] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 755.416434][T17936] RSP: 002b:00007f0abfd0b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 755.424841][T17936] RAX: ffffffffffffffda RBX: 00007f0abf025fa0 RCX: 00007f0abed9e0d9 [ 755.432805][T17936] RDX: 0000000000000094 RSI: 0000200000002c80 RDI: 0000000000000005 [ 755.440765][T17936] RBP: 00007f0abfd0b090 R08: 0000000000000000 R09: 0000000000000000 [ 755.448729][T17936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 755.456690][T17936] R13: 00007f0abf026038 R14: 00007f0abf025fa0 R15: 00007ffdc79f3fb8 [ 755.464663][T17936] [ 755.797738][T17941] device syzkaller0 entered promiscuous mode [ 758.530227][T17972] __nla_validate_parse: 2 callbacks suppressed [ 758.530262][T17972] netlink: 22 bytes leftover after parsing attributes in process `syz.4.4383'. [ 758.588469][T17972] netlink: 'syz.4.4383': attribute type 3 has an invalid length. [ 758.628938][T17972] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.4383'. [ 758.667826][T17970] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4382'. [ 758.926333][T17979] netlink: 22 bytes leftover after parsing attributes in process `syz.0.4394'. [ 758.953766][T17979] netlink: 'syz.0.4394': attribute type 3 has an invalid length. [ 758.968919][T17979] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.4394'. [ 759.140139][T17982] netlink: 'syz.3.4384': attribute type 2 has an invalid length. [ 759.148242][T17982] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4384'. [ 759.299898][T17987] netlink: 'syz.2.4387': attribute type 1 has an invalid length. [ 759.363564][T17987] netlink: 'syz.2.4387': attribute type 4 has an invalid length. [ 759.374858][T17987] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.4387'. [ 759.528174][T18000] netlink: 'syz.1.4391': attribute type 1 has an invalid length. [ 759.589022][T18000] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.4391'. [ 760.013097][T18003] netlink: 'syz.4.4392': attribute type 21 has an invalid length. [ 760.031882][T18003] netlink: 'syz.4.4392': attribute type 3 has an invalid length. [ 760.045577][T18003] netlink: 144 bytes leftover after parsing attributes in process `syz.4.4392'. [ 760.391869][T18025] netlink: 22 bytes leftover after parsing attributes in process `syz.1.4400'. [ 760.438327][T18025] netlink: 'syz.1.4400': attribute type 3 has an invalid length. [ 760.703712][T18034] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 760.743527][T18031] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 760.758481][T18031] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 760.788037][T18037] FAULT_INJECTION: forcing a failure. [ 760.788037][T18037] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 760.801603][T18037] CPU: 1 PID: 18037 Comm: syz.3.4404 Not tainted syzkaller #0 [ 760.809106][T18037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 760.819188][T18037] Call Trace: [ 760.822477][T18037] [ 760.825404][T18037] dump_stack_lvl+0x188/0x24e [ 760.830097][T18037] ? show_regs_print_info+0x12/0x12 [ 760.835323][T18037] ? load_image+0x410/0x410 [ 760.839850][T18037] ? __lock_acquire+0x7c40/0x7c40 [ 760.844901][T18037] should_fail_ex+0x390/0x4c0 [ 760.849596][T18037] _copy_to_user+0x2c/0x130 [ 760.854109][T18037] bpf_test_finish+0x266/0x600 [ 760.858888][T18037] ? dst_hold+0xb0/0xb0 [ 760.863056][T18037] ? convert_skb_to___skb+0x420/0x420 [ 760.868425][T18037] ? bpf_test_init+0x119/0x140 [ 760.873186][T18037] bpf_prog_test_run_xdp+0x827/0xf80 [ 760.878467][T18037] ? __lock_acquire+0x7c40/0x7c40 [ 760.883497][T18037] ? dev_put+0x80/0x80 [ 760.887566][T18037] ? dev_put+0x80/0x80 [ 760.891650][T18037] bpf_prog_test_run+0x31c/0x390 [ 760.896623][T18037] __sys_bpf+0x62b/0x780 [ 760.900893][T18037] ? bpf_link_show_fdinfo+0x380/0x380 [ 760.906285][T18037] ? lock_chain_count+0x20/0x20 [ 760.911160][T18037] __x64_sys_bpf+0x78/0x90 [ 760.915594][T18037] do_syscall_64+0x4c/0xa0 [ 760.920025][T18037] ? clear_bhb_loop+0x60/0xb0 [ 760.924716][T18037] ? clear_bhb_loop+0x60/0xb0 [ 760.929402][T18037] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 760.935306][T18037] RIP: 0033:0x7f0abed9e0d9 [ 760.939724][T18037] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 760.959363][T18037] RSP: 002b:00007f0abfd0b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 760.967805][T18037] RAX: ffffffffffffffda RBX: 00007f0abf025fa0 RCX: 00007f0abed9e0d9 [ 760.975791][T18037] RDX: 000000000000002f RSI: 0000200000000000 RDI: 000000000000000a [ 760.983767][T18037] RBP: 00007f0abfd0b090 R08: 0000000000000000 R09: 0000000000000000 [ 760.991755][T18037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 760.999753][T18037] R13: 00007f0abf026038 R14: 00007f0abf025fa0 R15: 00007ffdc79f3fb8 [ 761.007747][T18037] [ 761.153800][T18039] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 761.204461][T18039] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 761.250005][T18047] netlink: 'syz.1.4408': attribute type 1 has an invalid length. [ 762.067383][T18082] delete_channel: no stack [ 762.075694][T18082] delete_channel: no stack [ 763.182102][T18124] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 764.513754][T18148] validate_nla: 5 callbacks suppressed [ 764.513774][T18148] netlink: 'syz.3.4447': attribute type 1 has an invalid length. [ 764.525883][T18149] __nla_validate_parse: 16 callbacks suppressed [ 764.525905][T18149] netlink: 22 bytes leftover after parsing attributes in process `syz.0.4448'. [ 764.572217][T18148] netlink: 'syz.3.4447': attribute type 4 has an invalid length. [ 764.614256][T18149] netlink: 'syz.0.4448': attribute type 3 has an invalid length. [ 764.649716][T18149] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.4448'. [ 764.650089][T18148] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.4447'. [ 765.145785][T18153] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4449'. [ 765.787277][T18169] netlink: 'syz.2.4453': attribute type 29 has an invalid length. [ 765.871655][T18169] netlink: 'syz.2.4453': attribute type 29 has an invalid length. [ 765.889211][T18172] netlink: 'syz.2.4453': attribute type 29 has an invalid length. [ 766.050592][T18170] netlink: 'syz.3.4454': attribute type 21 has an invalid length. [ 766.064090][T18170] netlink: 'syz.3.4454': attribute type 3 has an invalid length. [ 766.072604][T18170] netlink: 144 bytes leftover after parsing attributes in process `syz.3.4454'. [ 766.315388][T18185] netlink: 22 bytes leftover after parsing attributes in process `syz.2.4460'. [ 766.338281][T18185] netlink: 'syz.2.4460': attribute type 3 has an invalid length. [ 766.352502][T18185] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.4460'. [ 766.360250][T18190] netlink: 15007 bytes leftover after parsing attributes in process `syz.3.4461'. [ 766.394351][T18187] netlink: 'syz.3.4461': attribute type 1 has an invalid length. [ 766.402930][T18187] netlink: 116376 bytes leftover after parsing attributes in process `syz.3.4461'. [ 766.692116][T18192] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4463'. [ 766.976356][T18205] device hsr0 entered promiscuous mode [ 766.992625][T18205] bridge0: port 3(hsr0) entered blocking state [ 767.000026][T18205] bridge0: port 3(hsr0) entered disabled state [ 767.136580][T18205] bridge0: port 3(hsr0) entered blocking state [ 767.144589][T18205] bridge0: port 3(hsr0) entered forwarding state [ 770.041929][T18305] __nla_validate_parse: 9 callbacks suppressed [ 770.041963][T18305] netlink: 22 bytes leftover after parsing attributes in process `syz.1.4504'. [ 770.083548][T18307] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 770.091420][T18307] #PF: supervisor instruction fetch in kernel mode [ 770.097940][T18307] #PF: error_code(0x0010) - not-present page [ 770.103960][T18307] PGD 4f67c067 P4D 4f67c067 PUD 0 [ 770.109115][T18307] Oops: 0010 [#1] PREEMPT SMP KASAN [ 770.114338][T18307] CPU: 1 PID: 18307 Comm: syz.4.4502 Not tainted syzkaller #0 [ 770.121900][T18307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 770.131980][T18307] RIP: 0010:0x0 [ 770.135471][T18307] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 770.142861][T18307] RSP: 0018:ffffc90005117498 EFLAGS: 00010246 [ 770.148951][T18307] RAX: 1ffffffff17347a7 RBX: 1ffff92000a22ea4 RCX: 0000000000000001 [ 770.156925][T18307] RDX: ffffc90005117540 RSI: 0000000000000001 RDI: ffff888065fe0000 [ 770.164893][T18307] RBP: ffffc900051175b0 R08: ffff888065fe003f R09: 1ffff1100cbfc007 [ 770.172868][T18307] R10: dffffc0000000000 R11: ffffed100cbfc008 R12: ffffe8ffffd61168 [ 770.180834][T18307] R13: ffffffff8b9a3d38 R14: 0000000000000000 R15: ffff888065fe0000 [ 770.188803][T18307] FS: 00007fafd2dd56c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 770.197752][T18307] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 770.204330][T18307] CR2: ffffffffffffffd6 CR3: 0000000067779000 CR4: 00000000003506e0 [ 770.212322][T18307] DR0: 0000000000000000 DR1: 0000200000000300 DR2: 0000000000000000 [ 770.220312][T18307] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 770.228296][T18307] Call Trace: [ 770.231584][T18307] [ 770.234533][T18307] bond_xdp_xmit+0x31e/0x550 [ 770.239250][T18307] ? bond_xdp_xmit+0x94/0x550 [ 770.243943][T18307] ? bond_xdp+0x8c0/0x8c0 [ 770.248280][T18307] bq_xmit_all+0xca9/0x1120 [ 770.252907][T18307] ? zone_statistics+0x170/0x170 [ 770.257910][T18307] ? __dev_flush+0x1b0/0x1b0 [ 770.262511][T18307] ? __alloc_pages_bulk+0x491/0x910 [ 770.267707][T18307] ? xdp_test_run_init_page+0x330/0x430 [ 770.273245][T18307] ? memcpy+0x3c/0x60 [ 770.277297][T18307] ? rcu_is_watching+0x11/0xa0 [ 770.282070][T18307] ? bq_enqueue+0x2ef/0x3d0 [ 770.286588][T18307] ? rcu_is_watching+0x11/0xa0 [ 770.291360][T18307] ? trace_xdp_redirect+0xb3/0x2b0 [ 770.296489][T18307] __dev_flush+0xbf/0x1b0 [ 770.300818][T18307] xdp_do_flush+0xa/0x20 [ 770.305052][T18307] bpf_test_run_xdp_live+0x1549/0x1a90 [ 770.310504][T18307] ? 0xffffffffa00040c0 [ 770.314665][T18307] ? text_poke_copy+0x7b/0x90 [ 770.319443][T18307] ? bpf_test_run_xdp_live+0x515/0x1a90 [ 770.324999][T18307] ? xdp_convert_md_to_buff+0x330/0x330 [ 770.330551][T18307] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 770.336948][T18307] ? bpf_prog_test_run_xdp+0x6bd/0xf80 [ 770.342425][T18307] bpf_prog_test_run_xdp+0x757/0xf80 [ 770.347733][T18307] ? __lock_acquire+0x7c40/0x7c40 [ 770.352787][T18307] ? dev_put+0x80/0x80 [ 770.356864][T18307] ? dev_put+0x80/0x80 [ 770.360931][T18307] bpf_prog_test_run+0x31c/0x390 [ 770.365902][T18307] __sys_bpf+0x62b/0x780 [ 770.370141][T18307] ? bpf_link_show_fdinfo+0x380/0x380 [ 770.375508][T18307] ? lock_chain_count+0x20/0x20 [ 770.380348][T18307] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 770.386322][T18307] __x64_sys_bpf+0x78/0x90 [ 770.390737][T18307] do_syscall_64+0x4c/0xa0 [ 770.395148][T18307] ? clear_bhb_loop+0x60/0xb0 [ 770.399820][T18307] ? clear_bhb_loop+0x60/0xb0 [ 770.404488][T18307] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 770.410374][T18307] RIP: 0033:0x7fafd4b9e0d9 [ 770.414781][T18307] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 770.434376][T18307] RSP: 002b:00007fafd2dd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 770.442780][T18307] RAX: ffffffffffffffda RBX: 00007fafd4e26090 RCX: 00007fafd4b9e0d9 [ 770.450752][T18307] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 770.458719][T18307] RBP: 00007fafd4c35024 R08: 0000000000000000 R09: 0000000000000000 [ 770.466682][T18307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 770.474646][T18307] R13: 00007fafd4e26128 R14: 00007fafd4e26090 R15: 00007ffe720cde88 [ 770.482612][T18307] [ 770.485631][T18307] Modules linked in: [ 770.489521][T18307] CR2: 0000000000000000 [ 770.493663][T18307] ---[ end trace 0000000000000000 ]--- [ 770.499115][T18307] RIP: 0010:0x0 [ 770.502579][T18307] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 770.509928][T18307] RSP: 0018:ffffc90005117498 EFLAGS: 00010246 [ 770.515982][T18307] RAX: 1ffffffff17347a7 RBX: 1ffff92000a22ea4 RCX: 0000000000000001 [ 770.523943][T18307] RDX: ffffc90005117540 RSI: 0000000000000001 RDI: ffff888065fe0000 [ 770.531922][T18307] RBP: ffffc900051175b0 R08: ffff888065fe003f R09: 1ffff1100cbfc007 [ 770.539899][T18307] R10: dffffc0000000000 R11: ffffed100cbfc008 R12: ffffe8ffffd61168 [ 770.547866][T18307] R13: ffffffff8b9a3d38 R14: 0000000000000000 R15: ffff888065fe0000 [ 770.555829][T18307] FS: 00007fafd2dd56c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 770.564748][T18307] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 770.571322][T18307] CR2: ffffffffffffffd6 CR3: 0000000067779000 CR4: 00000000003506e0 [ 770.579344][T18307] DR0: 0000000000000000 DR1: 0000200000000300 DR2: 0000000000000000 [ 770.587308][T18307] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 770.595281][T18307] Kernel panic - not syncing: Fatal exception in interrupt [ 770.602739][T18307] Kernel Offset: disabled [ 770.607075][T18307] Rebooting in 86400 seconds..