last executing test programs: 5.020646702s ago: executing program 4 (id=2225): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f95e24fc60040068000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 3.946136672s ago: executing program 4 (id=2229): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1e, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x15, 0x0, 0x1, 0x7ffffffd}, {0x1d}, {0x6, 0x0, 0x0, 0x4000}]}) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x50) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815000100fe80000000000000080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r2}, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r3}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x11, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a0000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000011000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095000000"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.730954088s ago: executing program 2 (id=2233): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x2a, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r1, 0x6, 0x6, &(0x7f0000000040), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x702, 0xe, 0xffffffffffffffe3, &(0x7f0000000380)="eb00000000000010000000000000", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.577820113s ago: executing program 4 (id=2234): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x64b2074d57f2d605, 0x400000, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0xc, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x80090000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2204, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0x5, 0x5}, 0x104101, 0x0, 0x5, 0x0, 0x0, 0x200000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0xcd, &(0x7f0000000040), 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) ioctl$SIOCSIFHWADDR(r3, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000d534298d9205311675750ebf40b4ffa7f5d30ebffabfbd3ffb6be6bc43dfa454763cd0ed6954a9bef5aec9adbeccff968450c2c5fd51491db28b65244e5861906747fa62016a239fc534c31454f15bb2d787677bedf6dd1a3b3a2987e0e153966d8b1dbe2dc18e73de5d765419287f18b2b00415409c2f295505f5334bb6835900"/156], 0x50) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x14, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000fcffffff0000000080000000180100000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000006000000b703000007000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000005, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x2, 0x1000005, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffff7}, 0x0, 0x0, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000340)}, 0x0, 0x0, 0x0, 0x0, 0xf60, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"}) 3.492972037s ago: executing program 1 (id=2235): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x2020200, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffd}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket$kcm(0xa, 0x7, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1, 0xff}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000001000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000200)=0x5) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xe, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) socket$kcm(0x1e, 0x4, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x8044) 3.403101152s ago: executing program 0 (id=2236): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000200)='syz1\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f0000000180)={0x1, 0x80, 0xff, 0x2, 0xc, 0x4, 0x0, 0x10, 0x4004, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f0000000100)}, 0x90, 0x5, 0x6, 0x5, 0x7, 0x73e, 0x100, 0x0, 0x6, 0x0, 0x5}, r1, 0x5, r0, 0x8) r2 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x5, 0x4, 0x5}, {0x2, 0x3, 0xffffffff}]}, 0x94) close(r2) r3 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x2a, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe5}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$unix(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f00000002c0)="c3", 0x1}], 0x1, 0x0, 0x0, 0x40000}, 0x4c891) recvmsg$unix(r6, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000500)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x14690, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xb3b, 0xffffffffffbffff8}, 0x842, 0x0, 0x6, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r9, 0x29, 0x4c, 0x0, 0x4) write$cgroup_subtree(r7, &(0x7f00000000c0)=ANY=[], 0x6) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000540)={r8}, 0x8) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r10, 0x4008240b, &(0x7f0000000640)={0x4, 0x80, 0x8, 0xf8, 0x2, 0x3, 0x0, 0x7f, 0x10a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000600), 0x4}, 0x4021, 0x7, 0x9, 0x5, 0xd, 0xfffffff8, 0x9, 0x0, 0xe69, 0x0, 0xf}) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup(r12, &(0x7f0000000380)='syz0\x00', 0x200002, 0x0) sendmsg$inet(r2, &(0x7f0000000a80)={&(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000140)="bc", 0x1}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x11, 0x30}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) setsockopt$sock_attach_bpf(r3, 0x84, 0x64, &(0x7f0000000000)=r11, 0x10) 3.23679911s ago: executing program 2 (id=2237): r0 = socket$kcm(0x10, 0x2, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) socket$kcm(0xf, 0x3, 0x2) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={0xffffffffffffffff, 0x2000012, 0x0, 0x0, &(0x7f0000000c40), 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x2, 0x5, 0x84) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000010) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x91f, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848100000005e14060200fffc000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 3.197366887s ago: executing program 3 (id=2238): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6143, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x800}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000002c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@cred={{0x1c}}, @rights={{0x10}}], 0x30}, 0x10020) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r0, 0x5421, 0x0) 2.978111583s ago: executing program 2 (id=2239): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202064"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r0) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0x0, 0xb694, 0x8}, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x260, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0xe66291df232fba0c, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x8d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0x6f5f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/mnt\x00') ioctl$TUNSETIFF(r2, 0xb701, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000003000800000000000000000085000000870000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='freezer.parent_freezing\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x5, 0x9, 0x84, 0x154}, 0x50) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x4, 0xb9, &(0x7f0000000080)=""/185}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r1, &(0x7f0000000180)="cae020c838a96490be5d66d307fadaf2523a5ecda1e0cff4c90aea8174d385d49dd6cbac110091a54319f4fe1e52c89ff23f9f8adfe01be01f18c752fdbd3ebb5ffa55780b15f06c62b7f1502e0c01d4b882c3a912dab9398983b7816777a2217e70b8f899f9abc59f415c27205e48e9c6d7f0dbd6b3ecd2853562e770f631ff06fb5c03cd3b1e23d31b235011cd4e6a639f141a79edc83a4ba32ec90f6ed87a263901418efe5140b6f913eb4794a337d6997d026751a2fe7f70392b9e462427", &(0x7f0000000300)=""/251, 0x4}, 0x20) r5 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r5, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000480)="f4000900062b2c25fe80070000e4c8030000000f238466cc00007a000000ad6e911b51818463b40011000001", 0x2c}], 0x1}, 0x0) 2.802763802s ago: executing program 4 (id=2240): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000008000000ec0b0000000c0000000900000005000000000000000000000000000000005f2e2e00"], 0x0, 0x2d}, 0x20) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) close(0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRESDEC, @ANYBLOB="000000000000000000000000000000000f5146328ff91c1943bc715e195721f6d35d6f3616f199537fa48d7a7eabd0d67ee51723b7f2e3ef76f01eda9841"], 0x50) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x6, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000f80)}, 0x2400c865) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000000}, 0xc0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400400016000b63d25a80648c2594f92624fc60", 0x14}], 0x1}, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000001c0)=r2, 0x4) write$cgroup_subtree(r2, 0x0, 0x9) 2.710188718s ago: executing program 3 (id=2241): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) sendmsg$kcm(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000ec0)="0f6f", 0x2}], 0x1, 0x0, 0x7fe5}, 0x40080c0) 2.51907855s ago: executing program 3 (id=2242): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000380)="b9ff05000000008c9c18ed0f6fd2", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x1ff, 0x6, 0x2, 0x12862, 0xffffffffffffffff, 0x80, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2}, 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x94) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x87, 0x87, 0x4, [@datasec={0x8, 0xa, 0x0, 0xf, 0x3, [{0x3, 0x40, 0xb}, {0x1, 0x4, 0x8}, {0x5, 0x3, 0xf6}, {0x3, 0x8, 0x10001}, {0x1, 0x9cc, 0x9}, {0x1, 0x0, 0x2e56d064}, {0x4, 0x99d8, 0x3}, {0x2, 0xdaf, 0x5}, {0x5, 0x3, 0x10001}, {0x1, 0xffffffff, 0x8}], "d82fcb"}]}, {0x0, [0x61, 0x0]}}, &(0x7f00000003c0)=""/39, 0xa4, 0x27, 0x0, 0xf}, 0x28) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{0x1, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000500)=r0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000600)={{0x1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)='%pI4 \x00'}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0xf, 0x8, 0x40, 0xc0, 0x1, 0x6}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r7}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r7, &(0x7f0000000080), &(0x7f0000000180)=""/40}, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x208, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000016006bab9a3fe3d86e17a80a046b876c060048007ea60864160af36504811a0038001d60be06000000a705251e6182949a9a7b9b064acb84c9f4d4938037e70e4509c5bb4de385aa2adb88a899a655ab0000000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r9 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0x4) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r9}, 0x8) perf_event_open(0x0, 0x0, 0xb, r10, 0x3) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xd, '\x00', 0x0, r0, 0x1, 0x4, 0x1}, 0x50) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x1}, 0x50) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x48) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x7, [@struct={0x4, 0x1, 0x0, 0x4, 0x0, 0x1, [{0xa, 0x3, 0x6}]}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}]}, {0x0, [0x61, 0x0, 0x2e, 0x2e, 0x61]}}, 0x0, 0x5f}, 0x28) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="090000000b000000ff"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r13}, &(0x7f0000000040), &(0x7f0000000080)=r14}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_tracing={0x1a, 0xd, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @ldst={0x0, 0x3, 0x0, 0x7, 0x7, 0xfffffffffffffffc, 0xffffffffffffffff}]}, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x5, '\x00', r3, 0x17, r4, 0x8, &(0x7f0000000440)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000480)={0x1, 0x1, 0x2, 0x2}, 0x10, 0x2bb39, r0, 0x1, &(0x7f0000000800)=[r5, r6, r7, r10, r11, r12, r13, 0x1], &(0x7f0000000840)=[{0x0, 0x2, 0x10, 0x3}], 0x10, 0x2}, 0x94) socketpair(0x23, 0x2, 0x9, &(0x7f0000000140)) 2.51824737s ago: executing program 0 (id=2243): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0xd, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="720ac4ff0000000071a292460b1793239bc8880000000000f3f1c0edc8f9b5a75a0cb95cf4c9c883afce5f5768a40745bfb7542640a81849f6489650dfb8ced9e83c7bbc3526c9aac5bfd9f403f3e1333b18e0ab82f4be8e9a400014e72385b2ac6bf61e1c239f3922e28db9511e67ca285d02f9ca63c94e824176b3594e0f8ee880a3e09a"], &(0x7f0000000480)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0xff, 0x16, 0x2, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, @perf_config_ext={0x8, 0xe5}, 0x100000, 0xca, 0xd3d1, 0x5, 0x0, 0x0, 0x4000, 0x0, 0x20000, 0x0, 0xb64}, 0x0, 0x9, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000100000000000000f30e000018010000756c6c2500000000ff0700007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000088030000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe, 0x0, &(0x7f0000000400)="e877ef63393089c4eab1b74b2a58", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000480)="f4000900062b2c25fe80070000e4c8030000000f238466cc00007a000000ad6e911b51818463b40011000001", 0x2c}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000700)={@fallback=r4, 0x20, 0x1, 0xff, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000640)=[0x0], &(0x7f0000000680)=[0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b00)={r6, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000880)=[0x0], &(0x7f00000008c0), 0x0, 0x77, &(0x7f0000000900)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000940), &(0x7f0000000440), 0x8, 0xca, 0x8, 0x8, &(0x7f00000009c0)}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000b80)={0x0, r5, 0x0, 0x1, &(0x7f0000000b40)='\x00', 0x0}, 0x30) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000d40)=ANY=[@ANYRES32=r9, @ANYRES32=r6, @ANYBLOB="0d0000d73d6e59b5ee7124cd8682a9002000000000000000da9aa2287b0354d7cde9965e4bd3681d000000003c08df0a8257fd181649ad33c6a6881d4b91d7f606366c21efa6436a3119855177fb3865c8870e94e75623c5ce747a4e4052f64b9d9df775", @ANYRES32=r10, @ANYRES64=r8], 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="1f00000011000000", @ANYRES32=r0, @ANYBLOB="c312f806d06a95921bea609c89f79b764144bede38633731cfb3d49da65653ec0bd972362ceb4b9630883c1432f92b8975fb6acc855c205a621e523001cf0b91d1fa03984d7b3d33f61aa749121b7897c900e2cf94cb6004f5bbde0635afbd", @ANYRES32=r0, @ANYBLOB, @ANYRES64=r8], 0x20) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1000001}, 0x11004, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"/336], &(0x7f0000000080)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r11 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r11, &(0x7f0000003540)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000014006b04c84e21020af32c6e0a0675f800250002500100000017d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) openat$cgroup_ro(r7, &(0x7f0000000400)='cpuacct.stat\x00', 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0xec) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000040)="3c00000033000b1229ae3f7f03b261130124fc60100c03400c410000000300149215a2681cf6e50400003d490d20b735b16b6a44799406db26a57b35", 0x3c}], 0x1}, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_ro(r12, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r13, &(0x7f0000000640)=0x1, 0x12) 2.431744234s ago: executing program 1 (id=2244): bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000740)={0x1, 0x58, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000980)={0xffffffffffffffff, 0x58, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000003c0)}, {&(0x7f0000000580)="f5415eab6949d0413fcbea6fce85ba1a134693aaac9cf3e09031ee73e4bcfe000d9b69464bb753d241a4a772be45652decb3ef0b5689a19656e8a0c71b5d0b3692c6e49a51d8a174cfd8635532655ae53cd9f3d5df18d08366f2125f47711d94647f8d7d71d74e664a88333b802734edcf66772e0fe1bacbc5a533c2ec56c9051dbf3987ce00bd12d3b0eb216873f6fdb0ea6a73650b67cad310656514bc832bfbc7617f0dfb90562b22449846e5b1fcb5f193229eb2dc3774bebd23809867c68b576fbd488b", 0xc6}, {&(0x7f0000000440)="cc85f5b9b576eca5", 0x8}, {0x0}], 0x4, &(0x7f00000009c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r0, @broadcast, @remote}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @empty, @remote}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11}}], 0x88}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) close(r3) ioctl$SIOCSIFHWADDR(r3, 0x8b07, &(0x7f0000000040)={'wlan1\x00', @random="8f7ff0ff0600"}) ioctl$TUNSETDEBUG(r3, 0x400454c9, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x8, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x4, 0x7f}}, @fwd={0x8}, @var={0x5, 0x0, 0x0, 0xe, 0x5}]}, {0x0, [0x30, 0x3e, 0x2e, 0x0, 0x5f, 0x61]}}, &(0x7f0000000380)=""/132, 0x54, 0x84, 0x0, 0xfffffffe, 0x10000, @value=r3}, 0x28) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) write$cgroup_netprio_ifpriomap(r4, &(0x7f0000000480)={'vlan0', 0x32, 0x38}, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000100)="a7", 0x1}], 0x1}, 0x4011) sendmsg$inet(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000012c0)="f9", 0x1}], 0x1}, 0x48844) recvmsg(r5, &(0x7f0000000f80)={0x0, 0x0, 0x0}, 0x20) close(r4) ioctl$SIOCSIFHWADDR(r4, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) openat$cgroup_ro(r4, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000a80)="3c00000033000b12d25a80648c2594f90124fc60100c03400040000000200cbb9215a2281cf6b809f2db60490d20a735b16b6a44799406db26a57b35", 0x3c}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r8, 0x1, 0x19, 0x0, 0x349b95746fd423eb) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={0xffffffffffffffff, r2, 0x4, r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 2.356568707s ago: executing program 1 (id=2245): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1e, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x15, 0x0, 0x1, 0x7ffffffd}, {0x1d}, {0x6, 0x0, 0x0, 0x4000}]}) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x50) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815000100fe80000000000000080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r2}, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r3}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x11, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a0000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000011000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095000000"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.211319211s ago: executing program 2 (id=2246): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x40000000000001}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x60}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="180000000000000000000000000000001802", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0xe80, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.170904698s ago: executing program 4 (id=2247): syz_clone(0x100000, &(0x7f00000003c0)="9abcd679ff225c3ea3e6912374533f18135ef040ff6783364c6e4da817c4984177c75aa217d7800aadf75318aa27297c520551b8ebcf8ae0aee83311dc4da1b6300dfeab44a0e973563b51fee1995c6ce9cf13bf6209c6c2a4e27116deec38c15020ee02a888c45a4c7ad268497d94d0537989adf2fd4a8c997ce09b21f9eab5a75e746ec7dfd6ac3f08a36ca260bd934f849cea1b19122c16d3b2d2ffaaa2a3fce2b87feb16dabbc044137f69cf94cbd9", 0xb1, &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)="ee1dde0681f550b18255d3a34f6fe79155eb5ed687be88239ac9e9c3f2bd144c6691e5ec482c6647335159534dba") socket$kcm(0x29, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@struct={0x4, 0x1, 0x0, 0xf, 0x0, 0x5, [{0xa, 0x4}]}]}, {0x0, [0x5f, 0x0, 0x0, 0x5f, 0x61]}}, 0x0, 0x37}, 0x28) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x80, 0x0, 0x5d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xd}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed5de7e91cd360a136ce6203c23c00fe82000000000400875a65969f7e750701810000000000000029"], 0xfe1b) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="5eb200000400000000", @ANYRES32=0x1, @ANYBLOB="fcffffff00"/18, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32, @ANYBLOB="0d00ff0000000000830000000000000045"], 0x0}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(r0, 0x0, 0x20000040) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x29, 0xd, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x3b}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) sendmsg(r2, &(0x7f0000002500)={0x0, 0x0, 0x0}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) socket$kcm(0x2, 0x1000000000000002, 0x0) gettid() bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907a56675f37538ec86dd6317ce22667f11"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedc0790700117df37538e486dd6317ce220005"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r4) 1.862973389s ago: executing program 3 (id=2248): socket$kcm(0x10, 0x2, 0x0) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000011008188040f46ecdb00e3bd6efb440008", 0x15}], 0x1}, 0xc0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[@ANYRES16=r2], 0xfe33) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYRESDEC=r1], 0x0, 0x2, 0x0, 0x0, 0x41100, 0xe0c7e33e6f9f9c1f, '\x00', 0x0, @fallback=0x12, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x1ac50857989c44a4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r3, 0x29, 0x4b, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) r5 = socket$kcm(0xa, 0x3, 0x106) setsockopt$sock_attach_bpf(r5, 0x29, 0x16, 0x0, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000080000000000000000000181100", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r6, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x1d, &(0x7f0000000100), 0x4) sendmsg$inet(r8, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x10, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r9) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0xb31}, 0x10042, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2b71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[], 0x0, 0x26, 0x0, 0x0, 0xfffffffd}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d80)=@bpf_lsm={0x1d, 0x1c, &(0x7f0000000840)=ANY=[@ANYBLOB="180000009b040800000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000040000850000000600000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000580)='syzkaller\x00', 0x8, 0x2c, &(0x7f0000000800)=""/44, 0x41100, 0x2b, '\x00', 0x0, 0x1b, r10, 0x8, &(0x7f0000000c40)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000c80)={0x5, 0x8, 0x4, 0x5ff5}, 0x10, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000d00)=[{0x1, 0x5, 0xb, 0x6}, {0x3, 0x5, 0xe, 0x1}, {0x3, 0x2, 0x10, 0xb}, {0x3, 0x3, 0xb}, {0x3, 0x3, 0x9, 0x9}, {0x3, 0x5, 0x3, 0xc}, {0x3, 0x1, 0x5, 0x1}], 0x10, 0xfff}, 0x94) 1.743218589s ago: executing program 0 (id=2249): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x805, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, 0x0, 0x4008004) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000001000000000000000000000085000000a8000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1f, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_config_ext={0x3, 0xe5}, 0x10c002, 0x4, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$unix(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000001780)='\",', 0x2}], 0x1, 0x0, 0x0, 0x40000}, 0x4c891) write$cgroup_subtree(r0, &(0x7f00000000c0)=ANY=[], 0x6) 1.715799884s ago: executing program 1 (id=2250): socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x0, &(0x7f00000003c0)=[{0x0, 0x0, 0x80000000}, {0x1000000a, 0x4}], 0x10, 0x4}, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000060000000000000000164b94342878d448d88a41421cd10b82ee3f63b7edd0590099f0b1950d8adb97cef68985bf65a91b05b9487949a7a796ed89356bf15ab81704ac41475b8be404704fdf39e9d93ece581a7e3dac7f3e8483cc9dbe6b5b7f8d0890f4923d603c565266a5fcfd341843316ae94fc854458bf57730a4ce92b5e55ad7273fb12e8590b8299369c75a6a11db63aec5727d6b7b5ab3f5add84e5c44f03105799adb5e0dddc56a6c0205748db1fc20ef1f8cfb99f2ea7637e8bbc1df432872d5568974aa0b771349df9ba7e31848959da1da9e733e7e784046e00cf5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x10, 0x0, 0x80, 0x0, 0x0, 0x5d31, 0x188408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x5}, 0x40, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x6, @perf_config_ext, 0x10c002, 0x89, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0xa, 0x3, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x21, &(0x7f00000001c0), 0x4) sendmsg$kcm(r3, &(0x7f0000000100)={&(0x7f0000000880)=@l2tp6={0xa, 0x1100, 0x0, @empty, 0xfffffffd, 0xffffffff}, 0x80, 0x0}, 0x4810) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, r2, 0x0, 0x5c, 0x0}, 0x30) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x27}, 0x30040800) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xb, &(0x7f0000000100), 0x20) socket$kcm(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000200)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r6 = openat$cgroup_type(r5, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r6, &(0x7f0000000280), 0x9) r7 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_pid(r7, &(0x7f0000000080), 0x12) openat$cgroup_ro(r8, 0x0, 0x275a, 0x0) 1.487220802s ago: executing program 2 (id=2251): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x64b2074d57f2d605, 0x400000, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0xc, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x80090000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2204, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0x5, 0x5}, 0x104101, 0x0, 0x5, 0x0, 0x0, 0x200000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0xcd, &(0x7f0000000040), 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) ioctl$SIOCSIFHWADDR(r3, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000d534298d9205311675750ebf40b4ffa7f5d30ebffabfbd3ffb6be6bc43dfa454763cd0ed6954a9bef5aec9adbeccff968450c2c5fd51491db28b65244e5861906747fa62016a239fc534c31454f15bb2d787677bedf6dd1a3b3a2987e0e153966d8b1dbe2dc18e73de5d765419287f18b2b00415409c2f295505f5334bb6835900"/156], 0x50) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x14, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000fcffffff0000000080000000180100000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000006000000b703000007000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000005, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x2, 0x1000005, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffff7}, 0x0, 0x0, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000340)}, 0x0, 0x0, 0x0, 0x0, 0xf60, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"}) 1.411519105s ago: executing program 0 (id=2252): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)="89000000150081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014009080c00000000009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4000000) 1.411037125s ago: executing program 1 (id=2253): close(0x3) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x60}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa06"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0xff00}, 0x48) 1.254754301s ago: executing program 0 (id=2254): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x2020200, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffd}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket$kcm(0xa, 0x7, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1, 0xff}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000001000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xe, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa300000000000007030000f1feffff720af0fff8ffffff71a4f0ff0000000071103d00000000007d400500000000002604000001ed00000f030000000000007c440000000000006b0a00fe000000007203000000000006b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f18564a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c26fc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccc99069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad24b89b6a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c87852730a3bd7ac923fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca4856ff03b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec860cde7c79f7b4d4e24c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b450100000001000000393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00400000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd599c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb80610eb37bd2d40ebdfed687f0b093e68f10b72146a0b749ee2105e2da94a288146abbbaf7c0b24fe0000000000000000f1a4f4de6a8d12dc9e71a20cbd412898586843b534d36e21379a8a06133c1babde9e5bd5b6afc5f684aada43ee560e800f58cb33b8483f6518abde7c86bd5d389c1b3c40fdd4bebe4adf87b1025ff57eb50984cc5bad9ea1c15484ea627c3c1501d612ed65939266e7332966f03e0376076e7c5dfe25f367dda7f69db89829b360dd2f59cbaad10f13e269eca792725bbacb96aa0a5c426ca76f84322661"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) socket$kcm(0x1e, 0x4, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x8044) 743.802436ms ago: executing program 3 (id=2255): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000400), 0x8) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@generic={&(0x7f00000001c0)='./file0\x00', 0x0, 0x8}, 0x18) close(r0) (async) r1 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xf, &(0x7f00000003c0)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', r2, 0x0, r1, 0x8, &(0x7f0000000240)={0x9, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000540)=[{0x5, 0x2, 0x6, 0xa}, {0x1, 0x4, 0x9, 0x8}], 0x10, 0x7}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', r2, 0x0, r0}, 0x94) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000010000003f0000004000000042000000", @ANYRES32, @ANYBLOB="0000000000ffffffffffffff7f00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000780)="7910", &(0x7f0000001a40), 0x1007, r3}, 0x38) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) (async) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x100080, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xdb}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0xa) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) (async) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000600)={0x0, &(0x7f00000006c0)=""/145, &(0x7f0000000480), &(0x7f0000000780), 0x4, r3}, 0x38) 171.176291ms ago: executing program 2 (id=2256): close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0}, 0x8061, 0x4, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0x1, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r2}, &(0x7f0000000680), &(0x7f00000006c0)}, 0x20) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x9, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r4, &(0x7f0000000340)='^A'}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)}, 0x8000) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x13, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000800110300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x21, 0x2, 0x2) socket$kcm(0x11, 0xa, 0x300) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="373e17aefc0201070200100100000018000000", 0x13}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 145.426596ms ago: executing program 3 (id=2257): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xeffffffc, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r0, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000018000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x50) 105.965423ms ago: executing program 1 (id=2258): socket$kcm(0x2, 0x3, 0x2) socket$kcm(0x2, 0x200000000000001, 0x106) socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'bond_slave_1\x00', @random="0200ac7f7f00"}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0xfd, 0x0, 0x0, 0x0, 0x4000, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="a2", 0x1}, {&(0x7f0000000240)="47dbd50e29996b9626b56b52e0434d90b9658489153954d4178ff592c33df3d53f25941efa34cb21386fce", 0x2b}, {&(0x7f00000002c0)="6cf88a454be355232ce4eb5a023846dad7219d15b18b9d08592edb6ae58b1d1cb462e339", 0x24}], 0x3}, 0x4002041) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000500)="16000000140081ae0000dc676f97daf01e2357f9ffff", 0x16}], 0x1}, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x21188, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x5, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000031000b03d25a806f8c6394f90424fc60", 0x14}], 0x1}, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x7, &(0x7f0000000d80), 0x4) r4 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb01001800000000001400000014000000060000000400000001000006040000000200000000000000000041185f00"], &(0x7f0000000400)=""/188, 0x32, 0xbc, 0x1}, 0x28) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000100)) sendmsg$inet(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="2000000013006bcd9e3fe3dc6e48aa310b6b8703340000001f03000000000000", 0x20}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20004002) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="05"], 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001f00)=ANY=[@ANYBLOB="1e000000000000000b0000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000800005e000000000000000000f4630c8e"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000140)={r5, 0x0, &(0x7f0000000080)=""/144}, 0x20) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0xdc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7f, 0xfffffffffffffffa}, 0x0, 0x0, 0xc2be, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) close(0xffffffffffffffff) socket$kcm(0x2, 0x5, 0x106) perf_event_open(0x0, 0x0, 0xffeffffffffffffd, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x1, @perf_config_ext={0x2, 0x140000000000000}, 0x81, 0x3, 0x0, 0x1, 0xe, 0x3, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) 866.09µs ago: executing program 0 (id=2259): perf_event_open(&(0x7f0000000140)={0x2, 0xffffffffffffff6e, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffffffd}, 0x10c002, 0xac5d, 0x0, 0x0, 0x84, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x10, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc00d100, 0x0, 0x0, 0x0, 0x100}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xb6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0xe, 0x0, &(0x7f00000000c0)="9dbaac999f69835fc48373a1ee57", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 4 (id=2260): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x9, 0x1, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="852000000400ac51"], &(0x7f0000000200)='syzkaller\x00', 0x29, 0x0, 0x0, 0x41000, 0x4d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0xa, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x0, 0xf, 0x80000000, 0x9}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000340)=[r1, r1, r1, r1, r1], &(0x7f0000000380)=[{0x2, 0x1, 0xf, 0x5}], 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000bc0)={{r1}, &(0x7f0000000b40), &(0x7f0000000b80)}, 0x20) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r4 = socket$kcm(0x10, 0x2, 0x10) recvmsg$kcm(r4, &(0x7f00000039c0)={0x0, 0x0, &(0x7f00000038c0)=[{&(0x7f0000000240)=""/146, 0x92}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f00000028c0)=""/4096, 0x1000}], 0x3}, 0x2002) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f00000003c0)={r2, r1}, 0xc) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)}, 0x0) r7 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f00000001c0)={&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000002900000043"], 0x18}, 0xc) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') kernel console output (not intermixed with test programs): 0x68/0xd2 [ 298.013395][ T7770] RIP: 0033:0x7fcf4c19c819 [ 298.017843][ T7770] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 298.037467][ T7770] RSP: 002b:00007fcf4d02c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 298.046037][ T7770] RAX: ffffffffffffffda RBX: 00007fcf4c415fa0 RCX: 00007fcf4c19c819 [ 298.054031][ T7770] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000c [ 298.062019][ T7770] RBP: 00007fcf4c232c91 R08: 0000000000000000 R09: 0000000000000000 [ 298.070004][ T7770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 298.077990][ T7770] R13: 00007fcf4c416038 R14: 00007fcf4c415fa0 R15: 00007ffd03b212a8 [ 298.085998][ T7770] [ 300.551476][ T7795] FAULT_INJECTION: forcing a failure. [ 300.551476][ T7795] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 300.567836][ T7795] CPU: 0 PID: 7795 Comm: syz.3.1061 Not tainted syzkaller #0 [ 300.575286][ T7795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 300.585473][ T7795] Call Trace: [ 300.588791][ T7795] [ 300.591753][ T7795] dump_stack_lvl+0x188/0x24e [ 300.596499][ T7795] ? show_regs_print_info+0x12/0x12 [ 300.601762][ T7795] ? load_image+0x400/0x400 [ 300.606357][ T7795] ? __lock_acquire+0x7d10/0x7d10 [ 300.611506][ T7795] ? snprintf+0xe5/0x140 [ 300.615815][ T7795] should_fail_ex+0x399/0x4d0 [ 300.620551][ T7795] _copy_to_user+0x2c/0x130 [ 300.625111][ T7795] simple_read_from_buffer+0xe3/0x150 [ 300.630635][ T7795] proc_fail_nth_read+0x1a6/0x220 [ 300.635927][ T7795] ? proc_fault_inject_write+0x310/0x310 [ 300.641782][ T7795] ? fsnotify_perm+0x248/0x550 [ 300.646574][ T7795] ? proc_fault_inject_write+0x310/0x310 [ 300.652229][ T7795] vfs_read+0x2de/0xa00 [ 300.656641][ T7795] ? kernel_read+0x1e0/0x1e0 [ 300.661361][ T7795] ? __fget_files+0x28/0x4b0 [ 300.665987][ T7795] ? __fget_files+0x28/0x4b0 [ 300.670650][ T7795] ? __fget_files+0x43d/0x4b0 [ 300.675446][ T7795] ? __fdget_pos+0x2ae/0x360 [ 300.680059][ T7795] ? ksys_read+0x71/0x250 [ 300.684503][ T7795] ksys_read+0x14c/0x250 [ 300.688803][ T7795] ? vfs_write+0xa30/0xa30 [ 300.693354][ T7795] ? syscall_enter_from_user_mode+0x2a/0x80 [ 300.699319][ T7795] do_syscall_64+0x4c/0xa0 [ 300.703769][ T7795] ? clear_bhb_loop+0x60/0xb0 [ 300.708552][ T7795] ? clear_bhb_loop+0x60/0xb0 [ 300.713252][ T7795] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 300.719262][ T7795] RIP: 0033:0x7fcf4c15d04e [ 300.723784][ T7795] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 300.743493][ T7795] RSP: 002b:00007fcf4d02bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 300.752019][ T7795] RAX: ffffffffffffffda RBX: 00007fcf4d02c6c0 RCX: 00007fcf4c15d04e [ 300.760091][ T7795] RDX: 000000000000000f RSI: 00007fcf4d02c0a0 RDI: 0000000000000007 [ 300.768081][ T7795] RBP: 00007fcf4d02c090 R08: 0000000000000000 R09: 0000000000000000 [ 300.776153][ T7795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 300.784136][ T7795] R13: 00007fcf4c416038 R14: 00007fcf4c415fa0 R15: 00007ffd03b212a8 [ 300.792139][ T7795] [ 301.335033][ T7818] netlink: 'syz.4.1070': attribute type 1 has an invalid length. [ 301.423622][ T7818] netlink: 'syz.4.1070': attribute type 3 has an invalid length. [ 301.511591][ T7818] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1070'. [ 301.582242][ T7826] netlink: 'syz.2.1072': attribute type 29 has an invalid length. [ 301.615767][ T7826] netlink: 'syz.2.1072': attribute type 29 has an invalid length. [ 302.243128][ T7826] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.1072'. [ 302.286004][ T7840] device syzkaller0 entered promiscuous mode [ 304.943462][ T7826] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 304.951495][ T7826] CPU: 1 PID: 7826 Comm: syz.2.1072 Not tainted syzkaller #0 [ 304.958930][ T7826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 304.969045][ T7826] Call Trace: [ 304.972323][ T7826] [ 304.975302][ T7826] dump_stack_lvl+0x188/0x24e [ 304.980103][ T7826] ? show_regs_print_info+0x12/0x12 [ 304.985386][ T7826] ? load_image+0x400/0x400 [ 304.989943][ T7826] sysfs_warn_dup+0x8a/0xa0 [ 304.994455][ T7826] sysfs_do_create_link_sd+0xc0/0x110 [ 304.999831][ T7826] device_add+0x7ed/0xfb0 [ 305.004162][ T7826] wiphy_register+0x1d9f/0x2ac0 [ 305.009147][ T7826] ? cfg80211_event_work+0x40/0x40 [ 305.014337][ T7826] ? minstrel_ht_alloc+0x894/0xa20 [ 305.019566][ T7826] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 305.025635][ T7826] ieee80211_register_hw+0x2d00/0x39f0 [ 305.031097][ T7826] ? ieee80211_register_hw+0xf31/0x39f0 [ 305.036636][ T7826] ? ieee80211_register_hw+0xe31/0x39f0 [ 305.042196][ T7826] ? ieee80211_tasklet_handler+0x20/0x20 [ 305.047863][ T7826] ? memset+0x1e/0x40 [ 305.051875][ T7826] ? __hrtimer_init+0x186/0x270 [ 305.056723][ T7826] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 305.062653][ T7826] hwsim_new_radio_nl+0xafa/0xce0 [ 305.067756][ T7826] genl_family_rcv_msg_doit+0x22a/0x330 [ 305.073417][ T7826] ? end_current_label_crit_section+0x170/0x170 [ 305.079685][ T7826] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 305.086298][ T7826] ? bpf_lsm_capable+0x5/0x10 [ 305.090997][ T7826] ? security_capable+0x85/0xb0 [ 305.095971][ T7826] genl_rcv_msg+0x604/0x790 [ 305.100495][ T7826] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 305.106679][ T7826] ? genl_bind+0x360/0x360 [ 305.111287][ T7826] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 305.117646][ T7826] ? lock_acquire+0x225/0x4a0 [ 305.122458][ T7826] netlink_rcv_skb+0x1fb/0x450 [ 305.127247][ T7826] ? genl_bind+0x360/0x360 [ 305.131681][ T7826] ? netlink_ack+0x1170/0x1170 [ 305.136574][ T7826] ? down_read+0x1a8/0x2d0 [ 305.141017][ T7826] genl_rcv+0x24/0x40 [ 305.145190][ T7826] netlink_unicast+0x74d/0x8d0 [ 305.150000][ T7826] netlink_sendmsg+0x8ad/0xbd0 [ 305.154882][ T7826] ? netlink_getsockopt+0x550/0x550 [ 305.160366][ T7826] ? aa_sock_msg_perm+0x94/0x150 [ 305.165337][ T7826] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 305.170746][ T7826] ? security_socket_sendmsg+0x7c/0xa0 [ 305.176300][ T7826] ? netlink_getsockopt+0x550/0x550 [ 305.181611][ T7826] ____sys_sendmsg+0x5be/0x970 [ 305.186428][ T7826] ? __sys_sendmsg_sock+0x30/0x30 [ 305.191473][ T7826] ? __import_iovec+0x315/0x500 [ 305.196355][ T7826] ? import_iovec+0x6f/0xa0 [ 305.200901][ T7826] ___sys_sendmsg+0x2a2/0x360 [ 305.205694][ T7826] ? __sys_sendmsg+0x290/0x290 [ 305.210502][ T7826] ? ktime_get_real_ts64+0x440/0x440 [ 305.216195][ T7826] __se_sys_sendmsg+0x1bb/0x2a0 [ 305.221160][ T7826] ? __x64_sys_sendmsg+0x80/0x80 [ 305.226136][ T7826] ? lockdep_hardirqs_on+0x94/0x140 [ 305.231361][ T7826] do_syscall_64+0x4c/0xa0 [ 305.235808][ T7826] ? clear_bhb_loop+0x60/0xb0 [ 305.240510][ T7826] ? clear_bhb_loop+0x60/0xb0 [ 305.245243][ T7826] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 305.251393][ T7826] RIP: 0033:0x7fd412b9c819 [ 305.255871][ T7826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 305.275612][ T7826] RSP: 002b:00007fd413982028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 305.284090][ T7826] RAX: ffffffffffffffda RBX: 00007fd412e15fa0 RCX: 00007fd412b9c819 [ 305.292090][ T7826] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000c [ 305.300226][ T7826] RBP: 00007fd412c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 305.308220][ T7826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 305.316305][ T7826] R13: 00007fd412e16038 R14: 00007fd412e15fa0 R15: 00007ffd2af2cc98 [ 305.324333][ T7826] [ 305.563381][ T7867] netlink: 'syz.1.1095': attribute type 29 has an invalid length. [ 305.607526][ T7867] netlink: 'syz.1.1095': attribute type 29 has an invalid length. [ 305.814509][ T7873] netlink: 'syz.2.1087': attribute type 1 has an invalid length. [ 305.868431][ T7873] netlink: 'syz.2.1087': attribute type 3 has an invalid length. [ 305.946383][ T7873] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1087'. [ 306.223693][ T7869] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.1095'. [ 306.551491][ T7869] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 308.545131][ T7896] FAULT_INJECTION: forcing a failure. [ 308.545131][ T7896] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 308.605706][ T7896] CPU: 0 PID: 7896 Comm: syz.4.1094 Not tainted syzkaller #0 [ 308.613383][ T7896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 308.623488][ T7896] Call Trace: [ 308.626814][ T7896] [ 308.629776][ T7896] dump_stack_lvl+0x188/0x24e [ 308.634694][ T7896] ? show_regs_print_info+0x12/0x12 [ 308.639952][ T7896] ? load_image+0x400/0x400 [ 308.644510][ T7896] ? __lock_acquire+0x7d10/0x7d10 [ 308.649621][ T7896] should_fail_ex+0x399/0x4d0 [ 308.654363][ T7896] prepare_alloc_pages+0x1e2/0x5f0 [ 308.659567][ T7896] __alloc_pages+0x130/0x4f0 [ 308.664216][ T7896] ? zone_statistics+0x170/0x170 [ 308.669225][ T7896] ? wp_page_copy+0xcd2/0x1680 [ 308.674048][ T7896] ? verify_lock_unused+0x140/0x140 [ 308.679310][ T7896] __folio_alloc+0xe/0x30 [ 308.683691][ T7896] vma_alloc_folio+0x4a3/0x900 [ 308.688524][ T7896] wp_page_copy+0x28b/0x1680 [ 308.693164][ T7896] ? do_wp_page+0x67f/0x1680 [ 308.697807][ T7896] ? fault_dirty_shared_page+0x3c0/0x3c0 [ 308.703509][ T7896] handle_mm_fault+0x1d19/0x3ee0 [ 308.708502][ T7896] ? mt_find+0x157/0x830 [ 308.712816][ T7896] ? numa_migrate_prep+0x250/0x250 [ 308.718071][ T7896] ? lock_chain_count+0x20/0x20 [ 308.722975][ T7896] ? lock_mm_and_find_vma+0xae/0x2f0 [ 308.728391][ T7896] do_user_addr_fault+0x51f/0xb10 [ 308.733507][ T7896] exc_page_fault+0x60/0x100 [ 308.738176][ T7896] asm_exc_page_fault+0x22/0x30 [ 308.743090][ T7896] RIP: 0010:copy_user_enhanced_fast_string+0xa/0x40 [ 308.749734][ T7896] Code: ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 8d 0c ca 89 ca eb 20 0f 01 cb 83 fa 40 72 38 89 d1 a4 31 c0 0f 01 ca c3 89 ca eb 0a 90 90 90 90 90 90 90 90 90 90 [ 308.769378][ T7896] RSP: 0018:ffffc90003397a68 EFLAGS: 00050206 [ 308.775554][ T7896] RAX: ffffffff84114f01 RBX: 00000000000059a0 RCX: 0000000000000be0 [ 308.783631][ T7896] RDX: 00000000000059a0 RSI: ffff8880372e4dc0 RDI: 0000200000005000 [ 308.791628][ T7896] RBP: 0000000000000000 R08: ffff8880372e599f R09: 1ffff11006e5cb33 [ 308.799620][ T7896] R10: dffffc0000000000 R11: ffffed1006e5cb34 R12: 00007fffffff9660 [ 308.807609][ T7896] R13: dffffc0000000000 R14: 0000200000000240 R15: ffff8880372e0000 [ 308.815607][ T7896] ? _copy_to_user+0xc1/0x130 [ 308.820349][ T7896] _copy_to_user+0xea/0x130 [ 308.824872][ T7896] __htab_map_lookup_and_delete_batch+0x1cea/0x2060 [ 308.831511][ T7896] ? lookup_nulls_elem_raw+0x160/0x160 [ 308.837080][ T7896] ? __fdget+0x17c/0x200 [ 308.841443][ T7896] ? __htab_percpu_map_update_elem+0x700/0x700 [ 308.847610][ T7896] bpf_map_do_batch+0x2c8/0x600 [ 308.852478][ T7896] ? bpf_lsm_bpf+0x5/0x10 [ 308.856907][ T7896] ? security_bpf+0x7a/0xa0 [ 308.861427][ T7896] __sys_bpf+0x6f7/0x780 [ 308.865692][ T7896] ? bpf_link_show_fdinfo+0x380/0x380 [ 308.871092][ T7896] ? lock_chain_count+0x20/0x20 [ 308.875986][ T7896] __x64_sys_bpf+0x78/0x90 [ 308.880461][ T7896] do_syscall_64+0x4c/0xa0 [ 308.885075][ T7896] ? clear_bhb_loop+0x60/0xb0 [ 308.889779][ T7896] ? clear_bhb_loop+0x60/0xb0 [ 308.894592][ T7896] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 308.900500][ T7896] RIP: 0033:0x7f69bbd9c819 [ 308.904933][ T7896] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 308.924642][ T7896] RSP: 002b:00007f69bcba2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 308.933074][ T7896] RAX: ffffffffffffffda RBX: 00007f69bc016090 RCX: 00007f69bbd9c819 [ 308.941058][ T7896] RDX: 0000000000000038 RSI: 0000200000000000 RDI: 0000000000000018 [ 308.949251][ T7896] RBP: 00007f69bcba2090 R08: 0000000000000000 R09: 0000000000000000 [ 308.957234][ T7896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 308.965247][ T7896] R13: 00007f69bc016128 R14: 00007f69bc016090 R15: 00007ffcf747e7c8 [ 308.973272][ T7896] [ 309.640401][ T7926] netlink: 'syz.4.1103': attribute type 29 has an invalid length. [ 309.656009][ T7926] netlink: 'syz.4.1103': attribute type 29 has an invalid length. [ 309.801298][ T7930] netlink: 'syz.3.1104': attribute type 13 has an invalid length. [ 309.834653][ T7930] netlink: 24859 bytes leftover after parsing attributes in process `syz.3.1104'. [ 310.258868][ T7944] netlink: 'syz.2.1107': attribute type 1 has an invalid length. [ 310.266697][ T7944] netlink: 'syz.2.1107': attribute type 3 has an invalid length. [ 310.308032][ T7944] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1107'. [ 310.310638][ T7926] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.1103'. [ 310.639396][ T7926] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 314.155628][ T7981] netlink: 'syz.3.1119': attribute type 3 has an invalid length. [ 314.171935][ T7981] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1119'. [ 316.553714][ T7997] netlink: 'syz.0.1126': attribute type 1 has an invalid length. [ 316.778098][ T7997] netlink: 'syz.0.1126': attribute type 3 has an invalid length. [ 316.958624][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.965047][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.977838][ T7997] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1126'. [ 320.929957][ T8034] netlink: 'syz.1.1139': attribute type 13 has an invalid length. [ 320.953456][ T8036] netlink: 'syz.4.1141': attribute type 1 has an invalid length. [ 321.019072][ T8034] netlink: 24859 bytes leftover after parsing attributes in process `syz.1.1139'. [ 321.048954][ T8036] netlink: 'syz.4.1141': attribute type 3 has an invalid length. [ 321.097656][ T8036] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1141'. [ 321.473032][ T8052] netlink: 'syz.4.1148': attribute type 39 has an invalid length. [ 323.102282][ T8083] netlink: 'syz.2.1156': attribute type 13 has an invalid length. [ 323.149012][ T8083] netlink: 24859 bytes leftover after parsing attributes in process `syz.2.1156'. [ 323.273526][ T8084] netlink: 'syz.1.1159': attribute type 1 has an invalid length. [ 323.367517][ T8084] netlink: 'syz.1.1159': attribute type 3 has an invalid length. [ 323.520783][ T8084] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1159'. [ 326.177145][ T8108] netlink: 'syz.4.1168': attribute type 15 has an invalid length. [ 328.088322][ T8139] netlink: 'syz.1.1178': attribute type 11 has an invalid length. [ 328.574300][ T8142] netlink: 'syz.3.1181': attribute type 1 has an invalid length. [ 328.607438][ T8142] netlink: 'syz.3.1181': attribute type 3 has an invalid length. [ 328.637382][ T8142] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1181'. [ 331.444555][ T8164] netlink: 'syz.2.1188': attribute type 11 has an invalid length. [ 331.599702][ T8164] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1188'. [ 331.723622][ T8164] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 332.192246][ T8176] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.1191'. [ 332.258468][ T8176] netlink: 'syz.0.1191': attribute type 10 has an invalid length. [ 336.164049][ T8203] netlink: 'syz.4.1199': attribute type 1 has an invalid length. [ 336.176958][ T8203] netlink: 'syz.4.1199': attribute type 3 has an invalid length. [ 336.187037][ T8203] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1199'. [ 336.380080][ T8215] netlink: 'syz.3.1202': attribute type 1 has an invalid length. [ 336.429526][ T8215] netlink: 'syz.3.1202': attribute type 3 has an invalid length. [ 336.581341][ T8215] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1202'. [ 336.720581][ T8217] netlink: 'syz.0.1205': attribute type 39 has an invalid length. [ 339.065302][ T8234] Ÿë: port 1(gretap0) entered blocking state [ 339.091573][ T8234] Ÿë: port 1(gretap0) entered disabled state [ 339.208634][ T8234] device gretap0 entered promiscuous mode [ 339.499853][ T8250] netlink: 'syz.2.1217': attribute type 11 has an invalid length. [ 339.630313][ T8250] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1217'. [ 339.760276][ T8250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 340.706840][ T8278] netlink: 'syz.3.1227': attribute type 39 has an invalid length. [ 341.603536][ T8292] delete_channel: no stack [ 341.647607][ T8296] netlink: 'syz.3.1235': attribute type 4 has an invalid length. [ 341.647676][ T8292] delete_channel: no stack [ 341.735688][ T8296] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1235'. [ 341.786211][ T8296] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 343.020206][ T8329] delete_channel: no stack [ 343.038194][ T8329] delete_channel: no stack [ 343.110798][ T8329] netlink: 'syz.0.1244': attribute type 4 has an invalid length. [ 343.199944][ T8329] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1244'. [ 343.291851][ T8329] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 343.695077][ T8337] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.1247'. [ 343.970495][ T8337] bridge_slave_1: default FDB implementation only supports local addresses [ 346.830756][ T8385] netlink: 'syz.1.1265': attribute type 40 has an invalid length. [ 347.147579][ T8392] netlink: 'syz.3.1269': attribute type 21 has an invalid length. [ 347.178139][ T8392] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1269'. [ 347.724024][ T8403] netlink: 'syz.3.1272': attribute type 10 has an invalid length. [ 348.161786][ T8408] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1274'. [ 348.374318][ T8413] netlink: 'syz.4.1275': attribute type 10 has an invalid length. [ 348.468764][ T8418] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1276'. [ 348.827105][ T8430] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 348.986150][ T8430] netlink: 'syz.0.1281': attribute type 10 has an invalid length. [ 349.015407][ T8430] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1281'. [ 349.593634][ T8447] netlink: 'syz.3.1287': attribute type 21 has an invalid length. [ 349.649457][ T8447] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1287'. [ 350.486446][ T8461] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 350.493797][ T8461] IPv6: NLM_F_CREATE should be set when creating new route [ 350.501293][ T8461] IPv6: NLM_F_CREATE should be set when creating new route [ 350.508582][ T8461] IPv6: NLM_F_CREATE should be set when creating new route [ 351.826634][ T8478] netlink: 'syz.4.1298': attribute type 4 has an invalid length. [ 352.594874][ T8500] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1303'. [ 354.583962][ T8521] FAULT_INJECTION: forcing a failure. [ 354.583962][ T8521] name failslab, interval 1, probability 0, space 0, times 0 [ 354.633344][ T8521] CPU: 1 PID: 8521 Comm: syz.1.1310 Not tainted syzkaller #0 [ 354.640897][ T8521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 354.651019][ T8521] Call Trace: [ 354.654432][ T8521] [ 354.657400][ T8521] dump_stack_lvl+0x188/0x24e [ 354.662158][ T8521] ? show_regs_print_info+0x12/0x12 [ 354.667411][ T8521] ? load_image+0x400/0x400 [ 354.671975][ T8521] ? __might_sleep+0xd0/0xd0 [ 354.676619][ T8521] ? __lock_acquire+0x7d10/0x7d10 [ 354.681920][ T8521] should_fail_ex+0x399/0x4d0 [ 354.686814][ T8521] should_failslab+0x5/0x20 [ 354.691368][ T8521] slab_pre_alloc_hook+0x59/0x310 [ 354.696451][ T8521] ? allocate_cgrp_cset_links+0xc9/0x320 [ 354.702150][ T8521] __kmem_cache_alloc_node+0x4f/0x260 [ 354.707581][ T8521] ? allocate_cgrp_cset_links+0xc9/0x320 [ 354.713433][ T8521] kmalloc_trace+0x26/0xe0 [ 354.717987][ T8521] allocate_cgrp_cset_links+0xc9/0x320 [ 354.723490][ T8521] find_css_set+0xa1a/0x15d0 [ 354.728217][ T8521] ? trace_event_raw_event_lock+0x250/0x250 [ 354.734340][ T8521] ? trace_event_raw_event_lock+0x250/0x250 [ 354.740464][ T8521] ? cgroup_migrate_prepare_dst+0x6f0/0x6f0 [ 354.746536][ T8521] ? mark_lock+0x94/0x320 [ 354.750950][ T8521] cgroup_migrate_prepare_dst+0x12c/0x6f0 [ 354.757170][ T8521] cgroup_attach_task+0x546/0x870 [ 354.762256][ T8521] ? cgroup_attach_task+0x20f/0x870 [ 354.767500][ T8521] ? cgroup_migrate_execute+0xf30/0xf30 [ 354.773211][ T8521] ? get_task_cred+0x1f/0x370 [ 354.777943][ T8521] ? get_task_cred+0x2f0/0x370 [ 354.782754][ T8521] ? get_task_cred+0x1f/0x370 [ 354.787480][ T8521] __cgroup1_procs_write+0x2f5/0x3f0 [ 354.792922][ T8521] ? cgroup_pidlist_destroy_work_fn+0x210/0x210 [ 354.799322][ T8521] ? cgroup_pidlist_stop+0xf0/0xf0 [ 354.804491][ T8521] cgroup_file_write+0x2c5/0x690 [ 354.809486][ T8521] ? read_lock_is_recursive+0x10/0x10 [ 354.814910][ T8521] ? cgroup_seqfile_stop+0xd0/0xd0 [ 354.820108][ T8521] ? cgroup_seqfile_stop+0xd0/0xd0 [ 354.825271][ T8521] kernfs_fop_write_iter+0x3b2/0x520 [ 354.830613][ T8521] vfs_write+0x4b1/0xa30 [ 354.834916][ T8521] ? file_end_write+0x250/0x250 [ 354.839932][ T8521] ? __fget_files+0x43d/0x4b0 [ 354.844750][ T8521] ? __fdget_pos+0x2ae/0x360 [ 354.849387][ T8521] ? ksys_write+0x71/0x250 [ 354.853859][ T8521] ksys_write+0x14c/0x250 [ 354.858241][ T8521] ? __ia32_sys_read+0x80/0x80 [ 354.863211][ T8521] ? lockdep_hardirqs_on+0x94/0x140 [ 354.868461][ T8521] do_syscall_64+0x4c/0xa0 [ 354.873028][ T8521] ? clear_bhb_loop+0x60/0xb0 [ 354.877754][ T8521] ? clear_bhb_loop+0x60/0xb0 [ 354.882488][ T8521] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 354.888523][ T8521] RIP: 0033:0x7fda2d79c819 [ 354.892999][ T8521] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 354.912831][ T8521] RSP: 002b:00007fda2e6fa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 354.921313][ T8521] RAX: ffffffffffffffda RBX: 00007fda2da16180 RCX: 00007fda2d79c819 [ 354.929426][ T8521] RDX: 0000000000000012 RSI: 00002000000001c0 RDI: 0000000000000006 [ 354.937459][ T8521] RBP: 00007fda2e6fa090 R08: 0000000000000000 R09: 0000000000000000 [ 354.945481][ T8521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 354.953504][ T8521] R13: 00007fda2da16218 R14: 00007fda2da16180 R15: 00007ffed2ffb708 [ 354.961722][ T8521] [ 357.318239][ T8539] netlink: 'syz.1.1314': attribute type 4 has an invalid length. [ 358.620435][ T8574] netlink: 'syz.0.1328': attribute type 21 has an invalid length. [ 358.668522][ T8574] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1328'. [ 362.369347][ T8630] delete_channel: no stack [ 362.413479][ T8630] delete_channel: no stack [ 362.531612][ T8631] FAULT_INJECTION: forcing a failure. [ 362.531612][ T8631] name failslab, interval 1, probability 0, space 0, times 0 [ 362.561955][ T8631] CPU: 1 PID: 8631 Comm: syz.0.1343 Not tainted syzkaller #0 [ 362.569448][ T8631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 362.579519][ T8631] Call Trace: [ 362.582873][ T8631] [ 362.585800][ T8631] dump_stack_lvl+0x188/0x24e [ 362.590476][ T8631] ? show_regs_print_info+0x12/0x12 [ 362.595818][ T8631] ? load_image+0x400/0x400 [ 362.600414][ T8631] ? __might_sleep+0xd0/0xd0 [ 362.605010][ T8631] ? __lock_acquire+0x7d10/0x7d10 [ 362.610042][ T8631] should_fail_ex+0x399/0x4d0 [ 362.614735][ T8631] should_failslab+0x5/0x20 [ 362.619251][ T8631] slab_pre_alloc_hook+0x59/0x310 [ 362.624421][ T8631] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 362.630172][ T8631] __kmem_cache_alloc_node+0x4f/0x260 [ 362.635560][ T8631] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 362.641322][ T8631] __kmalloc+0xa0/0x240 [ 362.645539][ T8631] tomoyo_realpath_from_path+0xdf/0x5d0 [ 362.651127][ T8631] ? tomoyo_path_number_perm+0x205/0x650 [ 362.656803][ T8631] tomoyo_path_number_perm+0x22f/0x650 [ 362.662290][ T8631] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 362.667787][ T8631] ? ksys_write+0x1c0/0x250 [ 362.672309][ T8631] ? common_file_perm+0x171/0x1c0 [ 362.677376][ T8631] ? __fget_files+0x28/0x4b0 [ 362.681984][ T8631] ? __fget_files+0x28/0x4b0 [ 362.686599][ T8631] security_file_ioctl+0x6c/0xa0 [ 362.691556][ T8631] __se_sys_ioctl+0x48/0x170 [ 362.696163][ T8631] do_syscall_64+0x4c/0xa0 [ 362.700606][ T8631] ? clear_bhb_loop+0x60/0xb0 [ 362.705301][ T8631] ? clear_bhb_loop+0x60/0xb0 [ 362.710113][ T8631] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 362.716024][ T8631] RIP: 0033:0x7efdd659c819 [ 362.720452][ T8631] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 362.740163][ T8631] RSP: 002b:00007efdd47d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 362.748697][ T8631] RAX: ffffffffffffffda RBX: 00007efdd6816090 RCX: 00007efdd659c819 [ 362.756794][ T8631] RDX: 0000200000000200 RSI: 00000000000089e1 RDI: 000000000000000e [ 362.764958][ T8631] RBP: 00007efdd47d5090 R08: 0000000000000000 R09: 0000000000000000 [ 362.772947][ T8631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 362.780953][ T8631] R13: 00007efdd6816128 R14: 00007efdd6816090 R15: 00007ffe43f02e08 [ 362.789043][ T8631] [ 362.794047][ T8631] ERROR: Out of memory at tomoyo_realpath_from_path. [ 362.812392][ T8637] netlink: 'syz.4.1347': attribute type 1 has an invalid length. [ 362.822219][ T8637] netlink: 'syz.4.1347': attribute type 3 has an invalid length. [ 362.832178][ T8637] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1347'. [ 364.202993][ T8659] bridge0: port 3(batadv0) entered disabled state [ 365.521357][ T8659] device bridge_slave_1 left promiscuous mode [ 365.527714][ T8659] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.554670][ T8659] device bridge_slave_0 left promiscuous mode [ 365.561413][ T8659] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.737258][ T8674] netlink: 'syz.2.1355': attribute type 4 has an invalid length. [ 366.633311][ T8701] netlink: 'syz.3.1364': attribute type 10 has an invalid length. [ 366.719585][ T8701] bridge0: port 3(team0) entered disabled state [ 366.806497][ T8701] device team0 left promiscuous mode [ 366.888070][ T8701] device team_slave_1 left promiscuous mode [ 366.951087][ T8701] device geneve1 left promiscuous mode [ 366.956929][ T8701] bridge0: port 3(team0) entered disabled state [ 367.045268][ T8701] 8021q: adding VLAN 0 to HW filter on device team0 [ 367.110514][ T8701] bond0: (slave team0): Enslaving as an active interface with an up link [ 367.618804][ T8719] FAULT_INJECTION: forcing a failure. [ 367.618804][ T8719] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 367.994543][ T8719] CPU: 1 PID: 8719 Comm: syz.1.1370 Not tainted syzkaller #0 [ 368.002035][ T8719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 368.012133][ T8719] Call Trace: [ 368.015450][ T8719] [ 368.018412][ T8719] dump_stack_lvl+0x188/0x24e [ 368.023251][ T8719] ? show_regs_print_info+0x12/0x12 [ 368.028519][ T8719] ? load_image+0x400/0x400 [ 368.033079][ T8719] ? __lock_acquire+0x7d10/0x7d10 [ 368.038187][ T8719] should_fail_ex+0x399/0x4d0 [ 368.042919][ T8719] _copy_from_user+0x2c/0x170 [ 368.047651][ T8719] __copy_msghdr+0x3b7/0x580 [ 368.052303][ T8719] ___sys_sendmsg+0x210/0x360 [ 368.057226][ T8719] ? __sys_sendmsg+0x290/0x290 [ 368.062091][ T8719] ? __lock_acquire+0x7d10/0x7d10 [ 368.067217][ T8719] __se_sys_sendmsg+0x1bb/0x2a0 [ 368.072209][ T8719] ? __x64_sys_sendmsg+0x80/0x80 [ 368.077233][ T8719] ? lockdep_hardirqs_on+0x94/0x140 [ 368.082485][ T8719] do_syscall_64+0x4c/0xa0 [ 368.086946][ T8719] ? clear_bhb_loop+0x60/0xb0 [ 368.091683][ T8719] ? clear_bhb_loop+0x60/0xb0 [ 368.096413][ T8719] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 368.102349][ T8719] RIP: 0033:0x7fda2d79c819 [ 368.106804][ T8719] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 368.126627][ T8719] RSP: 002b:00007fda2e73c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 368.135105][ T8719] RAX: ffffffffffffffda RBX: 00007fda2da15fa0 RCX: 00007fda2d79c819 [ 368.143205][ T8719] RDX: 0000000000000041 RSI: 0000200000002dc0 RDI: 0000000000000003 [ 368.151305][ T8719] RBP: 00007fda2e73c090 R08: 0000000000000000 R09: 0000000000000000 [ 368.159331][ T8719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 368.167352][ T8719] R13: 00007fda2da16038 R14: 00007fda2da15fa0 R15: 00007ffed2ffb708 [ 368.175408][ T8719] [ 368.805195][ T8731] netlink: 'syz.2.1373': attribute type 39 has an invalid length. [ 369.693955][ T8740] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1376'. [ 370.070872][ T4283] Bluetooth: hci1: unexpected event 0x03 length: 151 > 11 [ 370.806982][ T8773] netlink: 212908 bytes leftover after parsing attributes in process `syz.3.1387'. [ 370.952952][ T8773] netlink: zone id is out of range [ 371.891543][ T8788] netlink: 'syz.4.1393': attribute type 3 has an invalid length. [ 371.938618][ T8788] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1393'. [ 372.792102][ T8810] netlink: 'syz.0.1399': attribute type 29 has an invalid length. [ 372.828341][ T8810] netlink: 'syz.0.1399': attribute type 29 has an invalid length. [ 372.888996][ T8814] netlink: 'syz.0.1399': attribute type 29 has an invalid length. [ 374.406700][ T8837] netlink: 'syz.4.1408': attribute type 3 has an invalid length. [ 374.485742][ T8840] netlink: 'syz.2.1404': attribute type 21 has an invalid length. [ 374.507925][ T8837] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1408'. [ 374.724286][ T8827] netlink: 'syz.2.1404': attribute type 3 has an invalid length. [ 374.732389][ T8840] netlink: 'syz.2.1404': attribute type 11 has an invalid length. [ 374.874500][ T8827] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.1404'. [ 375.912368][ T8856] netlink: 2759 bytes leftover after parsing attributes in process `syz.1.1412'. [ 376.761271][ T8869] delete_channel: no stack [ 377.582124][ T8881] netlink: 'syz.3.1420': attribute type 3 has an invalid length. [ 377.631258][ T8881] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1420'. [ 378.293783][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.300295][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.813700][ T8870] delete_channel: no stack [ 380.535625][ T8901] FAULT_INJECTION: forcing a failure. [ 380.535625][ T8901] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 380.569186][ T8899] netlink: 198580 bytes leftover after parsing attributes in process `syz.3.1425'. [ 380.601663][ T8901] CPU: 1 PID: 8901 Comm: syz.0.1426 Not tainted syzkaller #0 [ 380.609115][ T8901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 380.619208][ T8901] Call Trace: [ 380.622528][ T8901] [ 380.625491][ T8901] dump_stack_lvl+0x188/0x24e [ 380.630323][ T8901] ? show_regs_print_info+0x12/0x12 [ 380.635579][ T8901] ? load_image+0x400/0x400 [ 380.640343][ T8901] ? __lock_acquire+0x7d10/0x7d10 [ 380.645410][ T8901] ? __might_fault+0x98/0x120 [ 380.650150][ T8901] should_fail_ex+0x399/0x4d0 [ 380.654882][ T8901] _copy_from_user+0x2c/0x170 [ 380.659801][ T8901] ___sys_sendmsg+0x1c3/0x360 [ 380.664543][ T8901] ? __sys_sendmsg+0x290/0x290 [ 380.669463][ T8901] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 380.675278][ T8901] __se_sys_sendmsg+0x1bb/0x2a0 [ 380.680185][ T8901] ? __x64_sys_sendmsg+0x80/0x80 [ 380.685182][ T8901] ? syscall_enter_from_user_mode+0x2a/0x80 [ 380.691121][ T8901] do_syscall_64+0x4c/0xa0 [ 380.695650][ T8901] ? clear_bhb_loop+0x60/0xb0 [ 380.700373][ T8901] ? clear_bhb_loop+0x60/0xb0 [ 380.705162][ T8901] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 380.711242][ T8901] RIP: 0033:0x7efdd659c819 [ 380.715675][ T8901] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 380.735408][ T8901] RSP: 002b:00007efdd47f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 380.743862][ T8901] RAX: ffffffffffffffda RBX: 00007efdd6815fa0 RCX: 00007efdd659c819 [ 380.751863][ T8901] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 380.759863][ T8901] RBP: 00007efdd47f6090 R08: 0000000000000000 R09: 0000000000000000 [ 380.767857][ T8901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 380.775869][ T8901] R13: 00007efdd6816038 R14: 00007efdd6815fa0 R15: 00007ffe43f02e08 [ 380.783872][ T8901] [ 382.626710][ T8936] netlink: 'syz.1.1437': attribute type 3 has an invalid length. [ 382.688847][ T8936] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1437'. [ 384.970174][ T8982] netlink: 'syz.2.1454': attribute type 3 has an invalid length. [ 385.003088][ T8982] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1454'. [ 385.721756][ T8992] netlink: 'syz.1.1458': attribute type 2 has an invalid length. [ 385.937018][ T8996] netlink: 'syz.4.1460': attribute type 10 has an invalid length. [ 386.045637][ T8996] 8021q: adding VLAN 0 to HW filter on device team0 [ 386.086362][ T8996] bond0: (slave team0): Enslaving as an active interface with an up link [ 386.409124][ T9013] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1465'. [ 388.015119][ T9040] netlink: 'syz.3.1472': attribute type 1 has an invalid length. [ 388.045633][ T9040] netlink: 'syz.3.1472': attribute type 3 has an invalid length. [ 388.152564][ T9040] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1472'. [ 391.024852][ T9058] FAULT_INJECTION: forcing a failure. [ 391.024852][ T9058] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 391.076919][ T9058] CPU: 1 PID: 9058 Comm: syz.0.1479 Not tainted syzkaller #0 [ 391.084393][ T9058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 391.094590][ T9058] Call Trace: [ 391.097931][ T9058] [ 391.100899][ T9058] dump_stack_lvl+0x188/0x24e [ 391.105630][ T9058] ? show_regs_print_info+0x12/0x12 [ 391.110888][ T9058] ? load_image+0x400/0x400 [ 391.115437][ T9058] ? __lock_acquire+0x7d10/0x7d10 [ 391.120617][ T9058] should_fail_ex+0x399/0x4d0 [ 391.125344][ T9058] _copy_from_user+0x2c/0x170 [ 391.130068][ T9058] __sys_bpf+0x2ea/0x780 [ 391.134367][ T9058] ? bpf_link_show_fdinfo+0x380/0x380 [ 391.139811][ T9058] ? lock_chain_count+0x20/0x20 [ 391.144731][ T9058] __x64_sys_bpf+0x78/0x90 [ 391.149203][ T9058] do_syscall_64+0x4c/0xa0 [ 391.153842][ T9058] ? clear_bhb_loop+0x60/0xb0 [ 391.158565][ T9058] ? clear_bhb_loop+0x60/0xb0 [ 391.163379][ T9058] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 391.169403][ T9058] RIP: 0033:0x7efdd659c819 [ 391.173948][ T9058] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 391.193780][ T9058] RSP: 002b:00007efdd47f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 391.202255][ T9058] RAX: ffffffffffffffda RBX: 00007efdd6815fa0 RCX: 00007efdd659c819 [ 391.210279][ T9058] RDX: 0000000000000094 RSI: 0000200000000500 RDI: 0000000000000005 [ 391.218299][ T9058] RBP: 00007efdd47f6090 R08: 0000000000000000 R09: 0000000000000000 [ 391.226332][ T9058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 391.234350][ T9058] R13: 00007efdd6816038 R14: 00007efdd6815fa0 R15: 00007ffe43f02e08 [ 391.242392][ T9058] [ 391.268213][ T9062] netlink: 15999 bytes leftover after parsing attributes in process `syz.3.1482'. [ 392.581909][ T9085] netlink: 'syz.2.1492': attribute type 1 has an invalid length. [ 392.632484][ T9085] netlink: 'syz.2.1492': attribute type 3 has an invalid length. [ 392.650466][ T9085] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1492'. [ 392.893636][ T9097] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1494'. [ 392.906075][ T9097] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1494'. [ 392.947124][ T9095] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1494'. [ 392.970567][ T9095] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1494'. [ 395.723390][ T9110] netlink: 'syz.3.1499': attribute type 21 has an invalid length. [ 395.825508][ T9110] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1499'. [ 397.049106][ T9135] netlink: 'syz.1.1505': attribute type 21 has an invalid length. [ 397.222204][ T9135] IPv6: NLM_F_CREATE should be specified when creating new route [ 397.760257][ T9137] netlink: 'syz.1.1505': attribute type 10 has an invalid length. [ 397.864542][ T9149] netlink: 'syz.3.1511': attribute type 3 has an invalid length. [ 397.877705][ T9149] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1511'. [ 397.897308][ T9137] bond0: (slave team0): Releasing backup interface [ 397.992793][ T9137] team0 (unregistering): Port device team_slave_0 removed [ 398.119747][ T9137] team0 (unregistering): Port device team_slave_1 removed [ 398.223517][ T9137] team0 (unregistering): Port device geneve1 removed [ 398.363699][ T9138] netlink: 'syz.1.1505': attribute type 16 has an invalid length. [ 398.438100][ T9138] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1505'. [ 398.665344][ T9150] netlink: 'syz.2.1510': attribute type 5 has an invalid length. [ 399.874248][ T9193] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1525'. [ 399.920056][ T9190] netlink: 'syz.2.1522': attribute type 3 has an invalid length. [ 399.970556][ T9190] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1522'. [ 400.013195][ T9193] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1525'. [ 404.036878][ T9245] netlink: 'syz.3.1541': attribute type 10 has an invalid length. [ 404.045475][ T9245] device veth0_vlan left promiscuous mode [ 404.114418][ T9245] device veth0_vlan entered promiscuous mode [ 404.201515][ T9245] team0: Device veth0_vlan failed to register rx_handler [ 404.408148][ T9254] netlink: 'syz.4.1543': attribute type 3 has an invalid length. [ 404.427692][ T9255] netlink: 'syz.2.1540': attribute type 1 has an invalid length. [ 404.452758][ T9254] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1543'. [ 404.490128][ T9256] netlink: 'syz.2.1540': attribute type 21 has an invalid length. [ 404.518268][ T9256] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1540'. [ 405.571608][ T9278] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1552'. [ 405.661988][ T9281] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1552'. [ 405.752995][ T9283] netlink: 'syz.4.1553': attribute type 3 has an invalid length. [ 405.772471][ T9283] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1553'. [ 408.347035][ T9319] netlink: 'syz.3.1565': attribute type 10 has an invalid length. [ 410.235497][ T9319] team0: Port device wlan1 added [ 410.260173][ T9324] netlink: 'syz.4.1567': attribute type 13 has an invalid length. [ 410.276821][ T9324] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1567'. [ 410.301801][ T9324] syz_tun: refused to change device tx_queue_len [ 410.318152][ T9324] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 410.357529][ T9325] netlink: 'syz.4.1567': attribute type 10 has an invalid length. [ 410.503091][ T9325] team0: Port device netdevsim0 added [ 410.529662][ T9323] netlink: 'syz.4.1567': attribute type 13 has an invalid length. [ 410.606201][ T9323] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1567'. [ 410.715723][ T9323] syz_tun: refused to change device tx_queue_len [ 410.722374][ T9323] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 410.866178][ T9335] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1570'. [ 410.937972][ T9336] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1570'. [ 411.337722][ T9343] netlink: 'syz.2.1572': attribute type 19 has an invalid length. [ 411.349744][ T9343] netlink: 14552 bytes leftover after parsing attributes in process `syz.2.1572'. [ 411.989738][ T9353] netlink: 'syz.0.1574': attribute type 3 has an invalid length. [ 412.008593][ T9353] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1574'. [ 412.463278][ T9366] netlink: 'syz.3.1581': attribute type 10 has an invalid length. [ 412.514980][ T9366] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1581'. [ 412.588235][ T9366] device team0 entered promiscuous mode [ 412.649887][ T9366] device team_slave_1 entered promiscuous mode [ 412.689054][ T9366] device geneve1 entered promiscuous mode [ 412.718256][ T9366] device wlan1 entered promiscuous mode [ 412.744892][ T9372] netlink: 'syz.2.1580': attribute type 1 has an invalid length. [ 412.846096][ T9372] netlink: 'syz.2.1580': attribute type 3 has an invalid length. [ 412.983187][ T9372] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1580'. [ 415.417330][ T9366] bond0: (slave team0): Releasing backup interface [ 415.472894][ T9366] bridge0: port 3(team0) entered blocking state [ 415.501694][ T9366] bridge0: port 3(team0) entered disabled state [ 415.532937][ T9383] netlink: 'syz.4.1582': attribute type 10 has an invalid length. [ 415.583702][ T9383] team0: Port device dummy0 added [ 416.284858][ T9396] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1586'. [ 416.335880][ T9396] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1586'. [ 416.414039][ T9398] netlink: 'syz.1.1589': attribute type 10 has an invalid length. [ 416.472382][ T9398] bond0: (slave bond_slave_0): Releasing backup interface [ 416.517568][ T9400] netlink: 'syz.0.1590': attribute type 3 has an invalid length. [ 416.562033][ T9400] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1590'. [ 417.437099][ T9421] netlink: 'syz.1.1596': attribute type 10 has an invalid length. [ 417.468116][ T9421] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1596'. [ 418.025303][ T9425] netlink: 'syz.2.1597': attribute type 10 has an invalid length. [ 418.233003][ T9425] team0: Port device dummy0 added [ 418.677610][ T9446] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.1603'. [ 418.690413][ T9455] netlink: 16054 bytes leftover after parsing attributes in process `syz.1.1606'. [ 419.161336][ T9461] netlink: 'syz.0.1608': attribute type 10 has an invalid length. [ 419.365705][ T9461] bond0: (slave bond_slave_0): Releasing backup interface [ 419.782607][ T9470] netlink: 'syz.4.1611': attribute type 10 has an invalid length. [ 419.815916][ T9470] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1611'. [ 419.878139][ T9470] device team0 entered promiscuous mode [ 419.883916][ T9470] device team_slave_1 entered promiscuous mode [ 419.901753][ T9470] device geneve1 entered promiscuous mode [ 419.908476][ T9470] device netdevsim0 entered promiscuous mode [ 419.915155][ T9470] device dummy0 entered promiscuous mode [ 419.968918][ T9470] bond0: (slave team0): Releasing backup interface [ 420.017205][ T9470] bridge0: port 3(team0) entered blocking state [ 420.047140][ T9470] bridge0: port 3(team0) entered disabled state [ 420.128666][ T9472] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.1621'. [ 420.797663][ T9479] syzkaller0: tun_chr_ioctl cmd 1074812117 [ 421.052756][ T9500] netlink: 'syz.4.1618': attribute type 10 has an invalid length. [ 421.081200][ T9500] netlink: 55 bytes leftover after parsing attributes in process `syz.4.1618'. [ 421.121944][ T9499] sock: sock_set_timeout: `syz.1.1619' (pid 9499) tries to set negative timeout [ 421.167617][ T9506] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1622'. [ 421.802210][ T9521] netlink: 'syz.3.1626': attribute type 1 has an invalid length. [ 421.889515][ T9521] netlink: 'syz.3.1626': attribute type 3 has an invalid length. [ 421.897336][ T9521] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1626'. [ 422.183888][ T9528] netlink: 'syz.0.1627': attribute type 1 has an invalid length. [ 422.323067][ T9528] netlink: 'syz.0.1627': attribute type 3 has an invalid length. [ 422.391797][ T9528] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1627'. [ 425.564950][ T9556] netlink: 'syz.0.1636': attribute type 3 has an invalid length. [ 425.627238][ T9556] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1636'. [ 426.371792][ T9574] netlink: 'syz.4.1641': attribute type 1 has an invalid length. [ 426.379967][ T9574] netlink: 'syz.4.1641': attribute type 3 has an invalid length. [ 426.401256][ T9573] netlink: 'syz.2.1640': attribute type 3 has an invalid length. [ 426.421136][ T9574] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1641'. [ 426.448497][ T9573] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1640'. [ 426.752651][ T9578] netlink: 'syz.0.1643': attribute type 3 has an invalid length. [ 426.782167][ T9578] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1643'. [ 426.799677][ T9580] netlink: 'syz.3.1644': attribute type 1 has an invalid length. [ 426.828939][ T9580] netlink: 'syz.3.1644': attribute type 3 has an invalid length. [ 426.867498][ T9580] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1644'. [ 427.186153][ T9591] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1648'. [ 427.322281][ T9593] netlink: 'syz.4.1649': attribute type 27 has an invalid length. [ 430.055760][ T9618] netlink: 'syz.3.1656': attribute type 3 has an invalid length. [ 430.078244][ T9618] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1656'. [ 430.264818][ T9621] netlink: 'syz.2.1657': attribute type 1 has an invalid length. [ 430.298706][ T9621] netlink: 'syz.2.1657': attribute type 3 has an invalid length. [ 430.338769][ T9621] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1657'. [ 431.087462][ T9643] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1666'. [ 432.706689][ T9681] validate_nla: 2 callbacks suppressed [ 432.706709][ T9681] netlink: 'syz.0.1679': attribute type 1 has an invalid length. [ 432.805077][ T9681] netlink: 'syz.0.1679': attribute type 3 has an invalid length. [ 432.853449][ T9681] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1679'. [ 433.051050][ T9689] netlink: 'syz.1.1682': attribute type 10 has an invalid length. [ 433.098965][ T9689] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1682'. [ 433.155792][ T9689] device veth0_vlan left promiscuous mode [ 433.198140][ T9689] device veth0_vlan entered promiscuous mode [ 433.233036][ T9689] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 433.298206][ T5248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 433.319446][ T5248] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 433.348225][ T5248] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 433.658750][ T9697] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.1684'. [ 433.699756][ T9697] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1684'. [ 434.152675][ T9707] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1689'. [ 434.473284][ T9715] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1691'. [ 434.494210][ T9715] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 435.302056][ T9732] netlink: 'syz.3.1695': attribute type 16 has an invalid length. [ 435.312493][ T9732] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1695'. [ 435.328456][ T9737] netlink: 'syz.4.1697': attribute type 1 has an invalid length. [ 435.364828][ T9737] netlink: 'syz.4.1697': attribute type 3 has an invalid length. [ 435.376971][ T9737] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1697'. [ 436.150268][ T9751] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1701'. [ 436.444440][ T9760] netlink: 'syz.1.1704': attribute type 3 has an invalid length. [ 436.488415][ T9760] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1704'. [ 436.576120][ T9773] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 436.583445][ T9773] IPv6: NLM_F_CREATE should be set when creating new route [ 436.590803][ T9773] IPv6: NLM_F_CREATE should be set when creating new route [ 436.598096][ T9773] IPv6: NLM_F_CREATE should be set when creating new route [ 436.860895][ T9777] netlink: 'syz.4.1708': attribute type 10 has an invalid length. [ 437.110631][ T9777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 437.140571][ T9777] device bond0 entered promiscuous mode [ 437.147018][ T9777] device bond_slave_1 entered promiscuous mode [ 437.179434][ T9777] team0: Port device bond0 added [ 439.731205][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.737648][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.823705][ T9907] FAULT_INJECTION: forcing a failure. [ 441.823705][ T9907] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 441.887112][ T9907] CPU: 0 PID: 9907 Comm: syz.3.1746 Not tainted syzkaller #0 [ 441.894568][ T9907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 441.904849][ T9907] Call Trace: [ 441.908180][ T9907] [ 441.911159][ T9907] dump_stack_lvl+0x188/0x24e [ 441.915902][ T9907] ? show_regs_print_info+0x12/0x12 [ 441.921163][ T9907] ? load_image+0x400/0x400 [ 441.925717][ T9907] ? __lock_acquire+0x7d10/0x7d10 [ 441.930804][ T9907] should_fail_ex+0x399/0x4d0 [ 441.935533][ T9907] _copy_from_user+0x2c/0x170 [ 441.940269][ T9907] __sys_bpf+0x2ea/0x780 [ 441.944569][ T9907] ? bpf_link_show_fdinfo+0x380/0x380 [ 441.950098][ T9907] ? lock_chain_count+0x20/0x20 [ 441.955007][ T9907] __x64_sys_bpf+0x78/0x90 [ 441.959481][ T9907] do_syscall_64+0x4c/0xa0 [ 441.963951][ T9907] ? clear_bhb_loop+0x60/0xb0 [ 441.968676][ T9907] ? clear_bhb_loop+0x60/0xb0 [ 441.973404][ T9907] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 441.979437][ T9907] RIP: 0033:0x7fcf4c19c819 [ 441.983912][ T9907] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 442.003654][ T9907] RSP: 002b:00007fcf4d02c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 442.012217][ T9907] RAX: ffffffffffffffda RBX: 00007fcf4c415fa0 RCX: 00007fcf4c19c819 [ 442.020238][ T9907] RDX: 0000000000000050 RSI: 0000200000000140 RDI: 000000000000000a [ 442.028254][ T9907] RBP: 00007fcf4d02c090 R08: 0000000000000000 R09: 0000000000000000 [ 442.036273][ T9907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 442.044290][ T9907] R13: 00007fcf4c416038 R14: 00007fcf4c415fa0 R15: 00007ffd03b212a8 [ 442.052322][ T9907] [ 442.134905][ T9917] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1750'. [ 442.879334][ T9938] netlink: 'syz.3.1755': attribute type 1 has an invalid length. [ 442.918005][ T9938] netlink: 'syz.3.1755': attribute type 3 has an invalid length. [ 442.925828][ T9938] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1755'. [ 445.741903][ T9947] netlink: 'syz.0.1758': attribute type 10 has an invalid length. [ 445.791315][ T9947] team0: Device bond0 is already an upper device of the team interface [ 447.088398][ T9995] netlink: 'syz.4.1772': attribute type 10 has an invalid length. [ 447.485493][ T9998] netlink: 'syz.2.1773': attribute type 1 has an invalid length. [ 447.501693][ T9998] netlink: 'syz.2.1773': attribute type 3 has an invalid length. [ 447.515875][ T9998] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1773'. [ 447.827309][T10014] FAULT_INJECTION: forcing a failure. [ 447.827309][T10014] name failslab, interval 1, probability 0, space 0, times 0 [ 447.847438][T10014] CPU: 0 PID: 10014 Comm: syz.2.1779 Not tainted syzkaller #0 [ 447.852655][T10009] device syzkaller0 entered promiscuous mode [ 447.854962][T10014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 447.854978][T10014] Call Trace: [ 447.874452][T10014] [ 447.877405][T10014] dump_stack_lvl+0x188/0x24e [ 447.882125][T10014] ? show_regs_print_info+0x12/0x12 [ 447.887546][T10014] ? load_image+0x400/0x400 [ 447.892093][T10014] ? __might_sleep+0xd0/0xd0 [ 447.896693][T10014] ? __lock_acquire+0x7d10/0x7d10 [ 447.901742][T10014] should_fail_ex+0x399/0x4d0 [ 447.906450][T10014] should_failslab+0x5/0x20 [ 447.911111][T10014] slab_pre_alloc_hook+0x59/0x310 [ 447.916151][T10014] ? apparmor_sk_alloc_security+0x74/0x100 [ 447.921972][T10014] __kmem_cache_alloc_node+0x4f/0x260 [ 447.927362][T10014] ? apparmor_sk_alloc_security+0x74/0x100 [ 447.933186][T10014] kmalloc_trace+0x26/0xe0 [ 447.937633][T10014] apparmor_sk_alloc_security+0x74/0x100 [ 447.943315][T10014] security_sk_alloc+0x6a/0xa0 [ 447.948112][T10014] sk_prot_alloc+0x101/0x210 [ 447.952727][T10014] ? sk_alloc+0x20/0x340 [ 447.956998][T10014] sk_alloc+0x36/0x340 [ 447.961087][T10014] ? bpf_ctx_init+0x163/0x1a0 [ 447.965781][T10014] ? bpf_prog_test_run_skb+0x26f/0x12a0 [ 447.971346][T10014] bpf_prog_test_run_skb+0x35e/0x12a0 [ 447.976831][T10014] ? __fget_files+0x28/0x4b0 [ 447.981452][T10014] ? __fget_files+0x43d/0x4b0 [ 447.986157][T10014] ? cpu_online+0xa0/0xa0 [ 447.990504][T10014] bpf_prog_test_run+0x31e/0x390 [ 447.995462][T10014] __sys_bpf+0x62b/0x780 [ 447.999734][T10014] ? bpf_link_show_fdinfo+0x380/0x380 [ 448.005137][T10014] ? lock_chain_count+0x20/0x20 [ 448.010017][T10014] __x64_sys_bpf+0x78/0x90 [ 448.014463][T10014] do_syscall_64+0x4c/0xa0 [ 448.018896][T10014] ? clear_bhb_loop+0x60/0xb0 [ 448.023588][T10014] ? clear_bhb_loop+0x60/0xb0 [ 448.028469][T10014] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 448.034381][T10014] RIP: 0033:0x7fd412b9c819 [ 448.038822][T10014] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 448.058619][T10014] RSP: 002b:00007fd413982028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 448.067103][T10014] RAX: ffffffffffffffda RBX: 00007fd412e15fa0 RCX: 00007fd412b9c819 [ 448.075174][T10014] RDX: 0000000000000048 RSI: 0000200000000780 RDI: 000000000000000a [ 448.083245][T10014] RBP: 00007fd413982090 R08: 0000000000000000 R09: 0000000000000000 [ 448.091311][T10014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 448.099292][T10014] R13: 00007fd412e16038 R14: 00007fd412e15fa0 R15: 00007ffd2af2cc98 [ 448.107371][T10014] [ 448.174354][T10010] netlink: 'syz.3.1778': attribute type 3 has an invalid length. [ 448.197913][T10010] netlink: 114680 bytes leftover after parsing attributes in process `syz.3.1778'. [ 448.218382][T10006] netlink: 'syz.1.1775': attribute type 10 has an invalid length. [ 453.644795][T10033] netlink: 'syz.0.1780': attribute type 10 has an invalid length. [ 453.681981][T10033] team0: Port device wlan1 removed [ 453.805556][T10033] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 456.375289][T10077] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.1796'. [ 456.583989][T10077] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 456.612942][T10077] CPU: 0 PID: 10077 Comm: syz.1.1796 Not tainted syzkaller #0 [ 456.620500][T10077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 456.630692][T10077] Call Trace: [ 456.634094][T10077] [ 456.637062][T10077] dump_stack_lvl+0x188/0x24e [ 456.641878][T10077] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 456.648170][T10077] ? show_regs_print_info+0x12/0x12 [ 456.653407][T10077] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 456.659632][T10077] sysfs_warn_dup+0x8a/0xa0 [ 456.664180][T10077] sysfs_do_create_link_sd+0xc0/0x110 [ 456.669597][T10077] device_add+0x7ed/0xfb0 [ 456.673976][T10077] wiphy_register+0x1d9f/0x2ac0 [ 456.678917][T10077] ? cfg80211_event_work+0x40/0x40 [ 456.684067][T10077] ? minstrel_ht_alloc+0x894/0xa20 [ 456.689242][T10077] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 456.695362][T10077] ieee80211_register_hw+0x2d00/0x39f0 [ 456.700862][T10077] ? lockdep_hardirqs_on+0x94/0x140 [ 456.706114][T10077] ? ieee80211_register_hw+0xf31/0x39f0 [ 456.711713][T10077] ? ieee80211_register_hw+0xe31/0x39f0 [ 456.717323][T10077] ? ieee80211_tasklet_handler+0x20/0x20 [ 456.723012][T10077] ? memset+0x1e/0x40 [ 456.727037][T10077] ? __hrtimer_init+0x186/0x270 [ 456.731927][T10077] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 456.737805][T10077] hwsim_new_radio_nl+0xafa/0xce0 [ 456.742888][T10077] genl_family_rcv_msg_doit+0x22a/0x330 [ 456.748484][T10077] ? end_current_label_crit_section+0x170/0x170 [ 456.754777][T10077] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 456.760716][T10077] ? bpf_lsm_capable+0x5/0x10 [ 456.765429][T10077] ? security_capable+0x85/0xb0 [ 456.770423][T10077] genl_rcv_msg+0x604/0x790 [ 456.774969][T10077] ? rcu_is_watching+0x11/0xa0 [ 456.779801][T10077] ? genl_bind+0x360/0x360 [ 456.784268][T10077] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 456.790752][T10077] ? netlink_rcv_skb+0x1da/0x450 [ 456.795755][T10077] netlink_rcv_skb+0x1fb/0x450 [ 456.800578][T10077] ? genl_bind+0x360/0x360 [ 456.805037][T10077] ? netlink_ack+0x1170/0x1170 [ 456.809870][T10077] ? down_read+0x1a8/0x2d0 [ 456.814345][T10077] genl_rcv+0x24/0x40 [ 456.818395][T10077] netlink_unicast+0x74d/0x8d0 [ 456.823311][T10077] netlink_sendmsg+0x8ad/0xbd0 [ 456.828122][T10077] ? netlink_getsockopt+0x550/0x550 [ 456.833319][T10077] ? netlink_getsockopt+0x550/0x550 [ 456.838530][T10077] ____sys_sendmsg+0x5be/0x970 [ 456.843357][T10077] ? __sys_sendmsg_sock+0x30/0x30 [ 456.848432][T10077] ? __import_iovec+0x315/0x500 [ 456.853410][T10077] ? import_iovec+0x6f/0xa0 [ 456.857949][T10077] ___sys_sendmsg+0x2a2/0x360 [ 456.862675][T10077] ? __sys_sendmsg+0x290/0x290 [ 456.867489][T10077] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 456.873521][T10077] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 456.879901][T10077] ? lockdep_hardirqs_on+0x94/0x140 [ 456.885168][T10077] ? __se_sys_sendmsg+0xf4/0x2a0 [ 456.890161][T10077] ? kasan_check_range+0x1b0/0x290 [ 456.895331][T10077] __se_sys_sendmsg+0x1bb/0x2a0 [ 456.900232][T10077] ? __x64_sys_sendmsg+0x80/0x80 [ 456.905223][T10077] do_syscall_64+0x4c/0xa0 [ 456.909705][T10077] ? clear_bhb_loop+0x60/0xb0 [ 456.914502][T10077] ? clear_bhb_loop+0x60/0xb0 [ 456.919221][T10077] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 456.925138][T10077] RIP: 0033:0x7fda2d79c819 [ 456.929568][T10077] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 456.949190][T10077] RSP: 002b:00007fda2e71b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 456.957792][T10077] RAX: ffffffffffffffda RBX: 00007fda2da16090 RCX: 00007fda2d79c819 [ 456.965789][T10077] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 456.973773][T10077] RBP: 00007fda2d832c91 R08: 0000000000000000 R09: 0000000000000000 [ 456.981873][T10077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 456.989863][T10077] R13: 00007fda2da16128 R14: 00007fda2da16090 R15: 00007ffed2ffb708 [ 456.997876][T10077] [ 457.085435][T10084] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.1797'. [ 457.267218][T10084] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 457.311297][T10084] CPU: 1 PID: 10084 Comm: syz.2.1797 Not tainted syzkaller #0 [ 457.318874][T10084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 457.329004][T10084] Call Trace: [ 457.332319][T10084] [ 457.335286][T10084] dump_stack_lvl+0x188/0x24e [ 457.340028][T10084] ? show_regs_print_info+0x12/0x12 [ 457.345291][T10084] ? load_image+0x400/0x400 [ 457.349876][T10084] sysfs_warn_dup+0x8a/0xa0 [ 457.354525][T10084] sysfs_do_create_link_sd+0xc0/0x110 [ 457.360051][T10084] device_add+0x7ed/0xfb0 [ 457.364533][T10084] wiphy_register+0x1d9f/0x2ac0 [ 457.369554][T10084] ? cfg80211_event_work+0x40/0x40 [ 457.374714][T10084] ? minstrel_ht_alloc+0x894/0xa20 [ 457.379880][T10084] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 457.386166][T10084] ieee80211_register_hw+0x2d00/0x39f0 [ 457.391673][T10084] ? lock_chain_count+0x20/0x20 [ 457.396579][T10084] ? ieee80211_register_hw+0xf31/0x39f0 [ 457.402182][T10084] ? ieee80211_register_hw+0xe31/0x39f0 [ 457.407808][T10084] ? ieee80211_tasklet_handler+0x20/0x20 [ 457.413489][T10084] ? debug_init+0x61/0x260 [ 457.417957][T10084] ? kasan_check_range+0x4e/0x290 [ 457.423032][T10084] ? memset+0x1e/0x40 [ 457.427142][T10084] ? __hrtimer_init+0x186/0x270 [ 457.432042][T10084] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 457.437830][T10084] hwsim_new_radio_nl+0xafa/0xce0 [ 457.442915][T10084] genl_family_rcv_msg_doit+0x22a/0x330 [ 457.448583][T10084] ? end_current_label_crit_section+0x170/0x170 [ 457.454864][T10084] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 457.460811][T10084] ? bpf_lsm_capable+0x5/0x10 [ 457.465537][T10084] ? security_capable+0x85/0xb0 [ 457.470526][T10084] genl_rcv_msg+0x604/0x790 [ 457.475082][T10084] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 457.481305][T10084] ? genl_bind+0x360/0x360 [ 457.485847][T10084] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 457.492235][T10084] ? lock_acquire+0x225/0x4a0 [ 457.497072][T10084] netlink_rcv_skb+0x1fb/0x450 [ 457.501915][T10084] ? genl_bind+0x360/0x360 [ 457.506407][T10084] ? netlink_ack+0x1170/0x1170 [ 457.511263][T10084] ? down_read+0x1a8/0x2d0 [ 457.515745][T10084] genl_rcv+0x24/0x40 [ 457.519862][T10084] netlink_unicast+0x74d/0x8d0 [ 457.524696][T10084] netlink_sendmsg+0x8ad/0xbd0 [ 457.529518][T10084] ? lockdep_hardirqs_on+0x94/0x140 [ 457.534787][T10084] ? netlink_getsockopt+0x550/0x550 [ 457.540053][T10084] ? security_socket_sendmsg+0x56/0xa0 [ 457.545574][T10084] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 457.551025][T10084] ? security_socket_sendmsg+0x7c/0xa0 [ 457.556615][T10084] ? netlink_getsockopt+0x550/0x550 [ 457.561853][T10084] ____sys_sendmsg+0x5be/0x970 [ 457.566673][T10084] ? __sys_sendmsg_sock+0x30/0x30 [ 457.571805][T10084] ? ___sys_sendmsg+0x27d/0x360 [ 457.576692][T10084] ___sys_sendmsg+0x2a2/0x360 [ 457.581431][T10084] ? __sys_sendmsg+0x290/0x290 [ 457.586238][T10084] ? irqentry_enter+0x33/0x50 [ 457.590944][T10084] ? rcu_is_watching+0x11/0xa0 [ 457.595749][T10084] ? __se_sys_sendmsg+0xd5/0x2a0 [ 457.600815][T10084] __se_sys_sendmsg+0x1bb/0x2a0 [ 457.605790][T10084] ? __x64_sys_sendmsg+0x80/0x80 [ 457.610766][T10084] ? syscall_enter_from_user_mode+0x2a/0x80 [ 457.616678][T10084] do_syscall_64+0x4c/0xa0 [ 457.621118][T10084] ? clear_bhb_loop+0x60/0xb0 [ 457.625816][T10084] ? clear_bhb_loop+0x60/0xb0 [ 457.630510][T10084] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 457.636419][T10084] RIP: 0033:0x7fd412b9c819 [ 457.640851][T10084] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 457.660561][T10084] RSP: 002b:00007fd410df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 457.669078][T10084] RAX: ffffffffffffffda RBX: 00007fd412e16090 RCX: 00007fd412b9c819 [ 457.677070][T10084] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 457.685140][T10084] RBP: 00007fd412c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 457.693130][T10084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 457.701200][T10084] R13: 00007fd412e16128 R14: 00007fd412e16090 R15: 00007ffd2af2cc98 [ 457.709201][T10084] [ 457.877229][T10094] netlink: 'syz.0.1800': attribute type 3 has an invalid length. [ 457.907115][T10094] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1800'. [ 458.985635][T10104] netlink: 'syz.4.1801': attribute type 39 has an invalid length. [ 459.458311][T10112] netlink: 'syz.1.1799': attribute type 10 has an invalid length. [ 460.221444][T10125] FAULT_INJECTION: forcing a failure. [ 460.221444][T10125] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 460.259109][T10125] CPU: 0 PID: 10125 Comm: syz.2.1804 Not tainted syzkaller #0 [ 460.266712][T10125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 460.276825][T10125] Call Trace: [ 460.280151][T10125] [ 460.283122][T10125] dump_stack_lvl+0x188/0x24e [ 460.287852][T10125] ? show_regs_print_info+0x12/0x12 [ 460.293105][T10125] ? load_image+0x400/0x400 [ 460.297657][T10125] ? __lock_acquire+0x7d10/0x7d10 [ 460.302741][T10125] should_fail_ex+0x399/0x4d0 [ 460.307486][T10125] _copy_from_user+0x2c/0x170 [ 460.312207][T10125] generic_map_update_batch+0x4a1/0x810 [ 460.317815][T10125] ? rcu_read_unlock+0xa0/0xa0 [ 460.322612][T10125] ? __fdget+0x17c/0x200 [ 460.326877][T10125] ? rcu_read_unlock+0xa0/0xa0 [ 460.331668][T10125] bpf_map_do_batch+0x466/0x600 [ 460.336543][T10125] __sys_bpf+0x6f7/0x780 [ 460.340809][T10125] ? bpf_link_show_fdinfo+0x380/0x380 [ 460.346255][T10125] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 460.352449][T10125] __x64_sys_bpf+0x78/0x90 [ 460.356882][T10125] do_syscall_64+0x4c/0xa0 [ 460.361321][T10125] ? clear_bhb_loop+0x60/0xb0 [ 460.366106][T10125] ? clear_bhb_loop+0x60/0xb0 [ 460.370801][T10125] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 460.376718][T10125] RIP: 0033:0x7fd412b9c819 [ 460.381149][T10125] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 460.400856][T10125] RSP: 002b:00007fd413982028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 460.409377][T10125] RAX: ffffffffffffffda RBX: 00007fd412e15fa0 RCX: 00007fd412b9c819 [ 460.417360][T10125] RDX: 0000000000000038 RSI: 0000200000000180 RDI: 000000000000001a [ 460.425340][T10125] RBP: 00007fd413982090 R08: 0000000000000000 R09: 0000000000000000 [ 460.433373][T10125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 460.441364][T10125] R13: 00007fd412e16038 R14: 00007fd412e15fa0 R15: 00007ffd2af2cc98 [ 460.449368][T10125] [ 462.326236][T10160] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1817'. [ 464.901633][T10160] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1817'. [ 465.212625][T10174] netlink: 'syz.1.1821': attribute type 21 has an invalid length. [ 465.232491][T10175] netlink: 'syz.2.1820': attribute type 3 has an invalid length. [ 465.262617][T10175] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1820'. [ 465.316589][T10181] FAULT_INJECTION: forcing a failure. [ 465.316589][T10181] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 465.354738][T10181] CPU: 1 PID: 10181 Comm: syz.4.1823 Not tainted syzkaller #0 [ 465.362380][T10181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 465.372475][T10181] Call Trace: [ 465.375820][T10181] [ 465.378773][T10181] dump_stack_lvl+0x188/0x24e [ 465.383470][T10181] ? show_regs_print_info+0x12/0x12 [ 465.388658][T10181] ? load_image+0x400/0x400 [ 465.393238][T10181] ? __lock_acquire+0x7d10/0x7d10 [ 465.398274][T10181] should_fail_ex+0x399/0x4d0 [ 465.402950][T10181] _copy_from_iter+0x1c0/0x1130 [ 465.407815][T10181] ? __lock_acquire+0x7d10/0x7d10 [ 465.412877][T10181] ? copyout_mc+0x110/0x110 [ 465.417375][T10181] ? __virt_addr_valid+0x188/0x540 [ 465.422510][T10181] ? __virt_addr_valid+0x188/0x540 [ 465.427627][T10181] ? __virt_addr_valid+0x465/0x540 [ 465.433019][T10181] ? __check_object_size+0x500/0xa40 [ 465.438543][T10181] kernfs_fop_write_iter+0x1a0/0x520 [ 465.443874][T10181] vfs_write+0x4b1/0xa30 [ 465.448128][T10181] ? file_end_write+0x250/0x250 [ 465.452986][T10181] ? __fget_files+0x43d/0x4b0 [ 465.457661][T10181] ? __fdget_pos+0x2ae/0x360 [ 465.462290][T10181] ? ksys_write+0x71/0x250 [ 465.466769][T10181] ksys_write+0x14c/0x250 [ 465.471269][T10181] ? __ia32_sys_read+0x80/0x80 [ 465.476093][T10181] ? lockdep_hardirqs_on+0x94/0x140 [ 465.481345][T10181] do_syscall_64+0x4c/0xa0 [ 465.485803][T10181] ? clear_bhb_loop+0x60/0xb0 [ 465.490521][T10181] ? clear_bhb_loop+0x60/0xb0 [ 465.495257][T10181] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 465.501217][T10181] RIP: 0033:0x7f69bbd9c819 [ 465.505693][T10181] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 465.525348][T10181] RSP: 002b:00007f69bcbc3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 465.533831][T10181] RAX: ffffffffffffffda RBX: 00007f69bc015fa0 RCX: 00007f69bbd9c819 [ 465.541984][T10181] RDX: 0000000000000012 RSI: 00002000000005c0 RDI: 0000000000000006 [ 465.550100][T10181] RBP: 00007f69bcbc3090 R08: 0000000000000000 R09: 0000000000000000 [ 465.558125][T10181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 465.566135][T10181] R13: 00007f69bc016038 R14: 00007f69bc015fa0 R15: 00007ffcf747e7c8 [ 465.574165][T10181] [ 465.614944][T10186] netlink: 'syz.0.1824': attribute type 10 has an invalid length. [ 465.645952][T10186] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1824'. [ 466.325057][T10198] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1828'. [ 466.408739][T10190] netlink: 'syz.2.1826': attribute type 10 has an invalid length. [ 466.416680][T10190] device hsr0 entered promiscuous mode [ 466.458619][T10190] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 466.537986][T10197] netlink: 'syz.1.1828': attribute type 10 has an invalid length. [ 466.587576][T10198] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1828'. [ 466.722962][T10202] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1828'. [ 466.745107][T10207] FAULT_INJECTION: forcing a failure. [ 466.745107][T10207] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 466.821017][T10207] CPU: 0 PID: 10207 Comm: syz.3.1829 Not tainted syzkaller #0 [ 466.828569][T10207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 466.838676][T10207] Call Trace: [ 466.842085][T10207] [ 466.845054][T10207] dump_stack_lvl+0x188/0x24e [ 466.849795][T10207] ? show_regs_print_info+0x12/0x12 [ 466.855049][T10207] ? load_image+0x400/0x400 [ 466.859695][T10207] ? kasan_check_range+0x6e/0x290 [ 466.864955][T10207] should_fail_ex+0x399/0x4d0 [ 466.869769][T10207] prepare_alloc_pages+0x1e2/0x5f0 [ 466.874956][T10207] __alloc_pages+0x130/0x4f0 [ 466.879615][T10207] ? zone_statistics+0x170/0x170 [ 466.884604][T10207] ? lockdep_hardirqs_on+0x94/0x140 [ 466.889850][T10207] ? alloc_pages+0x4d8/0x740 [ 466.894468][T10207] alloc_skb_with_frags+0x20c/0x710 [ 466.899704][T10207] sock_alloc_send_pskb+0x87f/0x9a0 [ 466.904937][T10207] ? lock_chain_count+0x20/0x20 [ 466.909821][T10207] ? sock_kzfree_s+0x50/0x50 [ 466.914430][T10207] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 466.920609][T10207] ? packet_sendmsg+0x304c/0x4e60 [ 466.925743][T10207] packet_sendmsg+0x32b0/0x4e60 [ 466.930620][T10207] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 466.936363][T10207] ? perf_trace_preemptirq_template+0x268/0x320 [ 466.942628][T10207] ? irqentry_enter+0x33/0x50 [ 466.947327][T10207] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 466.953332][T10207] ? lock_chain_count+0x20/0x20 [ 466.958554][T10207] ? rcu_is_watching+0x11/0xa0 [ 466.963339][T10207] ? packet_getsockopt+0x9a0/0x9a0 [ 466.968461][T10207] ? lockdep_hardirqs_on+0x94/0x140 [ 466.973928][T10207] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 466.980274][T10207] ? packet_getsockopt+0x9a0/0x9a0 [ 466.985493][T10207] ? packet_getsockopt+0x9a0/0x9a0 [ 466.990616][T10207] ____sys_sendmsg+0x5be/0x970 [ 466.995414][T10207] ? __sys_sendmsg_sock+0x30/0x30 [ 467.000457][T10207] ? __import_iovec+0x315/0x500 [ 467.005416][T10207] ? import_iovec+0x6f/0xa0 [ 467.009948][T10207] ___sys_sendmsg+0x2a2/0x360 [ 467.014645][T10207] ? __sys_sendmsg+0x290/0x290 [ 467.019434][T10207] ? irqentry_enter+0x33/0x50 [ 467.024133][T10207] ? rcu_is_watching+0x11/0xa0 [ 467.028934][T10207] __se_sys_sendmsg+0x1bb/0x2a0 [ 467.033806][T10207] ? __x64_sys_sendmsg+0x80/0x80 [ 467.038790][T10207] do_syscall_64+0x4c/0xa0 [ 467.043249][T10207] ? clear_bhb_loop+0x60/0xb0 [ 467.047943][T10207] ? clear_bhb_loop+0x60/0xb0 [ 467.052649][T10207] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 467.058651][T10207] RIP: 0033:0x7fcf4c19c819 [ 467.063169][T10207] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 467.083050][T10207] RSP: 002b:00007fcf4d02c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 467.091479][T10207] RAX: ffffffffffffffda RBX: 00007fcf4c415fa0 RCX: 00007fcf4c19c819 [ 467.099464][T10207] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 467.107533][T10207] RBP: 00007fcf4d02c090 R08: 0000000000000000 R09: 0000000000000000 [ 467.115512][T10207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 467.123688][T10207] R13: 00007fcf4c416038 R14: 00007fcf4c415fa0 R15: 00007ffd03b212a8 [ 467.131685][T10207] [ 467.962211][T10218] netlink: 'syz.4.1835': attribute type 10 has an invalid length. [ 468.584256][T10250] netlink: 'syz.3.1842': attribute type 10 has an invalid length. [ 468.687299][T10248] netlink: 212940 bytes leftover after parsing attributes in process `syz.4.1841'. [ 468.840637][T10250] bridge0: port 3(team0) entered disabled state [ 468.852769][T10250] device team_slave_1 left promiscuous mode [ 468.949227][T10250] team0 (unregistering): Port device team_slave_1 removed [ 468.965037][T10250] device geneve1 left promiscuous mode [ 468.974877][T10250] team0 (unregistering): Port device geneve1 removed [ 468.984456][T10250] device wlan1 left promiscuous mode [ 469.023166][T10250] team0 (unregistering): Port device wlan1 removed [ 469.086151][T10242] netlink: 'syz.2.1839': attribute type 10 has an invalid length. [ 469.228254][T10259] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1843'. [ 469.291883][T10259] device caif0 entered promiscuous mode [ 469.378161][T10261] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1843'. [ 469.687363][T10268] FAULT_INJECTION: forcing a failure. [ 469.687363][T10268] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 469.722853][T10268] CPU: 1 PID: 10268 Comm: syz.3.1846 Not tainted syzkaller #0 [ 469.730398][T10268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 469.740666][T10268] Call Trace: [ 469.743984][T10268] [ 469.746962][T10268] dump_stack_lvl+0x188/0x24e [ 469.751803][T10268] ? show_regs_print_info+0x12/0x12 [ 469.757067][T10268] ? load_image+0x400/0x400 [ 469.761622][T10268] ? __lock_acquire+0x7d10/0x7d10 [ 469.766698][T10268] ? __sanitizer_cov_trace_pc+0x4/0x60 [ 469.772208][T10268] should_fail_ex+0x399/0x4d0 [ 469.776936][T10268] _copy_from_user+0x2c/0x170 [ 469.781661][T10268] __sys_bpf+0x2ea/0x780 [ 469.785934][T10268] ? bpf_link_show_fdinfo+0x380/0x380 [ 469.791332][T10268] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 469.797512][T10268] __x64_sys_bpf+0x78/0x90 [ 469.801948][T10268] do_syscall_64+0x4c/0xa0 [ 469.806399][T10268] ? clear_bhb_loop+0x60/0xb0 [ 469.811186][T10268] ? clear_bhb_loop+0x60/0xb0 [ 469.815882][T10268] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 469.821930][T10268] RIP: 0033:0x7fcf4c19c819 [ 469.826406][T10268] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 469.846131][T10268] RSP: 002b:00007fcf4d02c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 469.854673][T10268] RAX: ffffffffffffffda RBX: 00007fcf4c415fa0 RCX: 00007fcf4c19c819 [ 469.862664][T10268] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 469.870645][T10268] RBP: 00007fcf4d02c090 R08: 0000000000000000 R09: 0000000000000000 [ 469.878627][T10268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 469.886634][T10268] R13: 00007fcf4c416038 R14: 00007fcf4c415fa0 R15: 00007ffd03b212a8 [ 469.894665][T10268] [ 470.698483][T10287] netlink: 'syz.3.1852': attribute type 10 has an invalid length. [ 470.991265][T10299] netlink: 'syz.4.1858': attribute type 3 has an invalid length. [ 471.064090][T10299] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1858'. [ 471.809633][T10317] netlink: 'syz.3.1860': attribute type 3 has an invalid length. [ 471.834720][T10317] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1860'. [ 472.706929][T10328] netlink: 'syz.1.1863': attribute type 10 has an invalid length. [ 472.799058][T10328] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1863'. [ 473.761497][T10347] netlink: 'syz.3.1869': attribute type 1 has an invalid length. [ 473.851118][T10347] netlink: 'syz.3.1869': attribute type 3 has an invalid length. [ 473.890806][T10347] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1869'. [ 476.879498][T10332] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1867'. [ 476.898880][T10358] netlink: 'syz.2.1870': attribute type 10 has an invalid length. [ 476.983322][T10366] netlink: 611 bytes leftover after parsing attributes in process `syz.3.1872'. [ 477.101872][T10362] netlink: 'syz.0.1871': attribute type 3 has an invalid length. [ 477.121786][T10362] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1871'. [ 477.227259][T10371] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.1873'. [ 477.276482][T10371] bridge_slave_1: default FDB implementation only supports local addresses [ 477.922717][T10379] FAULT_INJECTION: forcing a failure. [ 477.922717][T10379] name failslab, interval 1, probability 0, space 0, times 0 [ 477.958254][T10379] CPU: 1 PID: 10379 Comm: syz.4.1877 Not tainted syzkaller #0 [ 477.966088][T10379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 477.976272][T10379] Call Trace: [ 477.979682][T10379] [ 477.982659][T10379] dump_stack_lvl+0x188/0x24e [ 477.987393][T10379] ? show_regs_print_info+0x12/0x12 [ 477.992640][T10379] ? load_image+0x400/0x400 [ 477.997186][T10379] ? __might_sleep+0xd0/0xd0 [ 478.001890][T10379] ? __lock_acquire+0x7d10/0x7d10 [ 478.006944][T10379] should_fail_ex+0x399/0x4d0 [ 478.011649][T10379] should_failslab+0x5/0x20 [ 478.016172][T10379] slab_pre_alloc_hook+0x59/0x310 [ 478.021222][T10379] ? apparmor_sk_alloc_security+0x74/0x100 [ 478.027053][T10379] __kmem_cache_alloc_node+0x4f/0x260 [ 478.032446][T10379] ? apparmor_sk_alloc_security+0x74/0x100 [ 478.038273][T10379] kmalloc_trace+0x26/0xe0 [ 478.042720][T10379] apparmor_sk_alloc_security+0x74/0x100 [ 478.048368][T10379] security_sk_alloc+0x6a/0xa0 [ 478.053155][T10379] sk_prot_alloc+0x101/0x210 [ 478.057860][T10379] ? sk_alloc+0x20/0x340 [ 478.062132][T10379] sk_alloc+0x36/0x340 [ 478.066218][T10379] ? bpf_ctx_init+0x163/0x1a0 [ 478.070915][T10379] ? bpf_prog_test_run_skb+0x26f/0x12a0 [ 478.076483][T10379] bpf_prog_test_run_skb+0x35e/0x12a0 [ 478.081882][T10379] ? __fget_files+0x28/0x4b0 [ 478.086497][T10379] ? __fget_files+0x43d/0x4b0 [ 478.091212][T10379] ? cpu_online+0xa0/0xa0 [ 478.095563][T10379] bpf_prog_test_run+0x31e/0x390 [ 478.100532][T10379] __sys_bpf+0x62b/0x780 [ 478.104806][T10379] ? bpf_link_show_fdinfo+0x380/0x380 [ 478.110308][T10379] ? lock_chain_count+0x20/0x20 [ 478.115224][T10379] __x64_sys_bpf+0x78/0x90 [ 478.119691][T10379] do_syscall_64+0x4c/0xa0 [ 478.124146][T10379] ? clear_bhb_loop+0x60/0xb0 [ 478.128850][T10379] ? clear_bhb_loop+0x60/0xb0 [ 478.133563][T10379] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 478.139566][T10379] RIP: 0033:0x7f69bbd9c819 [ 478.143997][T10379] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 478.163641][T10379] RSP: 002b:00007f69bcbc3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 478.172175][T10379] RAX: ffffffffffffffda RBX: 00007f69bc015fa0 RCX: 00007f69bbd9c819 [ 478.180169][T10379] RDX: 0000000000000048 RSI: 0000200000000780 RDI: 000000000000000a [ 478.188157][T10379] RBP: 00007f69bcbc3090 R08: 0000000000000000 R09: 0000000000000000 [ 478.196152][T10379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 478.204401][T10379] R13: 00007f69bc016038 R14: 00007f69bc015fa0 R15: 00007ffcf747e7c8 [ 478.212504][T10379] [ 478.541914][T10394] netlink: 212940 bytes leftover after parsing attributes in process `syz.1.1874'. [ 478.693229][T10391] netlink: 'syz.3.1880': attribute type 10 has an invalid length. [ 478.721625][T10391] bond0: (slave bond_slave_0): Releasing backup interface [ 478.723620][T10393] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.1881'. [ 479.338598][T10408] netlink: 'syz.3.1884': attribute type 10 has an invalid length. [ 479.349549][T10408] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1884'. [ 479.705426][T10424] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.1885'. [ 480.554060][T10410] netlink: 'syz.0.1882': attribute type 10 has an invalid length. [ 480.574426][T10401] netlink: 'syz.4.1883': attribute type 10 has an invalid length. [ 480.590716][T10424] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 480.614939][T10424] CPU: 1 PID: 10424 Comm: syz.1.1885 Not tainted syzkaller #0 [ 480.622586][T10424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 480.632697][T10424] Call Trace: [ 480.636016][T10424] [ 480.638984][T10424] dump_stack_lvl+0x188/0x24e [ 480.643732][T10424] ? show_regs_print_info+0x12/0x12 [ 480.649080][T10424] ? load_image+0x400/0x400 [ 480.653650][T10424] sysfs_warn_dup+0x8a/0xa0 [ 480.658208][T10424] sysfs_do_create_link_sd+0xc0/0x110 [ 480.663641][T10424] device_add+0x7ed/0xfb0 [ 480.668045][T10424] wiphy_register+0x1d9f/0x2ac0 [ 480.672955][T10424] ? cfg80211_event_work+0x40/0x40 [ 480.678176][T10424] ? minstrel_ht_alloc+0x894/0xa20 [ 480.683593][T10424] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 480.689711][T10424] ieee80211_register_hw+0x2d00/0x39f0 [ 480.695218][T10424] ? ieee80211_register_hw+0xf31/0x39f0 [ 480.700816][T10424] ? ieee80211_register_hw+0xe31/0x39f0 [ 480.706391][T10424] ? ieee80211_tasklet_handler+0x20/0x20 [ 480.712052][T10424] ? memset+0x1e/0x40 [ 480.716050][T10424] ? __hrtimer_init+0x186/0x270 [ 480.720921][T10424] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 480.726688][T10424] hwsim_new_radio_nl+0xafa/0xce0 [ 480.731792][T10424] genl_family_rcv_msg_doit+0x22a/0x330 [ 480.737353][T10424] ? end_current_label_crit_section+0x170/0x170 [ 480.743609][T10424] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 480.749520][T10424] ? bpf_lsm_capable+0x5/0x10 [ 480.754561][T10424] ? security_capable+0x85/0xb0 [ 480.759432][T10424] genl_rcv_msg+0x604/0x790 [ 480.764046][T10424] ? genl_bind+0x360/0x360 [ 480.768479][T10424] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 480.774840][T10424] netlink_rcv_skb+0x1fb/0x450 [ 480.779625][T10424] ? genl_bind+0x360/0x360 [ 480.784062][T10424] ? netlink_ack+0x1170/0x1170 [ 480.788856][T10424] ? down_read+0x1a8/0x2d0 [ 480.793301][T10424] genl_rcv+0x24/0x40 [ 480.797292][T10424] netlink_unicast+0x74d/0x8d0 [ 480.802089][T10424] netlink_sendmsg+0x8ad/0xbd0 [ 480.806878][T10424] ? netlink_getsockopt+0x550/0x550 [ 480.812201][T10424] ? aa_sock_msg_perm+0x94/0x150 [ 480.817159][T10424] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 480.822632][T10424] ? security_socket_sendmsg+0x7c/0xa0 [ 480.828124][T10424] ? netlink_getsockopt+0x550/0x550 [ 480.833515][T10424] ____sys_sendmsg+0x5be/0x970 [ 480.838309][T10424] ? __sys_sendmsg_sock+0x30/0x30 [ 480.843442][T10424] ? __import_iovec+0x315/0x500 [ 480.848403][T10424] ? import_iovec+0x6f/0xa0 [ 480.852961][T10424] ___sys_sendmsg+0x2a2/0x360 [ 480.857807][T10424] ? try_to_wake_up+0x67c/0x1080 [ 480.862773][T10424] ? __sys_sendmsg+0x290/0x290 [ 480.867605][T10424] __se_sys_sendmsg+0x1bb/0x2a0 [ 480.872482][T10424] ? __x64_sys_sendmsg+0x80/0x80 [ 480.877455][T10424] ? lockdep_hardirqs_on+0x94/0x140 [ 480.882673][T10424] do_syscall_64+0x4c/0xa0 [ 480.887112][T10424] ? clear_bhb_loop+0x60/0xb0 [ 480.891807][T10424] ? clear_bhb_loop+0x60/0xb0 [ 480.896498][T10424] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 480.902419][T10424] RIP: 0033:0x7fda2d79c819 [ 480.906854][T10424] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 480.926479][T10424] RSP: 002b:00007fda2e6b8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 480.934914][T10424] RAX: ffffffffffffffda RBX: 00007fda2da16360 RCX: 00007fda2d79c819 [ 480.943004][T10424] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 480.951080][T10424] RBP: 00007fda2d832c91 R08: 0000000000000000 R09: 0000000000000000 [ 480.959235][T10424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 480.967219][T10424] R13: 00007fda2da163f8 R14: 00007fda2da16360 R15: 00007ffed2ffb708 [ 480.975220][T10424] [ 482.075669][T10452] netlink: 'syz.3.1892': attribute type 3 has an invalid length. [ 482.100072][T10452] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1892'. [ 483.665789][T10456] IPv6: Can't replace route, no match found [ 484.394994][T10480] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.1894'. [ 484.452966][T10486] netlink: 'syz.4.1898': attribute type 10 has an invalid length. [ 484.593561][T10488] netlink: 1034 bytes leftover after parsing attributes in process `syz.2.1894'. [ 484.944979][T10495] delete_channel: no stack [ 484.945025][T10497] delete_channel: no stack [ 484.993494][T10497] delete_channel: no stack [ 485.051956][T10495] delete_channel: no stack [ 485.088463][T10491] netlink: 'syz.3.1901': attribute type 1 has an invalid length. [ 485.096916][T10491] netlink: 'syz.3.1901': attribute type 3 has an invalid length. [ 485.201944][T10491] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1901'. [ 487.909667][T10517] netlink: 'syz.0.1908': attribute type 3 has an invalid length. [ 487.916308][T10515] netlink: 'syz.4.1907': attribute type 10 has an invalid length. [ 487.917839][T10517] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1908'. [ 488.005961][T10519] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.1909'. [ 488.617463][T10530] can: request_module (can-proto-5) failed. [ 488.896109][T10515] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 489.318177][T10553] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1918'. [ 489.906387][T10560] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.1919'. [ 489.979564][T10544] netlink: 'syz.2.1915': attribute type 10 has an invalid length. [ 490.043032][T10560] netlink: 'syz.0.1919': attribute type 10 has an invalid length. [ 490.314114][T10566] netlink: 'syz.1.1921': attribute type 3 has an invalid length. [ 490.377727][T10566] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1921'. [ 490.514371][T10570] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1923'. [ 490.752870][T10580] netlink: 'syz.1.1926': attribute type 3 has an invalid length. [ 490.778758][T10580] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1926'. [ 491.603037][T10597] netlink: 'syz.0.1932': attribute type 11 has an invalid length. [ 491.635243][T10597] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1932'. [ 491.930514][T10596] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 492.066225][T10614] netlink: 'syz.4.1934': attribute type 10 has an invalid length. [ 492.572347][T10632] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1939'. [ 493.101878][T10650] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1945'. [ 493.131248][T10650] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1945'. [ 493.142020][T10650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 493.170970][T10650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.182208][T10650] device batadv_slave_1 entered promiscuous mode [ 493.209139][ T4283] Bluetooth: hci3: ISO packet too small [ 493.601099][T10665] netlink: 'syz.1.1949': attribute type 10 has an invalid length. [ 493.822795][T10669] netlink: 'syz.2.1950': attribute type 11 has an invalid length. [ 494.356134][T10682] netlink: 'syz.3.1954': attribute type 11 has an invalid length. [ 494.450755][T10682] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1954'. [ 494.496687][T10685] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1955'. [ 494.622340][T10679] netlink: 'syz.0.1952': attribute type 1 has an invalid length. [ 494.838189][T10679] netlink: 'syz.0.1952': attribute type 3 has an invalid length. [ 495.081426][T10681] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 495.102588][T10679] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1952'. [ 495.463147][T10694] netlink: 'syz.4.1957': attribute type 2 has an invalid length. [ 495.682715][T10694] netlink: 180624 bytes leftover after parsing attributes in process `syz.4.1957'. [ 497.173670][T10696] netlink: 'syz.3.1958': attribute type 10 has an invalid length. [ 497.208688][T10696] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 497.414751][T10710] netlink: 'syz.4.1960': attribute type 29 has an invalid length. [ 497.439716][T10710] netlink: 'syz.4.1960': attribute type 29 has an invalid length. [ 497.481668][T10710] netlink: 'syz.4.1960': attribute type 29 has an invalid length. [ 497.550100][T10710] netlink: 'syz.4.1960': attribute type 29 has an invalid length. [ 497.595227][T10713] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1962'. [ 498.180589][T10735] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1967'. [ 498.956115][T10755] validate_nla: 5 callbacks suppressed [ 498.956135][T10755] netlink: 'syz.4.1972': attribute type 1 has an invalid length. [ 499.008300][T10755] netlink: 'syz.4.1972': attribute type 3 has an invalid length. [ 499.016126][T10755] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1972'. [ 501.173816][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.180477][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.957624][T10771] netlink: 'syz.1.1981': attribute type 3 has an invalid length. [ 502.991918][T10771] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1981'. [ 503.226639][T10786] netlink: 'syz.4.1979': attribute type 10 has an invalid length. [ 503.856556][T10801] device syzkaller0 entered promiscuous mode [ 504.879041][T10817] netlink: 'syz.3.1990': attribute type 1 has an invalid length. [ 504.892790][T10817] netlink: 'syz.3.1990': attribute type 3 has an invalid length. [ 504.903315][T10817] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1990'. [ 507.983914][T10827] netlink: 'syz.3.1993': attribute type 3 has an invalid length. [ 507.992966][T10827] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1993'. [ 509.237971][T10821] netlink: 'syz.4.1991': attribute type 6 has an invalid length. [ 509.245789][T10821] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1991'. [ 509.753504][T10846] FAULT_INJECTION: forcing a failure. [ 509.753504][T10846] name failslab, interval 1, probability 0, space 0, times 0 [ 509.855724][T10846] CPU: 1 PID: 10846 Comm: syz.2.2001 Not tainted syzkaller #0 [ 509.863363][T10846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 509.873549][T10846] Call Trace: [ 509.876862][T10846] [ 509.879825][T10846] dump_stack_lvl+0x188/0x24e [ 509.884600][T10846] ? sctp_sendmsg+0x15b0/0x2940 [ 509.889575][T10846] ? ___sys_sendmsg+0x2a2/0x360 [ 509.894472][T10846] ? show_regs_print_info+0x12/0x12 [ 509.899717][T10846] ? load_image+0x400/0x400 [ 509.904283][T10846] should_fail_ex+0x399/0x4d0 [ 509.909021][T10846] should_failslab+0x5/0x20 [ 509.913592][T10846] slab_pre_alloc_hook+0x59/0x310 [ 509.918733][T10846] ? sctp_add_bind_addr+0x89/0x350 [ 509.923877][T10846] __kmem_cache_alloc_node+0x4f/0x260 [ 509.929452][T10846] ? sctp_add_bind_addr+0x89/0x350 [ 509.934677][T10846] kmalloc_trace+0x26/0xe0 [ 509.939121][T10846] sctp_add_bind_addr+0x89/0x350 [ 509.944083][T10846] sctp_copy_local_addr_list+0x311/0x4e0 [ 509.949739][T10846] ? sctp_copy_local_addr_list+0xa1/0x4e0 [ 509.955482][T10846] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 509.961570][T10846] ? sctp_v6_is_any+0x60/0x70 [ 509.966285][T10846] ? sctp_copy_one_addr+0x93/0x660 [ 509.971419][T10846] sctp_bind_addr_copy+0xaf/0x3c0 [ 509.976470][T10846] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 509.982817][T10846] sctp_connect_new_asoc+0x2f5/0x6a0 [ 509.988115][T10846] ? __sctp_connect+0xd80/0xd80 [ 509.993076][T10846] ? __local_bh_enable_ip+0x136/0x1c0 [ 509.998481][T10846] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 510.004055][T10846] ? security_sctp_bind_connect+0x85/0xb0 [ 510.009894][T10846] sctp_sendmsg+0x15b0/0x2940 [ 510.014700][T10846] ? sctp_getsockopt+0x8a0/0x8a0 [ 510.019699][T10846] ? __lock_acquire+0x7d10/0x7d10 [ 510.024744][T10846] ? aa_af_perm+0x340/0x340 [ 510.029439][T10846] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 510.035886][T10846] ? inet_sendmsg+0xe5/0x2f0 [ 510.040500][T10846] ? inet_send_prepare+0x260/0x260 [ 510.045708][T10846] ____sys_sendmsg+0x5be/0x970 [ 510.050528][T10846] ? __sys_sendmsg_sock+0x30/0x30 [ 510.055571][T10846] ? __import_iovec+0x315/0x500 [ 510.060450][T10846] ? import_iovec+0x6f/0xa0 [ 510.064978][T10846] ___sys_sendmsg+0x2a2/0x360 [ 510.069682][T10846] ? __sys_sendmsg+0x290/0x290 [ 510.074490][T10846] ? __lock_acquire+0x7d10/0x7d10 [ 510.079595][T10846] __se_sys_sendmsg+0x1bb/0x2a0 [ 510.084555][T10846] ? __x64_sys_sendmsg+0x80/0x80 [ 510.089614][T10846] ? lockdep_hardirqs_on+0x94/0x140 [ 510.094840][T10846] do_syscall_64+0x4c/0xa0 [ 510.099276][T10846] ? clear_bhb_loop+0x60/0xb0 [ 510.103971][T10846] ? clear_bhb_loop+0x60/0xb0 [ 510.108683][T10846] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 510.114686][T10846] RIP: 0033:0x7fd412b9c819 [ 510.119114][T10846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 510.138819][T10846] RSP: 002b:00007fd413982028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 510.147245][T10846] RAX: ffffffffffffffda RBX: 00007fd412e15fa0 RCX: 00007fd412b9c819 [ 510.155231][T10846] RDX: 00000000000480c4 RSI: 00002000000017c0 RDI: 0000000000000003 [ 510.163390][T10846] RBP: 00007fd413982090 R08: 0000000000000000 R09: 0000000000000000 [ 510.171372][T10846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 510.179352][T10846] R13: 00007fd412e16038 R14: 00007fd412e15fa0 R15: 00007ffd2af2cc98 [ 510.187442][T10846] [ 510.242240][T10849] netlink: 'syz.4.2002': attribute type 1 has an invalid length. [ 510.283131][T10849] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.2002'. [ 510.307567][T10851] netlink: 'syz.1.1997': attribute type 10 has an invalid length. [ 510.627800][T10855] FAULT_INJECTION: forcing a failure. [ 510.627800][T10855] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 510.645393][T10855] CPU: 1 PID: 10855 Comm: syz.0.2003 Not tainted syzkaller #0 [ 510.652923][T10855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 510.663026][T10855] Call Trace: [ 510.666380][T10855] [ 510.669352][T10855] dump_stack_lvl+0x188/0x24e [ 510.674090][T10855] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 510.680306][T10855] ? show_regs_print_info+0x12/0x12 [ 510.685581][T10855] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 510.692164][T10855] should_fail_ex+0x399/0x4d0 [ 510.696868][T10855] _copy_to_user+0x2c/0x130 [ 510.701399][T10855] simple_read_from_buffer+0xe3/0x150 [ 510.706794][T10855] proc_fail_nth_read+0x1a6/0x220 [ 510.711849][T10855] ? proc_fault_inject_write+0x310/0x310 [ 510.717496][T10855] ? fsnotify_perm+0x248/0x550 [ 510.722289][T10855] ? proc_fault_inject_write+0x310/0x310 [ 510.727937][T10855] vfs_read+0x2de/0xa00 [ 510.732201][T10855] ? kernel_read+0x1e0/0x1e0 [ 510.736856][T10855] ? __fget_files+0x28/0x4b0 [ 510.741461][T10855] ? __fget_files+0x28/0x4b0 [ 510.746070][T10855] ? __fget_files+0x43d/0x4b0 [ 510.750860][T10855] ? __fdget_pos+0x2ae/0x360 [ 510.755465][T10855] ? ksys_read+0x71/0x250 [ 510.759928][T10855] ksys_read+0x14c/0x250 [ 510.764197][T10855] ? vfs_write+0xa30/0xa30 [ 510.768725][T10855] ? syscall_enter_from_user_mode+0x2a/0x80 [ 510.774744][T10855] do_syscall_64+0x4c/0xa0 [ 510.779207][T10855] ? clear_bhb_loop+0x60/0xb0 [ 510.784353][T10855] ? clear_bhb_loop+0x60/0xb0 [ 510.789078][T10855] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 510.795042][T10855] RIP: 0033:0x7efdd655d04e [ 510.799499][T10855] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 510.819220][T10855] RSP: 002b:00007efdd47f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 510.827838][T10855] RAX: ffffffffffffffda RBX: 00007efdd47f66c0 RCX: 00007efdd655d04e [ 510.835870][T10855] RDX: 000000000000000f RSI: 00007efdd47f60a0 RDI: 0000000000000006 [ 510.844030][T10855] RBP: 00007efdd47f6090 R08: 0000000000000000 R09: 0000000000000000 [ 510.852010][T10855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 510.860002][T10855] R13: 00007efdd6816038 R14: 00007efdd6815fa0 R15: 00007ffe43f02e08 [ 510.868088][T10855] [ 510.963748][T10863] tap0: tun_chr_ioctl cmd 2147767517 [ 511.078740][T10865] netlink: 'syz.3.2006': attribute type 3 has an invalid length. [ 511.097782][T10865] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2006'. [ 511.282052][T10870] netlink: 'syz.1.2005': attribute type 1 has an invalid length. [ 511.319053][T10870] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.2005'. [ 511.929057][T10888] netlink: 'syz.2.2013': attribute type 10 has an invalid length. [ 511.957718][T10892] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2016'. [ 512.226409][T10888] team0: Device wg1 is of different type [ 512.264369][T10892] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2016'. [ 512.298285][T10900] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2016'. [ 512.418024][T10902] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2016'. [ 512.773905][T10914] netlink: 'syz.1.2020': attribute type 3 has an invalid length. [ 512.793022][T10914] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2020'. [ 513.779244][T10942] netlink: 'syz.0.2030': attribute type 12 has an invalid length. [ 513.808447][T10942] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2030'. [ 514.164946][T10949] netlink: 'syz.2.2029': attribute type 2 has an invalid length. [ 514.211181][T10952] netlink: 'syz.1.2032': attribute type 29 has an invalid length. [ 514.220415][T10952] netlink: 'syz.1.2032': attribute type 29 has an invalid length. [ 514.564748][T10962] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2035'. [ 516.506764][T11009] validate_nla: 2 callbacks suppressed [ 516.506785][T11009] netlink: 'syz.4.2049': attribute type 3 has an invalid length. [ 516.638850][T11009] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2049'. [ 517.157359][T11012] netlink: 'syz.0.2050': attribute type 6 has an invalid length. [ 517.261851][T11012] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.2050'. [ 517.545498][T11033] netlink: 'syz.3.2056': attribute type 21 has an invalid length. [ 518.091412][T11041] netlink: 'syz.2.2057': attribute type 10 has an invalid length. [ 518.755124][T11061] netlink: 'syz.4.2064': attribute type 2 has an invalid length. [ 518.801088][T11061] netlink: 'syz.4.2064': attribute type 1 has an invalid length. [ 518.816774][T11061] netlink: 170140 bytes leftover after parsing attributes in process `syz.4.2064'. [ 518.833484][T11066] netlink: 'syz.2.2065': attribute type 3 has an invalid length. [ 518.864870][T11066] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2065'. [ 519.355340][T11073] device syzkaller0 entered promiscuous mode [ 519.530121][T11072] delete_channel: no stack [ 522.414034][T11094] netlink: 'syz.1.2072': attribute type 10 has an invalid length. [ 522.518151][T11101] device syzkaller0 entered promiscuous mode [ 522.647167][T11111] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2078'. [ 522.790969][T11113] netlink: 'syz.3.2080': attribute type 3 has an invalid length. [ 522.828211][T11113] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2080'. [ 523.076777][T11124] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2083'. [ 525.015831][T11124] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2083'. [ 525.035274][T11136] netlink: 'syz.4.2086': attribute type 10 has an invalid length. [ 525.057884][T11136] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2086'. [ 525.331325][T11153] FAULT_INJECTION: forcing a failure. [ 525.331325][T11153] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 525.426945][T11153] CPU: 0 PID: 11153 Comm: syz.0.2090 Not tainted syzkaller #0 [ 525.434498][T11153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 525.444605][T11153] Call Trace: [ 525.448012][T11153] [ 525.450985][T11153] dump_stack_lvl+0x188/0x24e [ 525.455729][T11153] ? show_regs_print_info+0x12/0x12 [ 525.461065][T11153] ? load_image+0x400/0x400 [ 525.465696][T11153] ? __lock_acquire+0x7d10/0x7d10 [ 525.470785][T11153] should_fail_ex+0x399/0x4d0 [ 525.475527][T11153] _copy_to_user+0x2c/0x130 [ 525.480092][T11153] __htab_map_lookup_and_delete_batch+0x1c7e/0x2060 [ 525.486776][T11153] ? lookup_nulls_elem_raw+0x160/0x160 [ 525.492286][T11153] ? __fdget+0x17c/0x200 [ 525.496576][T11153] ? __htab_percpu_map_update_elem+0x700/0x700 [ 525.502778][T11153] bpf_map_do_batch+0x2c8/0x600 [ 525.507680][T11153] ? bpf_lsm_bpf+0x5/0x10 [ 525.512051][T11153] ? security_bpf+0x7a/0xa0 [ 525.516585][T11153] __sys_bpf+0x6f7/0x780 [ 525.520849][T11162] netlink: 'syz.2.2089': attribute type 10 has an invalid length. [ 525.528714][T11153] ? bpf_link_show_fdinfo+0x380/0x380 [ 525.528772][T11153] ? lock_chain_count+0x20/0x20 [ 525.528809][T11153] __x64_sys_bpf+0x78/0x90 [ 525.528836][T11153] do_syscall_64+0x4c/0xa0 [ 525.528863][T11153] ? clear_bhb_loop+0x60/0xb0 [ 525.528888][T11153] ? clear_bhb_loop+0x60/0xb0 [ 525.528915][T11153] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 525.528938][T11153] RIP: 0033:0x7efdd659c819 [ 525.528959][T11153] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 525.528976][T11153] RSP: 002b:00007efdd47d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 525.529000][T11153] RAX: ffffffffffffffda RBX: 00007efdd6816090 RCX: 00007efdd659c819 [ 525.529016][T11153] RDX: 0000000000000038 RSI: 0000200000000000 RDI: 0000000000000018 [ 525.529031][T11153] RBP: 00007efdd47d5090 R08: 0000000000000000 R09: 0000000000000000 [ 525.529044][T11153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 525.529057][T11153] R13: 00007efdd6816128 R14: 00007efdd6816090 R15: 00007ffe43f02e08 [ 525.529089][T11153] [ 525.923351][T11174] netlink: 'syz.4.2096': attribute type 3 has an invalid length. [ 525.966520][T11174] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2096'. [ 526.043260][T11179] netlink: 'syz.0.2098': attribute type 7 has an invalid length. [ 526.052896][T11179] netlink: 191184 bytes leftover after parsing attributes in process `syz.0.2098'. [ 526.604628][T11194] netlink: 'syz.0.2103': attribute type 10 has an invalid length. [ 526.781156][T11199] netlink: 'syz.4.2104': attribute type 10 has an invalid length. [ 526.856383][T11199] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2104'. [ 527.708201][T11225] netlink: 'syz.3.2112': attribute type 3 has an invalid length. [ 527.722215][T11227] netlink: 'syz.4.2113': attribute type 21 has an invalid length. [ 527.747986][T11227] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2113'. [ 527.759373][T11225] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2112'. [ 527.779862][T11227] netlink: 'syz.4.2113': attribute type 4 has an invalid length. [ 528.171694][T11231] netlink: 'syz.0.2111': attribute type 10 has an invalid length. [ 528.433330][T11231] team0: Port device dummy0 added [ 529.657884][T11262] netlink: 'syz.3.2125': attribute type 3 has an invalid length. [ 529.659379][T11264] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.2126'. [ 529.670751][T11262] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2125'. [ 529.709151][T11266] netlink: 'syz.2.2127': attribute type 39 has an invalid length. [ 530.357207][T11279] FAULT_INJECTION: forcing a failure. [ 530.357207][T11279] name failslab, interval 1, probability 0, space 0, times 0 [ 530.378025][T11279] CPU: 1 PID: 11279 Comm: syz.2.2130 Not tainted syzkaller #0 [ 530.385756][T11279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 530.395967][T11279] Call Trace: [ 530.399286][T11279] [ 530.402262][T11279] dump_stack_lvl+0x188/0x24e [ 530.406997][T11279] ? show_regs_print_info+0x12/0x12 [ 530.412424][T11279] ? load_image+0x400/0x400 [ 530.416970][T11279] ? __might_sleep+0xd0/0xd0 [ 530.421589][T11279] ? __lock_acquire+0x7d10/0x7d10 [ 530.426659][T11279] should_fail_ex+0x399/0x4d0 [ 530.431512][T11279] should_failslab+0x5/0x20 [ 530.436043][T11279] slab_pre_alloc_hook+0x59/0x310 [ 530.441101][T11279] ? trace_call_bpf+0x5d6/0x6b0 [ 530.445997][T11279] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 530.451766][T11279] __kmem_cache_alloc_node+0x4f/0x260 [ 530.457318][T11279] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 530.463074][T11279] __kmalloc+0xa0/0x240 [ 530.467279][T11279] tomoyo_realpath_from_path+0xdf/0x5d0 [ 530.472886][T11279] ? tomoyo_path_number_perm+0x205/0x650 [ 530.478572][T11279] tomoyo_path_number_perm+0x22f/0x650 [ 530.484249][T11279] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 530.489744][T11279] ? ksys_write+0x1c0/0x250 [ 530.494301][T11279] ? common_file_perm+0x171/0x1c0 [ 530.499453][T11279] ? __fget_files+0x28/0x4b0 [ 530.504075][T11279] ? __fget_files+0x28/0x4b0 [ 530.508734][T11279] security_file_ioctl+0x6c/0xa0 [ 530.513717][T11279] __se_sys_ioctl+0x48/0x170 [ 530.518359][T11279] do_syscall_64+0x4c/0xa0 [ 530.522825][T11279] ? clear_bhb_loop+0x60/0xb0 [ 530.527623][T11279] ? clear_bhb_loop+0x60/0xb0 [ 530.532454][T11279] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 530.538380][T11279] RIP: 0033:0x7fd412b9c819 [ 530.543015][T11279] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 530.563102][T11279] RSP: 002b:00007fd413982028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 530.571600][T11279] RAX: ffffffffffffffda RBX: 00007fd412e15fa0 RCX: 00007fd412b9c819 [ 530.579601][T11279] RDX: 00002000000000c0 RSI: 0000000000008923 RDI: 0000000000000005 [ 530.587600][T11279] RBP: 00007fd413982090 R08: 0000000000000000 R09: 0000000000000000 [ 530.595689][T11279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 530.603689][T11279] R13: 00007fd412e16038 R14: 00007fd412e15fa0 R15: 00007ffd2af2cc98 [ 530.611729][T11279] [ 530.827473][T11273] netlink: 'syz.4.2128': attribute type 10 has an invalid length. [ 531.028064][T11279] ERROR: Out of memory at tomoyo_realpath_from_path. [ 531.059948][T11288] ÿ: renamed from bond_slave_0 [ 532.780299][T11312] device wg2 entered promiscuous mode [ 533.057735][T11323] netlink: 'syz.0.2140': attribute type 3 has an invalid length. [ 533.101793][T11323] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2140'. [ 533.284337][T11322] netlink: 'syz.1.2141': attribute type 10 has an invalid length. [ 533.311764][T11331] sctp: [Deprecated]: syz.1.2141 (pid 11331) Use of int in maxseg socket option. [ 533.311764][T11331] Use struct sctp_assoc_value instead [ 533.392413][T11322] netlink: 'syz.1.2141': attribute type 10 has an invalid length. [ 533.415289][T11322] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2141'. [ 533.761538][T11347] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2142'. [ 534.638089][T11345] netlink: 'syz.3.2145': attribute type 10 has an invalid length. [ 534.682632][T11345] bond0: (slave dummy0): Releasing backup interface [ 534.721469][T11347] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2142'. [ 534.972004][T11368] netlink: 'syz.3.2154': attribute type 3 has an invalid length. [ 534.997853][T11368] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2154'. [ 535.124711][T11364] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.2155'. [ 536.035264][T11398] device bridge_slave_1 left promiscuous mode [ 536.058825][T11398] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.091851][T11398] device bridge_slave_0 left promiscuous mode [ 536.221274][T11398] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.629027][T11396] IPv6: Can't replace route, no match found [ 536.676505][T11406] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 537.141921][T11424] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2167'. [ 537.166285][T11426] netlink: 'syz.0.2168': attribute type 11 has an invalid length. [ 537.207884][T11426] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2168'. [ 537.230840][T11426] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 537.548031][T11435] netlink: 'syz.1.2170': attribute type 3 has an invalid length. [ 537.591231][T11435] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2170'. [ 538.392010][T11449] netlink: 'syz.4.2174': attribute type 10 has an invalid length. [ 538.489278][T11449] bridge0: port 2(bridge_slave_1) entered blocking state [ 538.496518][T11449] bridge0: port 2(bridge_slave_1) entered forwarding state [ 538.504155][T11449] bridge0: port 1(bridge_slave_0) entered blocking state [ 538.511323][T11449] bridge0: port 1(bridge_slave_0) entered forwarding state [ 539.936868][T11449] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.944221][T11449] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.573721][T11467] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.2178'. [ 540.587430][T11473] netlink: 'syz.1.2179': attribute type 39 has an invalid length. [ 540.906579][T11487] netlink: 'syz.0.2184': attribute type 3 has an invalid length. [ 540.931052][T11487] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2184'. [ 541.028794][T11471] netlink: 'syz.4.2181': attribute type 10 has an invalid length. [ 541.216442][T11498] netlink: 'syz.0.2187': attribute type 7 has an invalid length. [ 541.294360][T11500] netlink: 'syz.0.2187': attribute type 21 has an invalid length. [ 541.318916][T11500] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2187'. [ 542.166922][T11517] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2193'. [ 542.212759][T11517] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 543.095913][T11537] netlink: 'syz.1.2198': attribute type 3 has an invalid length. [ 543.131528][T11537] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2198'. [ 543.709409][T11558] delete_channel: no stack [ 543.714946][T11555] netlink: 126632 bytes leftover after parsing attributes in process `syz.1.2203'. [ 543.728295][T11549] netlink: 'syz.2.2199': attribute type 10 has an invalid length. [ 543.756990][T11555] netlink: 8192 bytes leftover after parsing attributes in process `syz.1.2203'. [ 543.775460][T11558] delete_channel: no stack [ 544.723152][T11576] FAULT_INJECTION: forcing a failure. [ 544.723152][T11576] name failslab, interval 1, probability 0, space 0, times 0 [ 544.814589][T11576] CPU: 1 PID: 11576 Comm: syz.0.2208 Not tainted syzkaller #0 [ 544.822300][T11576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 544.832412][T11576] Call Trace: [ 544.835732][T11576] [ 544.838738][T11576] dump_stack_lvl+0x188/0x24e [ 544.843452][T11576] ? show_regs_print_info+0x12/0x12 [ 544.848761][T11576] ? load_image+0x400/0x400 [ 544.853282][T11576] ? __might_sleep+0xd0/0xd0 [ 544.857885][T11576] ? __lock_acquire+0x7d10/0x7d10 [ 544.863016][T11576] should_fail_ex+0x399/0x4d0 [ 544.867712][T11576] should_failslab+0x5/0x20 [ 544.872228][T11576] slab_pre_alloc_hook+0x59/0x310 [ 544.877267][T11576] ? bpf_prog_test_run_skb+0x234/0x12a0 [ 544.882848][T11576] __kmem_cache_alloc_node+0x4f/0x260 [ 544.888236][T11576] ? bpf_prog_test_run_skb+0x234/0x12a0 [ 544.893818][T11576] __kmalloc+0xa0/0x240 [ 544.898124][T11576] bpf_prog_test_run_skb+0x234/0x12a0 [ 544.903525][T11576] ? __fget_files+0x28/0x4b0 [ 544.908131][T11576] ? __fget_files+0x28/0x4b0 [ 544.912736][T11576] ? __fget_files+0x43d/0x4b0 [ 544.917434][T11576] ? cpu_online+0xa0/0xa0 [ 544.921783][T11576] bpf_prog_test_run+0x31e/0x390 [ 544.926741][T11576] __sys_bpf+0x62b/0x780 [ 544.931001][T11576] ? bpf_link_show_fdinfo+0x380/0x380 [ 544.936416][T11576] ? lock_chain_count+0x20/0x20 [ 544.941290][T11576] __x64_sys_bpf+0x78/0x90 [ 544.945720][T11576] do_syscall_64+0x4c/0xa0 [ 544.950155][T11576] ? clear_bhb_loop+0x60/0xb0 [ 544.955372][T11576] ? clear_bhb_loop+0x60/0xb0 [ 544.960090][T11576] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 544.965992][T11576] RIP: 0033:0x7efdd659c819 [ 544.970420][T11576] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 544.990035][T11576] RSP: 002b:00007efdd47f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 544.998552][T11576] RAX: ffffffffffffffda RBX: 00007efdd6815fa0 RCX: 00007efdd659c819 [ 545.006623][T11576] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 545.014692][T11576] RBP: 00007efdd47f6090 R08: 0000000000000000 R09: 0000000000000000 [ 545.022673][T11576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 545.030653][T11576] R13: 00007efdd6816038 R14: 00007efdd6815fa0 R15: 00007ffe43f02e08 [ 545.038657][T11576] [ 545.147236][T11581] delete_channel: no stack [ 545.179325][T11581] delete_channel: no stack [ 545.224834][T11581] FAULT_INJECTION: forcing a failure. [ 545.224834][T11581] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 545.437924][T11581] CPU: 0 PID: 11581 Comm: syz.4.2209 Not tainted syzkaller #0 [ 545.445499][T11581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 545.456048][T11581] Call Trace: [ 545.459373][T11581] [ 545.462445][T11581] dump_stack_lvl+0x188/0x24e [ 545.467214][T11581] ? show_regs_print_info+0x12/0x12 [ 545.472566][T11581] ? load_image+0x400/0x400 [ 545.477128][T11581] ? __might_fault+0xa6/0x120 [ 545.481885][T11581] should_fail_ex+0x399/0x4d0 [ 545.486714][T11581] copyin+0x1b/0x120 [ 545.490668][T11581] _copy_from_iter+0x447/0x1130 [ 545.495592][T11581] ? copyout_mc+0x110/0x110 [ 545.500165][T11581] ? __virt_addr_valid+0x188/0x540 [ 545.505343][T11581] ? __virt_addr_valid+0x188/0x540 [ 545.510532][T11581] ? __virt_addr_valid+0x465/0x540 [ 545.515712][T11581] ? __check_object_size+0x500/0xa40 [ 545.521072][T11581] netlink_sendmsg+0x755/0xbd0 [ 545.526009][T11581] ? netlink_getsockopt+0x550/0x550 [ 545.531298][T11581] ? aa_sock_msg_perm+0x94/0x150 [ 545.536403][T11581] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 545.541915][T11581] ? security_socket_sendmsg+0x7c/0xa0 [ 545.547421][T11581] ? netlink_getsockopt+0x550/0x550 [ 545.552649][T11581] ____sys_sendmsg+0x5be/0x970 [ 545.557463][T11581] ? __sys_sendmsg_sock+0x30/0x30 [ 545.562609][T11581] ? __import_iovec+0x315/0x500 [ 545.567507][T11581] ? import_iovec+0x6f/0xa0 [ 545.572129][T11581] ___sys_sendmsg+0x2a2/0x360 [ 545.576843][T11581] ? __sys_sendmsg+0x290/0x290 [ 545.581667][T11581] ? __lock_acquire+0x7d10/0x7d10 [ 545.586765][T11581] __se_sys_sendmsg+0x1bb/0x2a0 [ 545.591787][T11581] ? __x64_sys_sendmsg+0x80/0x80 [ 545.596781][T11581] ? lockdep_hardirqs_on+0x94/0x140 [ 545.602017][T11581] do_syscall_64+0x4c/0xa0 [ 545.606460][T11581] ? clear_bhb_loop+0x60/0xb0 [ 545.611166][T11581] ? clear_bhb_loop+0x60/0xb0 [ 545.615907][T11581] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 545.621823][T11581] RIP: 0033:0x7f69bbd9c819 [ 545.626297][T11581] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 545.645930][T11581] RSP: 002b:00007f69bcba2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 545.654371][T11581] RAX: ffffffffffffffda RBX: 00007f69bc016090 RCX: 00007f69bbd9c819 [ 545.662459][T11581] RDX: 0000000000000004 RSI: 0000200000000940 RDI: 0000000000000003 [ 545.670709][T11581] RBP: 00007f69bcba2090 R08: 0000000000000000 R09: 0000000000000000 [ 545.679496][T11581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 545.687569][T11581] R13: 00007f69bc016128 R14: 00007f69bc016090 R15: 00007ffcf747e7c8 [ 545.695588][T11581] [ 545.756646][T11588] netlink: 'syz.0.2213': attribute type 8 has an invalid length. [ 545.767937][T11588] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2213'. [ 545.779679][ T4283] Bluetooth: hci4: ISO packet for unknown connection handle 2622 [ 545.818775][T11592] netlink: 'syz.3.2214': attribute type 3 has an invalid length. [ 545.848456][T11592] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2214'. [ 546.216449][T11600] FAULT_INJECTION: forcing a failure. [ 546.216449][T11600] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 546.231418][T11600] CPU: 0 PID: 11600 Comm: syz.3.2218 Not tainted syzkaller #0 [ 546.238929][T11600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 546.249010][T11600] Call Trace: [ 546.252305][T11600] [ 546.255247][T11600] dump_stack_lvl+0x188/0x24e [ 546.259962][T11600] ? show_regs_print_info+0x12/0x12 [ 546.265269][T11600] ? load_image+0x400/0x400 [ 546.269793][T11600] ? __lock_acquire+0x7d10/0x7d10 [ 546.274832][T11600] ? __bpf_trace_bpf_trace_printk+0x20/0x20 [ 546.280834][T11600] should_fail_ex+0x399/0x4d0 [ 546.285537][T11600] strncpy_from_user+0x32/0x350 [ 546.290582][T11600] bpf_prog_load+0x1f3/0x1560 [ 546.295290][T11600] ? map_freeze+0x390/0x390 [ 546.299828][T11600] ? __sys_bpf+0x360/0x780 [ 546.304270][T11600] __sys_bpf+0x5b8/0x780 [ 546.308537][T11600] ? bpf_link_show_fdinfo+0x380/0x380 [ 546.313953][T11600] __x64_sys_bpf+0x78/0x90 [ 546.318581][T11600] do_syscall_64+0x4c/0xa0 [ 546.323011][T11600] ? clear_bhb_loop+0x60/0xb0 [ 546.327701][T11600] ? clear_bhb_loop+0x60/0xb0 [ 546.332394][T11600] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 546.338315][T11600] RIP: 0033:0x7fcf4c19c819 [ 546.342741][T11600] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 546.362543][T11600] RSP: 002b:00007fcf4d02c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 546.370975][T11600] RAX: ffffffffffffffda RBX: 00007fcf4c415fa0 RCX: 00007fcf4c19c819 [ 546.378958][T11600] RDX: 0000000000000094 RSI: 0000200000000340 RDI: 0000000000000005 [ 546.386941][T11600] RBP: 00007fcf4d02c090 R08: 0000000000000000 R09: 0000000000000000 [ 546.395008][T11600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 546.403072][T11600] R13: 00007fcf4c416038 R14: 00007fcf4c415fa0 R15: 00007ffd03b212a8 [ 546.411066][T11600] [ 546.968631][T11599] netlink: 'syz.4.2216': attribute type 10 has an invalid length. [ 547.320572][T11629] FAULT_INJECTION: forcing a failure. [ 547.320572][T11629] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 547.437991][T11629] CPU: 1 PID: 11629 Comm: syz.0.2224 Not tainted syzkaller #0 [ 547.445546][T11629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 547.455663][T11629] Call Trace: [ 547.459069][T11629] [ 547.462117][T11629] dump_stack_lvl+0x188/0x24e [ 547.466853][T11629] ? show_regs_print_info+0x12/0x12 [ 547.472094][T11629] ? load_image+0x400/0x400 [ 547.476639][T11629] ? __lock_acquire+0x7d10/0x7d10 [ 547.481718][T11629] should_fail_ex+0x399/0x4d0 [ 547.486436][T11629] _copy_from_user+0x2c/0x170 [ 547.491154][T11629] ___sys_sendmsg+0x1c3/0x360 [ 547.495968][T11629] ? __sys_sendmsg+0x290/0x290 [ 547.500803][T11629] ? __lock_acquire+0x7d10/0x7d10 [ 547.505906][T11629] __se_sys_sendmsg+0x1bb/0x2a0 [ 547.510801][T11629] ? __x64_sys_sendmsg+0x80/0x80 [ 547.515801][T11629] ? lockdep_hardirqs_on+0x94/0x140 [ 547.521045][T11629] do_syscall_64+0x4c/0xa0 [ 547.525500][T11629] ? clear_bhb_loop+0x60/0xb0 [ 547.530302][T11629] ? clear_bhb_loop+0x60/0xb0 [ 547.535026][T11629] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 547.541051][T11629] RIP: 0033:0x7efdd659c819 [ 547.545580][T11629] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 547.565205][T11629] RSP: 002b:00007efdd47f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 547.573644][T11629] RAX: ffffffffffffffda RBX: 00007efdd6815fa0 RCX: 00007efdd659c819 [ 547.581633][T11629] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 547.589624][T11629] RBP: 00007efdd47f6090 R08: 0000000000000000 R09: 0000000000000000 [ 547.597608][T11629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 547.605683][T11629] R13: 00007efdd6816038 R14: 00007efdd6815fa0 R15: 00007ffe43f02e08 [ 547.613692][T11629] [ 547.690692][T11633] netlink: 'syz.4.2225': attribute type 3 has an invalid length. [ 547.703572][T11630] netlink: 'syz.3.2222': attribute type 29 has an invalid length. [ 547.704808][T11631] netlink: 'syz.2.2223': attribute type 10 has an invalid length. [ 547.765081][T11633] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2225'. [ 548.343486][T11630] netlink: 'syz.3.2222': attribute type 29 has an invalid length. [ 548.352933][T11641] : renamed from vlan0 [ 548.366311][T11644] netlink: 'syz.1.2228': attribute type 40 has an invalid length. [ 548.396471][T11635] netlink: 'syz.3.2222': attribute type 29 has an invalid length. [ 548.530266][T11646] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2229'. [ 548.946716][T11655] validate_nla: 1 callbacks suppressed [ 548.946737][T11655] netlink: 'syz.3.2232': attribute type 40 has an invalid length. [ 549.301570][T11678] netlink: 'syz.2.2237': attribute type 10 has an invalid length. [ 550.327134][T11699] netlink: 'syz.1.2245': attribute type 3 has an invalid length. [ 550.413307][T11699] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2245'. [ 552.039903][T11730] netlink: 'syz.0.2254': attribute type 10 has an invalid length. [ 552.435384][T11744] device virt_wifi0 entered promiscuous mode [ 552.469946][T11745] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 552.952613][ C0] [ 552.952623][ C0] ================================ [ 552.952629][ C0] WARNING: inconsistent lock state [ 552.952635][ C0] syzkaller #0 Not tainted [ 552.952645][ C0] -------------------------------- [ 552.952649][ C0] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 552.952657][ C0] syz.4.2260/11754 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 552.952677][ C0] ffff8880278a1320 (&htab->lockdep_key){....}-{2:2}, at: htab_lock_bucket+0x179/0x2f0 [ 552.952728][ C0] {INITIAL USE} state was registered at: [ 552.952735][ C0] lock_acquire+0x1bb/0x4a0 [ 552.952757][ C0] _raw_spin_lock+0x2a/0x40 [ 552.952774][ C0] htab_lock_bucket+0x179/0x2f0 [ 552.952792][ C0] htab_lru_map_update_elem+0x31e/0xe80 [ 552.952809][ C0] bpf_map_update_value+0x59e/0x670 [ 552.952829][ C0] map_update_elem+0x4d7/0x680 [ 552.952849][ C0] __sys_bpf+0x4ec/0x780 [ 552.952869][ C0] __x64_sys_bpf+0x78/0x90 [ 552.952888][ C0] do_syscall_64+0x4c/0xa0 [ 552.952911][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 552.952930][ C0] irq event stamp: 1546 [ 552.952936][ C0] hardirqs last enabled at (1545): [] syscall_enter_from_user_mode+0x21/0x80 [ 552.952960][ C0] hardirqs last disabled at (1546): [] exc_debug+0x6e/0x130 [ 552.952978][ C0] softirqs last enabled at (1514): [] bpf_prog_load+0x1127/0x1560 [ 552.953005][ C0] softirqs last disabled at (1512): [] bpf_ksym_add+0x29/0x340 [ 552.953024][ C0] [ 552.953024][ C0] other info that might help us debug this: [ 552.953029][ C0] Possible unsafe locking scenario: [ 552.953029][ C0] [ 552.953033][ C0] CPU0 [ 552.953037][ C0] ---- [ 552.953040][ C0] lock(&htab->lockdep_key); [ 552.953051][ C0] [ 552.953054][ C0] lock(&htab->lockdep_key); [ 552.953065][ C0] [ 552.953065][ C0] *** DEADLOCK *** [ 552.953065][ C0] [ 552.953069][ C0] no locks held by syz.4.2260/11754. [ 552.953076][ C0] [ 552.953076][ C0] stack backtrace: [ 552.953082][ C0] CPU: 0 PID: 11754 Comm: syz.4.2260 Not tainted syzkaller #0 [ 552.953098][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 552.953107][ C0] Call Trace: [ 552.953113][ C0] <#DB> [ 552.953121][ C0] dump_stack_lvl+0x188/0x24e [ 552.953153][ C0] ? show_regs_print_info+0x12/0x12 [ 552.953194][ C0] ? print_usage_bug+0x42a/0x690 [ 552.953219][ C0] ? verify_lock_unused+0x18/0x140 [ 552.953253][ C0] lock_acquire+0x2df/0x4a0 [ 552.953286][ C0] ? htab_lock_bucket+0x179/0x2f0 [ 552.953311][ C0] ? read_lock_is_recursive+0x10/0x10 [ 552.953363][ C0] _raw_spin_lock+0x2a/0x40 [ 552.953380][ C0] ? htab_lock_bucket+0x179/0x2f0 [ 552.953400][ C0] htab_lock_bucket+0x179/0x2f0 [ 552.953427][ C0] ? htab_lru_map_delete_node+0x630/0x630 [ 552.953465][ C0] ? htab_map_hash+0x269/0x6d0 [ 552.953490][ C0] htab_lru_map_delete_elem+0x1ad/0x780 [ 552.953520][ C0] ? bpf_overflow_handler+0xd9/0x7c0 [ 552.953555][ C0] ? htab_lru_map_update_elem+0xe80/0xe80 [ 552.953600][ C0] bpf_prog_2c29ac5cdc6b1842+0x3a/0x3e [ 552.953625][ C0] bpf_overflow_handler+0x6e8/0x7c0 [ 552.953653][ C0] ? bpf_overflow_handler+0xd9/0x7c0 [ 552.953673][ C0] ? perf_swevent_overflow+0x230/0x230 [ 552.953706][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 552.953738][ C0] __perf_event_overflow+0x448/0x610 [ 552.953778][ C0] perf_swevent_event+0x315/0x570 [ 552.953809][ C0] ? perf_tp_event+0xc30/0xc30 [ 552.953858][ C0] perf_bp_event+0x312/0x3f0 [ 552.953894][ C0] ? perf_event_free_bpf_prog+0x110/0x110 [ 552.953974][ C0] ? atomic_notifier_call_chain+0x2c/0x2b0 [ 552.954001][ C0] ? read_lock_is_recursive+0x10/0x10 [ 552.954039][ C0] hw_breakpoint_exceptions_notify+0x152/0x470 [ 552.954073][ C0] atomic_notifier_call_chain+0x17a/0x2b0 [ 552.954093][ C0] ? atomic_notifier_call_chain+0x2c/0x2b0 [ 552.954122][ C0] notify_die+0x141/0x1a0 [ 552.954148][ C0] ? srcu_init_notifier_head+0x90/0x90 [ 552.954197][ C0] notify_debug+0x20/0x30 [ 552.954217][ C0] exc_debug+0xd9/0x130 [ 552.954241][ C0] asm_exc_debug+0x1a/0x40 [ 552.954260][ C0] RIP: 0010:copy_user_enhanced_fast_string+0xa/0x40 [ 552.954286][ C0] Code: ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 8d 0c ca 89 ca eb 20 0f 01 cb 83 fa 40 72 38 89 d1 a4 31 c0 0f 01 ca c3 89 ca eb 0a 90 90 90 90 90 90 90 90 90 90 [ 552.954300][ C0] RSP: 0018:ffffc90003fa7d48 EFLAGS: 00050202 [ 552.954315][ C0] RAX: ffffffff84114d01 RBX: 0000000000000050 RCX: 000000000000004f [ 552.954327][ C0] RDX: 0000000000000050 RSI: 0000200000000301 RDI: ffffc90003fa7dc1 [ 552.954339][ C0] RBP: 0000000000000000 R08: ffffc90003fa7e0f R09: 1ffff920007f4fc1 [ 552.954349][ C0] R10: dffffc0000000000 R11: fffff520007f4fc2 R12: 00007fffffffefb0 [ 552.954361][ C0] R13: 0000000000000050 R14: ffffc90003fa7dc0 R15: 0000200000000300 [ 552.954383][ C0] ? _copy_from_user+0x31/0x170 [ 552.954414][ C0] [ 552.954419][ C0] [ 552.954424][ C0] _copy_from_user+0xf4/0x170 [ 552.954449][ C0] __sys_bpf+0x2ea/0x780 [ 552.954474][ C0] ? bpf_link_show_fdinfo+0x380/0x380 [ 552.954522][ C0] ? lock_chain_count+0x20/0x20 [ 552.954567][ C0] __x64_sys_bpf+0x78/0x90 [ 552.954590][ C0] do_syscall_64+0x4c/0xa0 [ 552.954611][ C0] ? clear_bhb_loop+0x60/0xb0 [ 552.954631][ C0] ? clear_bhb_loop+0x60/0xb0 [ 552.954657][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 552.954676][ C0] RIP: 0033:0x7f69bbd9c819 [ 552.954693][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 552.954707][ C0] RSP: 002b:00007f69bcbc3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 552.954724][ C0] RAX: ffffffffffffffda RBX: 00007f69bc015fa0 RCX: 00007f69bbd9c819 [ 552.954737][ C0] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 000000000000000a [ 552.954748][ C0] RBP: 00007f69bbe32c91 R08: 0000000000000000 R09: 0000000000000000 [ 552.954759][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 552.954770][ C0] R13: 00007f69bc016038 R14: 00007f69bc015fa0 R15: 00007ffcf747e7c8 [ 552.954810][ C0] [ 553.670736][T11760] netlink: 'syz.2.2261': attribute type 3 has an invalid length. [ 553.692059][T11760] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2261'. [ 562.609295][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.615677][ T1276] ieee802154 phy1 wpan1: encryption failed: -22