last executing test programs: 17.859161971s ago: executing program 0 (id=3106): r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x2, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x20, &(0x7f0000000040)={&(0x7f0000000140)=""/147, 0x93, 0x0, &(0x7f0000000200)=""/193, 0xc1}}, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="01fbff4300000000000080000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x3, r3, 0xc00}, 0x38) openat$cgroup_int(r2, &(0x7f0000000140)='cpuset.memory_spread_slab\x00', 0x2, 0x0) openat$cgroup_freezer_state(r2, &(0x7f0000000100), 0x2, 0x0) socket$kcm(0x29, 0x6, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x4, [@var={0x2, 0x0, 0x0, 0x11}, @func_proto={0x2, 0x1, 0x0, 0x13, 0x2, [{0x2}]}, @var]}, {0x0, [0x0, 0x61]}}, 0x0, 0x50}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x200000000000020a, &(0x7f0000000080)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x401c5820, &(0x7f0000000000)=0x18) ioctl$SIOCSIFHWADDR(r4, 0x4030582b, &(0x7f0000000340)={'lo\x00', @random="3f2f94c100"}) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) unlink(&(0x7f0000000080)='./file0\x00') r5 = socket$kcm(0x10, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'vcan0\x00', @random="5b9f45ff6cf9"}) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x60, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d0000004001000000000000", 0x20}], 0x1}, 0x40000) 13.625134879s ago: executing program 0 (id=3119): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$kcm(0x29, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f0000002e40)={&(0x7f0000000a80)=@pptp={0x18, 0x2, {0x3, @remote}}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000b00)="59bd8d0c6c3f8397a3a6243cae3e5ab8918aceea0a9cdbb19e93ecddce33df4b9c3d3b6284e48d2bb3528077956a76364773d5ff6f2f0fc9d6e14005165a9a7ce22c05696e1257bf1d98b15bddc0d385e9542a16145eac7d6e4ee46041068bd687071d4045a8866de739a4c446f9b53bd63bb823fa7f57a09bf067c6c990028a60f771b857afb21827d92b3a13889ef53d5788f972e47bd89b979624a4d2189aad639a4a98", 0xa5}, {&(0x7f0000000bc0)="5bb1b794c7aff8a29eca070347f726e101ad915290bdecedbbacca4f6ac9a8aef8cf4b8f", 0x24}, {&(0x7f0000000c00)="c8b2e3af4f88fc81df85fbfe0b2ca254eec99e53bb94d0de95eb39a4ed9c40de40f6", 0x22}], 0x3, &(0x7f0000000c80)=[{0x88, 0x29, 0x0, "69376be7376b918ac7363f43ee4249cd48d21d16a049af02bd1fa004291774c2caad65b54c8cfa2c1ab04892c197bccf2b966ad0826dde64b219106a8f54ad92e48982ffdd9269fe1a4997da216f96f6062322ed618c5147e5ae6c93ad2e971717c3629c6c68823b7d0574c326ba034c8c"}, {0x38, 0x10e, 0x1, "90dbb9af603d5da5bf774371867385dd76c95ca929254a46285210430c0ec1a0797d897a"}, {0x1010, 0x88, 0xfff, "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"}, {0x1010, 0x118, 0x84, "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"}, {0x18, 0x10b, 0x5, "f04e4867f9"}, {0xb0, 0x8b6d654acae695f0, 0x81, "0b2c3f8618cf273974e17c8bb20a8ce2a5980382f039a50fdcfc8dceed4c00ef99b8f6e035554f298a2801a72ce524c2ad1e5961dc8722f4f50258027c820af5fd03918c68e7c312d31c714dcc599d836344cebe1775a9f9669d84f274928d19c9154d02fdf591e0c0b934b56da0c3bd66d2894e4a34b14e01b7021811502ef3543696828ab90acb70f926d1b14b460eaced3c678fddb5e28e"}], 0x21a8}, 0x4000) ioctl$SIOCSIFHWADDR(r2, 0x541b, &(0x7f0000000080)={'syzkaller1\x00', @remote}) 13.257396679s ago: executing program 0 (id=3121): ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8970, &(0x7f0000001a80)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf\xc8>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8970, &(0x7f0000001a80)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf\xc8>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000340)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3803, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r5, 0x107, 0x12, &(0x7f00000008c0), 0x4) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001f80)={&(0x7f0000000340), 0x6e, &(0x7f0000001ec0)=[{&(0x7f00000003c0)=""/9, 0x9}, {&(0x7f0000000400)=""/74, 0x4a}, {&(0x7f0000000c40)=""/4096, 0x1000}, {&(0x7f0000001c40)=""/162, 0xa2}, {&(0x7f0000001d00)=""/133, 0x85}, {&(0x7f0000001dc0)=""/216, 0xd8}], 0x6, &(0x7f0000001f40)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.477857509s ago: executing program 1 (id=3144): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2}, 0x50) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x4, [@decl_tag={0x1, 0x0, 0x0, 0x11, 0x2, 0x4}, @enum64={0x7, 0x5, 0x0, 0x13, 0x1, 0x4, [{0x7, 0x9, 0x2}, {0x2, 0x3ff, 0xfffff072}, {0x3, 0x8, 0x1}, {0x2, 0x61f9, 0x10}, {0xb, 0x470a, 0x6}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x4, 0x2}}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000300)=""/181, 0x8c, 0xb5, 0x0, 0x0, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x400, 0x5, 0x7, 0x200, r1, 0x0, '\x00', 0x0, r2, 0x2, 0x4, 0x0, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000580)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xc6}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800020009000c00040004c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 4.412671267s ago: executing program 1 (id=3145): r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x2, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x20, &(0x7f0000000040)={&(0x7f0000000140)=""/147, 0x93, 0x0, &(0x7f0000000200)=""/193, 0xc1}}, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x3, r3, 0xc00}, 0x38) openat$cgroup_int(r2, &(0x7f0000000140)='cpuset.memory_spread_slab\x00', 0x2, 0x0) openat$cgroup_freezer_state(r2, &(0x7f0000000100), 0x2, 0x0) socket$kcm(0x29, 0x6, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x4, [@var={0x2, 0x0, 0x0, 0x11}, @func_proto={0x2, 0x1, 0x0, 0x13, 0x2, [{0x2}]}, @var]}, {0x0, [0x0, 0x61]}}, 0x0, 0x50}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x200000000000020a, &(0x7f0000000080)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x401c5820, &(0x7f0000000000)=0x18) ioctl$SIOCSIFHWADDR(r4, 0x4030582b, &(0x7f0000000340)={'lo\x00', @random="3f2f94c100"}) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) unlink(&(0x7f0000000080)='./file0\x00') r5 = socket$kcm(0x10, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'vcan0\x00', @random="5b9f45ff6cf9"}) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x60, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d0000004001000000000000", 0x20}], 0x1}, 0x40000) 4.412343437s ago: executing program 3 (id=3146): r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x2, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x20, &(0x7f0000000040)={&(0x7f0000000140)=""/147, 0x93, 0x0, &(0x7f0000000200)=""/193, 0xc1}}, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="01fbff4300000000000080000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x3, r3, 0xc00}, 0x38) openat$cgroup_int(r2, &(0x7f0000000140)='cpuset.memory_spread_slab\x00', 0x2, 0x0) openat$cgroup_freezer_state(r2, &(0x7f0000000100), 0x2, 0x0) socket$kcm(0x29, 0x6, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x4, [@var={0x2, 0x0, 0x0, 0x11}, @func_proto={0x2, 0x1, 0x0, 0x13, 0x2, [{0x2}]}, @var]}, {0x0, [0x0, 0x61]}}, 0x0, 0x50}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x200000000000020a, &(0x7f0000000080)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x401c5820, &(0x7f0000000000)=0x18) ioctl$SIOCSIFHWADDR(r4, 0x4030582b, &(0x7f0000000340)={'lo\x00', @random="3f2f94c100"}) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) unlink(&(0x7f0000000080)='./file0\x00') r5 = socket$kcm(0x10, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'vcan0\x00', @random="5b9f45ff6cf9"}) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x60, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d0000004001000000000000", 0x20}], 0x1}, 0x40000) 3.320954867s ago: executing program 2 (id=3151): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="12000000070000000400000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000340)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3803, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r3, 0x107, 0x12, &(0x7f00000008c0), 0x4) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001f80)={&(0x7f0000000340), 0x6e, &(0x7f0000001ec0)=[{&(0x7f00000003c0)=""/9, 0x9}, {&(0x7f0000000400)=""/74, 0x4a}, {&(0x7f0000000c40)=""/4096, 0x1000}, {&(0x7f0000001c40)=""/162, 0xa2}, {&(0x7f0000001d00)=""/133, 0x85}, {&(0x7f0000001dc0)=""/216, 0xd8}], 0x6, &(0x7f0000001f40)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.178356671s ago: executing program 4 (id=3153): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000340)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3803, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r5, 0x107, 0x12, &(0x7f00000008c0), 0x4) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001f80)={&(0x7f0000000340), 0x6e, &(0x7f0000001ec0)=[{&(0x7f00000003c0)=""/9, 0x9}, {&(0x7f0000000400)=""/74, 0x4a}, {&(0x7f0000000c40)=""/4096, 0x1000}, {&(0x7f0000001c40)=""/162, 0xa2}, {&(0x7f0000001d00)=""/133, 0x85}, {&(0x7f0000001dc0)=""/216, 0xd8}], 0x6, &(0x7f0000001f40)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.019105835s ago: executing program 2 (id=3154): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x700a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000f80)={r0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3}, 0x50) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1000005d71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000b40), 0xa}, 0x40, 0x0, 0x0, 0x3, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000030000006a0af2fe000000008500000009000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989425f5d0b79f6584d0416d7c4bb9f547b328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f01000000010000006e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b98d2de10c21d3ea02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d000000200008000000000000001abc11c800000000000000000000000928ee53595a779d243a48cea769470424d20a04c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2c4af38ffb7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0eb3280e09758bd445ab91d20baca005472b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92fe8bad99ca332af00f191b66b6a6f732a91f0e2e9190e4b448da7de018c58e950767f9b320be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c52573d9308a13d115b43f8b1894c8fa8a14dc4810f61ae96bf704526a8919bc700002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381ccc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73cfd1e76982f3d899f71e495f0ba8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e4a48dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f00000021f8547d393dabe616fbbde21c90be00b5a22671395c7a69c6dd4d022ffc97ddb6aa025131652d409da1d8cfc3d219d4b1c1b7b8170d7c33d91db2b73f7ae02485a209a2474b5d0790d05c01bec623056e4d3f4d3149373a28b26a15a1fcce73d57e6eaf7e6f315fe275ebc9ef7aeca277dde01dde724f419803a2172a7833ceab38d21ca4f1dea5e1f4d8824167b21dd289dd4e6ecfba9e163bdbc48e1e758ecde05c10809c9edfa6d77c652fd742e6dad13d2a397bebe3ea8bc087d3720e2202f36c7719ae34f042e19dc08a3323a3d94098a7ec171469352bab1662c3e4d4803c565cfcce32dad628fade43a4844abb230ce608726fd87e93c405a96cf638c41510f26e9da5f316"], &(0x7f0000000b80)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x3}, 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r4 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r4, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x400c804) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r3, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000014c0)={0x3, 0x11, &(0x7f0000001000)=ANY=[@ANYBLOB="18020000030000000000000000000000850000002a000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000400b705000008cb400085000000a50000009500000000000000847ffc3e961068346fd8b3d60e93697cfc2ced0f266f2fa39b9c86c565fa8e2db23ba84051b84d4b629a7835518be5680f725cd8f96f4044adc2e387bc39013f6b1de6fa9f404a67881e360bf8caa6d4dd6f962690d169d1c42a663722292b0f89dbbf2bcb398fec54ad558dbfc59f1da59bceab58198b54bfb54888f58a320db787878a1d1eed74889689d8fd"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{}, &(0x7f0000000580), &(0x7f00000005c0)=r0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="1e000000810a0000f8ffffffff00000008800100", @ANYRES32=0x1, @ANYBLOB="21ffffff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000002d7c8032a313c6bccd7701b2a423cbfc558c20c011f6c133da4a47912f8dc0243408525a6112d497f0b1ffabef1f6e85c537f1b414aa1e6da2744f64a1d03ff318fbf2d77f431da898f5108ca113c7a405bb6bfac5", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB], 0x50) r6 = syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x420}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000f00)={0x4, 0x80, 0x9, 0x2, 0x6, 0x0, 0x0, 0x6, 0x10090, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, @perf_config_ext={0x3, 0x1}, 0x100180, 0x3, 0x8000, 0x0, 0xb, 0x6, 0x8, 0x0, 0xa, 0x0, 0x8000000000000000}, r6, 0xb, r1, 0x2) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d40)=@o_path={&(0x7f0000000d00)='./file0\x00', 0x0, 0x10, r1}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000d80)={r2}, 0x4) r7 = socket$kcm(0x23, 0x2, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, &(0x7f00000000c0)=r8, 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000940)={r8, r8}) 2.890698529s ago: executing program 4 (id=3155): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x200, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0, 0x5}, 0x21, 0xffffffffffff6671, 0x0, 0x0, 0x0, 0x200}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x2, 0x1000000000000005, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000b00)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r2, r1}, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="2b40000048009125745c7388641f9c0e0a"], 0xfe33) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000040) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x882, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x9}, 0x0, 0xa, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$kcm(0x23, 0x5, 0x0) write$cgroup_pressure(r4, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x0, @rand_addr=0x94040000}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380)}], 0x1, &(0x7f0000007880)=ANY=[], 0x98}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000800)={&(0x7f0000000300)=@nl=@proc={0x10, 0x0, 0x25dfdbfb, 0x200000}, 0x80, 0x0}, 0x20040010) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0xc29a, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000240)='cpuset.memory_migrate\x00', 0x2, 0x0) socket$kcm(0x1e, 0x4, 0x0) socket$kcm(0x10, 0x2, 0x0) 2.796161772s ago: executing program 2 (id=3156): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x8001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b9040a1d080220000000041296a1180002000000030000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) recvmsg$kcm(r1, &(0x7f0000000500)={&(0x7f0000000080)=@qipcrtr, 0x80, &(0x7f0000000480)=[{&(0x7f0000000100)=""/147, 0x93}, {&(0x7f0000000540)=""/117, 0x75}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000300)=""/169, 0xa9}, {&(0x7f00000003c0)=""/177, 0xb1}], 0x5}, 0x40000020) ioctl$TUNSETLINK(r0, 0x400454cd, 0x306) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) 2.51420898s ago: executing program 4 (id=3157): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0}, 0x10009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x2, 0x200000000000001, 0x106) r1 = socket$kcm(0xa, 0x6, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x7) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0xa, 0x0, 0x5d31, 0x40000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffffffff, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xe, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000400)='cgroup.freeze\x00', 0x275a, 0x0) r4 = perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x8, 0xf7, 0x64, 0x39, 0x0, 0xa9f, 0xc0008, 0xb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x9, 0x2, @perf_config_ext={0x8, 0xffffffffffffffff}, 0x8200, 0xc7, 0xbe2, 0x2, 0xfffffffffffffffe, 0x2d7, 0x3ff, 0x0, 0x6, 0x0, 0xdaa}, 0xffffffffffffffff, 0x5, r3, 0x9) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000580)=0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000080000000000000064ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x20, 0x488ba3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8001, 0x0, @perf_bp={0x0, 0x8}, 0x7202, 0x403, 0x6, 0x0, 0x34d, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000240), 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8712380000001f00000000000000010014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x200000000000000) r6 = socket$kcm(0x2, 0x5, 0x0) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x2e, &(0x7f0000000640)=r0, 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r7, r0, 0x0, 0x13, &(0x7f0000000080)='cgroup.controllers\x00'}, 0x30) recvmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x22) 2.124926431s ago: executing program 3 (id=3158): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x5, 0x0) r0 = socket$kcm(0x10, 0x3, 0x0) write$cgroup_subtree(r0, 0x0, 0xfe5d) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r2, 0x0, 0x0}, 0x10) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="06000000040000000400000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000080)) 1.992517484s ago: executing program 4 (id=3159): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="12000000070000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000340)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3803, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.944933905s ago: executing program 1 (id=3160): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x700a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000f80)={r0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3}, 0x50) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1000005d71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000b40), 0xa}, 0x40, 0x0, 0x0, 0x3, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000030000006a0af2fe000000008500000009000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989425f5d0b79f6584d0416d7c4bb9f547b328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f01000000010000006e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b98d2de10c21d3ea02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d000000200008000000000000001abc11c800000000000000000000000928ee53595a779d243a48cea769470424d20a04c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2c4af38ffb7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0eb3280e09758bd445ab91d20baca005472b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92fe8bad99ca332af00f191b66b6a6f732a91f0e2e9190e4b448da7de018c58e950767f9b320be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c52573d9308a13d115b43f8b1894c8fa8a14dc4810f61ae96bf704526a8919bc700002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381ccc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73cfd1e76982f3d899f71e495f0ba8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e4a48dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f00000021f8547d393dabe616fbbde21c90be00b5a22671395c7a69c6dd4d022ffc97ddb6aa025131652d409da1d8cfc3d219d4b1c1b7b8170d7c33d91db2b73f7ae02485a209a2474b5d0790d05c01bec623056e4d3f4d3149373a28b26a15a1fcce73d57e6eaf7e6f315fe275ebc9ef7aeca277dde01dde724f419803a2172a7833ceab38d21ca4f1dea5e1f4d8824167b21dd289dd4e6ecfba9e163bdbc48e1e758ecde05c10809c9edfa6d77c652fd742e6dad13d2a397bebe3ea8bc087d3720e2202f36c7719ae34f042e19dc08a3323a3d94098a7ec171469352bab1662c3e4d4803c565cfcce32dad628fade43a4844abb230ce608726fd87e93c405a96cf638c41510f26e9da5f316"], &(0x7f0000000b80)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x3}, 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r4 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r4, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x400c804) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r3, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000014c0)={0x3, 0x11, &(0x7f0000001000)=ANY=[@ANYBLOB="18020000030000000000000000000000850000002a000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000400b705000008cb400085000000a50000009500000000000000847ffc3e961068346fd8b3d60e93697cfc2ced0f266f2fa39b9c86c565fa8e2db23ba84051b84d4b629a7835518be5680f725cd8f96f4044adc2e387bc39013f6b1de6fa9f404a67881e360bf8caa6d4dd6f962690d169d1c42a663722292b0f89dbbf2bcb398fec54ad558dbfc59f1da59bceab58198b54bfb54888f58a320db787878a1d1eed74889689d8fd"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{}, &(0x7f0000000580), &(0x7f00000005c0)=r0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="1e000000810a0000f8ffffffff00000008800100", @ANYRES32=0x1, @ANYBLOB="21ffffff00"/20, @ANYRES32, @ANYBLOB="0000000000002d7c8032a313c6bccd7701b2a423cbfc558c20c011f6c133da4a47912f8dc0243408525a6112d497f0b1ffabef1f6e85c537f1b414aa1e6da2744f64a1d03ff318fbf2d77f431da898f5108ca113c7a405bb6bfac5", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB], 0x50) r6 = syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x420}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000f00)={0x4, 0x80, 0x9, 0x2, 0x6, 0x0, 0x0, 0x6, 0x10090, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, @perf_config_ext={0x3, 0x1}, 0x100180, 0x3, 0x8000, 0x0, 0xb, 0x6, 0x8, 0x0, 0xa, 0x0, 0x8000000000000000}, r6, 0xb, r1, 0x2) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d40)=@o_path={&(0x7f0000000d00)='./file0\x00', 0x0, 0x10, r1}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000d80)={r2}, 0x4) r7 = socket$kcm(0x23, 0x2, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, &(0x7f00000000c0)=r8, 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000940)={r8, r8}) 1.856200398s ago: executing program 3 (id=3161): r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x2, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x20, &(0x7f0000000040)={&(0x7f0000000140)=""/147, 0x93, 0x0, &(0x7f0000000200)=""/193, 0xc1}}, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="01fbff4300000000000080000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x50) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x3, r3, 0xc00}, 0x38) openat$cgroup_int(r2, &(0x7f0000000140)='cpuset.memory_spread_slab\x00', 0x2, 0x0) openat$cgroup_freezer_state(r2, &(0x7f0000000100), 0x2, 0x0) socket$kcm(0x29, 0x6, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x4, [@var={0x2, 0x0, 0x0, 0x11}, @func_proto={0x2, 0x1, 0x0, 0x13, 0x2, [{0x2}]}, @var]}, {0x0, [0x0, 0x61]}}, 0x0, 0x50}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x200000000000020a, &(0x7f0000000080)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x401c5820, &(0x7f0000000000)=0x18) ioctl$SIOCSIFHWADDR(r4, 0x4030582b, &(0x7f0000000340)={'lo\x00', @random="3f2f94c100"}) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) unlink(&(0x7f0000000080)='./file0\x00') r5 = socket$kcm(0x10, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'vcan0\x00', @random="5b9f45ff6cf9"}) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x60, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d0000004001000000000000", 0x20}], 0x1}, 0x40000) 1.638852384s ago: executing program 2 (id=3162): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x99e86f6a6737948, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff00000000000400008510000002000000850000002300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) 1.442416539s ago: executing program 4 (id=3163): socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0xfffffffffffffffe, 0xfffffffffefffffe}, 0x0, 0x20, 0xc2ba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000a40)={0x0, 0x4000, &(0x7f0000000100)=[{&(0x7f0000000c00)="5c0000001a006bab9a3fe3d8457f0bd2bf6e17aa0a046b876c1d0048007ea60864160af36504001a0038001d00193107e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb45601d8ad2330e", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x200000000000, 0x80420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) 1.416365051s ago: executing program 1 (id=3164): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000340)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3803, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r5, 0x107, 0x12, &(0x7f00000008c0), 0x4) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001f80)={&(0x7f0000000340), 0x6e, &(0x7f0000001ec0)=[{&(0x7f00000003c0)=""/9, 0x9}, {&(0x7f0000000400)=""/74, 0x4a}, {&(0x7f0000000c40)=""/4096, 0x1000}, {&(0x7f0000001c40)=""/162, 0xa2}, {&(0x7f0000001d00)=""/133, 0x85}, {&(0x7f0000001dc0)=""/216, 0xd8}], 0x6, &(0x7f0000001f40)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.350850982s ago: executing program 2 (id=3165): ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8970, &(0x7f0000001a80)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf\xc8>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000014c0)={0x3, 0x11, &(0x7f0000001000)=ANY=[@ANYBLOB="18020000030000000000000000000000850000002a000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000400b705000008cb400085000000a50000009500000000000000847ffc3e961068346fd8b3d60e93697cfc2ced0f266f2fa39b9c86c565fa8e2db23ba84051b84d4b629a7835518be5680f725cd8f96f4044adc2e387bc39013f6b1de6fa9f404a67881e360bf8caa6d4dd6f962690d169d1c42a663722292b0f89dbbf2bcb398fec54ad558dbfc59f1da59bceab58198b54bfb54888f58a320db787878a1d1eed74889689d8fd"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{}, &(0x7f0000000580), &(0x7f00000005c0)=r0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="1e000000810a0000f8ffffffff00000008800100", @ANYRES32=0x1, @ANYBLOB="21ffffff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000002d7c8032a313c6bccd7701b2a423cbfc558c20c011f6c133da4a47912f8dc0243408525a6112d497f0b1ffabef1f6e85c537f1b414aa1e6da2744f64a1d03ff318fbf2d77f431da898f5108ca113c7a405bb6bfac5", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB], 0x50) r6 = syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x420}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000f00)={0x4, 0x80, 0x9, 0x2, 0x6, 0x0, 0x0, 0x6, 0x10090, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, @perf_config_ext={0x3, 0x1}, 0x100180, 0x3, 0x8000, 0x0, 0xb, 0x6, 0x8, 0x0, 0xa, 0x0, 0x8000000000000000}, r6, 0xb, r1, 0x2) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d40)=@o_path={&(0x7f0000000d00)='./file0\x00', 0x0, 0x10, r1}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000d80)={r2}, 0x4) r7 = socket$kcm(0x23, 0x2, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, &(0x7f00000000c0)=r8, 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000940)={r8, r8}) 421.547618ms ago: executing program 4 (id=3168): socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x4, 0xe2106, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x6, 0x131}, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000380)='cpuset.cpus\x00', 0x2, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff229, 0x1, @perf_config_ext={0x80000001, 0x1}, 0x8041, 0x7, 0x0, 0x7, 0x0, 0x7, 0x200, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000029c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x2e0, 0x2d1, 0xfffffffffffffd85, &(0x7f00000000c0)="b9ff0303000d698cb89e40f008004000000e00001100630277", 0x0, 0x100, 0x2000000, 0x0, 0x0, &(0x7f0000000440)}, 0x28) socket$kcm(0x2, 0x6, 0x0) socket$kcm(0xa, 0x5, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYRES8=r2], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0xa, 0x2, 0x73) socket$kcm(0xa, 0x1, 0x106) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000000)=r3, 0x8) bpf$ITER_CREATE(0x21, &(0x7f00000001c0)={r3}, 0x8) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000003c00)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f0000000100)=r5, 0x4) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000400)="a5", 0x1}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 420.891868ms ago: executing program 2 (id=3169): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000680)=@generic={&(0x7f0000000640)='./file0\x00', r2}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) r4 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x4e22, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x2004fc10) close(r4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x8020) r8 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r8, 0x6, 0x17, &(0x7f0000000200)=r8, 0x21) ioctl$TUNSETOFFLOAD(r7, 0x400454d0, 0x11) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004200000080000000100000080000000f514c01ebf826bae0efa2cb278b2eb8a0f6a487b5f34cd42222f4f02f561ea29e7daeb35afaad54d887bb11c9b24699be3b9550fba2bf0d481883ff862fc093efcfcd8eb7cab362479520cde2b69b13d0fd817", @ANYRES32=r0, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000030000000300"/28], 0x50) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000300)={0xffffffffffffffff, 0x7}, 0xc) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)=@generic={&(0x7f0000000340)='./file0\x00', 0x0, 0x12a62b43335bf5ac}, 0x18) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0xc97d, 0x0, 0x1, 0x8906, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x2}, 0x50) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="050000000500", @ANYRES32, @ANYRES32=0x0, @ANYBLOB='\x00'/27], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000180)="ff5fb99772024dca4128654351fb32", 0x800, r13}, 0x38) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r15 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x68, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x18, &(0x7f0000000100)=@raw=[@generic={0x4, 0x6, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x3}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x6}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}, @jmp={0x5, 0x1, 0x1, 0xa, 0xa, 0x100, 0xffffffffffffffff}], &(0x7f0000000200)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x4, 0xf, 0x5d5b, 0x8000}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000500)=[r0, r10, r11, r1, r12, r13, r14, r15], &(0x7f0000000540)=[{0x3, 0x4, 0x6}, {0x4, 0x5, 0xf, 0x3}, {0x80000, 0x1, 0x2, 0x5}], 0x10, 0xd}, 0x94) 411.738059ms ago: executing program 3 (id=3170): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x5, 0x0) r0 = socket$kcm(0x10, 0x3, 0x0) write$cgroup_subtree(r0, 0x0, 0xfe5d) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r2, 0x0, 0x0}, 0x10) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="06000000040000000400000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000080)) 0s ago: executing program 3 (id=3171): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc, 0x4000, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xdfb26c8300937a84) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x43, &(0x7f0000000ac0), 0x42) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x600, &(0x7f0000000000)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fc3000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x40) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) r4 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000a80), 0xd}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21bef5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a835701bea8240399c56ce8f58df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f9ac2f7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63bb20e1e0469f7615f67a9218cbace38f5236821314f76302b98afa93044b83989339ca10e6ae30e70e17a82f03e915b8425e8e7a91614306d2ae0bc3550d856f2d7293672b5673d264fc886b0c8bdf436a0fcd21bf9da7bdca98e34cd6e59b0a7ce4ba1b466561aaa35448dff47bb1d7df23d467689a6669e4300d5acf12e4d0b35abf91569f605b2f6df0d861"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) recvmsg$kcm(r2, &(0x7f0000001f40)={&(0x7f0000000b00)=@tipc=@id, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000000b80)=""/221, 0xdd}, {&(0x7f0000000c80)=""/206, 0xce}, {&(0x7f0000000d80)}, {&(0x7f0000000dc0)=""/96, 0x60}, {&(0x7f0000000e40)=""/33, 0x21}, {&(0x7f0000001f80)=""/4105, 0x1009}, {&(0x7f0000001e80)=""/55, 0x37}], 0x7}, 0x40010100) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x400000002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$kcm(0x11, 0x20000000000000a, 0x300) socket$kcm(0x11, 0x200000000000002, 0x300) socket$kcm(0x11, 0x200000000000002, 0x300) close(r6) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r7, &(0x7f0000000d80)='cpuset.mem_hardwall\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) kernel console output (not intermixed with test programs): 028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 643.582238][ T9454] RAX: ffffffffffffffda RBX: 00007f75a6e15fa0 RCX: 00007f75a6b9cdd9 [ 643.590270][ T9454] RDX: 0000000000008400 RSI: 0000200000000480 RDI: 0000000000000003 [ 643.598298][ T9454] RBP: 00007f75a7aaa090 R08: 0000000000000000 R09: 0000000000000000 [ 643.606327][ T9454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 643.614359][ T9454] R13: 00007f75a6e16038 R14: 00007f75a6e15fa0 R15: 00007ffc4d73e798 [ 643.622405][ T9454] [ 644.310743][ T9481] netlink: 'syz.2.1715': attribute type 1 has an invalid length. [ 644.319464][ T9481] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.1715'. [ 644.335818][ T9481] netlink: 'syz.2.1715': attribute type 29 has an invalid length. [ 645.818531][ T9453] device 0 entered promiscuous mode [ 645.824081][ T9465] netlink: 'syz.0.1706': attribute type 2 has an invalid length. [ 645.833097][ T9465] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1706'. [ 645.844839][ T9473] netlink: 'syz.4.1712': attribute type 10 has an invalid length. [ 645.910524][ T9473] team0: Device hsr_slave_0 failed to register rx_handler [ 645.976428][ T9481] netlink: 'syz.2.1715': attribute type 29 has an invalid length. [ 645.997532][ T9482] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1715'. [ 646.484511][ T9495] netlink: 'syz.2.1730': attribute type 1 has an invalid length. [ 646.548767][ T9504] netlink: 'syz.2.1730': attribute type 29 has an invalid length. [ 646.548970][ T9495] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.1730'. [ 646.575811][ T9499] netlink: 'syz.1.1721': attribute type 3 has an invalid length. [ 646.586498][ T9499] netlink: 1034 bytes leftover after parsing attributes in process `syz.1.1721'. [ 646.601516][ T9495] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1730'. [ 648.793512][ T9528] device syzkaller0 entered promiscuous mode [ 650.848871][ T9536] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1732'. [ 651.020471][ T9553] validate_nla: 1 callbacks suppressed [ 651.020511][ T9553] netlink: 'syz.4.1737': attribute type 1 has an invalid length. [ 651.058507][ T9553] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.1737'. [ 651.079654][ T9555] netlink: 'syz.4.1737': attribute type 29 has an invalid length. [ 651.097707][ T9557] netlink: 'syz.3.1738': attribute type 29 has an invalid length. [ 651.110524][ T9555] netlink: 'syz.4.1737': attribute type 29 has an invalid length. [ 651.139935][ T9557] netlink: 'syz.3.1738': attribute type 29 has an invalid length. [ 651.162356][ T9553] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1737'. [ 651.324446][ T9559] Ÿë: port 1(gretap0) entered blocking state [ 651.340385][ T9559] Ÿë: port 1(gretap0) entered disabled state [ 651.362103][ T9559] device gretap0 entered promiscuous mode [ 651.557130][ T9560] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.1739'. [ 652.586156][ T9584] device syzkaller0 entered promiscuous mode [ 652.704893][ T9593] netlink: 'syz.4.1750': attribute type 29 has an invalid length. [ 658.839754][ T9593] netlink: 'syz.4.1750': attribute type 29 has an invalid length. [ 658.847906][ T9594] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1750'. [ 659.018141][ T9625] netlink: 763 bytes leftover after parsing attributes in process `syz.4.1760'. [ 659.107343][ T9625] netlink: 'syz.4.1760': attribute type 3 has an invalid length. [ 659.134126][ T9625] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1760'. [ 659.188628][ T9625] netlink: 'syz.4.1760': attribute type 3 has an invalid length. [ 659.226526][ T9625] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1760'. [ 659.242725][ T9630] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1762'. [ 659.254009][ T9629] netlink: 'syz.4.1760': attribute type 3 has an invalid length. [ 659.282572][ T9629] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1760'. [ 659.525745][ T9629] netlink: 'syz.4.1760': attribute type 10 has an invalid length. [ 659.587665][ T9643] FAULT_INJECTION: forcing a failure. [ 659.587665][ T9643] name failslab, interval 1, probability 0, space 0, times 0 [ 659.609166][ T9643] CPU: 0 PID: 9643 Comm: syz.3.1766 Not tainted syzkaller #0 [ 659.616642][ T9643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 659.626758][ T9643] Call Trace: [ 659.630087][ T9643] [ 659.633128][ T9643] dump_stack_lvl+0x188/0x24e [ 659.637894][ T9643] ? show_regs_print_info+0x12/0x12 [ 659.643178][ T9643] ? load_image+0x400/0x400 [ 659.647743][ T9643] ? __might_sleep+0xd0/0xd0 [ 659.652400][ T9643] ? __lock_acquire+0x7d10/0x7d10 [ 659.657491][ T9643] should_fail_ex+0x399/0x4d0 [ 659.662225][ T9643] should_failslab+0x5/0x20 [ 659.666780][ T9643] slab_pre_alloc_hook+0x59/0x310 [ 659.671885][ T9643] ? bpf_prog_test_run_flow_dissector+0x255/0x640 [ 659.678363][ T9643] __kmem_cache_alloc_node+0x4f/0x260 [ 659.683802][ T9643] ? bpf_prog_test_run_flow_dissector+0x255/0x640 [ 659.690277][ T9643] __kmalloc+0xa0/0x240 [ 659.694519][ T9643] bpf_prog_test_run_flow_dissector+0x255/0x640 [ 659.700860][ T9643] ? lock_chain_count+0x20/0x20 [ 659.705777][ T9643] ? xdp_convert_buff_to_md+0x200/0x200 [ 659.711403][ T9643] ? __fget_files+0x28/0x4b0 [ 659.716078][ T9643] ? __fget_files+0x28/0x4b0 [ 659.720742][ T9643] ? __fget_files+0x43d/0x4b0 [ 659.725489][ T9643] ? xdp_convert_buff_to_md+0x200/0x200 [ 659.731098][ T9643] bpf_prog_test_run+0x31e/0x390 [ 659.736111][ T9643] __sys_bpf+0x62b/0x780 [ 659.740437][ T9643] ? bpf_link_show_fdinfo+0x380/0x380 [ 659.745904][ T9643] __x64_sys_bpf+0x78/0x90 [ 659.750396][ T9643] do_syscall_64+0x4c/0xa0 [ 659.754862][ T9643] ? clear_bhb_loop+0x60/0xb0 [ 659.759601][ T9643] ? clear_bhb_loop+0x60/0xb0 [ 659.764331][ T9643] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 659.770259][ T9643] RIP: 0033:0x7f75a6b9cdd9 [ 659.774705][ T9643] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 659.794341][ T9643] RSP: 002b:00007f75a7aaa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 659.802810][ T9643] RAX: ffffffffffffffda RBX: 00007f75a6e15fa0 RCX: 00007f75a6b9cdd9 [ 659.810815][ T9643] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 659.818852][ T9643] RBP: 00007f75a7aaa090 R08: 0000000000000000 R09: 0000000000000000 [ 659.826865][ T9643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 659.834868][ T9643] R13: 00007f75a6e16038 R14: 00007f75a6e15fa0 R15: 00007ffc4d73e798 [ 659.842895][ T9643] [ 659.920899][ T9629] device wg1 entered promiscuous mode [ 659.934613][ T9629] team0: Device wg1 is of different type [ 659.974052][ T9640] netlink: 'syz.4.1760': attribute type 5 has an invalid length. [ 660.431199][ T9652] netlink: 'syz.4.1769': attribute type 3 has an invalid length. [ 660.452164][ T9652] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.1769'. [ 660.578885][ T9657] netlink: 'syz.0.1770': attribute type 1 has an invalid length. [ 660.598579][ T9657] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.1770'. [ 660.630565][ T9657] netlink: 'syz.0.1770': attribute type 29 has an invalid length. [ 660.696519][ T9657] netlink: 'syz.0.1770': attribute type 29 has an invalid length. [ 660.715833][ T9658] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1770'. [ 660.970739][ T9661] bridge0: port 5(team0) entered disabled state [ 660.999979][ T9661] bridge0: port 4(dummy0) entered disabled state [ 661.021341][ T9661] bridge0: port 3(hsr0) entered disabled state [ 661.047750][ T9661] device bridge_slave_1 left promiscuous mode [ 661.077445][ T9661] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.088513][ T9661] device bridge_slave_0 left promiscuous mode [ 661.104918][ T9661] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.633988][ T9670] device syzkaller0 entered promiscuous mode [ 664.356131][ T9691] validate_nla: 1 callbacks suppressed [ 664.356149][ T9691] netlink: 'syz.1.1779': attribute type 21 has an invalid length. [ 664.378918][ T9692] netlink: 'syz.1.1779': attribute type 21 has an invalid length. [ 664.673529][ T9703] netlink: 'syz.1.1783': attribute type 1 has an invalid length. [ 664.689939][ T9703] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.1783'. [ 664.728857][ T9707] netlink: 'syz.1.1783': attribute type 29 has an invalid length. [ 665.133326][ T9707] netlink: 'syz.1.1783': attribute type 29 has an invalid length. [ 665.149292][ T9703] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1783'. [ 665.815502][ T9719] netlink: 15007 bytes leftover after parsing attributes in process `syz.0.1789'. [ 665.861365][ T9713] device syzkaller0 entered promiscuous mode [ 666.114616][ T9720] device syzkaller0 entered promiscuous mode [ 667.343209][ T9743] netlink: 'syz.0.1796': attribute type 1 has an invalid length. [ 667.359987][ T9743] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.1796'. [ 667.385091][ T9744] netlink: 'syz.0.1796': attribute type 29 has an invalid length. [ 670.812917][ T9732] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1792'. [ 670.822342][ T9744] netlink: 'syz.0.1796': attribute type 29 has an invalid length. [ 670.843859][ T9743] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1796'. [ 671.368802][ T9766] netlink: 15007 bytes leftover after parsing attributes in process `syz.2.1804'. [ 672.733752][ T9790] netlink: 'syz.4.1813': attribute type 1 has an invalid length. [ 672.768554][ T9790] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.1813'. [ 672.807094][ T9793] netlink: 'syz.4.1813': attribute type 29 has an invalid length. [ 672.854962][ T9788] device syzkaller0 entered promiscuous mode [ 672.881671][ T9793] netlink: 'syz.4.1813': attribute type 29 has an invalid length. [ 672.911472][ T9790] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1813'. [ 676.844255][ T9843] netlink: 'syz.3.1829': attribute type 1 has an invalid length. [ 676.853241][ T9843] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.1829'. [ 676.868223][ T9843] netlink: 'syz.3.1829': attribute type 29 has an invalid length. [ 677.624446][ T9818] bridge0: port 3(team0) entered disabled state [ 677.664918][ T9818] device bridge_slave_1 left promiscuous mode [ 677.674211][ T9818] bridge0: port 2(bridge_slave_1) entered disabled state [ 677.719298][ T9818] device bridge_slave_0 left promiscuous mode [ 677.725661][ T9818] bridge0: port 1(bridge_slave_0) entered disabled state [ 677.813401][ T9853] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1833'. [ 677.875577][ T9843] netlink: 'syz.3.1829': attribute type 29 has an invalid length. [ 677.890535][ T9846] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1829'. [ 678.007777][ T9854] device syzkaller0 entered promiscuous mode [ 682.010986][ T9886] device syzkaller0 entered promiscuous mode [ 682.163906][ T9894] netlink: 'syz.0.1847': attribute type 1 has an invalid length. [ 682.184265][ T9897] netlink: 'syz.0.1847': attribute type 29 has an invalid length. [ 682.200570][ T9894] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.1847'. [ 685.166264][ T9893] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1848'. [ 685.177795][ T9897] netlink: 'syz.0.1847': attribute type 29 has an invalid length. [ 685.189739][ T9894] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1847'. [ 685.417286][ T9913] netlink: 'syz.0.1855': attribute type 39 has an invalid length. [ 685.859410][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.865877][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.530957][ T9939] netlink: 'syz.3.1864': attribute type 10 has an invalid length. [ 686.564735][ T9939] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 686.811294][ T9945] netlink: 'syz.4.1865': attribute type 21 has an invalid length. [ 686.868411][ T9945] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1865'. [ 686.987647][ T9945] netlink: 'syz.4.1865': attribute type 4 has an invalid length. [ 686.995578][ T9945] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1865'. [ 687.100126][ T9946] netlink: 11562 bytes leftover after parsing attributes in process `syz.3.1864'. [ 687.199846][ T9947] netlink: 'syz.4.1865': attribute type 10 has an invalid length. [ 687.828974][ T9947] device macvlan0 entered promiscuous mode [ 687.888572][ T9947] team0: Port device macvlan0 added [ 688.035219][ T9956] device syzkaller0 entered promiscuous mode [ 693.663013][ T9986] netlink: 11562 bytes leftover after parsing attributes in process `syz.4.1873'. [ 694.801888][T10020] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.1884'. [ 695.387482][T10028] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1890'. [ 695.852163][T10032] device syzkaller0 entered promiscuous mode [ 696.988428][ T8297] wlan1: Trigger new scan to find an IBSS to join [ 699.679603][T10076] netlink: 'syz.4.1910': attribute type 10 has an invalid length. [ 699.691726][T10076] bond0: (slave bond_slave_0): Releasing backup interface [ 699.718473][T10085] netlink: 'syz.3.1912': attribute type 10 has an invalid length. [ 699.736516][T10085] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1912'. [ 699.947970][ T8297] wlan1: Trigger new scan to find an IBSS to join [ 700.179695][ T4329] Bluetooth: hci1: unexpected event 0x05 length: 151 > 4 [ 701.107257][T10109] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1921'. [ 701.784418][T10113] netlink: 126632 bytes leftover after parsing attributes in process `syz.3.1923'. [ 702.274964][ T4330] Bluetooth: hci1: command 0x206c tx timeout [ 702.281522][ T4329] Bluetooth: hci1: Opcode 0x206c failed: -110 [ 702.867032][ T4347] wlan1: Creating new IBSS network, BSSID fa:79:bb:48:ec:71 [ 703.451601][T10122] device syzkaller0 entered promiscuous mode [ 703.878607][T10133] netlink: 'syz.4.1929': attribute type 29 has an invalid length. [ 704.337359][ T4330] Bluetooth: hci1: command 0x2046 tx timeout [ 704.343556][ T4329] Bluetooth: hci1: Opcode 0x2046 failed: -110 [ 705.563455][T10133] netlink: 'syz.4.1929': attribute type 29 has an invalid length. [ 705.576117][T10136] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1930'. [ 705.831676][ T4329] Bluetooth: hci2: unexpected event 0x05 length: 151 > 4 [ 705.918843][T10149] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1935'. [ 705.976390][T10149] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1935'. [ 705.987737][T10147] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1935'. [ 706.002958][T10147] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1935'. [ 706.247216][T10154] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1938'. [ 706.858130][ T4329] Bluetooth: hci1: unexpected event 0x05 length: 151 > 4 [ 706.905694][T10182] FAULT_INJECTION: forcing a failure. [ 706.905694][T10182] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 706.930316][T10182] CPU: 0 PID: 10182 Comm: syz.4.1948 Not tainted syzkaller #0 [ 706.937887][T10182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 706.948005][T10182] Call Trace: [ 706.951328][T10182] [ 706.954397][T10182] dump_stack_lvl+0x188/0x24e [ 706.959282][T10182] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 706.965523][T10182] ? show_regs_print_info+0x12/0x12 [ 706.970796][T10182] ? load_image+0x400/0x400 [ 706.975375][T10182] should_fail_ex+0x399/0x4d0 [ 706.980210][T10182] _copy_from_user+0x2c/0x170 [ 706.984954][T10182] __sys_bpf+0x2ea/0x780 [ 706.989261][T10182] ? bpf_link_show_fdinfo+0x380/0x380 [ 706.994721][T10182] ? lock_chain_count+0x20/0x20 [ 706.999650][T10182] __x64_sys_bpf+0x78/0x90 [ 707.004136][T10182] do_syscall_64+0x4c/0xa0 [ 707.008614][T10182] ? clear_bhb_loop+0x60/0xb0 [ 707.013402][T10182] ? clear_bhb_loop+0x60/0xb0 [ 707.018131][T10182] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 707.024089][T10182] RIP: 0033:0x7faab219cdd9 [ 707.028563][T10182] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 707.048216][T10182] RSP: 002b:00007faab2fa9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 707.056663][T10182] RAX: ffffffffffffffda RBX: 00007faab2415fa0 RCX: 00007faab219cdd9 [ 707.064668][T10182] RDX: 0000000000000050 RSI: 0000200000002300 RDI: 000000000000000a [ 707.072663][T10182] RBP: 00007faab2fa9090 R08: 0000000000000000 R09: 0000000000000000 [ 707.080682][T10182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 707.088877][T10182] R13: 00007faab2416038 R14: 00007faab2415fa0 R15: 00007fffe24292f8 [ 707.096914][T10182] [ 707.549036][T10196] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.1953'. [ 709.176032][T10214] netlink: 'syz.1.1961': attribute type 1 has an invalid length. [ 709.199215][T10214] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.1961'. [ 709.226012][T10221] netlink: 'syz.1.1961': attribute type 29 has an invalid length. [ 709.250988][T10221] netlink: 'syz.1.1961': attribute type 29 has an invalid length. [ 709.272726][T10214] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1961'. [ 709.516742][T10227] netlink: 'syz.2.1966': attribute type 10 has an invalid length. [ 709.525651][T10227] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1966'. [ 710.583731][T10261] netlink: 'syz.1.1979': attribute type 1 has an invalid length. [ 710.603443][T10261] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.1979'. [ 710.637091][T10264] netlink: 'syz.1.1979': attribute type 29 has an invalid length. [ 710.673772][T10264] netlink: 'syz.1.1979': attribute type 29 has an invalid length. [ 710.726586][T10261] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1979'. [ 710.747605][T10267] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.1982'. [ 710.799503][T10267] bridge_slave_1: default FDB implementation only supports local addresses [ 711.219949][T10280] sock: sock_timestamping_bind_phc: sock not bind to device [ 711.402201][T10287] device syzkaller0 entered promiscuous mode [ 711.702023][T10297] netlink: 'syz.1.1993': attribute type 1 has an invalid length. [ 711.743093][T10297] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.1993'. [ 711.798740][T10302] netlink: 'syz.1.1993': attribute type 29 has an invalid length. [ 714.316930][T10302] netlink: 'syz.1.1993': attribute type 29 has an invalid length. [ 714.324978][T10297] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1993'. [ 714.335555][T10304] netlink: 'syz.0.1994': attribute type 21 has an invalid length. [ 714.357268][T10304] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1994'. [ 714.517785][T10334] netlink: 'syz.0.2005': attribute type 9 has an invalid length. [ 714.997943][T10346] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.2010'. [ 715.283228][T10359] netlink: 'syz.2.2018': attribute type 2 has an invalid length. [ 715.311147][T10359] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2018'. [ 715.347537][T10361] netlink: 'syz.3.2016': attribute type 1 has an invalid length. [ 715.382974][T10361] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.2016'. [ 715.408818][T10364] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2016'. [ 718.789147][T10382] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2022'. [ 719.228959][T10387] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.2025'. [ 719.831500][T10409] validate_nla: 2 callbacks suppressed [ 719.831520][T10409] netlink: 'syz.3.2034': attribute type 29 has an invalid length. [ 719.902655][T10404] netlink: 'syz.2.2033': attribute type 10 has an invalid length. [ 719.967418][T10410] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2034'. [ 720.012613][T10409] netlink: 'syz.3.2034': attribute type 29 has an invalid length. [ 720.483774][T10423] netlink: 'syz.4.2039': attribute type 3 has an invalid length. [ 720.547694][T10426] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2041'. [ 720.557243][T10423] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2039'. [ 720.703025][T10433] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.2044'. [ 721.064979][T10442] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.2046'. [ 721.452420][T10456] netlink: 'syz.2.2050': attribute type 29 has an invalid length. [ 721.564839][T10450] netlink: 'syz.1.2049': attribute type 10 has an invalid length. [ 721.588261][T10456] netlink: 'syz.2.2050': attribute type 29 has an invalid length. [ 721.653111][T10459] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2046'. [ 721.744154][T10456] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2050'. [ 722.124329][T10469] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.2055'. [ 722.269450][T10475] netlink: 'syz.3.2057': attribute type 21 has an invalid length. [ 722.624706][T10485] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 722.943939][T10495] netlink: 'syz.0.2063': attribute type 10 has an invalid length. [ 723.125137][T10497] netlink: 'syz.2.2066': attribute type 1 has an invalid length. [ 723.886205][T10524] bridge0: port 3(team0) entered disabled state [ 723.963999][T10524] device bridge_slave_1 left promiscuous mode [ 724.002265][T10524] bridge0: port 2(bridge_slave_1) entered disabled state [ 724.078759][T10524] device bridge_slave_0 left promiscuous mode [ 724.117181][T10524] bridge0: port 1(bridge_slave_0) entered disabled state [ 724.902383][ T4968] wlan1: Trigger new scan to find an IBSS to join [ 725.039488][T10547] validate_nla: 2 callbacks suppressed [ 725.039509][T10547] netlink: 'syz.2.2084': attribute type 29 has an invalid length. [ 725.113798][T10549] __nla_validate_parse: 5 callbacks suppressed [ 725.113818][T10549] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2084'. [ 725.138995][T10543] netlink: 'syz.2.2084': attribute type 1 has an invalid length. [ 725.174745][T10543] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.2084'. [ 725.251566][T10551] netlink: 'syz.3.2086': attribute type 29 has an invalid length. [ 725.460403][T10547] netlink: 'syz.2.2084': attribute type 29 has an invalid length. [ 725.622706][T10551] netlink: 'syz.3.2086': attribute type 29 has an invalid length. [ 726.711720][T10570] netlink: 'syz.3.2094': attribute type 16 has an invalid length. [ 726.746873][T10570] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2094'. [ 726.850145][T10574] FAULT_INJECTION: forcing a failure. [ 726.850145][T10574] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 726.976545][T10574] CPU: 0 PID: 10574 Comm: syz.1.2095 Not tainted syzkaller #0 [ 726.984186][T10574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 726.994315][T10574] Call Trace: [ 726.997657][T10574] [ 727.000657][T10574] dump_stack_lvl+0x188/0x24e [ 727.005446][T10574] ? show_regs_print_info+0x12/0x12 [ 727.010753][T10574] ? load_image+0x400/0x400 [ 727.015369][T10574] ? __lock_acquire+0x7d10/0x7d10 [ 727.020490][T10574] ? snprintf+0xe5/0x140 [ 727.024812][T10574] should_fail_ex+0x399/0x4d0 [ 727.029568][T10574] _copy_to_user+0x2c/0x130 [ 727.034160][T10574] simple_read_from_buffer+0xe3/0x150 [ 727.039630][T10574] proc_fail_nth_read+0x1a6/0x220 [ 727.044738][T10574] ? proc_fault_inject_write+0x310/0x310 [ 727.050461][T10574] ? fsnotify_perm+0x248/0x550 [ 727.055319][T10574] ? proc_fault_inject_write+0x310/0x310 [ 727.061039][T10574] vfs_read+0x2de/0xa00 [ 727.065309][T10574] ? kernel_read+0x1e0/0x1e0 [ 727.069999][T10574] ? __fget_files+0x28/0x4b0 [ 727.074726][T10574] ? __fget_files+0x28/0x4b0 [ 727.079443][T10574] ? __fget_files+0x43d/0x4b0 [ 727.084240][T10574] ? __fdget_pos+0x2ae/0x360 [ 727.088898][T10574] ? ksys_read+0x71/0x250 [ 727.093318][T10574] ksys_read+0x14c/0x250 [ 727.097665][T10574] ? vfs_write+0xa30/0xa30 [ 727.102177][T10574] ? lockdep_hardirqs_on+0x94/0x140 [ 727.107463][T10574] do_syscall_64+0x4c/0xa0 [ 727.111952][T10574] ? clear_bhb_loop+0x60/0xb0 [ 727.116707][T10574] ? clear_bhb_loop+0x60/0xb0 [ 727.121480][T10574] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 727.127453][T10574] RIP: 0033:0x7f2abff5d60e [ 727.132041][T10574] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 727.151744][T10574] RSP: 002b:00007f2ac0e23fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 727.160251][T10574] RAX: ffffffffffffffda RBX: 00007f2ac0e246c0 RCX: 00007f2abff5d60e [ 727.168299][T10574] RDX: 000000000000000f RSI: 00007f2ac0e240a0 RDI: 0000000000000006 [ 727.176328][T10574] RBP: 00007f2ac0e24090 R08: 0000000000000000 R09: 0000000000000000 [ 727.184375][T10574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 727.192420][T10574] R13: 00007f2ac0216038 R14: 00007f2ac0215fa0 R15: 00007ffed5e8fb78 [ 727.200533][T10574] [ 727.212283][T10572] netlink: 'syz.3.2094': attribute type 10 has an invalid length. [ 727.428443][T10572] device macvlan0 entered promiscuous mode [ 727.476236][T10572] team0: Port device macvlan0 added [ 728.044266][T10589] netlink: 'syz.3.2101': attribute type 1 has an invalid length. [ 728.064374][T10589] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.2101'. [ 728.083826][T10595] netlink: 'syz.3.2101': attribute type 29 has an invalid length. [ 728.104080][T10595] netlink: 'syz.3.2101': attribute type 29 has an invalid length. [ 728.157385][T10589] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2101'. [ 728.608673][T10585] delete_channel: no stack [ 728.743684][T10609] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2108'. [ 728.783007][T10609] device hsr_slave_0 left promiscuous mode [ 728.825599][T10609] device hsr_slave_1 left promiscuous mode [ 729.032319][T10619] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2112'. [ 729.604970][T10631] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.2117'. [ 729.695555][T10632] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2117'. [ 729.936706][ T8297] wlan1: Trigger new scan to find an IBSS to join [ 730.963240][ T4347] wlan1: Creating new IBSS network, BSSID fa:21:12:c6:05:fb [ 731.083895][T10667] validate_nla: 4 callbacks suppressed [ 731.083920][T10667] netlink: 'syz.1.2131': attribute type 1 has an invalid length. [ 731.086209][T10665] netlink: 'syz.1.2131': attribute type 29 has an invalid length. [ 731.173110][T10667] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.2131'. [ 731.478184][T10663] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 731.495832][T10663] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 731.511035][T10663] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 731.531751][T10663] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 731.659146][T10663] bond0: (slave batadv0): Releasing backup interface [ 731.708733][T10665] netlink: 'syz.1.2131': attribute type 29 has an invalid length. [ 731.725703][T10667] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2131'. [ 732.394302][T10691] netlink: 'syz.4.2140': attribute type 1 has an invalid length. [ 732.450305][T10691] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.2140'. [ 732.526833][T10691] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2140'. [ 732.626815][T10691] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2140'. [ 734.009195][T10721] netlink: 'syz.4.2149': attribute type 29 has an invalid length. [ 734.040051][T10719] netlink: 'syz.4.2149': attribute type 1 has an invalid length. [ 734.053322][T10721] netlink: 'syz.4.2149': attribute type 29 has an invalid length. [ 734.087722][T10719] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.2149'. [ 734.215399][T10721] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2149'. [ 738.026051][T10796] netlink: 15743 bytes leftover after parsing attributes in process `syz.1.2175'. [ 738.098963][T10798] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2175'. [ 738.549441][T10811] FAULT_INJECTION: forcing a failure. [ 738.549441][T10811] name failslab, interval 1, probability 0, space 0, times 0 [ 738.627500][T10811] CPU: 1 PID: 10811 Comm: syz.4.2183 Not tainted syzkaller #0 [ 738.635082][T10811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 738.645214][T10811] Call Trace: [ 738.648533][T10811] [ 738.651506][T10811] dump_stack_lvl+0x188/0x24e [ 738.656250][T10811] ? show_regs_print_info+0x12/0x12 [ 738.661517][T10811] ? load_image+0x400/0x400 [ 738.666083][T10811] ? __might_sleep+0xd0/0xd0 [ 738.670718][T10811] ? __lock_acquire+0x7d10/0x7d10 [ 738.675800][T10811] ? rcu_is_watching+0x11/0xa0 [ 738.680623][T10811] should_fail_ex+0x399/0x4d0 [ 738.685382][T10811] should_failslab+0x5/0x20 [ 738.689938][T10811] slab_pre_alloc_hook+0x59/0x310 [ 738.695020][T10811] ? kvmalloc_node+0x6c/0x180 [ 738.699756][T10811] __kmem_cache_alloc_node+0x4f/0x260 [ 738.705177][T10811] ? mutex_lock_nested+0x10/0x10 [ 738.710181][T10811] ? kvmalloc_node+0x6c/0x180 [ 738.714940][T10811] __kmalloc_node+0xa0/0x240 [ 738.719577][T10811] ? __lock_acquire+0x7d10/0x7d10 [ 738.724660][T10811] kvmalloc_node+0x6c/0x180 [ 738.729234][T10811] fanout_add+0x6c4/0x11b0 [ 738.733712][T10811] ? _copy_from_user+0x10b/0x170 [ 738.738725][T10811] packet_setsockopt+0xaf4/0x1390 [ 738.743808][T10811] ? packet_ioctl+0x240/0x240 [ 738.748563][T10811] ? __fget_files+0x28/0x4b0 [ 738.753225][T10811] ? aa_sk_perm+0x81f/0x950 [ 738.757808][T10811] ? aa_af_perm+0x340/0x340 [ 738.762359][T10811] ? __fget_files+0x43d/0x4b0 [ 738.767180][T10811] ? aa_sock_opt_perm+0x74/0x100 [ 738.772181][T10811] ? bpf_lsm_socket_setsockopt+0x5/0x10 [ 738.777777][T10811] ? security_socket_setsockopt+0x7a/0xa0 [ 738.783535][T10811] ? packet_ioctl+0x240/0x240 [ 738.788277][T10811] __sys_setsockopt+0x2bf/0x3d0 [ 738.793194][T10811] __x64_sys_setsockopt+0xb1/0xc0 [ 738.798278][T10811] do_syscall_64+0x4c/0xa0 [ 738.802756][T10811] ? clear_bhb_loop+0x60/0xb0 [ 738.807485][T10811] ? clear_bhb_loop+0x60/0xb0 [ 738.812214][T10811] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 738.818158][T10811] RIP: 0033:0x7faab219cdd9 [ 738.822623][T10811] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 738.842275][T10811] RSP: 002b:00007faab2fa9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 738.850838][T10811] RAX: ffffffffffffffda RBX: 00007faab2415fa0 RCX: 00007faab219cdd9 [ 738.858856][T10811] RDX: 0000000000000012 RSI: 0000000000000107 RDI: 0000000000000005 [ 738.866874][T10811] RBP: 00007faab2fa9090 R08: 0000000000000004 R09: 0000000000000000 [ 738.874909][T10811] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 738.882925][T10811] R13: 00007faab2416038 R14: 00007faab2415fa0 R15: 00007fffe24292f8 [ 738.891000][T10811] [ 739.968933][T10838] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2193'. [ 740.512823][T10846] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.2195'. [ 742.778874][T10878] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 742.825529][T10878] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 742.854478][T10878] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 742.925847][T10878] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 744.717238][T10919] netlink: 763 bytes leftover after parsing attributes in process `syz.0.2221'. [ 745.686142][T10922] FAULT_INJECTION: forcing a failure. [ 745.686142][T10922] name failslab, interval 1, probability 0, space 0, times 0 [ 745.705327][T10922] CPU: 1 PID: 10922 Comm: syz.0.2222 Not tainted syzkaller #0 [ 745.713046][T10922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 745.723151][T10922] Call Trace: [ 745.726462][T10922] [ 745.729435][T10922] dump_stack_lvl+0x188/0x24e [ 745.734178][T10922] ? show_regs_print_info+0x12/0x12 [ 745.739431][T10922] ? load_image+0x400/0x400 [ 745.743986][T10922] ? __might_sleep+0xd0/0xd0 [ 745.748647][T10922] ? __lock_acquire+0x7d10/0x7d10 [ 745.753750][T10922] should_fail_ex+0x399/0x4d0 [ 745.758533][T10922] should_failslab+0x5/0x20 [ 745.763101][T10922] slab_pre_alloc_hook+0x59/0x310 [ 745.768182][T10922] ? genl_start+0x14f/0x4a0 [ 745.772744][T10922] __kmem_cache_alloc_node+0x4f/0x260 [ 745.778197][T10922] ? genl_start+0x14f/0x4a0 [ 745.782749][T10922] kmalloc_trace+0x26/0xe0 [ 745.787231][T10922] genl_start+0x14f/0x4a0 [ 745.791616][T10922] __netlink_dump_start+0x3f9/0x6f0 [ 745.796879][T10922] genl_family_rcv_msg_dumpit+0x228/0x3c0 [ 745.802655][T10922] ? genl_rcv_msg+0x790/0x790 [ 745.807386][T10922] ? __mutex_lock+0x1ab/0xaf0 [ 745.812151][T10922] ? genl_family_rcv_msg_doit+0x330/0x330 [ 745.817926][T10922] ? genl_start+0x4a0/0x4a0 [ 745.822493][T10922] ? genl_lock_dumpit+0x90/0x90 [ 745.827390][T10922] ? mutex_lock_nested+0x10/0x10 [ 745.832381][T10922] ? genl_get_cmd+0xe4/0x8b0 [ 745.837022][T10922] ? memcpy+0x3c/0x60 [ 745.841071][T10922] ? genl_get_cmd+0x518/0x8b0 [ 745.845797][T10922] genl_rcv_msg+0x5cb/0x790 [ 745.850360][T10922] ? genl_bind+0x360/0x360 [ 745.854827][T10922] ? smc_ib_create_protection_domain+0xa0/0xa0 [ 745.861047][T10922] netlink_rcv_skb+0x1fb/0x450 [ 745.865879][T10922] ? genl_bind+0x360/0x360 [ 745.870343][T10922] ? netlink_ack+0x1170/0x1170 [ 745.875180][T10922] ? down_read+0x1a8/0x2d0 [ 745.879745][T10922] genl_rcv+0x24/0x40 [ 745.883772][T10922] netlink_unicast+0x74d/0x8d0 [ 745.888603][T10922] netlink_sendmsg+0x8ad/0xbd0 [ 745.893478][T10922] ? netlink_getsockopt+0x550/0x550 [ 745.898732][T10922] ? aa_sock_msg_perm+0x94/0x150 [ 745.903713][T10922] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 745.909129][T10922] ? security_socket_sendmsg+0x7c/0xa0 [ 745.914644][T10922] ? netlink_getsockopt+0x550/0x550 [ 745.919896][T10922] ____sys_sendmsg+0x5be/0x970 [ 745.924728][T10922] ? __sys_sendmsg_sock+0x30/0x30 [ 745.929806][T10922] ? __import_iovec+0x315/0x500 [ 745.934718][T10922] ? import_iovec+0x6f/0xa0 [ 745.939274][T10922] ___sys_sendmsg+0x2a2/0x360 [ 745.944010][T10922] ? __sys_sendmsg+0x290/0x290 [ 745.948877][T10922] ? ktime_get_real_ts64+0x440/0x440 [ 745.954253][T10922] __se_sys_sendmsg+0x1bb/0x2a0 [ 745.959167][T10922] ? ct_nmi_exit+0x145/0x1c0 [ 745.963812][T10922] ? __x64_sys_sendmsg+0x80/0x80 [ 745.968827][T10922] ? lockdep_hardirqs_on+0x94/0x140 [ 745.974082][T10922] do_syscall_64+0x4c/0xa0 [ 745.978551][T10922] ? clear_bhb_loop+0x60/0xb0 [ 745.983382][T10922] ? clear_bhb_loop+0x60/0xb0 [ 745.988118][T10922] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 745.994098][T10922] RIP: 0033:0x7f7ee939cdd9 [ 745.998567][T10922] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 746.018224][T10922] RSP: 002b:00007f7eea332028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 746.026684][T10922] RAX: ffffffffffffffda RBX: 00007f7ee9615fa0 RCX: 00007f7ee939cdd9 [ 746.034700][T10922] RDX: 0000000000004000 RSI: 0000200000000000 RDI: 0000000000000004 [ 746.042715][T10922] RBP: 00007f7eea332090 R08: 0000000000000000 R09: 0000000000000000 [ 746.050733][T10922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 746.058745][T10922] R13: 00007f7ee9616038 R14: 00007f7ee9615fa0 R15: 00007ffc1c8f9198 [ 746.066789][T10922] [ 746.310370][ T4341] tipc: Subscription rejected, illegal request [ 746.919673][T10935] netlink: 15487 bytes leftover after parsing attributes in process `syz.0.2228'. [ 747.203767][T10941] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2230'. [ 747.299404][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.305785][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.568496][T10956] sctp: [Deprecated]: syz.1.2237 (pid 10956) Use of int in maxseg socket option. [ 747.568496][T10956] Use struct sctp_assoc_value instead [ 748.904306][T10972] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.2242'. [ 748.944034][T10972] bridge_slave_1: default FDB implementation only supports local addresses [ 749.141926][T10977] netlink: 'syz.0.2242': attribute type 17 has an invalid length. [ 749.211637][T10977] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2242'. [ 749.267501][T10977] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 749.475910][T10982] netlink: 11518 bytes leftover after parsing attributes in process `syz.3.2245'. [ 749.495335][T10987] netlink: 11518 bytes leftover after parsing attributes in process `syz.3.2245'. [ 749.554103][T10986] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.2246'. [ 749.720174][T10990] netlink: 'syz.2.2248': attribute type 6 has an invalid length. [ 749.766013][T10990] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2248'. [ 749.840212][T10997] netlink: 'syz.4.2249': attribute type 14 has an invalid length. [ 749.852189][T10997] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2249'. [ 749.933622][T10997] netlink: 'syz.4.2249': attribute type 2 has an invalid length. [ 749.963749][T10997] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2249'. [ 751.242765][T11021] netlink: 'syz.1.2257': attribute type 15 has an invalid length. [ 751.316613][T11021] netlink: 'syz.1.2257': attribute type 7 has an invalid length. [ 751.782788][T11035] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2260'. [ 751.999417][T11040] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2262'. [ 752.074747][T11044] netlink: 'syz.0.2265': attribute type 6 has an invalid length. [ 752.096509][T11044] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2265'. [ 752.135635][T11042] netlink: 'syz.1.2264': attribute type 14 has an invalid length. [ 752.149712][T11042] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2264'. [ 752.162764][T11048] netlink: 'syz.1.2264': attribute type 2 has an invalid length. [ 752.171755][T11048] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2264'. [ 752.582936][T11057] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2269'. [ 753.519078][T11067] netlink: 'syz.3.2274': attribute type 17 has an invalid length. [ 753.606488][T11067] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2274'. [ 753.650994][T11067] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 753.999226][T11077] can: request_module (can-proto-5) failed. [ 754.533952][T11100] validate_nla: 1 callbacks suppressed [ 754.533967][T11100] netlink: 'syz.4.2287': attribute type 6 has an invalid length. [ 755.760783][T11134] __nla_validate_parse: 2 callbacks suppressed [ 755.760802][T11134] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2298'. [ 755.988103][T11141] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 756.214652][T11144] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2302'. [ 756.312036][T11149] netlink: 'syz.0.2304': attribute type 10 has an invalid length. [ 756.511223][T11143] delete_channel: no stack [ 756.878913][T11164] FAULT_INJECTION: forcing a failure. [ 756.878913][T11164] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 756.893317][T11164] CPU: 0 PID: 11164 Comm: syz.3.2311 Not tainted syzkaller #0 [ 756.900848][T11164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 756.910951][T11164] Call Trace: [ 756.914275][T11164] [ 756.917247][T11164] dump_stack_lvl+0x188/0x24e [ 756.921988][T11164] ? show_regs_print_info+0x12/0x12 [ 756.927242][T11164] ? load_image+0x400/0x400 [ 756.931821][T11164] ? __lock_acquire+0x7d10/0x7d10 [ 756.936907][T11164] ? snprintf+0xe5/0x140 [ 756.941208][T11164] should_fail_ex+0x399/0x4d0 [ 756.945945][T11164] _copy_to_user+0x2c/0x130 [ 756.950548][T11164] simple_read_from_buffer+0xe3/0x150 [ 756.955974][T11164] proc_fail_nth_read+0x1a6/0x220 [ 756.961044][T11164] ? proc_fault_inject_write+0x310/0x310 [ 756.966714][T11164] ? fsnotify_perm+0x248/0x550 [ 756.971520][T11164] ? proc_fault_inject_write+0x310/0x310 [ 756.977216][T11164] vfs_read+0x2de/0xa00 [ 756.981434][T11164] ? kernel_read+0x1e0/0x1e0 [ 756.986095][T11164] ? __fget_files+0x28/0x4b0 [ 756.990717][T11164] ? __fget_files+0x28/0x4b0 [ 756.995345][T11164] ? __fget_files+0x43d/0x4b0 [ 757.000059][T11164] ? __fdget_pos+0x2ae/0x360 [ 757.004696][T11164] ? ksys_read+0x71/0x250 [ 757.009099][T11164] ksys_read+0x14c/0x250 [ 757.013380][T11164] ? vfs_write+0xa30/0xa30 [ 757.017838][T11164] ? lockdep_hardirqs_on+0x94/0x140 [ 757.023066][T11164] do_syscall_64+0x4c/0xa0 [ 757.027528][T11164] ? clear_bhb_loop+0x60/0xb0 [ 757.032248][T11164] ? clear_bhb_loop+0x60/0xb0 [ 757.036963][T11164] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 757.042892][T11164] RIP: 0033:0x7f75a6b5d60e [ 757.047342][T11164] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 757.067007][T11164] RSP: 002b:00007f75a7aa9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 757.075451][T11164] RAX: ffffffffffffffda RBX: 00007f75a7aaa6c0 RCX: 00007f75a6b5d60e [ 757.083451][T11164] RDX: 000000000000000f RSI: 00007f75a7aaa0a0 RDI: 0000000000000004 [ 757.091456][T11164] RBP: 00007f75a7aaa090 R08: 0000000000000000 R09: 0000000000000000 [ 757.099460][T11164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 757.107457][T11164] R13: 00007f75a6e16038 R14: 00007f75a6e15fa0 R15: 00007ffc4d73e798 [ 757.115468][T11164] [ 757.371287][T11172] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2315'. [ 757.491747][T11176] netlink: 'syz.3.2316': attribute type 3 has an invalid length. [ 757.500111][T11176] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2316'. [ 758.549396][T11205] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2331'. [ 760.652526][T11251] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2345'. [ 760.681040][T11250] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2347'. [ 760.951364][T11265] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2352'. [ 761.013092][ T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 762.207310][T11283] FAULT_INJECTION: forcing a failure. [ 762.207310][T11283] name failslab, interval 1, probability 0, space 0, times 0 [ 762.267033][T11283] CPU: 1 PID: 11283 Comm: syz.2.2359 Not tainted syzkaller #0 [ 762.274590][T11283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 762.284696][T11283] Call Trace: [ 762.288013][T11283] [ 762.290980][T11283] dump_stack_lvl+0x188/0x24e [ 762.295715][T11283] ? show_regs_print_info+0x12/0x12 [ 762.300994][T11283] ? load_image+0x400/0x400 [ 762.305558][T11283] ? __lock_acquire+0x7d10/0x7d10 [ 762.310638][T11283] should_fail_ex+0x399/0x4d0 [ 762.315366][T11283] should_failslab+0x5/0x20 [ 762.319958][T11283] slab_pre_alloc_hook+0x59/0x310 [ 762.325047][T11283] kmem_cache_alloc_node+0x5a/0x320 [ 762.330324][T11283] ? alloc_vmap_area+0x18e/0x18c0 [ 762.335398][T11283] alloc_vmap_area+0x18e/0x18c0 [ 762.340400][T11283] ? vm_map_ram+0xab0/0xab0 [ 762.344956][T11283] ? rcu_is_watching+0x11/0xa0 [ 762.349773][T11283] __get_vm_area_node+0x158/0x330 [ 762.354842][T11283] ? mod_objcg_state+0x50d/0x8a0 [ 762.359840][T11283] __vmalloc_node_range+0x357/0x13b0 [ 762.365188][T11283] ? copy_process+0x5fa/0x4030 [ 762.370030][T11283] ? free_vm_area+0x50/0x50 [ 762.374661][T11283] ? rcu_is_watching+0x11/0xa0 [ 762.379497][T11283] dup_task_struct+0x3d3/0x6b0 [ 762.384304][T11283] ? copy_process+0x5fa/0x4030 [ 762.389117][T11283] copy_process+0x5fa/0x4030 [ 762.393754][T11283] ? __lock_acquire+0x7d10/0x7d10 [ 762.398892][T11283] ? idle_dummy+0x10/0x10 [ 762.403319][T11283] kernel_clone+0x24b/0x900 [ 762.407872][T11283] ? ksys_write+0x1c0/0x250 [ 762.412435][T11283] ? create_io_thread+0x170/0x170 [ 762.417523][T11283] __x64_sys_clone+0x1a7/0x220 [ 762.422333][T11283] ? __fget_files+0x43d/0x4b0 [ 762.427067][T11283] ? __ia32_sys_vfork+0x140/0x140 [ 762.432149][T11283] ? lock_chain_count+0x20/0x20 [ 762.437060][T11283] ? lockdep_hardirqs_on+0x94/0x140 [ 762.442310][T11283] do_syscall_64+0x4c/0xa0 [ 762.446778][T11283] ? clear_bhb_loop+0x60/0xb0 [ 762.451532][T11283] ? clear_bhb_loop+0x60/0xb0 [ 762.456279][T11283] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 762.462220][T11283] RIP: 0033:0x7f3293d9cdd9 [ 762.466684][T11283] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 762.486344][T11283] RSP: 002b:00007f3294c1cfd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 762.494815][T11283] RAX: ffffffffffffffda RBX: 00007f3294015fa0 RCX: 00007f3293d9cdd9 [ 762.502836][T11283] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020128000 [ 762.510869][T11283] RBP: 00007f3294c1d090 R08: 0000000000000000 R09: 0000000000000000 [ 762.518882][T11283] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 762.526902][T11283] R13: 00007f3294016038 R14: 00007f3294015fa0 R15: 00007ffe7a8c4c08 [ 762.534931][T11283] [ 762.639686][T11283] syz.2.2359: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 762.666628][T11283] CPU: 1 PID: 11283 Comm: syz.2.2359 Not tainted syzkaller #0 [ 762.674212][T11283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 762.684313][T11283] Call Trace: [ 762.687635][T11283] [ 762.690606][T11283] dump_stack_lvl+0x188/0x24e [ 762.695355][T11283] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 762.701826][T11283] ? show_regs_print_info+0x12/0x12 [ 762.707091][T11283] ? load_image+0x400/0x400 [ 762.711649][T11283] ? __rcu_read_unlock+0x78/0xd0 [ 762.716627][T11283] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 762.723097][T11283] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 762.729659][T11283] warn_alloc+0x242/0x330 [ 762.734044][T11283] ? slab_free_freelist_hook+0x131/0x1a0 [ 762.739760][T11283] ? zone_watermark_ok_safe+0x270/0x270 [ 762.745370][T11283] ? __get_vm_area_node+0x16d/0x330 [ 762.750625][T11283] ? __get_vm_area_node+0x16d/0x330 [ 762.755879][T11283] ? mod_objcg_state+0x50d/0x8a0 [ 762.760879][T11283] __vmalloc_node_range+0x37c/0x13b0 [ 762.766276][T11283] ? free_vm_area+0x50/0x50 [ 762.770840][T11283] ? rcu_is_watching+0x11/0xa0 [ 762.775673][T11283] dup_task_struct+0x3d3/0x6b0 [ 762.780496][T11283] ? copy_process+0x5fa/0x4030 [ 762.785311][T11283] copy_process+0x5fa/0x4030 [ 762.789966][T11283] ? __lock_acquire+0x7d10/0x7d10 [ 762.795070][T11283] ? idle_dummy+0x10/0x10 [ 762.799469][T11283] kernel_clone+0x24b/0x900 [ 762.804022][T11283] ? ksys_write+0x1c0/0x250 [ 762.808585][T11283] ? create_io_thread+0x170/0x170 [ 762.813673][T11283] __x64_sys_clone+0x1a7/0x220 [ 762.818481][T11283] ? __fget_files+0x43d/0x4b0 [ 762.823208][T11283] ? __ia32_sys_vfork+0x140/0x140 [ 762.828291][T11283] ? lock_chain_count+0x20/0x20 [ 762.833208][T11283] ? lockdep_hardirqs_on+0x94/0x140 [ 762.838459][T11283] do_syscall_64+0x4c/0xa0 [ 762.842934][T11283] ? clear_bhb_loop+0x60/0xb0 [ 762.847665][T11283] ? clear_bhb_loop+0x60/0xb0 [ 762.852395][T11283] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 762.858340][T11283] RIP: 0033:0x7f3293d9cdd9 [ 762.862806][T11283] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 762.882489][T11283] RSP: 002b:00007f3294c1cfd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 762.890967][T11283] RAX: ffffffffffffffda RBX: 00007f3294015fa0 RCX: 00007f3293d9cdd9 [ 762.898981][T11283] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020128000 [ 762.907004][T11283] RBP: 00007f3294c1d090 R08: 0000000000000000 R09: 0000000000000000 [ 762.915034][T11283] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 762.923052][T11283] R13: 00007f3294016038 R14: 00007f3294015fa0 R15: 00007ffe7a8c4c08 [ 762.931092][T11283] [ 762.950219][T11283] Mem-Info: [ 762.953604][T11283] active_anon:10632 inactive_anon:0 isolated_anon:0 [ 762.953604][T11283] active_file:17596 inactive_file:40099 isolated_file:0 [ 762.953604][T11283] unevictable:768 dirty:93 writeback:0 [ 762.953604][T11283] slab_reclaimable:20780 slab_unreclaimable:95742 [ 762.953604][T11283] mapped:32028 shmem:1361 pagetables:637 [ 762.953604][T11283] sec_pagetables:0 bounce:0 [ 762.953604][T11283] kernel_misc_reclaimable:0 [ 762.953604][T11283] free:1317498 free_pcp:7977 free_cma:0 [ 763.004079][T11283] Node 0 active_anon:42528kB inactive_anon:0kB active_file:70384kB inactive_file:160192kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:128112kB dirty:372kB writeback:0kB shmem:3908kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10320kB pagetables:2548kB sec_pagetables:0kB all_unreclaimable? no [ 763.042103][T11283] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 763.082630][T11283] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 763.114629][T11283] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 763.121034][T11283] Node 0 DMA32 free:1359076kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:42528kB inactive_anon:0kB active_file:70384kB inactive_file:160192kB unevictable:1536kB writepending:372kB present:3129332kB managed:2592964kB mlocked:0kB bounce:0kB free_pcp:13088kB local_pcp:3552kB free_cma:0kB [ 763.157560][T11283] lowmem_reserve[]: 0 0 1 1 1 [ 763.162760][T11283] Node 0 Normal free:12kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 763.198569][T11283] lowmem_reserve[]: 0 0 0 0 0 [ 763.203651][T11283] Node 1 Normal free:3895544kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:18688kB local_pcp:8896kB free_cma:0kB [ 763.239467][T11283] lowmem_reserve[]: 0 0 0 0 0 [ 763.244287][T11283] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 763.261551][T11283] Node 0 DMA32: 323*4kB (UM) 979*8kB (UME) 1460*16kB (UME) 1506*32kB (UME) 469*64kB (UME) 157*128kB (UME) 46*256kB (UME) 34*512kB (UME) 19*1024kB (UME) 6*2048kB (M) 285*4096kB (UM) = 1359076kB [ 763.285474][T11283] Node 0 Normal: 3*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 763.306035][T11283] Node 1 Normal: 258*4kB (UME) 52*8kB (UME) 29*16kB (UME) 32*32kB (UME) 14*64kB (UE) 16*128kB (UME) 4*256kB (UM) 3*512kB (UM) 2*1024kB (UE) 1*2048kB (E) 948*4096kB (M) = 3895544kB [ 763.328717][T11283] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 763.340324][T11283] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 763.352872][T11283] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 763.364493][T11283] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 763.378487][T11283] 59056 total pagecache pages [ 763.383270][T11283] 0 pages in swap cache [ 763.389785][T11283] Free swap = 124996kB [ 763.394095][T11283] Total swap = 124996kB [ 763.401516][T11283] 2097051 pages RAM [ 763.405385][T11283] 0 pages HighMem/MovableOnly [ 763.415905][T11283] 415209 pages reserved [ 763.423881][T11283] 0 pages cma reserved [ 765.112879][T11320] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2373'. [ 765.343421][T11325] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2374'. [ 765.421520][T11322] delete_channel: no stack [ 765.754384][T11325] bond0: (slave bond_slave_0): Releasing backup interface [ 765.849761][T11325] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 766.846586][T11357] FAULT_INJECTION: forcing a failure. [ 766.846586][T11357] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 766.870371][T11357] CPU: 0 PID: 11357 Comm: syz.2.2387 Not tainted syzkaller #0 [ 766.877928][T11357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 766.888043][T11357] Call Trace: [ 766.891372][T11357] [ 766.894351][T11357] dump_stack_lvl+0x188/0x24e [ 766.899102][T11357] ? show_regs_print_info+0x12/0x12 [ 766.904363][T11357] ? load_image+0x400/0x400 [ 766.908932][T11357] ? __lock_acquire+0x7d10/0x7d10 [ 766.914038][T11357] ? tomoyo_path_number_perm+0x205/0x650 [ 766.919733][T11357] ? tomoyo_path_number_perm+0x5a4/0x650 [ 766.925428][T11357] should_fail_ex+0x399/0x4d0 [ 766.930159][T11357] _copy_from_user+0x2c/0x170 [ 766.934887][T11357] wext_handle_ioctl+0xc4/0x1d0 [ 766.939791][T11357] ? call_commit_handler+0xf0/0xf0 [ 766.944951][T11357] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 766.951005][T11357] sock_ioctl+0x143/0x710 [ 766.955388][T11357] ? sock_poll+0x410/0x410 [ 766.959859][T11357] ? bpf_lsm_file_ioctl+0x5/0x10 [ 766.964855][T11357] ? security_file_ioctl+0x7c/0xa0 [ 766.970023][T11357] ? sock_poll+0x410/0x410 [ 766.974485][T11357] __se_sys_ioctl+0xfa/0x170 [ 766.979124][T11357] do_syscall_64+0x4c/0xa0 [ 766.983597][T11357] ? clear_bhb_loop+0x60/0xb0 [ 766.988319][T11357] ? clear_bhb_loop+0x60/0xb0 [ 766.993046][T11357] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 766.998982][T11357] RIP: 0033:0x7f3293d9cdd9 [ 767.003442][T11357] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 767.023124][T11357] RSP: 002b:00007f3294c1d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 767.031583][T11357] RAX: ffffffffffffffda RBX: 00007f3294015fa0 RCX: 00007f3293d9cdd9 [ 767.039591][T11357] RDX: 0000200000000000 RSI: 0000000000008b1b RDI: 000000000000000b [ 767.047691][T11357] RBP: 00007f3294c1d090 R08: 0000000000000000 R09: 0000000000000000 [ 767.055712][T11357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 767.063744][T11357] R13: 00007f3294016038 R14: 00007f3294015fa0 R15: 00007ffe7a8c4c08 [ 767.071814][T11357] [ 768.952062][T11380] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2396'. [ 770.672565][T11417] netlink: 'syz.1.2410': attribute type 21 has an invalid length. [ 771.328580][T11446] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2421'. [ 773.054370][T11485] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2434'. [ 775.024347][T11530] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2451'. [ 779.203715][T11575] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2466'. [ 781.113142][T11629] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2480'. [ 781.573948][T11646] tap0: tun_chr_ioctl cmd 1074025677 [ 781.585871][T11646] tap0: linktype set to 805 [ 781.830844][T11657] netlink: 'syz.3.2489': attribute type 29 has an invalid length. [ 781.889399][T11657] netlink: 'syz.3.2489': attribute type 29 has an invalid length. [ 781.996578][T11660] netlink: 'syz.3.2489': attribute type 29 has an invalid length. [ 782.009955][T11667] netlink: 'syz.3.2489': attribute type 29 has an invalid length. [ 782.028369][T11665] netlink: 'syz.1.2494': attribute type 27 has an invalid length. [ 782.047001][T11665] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 782.627078][T11683] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2498'. [ 782.661502][T11684] netlink: 'syz.0.2500': attribute type 1 has an invalid length. [ 782.683135][T11684] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.2500'. [ 783.432353][T11706] FAULT_INJECTION: forcing a failure. [ 783.432353][T11706] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 783.519018][T11706] CPU: 1 PID: 11706 Comm: syz.1.2508 Not tainted syzkaller #0 [ 783.526662][T11706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 783.536767][T11706] Call Trace: [ 783.540134][T11706] [ 783.543109][T11706] dump_stack_lvl+0x188/0x24e [ 783.547843][T11706] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 783.554050][T11706] ? show_regs_print_info+0x12/0x12 [ 783.559317][T11706] ? load_image+0x400/0x400 [ 783.563879][T11706] should_fail_ex+0x399/0x4d0 [ 783.568614][T11706] _copy_from_user+0x2c/0x170 [ 783.573342][T11706] __sys_bpf+0x2ea/0x780 [ 783.577647][T11706] ? bpf_link_show_fdinfo+0x380/0x380 [ 783.583085][T11706] ? lock_chain_count+0x20/0x20 [ 783.588005][T11706] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 783.594039][T11706] __x64_sys_bpf+0x78/0x90 [ 783.598512][T11706] do_syscall_64+0x4c/0xa0 [ 783.602980][T11706] ? clear_bhb_loop+0x60/0xb0 [ 783.607721][T11706] ? clear_bhb_loop+0x60/0xb0 [ 783.612459][T11706] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 783.618415][T11706] RIP: 0033:0x7f2abff9cdd9 [ 783.622879][T11706] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 783.642526][T11706] RSP: 002b:00007f2ac0e24028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 783.650988][T11706] RAX: ffffffffffffffda RBX: 00007f2ac0215fa0 RCX: 00007f2abff9cdd9 [ 783.659004][T11706] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 783.667021][T11706] RBP: 00007f2ac0e24090 R08: 0000000000000000 R09: 0000000000000000 [ 783.675028][T11706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 783.683127][T11706] R13: 00007f2ac0216038 R14: 00007f2ac0215fa0 R15: 00007ffed5e8fb78 [ 783.691157][T11706] [ 784.160713][T11720] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2512'. [ 784.215401][T11724] netlink: 'syz.3.2513': attribute type 29 has an invalid length. [ 784.256437][T11724] netlink: 'syz.3.2513': attribute type 29 has an invalid length. [ 784.336507][T11726] netlink: 'syz.3.2513': attribute type 29 has an invalid length. [ 784.578806][T11730] netlink: 'syz.1.2515': attribute type 10 has an invalid length. [ 784.599008][T11730] team0: Device hsr_slave_0 failed to register rx_handler [ 785.562451][T11771] tipc: Started in network mode [ 785.567621][T11771] tipc: Node identity 9215a268, cluster identity 4711 [ 785.574676][T11771] tipc: Node number set to 2450891368 [ 786.242166][T11794] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2536'. [ 786.845951][T11812] device wlan1 entered promiscuous mode [ 787.461345][T11830] validate_nla: 3 callbacks suppressed [ 787.461365][T11830] netlink: 'syz.2.2550': attribute type 16 has an invalid length. [ 787.528367][T11830] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2550'. [ 787.586169][T11832] netlink: 2759 bytes leftover after parsing attributes in process `syz.1.2551'. [ 787.877177][T11832] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.2551'. [ 788.253922][T11836] netlink: 17861 bytes leftover after parsing attributes in process `syz.2.2550'. [ 788.268045][T11836] netlink: 17861 bytes leftover after parsing attributes in process `syz.2.2550'. [ 788.316731][T11832] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 788.718754][T11849] netlink: 'syz.0.2554': attribute type 29 has an invalid length. [ 788.966018][T11849] netlink: 'syz.0.2554': attribute type 29 has an invalid length. [ 791.201151][T11889] syz.3.2567[11889] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 791.201340][T11889] syz.3.2567[11889] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 792.195102][T11902] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.2570'. [ 792.331232][T11902] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 793.748178][T11948] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2585'. [ 794.184652][ T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 796.110847][T11948] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2585'. [ 796.428166][T11970] FAULT_INJECTION: forcing a failure. [ 796.428166][T11970] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 796.488879][T11970] CPU: 0 PID: 11970 Comm: syz.4.2593 Not tainted syzkaller #0 [ 796.496437][T11970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 796.506544][T11970] Call Trace: [ 796.509876][T11970] [ 796.512857][T11970] dump_stack_lvl+0x188/0x24e [ 796.517609][T11970] ? show_regs_print_info+0x12/0x12 [ 796.522913][T11970] ? load_image+0x400/0x400 [ 796.527473][T11970] ? __lock_acquire+0x7d10/0x7d10 [ 796.532566][T11970] ? ct_irq_exit_irqson+0x113/0x170 [ 796.537825][T11970] should_fail_ex+0x399/0x4d0 [ 796.542565][T11970] prepare_alloc_pages+0x1e2/0x5f0 [ 796.547752][T11970] __alloc_pages+0x130/0x4f0 [ 796.552426][T11970] ? zone_statistics+0x170/0x170 [ 796.557437][T11970] ? alloc_pages+0x4d8/0x740 [ 796.562101][T11970] alloc_skb_with_frags+0x20c/0x710 [ 796.567383][T11970] sock_alloc_send_pskb+0x87f/0x9a0 [ 796.572658][T11970] ? sock_kzfree_s+0x50/0x50 [ 796.577303][T11970] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 796.583105][T11970] ? dev_get_by_index+0x1e/0x2d0 [ 796.588106][T11970] ? dev_get_by_index+0x1e/0x2d0 [ 796.593118][T11970] packet_sendmsg+0x32b0/0x4e60 [ 796.598037][T11970] ? lockdep_hardirqs_on+0x94/0x140 [ 796.603293][T11970] ? __might_sleep+0xd0/0xd0 [ 796.608012][T11970] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 796.614237][T11970] ? aa_sk_perm+0x76/0x950 [ 796.618717][T11970] ? aa_sk_perm+0x81f/0x950 [ 796.623294][T11970] ? packet_getsockopt+0x9a0/0x9a0 [ 796.628475][T11970] ? aa_sock_msg_perm+0x94/0x150 [ 796.633476][T11970] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 796.638820][T11970] ? security_socket_sendmsg+0x7c/0xa0 [ 796.644354][T11970] ? packet_getsockopt+0x9a0/0x9a0 [ 796.649524][T11970] ____sys_sendmsg+0x5be/0x970 [ 796.654452][T11970] ? __sys_sendmsg_sock+0x30/0x30 [ 796.659546][T11970] ? __import_iovec+0x315/0x500 [ 796.664472][T11970] ? import_iovec+0x6f/0xa0 [ 796.669082][T11970] ___sys_sendmsg+0x2a2/0x360 [ 796.673826][T11970] ? __sys_sendmsg+0x290/0x290 [ 796.678700][T11970] __se_sys_sendmsg+0x1bb/0x2a0 [ 796.683609][T11970] ? ct_nmi_exit+0x145/0x1c0 [ 796.688251][T11970] ? __x64_sys_sendmsg+0x80/0x80 [ 796.693274][T11970] ? lockdep_hardirqs_on+0x94/0x140 [ 796.698553][T11970] do_syscall_64+0x4c/0xa0 [ 796.703045][T11970] ? clear_bhb_loop+0x60/0xb0 [ 796.707792][T11970] ? clear_bhb_loop+0x60/0xb0 [ 796.712531][T11970] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 796.718484][T11970] RIP: 0033:0x7faab219cdd9 [ 796.722948][T11970] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 796.742606][T11970] RSP: 002b:00007faab2fa9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 796.751089][T11970] RAX: ffffffffffffffda RBX: 00007faab2415fa0 RCX: 00007faab219cdd9 [ 796.759127][T11970] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000007 [ 796.767155][T11970] RBP: 00007faab2fa9090 R08: 0000000000000000 R09: 0000000000000000 [ 796.775231][T11970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 796.783248][T11970] R13: 00007faab2416038 R14: 00007faab2415fa0 R15: 00007fffe24292f8 [ 796.791284][T11970] [ 796.871359][T11975] netlink: 'syz.2.2595': attribute type 3 has an invalid length. [ 796.927214][T11975] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2595'. [ 797.376022][T11994] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 797.467061][T11993] netlink: 'syz.3.2600': attribute type 13 has an invalid length. [ 797.504654][T11993] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2600'. [ 797.545364][T11993] syz_tun: refused to change device tx_queue_len [ 797.594748][T11993] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 797.613600][T12001] netlink: 'syz.1.2602': attribute type 3 has an invalid length. [ 797.636504][T12001] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2602'. [ 797.734954][T11998] netlink: 'syz.4.2601': attribute type 1 has an invalid length. [ 797.759392][T11998] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2601'. [ 799.354698][T12063] netlink: 'syz.2.2623': attribute type 39 has an invalid length. [ 800.234717][T12082] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2629'. [ 802.165513][T12138] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.2652'. [ 802.255826][T12138] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.2652'. [ 803.805252][T12175] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2666'. [ 803.869979][T12175] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2666'. [ 804.731674][T12198] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2672'. [ 804.782566][T12198] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2672'. [ 805.199212][T12208] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2678'. [ 805.265433][T12208] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2678'. [ 806.868153][T12242] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.2691'. [ 806.950216][T12242] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.2691'. [ 808.279950][T12285] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2707'. [ 808.358337][T12285] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2707'. [ 808.741253][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.747781][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.908204][T12301] FAULT_INJECTION: forcing a failure. [ 808.908204][T12301] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 808.996515][T12301] CPU: 1 PID: 12301 Comm: syz.1.2713 Not tainted syzkaller #0 [ 809.004075][T12301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 809.014168][T12301] Call Trace: [ 809.017490][T12301] [ 809.020508][T12301] dump_stack_lvl+0x188/0x24e [ 809.025251][T12301] ? show_regs_print_info+0x12/0x12 [ 809.030504][T12301] ? load_image+0x400/0x400 [ 809.035073][T12301] ? __lock_acquire+0x7d10/0x7d10 [ 809.040174][T12301] should_fail_ex+0x399/0x4d0 [ 809.044903][T12301] _copy_from_user+0x2c/0x170 [ 809.049642][T12301] do_ipv6_setsockopt+0x317/0x3e30 [ 809.054824][T12301] ? sk_dst_reset+0xa0/0xa0 [ 809.059394][T12301] ? verify_lock_unused+0x140/0x140 [ 809.064665][T12301] ? mark_lock+0x94/0x320 [ 809.069046][T12301] ? __lock_acquire+0x12f4/0x7d10 [ 809.074150][T12301] ? get_pid_task+0x1c/0x1e0 [ 809.078789][T12301] ? aa_label_sk_perm+0x456/0x5b0 [ 809.083873][T12301] ? verify_lock_unused+0x140/0x140 [ 809.089173][T12301] ? aa_sk_perm+0x950/0x950 [ 809.093746][T12301] ? __might_sleep+0xd0/0xd0 [ 809.098391][T12301] ? __fget_files+0x28/0x4b0 [ 809.103063][T12301] ? aa_sk_perm+0x81f/0x950 [ 809.107666][T12301] ? aa_af_perm+0x340/0x340 [ 809.112243][T12301] ? __fget_files+0x43d/0x4b0 [ 809.116990][T12301] ? aa_sock_opt_perm+0x74/0x100 [ 809.121986][T12301] ipv6_setsockopt+0x55/0x190 [ 809.126714][T12301] ? sock_common_recvmsg+0x190/0x190 [ 809.132083][T12301] __sys_setsockopt+0x2bf/0x3d0 [ 809.137012][T12301] __x64_sys_setsockopt+0xb1/0xc0 [ 809.142111][T12301] do_syscall_64+0x4c/0xa0 [ 809.146584][T12301] ? clear_bhb_loop+0x60/0xb0 [ 809.151299][T12301] ? clear_bhb_loop+0x60/0xb0 [ 809.156015][T12301] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 809.161947][T12301] RIP: 0033:0x7f2abff9cdd9 [ 809.166453][T12301] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 809.186196][T12301] RSP: 002b:00007f2ac0e24028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 809.194665][T12301] RAX: ffffffffffffffda RBX: 00007f2ac0215fa0 RCX: 00007f2abff9cdd9 [ 809.202671][T12301] RDX: 0000000000000011 RSI: 0000000000000029 RDI: 0000000000000003 [ 809.210674][T12301] RBP: 00007f2ac0e24090 R08: 0000000000000004 R09: 0000000000000000 [ 809.218672][T12301] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 809.226677][T12301] R13: 00007f2ac0216038 R14: 00007f2ac0215fa0 R15: 00007ffed5e8fb78 [ 809.234698][T12301] [ 810.150007][T12322] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2722'. [ 810.210617][T12322] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2722'. [ 811.446119][T12339] netlink: 'syz.0.2727': attribute type 10 has an invalid length. [ 811.492572][T12339] device wlan1 entered promiscuous mode [ 811.524830][T12339] team0: Port device wlan1 added [ 811.793901][T12356] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2735'. [ 811.835828][T12356] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2735'. [ 811.970778][T12359] netlink: 'syz.3.2736': attribute type 21 has an invalid length. [ 812.043319][T12359] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 812.082463][T12359] ÿÿÿ: renamed from bond_slave_0 [ 813.253454][T12390] netlink: 'syz.3.2748': attribute type 16 has an invalid length. [ 813.326673][T12390] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2748'. [ 813.551650][T12395] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.2749'. [ 813.565504][T12395] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.2749'. [ 814.730594][T12424] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.2757'. [ 815.342940][T12443] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2764'. [ 815.509172][T12443] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2764'. [ 817.154800][T12480] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2775'. [ 817.442243][T12489] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2778'. [ 817.527178][T12489] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2778'. [ 818.532512][T12518] netlink: 'syz.4.2787': attribute type 21 has an invalid length. [ 818.580824][T12524] netlink: 172 bytes leftover after parsing attributes in process `syz.1.2788'. [ 819.260961][T12539] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2793'. [ 819.277913][T12539] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2793'. [ 819.340197][T12541] netlink: 'syz.3.2795': attribute type 2 has an invalid length. [ 819.655855][T12541] device 0 entered promiscuous mode [ 821.934619][T12585] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2809'. [ 821.946391][ T8297] wlan1: Trigger new scan to find an IBSS to join [ 822.017952][T12585] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2809'. [ 823.377567][T12619] FAULT_INJECTION: forcing a failure. [ 823.377567][T12619] name failslab, interval 1, probability 0, space 0, times 0 [ 823.436612][T12619] CPU: 0 PID: 12619 Comm: syz.0.2820 Not tainted syzkaller #0 [ 823.444173][T12619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 823.454292][T12619] Call Trace: [ 823.457612][T12619] [ 823.460581][T12619] dump_stack_lvl+0x188/0x24e [ 823.465320][T12619] ? verify_lock_unused+0x140/0x140 [ 823.470581][T12619] ? show_regs_print_info+0x12/0x12 [ 823.475854][T12619] ? load_image+0x400/0x400 [ 823.480456][T12619] should_fail_ex+0x399/0x4d0 [ 823.485196][T12619] should_failslab+0x5/0x20 [ 823.489745][T12619] slab_pre_alloc_hook+0x59/0x310 [ 823.494823][T12619] kmem_cache_alloc+0x56/0x2f0 [ 823.499641][T12619] ? __nf_conntrack_alloc+0x99/0x380 [ 823.505029][T12619] __nf_conntrack_alloc+0x99/0x380 [ 823.510264][T12619] init_conntrack+0x25b/0x11a0 [ 823.515098][T12619] ? early_drop+0x870/0x870 [ 823.519697][T12619] ? nf_conntrack_find_get+0x670/0x670 [ 823.525214][T12619] ? __siphash_unaligned+0x25b/0x3a0 [ 823.530577][T12619] nf_conntrack_in+0xd3e/0x17b0 [ 823.535510][T12619] ? nf_ct_pernet+0x270/0x270 [ 823.540267][T12619] ? ipt_do_table+0x2bd/0x15a0 [ 823.545081][T12619] ? read_lock_is_recursive+0x10/0x10 [ 823.550540][T12619] ? ipv4_conntrack_defrag+0x284/0x5b0 [ 823.556074][T12619] ? ipv4_conntrack_local+0x11f/0x200 [ 823.561499][T12619] ? ipv4_conntrack_in+0x20/0x20 [ 823.566485][T12619] nf_hook_slow+0xb9/0x200 [ 823.570961][T12619] ? nf_hook+0x390/0x390 [ 823.575289][T12619] nf_hook+0x224/0x390 [ 823.579415][T12619] ? nf_hook+0x9e/0x390 [ 823.583634][T12619] ? __ip_local_out+0x5d0/0x5d0 [ 823.588545][T12619] ? nf_hook+0x390/0x390 [ 823.592850][T12619] ? ip_fast_csum+0x1ea/0x2b0 [ 823.597589][T12619] __ip_local_out+0x49c/0x5d0 [ 823.602316][T12619] ? nf_hook+0x390/0x390 [ 823.606618][T12619] ip_send_skb+0x48/0x1c0 [ 823.611007][T12619] raw_sendmsg+0x153d/0x1b20 [ 823.615642][T12619] ? raw_sendmsg+0x530/0x1b20 [ 823.620380][T12619] ? compat_raw_ioctl+0x60/0x60 [ 823.625321][T12619] ? tomoyo_socket_sendmsg_permission+0x212/0x2f0 [ 823.631804][T12619] ? sock_rps_record_flow+0x19/0x3f0 [ 823.637139][T12619] ? inet_sendmsg+0x78/0x2f0 [ 823.641777][T12619] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 823.647117][T12619] ? security_socket_sendmsg+0x7c/0xa0 [ 823.652646][T12619] ? inet_send_prepare+0x260/0x260 [ 823.657808][T12619] ____sys_sendmsg+0x5be/0x970 [ 823.662645][T12619] ? __sys_sendmsg_sock+0x30/0x30 [ 823.667734][T12619] ? __import_iovec+0x315/0x500 [ 823.672651][T12619] ? import_iovec+0x6f/0xa0 [ 823.677221][T12619] ___sys_sendmsg+0x2a2/0x360 [ 823.681973][T12619] ? __sys_sendmsg+0x290/0x290 [ 823.686834][T12619] ? __lock_acquire+0x7d10/0x7d10 [ 823.691955][T12619] __se_sys_sendmsg+0x1bb/0x2a0 [ 823.696889][T12619] ? __x64_sys_sendmsg+0x80/0x80 [ 823.701905][T12619] ? lockdep_hardirqs_on+0x94/0x140 [ 823.707158][T12619] do_syscall_64+0x4c/0xa0 [ 823.711640][T12619] ? clear_bhb_loop+0x60/0xb0 [ 823.716379][T12619] ? clear_bhb_loop+0x60/0xb0 [ 823.721116][T12619] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 823.727070][T12619] RIP: 0033:0x7f7ee939cdd9 [ 823.731543][T12619] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 823.751208][T12619] RSP: 002b:00007f7eea332028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 823.759684][T12619] RAX: ffffffffffffffda RBX: 00007f7ee9615fa0 RCX: 00007f7ee939cdd9 [ 823.767718][T12619] RDX: 0000000000000000 RSI: 00002000000016c0 RDI: 0000000000000003 [ 823.775739][T12619] RBP: 00007f7eea332090 R08: 0000000000000000 R09: 0000000000000000 [ 823.783875][T12619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 823.791893][T12619] R13: 00007f7ee9616038 R14: 00007f7ee9615fa0 R15: 00007ffc1c8f9198 [ 823.799940][T12619] [ 825.395624][T12647] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2829'. [ 825.573065][T12647] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2829'. [ 826.897880][ T8298] wlan1: Trigger new scan to find an IBSS to join [ 827.704641][T12684] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2843'. [ 827.831848][T12684] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2843'. [ 829.103303][ T8298] wlan1: Creating new IBSS network, BSSID f2:11:32:e6:ea:d1 [ 830.725820][T12715] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2854'. [ 830.861898][T12715] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2854'. [ 833.821923][ T4330] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 833.837471][ T4327] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 833.847983][ T4330] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 833.856580][ T4330] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 833.864568][ T4330] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 833.873541][ T4330] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 834.110718][T12764] chnl_net:caif_netlink_parms(): no params data found [ 834.375463][T12764] bridge0: port 1(bridge_slave_0) entered blocking state [ 834.383154][T12764] bridge0: port 1(bridge_slave_0) entered disabled state [ 834.392532][T12764] device bridge_slave_0 entered promiscuous mode [ 834.401573][T12764] bridge0: port 2(bridge_slave_1) entered blocking state [ 834.409037][T12764] bridge0: port 2(bridge_slave_1) entered disabled state [ 834.417620][T12764] device bridge_slave_1 entered promiscuous mode [ 834.501732][T12764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 834.602987][T12775] device syzkaller0 entered promiscuous mode [ 834.649714][T12764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 834.754924][T12775] device lo left promiscuous mode [ 834.779379][T12764] team0: Port device team_slave_0 added [ 834.806905][T12779] bˆ¡cÊRݘOC‰ÿæ: renamed from lo [ 834.827941][T12764] team0: Port device team_slave_1 added [ 835.711682][T12803] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2882'. [ 835.940653][ T4330] Bluetooth: hci5: command 0x0409 tx timeout [ 837.322530][ T4314] bond0: (slave syz_tun): Releasing backup interface [ 837.334329][T12764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 837.341865][T12764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 837.368371][T12764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 837.401475][T12803] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2882'. [ 837.450014][T12764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 837.466855][T12764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 837.573258][T12764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 837.839138][ T4968] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 837.991806][T12764] device hsr_slave_0 entered promiscuous mode [ 838.016367][ T4330] Bluetooth: hci5: command 0x041b tx timeout [ 838.022829][T12764] device hsr_slave_1 entered promiscuous mode [ 838.173258][ T4968] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.259848][ T4968] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.541430][ T4968] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.952007][ T4968] device 0 left promiscuous mode [ 839.864685][T12867] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2901'. [ 840.042311][T12867] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2901'. [ 840.096557][ T4330] Bluetooth: hci5: command 0x040f tx timeout [ 840.124559][T12877] netlink: 'syz.1.2903': attribute type 10 has an invalid length. [ 841.199967][T12872] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2901'. [ 841.510734][T12892] FAULT_INJECTION: forcing a failure. [ 841.510734][T12892] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 841.536448][T12892] CPU: 1 PID: 12892 Comm: syz.1.2908 Not tainted syzkaller #0 [ 841.544007][T12892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 841.554090][T12892] Call Trace: [ 841.557397][T12892] [ 841.560356][T12892] dump_stack_lvl+0x188/0x24e [ 841.565072][T12892] ? show_regs_print_info+0x12/0x12 [ 841.570310][T12892] ? load_image+0x400/0x400 [ 841.574845][T12892] ? __lock_acquire+0x7d10/0x7d10 [ 841.579917][T12892] should_fail_ex+0x399/0x4d0 [ 841.584629][T12892] _copy_from_user+0x2c/0x170 [ 841.589370][T12892] __sys_bpf+0x2ea/0x780 [ 841.593649][T12892] ? bpf_link_show_fdinfo+0x380/0x380 [ 841.599077][T12892] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 841.605279][T12892] __x64_sys_bpf+0x78/0x90 [ 841.609846][T12892] do_syscall_64+0x4c/0xa0 [ 841.614306][T12892] ? clear_bhb_loop+0x60/0xb0 [ 841.619014][T12892] ? clear_bhb_loop+0x60/0xb0 [ 841.623730][T12892] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 841.629657][T12892] RIP: 0033:0x7f2abff9cdd9 [ 841.634096][T12892] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 841.653730][T12892] RSP: 002b:00007f2ac0e24028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 841.662168][T12892] RAX: ffffffffffffffda RBX: 00007f2ac0215fa0 RCX: 00007f2abff9cdd9 [ 841.670162][T12892] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 841.678153][T12892] RBP: 00007f2ac0e24090 R08: 0000000000000000 R09: 0000000000000000 [ 841.686148][T12892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 841.694229][T12892] R13: 00007f2ac0216038 R14: 00007f2ac0215fa0 R15: 00007ffed5e8fb78 [ 841.702238][T12892] [ 841.912354][T12901] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2912'. [ 841.991521][T12901] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2912'. [ 842.176402][ T4330] Bluetooth: hci5: command 0x0419 tx timeout [ 844.012383][T12764] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 844.167312][T12764] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 844.190371][T12764] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 844.297336][ T4968] device gretap0 left promiscuous mode [ 844.305310][ T4968] Ÿë: port 1(gretap0) entered disabled state [ 844.346794][T12764] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 844.857442][T12764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 844.952601][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 844.975865][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 845.045357][T12764] 8021q: adding VLAN 0 to HW filter on device team0 [ 845.105969][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 845.142027][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 845.229255][ T4347] bridge0: port 1(bridge_slave_0) entered blocking state [ 845.236544][ T4347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 845.341684][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 845.385827][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 845.480927][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 845.525349][T12958] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2925'. [ 845.541552][ T4347] bridge0: port 2(bridge_slave_1) entered blocking state [ 845.548861][ T4347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 845.690570][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 845.751378][T12958] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2925'. [ 845.787216][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 845.848540][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 845.869619][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 845.903307][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 845.919297][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 845.942087][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 845.955676][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 845.967097][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 845.988271][T12764] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 846.006080][T12764] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 846.017539][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 846.042624][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 847.469765][ T4968] device hsr_slave_0 left promiscuous mode [ 847.485741][ T4968] device hsr_slave_1 left promiscuous mode [ 847.513758][ T4968] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 847.556494][ T4968] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 847.569396][ T4968] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 847.596394][ T4968] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 847.669564][ T4968] device veth1_macvtap left promiscuous mode [ 847.690517][ T4968] device veth0_macvtap left promiscuous mode [ 847.708721][ T4968] device veth1_vlan left promiscuous mode [ 847.715104][ T4968] device veth0_vlan left promiscuous mode [ 848.122244][ T4968] device macvlan0 left promiscuous mode [ 848.132627][ T4968] team0 (unregistering): Port device macvlan0 removed [ 848.462438][ T4968] device team_slave_1 left promiscuous mode [ 848.469722][ T4968] team0 (unregistering): Port device team_slave_1 removed [ 848.518126][ T4968] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 848.878023][ T4968] bond0 (unregistering): Released all slaves [ 848.922557][T12987] netlink: 'syz.4.2930': attribute type 10 has an invalid length. [ 848.937566][T12997] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2934'. [ 848.952715][T12998] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2934'. [ 848.973014][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 848.987978][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 849.040870][T12764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 849.087220][T13001] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2935'. [ 849.104675][T13001] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2935'. [ 849.168943][ T8298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 849.197457][ T8298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 849.240864][ T8298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 849.263331][ T8298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 849.278898][ T8298] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 849.289893][ T8298] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 849.303581][T12764] device veth0_vlan entered promiscuous mode [ 849.330654][T12764] device veth1_vlan entered promiscuous mode [ 849.415916][ T8298] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 849.428239][ T8298] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 849.468972][ T8298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 849.495397][ T8298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 849.508488][T12764] device veth0_macvtap entered promiscuous mode [ 849.558773][T12764] device veth1_macvtap entered promiscuous mode [ 849.610764][T12764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 849.646426][T12764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 849.685172][T12764] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 849.695381][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 849.712498][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 849.722107][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 849.735984][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 849.761021][T12764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 849.786425][T12764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 849.801189][T12764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 849.813282][T12764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 849.826100][T12764] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 849.863224][ T8296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 849.894886][ T8296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 849.928655][T12764] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 849.961106][T12764] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 850.036826][T12764] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 850.061387][T12764] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 850.233615][ T8298] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 850.276432][ T8298] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 850.309832][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 850.365961][ T8298] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 850.389806][ T8298] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 850.420082][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 850.725108][T13033] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2946'. [ 850.801950][T13033] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2946'. [ 851.738595][T13052] netlink: 'syz.0.2950': attribute type 11 has an invalid length. [ 851.816672][T13052] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2950'. [ 852.315389][ T56] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.338289][T13046] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 852.453407][T13069] netlink: 'syz.4.2957': attribute type 3 has an invalid length. [ 852.493321][T13069] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2957'. [ 852.698617][T13074] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2957'. [ 852.736607][ T4330] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 852.759738][ T4330] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 852.771443][ T4330] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 852.781966][ T4330] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 852.792346][ T4330] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 852.800023][ T4330] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 853.191332][ T56] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 853.239557][T13074] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2957'. [ 853.374205][ T56] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 853.514529][ T56] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 853.969199][T13076] chnl_net:caif_netlink_parms(): no params data found [ 854.907191][ T4329] Bluetooth: hci3: command 0x0409 tx timeout [ 855.875670][T13076] bridge0: port 1(bridge_slave_0) entered blocking state [ 855.883223][T13076] bridge0: port 1(bridge_slave_0) entered disabled state [ 855.892708][T13076] device bridge_slave_0 entered promiscuous mode [ 855.943944][T13076] bridge0: port 2(bridge_slave_1) entered blocking state [ 855.976773][T13076] bridge0: port 2(bridge_slave_1) entered disabled state [ 855.985124][T13076] device bridge_slave_1 entered promiscuous mode [ 856.172157][T13146] __nla_validate_parse: 2 callbacks suppressed [ 856.172197][T13146] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2974'. [ 856.260941][T13146] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2974'. [ 856.359885][T13076] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 856.458463][T13076] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 856.570790][T13076] team0: Port device team_slave_0 added [ 856.579640][T13157] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2987'. [ 856.616732][T13157] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2987'. [ 856.657386][T13076] team0: Port device team_slave_1 added [ 856.937326][T13076] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 856.944372][T13076] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 856.976532][ T4329] Bluetooth: hci3: command 0x041b tx timeout [ 857.056474][T13076] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 857.092481][T13166] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2980'. [ 857.132299][T13166] device hsr_slave_0 left promiscuous mode [ 857.191565][T13166] device hsr_slave_1 left promiscuous mode [ 857.545051][T13172] netlink: 'syz.3.2980': attribute type 23 has an invalid length. [ 857.565030][T13076] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 857.586543][T13076] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 857.695321][T13076] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 858.108141][T13076] device hsr_slave_0 entered promiscuous mode [ 858.121187][T13076] device hsr_slave_1 entered promiscuous mode [ 858.135868][T13195] device vcan0 entered promiscuous mode [ 858.143126][T13195] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 858.202572][ T56] device hsr_slave_0 left promiscuous mode [ 858.209457][ T56] device hsr_slave_1 left promiscuous mode [ 858.231637][ T56] device veth1_vlan left promiscuous mode [ 858.238351][ T56] device veth0_vlan left promiscuous mode [ 859.059848][ T4329] Bluetooth: hci3: command 0x040f tx timeout [ 859.313023][ T56] device geneve1 left promiscuous mode [ 859.323930][ T56] team0 (unregistering): Port device geneve1 removed [ 859.784562][ T56] device team_slave_1 left promiscuous mode [ 859.791967][ T56] team0 (unregistering): Port device team_slave_1 removed [ 859.839342][ T56] device team_slave_0 left promiscuous mode [ 859.847738][ T56] team0 (unregistering): Port device team_slave_0 removed [ 859.899123][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 860.229928][ T56] bond0 (unregistering): Released all slaves [ 860.279549][T13196] device bridge_slave_1 left promiscuous mode [ 860.286016][T13196] bridge0: port 2(bridge_slave_1) entered disabled state [ 860.295564][T13196] device bridge_slave_0 left promiscuous mode [ 860.302182][T13196] bridge0: port 1(bridge_slave_0) entered disabled state [ 861.133074][T13216] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2991'. [ 861.146357][ T4329] Bluetooth: hci3: command 0x0419 tx timeout [ 861.345693][T13216] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2991'. [ 861.808956][T13232] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2996'. [ 862.710215][T13232] device hsr_slave_0 left promiscuous mode [ 862.745838][T13232] device hsr_slave_1 left promiscuous mode [ 862.940415][T13241] netlink: 'syz.2.2996': attribute type 23 has an invalid length. [ 863.102027][T13253] netlink: 'syz.3.3000': attribute type 3 has an invalid length. [ 863.131438][T13076] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 863.147256][T13253] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3000'. [ 863.187465][T13076] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 863.229276][T13076] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 863.229298][T13255] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3000'. [ 863.297041][T13076] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 863.383659][T13255] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3000'. [ 863.402807][T13260] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3000'. [ 863.473568][T13253] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3000'. [ 863.767768][T13076] 8021q: adding VLAN 0 to HW filter on device bond0 [ 863.813873][ T4968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 863.836134][ T4968] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 863.863998][T13076] 8021q: adding VLAN 0 to HW filter on device team0 [ 863.899555][ T4968] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 863.919683][ T4968] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 863.945467][ T4968] bridge0: port 1(bridge_slave_0) entered blocking state [ 863.952744][ T4968] bridge0: port 1(bridge_slave_0) entered forwarding state [ 864.003237][ T4968] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 864.051742][ T4968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 864.087713][ T4968] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 864.123456][ T4968] bridge0: port 2(bridge_slave_1) entered blocking state [ 864.130682][ T4968] bridge0: port 2(bridge_slave_1) entered forwarding state [ 864.140271][ T4968] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 864.175909][ T4968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 864.220844][ T4968] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 864.264281][ T4968] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 864.297645][ T4968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 864.345895][ T4968] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 865.135380][ T4968] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 865.154906][ T4968] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 865.185286][ T4968] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 865.198979][T13287] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3010'. [ 865.226525][T13287] device hsr_slave_0 left promiscuous mode [ 865.238314][T13287] device hsr_slave_1 left promiscuous mode [ 865.396161][T13292] netlink: 'syz.4.3010': attribute type 23 has an invalid length. [ 865.469091][ T8296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 865.498054][ T8296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 865.542424][T13076] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 867.249293][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 867.269268][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 867.314970][T13076] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 867.395405][ T4968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 867.419493][ T4968] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 867.517968][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 867.548737][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 867.574383][T13076] device veth0_vlan entered promiscuous mode [ 867.598669][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 867.632285][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 867.662855][T13076] device veth1_vlan entered promiscuous mode [ 867.771890][ T8298] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 867.793659][ T8298] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 867.847307][ T8298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 867.867177][ T8298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 867.900113][T13076] device veth0_macvtap entered promiscuous mode [ 867.940919][T13076] device veth1_macvtap entered promiscuous mode [ 868.025999][T13076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 868.075663][T13076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 868.099609][T13076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 868.151323][T13076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 868.194607][T13076] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 868.245337][ T8298] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 868.267593][ T8298] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 868.312624][ T8298] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 868.369795][ T8298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 868.449594][T13076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 868.496555][T13076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 868.549091][T13076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 868.602755][T13076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 868.665536][T13076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 868.724906][T13076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 868.775564][T13076] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 868.823751][ T8297] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 868.851890][ T8297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 868.904996][T13076] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.941246][T13076] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.984566][T13076] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.025234][T13076] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.616610][ T4341] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 869.624524][ T4341] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 869.691715][ T8297] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 869.733667][T13371] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3028'. [ 869.806696][ T4341] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 869.831156][ T4341] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 869.862385][ T8298] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 869.877563][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 869.915224][T13371] netlink: 'syz.0.3028': attribute type 23 has an invalid length. [ 870.196827][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.203225][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.993068][ T4330] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 872.007304][ T4330] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 872.019430][ T4330] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 872.053393][ T4330] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 872.077013][ T4330] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 872.084836][ T4330] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 872.170095][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 872.913007][T13430] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3043'. [ 873.460178][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 873.629650][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 873.708456][T13430] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3043'. [ 873.897948][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 873.940866][T13433] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3043'. [ 874.180152][ T4329] Bluetooth: hci1: command 0x0409 tx timeout [ 874.435767][ T11] tipc: Left network mode [ 874.435844][T13412] chnl_net:caif_netlink_parms(): no params data found [ 876.256575][ T4329] Bluetooth: hci1: command 0x041b tx timeout [ 878.336533][ T4330] Bluetooth: hci1: command 0x040f tx timeout [ 879.731909][T13412] bridge0: port 1(bridge_slave_0) entered blocking state [ 879.739426][T13412] bridge0: port 1(bridge_slave_0) entered disabled state [ 879.757096][T13412] device bridge_slave_0 entered promiscuous mode [ 879.803721][T13412] bridge0: port 2(bridge_slave_1) entered blocking state [ 879.836677][T13412] bridge0: port 2(bridge_slave_1) entered disabled state [ 879.894963][T13412] device bridge_slave_1 entered promiscuous mode [ 880.058815][T13529] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3064'. [ 880.392369][T13412] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 880.412900][T13529] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3064'. [ 880.423082][ T4330] Bluetooth: hci1: command 0x0419 tx timeout [ 880.485253][T13412] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 880.651367][T13412] team0: Port device team_slave_0 added [ 880.687223][T13534] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3074'. [ 880.745901][T13412] team0: Port device team_slave_1 added [ 880.755773][T13534] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3074'. [ 882.055597][T13412] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 882.081971][T13412] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 882.108469][T13412] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 882.141198][T13412] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 882.166161][T13412] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 882.239025][T13412] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 882.509498][T13412] device hsr_slave_0 entered promiscuous mode [ 882.850270][T13412] device hsr_slave_1 entered promiscuous mode [ 883.436581][T13412] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 883.444285][T13412] Cannot create hsr debugfs directory [ 884.089065][T13585] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3077'. [ 884.121980][T13585] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3077'. [ 884.238853][ T11] device veth1_macvtap left promiscuous mode [ 884.245826][ T11] device veth0_macvtap left promiscuous mode [ 884.301398][ T11] device veth1_vlan left promiscuous mode [ 884.355044][ T11] device veth0_vlan left promiscuous mode [ 886.945648][ T11] device team_slave_1 left promiscuous mode [ 886.960806][ T11] team0 (unregistering): Port device team_slave_1 removed [ 887.015971][ T11] device team_slave_0 left promiscuous mode [ 887.023413][ T11] team0 (unregistering): Port device team_slave_0 removed [ 887.069946][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 887.115549][ T11] device bridge_slave_1 left promiscuous mode [ 887.123172][ T11] team0 (unregistering): Port device bridge_slave_1 removed [ 887.348323][ T11] bond0 (unregistering): Released all slaves [ 887.403633][T13591] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 887.439605][T13591] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 887.462034][T13593] netlink: 'syz.4.3079': attribute type 27 has an invalid length. [ 887.473559][T13591] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 890.188308][T13669] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 890.196444][T13669] IPv6: NLM_F_CREATE should be set when creating new route [ 890.204170][T13669] IPv6: NLM_F_CREATE should be set when creating new route [ 890.211813][T13669] IPv6: NLM_F_CREATE should be set when creating new route [ 896.632518][T13412] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 896.696951][T13412] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 896.738797][T13412] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 896.776625][T13412] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 897.519982][T13412] 8021q: adding VLAN 0 to HW filter on device bond0 [ 897.699496][ T4968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 897.717170][ T4968] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 897.757743][T13412] 8021q: adding VLAN 0 to HW filter on device team0 [ 897.803594][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 897.823485][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 897.877735][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 897.884957][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 897.929391][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 897.952394][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 898.016039][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 898.023289][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 898.061405][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 898.112828][T13767] netlink: 'syz.1.3109': attribute type 21 has an invalid length. [ 898.149239][T13767] netlink: 'syz.1.3109': attribute type 6 has an invalid length. [ 898.208173][T13767] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3109'. [ 898.270472][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 898.307938][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 898.376131][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 898.411561][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 898.498755][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 898.577134][ T8298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 898.607680][ T8298] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 898.694019][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 898.716148][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 898.777247][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 898.823201][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 898.884332][T13412] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 899.648605][ T8298] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 899.678380][ T8298] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 899.704661][T13412] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 899.768237][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 899.807243][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 899.908192][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 899.925048][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 899.945668][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 899.963590][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 900.026386][T13412] device veth0_vlan entered promiscuous mode [ 901.144008][T13412] device veth1_vlan entered promiscuous mode [ 901.192681][ T8296] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 901.288732][T13412] device veth0_macvtap entered promiscuous mode [ 901.328355][ T8296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 901.352544][ T8296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 901.390303][ T8296] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 901.413834][T13412] device veth1_macvtap entered promiscuous mode [ 901.537441][T13412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 901.576240][T13412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 901.586133][T13412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 901.701773][T13412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 901.731703][T13412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 901.756460][T13412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 901.779780][T13412] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 901.811018][T13832] device vcan0 entered promiscuous mode [ 901.826615][T13832] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 901.851209][ T8296] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 901.867356][ T8296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 901.892246][ T8296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 901.902253][T13833] device bridge_slave_1 left promiscuous mode [ 901.909520][ T56] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 901.963563][T13833] bridge0: port 2(bridge_slave_1) entered disabled state [ 902.051694][T13833] device bridge_slave_0 left promiscuous mode [ 902.075497][T13833] bridge0: port 1(bridge_slave_0) entered disabled state [ 903.078280][T13412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 903.094562][T13412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 903.105375][T13412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 903.123017][T13412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 903.133078][T13412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 903.150696][T13412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 903.161719][T13412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 903.176857][T13412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 903.207616][T13412] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 903.220755][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 903.265870][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 903.310280][T13412] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.342173][T13412] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.366374][T13412] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.395507][T13412] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.573372][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 903.601377][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 903.695722][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 903.844044][ T8298] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 903.862099][ T8298] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 904.194640][T13875] netlink: 'syz.3.3128': attribute type 2 has an invalid length. [ 904.801622][ T8298] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 906.468172][T13916] FAULT_INJECTION: forcing a failure. [ 906.468172][T13916] name failslab, interval 1, probability 0, space 0, times 0 [ 906.506366][T13916] CPU: 1 PID: 13916 Comm: syz.1.3137 Not tainted syzkaller #0 [ 906.513927][T13916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 906.524045][T13916] Call Trace: [ 906.527381][T13916] [ 906.530357][T13916] dump_stack_lvl+0x188/0x24e [ 906.535109][T13916] ? show_regs_print_info+0x12/0x12 [ 906.540381][T13916] ? load_image+0x400/0x400 [ 906.544992][T13916] ? verify_lock_unused+0x140/0x140 [ 906.550265][T13916] should_fail_ex+0x399/0x4d0 [ 906.555005][T13916] should_failslab+0x5/0x20 [ 906.559562][T13916] slab_pre_alloc_hook+0x59/0x310 [ 906.564655][T13916] kmem_cache_alloc+0x56/0x2f0 [ 906.569473][T13916] ? skb_clone+0x1e7/0x370 [ 906.573961][T13916] skb_clone+0x1e7/0x370 [ 906.578273][T13916] __netlink_deliver_tap+0x3ed/0x800 [ 906.583635][T13916] ? netlink_deliver_tap+0x2e/0x1b0 [ 906.588944][T13916] netlink_deliver_tap+0x19c/0x1b0 [ 906.594136][T13916] netlink_unicast+0x728/0x8d0 [ 906.599021][T13916] netlink_sendmsg+0x8ad/0xbd0 [ 906.603863][T13916] ? netlink_getsockopt+0x550/0x550 [ 906.609148][T13916] ? aa_sock_msg_perm+0x94/0x150 [ 906.614139][T13916] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 906.619477][T13916] ? security_socket_sendmsg+0x7c/0xa0 [ 906.625031][T13916] ? netlink_getsockopt+0x550/0x550 [ 906.630294][T13916] ____sys_sendmsg+0x5be/0x970 [ 906.635121][T13916] ? __sys_sendmsg_sock+0x30/0x30 [ 906.640185][T13916] ? __import_iovec+0x315/0x500 [ 906.645107][T13916] ? import_iovec+0x6f/0xa0 [ 906.649643][T13916] ___sys_sendmsg+0x2a2/0x360 [ 906.654368][T13916] ? __sys_sendmsg+0x290/0x290 [ 906.659223][T13916] ? __lock_acquire+0x7d10/0x7d10 [ 906.664308][T13916] __se_sys_sendmsg+0x1bb/0x2a0 [ 906.669202][T13916] ? __x64_sys_sendmsg+0x80/0x80 [ 906.674192][T13916] ? lockdep_hardirqs_on+0x94/0x140 [ 906.679429][T13916] do_syscall_64+0x4c/0xa0 [ 906.683898][T13916] ? clear_bhb_loop+0x60/0xb0 [ 906.688644][T13916] ? clear_bhb_loop+0x60/0xb0 [ 906.693362][T13916] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 906.699287][T13916] RIP: 0033:0x7f8704d9cdd9 [ 906.703731][T13916] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 906.723368][T13916] RSP: 002b:00007f8702ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 906.731908][T13916] RAX: ffffffffffffffda RBX: 00007f8705015fa0 RCX: 00007f8704d9cdd9 [ 906.739907][T13916] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 906.747903][T13916] RBP: 00007f8702ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 906.755912][T13916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 906.763915][T13916] R13: 00007f8705016038 R14: 00007f8705015fa0 R15: 00007ffe8d097fa8 [ 906.771932][T13916] [ 907.143657][ T4330] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 907.153186][ T4330] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 907.161600][ T4330] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 907.169657][ T4330] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 907.181884][ T4330] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 907.190448][ T4330] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 908.220688][T13920] chnl_net:caif_netlink_parms(): no params data found [ 908.663102][T13920] bridge0: port 1(bridge_slave_0) entered blocking state [ 908.733402][T13920] bridge0: port 1(bridge_slave_0) entered disabled state [ 908.759312][T13920] device bridge_slave_0 entered promiscuous mode [ 909.222985][ T4330] Bluetooth: hci4: command 0x0409 tx timeout [ 910.743074][T13920] bridge0: port 2(bridge_slave_1) entered blocking state [ 910.750505][T13920] bridge0: port 2(bridge_slave_1) entered disabled state [ 910.760214][T13920] device bridge_slave_1 entered promiscuous mode [ 910.811732][T13920] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 910.827279][T13920] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 910.936530][T13920] team0: Port device team_slave_0 added [ 910.978449][T13920] team0: Port device team_slave_1 added [ 911.039128][T13920] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 911.046149][T13920] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 911.241799][T13920] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 911.294003][ T8296] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 911.297781][ T4330] Bluetooth: hci4: command 0x041b tx timeout [ 911.360605][T13920] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 911.382992][T13920] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 911.419690][T13920] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 911.469938][ T8296] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 911.923937][ T8296] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 912.050556][ T8296] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 912.128444][T13920] device hsr_slave_0 entered promiscuous mode [ 912.153590][T13920] device hsr_slave_1 entered promiscuous mode [ 912.171720][T13920] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 912.180505][T13920] Cannot create hsr debugfs directory [ 912.456502][T13983] netlink: 9275 bytes leftover after parsing attributes in process `syz.4.3155'. [ 912.527535][ T8296] device 0 left promiscuous mode [ 912.725619][T13986] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3156'. [ 912.776579][T13986] tap0: tun_chr_ioctl cmd 1074025677 [ 912.782150][T13986] tap0: linktype set to 774 [ 912.957051][T13990] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3157'. [ 913.378122][ T4330] Bluetooth: hci4: command 0x040f tx timeout [ 914.765974][T13920] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 914.943364][T13920] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 915.050423][T13920] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 915.078158][T13920] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 933.038367][ T8298] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 941.876825][ T4367] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 1-.... } 2651 jiffies s: 211073 root: 0x2/. [ 941.907104][ T4367] rcu: blocking rcu_node structures (internal RCU debug): [ 941.914326][ T4367] Sending NMI from CPU 0 to CPUs 1: [ 941.919652][ C1] NMI backtrace for cpu 1 [ 941.919662][ C1] CPU: 1 PID: 14039 Comm: syz.4.3168 Not tainted syzkaller #0 [ 941.919682][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 941.919693][ C1] RIP: 0010:sched_clock_cpu+0x8/0x260 [ 941.919722][ C1] Code: 41 5f c3 48 c7 c7 c0 5b 9f 8c 48 89 de e8 00 f2 d7 02 e9 44 ff ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 55 48 89 e5 41 57 41 56 <41> 55 41 54 53 48 83 e4 e0 48 81 ec 80 00 00 00 65 48 8b 04 25 28 [ 941.919738][ C1] RSP: 0018:ffffc900001e0230 EFLAGS: 00000046 [ 941.919753][ C1] RAX: ffffffff81a685e5 RBX: ffff888026a93b80 RCX: ffff888026a93b80 [ 941.919768][ C1] RDX: 0000000000000100 RSI: 0000000000000004 RDI: 0000000000000001 [ 941.919779][ C1] RBP: ffffc900001e0240 R08: ffffffff8e1ff3ef R09: 1ffffffff1c3fe7d [ 941.919793][ C1] R10: dffffc0000000000 R11: fffffbfff1c3fe7e R12: ffff88807e395920 [ 941.919807][ C1] R13: dffffc0000000000 R14: 00000000000e2006 R15: ffff88807e395400 [ 941.919820][ C1] FS: 00007faab2fa96c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 941.919837][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 941.919850][ C1] CR2: 0000001b34719ff8 CR3: 00000000284f8000 CR4: 00000000003506e0 [ 941.919866][ C1] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 941.919878][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 941.919890][ C1] Call Trace: [ 941.919896][ C1] [ 941.919905][ C1] __perf_event_header__init_id+0x2de/0x530 [ 941.919944][ C1] perf_prepare_sample+0x18b/0x2020 [ 941.919976][ C1] ? read_lock_is_recursive+0x10/0x10 [ 941.920003][ C1] ? perf_callchain+0x190/0x190 [ 941.920036][ C1] perf_event_output_forward+0x197/0x2f0 [ 941.920064][ C1] ? perf_event_output_forward+0xbe/0x2f0 [ 941.920091][ C1] ? perf_get_page_size+0x430/0x430 [ 941.920115][ C1] ? perf_swevent_event+0x4ba/0x570 [ 941.920152][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 941.920182][ C1] __perf_event_overflow+0x448/0x610 [ 941.920215][ C1] perf_swevent_event+0x315/0x570 [ 941.920245][ C1] ? perf_tp_event+0xc30/0xc30 [ 941.920272][ C1] ? perf_trace_buf_alloc+0x300/0x300 [ 941.920301][ C1] perf_tp_event+0x3e7/0xc30 [ 941.920327][ C1] ? perf_tp_event+0xc30/0xc30 [ 941.920356][ C1] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 941.920417][ C1] ? kvm_sched_clock_read+0x14/0x40 [ 941.920435][ C1] ? sched_clock_cpu+0x6e/0x260 [ 941.920460][ C1] perf_trace_run_bpf_submit+0xf3/0x1c0 [ 941.920492][ C1] perf_trace_preemptirq_template+0x268/0x320 [ 941.920520][ C1] ? asm_sysvec_irq_work+0x16/0x20 [ 941.920546][ C1] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 941.920574][ C1] ? __irq_exit_rcu+0x147/0x230 [ 941.920591][ C1] ? irq_exit_rcu+0x20/0x20 [ 941.920611][ C1] ? asm_sysvec_irq_work+0x16/0x20 [ 941.920635][ C1] trace_irq_enable_rcuidle+0xd3/0x140 [ 941.920663][ C1] trace_hardirqs_on+0x24/0x40 [ 941.920687][ C1] asm_sysvec_irq_work+0x16/0x20 [ 941.920711][ C1] RIP: 0010:rcu_read_unlock_special+0x7f/0x510 [ 941.920731][ C1] Code: eb 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 2b 42 c7 44 2b 08 f8 f3 f3 f3 65 44 8b 35 d2 33 95 7e 41 f7 c6 00 00 f0 00 74 40 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 42 c7 44 2b 08 [ 941.920746][ C1] RSP: 0018:ffffc900001e0ac0 EFLAGS: 00000206 [ 941.920760][ C1] RAX: db4bb0aa2682bb00 RBX: 1ffff9200003c160 RCX: db4bb0aa2682bb00 [ 941.920773][ C1] RDX: dffffc0000000000 RSI: ffffffff8a8c1120 RDI: ffffffff8adf1320 [ 941.920787][ C1] RBP: ffffc900001e0bb0 R08: ffff8880b8f3580b R09: 1ffff110171e6b01 [ 941.920801][ C1] R10: dffffc0000000000 R11: ffffed10171e6b02 R12: 0000000000000246 [ 941.920813][ C1] R13: dffffc0000000000 R14: ffff8880b8f3b900 R15: 0000000000000002 [ 941.920844][ C1] ? __rcu_read_unlock+0xd0/0xd0 [ 941.920872][ C1] __rcu_read_unlock+0x78/0xd0 [ 941.920888][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170 [ 941.920918][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 941.920945][ C1] ieee80211_iterate_active_interfaces_atomic+0x156/0x170 [ 941.920976][ C1] mac80211_hwsim_beacon+0xb7/0x1b0 [ 941.921008][ C1] __hrtimer_run_queues+0x54a/0xd50 [ 941.921047][ C1] ? hw_scan_work+0xf50/0xf50 [ 941.921080][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 941.921100][ C1] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 941.921130][ C1] hrtimer_run_softirq+0x183/0x2a0 [ 941.921154][ C1] handle_softirqs+0x2a1/0x930 [ 941.921177][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 941.921197][ C1] ? do_softirq+0x210/0x210 [ 941.921221][ C1] __irq_exit_rcu+0x13b/0x230 [ 941.921239][ C1] ? irq_exit_rcu+0x20/0x20 [ 941.921263][ C1] irq_exit_rcu+0x5/0x20 [ 941.921278][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 941.921299][ C1] [ 941.921304][ C1] [ 941.921310][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 941.921333][ C1] RIP: 0010:obj_cgroup_charge+0x32a/0x620 [ 941.921359][ C1] Code: 84 24 80 00 00 00 f7 84 24 80 00 00 00 00 02 00 00 41 c6 44 1f 08 f8 0f 85 21 01 00 00 41 f7 c4 00 02 00 00 74 01 fb 45 31 e4 <80> 7c 24 14 00 0f 85 a0 00 00 00 48 8b 44 24 18 49 89 c6 49 c1 ee [ 941.921374][ C1] RSP: 0018:ffffc90004af7820 EFLAGS: 00000246 [ 941.921388][ C1] RAX: db4bb0aa2682bb00 RBX: dffffc0000000000 RCX: db4bb0aa2682bb00 [ 941.921401][ C1] RDX: dffffc0000000000 RSI: ffffffff8a8c1120 RDI: ffffffff8adf1320 [ 941.921415][ C1] RBP: ffffc90004af7910 R08: ffff8880b8f3580b R09: 1ffff110171e6b01 [ 941.921429][ C1] R10: dffffc0000000000 R11: ffffed10171e6b02 R12: 0000000000000000 [ 941.921441][ C1] R13: ffff8880b8f36950 R14: ffff8880b8f36978 R15: 1ffff9200095ef0c [ 941.921471][ C1] ? obj_cgroup_charge+0xe9/0x620 [ 941.921494][ C1] ? mod_objcg_mlstate+0x320/0x320 [ 941.921520][ C1] ? get_obj_cgroup_from_current+0xd0/0x280 [ 941.921543][ C1] ? get_obj_cgroup_from_current+0xd0/0x280 [ 941.921570][ C1] slab_pre_alloc_hook+0x2e7/0x310 [ 941.921595][ C1] kmem_cache_alloc+0x56/0x2f0 [ 941.921614][ C1] ? __alloc_file+0x25/0x230 [ 941.921635][ C1] __alloc_file+0x25/0x230 [ 941.921655][ C1] alloc_empty_file+0x90/0x180 [ 941.921673][ C1] alloc_file+0x5c/0x5f0 [ 941.921696][ C1] alloc_file_pseudo+0x180/0x200 [ 941.921716][ C1] ? alloc_empty_file_noaccount+0x80/0x80 [ 941.921736][ C1] ? alloc_fd+0x58f/0x630 [ 941.921767][ C1] anon_inode_getfd+0xc6/0x1c0 [ 941.921795][ C1] bpf_prog_load+0x1157/0x1560 [ 941.921829][ C1] ? map_freeze+0x390/0x390 [ 941.921854][ C1] ? __might_fault+0xa6/0x120 [ 941.921881][ C1] ? __might_fault+0xa6/0x120 [ 941.921899][ C1] ? __might_fault+0xc2/0x120 [ 941.921915][ C1] ? __might_fault+0xa6/0x120 [ 941.921938][ C1] ? bpf_lsm_bpf+0x5/0x10 [ 941.921957][ C1] ? security_bpf+0x7a/0xa0 [ 941.921978][ C1] __sys_bpf+0x5b8/0x780 [ 941.922004][ C1] ? bpf_link_show_fdinfo+0x380/0x380 [ 941.922041][ C1] ? lock_chain_count+0x20/0x20 [ 941.922063][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 941.922095][ C1] __x64_sys_bpf+0x78/0x90 [ 941.922119][ C1] do_syscall_64+0x4c/0xa0 [ 941.922145][ C1] ? clear_bhb_loop+0x60/0xb0 [ 941.922167][ C1] ? clear_bhb_loop+0x60/0xb0 [ 941.922192][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 941.922214][ C1] RIP: 0033:0x7faab219cdd9 [ 941.922231][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 941.922263][ C1] RSP: 002b:00007faab2fa9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 941.922280][ C1] RAX: ffffffffffffffda RBX: 00007faab2415fa0 RCX: 00007faab219cdd9 [ 941.922293][ C1] RDX: 0000000000000048 RSI: 0000200000000200 RDI: 0000000000000005 [ 941.922305][ C1] RBP: 00007faab2232d69 R08: 0000000000000000 R09: 0000000000000000 [ 941.922317][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 941.922328][ C1] R13: 00007faab2416038 R14: 00007faab2415fa0 R15: 00007fffe24292f8 [ 941.922353][ C1]