last executing test programs: 4.626530428s ago: executing program 3 (id=21383): r0 = socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x3, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000140)=""/237, 0x1a, 0xed, 0x1}, 0x28) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8c00d, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0xf445}, 0x0, 0xd, r3, 0x0) r5 = socket$kcm(0x2a, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x891b, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000050000000300000000000010080000000300000000000011030000000000000000000000010000040400ecb4f50ed002e2a8d6a3f65103000000000000"], 0x0, 0x51}, 0x28) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40042409, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB="0000000a00000000000000000000000000000000b7f7295f2fa42ccd4b5c2cfcc07531d5cd61f465398eb94290bc70742d93357eb80ac8399a4318ba167e32cbf7de1f91e69cf6befb8508b3030000000000000070fac320e9d92e3f754901fc1485b19b5b59da554ed3b5d8a281", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e00000009000000f20000002d8d000026000000", @ANYRES32=r6, @ANYBLOB="01000100"/15, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="02000000020000000500"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x7, 0xd, &(0x7f0000000280)=ANY=[@ANYRES8=r1, @ANYBLOB="0000000000000000b7080000000000007b8a10ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b9040a00000000fe0500002015000600142603600e1209000a00000000000001060000b94dcf5c0468c1d67f6f94007134cfeee0800089e408e8d8ef52b40800de00e06bbace8017cbec4c2ee5a7cef4090000001fb79164075ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5035ccb29e00360db70100000040fad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a83954b43370e9701008400002d3bc75dc0bb9dd33e438c", 0xd8}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x26}, 0x28) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000031294", 0x2e}], 0x1}, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000000080000000000000000000850000006100000085000000a000000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xc7, &(0x7f0000000140)=""/199}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000f80)={r9, 0x0, 0x36, 0x0, &(0x7f0000001000)="7a7f822c2aff88df53ef2a2d86dd5367f5fdfe81b4a31ec9fa80f7d278c24752114f5ac100bd3fe2ab57b5fe31fdec5ab57b8f487e54", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(r0, 0x84, 0xb, &(0x7f0000000000), 0xe) sendmsg$inet(r0, &(0x7f0000000ac0)={&(0x7f00000001c0)={0x2, 0x4e12, @rand_addr=0x64010902}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000040)="7f4da2bfde75f03dc1063abed8961f125142bb80843ca0eb566c585dc524ce8eeb95e79cc4a7c8d0afbf7db103b0f0405fca46ba48ee4867ed09af32e93bfccf96fa0200000059110496e28aab6d5d4c48dd7fbeb7", 0x55}], 0x1}, 0x24008014) 3.281531701s ago: executing program 3 (id=21396): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x2000009, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext, 0x100080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000240)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e000091d028ef8020"], 0xfe33) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x1}, 0x40, 0x0, 0x0, 0x5, 0x7, 0xa, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x20102400, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x1e, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000001000), 0x0}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000300)={0x3, 0x0, [0x0, 0x0, 0x0]}) r3 = socket$kcm(0xa, 0x6, 0x0) sendmsg$inet(r3, &(0x7f0000000b00)={&(0x7f0000000280)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000000a80)=[{&(0x7f0000000500)="06f9b30b8264b6075cce812757d5a213ea628081313b0405a563b6d047de97022e01706923d66d87d66662ea85a18dcd9d44993e56320c1c36b921cd197a7ef235a8c609110f478855e2c750e6271ddf", 0x50}, {&(0x7f0000000700)="ee37b2f50ad1f6859847a09a14ec59ba22cab3b3ed2c9918f9a1110049f3125acf2743ce7164462f1138ee6083", 0x2d}, {&(0x7f0000000740)="9304e9d50f006a1e070d03cb4792e66d990dd47fbe10758a35ffb04ba07a456052b0c3d1e3c01609e37f61df5e6f91807b972a9a42793c22b124a6372df0e8e371eb51d048d64bda63290d95fdade3472cdb3966eeba2094faf16a8cda111692c2abc264b19dc2aa14982292b70998ebef661e4ba86c4a67df474ea7169f732e4c667bdbb2a4ba83aa48b0c250f3bfe25256f50d78c4e835f322eeae7d11", 0x9e}, {&(0x7f0000000800)="adc2d25b82157c34f5a70cd5d5a7a9e6fe29fb3fb5e13009a37e3b278d78aad8c8171d1488a9e01877ec262789e740a37a3ffd75c7101d784306efce09b69ec25482693ebcec4ab7f3329768b0a390492880d80bdfd2a70bb454757711d684124f99bc1bd2252250e005e0d8cb586e0249d530b3a6039920777727a1b519bcd4fcf85a214cdd12cece3e067dad967c19747ddc4b61b34cb1a98972eea6f7e76243e810c25f5826", 0xa7}, {&(0x7f00000008c0)}, {&(0x7f00000009c0)}], 0x6}, 0x20000000) 2.847891661s ago: executing program 0 (id=21399): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000180)="8900", 0x2}, {&(0x7f0000000640)="25b2b3cbea4056eb9d315d760d7e9dfcd937", 0x12}], 0x2, 0x0, 0x0, 0x900}, 0x0) socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317"], 0xfe1b) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x2, 0x4, 0x6, 0xb, 0x0, 0xffffffffffffffff, 0x40}, 0x50) r2 = socket$kcm(0x10, 0x2, 0x10) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@o_path={&(0x7f0000000200)='./file0\x00', 0x0, 0x4000, r2}, 0x18) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000002c0)={r1, r3}) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a1810039000000000b0000000000000e000a000f00000002", 0x29}], 0x1}, 0x0) close(r2) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f0000180059"], 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xb, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000850000000800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x26, &(0x7f0000000180)=[{&(0x7f00000007c0)="d8000000100081044e81f782db44b904021d08000b000000e8fe55a1180015000600142603600e1209000d0000000401a80016000a0001400600f7ff026010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce0f4f42a78f5904890bc6bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee0dd6e4edef3d93452a92954b43370e97", 0xe0}], 0x1}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000500)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb01001800000018004cb99f00f0bc99b5008ca3a50001000090020000000d0000000400000000000100000400000000000000"], 0x0, 0x32}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000001000000000300000001000000000000000000000200000000000000000000000602"], 0x0, 0x56}, 0x20) sendmsg$kcm(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="030000", 0x3}], 0x2}, 0x40) r7 = socket$kcm(0x2, 0x1, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000070000000000000000020000060400000000000000000000000000000000000905000000000000000000000b"], 0x0, 0x5a}, 0x28) setsockopt$sock_attach_bpf(r7, 0x84, 0x9, &(0x7f0000000380), 0x9c) syz_clone(0x160480, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b9040a", 0x11}], 0x1}, 0x0) 2.672184405s ago: executing program 2 (id=21400): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x108, 0x0, 0x0, 0x0, 0x0, 0xf100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r1, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x5, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=ANY=[@ANYBLOB="0a00000004000000020000000700000000000000", @ANYRES32=0x1, @ANYBLOB="920e000000000000000000000400000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xc3}}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r3, r2}, 0xc) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) r4 = socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xef, 0x5, 0x11, 0x7, 0x0, 0xfffffffffffffff7, 0x7a5d4, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xaaa3, 0x2, @perf_bp={0x0}, 0x2, 0x576b, 0x2, 0x8, 0xc6, 0xaed, 0x3, 0x0, 0xfffffff9, 0x0, 0x6}, 0x0, 0x100000000000000f, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000280)={r0}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a80d0bcb924f93045fc60040f12", 0x17}], 0x1}, 0x4010) r5 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f00000001c0), 0x2, 0xffffffffffffffff, 0x4}, 0x38) sendmsg$kcm(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0}, 0x24000000) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) 2.653747436s ago: executing program 4 (id=21401): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x100, 0xc2ba, 0x0, 0x4000000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0}, 0x50) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)}, 0x4000010) 2.518859389s ago: executing program 3 (id=21402): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0xe, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e120800040000000401a80016000800014009001000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x0, 0x2c, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a0091"], 0x82d7) recvmsg(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 2.487920989s ago: executing program 2 (id=21403): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f0000000400000004000000120000", @ANYRES32], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) 2.340258793s ago: executing program 4 (id=21404): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x4400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x103690, 0xac5d, 0x0, 0x0, 0x8637, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100808, 0x0, 0x8000, 0x0, 0x0, 0x3, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xd, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, 0x0}, 0x4000000) socket$kcm(0x10, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/user\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xf, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e}, 0x94) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r1, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5", 0x75f}], 0x1, &(0x7f00000011c0)=ANY=[], 0x6b}, 0x0) close(r1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x541b, &(0x7f0000000640)) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffffd, 0x1}, 0x201, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x3e1, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081084e81f782db44b904021d080006007c06e8fe55a10a0015400600142603600e120800060000000201a80016000800014003e01100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x83, 0x0, 0x0, 0x4d31, 0x100, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffa, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000007c0), 0x600100, 0x0) socketpair(0x2, 0x3, 0x5, &(0x7f0000000240)) mkdir(&(0x7f0000000800)='./file0\x00', 0x0) close(0xffffffffffffffff) ioctl$TUNSETNOCSUM(r0, 0xb702, 0x0) 2.328057833s ago: executing program 3 (id=21405): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x6}, 0x408, 0x0, 0x1000008, 0x0, 0x4000003, 0x2, 0x0, 0x0, 0x0, 0x0, 0x800000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000005c0)=ANY=[@ANYRESOCT=r0], &(0x7f00000001c0)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r1, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xf, &(0x7f0000000540)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x66, &(0x7f0000000200)=""/102, 0x0, 0x0, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x5, 0x3, 0x5, 0x6}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000340)=[{0x5, 0x5, 0x8, 0x4}, {0x5, 0x3, 0x3}, {0x1, 0x2, 0x9, 0xa}], 0x10, 0x6}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000800)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce8100071100fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r5) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x21, 0x2, 0x2) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r6 = perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5d31, 0x8015, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x8008, 0x2, 0x0, 0x0, 0x2, 0xb, 0x0, 0x0, 0x8, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8b06, &(0x7f0000000080)={'batadv0\x00', @local}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$PERF_EVENT_IOC_RESET(r6, 0x2403, 0x5ae) r8 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x7, r8, 0x0) socketpair(0x15, 0x5, 0x0, &(0x7f0000000500)) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000003c0)={0x5, &(0x7f0000000180)=[{0x6, 0xe, 0x2, 0x4}, {0x401, 0x39, 0xd3, 0x9}, {0x3b, 0x4, 0x1, 0x8}, {0xb, 0x9, 0x10, 0xfffffffc}, {0x7, 0xe, 0xe, 0x3}]}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfffffffffffffe83}, 0x10004000) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89ed, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_int(r9, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) r11 = openat$cgroup_procs(r9, &(0x7f0000001a80)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r11, &(0x7f0000000380), 0x12) write$cgroup_int(r10, &(0x7f0000000040)=0x2d00, 0x1) 2.243115626s ago: executing program 1 (id=21406): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="d800000018008111e00212ba0d8105040a020000030f000b067c55a1bc000900b80006990e00000015000500fe808178a8001500030001400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef40900", 0x64}], 0x1}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'batadv_slave_0\x00', 0x1}) socketpair(0x1e, 0x2, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0xfe, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x2129, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0xf, &(0x7f00000001c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000900)=r1, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="18000046499f8b52edc18c001c0200"/24], &(0x7f0000000780)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r6, 0x10, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r3, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000000)="b9ff03030018698cb89e40f086dd6000000e00002f00630677", 0x0, 0xfa, 0x2000000, 0x3f, 0xc0, &(0x7f0000000440), &(0x7f0000000080), 0x4}, 0x50) r7 = socket$kcm(0x10, 0x3, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000002000000a00300000500000000000000", @ANYRES32, @ANYBLOB="00000000000000000000001e661ecb5b0154ac00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000640)={r8, 0x0, 0x0}, 0x20) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002680)={&(0x7f00000006c0)=ANY=[], &(0x7f0000001680)=""/4096, 0x42, 0x1000, 0x0, 0x6}, 0x28) r10 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000000c7e67db9eef430b90102420312010000008000000015453af53216e5ae0dbe5f6e88b4cf63c46585aed4ec968662135799dc1e4cdfbecad652475a34a43c509e4a11153fadec5a002530e15b643ae9aff7809e9b40479291bfbef2d18e6970e6f19a15ac63e1a7b9f0f2c84d08270aa0fa026bafeaf9b58021d4476aec56454011e10c81650663a336c22e59cdbbdb353ad1c4a17ad649d97bd611a5a6ba0d17fc0766b4e0a0a39a6299a03fa3e4b97ca333639c135f93729286ffef72db8a5883", @ANYBLOB="0500000000000000", @ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB="05800000000000020300"/28], 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f00000000c0)={r3, r11}, 0xc) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848340000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x2000489c) openat$cgroup_procs(r10, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 2.242662226s ago: executing program 2 (id=21407): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4000008, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0x36, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x805, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000001000)=ANY=[@ANYBLOB="1000000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) socket$kcm(0x10, 0x3, 0x10) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000002400000024"], 0x0, 0x42, 0x0, 0x1, 0xe988}, 0x28) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)) 2.109613469s ago: executing program 0 (id=21408): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000180)="8900", 0x2}, {&(0x7f0000000640)="25b2b3cbea4056eb9d315d760d7e9dfcd937", 0x12}], 0x2, 0x0, 0x0, 0x900}, 0x0) socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317"], 0xfe1b) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x2, 0x4, 0x6, 0xb, 0x0, 0xffffffffffffffff, 0x40}, 0x50) r2 = socket$kcm(0x10, 0x2, 0x10) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@o_path={&(0x7f0000000200)='./file0\x00', 0x0, 0x4000, r2}, 0x18) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000002c0)={r1, r3}) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a1810039000000000b0000000000000e000a000f00000002800200", 0x2c}], 0x1}, 0x0) close(r2) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f0000180059"], 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xb, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000850000000800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x26, &(0x7f0000000180)=[{&(0x7f00000007c0)="d8000000100081044e81f782db44b904021d08000b000000e8fe55a1180015000600142603600e1209000d0000000401a80016000a0001400600f7ff026010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce0f4f42a78f5904890bc6bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee0dd6e4edef3d93452a92954b43370e97", 0xe0}], 0x1}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000500)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb01001800000018004cb99f00f0bc99b5008ca3a50001000090020000000d0000000400000000000100000400000000000000"], 0x0, 0x32}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000001000000000300000001000000000000000000000200000000000000000000000602"], 0x0, 0x56}, 0x20) sendmsg$kcm(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="030000", 0x3}], 0x2}, 0x40) r7 = socket$kcm(0x2, 0x1, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000070000000000000000020000060400000000000000000000000000000000000905000000000000000000000b"], 0x0, 0x5a}, 0x28) setsockopt$sock_attach_bpf(r7, 0x84, 0x9, &(0x7f0000000380), 0x9c) syz_clone(0x160480, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b9040a", 0x11}], 0x1}, 0x0) 2.06741475s ago: executing program 4 (id=21409): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x2}, 0x2408, 0x0, 0xfffffffc, 0x9, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21bef5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a835701bea8240399c56ce8f58df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f9ac2f7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63bb20e1e0469f7615f67a9218cbace38f5236821314f76302b98afa93044b83989339ca10e6ae30e70e17a82f03e915b8425e8e7a91614306d2ae0bc3550d856f2d7293672b5673d264fc886b0c8bdf436a0fcd21bf9da7bdca98e34cd6e59b0a7ce4ba1b466561aaa35448dff47bb1d7df23d467689a6669e4300d5acf12e4d0b35abf91569f605b2f6df0d861"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f91424fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r3 = socket$kcm(0x2, 0x3, 0x106) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000080)) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x90) perf_event_open$cgroup(&(0x7f0000000b00)={0x3, 0x80, 0x1, 0x9, 0x22, 0x8, 0x0, 0x4a1, 0x606a, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x7d06}, 0x81, 0x3ff, 0x4, 0x6, 0x7, 0xb, 0x7f, 0x0, 0x4, 0x0, 0x3}, 0xffffffffffffffff, 0xe, r0, 0x4) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r7, 0x800454e0, &(0x7f0000000300)=r9) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400470600000000000000180000000d030000000000000000000002000000000000000000000009030000000000000061"], 0x0, 0x52}, 0x28) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000380)={0x2, 0xdffd, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000180)="51835c1daae3c084dfac4ce6fa395fe24db06452b46b69d5d385c3fe5acbb8054e7303f45b10cb2245f4e8984b4405cef4a879e69a3e20f10c0f381b5c3651aefea9043ab7e6b9033133b6ded54aab73f0e4da75919ba92cb06f59a02c232cb23bb1381e7c738615cb0e5c49c264f29a5cf7b40088fae951a6d29519e1d5093293347b5c3798fdb2e35300025a549b45ad8788dba6942bdfd94c2c387eedc76f2d609aa4617dafc1d5ca814e0a", 0xad}, {&(0x7f00000000c0)="a012bead77715b8fba03936402d627d05996449c0c145df0addc6cece60e6c0601860d0a66ee45241e64e30aabc583accd3f6849ab9a73f7e7eab7f86635039795c145f12da3a3d7f1727184a456e47b499b552ada", 0x55}, {&(0x7f0000000140)="ce69ad5ec5b2", 0x6}], 0x3}, 0x810) 1.998144352s ago: executing program 1 (id=21410): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b32, 0x0) socket$kcm(0x23, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x4e7a04d074212c50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x208, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x1}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x8) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x58, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0xffffff00, 0x0, 0xffffffffffffffff, 0x10, '\x00', r1, 0xffffffffffffffff, 0x5, 0x1, 0x8}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x26e1, 0x0) r5 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x2e, &(0x7f0000000640)=r4, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x3, &(0x7f0000000700)=ANY=[@ANYRES16=r0, @ANYRESOCT=r5, @ANYBLOB, @ANYRESOCT=r2, @ANYRES32=r0, @ANYRES32=r4], &(0x7f0000000280)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', r1}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7) recvmsg(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000002200)=""/4096, 0x7ffff000}, {&(0x7f0000003200)=""/4073, 0xfe9}], 0x2}, 0x0) recvmsg(r6, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 1.853035336s ago: executing program 2 (id=21411): r0 = socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x3, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000140)=""/237, 0x1a, 0xed, 0x1}, 0x28) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8c00d, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0xf445}, 0x0, 0xd, r3, 0x0) r5 = socket$kcm(0x2a, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x891b, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000050000000300000000000010080000000300000000000011030000000000000000000000010000040400ecb4f50ed002e2a8d6a3f65103000000000000"], 0x0, 0x51}, 0x28) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40042409, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB="0000000a00000000000000000000000000000000b7f7295f2fa42ccd4b5c2cfcc07531d5cd61f465398eb94290bc70742d93357eb80ac8399a4318ba167e32cbf7de1f91e69cf6befb8508b3030000000000000070fac320e9d92e3f754901fc1485b19b5b59da554ed3b5d8a281", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e00000009000000f20000002d8d000026000000", @ANYRES32=r6, @ANYBLOB="01000100"/19, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="02000000020000000500"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x7, 0xd, &(0x7f0000000280)=ANY=[@ANYRES8=r1, @ANYBLOB="0000000000000000b7080000000000007b8a10ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b9040a00000000fe0500002015000600142603600e1209000a00000000000001060000b94dcf5c0468c1d67f6f94007134cfeee0800089e408e8d8ef52b40800de00e06bbace8017cbec4c2ee5a7cef4090000001fb79164075ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5035ccb29e00360db70100000040fad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a83954b43370e9701008400002d3bc75dc0bb9dd33e438c", 0xd8}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x26}, 0x28) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000031294", 0x2e}], 0x1}, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000000080000000000000000000850000006100000085000000a000000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xc7, &(0x7f0000000140)=""/199}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000f80)={r9, 0x0, 0x36, 0x0, &(0x7f0000001000)="7a7f822c2aff88df53ef2a2d86dd5367f5fdfe81b4a31ec9fa80f7d278c24752114f5ac100bd3fe2ab57b5fe31fdec5ab57b8f487e54", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(r0, 0x84, 0xb, &(0x7f0000000000), 0xe) sendmsg$inet(r0, &(0x7f0000000ac0)={&(0x7f00000001c0)={0x2, 0x4e12, @rand_addr=0x64010902}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000040)="7f4da2bfde75f03dc1063abed8961f125142bb80843ca0eb566c585dc524ce8eeb95e79cc4a7c8d0afbf7db103b0f0405fca46ba48ee4867ed09af32e93bfccf96fa0200000059110496e28aab6d5d4c48dd7fbeb7", 0x55}], 0x1}, 0x24008014) 1.204574611s ago: executing program 3 (id=21413): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x4, @perf_config_ext, 0x10c002, 0xac5d, 0xffffff9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x105840, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pim6reg0\x00', 0x7c2}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x0, 0x0, 0x1000}, 0x10}, 0x94) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={0xffffffffffffffff}, 0x4) socket$kcm(0x29, 0x7, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x5452, &(0x7f0000000180)) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4e20, @local}, 0x10, 0x0}, 0x3000c0c0) recvmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x10020) 1.202947191s ago: executing program 1 (id=21414): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x4, @perf_config_ext, 0x10c002, 0xac5d, 0xffffff9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x105840, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pim6reg0\x00', 0x7c2}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x0, 0x0, 0x1000}, 0x10}, 0x94) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={0xffffffffffffffff}, 0x4) socket$kcm(0x29, 0x7, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x5452, &(0x7f0000000180)) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4e20, @local}, 0x10, 0x0}, 0x3000c0c0) recvmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x10020) 1.151400582s ago: executing program 0 (id=21415): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x108, 0x0, 0x0, 0x0, 0x0, 0xf100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r1, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x5, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=ANY=[@ANYBLOB="0a00000004000000020000000700000000000000", @ANYRES32=0x1, @ANYBLOB="920e000000000000000000000400000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xc3}}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r3, r2}, 0xc) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) r4 = socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xef, 0x5, 0x11, 0x7, 0x0, 0xfffffffffffffff7, 0x7a5d4, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xaaa3, 0x2, @perf_bp={0x0}, 0x2, 0x576b, 0x2, 0x8, 0xc6, 0xaed, 0x3, 0x0, 0xfffffff9, 0x0, 0x6}, 0x0, 0x100000000000000f, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000280)={r0}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a80d0bcb924f93045fc60040f12", 0x17}], 0x1}, 0x4010) r5 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f00000001c0), 0x2, 0xffffffffffffffff, 0x4}, 0x38) sendmsg$kcm(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0}, 0x24000000) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) 977.148037ms ago: executing program 4 (id=21416): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x2000009, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext, 0x100080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000240)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e000091d028ef8020"], 0xfe33) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x20102400, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$kcm(0x1e, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) r2 = socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_config_ext={0xfffffffffffffffd, 0xfffffffffffffffe}, 0x1a114, 0xffffffffffffec27, 0x0, 0x0, 0xffffffffffffffff}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x0) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x11, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002c000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x20, 0x2, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, r1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000001000), 0x0}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_QUERY_BPF(r4, 0xc008240a, &(0x7f0000000300)={0x3, 0x0, [0x0, 0x0, 0x0]}) r5 = socket$kcm(0xa, 0x6, 0x0) sendmsg$inet(r5, &(0x7f0000000b00)={&(0x7f0000000280)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000000a80)=[{&(0x7f0000000500)="06f9b30b8264b6075cce812757d5a213ea628081313b0405a563b6d047de97022e01706923d66d87d66662ea85a18dcd9d44993e56320c1c36b921cd197a7ef235a8c609110f478855e2c750e6271ddf", 0x50}, {&(0x7f0000000700)="ee37b2f50ad1f6859847a09a14ec59ba22cab3b3ed2c9918f9a1110049f3125acf2743ce7164462f1138ee6083", 0x2d}, {&(0x7f0000000740)="9304e9d50f006a1e070d03cb4792e66d990dd47fbe10758a35ffb04ba07a456052b0c3d1e3c01609e37f61df5e6f91807b972a9a42793c22b124a6372df0e8e371eb51d048d64bda63290d95fdade3472cdb3966eeba2094faf16a8cda111692c2abc264b19dc2aa14982292b70998ebef661e4ba86c4a67df474ea7169f732e4c667bdbb2a4ba83aa48b0c250f3bfe25256f50d78c4e835f322eeae7d11", 0x9e}, {&(0x7f0000000800)="adc2d25b82157c34f5a70cd5d5a7a9e6fe29fb3fb5e13009a37e3b278d78aad8c8171d1488a9e01877ec262789e740a37a3ffd75c7101d784306efce09b69ec25482693ebcec4ab7f3329768b0a390492880d80bdfd2a70bb454757711d684124f99bc1bd2252250e005e0d8cb586e0249d530b3a6039920777727a1b519bcd4fcf85a214cdd12cece3e067dad967c19747ddc4b61b34cb1a98972eea6f7e76243e810c25f5826", 0xa7}, {&(0x7f00000008c0)}, {&(0x7f00000009c0)}], 0x6}, 0x20000000) 960.615927ms ago: executing program 1 (id=21417): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x2000009, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext, 0x100080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000240)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e000091d028ef8020"], 0xfe33) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x1}, 0x40, 0x0, 0x0, 0x5, 0x7, 0xa, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$kcm(0x1e, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000001000), 0x0}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000300)={0x3, 0x0, [0x0, 0x0, 0x0]}) r3 = socket$kcm(0xa, 0x6, 0x0) sendmsg$inet(r3, &(0x7f0000000b00)={&(0x7f0000000280)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000000a80)=[{&(0x7f0000000500)="06f9b30b8264b6075cce812757d5a213ea628081313b0405a563b6d047de97022e01706923d66d87d66662ea85a18dcd9d44993e56320c1c36b921cd197a7ef235a8c609110f478855e2c750e6271ddf", 0x50}, {&(0x7f0000000700)="ee37b2f50ad1f6859847a09a14ec59ba22cab3b3ed2c9918f9a1110049f3125acf2743ce7164462f1138ee6083", 0x2d}, {&(0x7f0000000740)="9304e9d50f006a1e070d03cb4792e66d990dd47fbe10758a35ffb04ba07a456052b0c3d1e3c01609e37f61df5e6f91807b972a9a42793c22b124a6372df0e8e371eb51d048d64bda63290d95fdade3472cdb3966eeba2094faf16a8cda111692c2abc264b19dc2aa14982292b70998ebef661e4ba86c4a67df474ea7169f732e4c667bdbb2a4ba83aa48b0c250f3bfe25256f50d78c4e835f322eeae7d11", 0x9e}, {&(0x7f0000000800)="adc2d25b82157c34f5a70cd5d5a7a9e6fe29fb3fb5e13009a37e3b278d78aad8c8171d1488a9e01877ec262789e740a37a3ffd75c7101d784306efce09b69ec25482693ebcec4ab7f3329768b0a390492880d80bdfd2a70bb454757711d684124f99bc1bd2252250e005e0d8cb586e0249d530b3a6039920777727a1b519bcd4fcf85a214cdd12cece3e067dad967c19747ddc4b61b34cb1a98972eea6f7e76243e810c25f5826", 0xa7}, {&(0x7f00000008c0)}, {&(0x7f00000009c0)}], 0x6}, 0x20000000) 905.386558ms ago: executing program 0 (id=21418): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0xe, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e120800040000000401a80016000800014009001000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x0, 0x2c, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a0091"], 0x82d7) recvmsg(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 709.091263ms ago: executing program 2 (id=21419): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f0000000400000004000000120000", @ANYRES32], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) 699.612083ms ago: executing program 1 (id=21420): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x4400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x103690, 0xac5d, 0x0, 0x0, 0x8637, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100808, 0x0, 0x8000, 0x0, 0x0, 0x3, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xd, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, 0x0}, 0x4000000) socket$kcm(0x10, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/user\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xf, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e}, 0x94) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r1, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5", 0x75f}], 0x1, &(0x7f00000011c0)=ANY=[], 0x6b}, 0x0) close(r1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x541b, &(0x7f0000000640)) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffffd, 0x1}, 0x201, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x3e1, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081084e81f782db44b904021d080006007c06e8fe55a10a0015400600142603600e120800060000000201a80016000800014003e01100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x83, 0x0, 0x0, 0x4d31, 0x100, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffa, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000007c0), 0x600100, 0x0) socketpair(0x2, 0x3, 0x5, &(0x7f0000000240)) mkdir(&(0x7f0000000800)='./file0\x00', 0x0) close(0xffffffffffffffff) ioctl$TUNSETNOCSUM(r0, 0xb702, 0x0) 650.392245ms ago: executing program 0 (id=21421): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="d800000018008111e00212ba0d8105040a020000030f000b067c55a1bc000900b80006990e00000015000500fe808178a8001500030001400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef40900", 0x64}], 0x1}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'batadv_slave_0\x00', 0x1}) socketpair(0x1e, 0x2, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0xfe, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x2129, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0xf, &(0x7f00000001c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000900)=r1, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="18000046499f8b52edc18c001c0200"/24], &(0x7f0000000780)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r6, 0x10, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r3, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000000)="b9ff03030018698cb89e40f086dd6000000e00002f00630677", 0x0, 0xfa, 0x2000000, 0x3f, 0xc0, &(0x7f0000000440), &(0x7f0000000080), 0x4}, 0x50) r7 = socket$kcm(0x10, 0x3, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000002000000a00300000500000000000000", @ANYRES32, @ANYBLOB="00000000000000000000001e661ecb5b0154ac00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000640)={r8, 0x0, 0x0}, 0x20) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002680)={&(0x7f00000006c0)=ANY=[], &(0x7f0000001680)=""/4096, 0x42, 0x1000, 0x0, 0x6}, 0x28) r10 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000000c7e67db9eef430b90102420312010000008000000015453af53216e5ae0dbe5f6e88b4cf63c46585aed4ec968662135799dc1e4cdfbecad652475a34a43c509e4a11153fadec5a002530e15b643ae9aff7809e9b40479291bfbef2d18e6970e6f19a15ac63e1a7b9f0f2c84d08270aa0fa026bafeaf9b58021d4476aec56454011e10c81650663a336c22e59cdbbdb353ad1c4a17ad649d97bd611a5a6ba0d17fc0766b4e0a0a39a6299a03fa3e4b97ca333639c135f93729286ffef72db8a5883", @ANYBLOB="0500000000000000", @ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB="05800000000000020300"/28], 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f00000000c0)={r3, r11}, 0xc) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848340000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x2000489c) openat$cgroup_procs(r10, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 609.460026ms ago: executing program 4 (id=21422): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4000008, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0x36, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x805, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000001000)=ANY=[@ANYBLOB="1000000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) socket$kcm(0x10, 0x3, 0x10) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000002400000024"], 0x0, 0x42, 0x0, 0x1, 0xe988}, 0x28) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)) 540.062547ms ago: executing program 2 (id=21423): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_config_ext={0x8, 0xd}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x1) socketpair(0x27, 0x20000000000001, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xd000000000000000}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000300)="14000000320081024e81798ead4cb9040c1d0800", 0x14}], 0x1}, 0x20004000) r3 = perf_event_open(0x0, 0xffffffffffffffff, 0x100000000, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r3, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x5, 0x1, 0x0, 0x6, 0xe88befc5d45835ea, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x80000001}, 0x140, 0xfffffffffffffffd, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x4400c884) socket$kcm(0x2, 0xa, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0x19, 0x6, 0x7, 0x8, 0x20001, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x3}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001080)={r4, 0x4, &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f00000009c0)=0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000140)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', r5}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x92, 0x1, 0x0, 0x0, 0x0, 0x2, 0x20460, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x1, @perf_bp={0x0}, 0x2080, 0x1, 0x3, 0x0, 0x6, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) sendmsg$tipc(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)}], 0x1}, 0x0) socket$kcm(0x29, 0x2, 0x0) r8 = perf_event_open(&(0x7f0000000080)={0x8, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0}}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r8, 0x2403, 0x9) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9c, 0x10}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 289.426693ms ago: executing program 0 (id=21424): bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="2000000002000000a18200000900000020000000", @ANYRES32, @ANYBLOB="c77400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000002000092040000000000000040a670b50a72c1c8719cefda03d8cc9c00000000c8ca8f98af8c68e9522022f5e88dfd"], 0x50) socket$kcm(0x28, 0x1, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9", 0x0, 0x0, 0x0}, 0x38) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18006daaed13ff00000000000000000028"], 0x0}, 0x90) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1e, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x34, 0x10000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x6}, 0x2c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000f40)={@cgroup, 0x1f, 0x0, 0x7, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000e00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000e40)=[0x0, 0x0, 0x0], &(0x7f0000000f00)=[0x0], 0x0}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001280)={r1, 0xe0, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000fc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f0000001000)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001040)=[0x0, 0x0], 0x0, 0x3d, &(0x7f0000001080)=[{}, {}], 0x10, 0x10, &(0x7f00000010c0), &(0x7f0000001100), 0x8, 0x90, 0x8, 0x8, &(0x7f0000001140)}}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000012c0)={0x7, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000f80)={@ifindex=r6, r0, 0x19, 0x2020, 0x0, @void, @void, @value=r7, @void, r5}, 0x20) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r8, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="98eb000014006bcd9e", 0xeb98}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) recvmsg(r8, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x40003c22) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="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", 0x13d}], 0x1}, 0x14040894) 224.229235ms ago: executing program 4 (id=21425): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000180)="8900", 0x2}, {&(0x7f0000000640)="25b2b3cbea4056eb9d315d760d7e9dfcd937", 0x12}], 0x2, 0x0, 0x0, 0x900}, 0x0) socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317"], 0xfe1b) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x2, 0x4, 0x6, 0xb, 0x0, 0xffffffffffffffff, 0x40}, 0x50) r2 = socket$kcm(0x10, 0x2, 0x10) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@o_path={&(0x7f0000000200)='./file0\x00', 0x0, 0x4000, r2}, 0x18) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000002c0)={r1, r3}) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a1810039000000000b0000000000000e000a000f00000002800200", 0x2c}], 0x1}, 0x0) close(r2) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f0000180059"], 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xb, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000850000000800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x26, &(0x7f0000000180)=[{&(0x7f00000007c0)="d8000000100081044e81f782db44b904021d08000b000000e8fe55a1180015000600142603600e1209000d0000000401a80016000a0001400600f7ff026010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce0f4f42a78f5904890bc6bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee0dd6e4edef3d93452a92954b43370e97", 0xe0}], 0x1}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000500)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb01001800000018004cb99f00f0bc99b5008ca3a50001000090020000000d0000000400000000000100000400000000000000"], 0x0, 0x32}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000001000000000300000001000000000000000000000200000000000000000000000602"], 0x0, 0x56}, 0x20) sendmsg$kcm(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="030000", 0x3}], 0x2}, 0x40) r7 = socket$kcm(0x2, 0x1, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000070000000000000000020000060400000000000000000000000000000000000905000000000000000000000b"], 0x0, 0x5a}, 0x28) setsockopt$sock_attach_bpf(r7, 0x84, 0x9, &(0x7f0000000380), 0x9c) syz_clone(0x160480, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b9040a", 0x11}], 0x1}, 0x0) 141.254917ms ago: executing program 1 (id=21426): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x2}, 0x2408, 0x0, 0xfffffffc, 0x9, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f91424fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r3 = socket$kcm(0x2, 0x3, 0x106) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000080)) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x90) perf_event_open$cgroup(&(0x7f0000000b00)={0x3, 0x80, 0x1, 0x9, 0x22, 0x8, 0x0, 0x4a1, 0x606a, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x7d06}, 0x81, 0x3ff, 0x4, 0x6, 0x7, 0xb, 0x7f, 0x0, 0x4, 0x0, 0x3}, 0xffffffffffffffff, 0xe, r0, 0x4) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r7, 0x800454e0, &(0x7f0000000300)=r9) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000380)={0x2, 0xdffd, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000180)="51835c1daae3c084dfac4ce6fa395fe24db06452b46b69d5d385c3fe5acbb8054e7303f45b10cb2245f4e8984b4405cef4a879e69a3e20f10c0f381b5c3651aefea9043ab7e6b9033133b6ded54aab73f0e4da75919ba92cb06f59a02c232cb23bb1381e7c738615cb0e5c49c264f29a5cf7b40088fae951a6d29519e1d5093293347b5c3798fdb2e35300025a549b45ad8788dba6942bdfd94c2c387eedc76f2d609aa4617dafc1d5ca814e0a", 0xad}, {&(0x7f00000000c0)="a012bead77715b8fba03936402d627d05996449c0c145df0addc6cece60e6c0601860d0a66ee45241e64e30aabc583accd3f6849ab9a73f7e7eab7f86635039795c145f12da3a3d7f1727184a456e47b499b552ada", 0x55}, {&(0x7f0000000140)="ce69ad5ec5b2", 0x6}], 0x3}, 0x810) 0s ago: executing program 3 (id=21427): recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x378f}, 0x1, 0xfffffffffffffffe, 0x4, 0x6, 0xfffffffffffffffe, 0x2080000a, 0xfffb, 0x0, 0x5}, 0x0, 0x8004, 0xffffffffffffffff, 0xd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080400007c09e8fe55a10a0015c005001c2603600e1208000f0000000401a8001600a40001", 0x37}], 0x1}, 0x20004000) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x33fe0) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="5c00000015006b03000000d86e6c1d0002117ea6ea6567e71b59000af32c6e020075f800250002000f00000017d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4d4938037e786a6d0bdd70000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000a121064632b1fb860000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000100000850000008200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r6 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000a80)={&(0x7f0000000300)={0x2, 0x4e21, @multicast1}, 0x4, 0x0}, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)="27031c00160014000000002f1eafacf706e105000000894f00050003ee0b80558ddbba9b37786fd808252372a31e4939884f0abc3c", 0x35}, {&(0x7f0000001980)="0276dd88a8", 0x5}], 0x2}, 0x24004010) sendmsg$kcm(r1, &(0x7f0000000400)={&(0x7f0000000080)=@ethernet={0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000100)="f3f1fd086d1214fbaf264502d80eca825f1c1b05daa734a272974057b362d460509ca1a3a3eb30f994e63b9bf050d31700a9f0e05db66995947bd7d9d862e92bcf775e915dd961e51c3f0381ef524f2812ebeec1b8227e3734cf4f3c310ad2b04525c89922d208508dffd49ff7a6b00110c0ef87b03bfb6c735b", 0x7a}, {&(0x7f0000000180)="a75d5cce721bf7c4c7bfe2ba038b0df65435", 0x12}], 0x2, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1e0}, 0x800) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100808, 0x0, 0x8000, 0x0, 0x0, 0x3, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0xa, 0x1, 0x106) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x541b, &(0x7f0000000180)) socket$kcm(0xa, 0x5, 0x0) kernel console output (not intermixed with test programs): e [ 3133.039095][T30007] device veth1_macvtap left promiscuous mode [ 3133.056396][T30007] device veth0_macvtap left promiscuous mode [ 3133.079689][T30007] device veth1_vlan left promiscuous mode [ 3133.100502][T30007] device veth0_vlan left promiscuous mode [ 3133.604344][T30007] team0 (unregistering): Port device geneve1 removed [ 3133.740845][T30007] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 3133.840453][T30007] team0 (unregistering): Port device virt_wifi0 removed [ 3134.041047][T30007] team0 (unregistering): Port device team_slave_1 removed [ 3134.081776][T30007] team0 (unregistering): Port device team_slave_0 removed [ 3134.123292][T30007] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3134.167997][T30007] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3134.413597][T30007] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 3134.422391][T30007] bond0 (unregistering): Released all slaves [ 3134.502193][T30008] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3134.510410][ T1979] netlink: 'syz.2.20288': attribute type 10 has an invalid length. [ 3134.521623][ T1979] team0: Port device virt_wifi0 added [ 3134.530094][ T1986] netlink: 'syz.1.20290': attribute type 10 has an invalid length. [ 3134.553509][ T1991] netlink: 'syz.3.20293': attribute type 10 has an invalid length. [ 3134.566208][ T1993] netlink: 'syz.3.20293': attribute type 13 has an invalid length. [ 3134.575520][ T1993] netlink: 152 bytes leftover after parsing attributes in process `syz.3.20293'. [ 3134.729032][ T1997] sctp: [Deprecated]: syz.2.20294 (pid 1997) Use of int in maxseg socket option. [ 3134.729032][ T1997] Use struct sctp_assoc_value instead [ 3135.849458][ T4289] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 3135.861001][ T4289] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 3135.869328][ T4289] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 3135.877395][ T4289] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 3135.885305][ T4289] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 3135.893582][ T4289] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 3136.146154][ T2011] chnl_net:caif_netlink_parms(): no params data found [ 3136.315611][ T2011] bridge0: port 1(bridge_slave_0) entered blocking state [ 3136.330604][ T2011] bridge0: port 1(bridge_slave_0) entered disabled state [ 3136.354337][ T2011] device bridge_slave_0 entered promiscuous mode [ 3136.373058][ T2011] bridge0: port 2(bridge_slave_1) entered blocking state [ 3136.380543][ T2011] bridge0: port 2(bridge_slave_1) entered disabled state [ 3136.399351][ T2011] device bridge_slave_1 entered promiscuous mode [ 3136.431145][ T2011] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3136.443381][ T2011] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3136.474893][ T2011] team0: Port device team_slave_0 added [ 3136.492620][ T2011] team0: Port device team_slave_1 added [ 3136.541112][ T2011] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3136.559938][ T2011] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3136.597072][ T2011] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3137.774236][ T2011] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3137.781224][ T2011] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3137.841497][ T2019] FAULT_INJECTION: forcing a failure. [ 3137.841497][ T2019] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3137.854835][ T2011] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3137.865822][ T2019] CPU: 0 PID: 2019 Comm: syz.0.20300 Not tainted syzkaller #0 [ 3137.873317][ T2019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 3137.883407][ T2019] Call Trace: [ 3137.886705][ T2019] [ 3137.889648][ T2019] dump_stack_lvl+0x188/0x24e [ 3137.894360][ T2019] ? show_regs_print_info+0x12/0x12 [ 3137.899583][ T2019] ? load_image+0x410/0x410 [ 3137.904112][ T2019] ? __lock_acquire+0x7c40/0x7c40 [ 3137.909162][ T2019] should_fail_ex+0x390/0x4c0 [ 3137.913864][ T2019] _copy_from_user+0x2c/0x170 [ 3137.918564][ T2019] __copy_msghdr+0x384/0x560 [ 3137.923183][ T2019] ___sys_sendmsg+0x210/0x360 [ 3137.927885][ T2019] ? __sys_sendmsg+0x2a0/0x2a0 [ 3137.932693][ T2019] ? __lock_acquire+0x7c40/0x7c40 [ 3137.937761][ T2019] __se_sys_sendmsg+0x1c3/0x2b0 [ 3137.942633][ T2019] ? ct_nmi_exit+0x145/0x1c0 [ 3137.947238][ T2019] ? __x64_sys_sendmsg+0x80/0x80 [ 3137.952214][ T2019] ? lockdep_hardirqs_on+0x94/0x140 [ 3137.957442][ T2019] do_syscall_64+0x4c/0xa0 [ 3137.961876][ T2019] ? clear_bhb_loop+0x60/0xb0 [ 3137.966576][ T2019] ? clear_bhb_loop+0x60/0xb0 [ 3137.971275][ T2019] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3137.977205][ T2019] RIP: 0033:0x7fc19fd9de99 [ 3137.981636][ T2019] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3137.986701][T22415] Bluetooth: hci1: command 0x0409 tx timeout [ 3138.001240][ T2019] RSP: 002b:00007fc1a0d49028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3138.001267][ T2019] RAX: ffffffffffffffda RBX: 00007fc1a0025fa0 RCX: 00007fc19fd9de99 [ 3138.001280][ T2019] RDX: 0000000020000000 RSI: 0000200000002ec0 RDI: 0000000000000003 [ 3138.001293][ T2019] RBP: 00007fc1a0d49090 R08: 0000000000000000 R09: 0000000000000000 [ 3138.001305][ T2019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3138.001316][ T2019] R13: 00007fc1a0026038 R14: 00007fc1a0025fa0 R15: 00007fff3b4e33a8 [ 3138.001344][ T2019] [ 3138.224378][ T2011] device hsr_slave_0 entered promiscuous mode [ 3138.250854][ T2011] device hsr_slave_1 entered promiscuous mode [ 3138.280667][ T2011] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3138.290138][ T2011] Cannot create hsr debugfs directory [ 3138.490437][ T2028] netlink: 'syz.1.20303': attribute type 10 has an invalid length. [ 3138.597751][ T2011] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3138.658895][ T2030] netlink: 'syz.2.20304': attribute type 10 has an invalid length. [ 3138.682310][ T2030] netlink: 168 bytes leftover after parsing attributes in process `syz.2.20304'. [ 3138.730746][ T2033] netlink: 'syz.2.20304': attribute type 10 has an invalid length. [ 3138.781671][ T2011] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3138.798822][ T2041] netlink: 'syz.3.20307': attribute type 10 has an invalid length. [ 3138.821021][ T2041] netlink: 'syz.3.20307': attribute type 13 has an invalid length. [ 3138.829165][ T2041] netlink: 152 bytes leftover after parsing attributes in process `syz.3.20307'. [ 3138.896432][ T2011] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3139.037383][ T2011] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3140.142271][T22415] Bluetooth: hci1: command 0x041b tx timeout [ 3142.222086][T22415] Bluetooth: hci1: command 0x040f tx timeout [ 3142.697149][ T2011] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 3142.724507][ T2011] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 3142.765111][ T2011] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 3142.786597][ T2011] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 3142.837830][ T2069] netlink: 'syz.2.20317': attribute type 10 has an invalid length. [ 3143.184872][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 3143.191273][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 3143.229111][ T2071] netlink: 'syz.1.20318': attribute type 1 has an invalid length. [ 3143.262072][ T2071] netlink: 5 bytes leftover after parsing attributes in process `syz.1.20318'. [ 3143.382898][ T2011] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3143.491190][T30022] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3143.501471][T30022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3143.545969][ T2011] 8021q: adding VLAN 0 to HW filter on device team0 [ 3143.690495][T30006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3143.733844][T30006] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3143.772834][T30006] bridge0: port 1(bridge_slave_0) entered blocking state [ 3143.780053][T30006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3143.882558][ T2095] netlink: 'syz.3.20323': attribute type 10 has an invalid length. [ 3143.900700][ T2095] netlink: 168 bytes leftover after parsing attributes in process `syz.3.20323'. [ 3143.959973][ T2084] device syzkaller0 entered promiscuous mode [ 3143.968976][ T2096] netlink: 'syz.3.20323': attribute type 10 has an invalid length. [ 3143.982798][T30006] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3144.087031][ T2099] netlink: 'syz.1.20324': attribute type 10 has an invalid length. [ 3144.143511][T30006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3144.155803][T30006] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3144.165256][T30006] bridge0: port 2(bridge_slave_1) entered blocking state [ 3144.172871][T30006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3144.181132][T30006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3144.192070][ T2102] netlink: 'syz.0.20325': attribute type 10 has an invalid length. [ 3144.211374][ T2102] device macvlan0 entered promiscuous mode [ 3144.270125][ T2102] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 3144.279562][ T2103] netlink: 'syz.0.20325': attribute type 13 has an invalid length. [ 3144.288617][ T2103] netlink: 152 bytes leftover after parsing attributes in process `syz.0.20325'. [ 3144.299507][ T2103] syz_tun: refused to change device tx_queue_len [ 3144.306197][T22415] Bluetooth: hci1: command 0x0419 tx timeout [ 3144.312441][ T2103] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 3149.601644][T30006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3149.613038][T30006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3149.621957][T30006] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3149.630574][T30006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3149.653359][T30006] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3149.724838][ T2107] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.20326'. [ 3149.734952][ T2119] netlink: 'syz.3.20330': attribute type 10 has an invalid length. [ 3149.760024][ T2011] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 3149.792208][ T2011] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3149.840231][T30006] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3149.858332][T30006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3149.883987][T30006] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3149.908184][T30006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3149.920379][T30006] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3149.957273][ T2124] netlink: 'syz.1.20332': attribute type 10 has an invalid length. [ 3149.969430][ T2128] netlink: 'syz.0.20342': attribute type 10 has an invalid length. [ 3150.048833][ T2128] team0: Port device virt_wifi0 added [ 3150.065502][T30006] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3150.213972][T30007] device gretap0 left promiscuous mode [ 3150.235410][T30007] Ÿë: port 1(gretap0) entered disabled state [ 3150.496050][ T2144] netlink: 'syz.3.20336': attribute type 13 has an invalid length. [ 3150.562420][ T2144] netlink: 152 bytes leftover after parsing attributes in process `syz.3.20336'. [ 3150.592712][ T2143] netlink: 'syz.3.20336': attribute type 10 has an invalid length. [ 3153.723345][ T2146] netlink: 'syz.1.20337': attribute type 10 has an invalid length. [ 3153.731343][ T2146] netlink: 168 bytes leftover after parsing attributes in process `syz.1.20337'. [ 3153.770953][ T2157] netlink: 'syz.1.20337': attribute type 10 has an invalid length. [ 3153.823287][ T2168] netlink: 'syz.0.20343': attribute type 10 has an invalid length. [ 3153.855064][T30011] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3153.865248][T30011] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3153.901368][ T2011] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3153.978911][ T2173] netlink: 'syz.1.20345': attribute type 10 has an invalid length. [ 3154.166180][ T2182] netlink: 'syz.2.20347': attribute type 10 has an invalid length. [ 3154.470616][T30007] team0: Port device wlan1 removed [ 3154.732796][T30007] device hsr_slave_0 left promiscuous mode [ 3154.785141][T30007] device hsr_slave_1 left promiscuous mode [ 3157.747251][T30007] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3157.772857][T30007] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3157.804027][T30007] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3157.838009][T30007] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3157.892182][T30007] device bridge_slave_1 left promiscuous mode [ 3157.905082][T30007] bridge0: port 2(bridge_slave_1) entered disabled state [ 3157.947632][T30007] device bridge_slave_0 left promiscuous mode [ 3157.954055][T30007] bridge0: port 1(bridge_slave_0) entered disabled state [ 3158.016056][T30007] device veth1_macvtap left promiscuous mode [ 3158.022343][T30007] device veth1_vlan left promiscuous mode [ 3158.169035][T30007] team0 (unregistering): Port device geneve1 removed [ 3158.289558][T30007] team0 (unregistering): Port device macvlan1 removed [ 3158.326048][T30007] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 3158.404863][T30007] team0 (unregistering): Port device virt_wifi0 removed [ 3158.634671][T30007] team0 (unregistering): Port device team_slave_1 removed [ 3158.685272][T30007] team0 (unregistering): Port device team_slave_0 removed [ 3158.730766][T30007] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3158.778093][T30007] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3159.079366][T30007] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 3159.088196][T30007] bond0 (unregistering): Released all slaves [ 3159.194320][ T2204] netlink: 'syz.2.20351': attribute type 10 has an invalid length. [ 3159.202619][ T2203] netlink: 'syz.1.20353': attribute type 10 has an invalid length. [ 3159.210613][ T2207] netlink: 'syz.2.20351': attribute type 13 has an invalid length. [ 3159.231808][ T2207] netlink: 152 bytes leftover after parsing attributes in process `syz.2.20351'. [ 3159.243161][ T2207] syz_tun: refused to change device tx_queue_len [ 3159.249527][ T2207] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 3159.265916][ T2208] netlink: 'syz.1.20353': attribute type 13 has an invalid length. [ 3159.281985][ T2208] netlink: 152 bytes leftover after parsing attributes in process `syz.1.20353'. [ 3159.291249][ T2218] netlink: 'syz.0.20355': attribute type 10 has an invalid length. [ 3159.302112][ T2218] netlink: 168 bytes leftover after parsing attributes in process `syz.0.20355'. [ 3159.344694][ T2219] netlink: 'syz.0.20355': attribute type 10 has an invalid length. [ 3160.175797][ T2219] team0: Port device wlan1 added [ 3160.195978][T30005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3160.245529][T30005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3160.266275][ T2231] netlink: 'syz.2.20357': attribute type 10 has an invalid length. [ 3160.340892][T30005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3160.361195][T30005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3160.414322][ T2237] netlink: 'syz.0.20361': attribute type 10 has an invalid length. [ 3160.438241][T30005] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3160.454701][T30005] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3160.475531][ T2011] device veth0_vlan entered promiscuous mode [ 3160.516974][ T2011] device veth1_vlan entered promiscuous mode [ 3160.612604][T30005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3160.665544][T30005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3160.690597][ T2011] device veth0_macvtap entered promiscuous mode [ 3160.720647][ T2011] device veth1_macvtap entered promiscuous mode [ 3160.805182][ T2011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3160.838879][ T2011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3160.850686][ T2011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3160.864542][ T2011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3160.876124][ T2011] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3160.893068][ T2254] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3160.901705][ T2254] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3160.914739][ T2254] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3160.932155][ T2254] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3160.945522][ T2254] batman_adv: batadv0: Interface deactivated: vlan1 [ 3160.952929][ T2254] batman_adv: batadv0: Removing interface: vlan1 [ 3161.049841][ T2011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3161.061159][ T2011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3161.078104][ T2011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3161.088661][ T2011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3161.104850][ T2011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3161.117371][ T2011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3161.129872][ T2011] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3161.142319][T30022] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3161.151556][T30022] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3161.170683][T30022] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3161.185751][T30022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3161.197711][T30022] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3161.209251][T30022] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3161.236611][ T2256] netlink: 'syz.2.20367': attribute type 10 has an invalid length. [ 3161.256770][ T2258] netlink: 'syz.2.20367': attribute type 13 has an invalid length. [ 3161.307067][ T2258] netlink: 152 bytes leftover after parsing attributes in process `syz.2.20367'. [ 3161.373498][ T2258] syz_tun: refused to change device tx_queue_len [ 3161.384472][ T2258] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 3161.474036][ T2011] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3161.500438][ T2011] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3161.522437][ T2011] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3161.531173][ T2011] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3161.783406][T30022] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3161.809272][T30022] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3161.885844][ T2274] netlink: 152 bytes leftover after parsing attributes in process `syz.1.20369'. [ 3161.946795][ T2271] netlink: 168 bytes leftover after parsing attributes in process `syz.2.20370'. [ 3161.994159][T30004] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3162.019492][T30022] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3162.039437][T30022] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3164.701379][T30022] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3164.731500][ T2280] validate_nla: 5 callbacks suppressed [ 3164.731518][ T2280] netlink: 'syz.1.20372': attribute type 10 has an invalid length. [ 3164.959642][ T2285] netlink: 'syz.3.20374': attribute type 10 has an invalid length. [ 3165.019297][ T2285] netlink: 'syz.3.20374': attribute type 13 has an invalid length. [ 3165.064967][ T2285] netlink: 152 bytes leftover after parsing attributes in process `syz.3.20374'. [ 3165.256461][ T2297] netlink: 'syz.0.20377': attribute type 10 has an invalid length. [ 3165.289084][ T2296] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3165.308084][ T2296] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3167.863496][ T2296] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3167.876558][ T2296] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3167.935916][ T2300] netlink: 'syz.3.20379': attribute type 10 has an invalid length. [ 3167.944184][ T2301] netlink: 'syz.3.20379': attribute type 13 has an invalid length. [ 3167.952895][ T2301] netlink: 152 bytes leftover after parsing attributes in process `syz.3.20379'. [ 3168.270138][ T2314] netlink: 'syz.1.20383': attribute type 10 has an invalid length. [ 3168.306179][ T2316] netlink: 'syz.3.20384': attribute type 10 has an invalid length. [ 3168.339201][ T2316] netlink: 168 bytes leftover after parsing attributes in process `syz.3.20384'. [ 3168.387714][ T2314] netlink: 'syz.1.20383': attribute type 13 has an invalid length. [ 3168.400683][ T2314] netlink: 152 bytes leftover after parsing attributes in process `syz.1.20383'. [ 3168.438862][ T2319] netlink: 'syz.3.20384': attribute type 10 has an invalid length. [ 3171.263808][ T2331] device macvlan0 entered promiscuous mode [ 3171.377184][ T2331] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 3171.483406][ T2338] validate_nla: 2 callbacks suppressed [ 3171.483444][ T2338] netlink: 'syz.3.20401': attribute type 10 has an invalid length. [ 3171.518519][ T2338] netlink: 168 bytes leftover after parsing attributes in process `syz.3.20401'. [ 3171.541138][ T2342] netlink: 'syz.1.20392': attribute type 10 has an invalid length. [ 3171.567804][ T2338] netlink: 'syz.3.20401': attribute type 10 has an invalid length. [ 3171.605283][ T2342] netlink: 'syz.1.20392': attribute type 13 has an invalid length. [ 3171.648217][ T2342] netlink: 152 bytes leftover after parsing attributes in process `syz.1.20392'. [ 3171.930384][ T2351] netlink: 'syz.4.20395': attribute type 10 has an invalid length. [ 3172.023013][ T2352] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3172.030785][ T2352] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3174.883814][ T2367] FAULT_INJECTION: forcing a failure. [ 3174.883814][ T2367] name failslab, interval 1, probability 0, space 0, times 0 [ 3174.896851][ T2367] CPU: 1 PID: 2367 Comm: syz.0.20400 Not tainted syzkaller #0 [ 3174.904341][ T2367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 3174.914420][ T2367] Call Trace: [ 3174.917718][ T2367] [ 3174.920642][ T2367] dump_stack_lvl+0x188/0x24e [ 3174.925353][ T2367] ? show_regs_print_info+0x12/0x12 [ 3174.930575][ T2367] ? load_image+0x410/0x410 [ 3174.935096][ T2367] should_fail_ex+0x390/0x4c0 [ 3174.939788][ T2367] should_failslab+0x5/0x20 [ 3174.944285][ T2367] slab_pre_alloc_hook+0x59/0x300 [ 3174.949306][ T2367] ? find_exception+0x171/0xa30 [ 3174.954162][ T2367] kmem_cache_alloc+0x56/0x2f0 [ 3174.958943][ T2367] ? dst_alloc+0x101/0x160 [ 3174.963379][ T2367] dst_alloc+0x101/0x160 [ 3174.967645][ T2367] ip_route_output_key_hash_rcu+0x14e4/0x23f0 [ 3174.973740][ T2367] ? ip_route_output_key_hash+0x139/0x330 [ 3174.979472][ T2367] ip_route_output_key_hash+0x1ef/0x330 [ 3174.985040][ T2367] ? ip_route_input_rcu+0x30a0/0x30a0 [ 3174.990451][ T2367] tcp_v4_connect+0x6ae/0x18a0 [ 3174.995242][ T2367] ? tcp_twsk_unique+0x970/0x970 [ 3175.000192][ T2367] ? unwind_get_return_address+0x49/0x80 [ 3175.005840][ T2367] ? stack_trace_save+0xf0/0xf0 [ 3175.010713][ T2367] ? tcp_v6_connect+0x6a1/0x18f0 [ 3175.015671][ T2367] tcp_v6_connect+0xaf3/0x18f0 [ 3175.020461][ T2367] ? __stack_depot_save+0x35/0x480 [ 3175.025592][ T2367] ? tcp_v6_pre_connect+0xf0/0xf0 [ 3175.030635][ T2367] ? __se_sys_sendmsg+0x1c3/0x2b0 [ 3175.035672][ T2367] ? do_syscall_64+0x4c/0xa0 [ 3175.040276][ T2367] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3175.046367][ T2367] __inet_stream_connect+0x242/0xe10 [ 3175.051671][ T2367] ? inet_dgram_connect+0x340/0x340 [ 3175.056888][ T2367] tcp_sendmsg_fastopen+0x38f/0x600 [ 3175.062100][ T2367] tcp_sendmsg_locked+0x356b/0x39e0 [ 3175.067314][ T2367] ? __might_sleep+0xd0/0xd0 [ 3175.071912][ T2367] ? is_bpf_text_address+0x22/0x2a0 [ 3175.077127][ T2367] ? mark_lock+0x94/0x320 [ 3175.081473][ T2367] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 3175.087468][ T2367] ? lock_chain_count+0x20/0x20 [ 3175.092345][ T2367] ? tcp_set_state+0x520/0x520 [ 3175.097129][ T2367] tcp_sendmsg+0x2b/0x40 [ 3175.101381][ T2367] ? inet6_compat_ioctl+0x3c0/0x3c0 [ 3175.106593][ T2367] ____sys_sendmsg+0x5ed/0x9a0 [ 3175.111369][ T2367] ? __lock_acquire+0x7c40/0x7c40 [ 3175.116408][ T2367] ? __sys_sendmsg_sock+0x30/0x30 [ 3175.121438][ T2367] ? __import_iovec+0x306/0x510 [ 3175.126308][ T2367] ? import_iovec+0x6f/0xa0 [ 3175.130825][ T2367] ___sys_sendmsg+0x2a2/0x360 [ 3175.135519][ T2367] ? __sys_sendmsg+0x2a0/0x2a0 [ 3175.140316][ T2367] ? __lock_acquire+0x7c40/0x7c40 [ 3175.145378][ T2367] __se_sys_sendmsg+0x1c3/0x2b0 [ 3175.150240][ T2367] ? __x64_sys_sendmsg+0x80/0x80 [ 3175.155201][ T2367] ? lockdep_hardirqs_on+0x94/0x140 [ 3175.160408][ T2367] do_syscall_64+0x4c/0xa0 [ 3175.164835][ T2367] ? clear_bhb_loop+0x60/0xb0 [ 3175.169520][ T2367] ? clear_bhb_loop+0x60/0xb0 [ 3175.174213][ T2367] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3175.180116][ T2367] RIP: 0033:0x7fc19fd9de99 [ 3175.184536][ T2367] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3175.204161][ T2367] RSP: 002b:00007fc1a0d49028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3175.212592][ T2367] RAX: ffffffffffffffda RBX: 00007fc1a0025fa0 RCX: 00007fc19fd9de99 [ 3175.220585][ T2367] RDX: 0000000024044051 RSI: 0000200000000000 RDI: 0000000000000003 [ 3175.228587][ T2367] RBP: 00007fc1a0d49090 R08: 0000000000000000 R09: 0000000000000000 [ 3175.236571][ T2367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3175.244547][ T2367] R13: 00007fc1a0026038 R14: 00007fc1a0025fa0 R15: 00007fff3b4e33a8 [ 3175.252548][ T2367] [ 3175.958518][ T2388] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.20407'. [ 3175.994179][ T2396] netlink: 'syz.2.20408': attribute type 10 has an invalid length. [ 3176.106257][ T2395] netlink: 'syz.3.20405': attribute type 10 has an invalid length. [ 3176.136209][ T2399] netlink: 'syz.4.20409': attribute type 10 has an invalid length. [ 3176.201754][ T2399] netlink: 168 bytes leftover after parsing attributes in process `syz.4.20409'. [ 3176.607353][ T2388] netlink: 60 bytes leftover after parsing attributes in process `syz.1.20407'. [ 3176.631699][ T2411] netlink: 'syz.0.20411': attribute type 2 has an invalid length. [ 3176.660793][ T2411] netlink: 10 bytes leftover after parsing attributes in process `syz.0.20411'. [ 3177.069007][ T2419] netlink: 'syz.2.20416': attribute type 10 has an invalid length. [ 3177.112833][ T2419] netlink: 'syz.2.20416': attribute type 13 has an invalid length. [ 3177.122025][ T2419] netlink: 152 bytes leftover after parsing attributes in process `syz.2.20416'. [ 3177.141313][ T2419] syz_tun: refused to change device tx_queue_len [ 3177.172060][ T2419] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 3177.351572][ T2433] netlink: 'syz.4.20419': attribute type 10 has an invalid length. [ 3177.469937][ T2433] team0: Port device virt_wifi0 added [ 3177.926050][ T2450] netlink: 'syz.3.20425': attribute type 29 has an invalid length. [ 3177.941082][ T2452] netlink: 8964 bytes leftover after parsing attributes in process `syz.2.20424'. [ 3178.000618][ T2450] netlink: 'syz.3.20425': attribute type 29 has an invalid length. [ 3178.177493][ T2459] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.20426'. [ 3178.293797][ T2461] netlink: 'syz.3.20427': attribute type 10 has an invalid length. [ 3178.351080][ T2461] netlink: 168 bytes leftover after parsing attributes in process `syz.3.20427'. [ 3178.401106][ T2468] netlink: 'syz.3.20427': attribute type 10 has an invalid length. [ 3178.447478][ T2459] netlink: 60 bytes leftover after parsing attributes in process `syz.0.20426'. [ 3178.607867][ T2475] netlink: 'syz.2.20431': attribute type 10 has an invalid length. [ 3178.628556][ T2475] netlink: 'syz.2.20431': attribute type 13 has an invalid length. [ 3178.637229][ T2475] netlink: 152 bytes leftover after parsing attributes in process `syz.2.20431'. [ 3178.663895][ T2475] syz_tun: refused to change device tx_queue_len [ 3178.670449][ T2475] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 3179.027709][ T2495] syz.2.20435[2495] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3179.028161][ T2495] syz.2.20435[2495] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3179.111042][ T2498] netlink: 128 bytes leftover after parsing attributes in process `syz.0.20437'. [ 3179.134594][ T2498] netlink: 3 bytes leftover after parsing attributes in process `syz.0.20437'. [ 3182.229776][ T2505] validate_nla: 4 callbacks suppressed [ 3182.229796][ T2505] netlink: 'syz.3.20439': attribute type 10 has an invalid length. [ 3182.253973][ T2513] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.20441'. [ 3182.382812][ T2520] netlink: 'syz.1.20444': attribute type 10 has an invalid length. [ 3182.430772][ T2520] netlink: 'syz.1.20444': attribute type 13 has an invalid length. [ 3182.447721][ T2520] netlink: 152 bytes leftover after parsing attributes in process `syz.1.20444'. [ 3182.587386][ T2513] netlink: 60 bytes leftover after parsing attributes in process `syz.4.20441'. [ 3183.014959][ T2546] netlink: 'syz.4.20450': attribute type 10 has an invalid length. [ 3183.047371][ T2546] netlink: 168 bytes leftover after parsing attributes in process `syz.4.20450'. [ 3183.077744][ T2551] netlink: 'syz.4.20450': attribute type 10 has an invalid length. [ 3186.159733][ T2551] team0: Port device wlan1 added [ 3186.181882][ T2566] netlink: 'syz.1.20456': attribute type 10 has an invalid length. [ 3186.310961][ T2579] FAULT_INJECTION: forcing a failure. [ 3186.310961][ T2579] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3186.350577][ T2579] CPU: 0 PID: 2579 Comm: syz.3.20461 Not tainted syzkaller #0 [ 3186.358088][ T2579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 3186.368151][ T2579] Call Trace: [ 3186.371433][ T2579] [ 3186.374363][ T2579] dump_stack_lvl+0x188/0x24e [ 3186.379047][ T2579] ? show_regs_print_info+0x12/0x12 [ 3186.384250][ T2579] ? load_image+0x410/0x410 [ 3186.388754][ T2579] ? __lock_acquire+0x7c40/0x7c40 [ 3186.393787][ T2579] ? __local_bh_enable_ip+0x136/0x1c0 [ 3186.399162][ T2579] ? lockdep_hardirqs_on+0x94/0x140 [ 3186.404376][ T2579] should_fail_ex+0x390/0x4c0 [ 3186.409076][ T2579] _copy_from_user+0x2c/0x170 [ 3186.413765][ T2579] mptcp_setsockopt+0xcef/0x2f90 [ 3186.418704][ T2579] ? pm_nl_exit_net+0x220/0x220 [ 3186.423552][ T2579] ? aa_af_perm+0x340/0x340 [ 3186.428052][ T2579] ? __fget_files+0x3fc/0x460 [ 3186.432730][ T2579] ? aa_sock_opt_perm+0x74/0x100 [ 3186.437666][ T2579] ? sock_common_setsockopt+0x32/0xb0 [ 3186.443036][ T2579] ? sock_common_recvmsg+0x190/0x190 [ 3186.448318][ T2579] __sys_setsockopt+0x2bf/0x3d0 [ 3186.453176][ T2579] __x64_sys_setsockopt+0xb1/0xc0 [ 3186.458200][ T2579] do_syscall_64+0x4c/0xa0 [ 3186.462618][ T2579] ? clear_bhb_loop+0x60/0xb0 [ 3186.467293][ T2579] ? clear_bhb_loop+0x60/0xb0 [ 3186.471966][ T2579] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3186.477853][ T2579] RIP: 0033:0x7feb2d39de99 [ 3186.482314][ T2579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3186.501916][ T2579] RSP: 002b:00007feb2e320028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 3186.510325][ T2579] RAX: ffffffffffffffda RBX: 00007feb2d625fa0 RCX: 00007feb2d39de99 [ 3186.518293][ T2579] RDX: 0000000000000006 RSI: 0000000000000006 RDI: 0000000000000004 [ 3186.526261][ T2579] RBP: 00007feb2e320090 R08: 0000000000000004 R09: 0000000000000000 [ 3186.534225][ T2579] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 3186.542187][ T2579] R13: 00007feb2d626038 R14: 00007feb2d625fa0 R15: 00007ffdd9dea1f8 [ 3186.550160][ T2579] [ 3186.555542][ T2578] netlink: 'syz.4.20460': attribute type 10 has an invalid length. [ 3186.596780][ T2575] netlink: 8964 bytes leftover after parsing attributes in process `syz.0.20458'. [ 3186.611186][ T2580] netlink: 'syz.4.20460': attribute type 13 has an invalid length. [ 3186.643525][ T2580] netlink: 152 bytes leftover after parsing attributes in process `syz.4.20460'. [ 3186.676804][ T2580] syz_tun: refused to change device tx_queue_len [ 3186.691652][ T2580] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 3186.732110][ T2584] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.20463'. [ 3186.887442][ T2593] syz.3.20465[2593] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3186.887801][ T2593] syz.3.20465[2593] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3186.918354][ T2584] netlink: 60 bytes leftover after parsing attributes in process `syz.2.20463'. [ 3187.046849][ T2597] netlink: 'syz.4.20466': attribute type 10 has an invalid length. [ 3187.287896][ T2607] netlink: 'syz.2.20470': attribute type 10 has an invalid length. [ 3187.317330][ T2607] netlink: 168 bytes leftover after parsing attributes in process `syz.2.20470'. [ 3187.340840][ T2607] netlink: 'syz.2.20470': attribute type 10 has an invalid length. [ 3187.771437][ T2618] netlink: 'syz.1.20472': attribute type 10 has an invalid length. [ 3188.282118][ T2623] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.20473'. [ 3188.532767][ T2633] netlink: 'syz.2.20477': attribute type 10 has an invalid length. [ 3188.546407][ T2641] netlink: 'syz.2.20477': attribute type 13 has an invalid length. [ 3188.624393][ T2641] netlink: 152 bytes leftover after parsing attributes in process `syz.2.20477'. [ 3188.696975][ T2641] syz_tun: refused to change device tx_queue_len [ 3188.755139][ T2641] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 3188.840381][ T2640] netlink: 'syz.3.20479': attribute type 10 has an invalid length. [ 3188.870079][ T2650] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.20481'. [ 3189.227731][ T2666] netlink: 'syz.3.20486': attribute type 10 has an invalid length. [ 3189.489340][ T2678] netlink: 'syz.2.20488': attribute type 10 has an invalid length. [ 3189.525305][ T2678] netlink: 168 bytes leftover after parsing attributes in process `syz.2.20488'. [ 3189.591232][ T2682] netlink: 'syz.2.20488': attribute type 10 has an invalid length. [ 3189.867706][ T2692] netlink: 192 bytes leftover after parsing attributes in process `syz.0.20491'. [ 3189.895203][ T2689] netlink: 61211 bytes leftover after parsing attributes in process `syz.4.20490'. [ 3190.027328][ T2696] netlink: 'syz.1.20492': attribute type 21 has an invalid length. [ 3190.050406][ T2696] netlink: 132 bytes leftover after parsing attributes in process `syz.1.20492'. [ 3190.216037][ T2702] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.20493'. [ 3190.277375][ T2705] netlink: 132 bytes leftover after parsing attributes in process `syz.4.20494'. [ 3192.393110][ T2786] __nla_validate_parse: 5 callbacks suppressed [ 3192.393147][ T2786] netlink: 61211 bytes leftover after parsing attributes in process `syz.4.20516'. [ 3192.589035][ T2792] validate_nla: 9 callbacks suppressed [ 3192.589056][ T2792] netlink: 'syz.3.20517': attribute type 1 has an invalid length. [ 3192.806222][ T2801] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.20530'. [ 3192.839978][ T2803] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.20520'. [ 3192.894736][ T2810] netlink: 'syz.4.20525': attribute type 21 has an invalid length. [ 3192.913443][ T2810] netlink: 'syz.4.20525': attribute type 1 has an invalid length. [ 3192.921413][ T2810] netlink: 16150 bytes leftover after parsing attributes in process `syz.4.20525'. [ 3192.948421][ T2806] netlink: 'syz.3.20524': attribute type 10 has an invalid length. [ 3192.962041][ T2806] netlink: 40 bytes leftover after parsing attributes in process `syz.3.20524'. [ 3193.202498][ T2826] netlink: 'syz.1.20527': attribute type 10 has an invalid length. [ 3193.217341][ T2826] netlink: 168 bytes leftover after parsing attributes in process `syz.1.20527'. [ 3193.251789][ T2826] netlink: 'syz.1.20527': attribute type 10 has an invalid length. [ 3193.277941][ T2834] netlink: 'syz.0.20528': attribute type 10 has an invalid length. [ 3193.310465][ T2834] netlink: 'syz.0.20528': attribute type 13 has an invalid length. [ 3193.321077][ T2834] netlink: 152 bytes leftover after parsing attributes in process `syz.0.20528'. [ 3193.343640][ T2834] syz_tun: refused to change device tx_queue_len [ 3193.358268][ T2834] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 3193.568475][ T2841] netlink: 156 bytes leftover after parsing attributes in process `syz.4.20532'. [ 3193.606509][ T2844] netlink: 'syz.3.20533': attribute type 29 has an invalid length. [ 3193.671010][ T2844] netlink: 'syz.3.20533': attribute type 29 has an invalid length. [ 3194.109528][ T2858] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.20538'. [ 3194.520729][ T2878] netlink: 152 bytes leftover after parsing attributes in process `syz.4.20544'. [ 3194.560300][ T2878] syz_tun: refused to change device tx_queue_len [ 3194.579913][ T2878] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 3196.463218][ T4289] Bluetooth: hci0: command 0x0406 tx timeout [ 3197.227843][ T2954] Q±6ã`Ò˜: renamed from lo [ 3198.368031][ T2979] validate_nla: 15 callbacks suppressed [ 3198.368074][ T2979] netlink: 'syz.3.20574': attribute type 29 has an invalid length. [ 3198.398655][ T2986] netlink: 'syz.1.20571': attribute type 1 has an invalid length. [ 3198.436974][ T2979] netlink: 'syz.3.20574': attribute type 29 has an invalid length. [ 3198.494369][ T2988] netlink: 'syz.3.20574': attribute type 29 has an invalid length. [ 3198.805881][ T2999] FAULT_INJECTION: forcing a failure. [ 3198.805881][ T2999] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3198.837050][ T2999] CPU: 1 PID: 2999 Comm: syz.0.20579 Not tainted syzkaller #0 [ 3198.844569][ T2999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 3198.854649][ T2999] Call Trace: [ 3198.857945][ T2999] [ 3198.860892][ T2999] dump_stack_lvl+0x188/0x24e [ 3198.865602][ T2999] ? show_regs_print_info+0x12/0x12 [ 3198.870838][ T2999] ? load_image+0x410/0x410 [ 3198.875366][ T2999] ? __might_fault+0xa6/0x120 [ 3198.880058][ T2999] should_fail_ex+0x390/0x4c0 [ 3198.884747][ T2999] copyin+0x1b/0x120 [ 3198.888655][ T2999] _copy_from_iter+0x447/0x1130 [ 3198.893525][ T2999] ? copyout_mc+0x110/0x110 [ 3198.898050][ T2999] ? __virt_addr_valid+0x188/0x540 [ 3198.903195][ T2999] ? __virt_addr_valid+0x188/0x540 [ 3198.908336][ T2999] ? __virt_addr_valid+0x467/0x540 [ 3198.913511][ T2999] ? __phys_addr_symbol+0x2b/0x70 [ 3198.918565][ T2999] ? __check_object_size+0x4f6/0xa70 [ 3198.923869][ T2999] netlink_sendmsg+0x755/0xbd0 [ 3198.928650][ T2999] ? netlink_getsockopt+0x550/0x550 [ 3198.933859][ T2999] ? apparmor_socket_sendmsg+0x8a/0x330 [ 3198.939419][ T2999] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 3198.944729][ T2999] ? security_socket_sendmsg+0x7c/0xa0 [ 3198.950227][ T2999] ? netlink_getsockopt+0x550/0x550 [ 3198.955452][ T2999] ____sys_sendmsg+0x5ed/0x9a0 [ 3198.960253][ T2999] ? __sys_sendmsg_sock+0x30/0x30 [ 3198.965287][ T2999] ? __import_iovec+0x306/0x510 [ 3198.970154][ T2999] ? import_iovec+0x6f/0xa0 [ 3198.974691][ T2999] ___sys_sendmsg+0x2a2/0x360 [ 3198.979385][ T2999] ? __sys_sendmsg+0x2a0/0x2a0 [ 3198.984171][ T2999] ? __lock_acquire+0x7c40/0x7c40 [ 3198.989222][ T2999] __se_sys_sendmsg+0x1c3/0x2b0 [ 3198.994083][ T2999] ? __x64_sys_sendmsg+0x80/0x80 [ 3198.999037][ T2999] ? lockdep_hardirqs_on+0x94/0x140 [ 3199.004237][ T2999] do_syscall_64+0x4c/0xa0 [ 3199.008673][ T2999] ? clear_bhb_loop+0x60/0xb0 [ 3199.013364][ T2999] ? clear_bhb_loop+0x60/0xb0 [ 3199.018052][ T2999] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3199.023956][ T2999] RIP: 0033:0x7fc19fd9de99 [ 3199.028387][ T2999] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3199.048008][ T2999] RSP: 002b:00007fc1a0d49028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3199.056426][ T2999] RAX: ffffffffffffffda RBX: 00007fc1a0025fa0 RCX: 00007fc19fd9de99 [ 3199.064396][ T2999] RDX: 0000000000002080 RSI: 0000200000000040 RDI: 0000000000000003 [ 3199.072362][ T2999] RBP: 00007fc1a0d49090 R08: 0000000000000000 R09: 0000000000000000 [ 3199.080327][ T2999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3199.088293][ T2999] R13: 00007fc1a0026038 R14: 00007fc1a0025fa0 R15: 00007fff3b4e33a8 [ 3199.096290][ T2999] [ 3199.129449][ T3005] __nla_validate_parse: 6 callbacks suppressed [ 3199.129467][ T3005] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.20584'. [ 3199.305594][ T3012] FAULT_INJECTION: forcing a failure. [ 3199.305594][ T3012] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3199.338352][ T3012] CPU: 1 PID: 3012 Comm: syz.2.20586 Not tainted syzkaller #0 [ 3199.345865][ T3012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 3199.355945][ T3012] Call Trace: [ 3199.359240][ T3012] [ 3199.362185][ T3012] dump_stack_lvl+0x188/0x24e [ 3199.366887][ T3012] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 3199.373072][ T3012] ? show_regs_print_info+0x12/0x12 [ 3199.378307][ T3012] ? load_image+0x410/0x410 [ 3199.382846][ T3012] should_fail_ex+0x390/0x4c0 [ 3199.387554][ T3012] _copy_from_user+0x2c/0x170 [ 3199.392252][ T3012] br_dev_siocdevprivate+0x115/0x1770 [ 3199.397650][ T3012] ? br_handle_local_finish+0x20/0x20 [ 3199.403049][ T3012] ? __mutex_trylock_common+0x15c/0x260 [ 3199.408621][ T3012] ? trace_raw_output_contention_end+0xd0/0xd0 [ 3199.414799][ T3012] ? rcu_is_watching+0x11/0xa0 [ 3199.419610][ T3012] ? trace_contention_end+0x5f/0x170 [ 3199.424918][ T3012] ? full_name_hash+0x8e/0xe0 [ 3199.429624][ T3012] dev_ifsioc+0xa4a/0xd50 [ 3199.433977][ T3012] ? dev_ioctl+0xe80/0xe80 [ 3199.438412][ T3012] ? full_name_hash+0x8e/0xe0 [ 3199.443110][ T3012] ? dev_load+0x1d/0x1e0 [ 3199.447393][ T3012] ? dev_load+0x1d/0x1e0 [ 3199.451656][ T3012] dev_ioctl+0x5f8/0xe80 [ 3199.455914][ T3012] ? get_user_ifreq+0xc7/0x170 [ 3199.460711][ T3012] sock_ioctl+0x679/0x700 [ 3199.465060][ T3012] ? sock_poll+0x420/0x420 [ 3199.469499][ T3012] ? bpf_lsm_file_ioctl+0x5/0x10 [ 3199.474456][ T3012] ? security_file_ioctl+0x7c/0xa0 [ 3199.479588][ T3012] ? sock_poll+0x420/0x420 [ 3199.484022][ T3012] __se_sys_ioctl+0xfa/0x170 [ 3199.488632][ T3012] do_syscall_64+0x4c/0xa0 [ 3199.493069][ T3012] ? clear_bhb_loop+0x60/0xb0 [ 3199.497780][ T3012] ? clear_bhb_loop+0x60/0xb0 [ 3199.502475][ T3012] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3199.508379][ T3012] RIP: 0033:0x7f1dbd99de99 [ 3199.512815][ T3012] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3199.532445][ T3012] RSP: 002b:00007f1dbe8d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3199.540885][ T3012] RAX: ffffffffffffffda RBX: 00007f1dbdc25fa0 RCX: 00007f1dbd99de99 [ 3199.548882][ T3012] RDX: 0000200000000080 RSI: 00000000000089f0 RDI: 0000000000000006 [ 3199.556878][ T3012] RBP: 00007f1dbe8d6090 R08: 0000000000000000 R09: 0000000000000000 [ 3199.564868][ T3012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3199.572866][ T3012] R13: 00007f1dbdc26038 R14: 00007f1dbdc25fa0 R15: 00007fffeb464dc8 [ 3199.580872][ T3012] [ 3199.600292][ T3014] netlink: 'syz.4.20587': attribute type 10 has an invalid length. [ 3199.624938][ T3014] netlink: 168 bytes leftover after parsing attributes in process `syz.4.20587'. [ 3199.645508][ T3015] netlink: 'syz.4.20587': attribute type 10 has an invalid length. [ 3199.769426][ T3019] netlink: 60 bytes leftover after parsing attributes in process `syz.0.20589'. [ 3199.860387][ T3022] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.20590'. [ 3200.469136][ T3022] netlink: 60 bytes leftover after parsing attributes in process `syz.3.20590'. [ 3201.448398][ T3045] netlink: 'syz.1.20598': attribute type 10 has an invalid length. [ 3201.497607][ T3045] netlink: 'syz.1.20598': attribute type 13 has an invalid length. [ 3201.512097][ T3045] netlink: 152 bytes leftover after parsing attributes in process `syz.1.20598'. [ 3201.736009][ T3061] netlink: 60 bytes leftover after parsing attributes in process `syz.0.20604'. [ 3202.147385][ T3069] netlink: 'syz.1.20607': attribute type 10 has an invalid length. [ 3202.168682][ T3069] netlink: 168 bytes leftover after parsing attributes in process `syz.1.20607'. [ 3202.225411][ T3069] netlink: 'syz.1.20607': attribute type 10 has an invalid length. [ 3202.295862][ T3072] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.20608'. [ 3202.809112][ T3089] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.20610'. [ 3203.216077][ T3106] device syzkaller0 entered promiscuous mode [ 3204.627408][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 3204.633866][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 3205.848707][ T3117] __nla_validate_parse: 3 callbacks suppressed [ 3205.848719][ T3117] netlink: 61211 bytes leftover after parsing attributes in process `syz.4.20620'. [ 3205.868146][ T3123] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.20622'. [ 3205.880679][ T3136] validate_nla: 1 callbacks suppressed [ 3205.880743][ T3136] netlink: 'syz.0.20625': attribute type 10 has an invalid length. [ 3205.909651][ T3136] netlink: 168 bytes leftover after parsing attributes in process `syz.0.20625'. [ 3205.951063][ T3137] netlink: 'syz.0.20625': attribute type 10 has an invalid length. [ 3205.997909][ T3140] netlink: 'syz.2.20627': attribute type 11 has an invalid length. [ 3206.026563][ T3140] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.20627'. [ 3206.054652][ T3140] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 3206.061131][ T3140] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 3206.150370][ T3147] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.20629'. [ 3206.221447][ T3151] netlink: 'syz.3.20630': attribute type 2 has an invalid length. [ 3206.239642][ T3152] netlink: 'syz.0.20631': attribute type 10 has an invalid length. [ 3206.267854][ T3154] netlink: 'syz.1.20632': attribute type 3 has an invalid length. [ 3206.285040][ T3154] netlink: 'syz.1.20632': attribute type 1 has an invalid length. [ 3206.309120][ T3154] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.20632'. [ 3206.323587][ T3151] netlink: 10 bytes leftover after parsing attributes in process `syz.3.20630'. [ 3206.325106][ T3156] netlink: 'syz.3.20630': attribute type 1 has an invalid length. [ 3206.368196][ T3156] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.20630'. [ 3206.480706][ T3147] netlink: 60 bytes leftover after parsing attributes in process `syz.4.20629'. [ 3207.268686][ T3174] netlink: 'syz.4.20636': attribute type 10 has an invalid length. [ 3207.317280][ T3174] netlink: 'syz.4.20636': attribute type 13 has an invalid length. [ 3207.356056][ T3174] netlink: 152 bytes leftover after parsing attributes in process `syz.4.20636'. [ 3207.397518][ T3174] syz_tun: refused to change device tx_queue_len [ 3207.407155][ T3174] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 3207.817372][ T3192] netlink: 'syz.3.20641': attribute type 10 has an invalid length. [ 3211.119991][ T3281] __nla_validate_parse: 6 callbacks suppressed [ 3211.120027][ T3281] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.20674'. [ 3211.156879][ T3283] validate_nla: 4 callbacks suppressed [ 3211.156936][ T3283] netlink: 'syz.2.20673': attribute type 46 has an invalid length. [ 3211.193764][ T3283] netlink: 55 bytes leftover after parsing attributes in process `syz.2.20673'. [ 3211.217635][ T3285] netlink: 'syz.3.20675': attribute type 21 has an invalid length. [ 3211.265088][ T3285] netlink: 'syz.3.20675': attribute type 3 has an invalid length. [ 3211.280117][ T3285] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.20675'. [ 3211.302099][ T3281] netlink: 60 bytes leftover after parsing attributes in process `syz.4.20674'. [ 3211.325750][ T3290] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.20676'. [ 3211.449787][ T3292] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.20677'. [ 3211.482101][ T3296] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.20679'. [ 3211.677373][ T3296] netlink: 60 bytes leftover after parsing attributes in process `syz.2.20679'. [ 3212.559476][ T3325] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.20690'. [ 3212.603068][ T3328] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.20691'. [ 3212.929169][ T3336] netlink: 'syz.2.20693': attribute type 21 has an invalid length. [ 3212.942443][ T3336] netlink: 'syz.2.20693': attribute type 1 has an invalid length. [ 3213.068441][ T3338] netlink: 'syz.0.20692': attribute type 46 has an invalid length. [ 3213.780270][ T3373] netlink: 'syz.2.20705': attribute type 10 has an invalid length. [ 3213.805023][ T3373] team0: Device Q±6ã`Ò˜ is loopback device. Loopback devices can't be added as a team port [ 3214.088202][ T3387] FAULT_INJECTION: forcing a failure. [ 3214.088202][ T3387] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3214.145705][ T3387] CPU: 0 PID: 3387 Comm: syz.0.20709 Not tainted syzkaller #0 [ 3214.153220][ T3387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 3214.163296][ T3387] Call Trace: [ 3214.166586][ T3387] [ 3214.169526][ T3387] dump_stack_lvl+0x188/0x24e [ 3214.174232][ T3387] ? show_regs_print_info+0x12/0x12 [ 3214.179452][ T3387] ? load_image+0x410/0x410 [ 3214.183975][ T3387] ? __lock_acquire+0x7c40/0x7c40 [ 3214.189032][ T3387] should_fail_ex+0x390/0x4c0 [ 3214.193732][ T3387] _copy_from_user+0x2c/0x170 [ 3214.198408][ T3387] bpf_prog_test_run_skb+0x263/0x18e0 [ 3214.203783][ T3387] ? __fget_files+0x28/0x460 [ 3214.208369][ T3387] ? __fget_files+0x3fc/0x460 [ 3214.213052][ T3387] ? cpu_online+0xa0/0xa0 [ 3214.217374][ T3387] bpf_prog_test_run+0x31c/0x390 [ 3214.222312][ T3387] __sys_bpf+0x62b/0x780 [ 3214.226567][ T3387] ? bpf_link_show_fdinfo+0x380/0x380 [ 3214.231948][ T3387] ? lock_chain_count+0x20/0x20 [ 3214.236802][ T3387] __x64_sys_bpf+0x78/0x90 [ 3214.241213][ T3387] do_syscall_64+0x4c/0xa0 [ 3214.245626][ T3387] ? clear_bhb_loop+0x60/0xb0 [ 3214.250301][ T3387] ? clear_bhb_loop+0x60/0xb0 [ 3214.254974][ T3387] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3214.260863][ T3387] RIP: 0033:0x7fc19fd9de99 [ 3214.265273][ T3387] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3214.284871][ T3387] RSP: 002b:00007fc1a0d49028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3214.293279][ T3387] RAX: ffffffffffffffda RBX: 00007fc1a0025fa0 RCX: 00007fc19fd9de99 [ 3214.301243][ T3387] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 3214.309214][ T3387] RBP: 00007fc1a0d49090 R08: 0000000000000000 R09: 0000000000000000 [ 3214.317179][ T3387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3214.325147][ T3387] R13: 00007fc1a0026038 R14: 00007fc1a0025fa0 R15: 00007fff3b4e33a8 [ 3214.333125][ T3387] [ 3215.105033][ T3424] device hsr_slave_0 left promiscuous mode [ 3215.125406][ T4289] Bluetooth: hci1: unexpected subevent 0x0a length: 150 > 30 [ 3215.143074][ T3424] device hsr_slave_1 left promiscuous mode [ 3216.326480][ T3451] __nla_validate_parse: 18 callbacks suppressed [ 3216.326519][ T3451] netlink: 60 bytes leftover after parsing attributes in process `syz.4.20730'. [ 3216.395564][ T3462] netlink: 60 bytes leftover after parsing attributes in process `syz.2.20734'. [ 3216.548099][ T3476] netlink: 48995 bytes leftover after parsing attributes in process `syz.0.20739'. [ 3216.593772][ T3478] netlink: 763 bytes leftover after parsing attributes in process `syz.1.20738'. [ 3217.191960][ T4289] Bluetooth: hci1: command 0x2016 tx timeout [ 3217.552457][ T3495] netlink: 132 bytes leftover after parsing attributes in process `syz.3.20743'. [ 3217.760043][ T3501] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.20748'. [ 3217.811184][ T3506] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.20750'. [ 3217.853532][ T3508] netlink: 'syz.3.20751': attribute type 21 has an invalid length. [ 3217.894654][ T3508] netlink: 132 bytes leftover after parsing attributes in process `syz.3.20751'. [ 3217.995224][ T3510] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.20752'. [ 3218.120823][ T3521] netlink: 60 bytes leftover after parsing attributes in process `syz.0.20750'. [ 3219.019835][ T3548] netlink: 'syz.2.20762': attribute type 2 has an invalid length. [ 3219.121034][ T3548] netlink: 'syz.2.20762': attribute type 2 has an invalid length. [ 3221.084418][ T3586] netlink: 'syz.1.20773': attribute type 10 has an invalid length. [ 3221.890267][ T3605] __nla_validate_parse: 11 callbacks suppressed [ 3221.890307][ T3605] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.20780'. [ 3222.048226][ T3611] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.20781'. [ 3222.197080][ T3605] netlink: 60 bytes leftover after parsing attributes in process `syz.1.20780'. [ 3222.394170][ T3629] netlink: 164 bytes leftover after parsing attributes in process `syz.0.20784'. [ 3222.478434][ T3633] netlink: 'syz.2.20786': attribute type 21 has an invalid length. [ 3222.540897][ T3611] netlink: 60 bytes leftover after parsing attributes in process `syz.4.20781'. [ 3222.799206][ T3641] netlink: 'syz.1.20787': attribute type 10 has an invalid length. [ 3223.348410][ T3666] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.20797'. [ 3223.415647][ T3670] __sock_release: fasync list not empty! [ 3223.476648][ T3671] netlink: 60 bytes leftover after parsing attributes in process `syz.2.20797'. [ 3224.126466][ T3679] netlink: 'syz.0.20801': attribute type 10 has an invalid length. [ 3224.186509][ T3679] netlink: 'syz.0.20801': attribute type 13 has an invalid length. [ 3224.216344][ T3679] netlink: 152 bytes leftover after parsing attributes in process `syz.0.20801'. [ 3224.253875][ T3679] syz_tun: refused to change device tx_queue_len [ 3224.296675][ T3679] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 3224.394794][ T3688] netlink: 'syz.4.20804': attribute type 2 has an invalid length. [ 3224.412113][ T3688] netlink: 'syz.4.20804': attribute type 8 has an invalid length. [ 3224.441091][ T3688] netlink: 132 bytes leftover after parsing attributes in process `syz.4.20804'. [ 3224.571249][ T3693] netlink: 'syz.2.20806': attribute type 10 has an invalid length. [ 3224.863554][ T3701] netlink: 'syz.3.20809': attribute type 11 has an invalid length. [ 3224.876264][ T3701] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.20809'. [ 3224.889701][ T3706] netlink: 'syz.3.20809': attribute type 10 has an invalid length. [ 3224.937451][ T3706] team0: Port device wlan1 removed [ 3224.968283][ T3706] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 3225.011264][ T3700] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3225.026413][ T3708] netlink: 'syz.0.20812': attribute type 27 has an invalid length. [ 3225.740545][ T3730] netlink: 'syz.4.20817': attribute type 10 has an invalid length. [ 3225.798270][ T3730] netlink: 'syz.4.20817': attribute type 13 has an invalid length. [ 3225.874550][ T3730] syz_tun: refused to change device tx_queue_len [ 3225.952025][ T3730] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 3226.180101][ T3741] netlink: 'syz.1.20820': attribute type 10 has an invalid length. [ 3226.493267][ T3751] bond0: (slave wlan1): Releasing backup interface [ 3226.545333][ T3751] team0: Port device wlan1 added [ 3227.094526][ T3763] device syzkaller0 entered promiscuous mode [ 3227.472615][ T3782] __nla_validate_parse: 5 callbacks suppressed [ 3227.472654][ T3782] netlink: 152 bytes leftover after parsing attributes in process `syz.3.20834'. [ 3228.046550][ T3785] Q±6ã×\b‹¡Y­4: renamed from lo [ 3228.076630][ T3792] netlink: 152 bytes leftover after parsing attributes in process `syz.2.20845'. [ 3228.114049][ T3792] syz_tun: refused to change device tx_queue_len [ 3228.163255][ T3792] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 3230.647554][ T3804] validate_nla: 7 callbacks suppressed [ 3230.647577][ T3804] netlink: 'syz.3.20838': attribute type 10 has an invalid length. [ 3230.968429][ T3831] bridge0: port 2(bridge_slave_1) entered disabled state [ 3230.976468][ T3831] bridge0: port 1(bridge_slave_0) entered disabled state [ 3231.029369][ T3831] device bridge_slave_1 left promiscuous mode [ 3231.059627][ T3831] bridge0: port 2(bridge_slave_1) entered disabled state [ 3231.112301][ T3831] device bridge_slave_0 left promiscuous mode [ 3231.126876][ T3831] bridge0: port 1(bridge_slave_0) entered disabled state [ 3231.399950][ T3843] netlink: 'syz.1.20851': attribute type 10 has an invalid length. [ 3231.426062][ T3845] netlink: 'syz.1.20851': attribute type 13 has an invalid length. [ 3231.451645][ T3845] netlink: 152 bytes leftover after parsing attributes in process `syz.1.20851'. [ 3231.589927][ T3852] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.20853'. [ 3231.667008][ T3854] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.20854'. [ 3231.814839][ T3854] netlink: 60 bytes leftover after parsing attributes in process `syz.4.20854'. [ 3231.845526][ T3852] netlink: 60 bytes leftover after parsing attributes in process `syz.2.20853'. [ 3231.915810][ T3863] netlink: 'syz.3.20856': attribute type 10 has an invalid length. [ 3232.200035][ T3870] netlink: 'syz.0.20860': attribute type 10 has an invalid length. [ 3232.240098][ T3871] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.20859'. [ 3232.302151][T22415] Bluetooth: hci5: command 0x0406 tx timeout [ 3232.374723][ T3871] netlink: 60 bytes leftover after parsing attributes in process `syz.3.20859'. [ 3232.415964][ T3880] device sit0 entered promiscuous mode [ 3232.881064][ T3896] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.20867'. [ 3232.896545][ T3897] netlink: 'syz.1.20866': attribute type 10 has an invalid length. [ 3232.931437][ T3897] netlink: 'syz.1.20866': attribute type 13 has an invalid length. [ 3232.973499][ T3897] netlink: 152 bytes leftover after parsing attributes in process `syz.1.20866'. [ 3233.072783][ T3903] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.20868'. [ 3233.118509][ T3901] netlink: 60 bytes leftover after parsing attributes in process `syz.2.20867'. [ 3233.306504][ T3904] netlink: 60 bytes leftover after parsing attributes in process `syz.0.20868'. [ 3233.378426][ T3912] netlink: 'syz.3.20869': attribute type 10 has an invalid length. [ 3233.477163][ T3915] netlink: 'syz.1.20871': attribute type 10 has an invalid length. [ 3234.065575][ T3944] netlink: 'syz.4.20879': attribute type 10 has an invalid length. [ 3234.082874][ T3944] netlink: 168 bytes leftover after parsing attributes in process `syz.4.20879'. [ 3234.292341][ T3955] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.20883'. [ 3234.620765][ T3961] netlink: 60 bytes leftover after parsing attributes in process `syz.1.20883'. [ 3235.597234][ T3984] netlink: 168 bytes leftover after parsing attributes in process `syz.2.20891'. [ 3238.328204][ T3995] validate_nla: 5 callbacks suppressed [ 3238.328223][ T3995] netlink: 'syz.2.20897': attribute type 10 has an invalid length. [ 3238.482757][ T4000] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.20898'. [ 3238.657630][ T4009] netlink: 'syz.3.20899': attribute type 10 has an invalid length. [ 3238.693684][ T4007] netlink: 60 bytes leftover after parsing attributes in process `syz.4.20898'. [ 3238.703093][ T4009] netlink: 168 bytes leftover after parsing attributes in process `syz.3.20899'. [ 3238.778214][ T4018] netlink: 'syz.3.20899': attribute type 10 has an invalid length. [ 3239.025796][ T4020] netlink: 'syz.4.20901': attribute type 10 has an invalid length. [ 3239.136757][ T4026] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.20904'. [ 3241.857554][ T4044] netlink: 'syz.2.20918': attribute type 10 has an invalid length. [ 3241.884051][ T4044] netlink: 168 bytes leftover after parsing attributes in process `syz.2.20918'. [ 3241.898316][ T4044] netlink: 'syz.2.20918': attribute type 10 has an invalid length. [ 3241.907714][ T4048] FAULT_INJECTION: forcing a failure. [ 3241.907714][ T4048] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3241.929416][ T4048] CPU: 0 PID: 4048 Comm: syz.1.20909 Not tainted syzkaller #0 [ 3241.936913][ T4048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 3241.946982][ T4048] Call Trace: [ 3241.950274][ T4048] [ 3241.953215][ T4048] dump_stack_lvl+0x188/0x24e [ 3241.957927][ T4048] ? show_regs_print_info+0x12/0x12 [ 3241.963151][ T4048] ? load_image+0x410/0x410 [ 3241.967688][ T4048] ? __might_fault+0xa6/0x120 [ 3241.972392][ T4048] should_fail_ex+0x390/0x4c0 [ 3241.977102][ T4048] copyin+0x1b/0x120 [ 3241.981018][ T4048] _copy_from_iter+0x447/0x1130 [ 3241.985898][ T4048] ? copyout_mc+0x110/0x110 [ 3241.990420][ T4048] ? __virt_addr_valid+0x188/0x540 [ 3241.995555][ T4048] ? __virt_addr_valid+0x188/0x540 [ 3242.000685][ T4048] ? __virt_addr_valid+0x467/0x540 [ 3242.005803][ T4048] ? __phys_addr_symbol+0x2b/0x70 [ 3242.010842][ T4048] ? __check_object_size+0x4f6/0xa70 [ 3242.016132][ T4048] netlink_sendmsg+0x755/0xbd0 [ 3242.020909][ T4048] ? netlink_getsockopt+0x550/0x550 [ 3242.026116][ T4048] ? apparmor_socket_sendmsg+0x8a/0x330 [ 3242.031670][ T4048] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 3242.036960][ T4048] ? security_socket_sendmsg+0x7c/0xa0 [ 3242.042440][ T4048] ? netlink_getsockopt+0x550/0x550 [ 3242.047648][ T4048] ____sys_sendmsg+0x5ed/0x9a0 [ 3242.052424][ T4048] ? __sys_sendmsg_sock+0x30/0x30 [ 3242.057449][ T4048] ? __import_iovec+0x306/0x510 [ 3242.062314][ T4048] ? import_iovec+0x6f/0xa0 [ 3242.066821][ T4048] ___sys_sendmsg+0x2a2/0x360 [ 3242.071505][ T4048] ? __sys_sendmsg+0x2a0/0x2a0 [ 3242.076288][ T4048] ? trace_call_bpf+0xbf/0x6b0 [ 3242.081074][ T4048] __se_sys_sendmsg+0x1c3/0x2b0 [ 3242.085932][ T4048] ? perf_trace_preemptirq_template+0x268/0x320 [ 3242.092175][ T4048] ? __x64_sys_sendmsg+0x80/0x80 [ 3242.097127][ T4048] ? lockdep_hardirqs_on+0x94/0x140 [ 3242.102325][ T4048] do_syscall_64+0x4c/0xa0 [ 3242.106742][ T4048] ? clear_bhb_loop+0x60/0xb0 [ 3242.111417][ T4048] ? clear_bhb_loop+0x60/0xb0 [ 3242.116092][ T4048] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3242.121984][ T4048] RIP: 0033:0x7fa44439de99 [ 3242.126400][ T4048] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3242.146013][ T4048] RSP: 002b:00007fa445356028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3242.154425][ T4048] RAX: ffffffffffffffda RBX: 00007fa444625fa0 RCX: 00007fa44439de99 [ 3242.162390][ T4048] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000f [ 3242.170358][ T4048] RBP: 00007fa445356090 R08: 0000000000000000 R09: 0000000000000000 [ 3242.178325][ T4048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3242.186294][ T4048] R13: 00007fa444626038 R14: 00007fa444625fa0 R15: 00007fff2fc14b38 [ 3242.194272][ T4048] [ 3242.202021][ T4047] netlink: 'syz.4.20908': attribute type 10 has an invalid length. [ 3242.210231][ T4047] netlink: 168 bytes leftover after parsing attributes in process `syz.4.20908'. [ 3242.236298][ T4047] netlink: 'syz.4.20908': attribute type 10 has an invalid length. [ 3242.265292][ T4054] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.20911'. [ 3242.289059][ T4050] netlink: 'syz.0.20910': attribute type 10 has an invalid length. [ 3242.406362][ T4052] netlink: 60 bytes leftover after parsing attributes in process `syz.3.20911'. [ 3242.700510][ T4065] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.20916'. [ 3242.907575][ T4073] netlink: 'syz.2.20928': attribute type 10 has an invalid length. [ 3242.966237][ T4073] netlink: 168 bytes leftover after parsing attributes in process `syz.2.20928'. [ 3246.147590][ T4096] validate_nla: 3 callbacks suppressed [ 3246.147623][ T4096] netlink: 'syz.3.20924': attribute type 10 has an invalid length. [ 3246.232006][ T4096] netlink: 'syz.3.20924': attribute type 13 has an invalid length. [ 3246.240166][ T4096] netlink: 152 bytes leftover after parsing attributes in process `syz.3.20924'. [ 3246.290612][ T4102] netlink: 'syz.1.20925': attribute type 10 has an invalid length. [ 3246.440347][ T4112] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.20927'. [ 3246.505180][ T4113] netlink: 'syz.0.20929': attribute type 10 has an invalid length. [ 3246.533402][ T4118] netlink: 'syz.0.20929': attribute type 13 has an invalid length. [ 3246.541373][ T4118] netlink: 152 bytes leftover after parsing attributes in process `syz.0.20929'. [ 3246.597636][ T4112] netlink: 60 bytes leftover after parsing attributes in process `syz.4.20927'. [ 3246.627682][ T4118] syz_tun: refused to change device tx_queue_len [ 3246.680151][ T4118] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 3246.817033][ T4117] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.20930'. [ 3247.255993][ T4144] netlink: 'syz.0.20936': attribute type 10 has an invalid length. [ 3247.282497][ T4143] netlink: 'syz.4.20937': attribute type 10 has an invalid length. [ 3247.290586][ T4143] netlink: 168 bytes leftover after parsing attributes in process `syz.4.20937'. [ 3247.325324][ T4143] netlink: 'syz.4.20937': attribute type 10 has an invalid length. [ 3249.754369][ T4152] netlink: 'syz.3.20941': attribute type 10 has an invalid length. [ 3249.881220][ T4160] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.20944'. [ 3249.934581][ T4159] netlink: 'syz.0.20943': attribute type 10 has an invalid length. [ 3249.988431][ T4159] netlink: 152 bytes leftover after parsing attributes in process `syz.0.20943'. [ 3250.069149][ T4159] syz_tun: refused to change device tx_queue_len [ 3250.076603][ T4162] netlink: 60 bytes leftover after parsing attributes in process `syz.1.20944'. [ 3250.093338][ T4159] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 3250.109866][ T4166] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.20946'. [ 3253.945429][ T4193] validate_nla: 2 callbacks suppressed [ 3253.945465][ T4193] netlink: 'syz.0.20953': attribute type 10 has an invalid length. [ 3253.973841][ T4193] netlink: 168 bytes leftover after parsing attributes in process `syz.0.20953'. [ 3253.991051][ T4200] netlink: 'syz.4.20956': attribute type 10 has an invalid length. [ 3254.012166][ T4193] netlink: 'syz.0.20953': attribute type 10 has an invalid length. [ 3254.086972][ T4200] netlink: 'syz.4.20956': attribute type 13 has an invalid length. [ 3254.102486][ T4200] netlink: 152 bytes leftover after parsing attributes in process `syz.4.20956'. [ 3254.168622][ T4200] syz_tun: refused to change device tx_queue_len [ 3254.205287][ T4200] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 3254.278927][ T4206] netlink: 'syz.3.20958': attribute type 10 has an invalid length. [ 3254.299261][ T4215] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.20961'. [ 3254.323248][ T4211] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.20960'. [ 3254.459986][ T4215] netlink: 60 bytes leftover after parsing attributes in process `syz.1.20961'. [ 3255.134466][ T4245] netlink: 'syz.3.20970': attribute type 10 has an invalid length. [ 3255.204964][ T4249] netlink: 'syz.4.20972': attribute type 7 has an invalid length. [ 3255.215617][ T4249] netlink: 'syz.4.20972': attribute type 7 has an invalid length. [ 3255.229890][ T4249] netlink: 198580 bytes leftover after parsing attributes in process `syz.4.20972'. [ 3257.764919][ T4253] netlink: 'syz.4.20974': attribute type 10 has an invalid length. [ 3257.865024][ T4257] netlink: 'syz.2.20976': attribute type 10 has an invalid length. [ 3257.866285][ T4266] netlink: 60 bytes leftover after parsing attributes in process `syz.0.20977'. [ 3257.876351][ T4257] netlink: 168 bytes leftover after parsing attributes in process `syz.2.20976'. [ 3257.896531][ T4260] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.20977'. [ 3257.916097][ T4262] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.20975'. [ 3260.008509][ T4308] __nla_validate_parse: 2 callbacks suppressed [ 3260.008550][ T4308] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.20991'. [ 3260.030295][ T4307] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.20989'. [ 3260.085407][ T4309] validate_nla: 5 callbacks suppressed [ 3260.085424][ T4309] netlink: 'syz.0.20990': attribute type 10 has an invalid length. [ 3260.126495][ T4308] netlink: 60 bytes leftover after parsing attributes in process `syz.3.20991'. [ 3260.230843][ T4316] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.21002'. [ 3260.267486][ T4318] netlink: 'syz.2.20992': attribute type 10 has an invalid length. [ 3260.351130][ T4318] netlink: 'syz.2.20992': attribute type 13 has an invalid length. [ 3260.372041][ T4318] netlink: 152 bytes leftover after parsing attributes in process `syz.2.20992'. [ 3260.430295][ T4318] syz_tun: refused to change device tx_queue_len [ 3260.452355][ T4318] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 3260.496599][ T4324] netlink: 'syz.3.20995': attribute type 10 has an invalid length. [ 3260.515614][ T4324] netlink: 168 bytes leftover after parsing attributes in process `syz.3.20995'. [ 3260.556445][ T4330] netlink: 'syz.3.20995': attribute type 10 has an invalid length. [ 3260.595467][ T4329] netlink: 'syz.0.20998': attribute type 10 has an invalid length. [ 3260.617838][ T4335] sctp: [Deprecated]: syz.1.20997 (pid 4335) Use of int in max_burst socket option deprecated. [ 3260.617838][ T4335] Use struct sctp_assoc_value instead [ 3261.630156][ T4355] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.21005'. [ 3261.951771][ T4365] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.21008'. [ 3262.079563][ T4360] netlink: 'syz.2.21006': attribute type 10 has an invalid length. [ 3262.255563][ T4363] netlink: 60 bytes leftover after parsing attributes in process `syz.1.21008'. [ 3262.549963][ T4375] netlink: 'syz.4.21011': attribute type 10 has an invalid length. [ 3262.591737][ T4376] netlink: 'syz.1.21013': attribute type 10 has an invalid length. [ 3262.627479][ T4376] netlink: 'syz.1.21013': attribute type 13 has an invalid length. [ 3262.652066][ T4376] netlink: 152 bytes leftover after parsing attributes in process `syz.1.21013'. [ 3263.022124][ T4289] Bluetooth: hci1: command 0x0406 tx timeout [ 3263.719771][ T4401] device syzkaller0 entered promiscuous mode [ 3266.072486][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 3266.078831][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 3266.883910][ T4426] validate_nla: 1 callbacks suppressed [ 3266.883928][ T4426] netlink: 'syz.2.21027': attribute type 10 has an invalid length. [ 3266.898403][ T4427] netlink: 'syz.2.21027': attribute type 13 has an invalid length. [ 3266.906435][ T4427] __nla_validate_parse: 6 callbacks suppressed [ 3266.906449][ T4427] netlink: 152 bytes leftover after parsing attributes in process `syz.2.21027'. [ 3266.933012][ T4427] syz_tun: refused to change device tx_queue_len [ 3266.939387][ T4427] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 3267.002038][ T4431] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.21028'. [ 3267.163296][ T4455] netlink: 'syz.4.21035': attribute type 10 has an invalid length. [ 3267.176936][ T4457] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.21038'. [ 3267.477274][ T4457] netlink: 60 bytes leftover after parsing attributes in process `syz.3.21038'. [ 3267.769805][ T4473] netlink: 'syz.1.21041': attribute type 10 has an invalid length. [ 3267.785377][ T4473] netlink: 168 bytes leftover after parsing attributes in process `syz.1.21041'. [ 3267.858126][ T4473] netlink: 'syz.1.21041': attribute type 10 has an invalid length. [ 3268.009973][ T4479] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.21044'. [ 3268.271481][ T4486] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.21048'. [ 3268.680045][ T4486] netlink: 60 bytes leftover after parsing attributes in process `syz.3.21048'. [ 3268.816138][ T4496] netlink: 'syz.0.21050': attribute type 3 has an invalid length. [ 3268.828720][ T4496] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.21050'. [ 3269.097886][ T4496] device syzkaller0 entered promiscuous mode [ 3269.136567][ T4498] bond0: (slave macvlan0): Error: Slave device does not support XDP [ 3269.198692][ T4502] netlink: 'syz.4.21051': attribute type 10 has an invalid length. [ 3269.300731][ T4502] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 3269.415295][ T4507] FAULT_INJECTION: forcing a failure. [ 3269.415295][ T4507] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3269.438582][ T4507] CPU: 0 PID: 4507 Comm: syz.3.21053 Not tainted syzkaller #0 [ 3269.446097][ T4507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 3269.456188][ T4507] Call Trace: [ 3269.459493][ T4507] [ 3269.462447][ T4507] dump_stack_lvl+0x188/0x24e [ 3269.467155][ T4507] ? show_regs_print_info+0x12/0x12 [ 3269.472370][ T4507] ? load_image+0x410/0x410 [ 3269.476894][ T4507] ? __lock_acquire+0x7c40/0x7c40 [ 3269.481950][ T4507] ? perf_trace_lock_acquire+0x342/0x3f0 [ 3269.487620][ T4507] should_fail_ex+0x390/0x4c0 [ 3269.492357][ T4507] strncpy_from_user+0x32/0x340 [ 3269.497236][ T4507] bpf_prog_load+0x200/0x1530 [ 3269.501959][ T4507] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 3269.508135][ T4507] ? map_freeze+0x390/0x390 [ 3269.512657][ T4507] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 3269.518868][ T4507] ? __might_fault+0xc2/0x120 [ 3269.523552][ T4507] ? __might_fault+0xa6/0x120 [ 3269.528246][ T4507] ? bpf_lsm_bpf+0x5/0x10 [ 3269.532588][ T4507] ? security_bpf+0x7a/0xa0 [ 3269.537116][ T4507] __sys_bpf+0x5b8/0x780 [ 3269.541382][ T4507] ? bpf_link_show_fdinfo+0x380/0x380 [ 3269.546811][ T4507] ? lock_chain_count+0x20/0x20 [ 3269.551674][ T4507] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 3269.557692][ T4507] __x64_sys_bpf+0x78/0x90 [ 3269.562129][ T4507] do_syscall_64+0x4c/0xa0 [ 3269.566560][ T4507] ? clear_bhb_loop+0x60/0xb0 [ 3269.571247][ T4507] ? clear_bhb_loop+0x60/0xb0 [ 3269.575943][ T4507] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3269.581855][ T4507] RIP: 0033:0x7feb2d39de99 [ 3269.586293][ T4507] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3269.605910][ T4507] RSP: 002b:00007feb2e320028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3269.614343][ T4507] RAX: ffffffffffffffda RBX: 00007feb2d625fa0 RCX: 00007feb2d39de99 [ 3269.622323][ T4507] RDX: 0000000000000094 RSI: 0000200000000b40 RDI: 0000000000000005 [ 3269.630300][ T4507] RBP: 00007feb2e320090 R08: 0000000000000000 R09: 0000000000000000 [ 3269.638302][ T4507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3269.646288][ T4507] R13: 00007feb2d626038 R14: 00007feb2d625fa0 R15: 00007ffdd9dea1f8 [ 3269.654309][ T4507] [ 3270.214568][ T4513] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.21055'. [ 3270.766772][ T4289] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4 [ 3271.195228][ T4533] FAULT_INJECTION: forcing a failure. [ 3271.195228][ T4533] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3271.282006][ T4533] CPU: 0 PID: 4533 Comm: syz.3.21062 Not tainted syzkaller #0 [ 3271.289535][ T4533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 3271.299627][ T4533] Call Trace: [ 3271.302935][ T4533] [ 3271.305893][ T4533] dump_stack_lvl+0x188/0x24e [ 3271.310623][ T4533] ? show_regs_print_info+0x12/0x12 [ 3271.315860][ T4533] ? load_image+0x410/0x410 [ 3271.320420][ T4533] ? __lock_acquire+0x7c40/0x7c40 [ 3271.325501][ T4533] should_fail_ex+0x390/0x4c0 [ 3271.330232][ T4533] _copy_from_iter+0x1c0/0x1130 [ 3271.335119][ T4533] ? __lock_acquire+0x7c40/0x7c40 [ 3271.340199][ T4533] ? copyout_mc+0x110/0x110 [ 3271.344736][ T4533] ? __virt_addr_valid+0x188/0x540 [ 3271.349896][ T4533] ? __virt_addr_valid+0x188/0x540 [ 3271.355051][ T4533] ? __virt_addr_valid+0x467/0x540 [ 3271.360203][ T4533] ? __phys_addr_symbol+0x2b/0x70 [ 3271.365267][ T4533] ? __check_object_size+0x4f6/0xa70 [ 3271.370593][ T4533] pfkey_sendmsg+0x1f9/0x1140 [ 3271.375349][ T4533] ? pfkey_release+0x340/0x340 [ 3271.380145][ T4533] ? aa_sk_perm+0x81f/0x950 [ 3271.384709][ T4533] ? aa_af_perm+0x340/0x340 [ 3271.389257][ T4533] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 3271.395699][ T4533] ? aa_sock_msg_perm+0x94/0x150 [ 3271.400657][ T4533] ? apparmor_socket_sendmsg+0x8a/0x330 [ 3271.406222][ T4533] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 3271.411514][ T4533] ? security_socket_sendmsg+0x7c/0xa0 [ 3271.416993][ T4533] sock_write_iter+0x2d5/0x3e0 [ 3271.421772][ T4533] ? sock_read_iter+0x3a0/0x3a0 [ 3271.426666][ T4533] ? common_file_perm+0x171/0x1c0 [ 3271.431716][ T4533] vfs_write+0x482/0x9a0 [ 3271.435982][ T4533] ? file_end_write+0x250/0x250 [ 3271.440857][ T4533] ? __fget_files+0x3fc/0x460 [ 3271.445568][ T4533] ? __fdget_pos+0x1d4/0x360 [ 3271.450164][ T4533] ? ksys_write+0x70/0x260 [ 3271.454599][ T4533] ksys_write+0x14d/0x260 [ 3271.458946][ T4533] ? __ia32_sys_read+0x80/0x80 [ 3271.463730][ T4533] ? lockdep_hardirqs_on+0x94/0x140 [ 3271.468945][ T4533] do_syscall_64+0x4c/0xa0 [ 3271.473369][ T4533] ? clear_bhb_loop+0x60/0xb0 [ 3271.478062][ T4533] ? clear_bhb_loop+0x60/0xb0 [ 3271.482751][ T4533] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3271.488655][ T4533] RIP: 0033:0x7feb2d39de99 [ 3271.493087][ T4533] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3271.512700][ T4533] RSP: 002b:00007feb2e320028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3271.521126][ T4533] RAX: ffffffffffffffda RBX: 00007feb2d625fa0 RCX: 00007feb2d39de99 [ 3271.529105][ T4533] RDX: 000000000000fefb RSI: 0000000000000000 RDI: 0000000000000003 [ 3271.537082][ T4533] RBP: 00007feb2e320090 R08: 0000000000000000 R09: 0000000000000000 [ 3271.545064][ T4533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3271.553039][ T4533] R13: 00007feb2d626038 R14: 00007feb2d625fa0 R15: 00007ffdd9dea1f8 [ 3271.561052][ T4533] [ 3273.360683][ T4538] __nla_validate_parse: 1 callbacks suppressed [ 3273.360775][ T4538] netlink: 60 bytes leftover after parsing attributes in process `syz.2.21063'. [ 3275.962061][ T4537] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.21063'. [ 3275.971508][ T4542] netlink: 'syz.4.21065': attribute type 13 has an invalid length. [ 3275.979764][ T4542] netlink: 152 bytes leftover after parsing attributes in process `syz.4.21065'. [ 3275.991177][ T4542] syz_tun: refused to change device tx_queue_len [ 3275.997942][ T4542] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 3276.013884][ T4544] netlink: 'syz.1.21066': attribute type 10 has an invalid length. [ 3276.022613][ T4557] netlink: 'syz.3.21067': attribute type 10 has an invalid length. [ 3276.030651][ T4558] netlink: 'syz.3.21067': attribute type 13 has an invalid length. [ 3276.052570][ T4558] netlink: 152 bytes leftover after parsing attributes in process `syz.3.21067'. [ 3276.227342][ T4567] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.21071'. [ 3276.362907][ T4571] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.21072'. [ 3276.379682][ T4573] netlink: 61211 bytes leftover after parsing attributes in process `syz.4.21073'. [ 3276.457228][ T4567] netlink: 60 bytes leftover after parsing attributes in process `syz.2.21071'. [ 3276.661107][ T4587] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.21079'. [ 3276.908017][ T4597] netlink: 'syz.2.21080': attribute type 10 has an invalid length. [ 3277.001173][ T4599] netlink: 'syz.3.21081': attribute type 13 has an invalid length. [ 3277.029114][ T4599] netlink: 152 bytes leftover after parsing attributes in process `syz.3.21081'. [ 3277.391319][ T4611] netlink: 'syz.2.21084': attribute type 3 has an invalid length. [ 3277.938826][ T4611] device syzkaller0 entered promiscuous mode [ 3277.978161][ T4619] netlink: 'syz.1.21086': attribute type 10 has an invalid length. [ 3278.049781][ T4621] netlink: 'syz.1.21086': attribute type 13 has an invalid length. [ 3278.876666][ T4631] __nla_validate_parse: 4 callbacks suppressed [ 3278.876688][ T4631] netlink: 60 bytes leftover after parsing attributes in process `syz.3.21090'. [ 3282.368664][ T4623] netlink: 61211 bytes leftover after parsing attributes in process `syz.4.21088'. [ 3282.378147][ T4630] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.21090'. [ 3282.391731][ T4635] netlink: 'syz.0.21091': attribute type 21 has an invalid length. [ 3282.411878][ T4635] netlink: 'syz.0.21091': attribute type 22 has an invalid length. [ 3282.419820][ T4635] netlink: 'syz.0.21091': attribute type 22 has an invalid length. [ 3282.435775][ T4635] netlink: 'syz.0.21091': attribute type 15 has an invalid length. [ 3282.462329][ T4635] netlink: 6124 bytes leftover after parsing attributes in process `syz.0.21091'. [ 3282.500464][ T4643] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.21093'. [ 3282.531918][ T4643] device bridge_slave_1 entered promiscuous mode [ 3282.639750][ T4646] netlink: 'syz.3.21094': attribute type 10 has an invalid length. [ 3282.753274][ T4650] netlink: 'syz.2.21096': attribute type 13 has an invalid length. [ 3282.782181][ T4650] netlink: 152 bytes leftover after parsing attributes in process `syz.2.21096'. [ 3282.816440][ T4650] syz_tun: refused to change device tx_queue_len [ 3282.876182][ T4650] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 3282.999738][ T4657] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.21099'. [ 3283.283515][T22415] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 3283.294239][T22415] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 3283.313097][T22415] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 3283.318964][ T3800] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3283.332481][T16066] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 3283.340043][T16066] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 3283.348203][T16066] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 3283.384022][ T4657] netlink: 60 bytes leftover after parsing attributes in process `syz.3.21099'. [ 3283.488418][ T3800] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3283.558275][ T4672] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.21102'. [ 3283.717115][ T3800] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3283.738694][ T4675] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.21104'. [ 3283.844976][ T3800] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3283.872442][ T4679] netlink: 'syz.4.21106': attribute type 10 has an invalid length. [ 3283.883806][ T4679] __nla_validate_parse: 1 callbacks suppressed [ 3283.883841][ T4679] netlink: 168 bytes leftover after parsing attributes in process `syz.4.21106'. [ 3283.916164][ T4681] netlink: 'syz.4.21106': attribute type 10 has an invalid length. [ 3283.961236][ T4677] netlink: 60 bytes leftover after parsing attributes in process `syz.3.21105'. [ 3284.087573][ T3800] device 0 left promiscuous mode [ 3284.126022][ T4668] chnl_net:caif_netlink_parms(): no params data found [ 3284.184921][ T3800] device 0 left promiscuous mode [ 3284.286842][ T4691] netlink: 'syz.3.21107': attribute type 3 has an invalid length. [ 3284.330721][ T4691] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.21107'. [ 3284.349997][ T4689] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.21116'. [ 3284.763143][ T4704] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.21109'. [ 3284.877721][ T4668] bridge0: port 1(bridge_slave_0) entered blocking state [ 3284.895763][ T4668] bridge0: port 1(bridge_slave_0) entered disabled state [ 3284.927284][ T4668] device bridge_slave_0 entered promiscuous mode [ 3284.959143][ T4706] netlink: 'syz.0.21110': attribute type 10 has an invalid length. [ 3285.080904][ T4668] bridge0: port 2(bridge_slave_1) entered blocking state [ 3285.099008][ T4668] bridge0: port 2(bridge_slave_1) entered disabled state [ 3285.143896][ T4668] device bridge_slave_1 entered promiscuous mode [ 3285.269062][ T4696] device syzkaller0 entered promiscuous mode [ 3285.422089][ T4289] Bluetooth: hci2: command 0x0409 tx timeout [ 3285.687871][ T4712] netlink: 152 bytes leftover after parsing attributes in process `syz.4.21111'. [ 3285.849815][ T4712] syz_tun: refused to change device tx_queue_len [ 3285.890942][ T4712] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 3286.054135][ T4724] netlink: 60 bytes leftover after parsing attributes in process `syz.2.21114'. [ 3286.077802][ T4668] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3286.117431][ T4723] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.21114'. [ 3286.764104][ T4742] netlink: 60 bytes leftover after parsing attributes in process `syz.4.21117'. [ 3287.505071][ T4289] Bluetooth: hci2: command 0x041b tx timeout [ 3288.805937][ T4668] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3288.843560][ T4737] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.21117'. [ 3289.004315][ T4668] team0: Port device team_slave_0 added [ 3289.037858][ T4668] team0: Port device team_slave_1 added [ 3289.116161][ T3800] device gretap0 left promiscuous mode [ 3289.146363][ T3800] Ÿë: port 1(gretap0) entered disabled state [ 3289.206368][ T4753] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.21120'. [ 3289.328153][ T4668] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3289.341499][ T4668] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3289.486717][ T4668] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3289.581486][ T4763] validate_nla: 1 callbacks suppressed [ 3289.581525][ T4763] netlink: 'syz.2.21121': attribute type 10 has an invalid length. [ 3289.582110][ T4289] Bluetooth: hci2: command 0x040f tx timeout [ 3289.612099][ T4763] netlink: 168 bytes leftover after parsing attributes in process `syz.2.21121'. [ 3289.623174][ T4765] netlink: 'syz.2.21121': attribute type 10 has an invalid length. [ 3289.651370][ T4668] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3289.679362][ T4668] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3289.767621][ T4668] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3289.817201][ T4768] netlink: 'syz.3.21123': attribute type 10 has an invalid length. [ 3289.978753][ T4668] device hsr_slave_0 entered promiscuous mode [ 3290.027187][ T4668] device hsr_slave_1 entered promiscuous mode [ 3290.044082][ T4668] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3290.069829][ T4668] Cannot create hsr debugfs directory [ 3290.161264][ T3800] team0: Port device wlan1 removed [ 3290.183727][ T4780] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.21128'. [ 3290.204301][ T4782] netlink: 'syz.4.21126': attribute type 13 has an invalid length. [ 3290.229673][ T4782] netlink: 152 bytes leftover after parsing attributes in process `syz.4.21126'. [ 3290.255299][ T4780] netlink: 60 bytes leftover after parsing attributes in process `syz.0.21128'. [ 3290.258495][ T4789] netlink: 60 bytes leftover after parsing attributes in process `syz.3.21129'. [ 3290.291606][ T4782] syz_tun: refused to change device tx_queue_len [ 3290.299596][ T4782] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 3290.324690][ T4785] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.21129'. [ 3290.693388][ T3800] device veth0_to_team left promiscuous mode [ 3290.731228][ T3800] Ÿë: port 2(veth0_to_team) entered disabled state [ 3290.806589][ T3800] bridge0: port 2(bridge_slave_1) entered disabled state [ 3290.833238][ T4810] netlink: 'syz.4.21132': attribute type 3 has an invalid length. [ 3290.844119][ T3800] device bridge_slave_0 left promiscuous mode [ 3290.850432][ T3800] bridge0: port 1(bridge_slave_0) entered disabled state [ 3290.851952][ T4810] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.21132'. [ 3291.005542][ T3800] device veth1_macvtap left promiscuous mode [ 3291.043012][ T3800] device veth1_vlan left promiscuous mode [ 3291.069692][ T3800] device veth0_vlan left promiscuous mode [ 3291.082872][ T4811] netlink: 60 bytes leftover after parsing attributes in process `syz.0.21141'. [ 3291.664511][T16066] Bluetooth: hci2: command 0x0419 tx timeout [ 3291.859884][ T3800] team0 (unregistering): Port device macvlan1 removed [ 3291.884907][ T3800] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 3291.979207][ T3800] team0 (unregistering): Port device virt_wifi0 removed [ 3292.124787][ T3800] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 3292.170939][ T3800] team0 (unregistering): Port device team_slave_1 removed [ 3292.214923][ T3800] team0 (unregistering): Port device team_slave_0 removed [ 3292.254936][ T3800] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3292.296175][ T3800] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3292.548999][ T3800] bond0 (unregistering): (slave team0): Releasing backup interface [ 3292.583816][ T3800] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 3292.592494][ T3800] bond0 (unregistering): Released all slaves [ 3292.689382][ T4808] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.21141'. [ 3292.789886][ T4815] device syzkaller0 entered promiscuous mode [ 3295.120409][ T4825] __nla_validate_parse: 2 callbacks suppressed [ 3295.120428][ T4825] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.21134'. [ 3295.140695][ T4840] netlink: 'syz.3.21138': attribute type 10 has an invalid length. [ 3295.149205][ T4845] netlink: 'syz.2.21140': attribute type 13 has an invalid length. [ 3295.171877][ T4845] netlink: 152 bytes leftover after parsing attributes in process `syz.2.21140'. [ 3295.202176][ T4845] syz_tun: refused to change device tx_queue_len [ 3295.208853][ T4845] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 3295.361551][ T4851] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.21142'. [ 3295.498587][ T4857] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.21145'. [ 3295.624483][ T4851] netlink: 60 bytes leftover after parsing attributes in process `syz.3.21142'. [ 3295.708983][ T4861] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.21146'. [ 3295.736797][ T4857] netlink: 60 bytes leftover after parsing attributes in process `syz.2.21145'. [ 3296.107676][ T4668] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 3296.166666][ T4668] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 3296.193443][ T4668] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 3296.231234][ T4668] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 3296.497983][ T4883] netlink: 'syz.4.21151': attribute type 10 has an invalid length. [ 3296.519337][ T4668] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3296.548983][ T4885] netlink: 'syz.3.21150': attribute type 10 has an invalid length. [ 3296.561978][ T4885] netlink: 168 bytes leftover after parsing attributes in process `syz.3.21150'. [ 3296.584188][ T4885] netlink: 'syz.3.21150': attribute type 10 has an invalid length. [ 3296.602856][T30006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3296.624526][T30006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3296.687733][ T4668] 8021q: adding VLAN 0 to HW filter on device team0 [ 3296.718327][T30008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3296.744679][T30008] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3296.815733][T30008] bridge0: port 1(bridge_slave_0) entered blocking state [ 3296.823134][T30008] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3296.937148][T30008] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3296.958084][T30008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3296.975093][T30008] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3296.990002][T30008] bridge0: port 2(bridge_slave_1) entered blocking state [ 3296.997202][T30008] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3297.012403][T30008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3297.057818][ T4897] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.21153'. [ 3297.077831][T30008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3297.089830][T30008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3297.128525][T30008] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3297.164830][T30008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3297.203254][T30008] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3297.236495][ T4896] netlink: 'syz.0.21163': attribute type 10 has an invalid length. [ 3297.273389][T30008] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3297.293992][T30008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3297.309334][T30008] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3297.318039][T30008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3297.326837][T30008] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3297.356409][ T4668] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3297.386956][ T4903] netlink: 'syz.2.21154': attribute type 13 has an invalid length. [ 3297.411413][ T4897] netlink: 60 bytes leftover after parsing attributes in process `syz.4.21153'. [ 3297.466737][ T4903] syz_tun: refused to change device tx_queue_len [ 3297.512145][ T4903] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 3298.587783][T30004] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3298.622273][T30004] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3298.637525][ T4668] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3298.714204][ T3800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3298.762456][ T3800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3298.822872][ T4950] netlink: 'syz.0.21167': attribute type 10 has an invalid length. [ 3298.887313][T30006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3298.903067][T30006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3298.933133][ T4668] device veth0_vlan entered promiscuous mode [ 3298.950631][T30006] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3298.979607][T30006] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3299.013837][ T4668] device veth1_vlan entered promiscuous mode [ 3299.054287][ T4957] netlink: 'syz.2.21171': attribute type 13 has an invalid length. [ 3299.096955][ T4957] syz_tun: refused to change device tx_queue_len [ 3299.142015][ T4957] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 3299.278261][ T4668] device veth0_macvtap entered promiscuous mode [ 3299.330287][T30006] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3299.349130][T30006] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 3299.371123][T30006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3299.396989][T30006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3299.419309][ T4668] device veth1_macvtap entered promiscuous mode [ 3299.451691][T30006] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3299.468285][T30006] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3299.537086][ T4668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3299.579877][ T4668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3299.607418][ T4668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3299.630595][ T4668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3299.645614][ T4668] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3299.654032][ T4981] netlink: 'syz.0.21184': attribute type 13 has an invalid length. [ 3299.697755][ T4981] syz_tun: refused to change device tx_queue_len [ 3299.708488][ T4981] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 3299.730306][T30011] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3299.749133][T30011] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3299.777260][ T4668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3299.800280][ T4668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3299.827002][ T4668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3299.853071][ T4668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3299.889607][ T4668] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3299.918571][T30011] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3299.934177][T30011] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3299.971745][ T4668] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3299.997996][ T4668] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3300.015738][ T4668] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3300.034628][ T4668] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3300.232240][ T3800] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3300.245379][ T3800] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3300.305936][T30006] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3300.369475][ T3800] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3300.391992][ T3800] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3300.399645][T30008] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3300.678934][ T5013] __nla_validate_parse: 11 callbacks suppressed [ 3300.678972][ T5013] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.21185'. [ 3300.728876][ T5016] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.21103'. [ 3300.901024][ T5020] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.21186'. [ 3301.060460][ T5016] netlink: 60 bytes leftover after parsing attributes in process `syz.1.21103'. [ 3301.070654][ T5032] netlink: 'syz.0.21188': attribute type 13 has an invalid length. [ 3301.131947][ T5032] netlink: 152 bytes leftover after parsing attributes in process `syz.0.21188'. [ 3301.196826][ T5032] syz_tun: refused to change device tx_queue_len [ 3301.234197][ T5032] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 3301.516493][ T4289] Bluetooth: hci4: unexpected event 0x14 length: 151 > 6 [ 3301.541504][ T5054] netlink: 'syz.1.21194': attribute type 3 has an invalid length. [ 3301.628237][ T5054] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.21194'. [ 3301.948220][ T5056] device syzkaller0 entered promiscuous mode [ 3302.411691][ T5062] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.21196'. [ 3306.421716][ T5075] netlink: 13951 bytes leftover after parsing attributes in process `syz.3.21198'. [ 3306.433365][ T5100] netlink: 'syz.2.21203': attribute type 10 has an invalid length. [ 3306.656623][ T5115] netlink: 'syz.0.21205': attribute type 10 has an invalid length. [ 3306.696334][ T5115] netlink: 168 bytes leftover after parsing attributes in process `syz.0.21205'. [ 3306.751330][ T5115] netlink: 'syz.0.21205': attribute type 10 has an invalid length. [ 3306.796003][ T5119] netlink: 'syz.3.21206': attribute type 13 has an invalid length. [ 3306.819638][ T5119] netlink: 152 bytes leftover after parsing attributes in process `syz.3.21206'. [ 3307.169869][ T5135] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.21211'. [ 3310.491469][ T5187] netlink: 'syz.4.21219': attribute type 3 has an invalid length. [ 3310.524330][ T5187] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.21219'. [ 3310.812759][ T5187] device syzkaller0 entered promiscuous mode [ 3310.821614][ T5185] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.21220'. [ 3311.095922][ T5197] netlink: 'syz.0.21223': attribute type 13 has an invalid length. [ 3311.112174][ T5197] netlink: 152 bytes leftover after parsing attributes in process `syz.0.21223'. [ 3311.170228][ T5197] syz_tun: refused to change device tx_queue_len [ 3311.222755][ T5197] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 3312.271010][ T5214] netlink: 60 bytes leftover after parsing attributes in process `syz.2.21227'. [ 3312.278565][ T5219] netlink: 'syz.0.21228': attribute type 1 has an invalid length. [ 3312.290831][ T5219] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.21228'. [ 3314.429738][ T5201] netlink: 'syz.1.21225': attribute type 10 has an invalid length. [ 3314.438054][ T5201] netlink: 168 bytes leftover after parsing attributes in process `syz.1.21225'. [ 3314.447767][ T5205] netlink: 'syz.1.21225': attribute type 10 has an invalid length. [ 3314.478043][ T5205] team0: Port device wlan1 added [ 3314.485887][ T5206] netlink: 'syz.3.21226': attribute type 1 has an invalid length. [ 3314.493939][ T5206] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21226'. [ 3314.517175][ T5213] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.21227'. [ 3314.716742][ T5225] netlink: 'syz.2.21231': attribute type 10 has an invalid length. [ 3315.104946][ T5240] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.21236'. [ 3315.459365][ T5248] netlink: 'syz.1.21238': attribute type 13 has an invalid length. [ 3315.474977][ T5248] netlink: 152 bytes leftover after parsing attributes in process `syz.1.21238'. [ 3315.516333][ T5248] syz_tun: refused to change device tx_queue_len [ 3315.565050][ T5248] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 3315.656798][ T5256] netlink: 60 bytes leftover after parsing attributes in process `syz.0.21241'. [ 3315.680094][ T5252] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.21241'. [ 3315.738341][ T5254] netlink: 'syz.4.21240': attribute type 10 has an invalid length. [ 3315.759564][ T5267] netlink: 'syz.3.21242': attribute type 3 has an invalid length. [ 3315.782207][ T5254] netlink: 168 bytes leftover after parsing attributes in process `syz.4.21240'. [ 3315.824993][ T5259] netlink: 'syz.4.21240': attribute type 10 has an invalid length. [ 3316.040839][ T5267] device syzkaller0 entered promiscuous mode [ 3319.068481][ T5279] __nla_validate_parse: 2 callbacks suppressed [ 3319.068498][ T5279] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.21255'. [ 3319.091067][ T5282] netlink: 'syz.1.21246': attribute type 10 has an invalid length. [ 3319.107206][ T5282] team0: Port device virt_wifi0 added [ 3319.457903][ T5297] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.21249'. [ 3319.631116][ T5308] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.21253'. [ 3319.682444][ T5310] netlink: 'syz.2.21254': attribute type 13 has an invalid length. [ 3319.691609][ T5310] netlink: 152 bytes leftover after parsing attributes in process `syz.2.21254'. [ 3319.759287][ T5310] syz_tun: refused to change device tx_queue_len [ 3319.827592][ T5310] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 3319.932801][ T5318] netlink: 'syz.4.21257': attribute type 10 has an invalid length. [ 3320.034527][ T5318] bond0: (slave veth1_to_bridge): Enslaving as an active interface with an up link [ 3320.107076][ T5322] netlink: 'syz.0.21258': attribute type 10 has an invalid length. [ 3320.122013][ T5322] netlink: 168 bytes leftover after parsing attributes in process `syz.0.21258'. [ 3320.141455][ T5316] netlink: 'syz.4.21257': attribute type 21 has an invalid length. [ 3320.161043][ T5325] netlink: 'syz.0.21258': attribute type 10 has an invalid length. [ 3320.176051][ T5328] netlink: 'syz.3.21259': attribute type 10 has an invalid length. [ 3320.261585][ T5334] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.21261'. [ 3320.320494][ T5332] device bridge_slave_1 left promiscuous mode [ 3320.345161][ T5332] bridge0: port 2(bridge_slave_1) entered disabled state [ 3320.409110][ T5332] device bridge_slave_0 left promiscuous mode [ 3320.443028][ T5332] bridge0: port 1(bridge_slave_0) entered disabled state [ 3320.457189][ T5337] netlink: 'syz.4.21262': attribute type 3 has an invalid length. [ 3320.478846][ T5337] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.21262'. [ 3321.205510][ T5334] netlink: 60 bytes leftover after parsing attributes in process `syz.2.21261'. [ 3321.647409][ T5341] device syzkaller0 entered promiscuous mode [ 3325.010614][ T5359] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.21267'. [ 3325.031911][ T5371] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.21270'. [ 3325.209225][ T5377] netlink: 'syz.1.21271': attribute type 13 has an invalid length. [ 3325.218494][ T5377] netlink: 152 bytes leftover after parsing attributes in process `syz.1.21271'. [ 3325.241337][ T5377] syz_tun: refused to change device tx_queue_len [ 3325.250949][ T5377] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 3325.509052][ T5389] netlink: 'syz.3.21275': attribute type 10 has an invalid length. [ 3325.535072][ T5389] netlink: 168 bytes leftover after parsing attributes in process `syz.3.21275'. [ 3325.569856][ T5389] netlink: 'syz.3.21275': attribute type 10 has an invalid length. [ 3326.020602][ T5405] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.21282'. [ 3326.135005][ T5407] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.21284'. [ 3326.158716][ T5403] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.21283'. [ 3326.712041][ T5426] netlink: 'syz.3.21289': attribute type 3 has an invalid length. [ 3326.719965][ T5426] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.21289'. [ 3326.935559][ T5426] device syzkaller0 entered promiscuous mode [ 3326.963636][ T5427] netlink: 'syz.4.21291': attribute type 13 has an invalid length. [ 3326.977297][ T5427] netlink: 152 bytes leftover after parsing attributes in process `syz.4.21291'. [ 3327.032868][ T5427] syz_tun: refused to change device tx_queue_len [ 3327.048159][ T5427] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 3327.113496][ T5434] netlink: 'syz.1.21293': attribute type 10 has an invalid length. [ 3327.506801][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 3327.513251][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 3329.952881][ T5451] netlink: 61211 bytes leftover after parsing attributes in process `syz.4.21297'. [ 3329.963935][ T5448] netlink: 'syz.1.21296': attribute type 10 has an invalid length. [ 3329.980344][ T5453] netlink: 'syz.0.21298': attribute type 10 has an invalid length. [ 3332.295102][ T5456] netlink: 'syz.2.21299': attribute type 15 has an invalid length. [ 3332.303243][ T5456] netlink: 'syz.2.21299': attribute type 7 has an invalid length. [ 3332.311146][ T5456] netlink: 52 bytes leftover after parsing attributes in process `syz.2.21299'. [ 3332.320396][ T5462] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.21302'. [ 3332.349133][ T5473] netlink: 'syz.4.21303': attribute type 10 has an invalid length. [ 3332.367573][ T5473] netlink: 9279 bytes leftover after parsing attributes in process `syz.4.21303'. [ 3332.528600][ T5479] netlink: 'syz.4.21307': attribute type 13 has an invalid length. [ 3332.705039][ T5479] netlink: 152 bytes leftover after parsing attributes in process `syz.4.21307'. [ 3332.727222][ T5479] syz_tun: refused to change device tx_queue_len [ 3332.742703][ T5479] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 3332.815098][ T5480] device bridge_slave_1 left promiscuous mode [ 3332.872617][ T5480] bridge0: port 2(bridge_slave_1) entered disabled state [ 3333.862459][ T5480] device bridge_slave_0 left promiscuous mode [ 3333.868683][ T5480] bridge0: port 1(bridge_slave_0) entered disabled state [ 3334.048667][ T5501] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.21310'. [ 3334.169106][ T5505] netlink: 'syz.1.21312': attribute type 10 has an invalid length. [ 3334.338742][ T5512] netlink: 'syz.3.21313': attribute type 10 has an invalid length. [ 3334.435369][ T5516] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.21317'. [ 3334.851951][ T5527] netlink: 'syz.3.21318': attribute type 3 has an invalid length. [ 3334.866809][ T5527] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.21318'. [ 3335.193886][ T5527] device syzkaller0 entered promiscuous mode [ 3338.700523][ T5536] netlink: 14175 bytes leftover after parsing attributes in process `syz.2.21321'. [ 3338.710293][ T5541] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.21325'. [ 3338.742302][ T5547] device bridge_slave_1 left promiscuous mode [ 3338.748848][ T5547] bridge0: port 2(bridge_slave_1) entered disabled state [ 3338.773540][ T5547] device bridge_slave_0 left promiscuous mode [ 3338.788617][ T5547] bridge0: port 1(bridge_slave_0) entered disabled state [ 3339.055668][ T5551] netlink: 'syz.4.21328': attribute type 10 has an invalid length. [ 3339.445695][ T5568] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.21332'. [ 3340.190197][ T5588] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.21339'. [ 3340.212424][ T5584] netlink: 'syz.1.21337': attribute type 10 has an invalid length. [ 3340.233304][ T5584] netlink: 168 bytes leftover after parsing attributes in process `syz.1.21337'. [ 3340.291959][ T5591] netlink: 'syz.1.21337': attribute type 10 has an invalid length. [ 3340.304891][ T5590] netlink: 'syz.0.21340': attribute type 3 has an invalid length. [ 3340.378294][ T5590] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.21340'. [ 3340.536662][ T5590] device syzkaller0 entered promiscuous mode [ 3340.592720][ T5597] netlink: 132 bytes leftover after parsing attributes in process `syz.4.21342'. [ 3341.990566][ T5605] FAULT_INJECTION: forcing a failure. [ 3341.990566][ T5605] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3342.048019][ T5605] CPU: 0 PID: 5605 Comm: syz.3.21345 Not tainted syzkaller #0 [ 3342.055558][ T5605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 3342.065672][ T5605] Call Trace: [ 3342.068995][ T5605] [ 3342.071966][ T5605] dump_stack_lvl+0x188/0x24e [ 3342.076714][ T5605] ? show_regs_print_info+0x12/0x12 [ 3342.081968][ T5605] ? load_image+0x410/0x410 [ 3342.086535][ T5605] ? __lock_acquire+0x7c40/0x7c40 [ 3342.091626][ T5605] ? snprintf+0xe5/0x140 [ 3342.095929][ T5605] should_fail_ex+0x390/0x4c0 [ 3342.100667][ T5605] _copy_to_user+0x2c/0x130 [ 3342.105226][ T5605] simple_read_from_buffer+0xe3/0x150 [ 3342.110654][ T5605] proc_fail_nth_read+0x1a6/0x220 [ 3342.115715][ T5605] ? proc_fault_inject_write+0x310/0x310 [ 3342.121377][ T5605] ? fsnotify_perm+0x248/0x550 [ 3342.126159][ T5605] ? proc_fault_inject_write+0x310/0x310 [ 3342.131812][ T5605] vfs_read+0x2db/0x960 [ 3342.136006][ T5605] ? kernel_read+0x1e0/0x1e0 [ 3342.140623][ T5605] ? __fget_files+0x28/0x460 [ 3342.145235][ T5605] ? __fget_files+0x3fc/0x460 [ 3342.149949][ T5605] ? __fdget_pos+0x2ae/0x360 [ 3342.154552][ T5605] ? ksys_read+0x70/0x260 [ 3342.158905][ T5605] ksys_read+0x14d/0x260 [ 3342.163170][ T5605] ? vfs_write+0x9a0/0x9a0 [ 3342.167626][ T5605] ? lockdep_hardirqs_on+0x94/0x140 [ 3342.172850][ T5605] do_syscall_64+0x4c/0xa0 [ 3342.177280][ T5605] ? clear_bhb_loop+0x60/0xb0 [ 3342.181973][ T5605] ? clear_bhb_loop+0x60/0xb0 [ 3342.186665][ T5605] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3342.192571][ T5605] RIP: 0033:0x7feb2d35e6ce [ 3342.197001][ T5605] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 3342.216623][ T5605] RSP: 002b:00007feb2e31ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3342.225053][ T5605] RAX: ffffffffffffffda RBX: 00007feb2e3206c0 RCX: 00007feb2d35e6ce [ 3342.233033][ T5605] RDX: 000000000000000f RSI: 00007feb2e3200a0 RDI: 000000000000000a [ 3342.241011][ T5605] RBP: 00007feb2e320090 R08: 0000000000000000 R09: 0000000000000000 [ 3342.248989][ T5605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3342.256972][ T5605] R13: 00007feb2d626038 R14: 00007feb2d625fa0 R15: 00007ffdd9dea1f8 [ 3342.264997][ T5605] [ 3345.625637][ T5600] netlink: 'syz.2.21353': attribute type 10 has an invalid length. [ 3345.633673][ T5600] netlink: 168 bytes leftover after parsing attributes in process `syz.2.21353'. [ 3345.643617][ T5607] netlink: 'syz.2.21353': attribute type 10 has an invalid length. [ 3345.651670][ T5603] netlink: 'syz.1.21344': attribute type 10 has an invalid length. [ 3345.664783][ T5628] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.21351'. [ 3345.814832][ T5635] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.21355'. [ 3346.000609][ T5640] netlink: 'syz.0.21357': attribute type 10 has an invalid length. [ 3346.020729][ T5645] FAULT_INJECTION: forcing a failure. [ 3346.020729][ T5645] name failslab, interval 1, probability 0, space 0, times 0 [ 3346.064099][ T5645] CPU: 1 PID: 5645 Comm: syz.4.21358 Not tainted syzkaller #0 [ 3346.071610][ T5645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 3346.081694][ T5645] Call Trace: [ 3346.084990][ T5645] [ 3346.087933][ T5645] dump_stack_lvl+0x188/0x24e [ 3346.092646][ T5645] ? show_regs_print_info+0x12/0x12 [ 3346.097881][ T5645] ? load_image+0x410/0x410 [ 3346.102412][ T5645] ? __might_sleep+0xd0/0xd0 [ 3346.107020][ T5645] ? __lock_acquire+0x7c40/0x7c40 [ 3346.112075][ T5645] should_fail_ex+0x390/0x4c0 [ 3346.116781][ T5645] should_failslab+0x5/0x20 [ 3346.121306][ T5645] slab_pre_alloc_hook+0x59/0x300 [ 3346.126362][ T5645] kmem_cache_alloc_node+0x5a/0x310 [ 3346.131592][ T5645] ? __alloc_skb+0xf9/0x7d0 [ 3346.136136][ T5645] __alloc_skb+0xf9/0x7d0 [ 3346.140498][ T5645] netlink_sendmsg+0x654/0xbd0 [ 3346.145296][ T5645] ? netlink_getsockopt+0x550/0x550 [ 3346.150523][ T5645] ? apparmor_socket_sendmsg+0x8a/0x330 [ 3346.156095][ T5645] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 3346.161399][ T5645] ? security_socket_sendmsg+0x7c/0xa0 [ 3346.167312][ T5645] ? netlink_getsockopt+0x550/0x550 [ 3346.172526][ T5645] ____sys_sendmsg+0x5ed/0x9a0 [ 3346.177300][ T5645] ? __sys_sendmsg_sock+0x30/0x30 [ 3346.182329][ T5645] ? __import_iovec+0x306/0x510 [ 3346.187186][ T5645] ? import_iovec+0x6f/0xa0 [ 3346.191689][ T5645] ___sys_sendmsg+0x2a2/0x360 [ 3346.196376][ T5645] ? __sys_sendmsg+0x2a0/0x2a0 [ 3346.201162][ T5645] ? __lock_acquire+0x7c40/0x7c40 [ 3346.206208][ T5645] __se_sys_sendmsg+0x1c3/0x2b0 [ 3346.211060][ T5645] ? __x64_sys_sendmsg+0x80/0x80 [ 3346.216010][ T5645] ? lockdep_hardirqs_on+0x94/0x140 [ 3346.221207][ T5645] do_syscall_64+0x4c/0xa0 [ 3346.225623][ T5645] ? clear_bhb_loop+0x60/0xb0 [ 3346.230303][ T5645] ? clear_bhb_loop+0x60/0xb0 [ 3346.234979][ T5645] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3346.240869][ T5645] RIP: 0033:0x7f95cbd9de99 [ 3346.245283][ T5645] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3346.264885][ T5645] RSP: 002b:00007f95ccd08028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3346.273304][ T5645] RAX: ffffffffffffffda RBX: 00007f95cc025fa0 RCX: 00007f95cbd9de99 [ 3346.281270][ T5645] RDX: 0000000004004004 RSI: 0000200000000040 RDI: 0000000000000003 [ 3346.289240][ T5645] RBP: 00007f95ccd08090 R08: 0000000000000000 R09: 0000000000000000 [ 3346.297210][ T5645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3346.305176][ T5645] R13: 00007f95cc026038 R14: 00007f95cc025fa0 R15: 00007fff8e76f2c8 [ 3346.313159][ T5645] [ 3346.481413][ T5652] netlink: 'syz.4.21360': attribute type 13 has an invalid length. [ 3346.498359][ T5652] netlink: 152 bytes leftover after parsing attributes in process `syz.4.21360'. [ 3346.520969][ T5652] syz_tun: refused to change device tx_queue_len [ 3346.528576][ T5652] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 3346.822425][ T5660] netlink: 128 bytes leftover after parsing attributes in process `syz.1.21363'. [ 3346.855024][ T5660] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 3346.911237][ T5660] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3346.942369][ T5662] netlink: 'syz.3.21364': attribute type 10 has an invalid length. [ 3346.964592][ T5664] netlink: 'syz.4.21365': attribute type 10 has an invalid length. [ 3346.997757][ T5664] netlink: 168 bytes leftover after parsing attributes in process `syz.4.21365'. [ 3347.063861][ T5669] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.21367'. [ 3347.082934][ T5666] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.21366'. [ 3347.168572][ T5672] netlink: 'syz.4.21365': attribute type 10 has an invalid length. [ 3347.271092][ T5677] netlink: 'syz.3.21368': attribute type 3 has an invalid length. [ 3347.288847][ T5666] netlink: 60 bytes leftover after parsing attributes in process `syz.2.21366'. [ 3347.343045][ T5677] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.21368'. [ 3347.614711][ T5677] device syzkaller0 entered promiscuous mode [ 3352.017613][ T5696] netlink: 'syz.4.21375': attribute type 13 has an invalid length. [ 3352.025996][ T5696] netlink: 152 bytes leftover after parsing attributes in process `syz.4.21375'. [ 3352.037684][ T5696] syz_tun: refused to change device tx_queue_len [ 3352.044619][ T5696] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 3352.070341][ T5709] netlink: 'syz.0.21379': attribute type 10 has an invalid length. [ 3352.088710][ T5709] netlink: 168 bytes leftover after parsing attributes in process `syz.0.21379'. [ 3352.119812][ T5710] netlink: 'syz.0.21379': attribute type 10 has an invalid length. [ 3352.265816][ T5717] netlink: 64535 bytes leftover after parsing attributes in process `syz.4.21382'. [ 3352.307423][ T5719] netlink: 'syz.3.21383': attribute type 10 has an invalid length. [ 3352.342105][ T5719] netlink: 168 bytes leftover after parsing attributes in process `syz.3.21383'. [ 3352.377947][ T5719] netlink: 'syz.3.21383': attribute type 10 has an invalid length. [ 3352.508866][ T5727] netlink: 'syz.1.21386': attribute type 21 has an invalid length. [ 3352.520779][ T5727] netlink: 156 bytes leftover after parsing attributes in process `syz.1.21386'. [ 3352.645157][ T5732] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.21388'. [ 3352.898539][ T5736] netlink: 'syz.1.21390': attribute type 10 has an invalid length. [ 3352.922000][ T5736] netlink: 2 bytes leftover after parsing attributes in process `syz.1.21390'. [ 3352.931116][ T5736] device hsr0 entered promiscuous mode [ 3352.975085][ T5740] netlink: 'syz.2.21392': attribute type 13 has an invalid length. [ 3353.005010][ T5742] netlink: 'syz.0.21393': attribute type 3 has an invalid length. [ 3353.013480][ T5740] netlink: 152 bytes leftover after parsing attributes in process `syz.2.21392'. [ 3353.069596][ T5742] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.21393'. [ 3353.137710][ T5740] syz_tun: refused to change device tx_queue_len [ 3353.162270][ T5740] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 3353.284750][ T5746] netlink: 'syz.4.21394': attribute type 10 has an invalid length. [ 3353.304219][ T5746] netlink: 168 bytes leftover after parsing attributes in process `syz.4.21394'. [ 3354.199527][ T5762] syz_tun: refused to change device tx_queue_len [ 3354.224219][ T5762] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 3354.853126][ T5788] syz_tun: refused to change device tx_queue_len [ 3354.860286][ T5788] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 3356.955384][ C1] [ 3356.955393][ C1] ================================ [ 3356.955399][ C1] WARNING: inconsistent lock state [ 3356.955414][ C1] syzkaller #0 Not tainted [ 3356.955427][ C1] -------------------------------- [ 3356.955432][ C1] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 3356.955439][ C1] syz.0.21424/5831 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 3356.955456][ C1] ffff888027ca5a38 (&trie->lock){....}-{2:2}, at: trie_delete_elem+0x8e/0x620 [ 3356.955500][ C1] {INITIAL USE} state was registered at: [ 3356.955506][ C1] lock_acquire+0x1bb/0x4a0 [ 3356.955525][ C1] _raw_spin_lock_irqsave+0xb0/0x100 [ 3356.955541][ C1] trie_update_elem+0xbe/0xd40 [ 3356.955557][ C1] bpf_map_update_value+0x59d/0x670 [ 3356.955574][ C1] map_update_elem+0x4fa/0x6a0 [ 3356.955591][ C1] __sys_bpf+0x4ec/0x780 [ 3356.955607][ C1] __x64_sys_bpf+0x78/0x90 [ 3356.955622][ C1] do_syscall_64+0x4c/0xa0 [ 3356.955639][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3356.955660][ C1] irq event stamp: 6162 [ 3356.955667][ C1] hardirqs last enabled at (6161): [] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 3356.955689][ C1] hardirqs last disabled at (6162): [] exc_debug+0x6e/0x130 [ 3356.955710][ C1] softirqs last enabled at (6108): [] __irq_exit_rcu+0x13b/0x230 [ 3356.955728][ C1] softirqs last disabled at (5309): [] __irq_exit_rcu+0x13b/0x230 [ 3356.955745][ C1] [ 3356.955745][ C1] other info that might help us debug this: [ 3356.955759][ C1] Possible unsafe locking scenario: [ 3356.955759][ C1] [ 3356.955763][ C1] CPU0 [ 3356.955766][ C1] ---- [ 3356.955769][ C1] lock(&trie->lock); [ 3356.955779][ C1] [ 3356.955782][ C1] lock(&trie->lock); [ 3356.955792][ C1] [ 3356.955792][ C1] *** DEADLOCK *** [ 3356.955792][ C1] [ 3356.955795][ C1] no locks held by syz.0.21424/5831. [ 3356.955803][ C1] [ 3356.955803][ C1] stack backtrace: [ 3356.955808][ C1] CPU: 1 PID: 5831 Comm: syz.0.21424 Not tainted syzkaller #0 [ 3356.955822][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 3356.955831][ C1] Call Trace: [ 3356.955837][ C1] <#DB> [ 3356.955843][ C1] dump_stack_lvl+0x188/0x24e [ 3356.955866][ C1] ? show_regs_print_info+0x12/0x12 [ 3356.955891][ C1] ? print_usage_bug+0x42a/0x690 [ 3356.955910][ C1] ? verify_lock_unused+0x15/0x140 [ 3356.955933][ C1] lock_acquire+0x2df/0x4a0 [ 3356.955950][ C1] ? perf_output_begin_forward+0xa7/0xa70 [ 3356.956039][ C1] ? trie_delete_elem+0x8e/0x620 [ 3356.956061][ C1] ? read_lock_is_recursive+0x10/0x10 [ 3356.956079][ C1] ? rcu_is_watching+0x11/0xa0 [ 3356.956102][ C1] ? look_up_lock_class+0x75/0x140 [ 3356.956120][ C1] ? verify_lock_unused+0x15/0x140 [ 3356.956142][ C1] _raw_spin_lock_irqsave+0xb0/0x100 [ 3356.956159][ C1] ? trie_delete_elem+0x8e/0x620 [ 3356.956177][ C1] ? _raw_spin_lock+0x40/0x40 [ 3356.956196][ C1] ? bpf_overflow_handler+0xd9/0x790 [ 3356.956218][ C1] trie_delete_elem+0x8e/0x620 [ 3356.956235][ C1] ? perf_event_output_forward+0x282/0x2f0 [ 3356.956254][ C1] ? look_up_lock_class+0x75/0x140 [ 3356.956275][ C1] bpf_prog_2c29ac5cdc6b1842+0x3a/0x3e [ 3356.956294][ C1] bpf_overflow_handler+0x50b/0x790 [ 3356.956315][ C1] ? bpf_overflow_handler+0xd9/0x790 [ 3356.956332][ C1] ? perf_swevent_overflow+0x230/0x230 [ 3356.956351][ C1] ? __lock_acquire+0x7c40/0x7c40 [ 3356.956379][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 3356.956403][ C1] __perf_event_overflow+0x457/0x630 [ 3356.956430][ C1] perf_swevent_event+0x315/0x570 [ 3356.956453][ C1] ? perf_tp_event+0xc10/0xc10 [ 3356.956474][ C1] ? __bpf_trace_bpf_trace_printk+0x20/0x20 [ 3356.956505][ C1] perf_bp_event+0x311/0x3f0 [ 3356.956527][ C1] ? perf_trace_lock_acquire+0x342/0x3f0 [ 3356.956546][ C1] ? perf_event_free_bpf_prog+0x120/0x120 [ 3356.956593][ C1] ? atomic_notifier_call_chain+0x2c/0x2b0 [ 3356.956613][ C1] ? read_lock_is_recursive+0x10/0x10 [ 3356.956638][ C1] hw_breakpoint_exceptions_notify+0x14d/0x470 [ 3356.956664][ C1] atomic_notifier_call_chain+0x17a/0x2b0 [ 3356.956681][ C1] ? atomic_notifier_call_chain+0x2c/0x2b0 [ 3356.956702][ C1] notify_die+0x141/0x1a0 [ 3356.956722][ C1] ? srcu_init_notifier_head+0x90/0x90 [ 3356.956754][ C1] notify_debug+0x20/0x30 [ 3356.956771][ C1] exc_debug+0xd9/0x130 [ 3356.956794][ C1] asm_exc_debug+0x1a/0x40 [ 3356.956810][ C1] RIP: 0010:copy_user_enhanced_fast_string+0xa/0x40 [ 3356.956832][ C1] Code: ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 8d 0c ca 89 ca eb 20 0f 01 cb 83 fa 40 72 38 89 d1 a4 31 c0 0f 01 ca c3 89 ca eb 0a 90 90 90 90 90 90 90 90 90 90 [ 3356.956845][ C1] RSP: 0018:ffffc90003877788 EFLAGS: 00050202 [ 3356.956858][ C1] RAX: ffffffff8413b601 RBX: 000000000000eb98 RCX: 000000000000e938 [ 3356.956870][ C1] RDX: 000000000000eb98 RSI: 0000200000000320 RDI: ffffc90003959260 [ 3356.956880][ C1] RBP: 0000000000000000 R08: ffffc90003967b97 R09: 1ffff9200072cf72 [ 3356.956891][ C1] R10: dffffc0000000000 R11: fffff5200072cf73 R12: 00007fffffff0468 [ 3356.956902][ C1] R13: 0000000000000000 R14: 00002000000000c0 R15: ffffc90003959000 [ 3356.956920][ C1] ? copyin+0x21/0x120 [ 3356.956944][ C1] [ 3356.956949][ C1] [ 3356.956953][ C1] copyin+0xe7/0x120 [ 3356.956973][ C1] _copy_from_iter+0x447/0x1130 [ 3356.957000][ C1] ? copyout_mc+0x110/0x110 [ 3356.957017][ C1] ? do_raw_spin_unlock+0x11d/0x230 [ 3356.957035][ C1] ? _raw_spin_unlock+0x24/0x40 [ 3356.957051][ C1] ? find_vmap_area+0xf8/0x110 [ 3356.957069][ C1] ? __phys_addr_symbol+0x2b/0x70 [ 3356.957088][ C1] ? __check_object_size+0x4f6/0xa70 [ 3356.957109][ C1] netlink_sendmsg+0x755/0xbd0 [ 3356.957138][ C1] ? netlink_getsockopt+0x550/0x550 [ 3356.957161][ C1] ? apparmor_socket_sendmsg+0x8a/0x330 [ 3356.957183][ C1] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 3356.957197][ C1] ? security_socket_sendmsg+0x7c/0xa0 [ 3356.957215][ C1] ? netlink_getsockopt+0x550/0x550 [ 3356.957237][ C1] ____sys_sendmsg+0x5ed/0x9a0 [ 3356.957266][ C1] ? __sys_sendmsg_sock+0x30/0x30 [ 3356.957284][ C1] ? __import_iovec+0x306/0x510 [ 3356.957311][ C1] ? import_iovec+0x6f/0xa0 [ 3356.957334][ C1] ___sys_sendmsg+0x2a2/0x360 [ 3356.957359][ C1] ? __sys_sendmsg+0x2a0/0x2a0 [ 3356.957404][ C1] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 3356.957453][ C1] __se_sys_sendmsg+0x1c3/0x2b0 [ 3356.957471][ C1] ? ct_nmi_exit+0x145/0x1c0 [ 3356.957488][ C1] ? __x64_sys_sendmsg+0x80/0x80 [ 3356.957522][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 3356.957541][ C1] do_syscall_64+0x4c/0xa0 [ 3356.957558][ C1] ? clear_bhb_loop+0x60/0xb0 [ 3356.957575][ C1] ? clear_bhb_loop+0x60/0xb0 [ 3356.957595][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3356.957613][ C1] RIP: 0033:0x7fc19fd9de99 [ 3356.957627][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3356.957644][ C1] RSP: 002b:00007fc1a0d49028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3356.957659][ C1] RAX: ffffffffffffffda RBX: 00007fc1a0025fa0 RCX: 00007fc19fd9de99 [ 3356.957671][ C1] RDX: 0000000000000600 RSI: 0000200000000540 RDI: 000000000000000a [ 3356.957681][ C1] RBP: 00007fc19fe33eaf R08: 0000000000000000 R09: 0000000000000000 [ 3356.957690][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3356.957699][ C1] R13: 00007fc1a0026038 R14: 00007fc1a0025fa0 R15: 00007fff3b4e33a8 [ 3356.957726][ C1] [ 3357.817820][ T5835] validate_nla: 11 callbacks suppressed [ 3357.817862][ T5835] netlink: 'syz.4.21425': attribute type 13 has an invalid length. [ 3357.898112][ T5835] __nla_validate_parse: 14 callbacks suppressed [ 3357.898128][ T5835] netlink: 152 bytes leftover after parsing attributes in process `syz.4.21425'. [ 3357.915287][ T5835] syz_tun: refused to change device tx_queue_len [ 3357.921671][ T5835] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 3357.938709][ T5844] netlink: 'syz.3.21427': attribute type 21 has an invalid length. [ 3357.950390][ T5849] netlink: 'syz.0.21424': attribute type 15 has an invalid length. [ 3357.958412][ T5849] netlink: 'syz.0.21424': attribute type 7 has an invalid length. [ 3357.966569][ T5849] netlink: 52 bytes leftover after parsing attributes in process `syz.0.21424'. [ 3358.033292][ T5834] device syzkaller0 entered promiscuous mode