last executing test programs: 11.644062465s ago: executing program 2 (id=1991): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000007a000000b500000095"], &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f00000000c0)='memory.current\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x7, 0x0, 0x1, 0x0, 0x0, 0x81, 0x86e46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x4d3f}, 0x18342, 0x8, 0x0, 0x1, 0x0, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0x4000000000000004}, 0x0, 0x1, 0xffffffffffffffff, 0x2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x45, '\x00', 0x0, @fallback=0x22}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1d, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x37}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan1\x00', 0x800}) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f0000000080)) 10.816261555s ago: executing program 0 (id=1998): r0 = socket$kcm(0xa, 0x4, 0x3a) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001b40)=ANY=[@ANYBLOB="0100000004000000040000000200000005000000", @ANYRES32=0x1, @ANYBLOB="02000000f5e9180cde303f88ef6d6f175f9018c7b2f4000000000300", @ANYBLOB="e226da03865dfaf4ccff3b5222867b650130e45100f2ec8d882a9e05854b0b6b261624de7b6868b8dbc08252ce8da91e869e6553cc9ee180b17277ec43b2d167aa838ce4f47c367c2433dacf06dec0eb7bc1019b38bc62967349a3ebaf5250f633efacf06ad7eeb290755e3e3e0acd1cda85ae0daca330df1c683c15b26ebfe5d2120da302302260b8c2661b63bf01a0209d02de241e2b07105a1d876acebef1a43ebbee7e8ce3deea788f0b1f98643f48857ea6e6612b12621c7313181e0257d8095d4450c5c447843dd099e2cb524895e1e947da993bccb6ef43ddac4e69d68a41654868f1a66e8b4b9bb5ce3a6f141ad15b86a67fc2c9d38c84e5697f23359246822d312d705a4197a55d75763b8b23b673c8a7588c0952d0599e5615ef72e907029f7b9814c6a91a3748310b2dd86f21fe0a089f5a2a555ce45ca3ee6e616ed463dcf0ef25a0364492e33147132a4f7754ef5f864778b994b661081a3d8c20b7a05614f30310aeba3271677d96d35e5ab2b9b30185b53538055a0ead16387811aebbf3a829ae50a985ab00dc0947e33428e0044874185d1af20c9f462cf1f26d4f021f0bfd5b47984a8af6812e4e0a6cf1b0d8652194e55bfdb60c1f910035324005c8aba50eb49da589bf78568d72eaa70a0709ecea924c48e70fe01e2646841e00b549a3c34dd1c17e4b42312b15ed9200828b8a96dd50c64969753db2e11430eb0fef3f15b3665953e6a8d497de304c6675218acc39c2062f4f870a5d539485fa85d8f84663e0d04a65977cc6a70b8fdb41dcbef1a96d578d09c2e3f3cfc777d2d72f2852cbb603bc72842ed4d23fde8b1c1262c39bc85c8a84a6c1f6502a7adb4d5a7a1377f4e6d8e883803fbd0508a04800808b3a4cc0b8bc72e9bdea82392e211bba6076b88bd4e8b7cc9cd7de647a59d528db21c896c95dd143b3ca70181c5c3ac5994b38e9f9eb5f32a8b3f40887bf82a270a4eb84fadc4778613eb65c5b88c717b10a449a3cc0da3c6c86e43feca8f98bc277f1b257f87e5d29a0808eaa3b296aa4adf867aba611813fc44862431ee051b31e6a582b4d0934d56ad1db118d666a750f6d5be6e2cdb5863860ba174c3b01a23127797271e800ada13b749d2b39680e09095be9faa1d0a03f3ddb6094c0a5af36a7be7d98ce6d06070d54f7cde84b4a3d442225c779d6fec42b4e1e529af8fcdf509b6d3c95b9c11a556d0fb88c6da35b4125d201bf31e5adc3f32134da63cde4d1923deed7f66a46bfa583385dc629a67295f1c4e94b58dee98d42ce7c4610bc5a142fc256183a703aba54697f755f20b3abc71071fc932a1f6078a2a3b37e2d0299f21428ec525f534a1c7ac292502ad75cec78731bd6bcf170105c0d7c4dea0f9fa8e9d712b57d349f3295d1a7dc6bfc9cb23401c5415dc86092f2b042c7bf9f0506f2d20373ac134a824e1c3c984c68f54ead7c583e425b81b476affa4fd00c24680673ceeab8786583c2f24ab63fd7b038eac775729848467ba61724fa5a52f16bca19c816245e3d91a93784f280f72609bfcafa82f49a0ed783577e289a048e8b9b052cb812f5165d0d91afac6238a38116102d98f167bbe2314259a6656270745a0b1d847932be78fa2c20c7adb41bf7d46a9e9d75d69be65ff74f6f96fe009fb4a7dc1b2056bb6571f7cf11c6c01786b4f12beb7a4fc6d767cc4211277d3e2f6dd2674cbda5faadd21db62a7314da81759467a95768f4931dfa4ecd9dea90185e61300559f61f922c176ef30576e38760b673ea93e2aff807beadc9a402c6f98477b490b276e4bccdb7498effa999f066247ab667b49a0904f08ce084d062d29525de97f59eb6097b8e6105946b48e44242e054cef7650e7c4eb4c1a8f22fa8b748f016f227f281a510bcd1f3c1fd977c4b588c5e87a15c71faeba25cd8237412f3a06454cfab9b3dedcd8e96f6eb7059518b6419cd0c63990f33e1d3dcab146a16beced46504e61c995062b0c14b6b162aac5dc1559352389fdc576e6c31b4c64271a5abcacd69ceab428db4b924c8188ba6a1466e740e006af3ae61622e531c6eb24540e75f7e64d46f9e524d4f3fef9eb71410b0c62e8835ea9bfc0552c9596bffae69fceb2df0e424f54033dc5402a9b90fefe738ed0f72272b4d19a6a6de79f1e4254e3619777d1dce7c50c9d76b800bdfaf12ee876080367790999bad195276da0ab2d115cc9741b7b8e0bdda45b1fc9b8865ae1317f7db4c14331432bb55f75d886d2afbe0242a20be44a463aa7c8a4ede52b9e531e7d87b71f8c8f06980be049fa90af078ae93370b5227d0f06b31e2c0d684224b383d9e9bba5ef1e4273b44dd7f50cf55e3c673b8841596dce08857171ae1abfe4194abb4a12d1584df41d0bbffe63c8abc925c4e9575f07ec1c56640baa150c14dd4dc914344bfcd4444b9965dcc829fb01656e705e444644906a3adfbca90c0bd7bd500c2c2aa4b0c233047cf28c05ba8fd984f17fd2734f709758405e34b253f53baf340d291fcdfc5da66aa4daae5de83edeb65a05b970a656b34eb259ee5ba8e454bbb7f37a9d2cdc884a9c0c1a417aba98c6b1a104280fcce42ff45ee101b65dfa148f91b3c76b65592a8f8da2a85ebe0c2f8bb75e92f3f8a40376632b98dedce22843e29da5f0c3dc4c30f879d7b76d7250ae82e14e43626b83ab30fe0058e17086e24bdf6cf02278177e0ffb0ac3dd109e39fa033c47c0a3b438dcd1d0aa46e65e82dccdecdf67b7e099c87bbbb12876db239aa61dc6b9f585d5c5837755fee35720988e41e261936eb55de3d8edb6ad37cb49e1158a95e86a2c06592d392ea32921a4e5b2318da09b1e2e72a11202c964c2dd9d5f769e485da22616037ff6c0581cbc469a59db53f526eb2f667cd08731708eb1da2800b48dbb94d14d88de55019b9bdc94950a552936989735559e1929bfa6fd660e7dd794bd848f78fb2a7afde34747c412f66cb2e2c36d23410a5127e9cfcc5f686a53dcb96074d52b039fa699e9aeeda1465d87750deb0d65b6a1eec5ba9a9e63ebc4fb34a6f07d3f20671c0b801818bbe41d88a5080a722bc47f8c5496a6ef26a8a8c308af7f78bf851051d165bf62a220478663e6df1472a62b30a4bd749691bd4cd38efce6f9437837f35a2a32a20e00b49634dd506caad6a415c43faf31600e6efba0ea0167a2c7625316e98c64c9c86ddd771164858474b6f4728f62ee37a2ff5eb5ce128bebcd4cec461b2b816c825e46b17ac1ef2934e017a7249852f0bdd6fe0a22fffcb445e4bb8d7d52f615b1668155d58fd2b2e75eb345e1d07cfedfda11d242a47ef2a59a45545457cf9902eaca20c33f1f42801bfac05686c86b6b46bae79517626ef04e6e51098db8ad0ec508a757be6d13f9c9e9bc435a453454850fe1535993e1ca6259e24047c76aec3651075ef87b37c7e728bd1fa827d5900401d79609b0c025e8ff1e185e12548fc32850bb57ce26cbb49c092ff8a36b4633cde98f7fbdf164de6f133263756a6e098ddbf8c49e56c5c8e6764b78761469946fd722eda95e2b6d8651a39c9f53d815dd0b9be4d534c355ac5d2a15d4257d8c96aa58e21edc7ac339c1407c4255ef8399272189c3a452a87086ec38e24b6208240c34e227de1c9c10a035668ab4941c9c5bfe0bddb3517db0057e82ed8bfe2b8297aef2c901661070582b9411faaf6ae84044e3c671bc1a5d22e1a3de6de1609ce036c6af1602d838b716f0e093bf506d96070b9432f621befd02d3a5b9618c70ad88a5373b78fb658598d7ff4f998dcba87898bf220ae421f0efa656454270f3d596c7e395b2c5ca6004d3cb2e3242e6d544c95acb214dc2ceda77b67cb86c7c88c58072d1b6724e85b81da9f9b8dda8cbc48ce5649353a429bdd0c7512f694e24dc7603cecdd1c4669e54246a21e23967d195096dcda7c22d0882c3380cab1e8c7b04a45a551537120c8cc8046cf3e07d896d64b4f7ab77e745e71dffa2c302860e2acd4bec45f29ab99e36e2fff84cf15ca19d0e822250404f66c699239fbd766d55bea525b494a981d35cb5f9cb9293fc34873db85a930fcb19dbb4fa0e10b662d0cf83bea850784e730050bc282207b225efe4062a8f5d4f69f1ae7abd6a909603bfda27b1bf2c5008e9671fe2d2562d6b682e8a2c41476605d6cf19bb600e4ce78b54cc40487658af4f69301ca1b714b61a73b1ad9620e6cd4f3674fd3a8beca7284b099faedc5c9324b541c103d43732947c9ba02e91effd520e7eb8bf0c25587eafd6ed45e471854ba39780709d2d47addba5e68ed40ec639c47e33c9cf7192652f46ccc5ea7b1ae7530b34fbc9e4493b600ef12e671abfe80e482add7ffd375ed99366ceaa4abb417c09209f0b5aac718304c2cc4e032fa290875fcf6fdef5ffb87c188403ecdecaaeaef09b596b329a71fad201bebf65f8ca328075fb860b10f200e22bd38c0d7fcb48832542303675222c3f2f4ca120be6268e03456e9ea040c8016cab4c3da2e85cb1709589c63b71157e7b72dbf4d84e782a27a8158f66cce3f0a747ceb7800863a020bb4f20369477f19632a2a270d20c9cd0ce87dc3dc1d4bea54ad21d760fe86d293319770da2e6cb89ca1a0024c8641c26e8c797e6e0d780125c779df4cfb9c4a513794d48a7993f8ee259ac7ca8e248b66075510dd5091704693b7d9f47c0765090e98cc5d967d198ba05231979fbf87cdc15a572ae1d25d76e674b4a990ebe0f6a20cd2abe22d37908c7b021c70e547557b715e6b4f54d9296aa23799d472c0c79104e853bd603e358c86b016d749cd8d065e0f8cff9731e41e4b777a65be230e0f58fac008ad78c971ba9a0d129e4b19336d0d7261782ec9d8dae813be6aa5d180f886e8962ed0671a2b9a634215889d66be4b08ecd5ec8149010bf37eb3254676c5d0341528c21a4f96c73d0a845ab86e85c19717efdf91a1ad3a87c958ebc4bf0e6db7e247cb37a4171375ebbbf1632945575b01d02be4ecaa99696c7924189be7e19cf839b9588bdd40ae66a6fc48ae2f103946b9dc7f36d4da210aaad6327acd6f849f0e27a13d610700697941f0f5a5b10757262be5d83386e6d950c35c04f3eed3c69200ef66d3d6c32859aaed1c0a7b7282df632c1201c6b5b3f155e472b32f2a1125e3bd3830dbfc08084c9039237a179a7a3618b0a77e03120c4597615f896f9bf0c5990ece3385b2909b930b36b7c4637f6c23042d0c0616433d5663dfee908724347cdd088d789b1e2a15b086f84f54aeb2e443f8e6391242a0d1f89948cd03bee7ab30bef9c6260f2910dc81d6d234f744a5964d0692758da99cf894fae3c3571f2c42c25b9cf0a98d42be99127a37f912800b7e35a93102b54a0f9d0c78a2e98749942a3f70ec0ef3b5618244afcc02be2633f3edc6d868a2b14aa18857b8601d06a96de20afac7a7beb03e998cc07952c4c304d205973c0c7388768fdf741fc2cd85da801d38abcf5fd57361fc4bc7b7d8594620c25f62aad271f094f5168bbd98b6d9dc44ea3f576d4983908fbb817c8775022558036d114b2905810094b405e67ae23f0dc299ca06e1c87a7b41e967ac1dc377d471a3974dafdde2a9e19b1fe8ae16497cfb5da8a8d7c24b2df5505daf1f04a251fb5bd5cb1aa8daa5af92e44f6af40fcd72dfcfb73ff826486445a2f5f6b8296f84491d2879c751ef7fbdb0b650205a2920c0a6ed0a06076c5bf210f7f72ae60a07968b1e4b3581a89918602cab95d187beb9901bf85aa5e94e8f6ac04a902dbe24115", @ANYRESOCT=r0, @ANYBLOB="00b797c71300000000000000000000000000000000000000000058"], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r1, 0x58, &(0x7f0000000180)}, 0x10) socket$kcm(0x10, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107f7e, 0x1, @perf_config_ext={0x0, 0x3fff8000}, 0x4000, 0x32, 0x3, 0x7, 0xd, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2050, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe}, 0x100010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) socket$kcm(0x23, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x0, 0x0, &(0x7f00000003c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback=0x19, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, 0x0, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r0, @ANYRESOCT=r3], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x0, 0x46, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f00000003c0)=""/23, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) write$cgroup_subtree(r5, &(0x7f00000000c0)=ANY=[], 0x6a) socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) r8 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r8, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x2, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x16}, @multicast1}}}], 0x20}, 0x8000) sendmsg$inet(r8, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001640)="657573a2aaa76a045d877c1f6455a4bb7edaedaf2406cf034c55272afe4a39f80fec79674992739b3f1d46ab6fc6b89bc95d81d84d8c293613c9f90375e9112c7b5f65f27e0e214389e9034316b5f9b75aaba5bc0d8f2290bd36c6624c127b3433e77de62a43eb8eeecd139da8a083185e6bef3c0866b648a4f6432a60e58c664a7a3dcb4a1776e6fdb08687841d75cdf12f0d7578930caa6a450381441bd9023d757be41434aaa87208e070bae470b8ebe5b100c3d6ed01dbff6a6e13320627043926cb30d2233291a5d9a15bfb760df9fabaa9f450747ff1cf93258dfbd2132d00516d8edfcb6b6352eb385866585cb371846f31532e653ccf7bc842c81206c8e80530a748501b2da5fedb1bcd0e53d09826aeb25c7ed8f3e1b219649baf3fc9ccb0da4aa1bdefca77ca97aa0c50d0485413936b83a20158cc3795456df09a917751c6e9555988b80b26f36bc8294fa37aca1b0c570e93588c9c25f4d72f01ba4bb874685628f0b64d71eaa9d17b489826ada40cede73bad175b9e956942b581fb7c52added185ce2f24422c0bf33ff32bb0e9e50b697f3257eb76134076bcf59767d12dc2cfa9c6e4544b55adc09a330a873c3a5ac8e28dda7fe398be13b3949ddaa7e25fc9652b783a95db047a3477a64dee6c4eadccbb48e9a525539c51603f8fdf1a8af0b9968ea399b7d787ead48a43bb8f83ced7de9dbe9d29a04438103179d2cc91cc15a5f3b5c589594d5232f8e956776547946bd38ea993b2cd1b1290ba255ef4a1a97055ad51cff35b804ef472a9f60bfedf3af92fc51e9b9e5580d4b12ac5fae4d8a4b9761b1c72a7282fe1cbc90767ec3266aef7ccf306ba8fc5161c74c3765b6b1ad5ab007b9892aedca8fadc7b37597546de787034e2c98a34118ef63680882759f4c3cb654e050b1303d3c9ded614e54fc833992b3d376e9f581d2ef7064ff268359a022b0df7d0679a54746150528ce08d47a05dd0e1f481b0f0b27f25e8b7b0a17827841cd7711e84dae20d98a76e5c6ea29b7a676bc4afb5729705e235ab7d41cf6dc39a208e806db5077326345bff9910e8b591d9c45f506f57f0392c41dfbe0e788299582f1dc2323da8ba93a7141061c8f78f81518c59c41a289b98d83a4575e9a509c0c615cd39ae76d2749378047a3b4ca1078880a0620088c17661322632882c77f751c60443e27df36020a72081b8e32f796f103412721158831ad7658a1299015a8a28ebc4cfd1414f4f4dcdef109c2bd75b7a8d83447e382724ec1076237c85b311df47a4fa7ad981e0f3918a093855e9968364c9bd1f385fccf076bc9e61558ddbe969742a860599a87e045b8fd95b0eb11b1f0fbdcb8a4008da5277f071d819791a2f54fc9f676196cf0b3f0e91c6d1586d9bd687c1df1e759e80b0cea66ea75eef5f9e57a36f61670268b8e2ad39561525e73fe2c942d0fb3f53e46695762c0dcee78ca9b2b81cba1c5fa2a736954dedcdf869149c7220be1f4ea53ccd72c3f8f7d9483068d668542023ea9a3d415a2006a5ac5439668c0a211c9d3212d38cdc13c35bf184579955fff0c35b2870af088340d60f744a0806135ce50a123182ab68fa8a89d858eceeed660f1ec5671d6d1be21022c372eabfa4fb1ebe03f7ab2650ec3679507d17611d1cd694be1adb33e591716af45eb1269969aca77be07d18784e2dd1240b6ac67be842afa51ce452f106de37a1e271b37e2904d6276c09eb5915fc8af524ff86e652c2acd33b634d8ba9268b7c278ebb8a92d7a45d97d2e45b4064b55ed5c56d3ed11adc0c", 0xfdef}], 0x1}, 0x48800) sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000740)="d8000000200081044e81f782db44b90402000000e8fe55a11800150006001c0000000e120900030020000401a80016000a0015400600000003080000004dcf5c0468c18ab35d6e7016bb234841ef52b49816277ce06bf600000069438e6fb599e0ced72a6ba86cf917cbec4c2ee5a7adf4090000001fb791643a5ee4ce1b10d414f00004d9db22fe7c9f8775730d16a4683f1aea4edab57a502581ccca9e020000000100000040fad95667e006d8df969b3ef35ce34d4a13821f4fbb9ad809d561cdce81ed0bffece0b42a00"/216, 0xd8}], 0x1}, 0x30008850) 9.327670972s ago: executing program 2 (id=1999): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac59}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) socket$kcm(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)='syzkaller\x00'}, 0x51) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x628200, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0x60}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000001d711835000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x81000600, 0xe80, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 9.297860272s ago: executing program 0 (id=2001): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000"], 0x0, 0x26, 0x0, 0x8}, 0x28) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x5452, &(0x7f0000000100)) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000780)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc0080019000300020006000c0000800000005883c64d251e638294ff0051f60a84c9f4d4938037e7000000000000000000d1c566a000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40d80d4) r3 = socket$kcm(0x29, 0x7, 0x0) recvmsg$kcm(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000180)=""/97, 0x61}, {&(0x7f0000000300)=""/192, 0xc0}, {&(0x7f00000003c0)=""/10, 0xa}], 0x3, &(0x7f0000000440)=""/144, 0x90}, 0x1) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x3000c0c0) 6.145433599s ago: executing program 0 (id=2003): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r4) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x4}, 0x50) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r7) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000014"], 0x48) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r8) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f0000000180), 0x127) close(r6) 6.12268808s ago: executing program 2 (id=2004): perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x9b, 0x22, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x0, 0x4}, 0x103140, 0x400000000ca, 0x0, 0x5, 0xc2a, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000001000)='ns/pid_for_children\x00') syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/time_for_children\x00') perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x140, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/uts\x00') recvmsg$unix(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b701000000000000850000007500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x94) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0xa, 0x922000000003, 0x11) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r3], 0x12) 5.801037523s ago: executing program 0 (id=2007): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000007a000000b500000095"], &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f00000000c0)='memory.current\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x7, 0x0, 0x1, 0x0, 0x0, 0x81, 0x86e46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x4d3f}, 0x18342, 0x8, 0x0, 0x1, 0x0, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0x4000000000000004}, 0x0, 0x1, 0xffffffffffffffff, 0x2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x45, '\x00', 0x0, @fallback=0x22}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1d, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x37}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan1\x00', 0x800}) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f0000000080)) 5.787253963s ago: executing program 1 (id=2008): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x23, 0x0, 0x61, 0x14, 0x94}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) 5.656323435s ago: executing program 3 (id=2009): r0 = socket$kcm(0xa, 0x4, 0x3a) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001b40)=ANY=[@ANYBLOB="0100000004000000040000000200000005000000", @ANYRES32=0x1, @ANYBLOB="02000000f5e9180cde303f88ef6d6f175f9018c7b2f4000000000300", @ANYBLOB="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", @ANYRESOCT=r0, @ANYBLOB="00b797c71300000000000000000000000000000000000000000058"], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r1, 0x58, &(0x7f0000000180)}, 0x10) socket$kcm(0x10, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107f7e, 0x1, @perf_config_ext={0x0, 0x3fff8000}, 0x4000, 0x32, 0x3, 0x7, 0xd, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2050, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe}, 0x100010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) socket$kcm(0x23, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, 0x0, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r0, @ANYRESOCT=r3], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x0, 0x46, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f00000003c0)=""/23, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) write$cgroup_subtree(r5, &(0x7f00000000c0)=ANY=[], 0x6a) socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) r8 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r8, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x2, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x16}, @multicast1}}}], 0x20}, 0x8000) sendmsg$inet(r8, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001640)="657573a2aaa76a045d877c1f6455a4bb7edaedaf2406cf034c55272afe4a39f80fec79674992739b3f1d46ab6fc6b89bc95d81d84d8c293613c9f90375e9112c7b5f65f27e0e214389e9034316b5f9b75aaba5bc0d8f2290bd36c6624c127b3433e77de62a43eb8eeecd139da8a083185e6bef3c0866b648a4f6432a60e58c664a7a3dcb4a1776e6fdb08687841d75cdf12f0d7578930caa6a450381441bd9023d757be41434aaa87208e070bae470b8ebe5b100c3d6ed01dbff6a6e13320627043926cb30d2233291a5d9a15bfb760df9fabaa9f450747ff1cf93258dfbd2132d00516d8edfcb6b6352eb385866585cb371846f31532e653ccf7bc842c81206c8e80530a748501b2da5fedb1bcd0e53d09826aeb25c7ed8f3e1b219649baf3fc9ccb0da4aa1bdefca77ca97aa0c50d0485413936b83a20158cc3795456df09a917751c6e9555988b80b26f36bc8294fa37aca1b0c570e93588c9c25f4d72f01ba4bb874685628f0b64d71eaa9d17b489826ada40cede73bad175b9e956942b581fb7c52added185ce2f24422c0bf33ff32bb0e9e50b697f3257eb76134076bcf59767d12dc2cfa9c6e4544b55adc09a330a873c3a5ac8e28dda7fe398be13b3949ddaa7e25fc9652b783a95db047a3477a64dee6c4eadccbb48e9a525539c51603f8fdf1a8af0b9968ea399b7d787ead48a43bb8f83ced7de9dbe9d29a04438103179d2cc91cc15a5f3b5c589594d5232f8e956776547946bd38ea993b2cd1b1290ba255ef4a1a97055ad51cff35b804ef472a9f60bfedf3af92fc51e9b9e5580d4b12ac5fae4d8a4b9761b1c72a7282fe1cbc90767ec3266aef7ccf306ba8fc5161c74c3765b6b1ad5ab007b9892aedca8fadc7b37597546de787034e2c98a34118ef63680882759f4c3cb654e050b1303d3c9ded614e54fc833992b3d376e9f581d2ef7064ff268359a022b0df7d0679a54746150528ce08d47a05dd0e1f481b0f0b27f25e8b7b0a17827841cd7711e84dae20d98a76e5c6ea29b7a676bc4afb5729705e235ab7d41cf6dc39a208e806db5077326345bff9910e8b591d9c45f506f57f0392c41dfbe0e788299582f1dc2323da8ba93a7141061c8f78f81518c59c41a289b98d83a4575e9a509c0c615cd39ae76d2749378047a3b4ca1078880a0620088c17661322632882c77f751c60443e27df36020a72081b8e32f796f103412721158831ad7658a1299015a8a28ebc4cfd1414f4f4dcdef109c2bd75b7a8d83447e382724ec1076237c85b311df47a4fa7ad981e0f3918a093855e9968364c9bd1f385fccf076bc9e61558ddbe969742a860599a87e045b8fd95b0eb11b1f0fbdcb8a4008da5277f071d819791a2f54fc9f676196cf0b3f0e91c6d1586d9bd687c1df1e759e80b0cea66ea75eef5f9e57a36f61670268b8e2ad39561525e73fe2c942d0fb3f53e46695762c0dcee78ca9b2b81cba1c5fa2a736954dedcdf869149c7220be1f4ea53ccd72c3f8f7d9483068d668542023ea9a3d415a2006a5ac5439668c0a211c9d3212d38cdc13c35bf184579955fff0c35b2870af088340d60f744a0806135ce50a123182ab68fa8a89d858eceeed660f1ec5671d6d1be21022c372eabfa4fb1ebe03f7ab2650ec3679507d17611d1cd694be1adb33e591716af45eb1269969aca77be07d18784e2dd1240b6ac67be842afa51ce452f106de37a1e271b37e2904d6276c09eb5915fc8af524ff86e652c2acd33b634d8ba9268b7c278ebb8a92d7a45d97d2e45b4064b55ed5c56d3ed11adc0c", 0xfdef}], 0x1}, 0x48800) sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000740)="d8000000200081044e81f782db44b90402000000e8fe55a11800150006001c0000000e120900030020000401a80016000a0015400600000003080000004dcf5c0468c18ab35d6e7016bb234841ef52b49816277ce06bf600000069438e6fb599e0ced72a6ba86cf917cbec4c2ee5a7adf4090000001fb791643a5ee4ce1b10d414f00004d9db22fe7c9f8775730d16a4683f1aea4edab57a502581ccca9e020000000100000040fad95667e006d8df969b3ef35ce34d4a13821f4fbb9ad809d561cdce81ed0bffece0b42a00"/216, 0xd8}], 0x1}, 0x30008850) 5.610048905s ago: executing program 1 (id=2010): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xc000000, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d487277b9b108b4ab502", @ANYRES32, @ANYRES8=r1], 0xfe33) 5.526509166s ago: executing program 2 (id=2011): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000"], 0x0, 0x26, 0x0, 0x8}, 0x28) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x5452, &(0x7f0000000100)) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000780)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc0080019000300020006000c0000800000005883c64d251e638294ff0051f60a84c9f4d4938037e7000000000000000000d1c566a000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40d80d4) r3 = socket$kcm(0x29, 0x7, 0x0) recvmsg$kcm(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000180)=""/97, 0x61}, {&(0x7f0000000300)=""/192, 0xc0}, {&(0x7f00000003c0)=""/10, 0xa}], 0x3, &(0x7f0000000440)=""/144, 0x90}, 0x1) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x3000c0c0) 5.316281109s ago: executing program 1 (id=2012): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac59}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) socket$kcm(0x11, 0x2, 0x300) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x628200, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0x60}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000001d711835000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x81000600, 0xe80, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.298594018s ago: executing program 3 (id=2013): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000004000000000000000000000300000000030000000300000000000101010000000000000800000000010000000100000506000000010000000200000000000000005f"], &(0x7f0000001540)=""/4096, 0x58, 0x1000, 0xa}, 0x28) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[r0], 0x0, 0x10, 0x9}, 0x94) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x2, 0x1, 0x84) socket$kcm(0x29, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(r1, 0x0, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r3, &(0x7f0000000040), 0x0}, 0x20) r4 = socket$kcm(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x18, &(0x7f0000000100), 0x120) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x800, 0x0, 0x0, 0x0, 0x7, 0xffff, 0x0, 0x0, 0x0, 0xe000000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 2.154273395s ago: executing program 3 (id=2014): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000001000000000000005c100085000000a00000009500000000"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r0, 0x2000012, 0xe, 0x2000, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 2.113042395s ago: executing program 1 (id=2015): r0 = socket$kcm(0xa, 0x4, 0x3a) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001b40)=ANY=[@ANYBLOB="0100000004000000040000000200000005000000", @ANYRES32=0x1, @ANYBLOB="02000000f5e9180cde303f88ef6d6f175f9018c7b2f4000000000300", @ANYBLOB="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", @ANYRESOCT=r0, @ANYBLOB="00b797c71300000000000000000000000000000000000000000058"], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r1, 0x58, &(0x7f0000000180)}, 0x10) socket$kcm(0x10, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107f7e, 0x1, @perf_config_ext={0x0, 0x3fff8000}, 0x4000, 0x32, 0x3, 0x7, 0xd, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2050, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe}, 0x100010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) socket$kcm(0x23, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x0, 0x0, &(0x7f00000003c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback=0x19, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, 0x0, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r0, @ANYRESOCT=r3], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x0, 0x46, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f00000003c0)=""/23, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) write$cgroup_subtree(r5, &(0x7f00000000c0)=ANY=[], 0x6a) socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) r8 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r8, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x2, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x16}, @multicast1}}}], 0x20}, 0x8000) sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000740)="d8000000200081044e81f782db44b90402000000e8fe55a11800150006001c0000000e120900030020000401a80016000a0015400600000003080000004dcf5c0468c18ab35d6e7016bb234841ef52b49816277ce06bf600000069438e6fb599e0ced72a6ba86cf917cbec4c2ee5a7adf4090000001fb791643a5ee4ce1b10d414f00004d9db22fe7c9f8775730d16a4683f1aea4edab57a502581ccca9e020000000100000040fad95667e006d8df969b3ef35ce34d4a13821f4fbb9ad809d561cdce81ed0bffece0b42a00"/216, 0xd8}], 0x1}, 0x30008850) 1.836347049s ago: executing program 3 (id=2016): r0 = socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x8, 0x63f0}, 0x9000, 0x5, 0x43a1bd76, 0x7, 0x800009, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x3a) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r2 = socket$kcm(0x1e, 0x4, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0x101d0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x5, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0xfffffffffffffe3d}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89a0, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x2, 0x1024, &(0x7f0000001540)=""/4132, 0x0, 0x5}, 0x94) socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b11d25a806f8c6394f90524fc60040f030048000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 415.107686ms ago: executing program 2 (id=2017): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r4) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x4}, 0x50) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r7) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000014"], 0x48) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r8) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f0000000180), 0x127) close(r6) 404.948355ms ago: executing program 1 (id=2018): ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f00000007c0)=ANY=[], &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0xc00000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000004000000000900000500000028000000", @ANYRES32, @ANYBLOB="00000000000000000044fa45492ce259687a89d4", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000050000850000001b000000b700000018000000850000005000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r5}, 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000f80)={r5}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x62}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=0x1, @ANYBLOB="2e00000010000000", @ANYRES32, @ANYBLOB="075776483836b5663c380a5bc998c71aaebb452ce00aa0a1449cbf131cc1cb0973b18928971576001e87516f91e014ad9e4d5bc9d76c942f"], 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r6 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@ifindex, 0x13, 0x1, 0x46cb, &(0x7f0000000040)=[0x0], 0x1, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)}, 0x40) r7 = socket$kcm(0x29, 0x5, 0x0) sendmsg$inet(r7, 0x0, 0x48014) sendmsg(r7, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003140)}, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100), 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) ioctl$SIOCSIFHWADDR(r3, 0x541b, &(0x7f0000000180)={'veth0_virt_wifi\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) 397.627326ms ago: executing program 3 (id=2019): perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x9b, 0x22, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x0, 0x4}, 0x103140, 0x400000000ca, 0x0, 0x5, 0xc2a, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000001000)='ns/pid_for_children\x00') syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/time_for_children\x00') perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x140, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/uts\x00') recvmsg$unix(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b701000000000000850000007500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x94) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0xa, 0x922000000003, 0x11) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r3], 0x12) 347.342616ms ago: executing program 0 (id=2020): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f91424fc60040f030047000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x33b, 0x5, 0x7, 0x0, 0xffffffffffffffff, 0xcd5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x5, 0x2}, 0x50) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r3}, @call={0x85, 0x0, 0x0, 0xc0}]}, &(0x7f0000001680)='syzkaller\x00'}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={r4, 0x58, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x14, 0x18, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5251, 0x0, 0x0, 0x0, 0x101}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_idx={0x18, 0x9, 0x5, 0x0, 0x5}, @map_val={0x18, 0x9, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x7c4}, @ldst={0x3, 0x1, 0x2, 0xa, 0x0, 0xfffffffffffffff4, 0x8}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xc}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x8, 0xcd, &(0x7f0000000240)=""/205, 0x41000, 0x10, '\x00', r5, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x1, 0x2, 0xffffffff, 0x101}, 0x10, 0x0, r0, 0xa, &(0x7f0000000440), &(0x7f0000000480)=[{0x4, 0x4, 0xd, 0x8}, {0x3, 0x3, 0x2, 0x6}, {0x5, 0x4, 0xc, 0x2}, {0x4, 0x1, 0xd, 0x4}, {0x2, 0x1, 0xb}, {0x2, 0x5, 0x9, 0x5}, {0x3, 0x2, 0x3, 0x6}, {0x2, 0x2, 0x8, 0x5}, {0x1, 0x4, 0x4, 0xb}, {0x4, 0x2, 0x10, 0xc}], 0x10, 0x3}, 0x94) 161.139969ms ago: executing program 1 (id=2021): r0 = socket$kcm(0xa, 0x4, 0x3a) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001b40)=ANY=[@ANYBLOB="0100000004000000040000000200000005000000", @ANYRES32=0x1, @ANYBLOB="02000000f5e9180cde303f88ef6d6f175f9018c7b2f4000000000300", @ANYBLOB="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", @ANYRESOCT=r0, @ANYBLOB="00b797c71300000000000000000000000000000000000000000058"], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r1, 0x58, &(0x7f0000000180)}, 0x10) socket$kcm(0x10, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107f7e, 0x1, @perf_config_ext={0x0, 0x3fff8000}, 0x4000, 0x32, 0x3, 0x7, 0xd, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2050, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe}, 0x100010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) socket$kcm(0x23, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, 0x0, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r0, @ANYRESOCT=r3], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x0, 0x46, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f00000003c0)=""/23, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) write$cgroup_subtree(r5, &(0x7f00000000c0)=ANY=[], 0x6a) socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) r8 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r8, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x2, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x16}, @multicast1}}}], 0x20}, 0x8000) sendmsg$inet(r8, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001640)="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", 0xfdef}], 0x1}, 0x48800) sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000740)="d8000000200081044e81f782db44b90402000000e8fe55a11800150006001c0000000e120900030020000401a80016000a0015400600000003080000004dcf5c0468c18ab35d6e7016bb234841ef52b49816277ce06bf600000069438e6fb599e0ced72a6ba86cf917cbec4c2ee5a7adf4090000001fb791643a5ee4ce1b10d414f00004d9db22fe7c9f8775730d16a4683f1aea4edab57a502581ccca9e020000000100000040fad95667e006d8df969b3ef35ce34d4a13821f4fbb9ad809d561cdce81ed0bffece0b42a00"/216, 0xd8}], 0x1}, 0x30008850) 139.921859ms ago: executing program 2 (id=2022): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000004000000000000000000000300000000030000000300000000000101010000000000000800000000010000000100000506000000010000000200000000000000005f"], &(0x7f0000001540)=""/4096, 0x58, 0x1000, 0xa}, 0x28) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[r0], 0x0, 0x10, 0x9}, 0x94) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x2, 0x1, 0x84) socket$kcm(0x29, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(r1, 0x0, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r3, &(0x7f0000000040), 0x0}, 0x20) r4 = socket$kcm(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000180)={&(0x7f0000000140), 0x1, 0x0}, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x18, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x800, 0x0, 0x0, 0x0, 0x7, 0xffff, 0x0, 0x0, 0x0, 0xe000000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 36.32819ms ago: executing program 0 (id=2023): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac59}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) socket$kcm(0x11, 0x2, 0x300) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x628200, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0x60}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000001d711835000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x81000600, 0xe80, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 3 (id=2024): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x180, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'netpci0\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0xffffffffffffffff) ioctl$TUNGETVNETBE(r0, 0x800454df, &(0x7f0000000040)=0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x8, 0x8, 0x5}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x11}, 0x20) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="d8000000180085054e81f783db4cb9040a1d080006007c02e8fc55a10a00150006b6142603600ef10700010000000101a8000500fec0ffff05000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb01000100000000009e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffff46f5098754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1, 0x0, 0x0, 0x12000000}, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0xa) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x54, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x4, 0xc, 0xb, 0xffffffe9}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000001c0)={'nicvf0\x00', @remote}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x2, &(0x7f0000000300)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}], &(0x7f0000000400)='GPL\x00', 0xc5fa, 0x5d, &(0x7f0000000440)=""/93, 0x41100, 0xec212174615ab4b7, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000580)=[r1], &(0x7f00000005c0)=[{0x5, 0x2, 0x10, 0xc}], 0x10, 0xe7}, 0x94) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x107220, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r5 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r6}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r7) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0xe40, 0xe80, &(0x7f00000002c0)="f3fffeffffffa000", &(0x7f0000000180), 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) kernel console output (not intermixed with test programs): tover after parsing attributes in process `syz.3.924'. [ 365.116476][ T8719] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.926'. [ 365.389179][ T8722] netlink: 'syz.1.927': attribute type 21 has an invalid length. [ 365.417706][ T8722] netlink: 156 bytes leftover after parsing attributes in process `syz.1.927'. [ 366.351420][ T8736] netlink: 'syz.0.931': attribute type 21 has an invalid length. [ 366.362077][ T8736] netlink: 156 bytes leftover after parsing attributes in process `syz.0.931'. [ 367.029245][ T8752] netlink: 'syz.1.935': attribute type 21 has an invalid length. [ 367.045395][ T8754] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.936'. [ 367.070302][ T8752] netlink: 156 bytes leftover after parsing attributes in process `syz.1.935'. [ 367.185759][ T8757] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.937'. [ 370.159032][ T8767] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.940'. [ 370.199542][ T8769] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.938'. [ 374.691405][ T8795] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.949'. [ 374.752807][ T8798] netlink: 'syz.3.951': attribute type 21 has an invalid length. [ 374.762038][ T8799] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.950'. [ 374.786612][ T8798] netlink: 156 bytes leftover after parsing attributes in process `syz.3.951'. [ 375.450568][ T8812] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.955'. [ 375.863552][ T8818] netlink: 'syz.3.957': attribute type 21 has an invalid length. [ 375.886293][ T8818] netlink: 128 bytes leftover after parsing attributes in process `syz.3.957'. [ 375.902500][ T8818] netlink: 'syz.3.957': attribute type 5 has an invalid length. [ 375.919553][ T8818] netlink: 3 bytes leftover after parsing attributes in process `syz.3.957'. [ 378.840279][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.849215][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.482152][ T8843] netlink: 132 bytes leftover after parsing attributes in process `syz.2.964'. [ 379.518727][ T8848] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.966'. [ 379.782610][ T8853] netlink: 'syz.0.968': attribute type 10 has an invalid length. [ 379.837364][ T8853] netlink: 2 bytes leftover after parsing attributes in process `syz.0.968'. [ 379.892902][ T8853] hsr0: entered promiscuous mode [ 379.933063][ T8853] bridge0: port 3(hsr0) entered blocking state [ 380.006100][ T8853] bridge0: port 3(hsr0) entered disabled state [ 380.015745][ T8853] hsr0: entered allmulticast mode [ 380.020890][ T8853] hsr_slave_0: entered allmulticast mode [ 380.045617][ T8853] hsr_slave_1: entered allmulticast mode [ 380.065067][ T8853] bridge0: port 3(hsr0) entered blocking state [ 380.071864][ T8853] bridge0: port 3(hsr0) entered forwarding state [ 380.325020][ T8861] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.970'. [ 381.521952][ T8869] syzkaller0: entered promiscuous mode [ 381.535813][ T8869] syzkaller0: entered allmulticast mode [ 384.417010][ T8895] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.981'. [ 388.426459][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 388.482864][ T8906] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.983'. [ 389.560508][ T8912] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.985'. [ 390.457380][ T8893] IPv6: Can't replace route, no match found [ 390.464364][ T8902] netlink: 'syz.3.982': attribute type 10 has an invalid length. [ 390.479183][ T8902] netlink: 2 bytes leftover after parsing attributes in process `syz.3.982'. [ 390.490741][ T8902] hsr0: entered promiscuous mode [ 390.499756][ T8902] bridge0: port 3(hsr0) entered blocking state [ 390.507280][ T8902] bridge0: port 3(hsr0) entered disabled state [ 390.513699][ T8902] hsr0: entered allmulticast mode [ 390.519320][ T8902] hsr_slave_0: entered allmulticast mode [ 390.525027][ T8902] hsr_slave_1: entered allmulticast mode [ 390.559169][ T8902] bridge0: port 3(hsr0) entered blocking state [ 390.565595][ T8902] bridge0: port 3(hsr0) entered forwarding state [ 390.918550][ T8930] syzkaller0: entered promiscuous mode [ 390.924345][ T8930] syzkaller0: entered allmulticast mode [ 390.934431][ T8927] netlink: 'syz.2.989': attribute type 21 has an invalid length. [ 391.162619][ T8934] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.993'. [ 392.255845][ T1000] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 394.299604][ T8943] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.995'. [ 396.463023][ T8949] tap0: tun_chr_ioctl cmd 1074025681 [ 396.472468][ T8950] tap0: tun_chr_ioctl cmd 35106 [ 396.483041][ T8952] netlink: 'syz.0.998': attribute type 5 has an invalid length. [ 396.503529][ T8952] netlink: 128 bytes leftover after parsing attributes in process `syz.0.998'. [ 396.617953][ T8955] netlink: 'syz.3.999': attribute type 4 has an invalid length. [ 396.627840][ T8955] netlink: 152 bytes leftover after parsing attributes in process `syz.3.999'. [ 396.984804][ T8966] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1003'. [ 397.193056][ T8973] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1006'. [ 400.110984][ T8976] FAULT_INJECTION: forcing a failure. [ 400.110984][ T8976] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 400.145816][ T8976] CPU: 0 PID: 8976 Comm: syz.3.1007 Not tainted syzkaller #0 [ 400.153367][ T8976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 400.163463][ T8976] Call Trace: [ 400.166791][ T8976] [ 400.169772][ T8976] dump_stack_lvl+0x18c/0x250 [ 400.174520][ T8976] ? show_regs_print_info+0x20/0x20 [ 400.179781][ T8976] ? load_image+0x420/0x420 [ 400.184343][ T8976] ? __might_fault+0xaa/0x120 [ 400.189067][ T8976] ? __lock_acquire+0x7d40/0x7d40 [ 400.194154][ T8976] should_fail_ex+0x39d/0x4d0 [ 400.198899][ T8976] _copy_from_user+0x2f/0xe0 [ 400.203549][ T8976] btf_new_fd+0x366/0x9f0 [ 400.207940][ T8976] ? bpf_btf_show_fdinfo+0x80/0x80 [ 400.213110][ T8976] ? capable+0x88/0xe0 [ 400.217251][ T8976] __sys_bpf+0x670/0x890 [ 400.221545][ T8976] ? bpf_link_show_fdinfo+0x390/0x390 [ 400.226983][ T8976] ? lock_chain_count+0x20/0x20 [ 400.231889][ T8976] __x64_sys_bpf+0x7c/0x90 [ 400.236352][ T8976] do_syscall_64+0x55/0xa0 [ 400.240812][ T8976] ? clear_bhb_loop+0x40/0x90 [ 400.245537][ T8976] ? clear_bhb_loop+0x40/0x90 [ 400.250263][ T8976] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 400.256209][ T8976] RIP: 0033:0x7fb30239cdd9 [ 400.260667][ T8976] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 400.280330][ T8976] RSP: 002b:00007fb303276028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 400.288838][ T8976] RAX: ffffffffffffffda RBX: 00007fb302615fa0 RCX: 00007fb30239cdd9 [ 400.297135][ T8976] RDX: 0000000000000028 RSI: 0000200000000000 RDI: 0000000000000012 [ 400.305159][ T8976] RBP: 00007fb303276090 R08: 0000000000000000 R09: 0000000000000000 [ 400.313167][ T8976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 400.321167][ T8976] R13: 00007fb302616038 R14: 00007fb302615fa0 R15: 00007fff9413a3b8 [ 400.329195][ T8976] [ 400.464669][ T8983] syzkaller0: entered promiscuous mode [ 400.485078][ T8983] syzkaller0: entered allmulticast mode [ 400.504808][ T8987] dvmrp1: tun_chr_ioctl cmd 1074025681 [ 401.059047][ T9007] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1016'. [ 401.560712][ T9011] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1017'. [ 406.082244][ T9001] netlink: 'syz.1.1015': attribute type 21 has an invalid length. [ 406.091722][ T9001] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1015'. [ 406.773244][ T9034] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1025'. [ 406.784048][ T9024] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1020'. [ 406.935695][ T9040] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1026'. [ 407.671448][ T9048] netlink: 'syz.3.1028': attribute type 21 has an invalid length. [ 407.685769][ T9048] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1028'. [ 408.024687][ T9051] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.1029'. [ 408.042492][ T9054] syzkaller0: entered promiscuous mode [ 408.050600][ T9054] syzkaller0: entered allmulticast mode [ 408.156848][ T9056] netlink: 'syz.1.1029': attribute type 10 has an invalid length. [ 410.137497][ T9056] veth0_vlan: left promiscuous mode [ 410.171044][ T9056] veth0_vlan: entered promiscuous mode [ 410.211673][ T9056] team0: Device veth0_vlan failed to register rx_handler [ 410.335077][ T9057] netlink: 'syz.1.1029': attribute type 4 has an invalid length. [ 410.349713][ T9057] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1029'. [ 410.364981][ T9057] wlan1: mtu less than device minimum [ 412.252134][ T9078] netlink: 'syz.3.1036': attribute type 4 has an invalid length. [ 412.312263][ T9082] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1037'. [ 412.345611][ T9078] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1036'. [ 412.429633][ T9085] netlink: 'syz.0.1039': attribute type 4 has an invalid length. [ 412.481906][ T9085] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1039'. [ 412.544921][ T9086] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1038'. [ 413.576812][ T9096] netlink: 'syz.2.1042': attribute type 21 has an invalid length. [ 413.602026][ T9096] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1042'. [ 414.624472][ T9106] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1045'. [ 414.634307][ T9106] openvswitch: netlink: IP tunnel attribute has 3040 unknown bytes. [ 416.118331][ T9110] syzkaller0: entered promiscuous mode [ 416.123920][ T9110] syzkaller0: entered allmulticast mode [ 416.166072][ T9117] netlink: 'syz.0.1048': attribute type 4 has an invalid length. [ 416.173900][ T9117] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1048'. [ 416.440070][ T9123] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1050'. [ 416.622634][ T9127] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1051'. [ 420.416985][ T991] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 423.165200][ T9151] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1059'. [ 423.612902][ T9158] netlink: 'syz.1.1060': attribute type 29 has an invalid length. [ 424.121563][ T9164] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1062'. [ 424.275861][ T49] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 424.801578][ T9168] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1063'. [ 425.402215][ T9171] netlink: 'syz.2.1064': attribute type 4 has an invalid length. [ 425.410558][ T9171] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1064'. [ 425.555497][ T9132] netlink: 'syz.0.1055': attribute type 21 has an invalid length. [ 425.567382][ T9173] netlink: 'syz.2.1065': attribute type 29 has an invalid length. [ 425.579982][ T9158] netlink: 'syz.1.1060': attribute type 29 has an invalid length. [ 425.602452][ T9173] netlink: 'syz.2.1065': attribute type 29 has an invalid length. [ 425.798674][ T9180] netlink: 'syz.2.1065': attribute type 29 has an invalid length. [ 425.823263][ T9180] netlink: 'syz.2.1065': attribute type 29 has an invalid length. [ 425.870783][ T9181] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1066'. [ 429.177989][ T9194] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1070'. [ 429.228879][ T9196] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1071'. [ 429.250834][ T9195] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1072'. [ 429.270904][ T9194] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1070'. [ 429.306783][ T9197] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1070'. [ 430.192669][ T9205] netlink: 'syz.1.1074': attribute type 4 has an invalid length. [ 430.225665][ T9205] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1074'. [ 430.314329][ T5789] Bluetooth: hci2: unexpected event 0x17 length: 15 > 6 [ 430.550457][ T9216] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1077'. [ 431.057005][ T9226] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1081'. [ 431.127017][ T9225] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1081'. [ 431.412859][ T9228] FAULT_INJECTION: forcing a failure. [ 431.412859][ T9228] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 431.459087][ T9228] CPU: 0 PID: 9228 Comm: syz.3.1083 Not tainted syzkaller #0 [ 431.466597][ T9228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 431.476714][ T9228] Call Trace: [ 431.480069][ T9228] [ 431.483056][ T9228] dump_stack_lvl+0x18c/0x250 [ 431.487808][ T9228] ? show_regs_print_info+0x20/0x20 [ 431.493085][ T9228] ? load_image+0x420/0x420 [ 431.497655][ T9228] ? __might_fault+0xaa/0x120 [ 431.502392][ T9228] ? __lock_acquire+0x7d40/0x7d40 [ 431.507518][ T9228] should_fail_ex+0x39d/0x4d0 [ 431.512266][ T9228] _copy_from_user+0x2f/0xe0 [ 431.516917][ T9228] ___sys_recvmsg+0x176/0x590 [ 431.521656][ T9228] ? __sys_recvmsg+0x2a0/0x2a0 [ 431.526482][ T9228] ? trace_call_bpf+0xc3/0x6c0 [ 431.531318][ T9228] ? trace_call_bpf+0x5e9/0x6c0 [ 431.536246][ T9228] ? __fget_files+0x43d/0x4b0 [ 431.541079][ T9228] __x64_sys_recvmsg+0x20c/0x2e0 [ 431.546078][ T9228] ? ___sys_recvmsg+0x590/0x590 [ 431.551005][ T9228] ? lockdep_hardirqs_on+0x98/0x150 [ 431.556268][ T9228] do_syscall_64+0x55/0xa0 [ 431.560827][ T9228] ? clear_bhb_loop+0x40/0x90 [ 431.565580][ T9228] ? clear_bhb_loop+0x40/0x90 [ 431.570321][ T9228] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 431.576272][ T9228] RIP: 0033:0x7fb30239cdd9 [ 431.580742][ T9228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 431.600407][ T9228] RSP: 002b:00007fb303276028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 431.608893][ T9228] RAX: ffffffffffffffda RBX: 00007fb302615fa0 RCX: 00007fb30239cdd9 [ 431.616923][ T9228] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000005 [ 431.625039][ T9228] RBP: 00007fb303276090 R08: 0000000000000000 R09: 0000000000000000 [ 431.633056][ T9228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 431.641070][ T9228] R13: 00007fb302616038 R14: 00007fb302615fa0 R15: 00007fff9413a3b8 [ 431.649110][ T9228] [ 432.075805][ T9233] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1084'. [ 434.646596][ T5789] Bluetooth: hci0: unexpected event 0x17 length: 15 > 6 [ 434.884458][ T9262] __nla_validate_parse: 1 callbacks suppressed [ 434.884476][ T9262] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.1093'. [ 435.088386][ T9268] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1096'. [ 435.291288][ T9273] netlink: 'syz.2.1097': attribute type 10 has an invalid length. [ 435.352032][ T9273] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1097'. [ 435.459431][ T9273] batman_adv: batadv0: Adding interface: virt_wifi0 [ 435.490133][ T9273] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 435.605729][ T9273] batman_adv: batadv0: Interface activated: virt_wifi0 [ 436.207994][ T9282] netlink: 'syz.2.1099': attribute type 10 has an invalid length. [ 436.290475][ T9280] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1099'. [ 436.303498][ T9286] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1102'. [ 436.809706][ T9295] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1104'. [ 439.001343][ T9315] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1109'. [ 439.195675][ T9317] syzkaller0: entered promiscuous mode [ 439.201239][ T9317] syzkaller0: entered allmulticast mode [ 439.500193][ T9327] netlink: 'syz.3.1114': attribute type 10 has an invalid length. [ 439.508822][ T9327] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1114'. [ 439.541058][ T9327] batman_adv: batadv0: Adding interface: virt_wifi0 [ 439.551722][ T9327] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 439.598791][ T9327] batman_adv: batadv0: Interface activated: virt_wifi0 [ 439.892785][ T9335] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1116'. [ 440.951547][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.965642][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 444.321142][ T9364] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1124'. [ 446.984648][ T9389] FAULT_INJECTION: forcing a failure. [ 446.984648][ T9389] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 447.004540][ T9389] CPU: 1 PID: 9389 Comm: syz.3.1131 Not tainted syzkaller #0 [ 447.012086][ T9389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 447.022192][ T9389] Call Trace: [ 447.025528][ T9389] [ 447.028588][ T9389] dump_stack_lvl+0x18c/0x250 [ 447.033333][ T9389] ? show_regs_print_info+0x20/0x20 [ 447.038599][ T9389] ? load_image+0x420/0x420 [ 447.043166][ T9389] ? __might_fault+0xaa/0x120 [ 447.047895][ T9389] ? __lock_acquire+0x7d40/0x7d40 [ 447.052980][ T9389] should_fail_ex+0x39d/0x4d0 [ 447.057730][ T9389] _copy_from_iter+0x1d9/0x12e0 [ 447.062659][ T9389] ? __might_fault+0xaa/0x120 [ 447.067401][ T9389] ? _copy_from_iter+0x24e/0x12e0 [ 447.072493][ T9389] ? __virt_addr_valid+0x18c/0x540 [ 447.077669][ T9389] ? __lock_acquire+0x7d40/0x7d40 [ 447.082753][ T9389] ? copyout_mc+0x70/0x70 [ 447.087150][ T9389] ? copyout_mc+0x70/0x70 [ 447.091542][ T9389] ? __virt_addr_valid+0x18c/0x540 [ 447.096728][ T9389] ? page_copy_sane+0x16a/0x270 [ 447.101649][ T9389] copy_page_from_iter+0x7b/0x100 [ 447.106755][ T9389] skb_copy_datagram_from_iter+0x2e4/0x6e0 [ 447.112638][ T9389] tun_get_user+0x15db/0x3ca0 [ 447.117381][ T9389] ? aa_file_perm+0x11b/0xee0 [ 447.122130][ T9389] ? rcu_read_unlock+0xa0/0xa0 [ 447.126962][ T9389] ? tun_get+0x1c/0x2e0 [ 447.131261][ T9389] ? __lock_acquire+0x7d40/0x7d40 [ 447.136347][ T9389] ? tun_get+0x1c/0x2e0 [ 447.140566][ T9389] tun_chr_write_iter+0x119/0x200 [ 447.145652][ T9389] vfs_write+0x46c/0x990 [ 447.149958][ T9389] ? file_end_write+0x250/0x250 [ 447.154871][ T9389] ? __fget_files+0x43d/0x4b0 [ 447.159617][ T9389] ? __fdget_pos+0x1d8/0x330 [ 447.164296][ T9389] ? ksys_write+0x75/0x260 [ 447.168867][ T9389] ksys_write+0x150/0x260 [ 447.173260][ T9389] ? __ia32_sys_read+0x90/0x90 [ 447.178088][ T9389] ? lockdep_hardirqs_on+0x98/0x150 [ 447.183348][ T9389] do_syscall_64+0x55/0xa0 [ 447.187811][ T9389] ? clear_bhb_loop+0x40/0x90 [ 447.192545][ T9389] ? clear_bhb_loop+0x40/0x90 [ 447.197285][ T9389] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 447.203233][ T9389] RIP: 0033:0x7fb30239cdd9 [ 447.207698][ T9389] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 447.227361][ T9389] RSP: 002b:00007fb303276028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 447.235854][ T9389] RAX: ffffffffffffffda RBX: 00007fb302615fa0 RCX: 00007fb30239cdd9 [ 447.243886][ T9389] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 447.251916][ T9389] RBP: 00007fb303276090 R08: 0000000000000000 R09: 0000000000000000 [ 447.259948][ T9389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 447.267982][ T9389] R13: 00007fb302616038 R14: 00007fb302615fa0 R15: 00007fff9413a3b8 [ 447.276073][ T9389] [ 448.871794][ T9396] netlink: 'syz.3.1133': attribute type 16 has an invalid length. [ 448.882229][ T9396] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1133'. [ 448.917625][ T9396] veth1_macvtap: entered allmulticast mode [ 449.241253][ T9410] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1134'. [ 450.167609][ T9418] syzkaller0: entered promiscuous mode [ 450.182236][ T9418] syzkaller0: entered allmulticast mode [ 450.224337][ T9442] FAULT_INJECTION: forcing a failure. [ 450.224337][ T9442] name failslab, interval 1, probability 0, space 0, times 0 [ 450.238794][ T9442] CPU: 1 PID: 9442 Comm: syz.2.1143 Not tainted syzkaller #0 [ 450.246404][ T9442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 450.256591][ T9442] Call Trace: [ 450.259996][ T9442] [ 450.262956][ T9442] dump_stack_lvl+0x18c/0x250 [ 450.267725][ T9442] ? show_regs_print_info+0x20/0x20 [ 450.273001][ T9442] ? load_image+0x420/0x420 [ 450.277593][ T9442] should_fail_ex+0x39d/0x4d0 [ 450.282330][ T9442] should_failslab+0x9/0x20 [ 450.286898][ T9442] slab_pre_alloc_hook+0x59/0x310 [ 450.291984][ T9442] ? unwind_get_return_address+0x91/0xc0 [ 450.297661][ T9442] kmem_cache_alloc+0x5a/0x2d0 [ 450.302509][ T9442] ? dst_alloc+0x105/0x170 [ 450.306986][ T9442] dst_alloc+0x105/0x170 [ 450.311289][ T9442] ip_route_output_key_hash_rcu+0x14f6/0x2370 [ 450.317431][ T9442] ? ip_route_output_key_hash+0x13d/0x330 [ 450.323202][ T9442] ip_route_output_key_hash+0x1f3/0x330 [ 450.328791][ T9442] ? rxrpc_alloc_peer+0x7e/0x340 [ 450.333775][ T9442] ? rxrpc_lookup_peer+0x3f4/0x850 [ 450.338933][ T9442] ? ip_route_input_rcu+0x30f0/0x30f0 [ 450.344368][ T9442] ? do_syscall_64+0x55/0xa0 [ 450.349032][ T9442] ? make_kuid+0x1df/0x680 [ 450.353500][ T9442] ? __put_user_ns+0x50/0x50 [ 450.358141][ T9442] ip_route_output_flow+0x2a/0x150 [ 450.363300][ T9442] rxrpc_init_peer+0x2f0/0x740 [ 450.368266][ T9442] ? rxrpc_new_incoming_peer+0x5a0/0x5a0 [ 450.374390][ T9442] ? rcu_is_watching+0x15/0xb0 [ 450.379378][ T9442] ? trace_rxrpc_peer+0x80/0x1c0 [ 450.384385][ T9442] ? rxrpc_lookup_peer+0x419/0x850 [ 450.389650][ T9442] rxrpc_lookup_peer+0x427/0x850 [ 450.394661][ T9442] rxrpc_new_client_call+0xb99/0x1410 [ 450.400176][ T9442] rxrpc_do_sendmsg+0xe03/0x12d0 [ 450.405193][ T9442] ? rxrpc_propose_abort+0x200/0x200 [ 450.410543][ T9442] ? rxrpc_sendmsg+0x391/0x5b0 [ 450.415354][ T9442] ? rxrpc_getsockopt+0x150/0x150 [ 450.420418][ T9442] ____sys_sendmsg+0x5ba/0x960 [ 450.425230][ T9442] ? __lock_acquire+0x7d40/0x7d40 [ 450.430357][ T9442] ? __sys_sendmsg_sock+0x30/0x30 [ 450.435422][ T9442] ? __import_iovec+0x5f2/0x850 [ 450.440331][ T9442] ? import_iovec+0x73/0xa0 [ 450.444883][ T9442] ___sys_sendmsg+0x2a6/0x360 [ 450.449609][ T9442] ? get_pid_task+0x20/0x1e0 [ 450.454255][ T9442] ? __sys_sendmsg+0x2a0/0x2a0 [ 450.459081][ T9442] ? __lock_acquire+0x7d40/0x7d40 [ 450.464181][ T9442] __se_sys_sendmsg+0x1c2/0x2b0 [ 450.469081][ T9442] ? __x64_sys_sendmsg+0x80/0x80 [ 450.474065][ T9442] ? lockdep_hardirqs_on+0x98/0x150 [ 450.479387][ T9442] do_syscall_64+0x55/0xa0 [ 450.483833][ T9442] ? clear_bhb_loop+0x40/0x90 [ 450.488573][ T9442] ? clear_bhb_loop+0x40/0x90 [ 450.493301][ T9442] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 450.499245][ T9442] RIP: 0033:0x7fd257b9cdd9 [ 450.503698][ T9442] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 450.523353][ T9442] RSP: 002b:00007fd2589ac028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 450.531818][ T9442] RAX: ffffffffffffffda RBX: 00007fd257e15fa0 RCX: 00007fd257b9cdd9 [ 450.539842][ T9442] RDX: 0000000000008000 RSI: 0000200000000000 RDI: 0000000000000003 [ 450.547873][ T9442] RBP: 00007fd2589ac090 R08: 0000000000000000 R09: 0000000000000000 [ 450.555905][ T9442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 450.563923][ T9442] R13: 00007fd257e16038 R14: 00007fd257e15fa0 R15: 00007ffd8c7e2b78 [ 450.571963][ T9442] [ 452.416540][ T49] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 453.727041][ T9446] netlink: 'syz.3.1142': attribute type 10 has an invalid length. [ 453.734937][ T9446] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1142'. [ 453.752033][ T9450] netlink: 'syz.2.1145': attribute type 10 has an invalid length. [ 453.761017][ T9450] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1145'. [ 453.771815][ T9450] batadv_slave_1: entered promiscuous mode [ 453.782934][ T9450] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 453.791163][ T9450] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 453.878721][ T9452] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 454.369553][ T9468] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1151'. [ 455.638487][ T42] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 456.633681][ T9476] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1160'. [ 457.132375][ T9484] netlink: 'syz.2.1156': attribute type 10 has an invalid length. [ 457.155663][ T9484] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1156'. [ 460.349470][ T9499] syzkaller0: entered promiscuous mode [ 460.355028][ T9499] syzkaller0: entered allmulticast mode [ 460.486777][ T5789] Bluetooth: hci1: ISO packet for unknown connection handle 2366 [ 463.674506][ T9511] FAULT_INJECTION: forcing a failure. [ 463.674506][ T9511] name fail_futex, interval 1, probability 0, space 0, times 1 [ 463.704356][ T9511] CPU: 0 PID: 9511 Comm: syz.1.1167 Not tainted syzkaller #0 [ 463.711802][ T9511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 463.721896][ T9511] Call Trace: [ 463.725211][ T9511] [ 463.728179][ T9511] dump_stack_lvl+0x18c/0x250 [ 463.732918][ T9511] ? show_regs_print_info+0x20/0x20 [ 463.738158][ T9511] ? load_image+0x420/0x420 [ 463.742710][ T9511] ? __lock_acquire+0x1347/0x7d40 [ 463.747759][ T9511] ? verify_lock_unused+0x140/0x140 [ 463.752967][ T9511] should_fail_ex+0x39d/0x4d0 [ 463.757680][ T9511] get_futex_key+0x136/0x1010 [ 463.762414][ T9511] ? futex_setup_timer+0xc0/0xc0 [ 463.767390][ T9511] futex_wake+0x127/0x4f0 [ 463.771729][ T9511] ? futex_wake_mark+0x150/0x150 [ 463.776712][ T9511] do_futex+0x35d/0x3e0 [ 463.780871][ T9511] ? __might_fault+0xaa/0x120 [ 463.785747][ T9511] ? __ia32_sys_get_robust_list+0x110/0x110 [ 463.791655][ T9511] ? __might_fault+0xc6/0x120 [ 463.796432][ T9511] mm_release+0x184/0x3a0 [ 463.800766][ T9511] ? exit_mm_release+0x30/0x30 [ 463.805552][ T9511] ? lockdep_hardirqs_on+0x98/0x150 [ 463.810814][ T9511] exit_mm+0xa7/0x2c0 [ 463.814869][ T9511] ? do_exit+0x2460/0x2460 [ 463.819341][ T9511] ? taskstats_exit+0x35e/0x9e0 [ 463.824324][ T9511] do_exit+0x8dd/0x2460 [ 463.828648][ T9511] ? put_task_struct+0xc0/0xc0 [ 463.833465][ T9511] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 463.839529][ T9511] ? lock_chain_count+0x20/0x20 [ 463.844431][ T9511] ? _raw_spin_lock_irq+0xbb/0xf0 [ 463.849496][ T9511] do_group_exit+0x21b/0x2d0 [ 463.854132][ T9511] ? lockdep_hardirqs_on+0x98/0x150 [ 463.859382][ T9511] get_signal+0x12fc/0x13f0 [ 463.863936][ T9511] arch_do_signal_or_restart+0xc2/0x800 [ 463.869519][ T9511] ? get_sigframe_size+0x20/0x20 [ 463.874478][ T9511] ? perf_trace_preemptirq_template+0xac/0x330 [ 463.880780][ T9511] ? exit_to_user_mode_loop+0x3b/0x110 [ 463.886266][ T9511] exit_to_user_mode_loop+0x70/0x110 [ 463.891587][ T9511] exit_to_user_mode_prepare+0xee/0x180 [ 463.897166][ T9511] syscall_exit_to_user_mode+0x1a/0x50 [ 463.902651][ T9511] do_syscall_64+0x61/0xa0 [ 463.907096][ T9511] ? clear_bhb_loop+0x40/0x90 [ 463.911837][ T9511] ? clear_bhb_loop+0x40/0x90 [ 463.916581][ T9511] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 463.922498][ T9511] RIP: 0033:0x7fbc6399cdd9 [ 463.927038][ T9511] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 463.946680][ T9511] RSP: 002b:00007fbc647b8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 463.955125][ T9511] RAX: fffffffffffffe00 RBX: 00007fbc63c16090 RCX: 00007fbc6399cdd9 [ 463.963123][ T9511] RDX: 0000000000040001 RSI: 00002000000008c0 RDI: 0000000000000004 [ 463.971140][ T9511] RBP: 00007fbc647b8090 R08: 0000000000000000 R09: 0000000000000000 [ 463.979135][ T9511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 463.987122][ T9511] R13: 00007fbc63c16128 R14: 00007fbc63c16090 R15: 00007ffcf48969e8 [ 463.995117][ T9511] [ 464.228025][ T9515] hsr0: VLAN not yet supported [ 464.360718][ T9521] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1170'. [ 465.473184][ T9524] netlink: 'syz.0.1171': attribute type 29 has an invalid length. [ 468.841440][ T9520] netlink: 'syz.1.1169': attribute type 10 has an invalid length. [ 468.849707][ T9520] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1169'. [ 468.863119][ T9520] batman_adv: batadv0: Adding interface: virt_wifi0 [ 468.869948][ T9520] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 468.896150][ T9520] batman_adv: batadv0: Interface activated: virt_wifi0 [ 468.904176][ T9524] netlink: 'syz.0.1171': attribute type 29 has an invalid length. [ 468.922297][ T9537] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1174'. [ 469.089186][ T9543] netlink: 'syz.1.1175': attribute type 10 has an invalid length. [ 469.135727][ T9543] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1175'. [ 469.173462][ T9544] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1176'. [ 469.358648][ T9554] netlink: 'syz.3.1178': attribute type 21 has an invalid length. [ 469.375937][ T9554] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1178'. [ 472.744311][ T9572] batadv0: entered promiscuous mode [ 473.033865][ T9571] syzkaller0: entered promiscuous mode [ 473.056407][ T9571] syzkaller0: entered allmulticast mode [ 478.034360][ T9587] lo: entered allmulticast mode [ 478.041729][ T9592] netlink: 'syz.2.1190': attribute type 21 has an invalid length. [ 478.050126][ T9592] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1190'. [ 478.066005][ T9595] netlink: 'syz.1.1191': attribute type 21 has an invalid length. [ 478.085803][ T9595] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1191'. [ 478.096819][ T9595] netlink: 'syz.1.1191': attribute type 5 has an invalid length. [ 478.104599][ T9595] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1191'. [ 478.279361][ T9608] FAULT_INJECTION: forcing a failure. [ 478.279361][ T9608] name failslab, interval 1, probability 0, space 0, times 0 [ 478.292830][ T9608] CPU: 1 PID: 9608 Comm: syz.3.1193 Not tainted syzkaller #0 [ 478.300260][ T9608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 478.310371][ T9608] Call Trace: [ 478.313703][ T9608] [ 478.316672][ T9608] dump_stack_lvl+0x18c/0x250 [ 478.321404][ T9608] ? verify_lock_unused+0x140/0x140 [ 478.326642][ T9608] ? show_regs_print_info+0x20/0x20 [ 478.331889][ T9608] ? load_image+0x420/0x420 [ 478.336452][ T9608] should_fail_ex+0x39d/0x4d0 [ 478.341193][ T9608] should_failslab+0x9/0x20 [ 478.345750][ T9608] slab_pre_alloc_hook+0x59/0x310 [ 478.350821][ T9608] ? perf_trace_lock+0xfc/0x3b0 [ 478.355798][ T9608] kmem_cache_alloc+0x5a/0x2d0 [ 478.360615][ T9608] ? inet_frag_find+0x8f8/0x1ec0 [ 478.365610][ T9608] inet_frag_find+0x8f8/0x1ec0 [ 478.370419][ T9608] ? ip4_obj_hashfn+0x1e0/0x1e0 [ 478.375331][ T9608] ? inet_frag_find+0x138/0x1ec0 [ 478.380314][ T9608] ? inet_frag_destroy_rcu+0xc0/0xc0 [ 478.385651][ T9608] ? verify_lock_unused+0x140/0x140 [ 478.390892][ T9608] ? perf_trace_lock+0xfc/0x3b0 [ 478.395798][ T9608] ip_defrag+0x33b/0x1fa0 [ 478.400224][ T9608] ? __stack_depot_save+0x560/0x630 [ 478.405487][ T9608] ? __in_dev_get_rcu+0xc0/0xc0 [ 478.410409][ T9608] ? ipv4_conntrack_defrag+0x3c5/0x5a0 [ 478.416001][ T9608] ipv4_conntrack_defrag+0x3df/0x5a0 [ 478.421335][ T9608] ? defrag4_net_exit+0xb0/0xb0 [ 478.426227][ T9608] nf_hook_slow+0xbd/0x200 [ 478.430694][ T9608] ? nf_hook+0x390/0x390 [ 478.434980][ T9608] nf_hook+0x228/0x390 [ 478.439084][ T9608] ? nf_hook+0xa2/0x390 [ 478.443273][ T9608] ? __ip_local_out+0x5f0/0x5f0 [ 478.448182][ T9608] ? nf_hook+0x390/0x390 [ 478.452450][ T9608] ? kasan_quarantine_put+0xd8/0x220 [ 478.457795][ T9608] ? lockdep_hardirqs_on+0x98/0x150 [ 478.463049][ T9608] ? ip_fast_csum+0x1ee/0x2b0 [ 478.467765][ T9608] __ip_local_out+0x4db/0x5f0 [ 478.472475][ T9608] ? nf_hook+0x390/0x390 [ 478.476840][ T9608] ip_local_out+0x2a/0x130 [ 478.481292][ T9608] iptunnel_xmit+0x4f0/0x920 [ 478.485943][ T9608] ip_tunnel_xmit+0x1cbc/0x2410 [ 478.490849][ T9608] ? ip4_dst_hoplimit+0x2d0/0x2d0 [ 478.495899][ T9608] ? kmem_cache_free+0xf8/0x270 [ 478.500876][ T9608] ? dev_nit_active+0x17/0x60 [ 478.505605][ T9608] ? gre_build_header+0x25b/0x990 [ 478.510681][ T9608] ipgre_xmit+0x7a6/0xb20 [ 478.515072][ T9608] dev_hard_start_xmit+0x246/0x740 [ 478.520255][ T9608] __dev_queue_xmit+0x19a3/0x3660 [ 478.525443][ T9608] ? __dev_queue_xmit+0x265/0x3660 [ 478.530630][ T9608] ? __kmem_cache_alloc_node+0x13a/0x250 [ 478.536304][ T9608] ? netdev_core_pick_tx+0x340/0x340 [ 478.541628][ T9608] ? skb_release_data+0x1d1/0x7b0 [ 478.546722][ T9608] __bpf_tx_skb+0x189/0x250 [ 478.551267][ T9608] bpf_clone_redirect+0x30f/0x4a0 [ 478.556350][ T9608] bpf_prog_973cd02a7a0e8181+0x5e/0x63 [ 478.561845][ T9608] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 478.567875][ T9608] ? lock_chain_count+0x20/0x20 [ 478.572759][ T9608] ? seqcount_lockdep_reader_access+0x12b/0x1d0 [ 478.579032][ T9608] ? lockdep_softirqs_on+0x580/0x580 [ 478.584350][ T9608] ? ktime_get+0x7f/0x280 [ 478.588720][ T9608] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 478.595108][ T9608] ? ktime_get_real_ts64+0x440/0x440 [ 478.600548][ T9608] ? __x64_sys_bpf+0x7c/0x90 [ 478.605187][ T9608] ? __local_bh_disable_ip+0x108/0x1a0 [ 478.610687][ T9608] ? __cant_sleep+0x220/0x220 [ 478.615434][ T9608] ? read_tsc+0x9/0x20 [ 478.619578][ T9608] ? ktime_get+0x24b/0x280 [ 478.624052][ T9608] ? bpf_test_run+0x174/0x870 [ 478.628799][ T9608] bpf_test_run+0x2df/0x870 [ 478.633366][ T9608] ? bpf_test_run+0x174/0x870 [ 478.638083][ T9608] ? convert___skb_to_skb+0x590/0x590 [ 478.643505][ T9608] ? eth_get_headlen+0x210/0x210 [ 478.648489][ T9608] ? slab_build_skb+0x25f/0x3f0 [ 478.653380][ T9608] ? convert___skb_to_skb+0x3d/0x590 [ 478.658793][ T9608] bpf_prog_test_run_skb+0xad2/0x12b0 [ 478.664217][ T9608] ? cpu_online+0x60/0x60 [ 478.668585][ T9608] bpf_prog_test_run+0x321/0x390 [ 478.673566][ T9608] __sys_bpf+0x49d/0x890 [ 478.677868][ T9608] ? bpf_link_show_fdinfo+0x390/0x390 [ 478.683293][ T9608] ? lock_chain_count+0x20/0x20 [ 478.688215][ T9608] __x64_sys_bpf+0x7c/0x90 [ 478.692667][ T9608] do_syscall_64+0x55/0xa0 [ 478.697108][ T9608] ? clear_bhb_loop+0x40/0x90 [ 478.701824][ T9608] ? clear_bhb_loop+0x40/0x90 [ 478.706543][ T9608] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 478.712466][ T9608] RIP: 0033:0x7fb30239cdd9 [ 478.716917][ T9608] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 478.736645][ T9608] RSP: 002b:00007fb303276028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 478.745086][ T9608] RAX: ffffffffffffffda RBX: 00007fb302615fa0 RCX: 00007fb30239cdd9 [ 478.753099][ T9608] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 478.761182][ T9608] RBP: 00007fb303276090 R08: 0000000000000000 R09: 0000000000000000 [ 478.769181][ T9608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 478.777178][ T9608] R13: 00007fb302616038 R14: 00007fb302615fa0 R15: 00007fff9413a3b8 [ 478.785235][ T9608] [ 481.644563][ T9622] netlink: 'syz.3.1197': attribute type 21 has an invalid length. [ 481.655919][ T9622] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1197'. [ 484.420791][ T2996] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 484.993008][ T9633] netlink: 'syz.3.1200': attribute type 21 has an invalid length. [ 485.035592][ T9633] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1200'. [ 486.432966][ T9642] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1202'. [ 487.615577][ T2996] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 488.780460][ T9661] netlink: 'syz.0.1216': attribute type 21 has an invalid length. [ 488.829835][ T9661] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1216'. [ 491.737014][ T9671] netlink: 'syz.2.1209': attribute type 21 has an invalid length. [ 491.762594][ T9671] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1209'. [ 491.846472][ T9676] netlink: 'syz.3.1211': attribute type 33 has an invalid length. [ 491.925522][ T9676] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1211'. [ 494.951092][ T9686] netlink: 'syz.2.1215': attribute type 21 has an invalid length. [ 494.971522][ T9686] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1215'. [ 495.002181][ T9686] netlink: 'syz.2.1215': attribute type 5 has an invalid length. [ 495.022004][ T9686] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1215'. [ 495.058435][ T9690] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1218'. [ 501.616534][ T9712] netlink: 'syz.0.1223': attribute type 21 has an invalid length. [ 501.635722][ T9712] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1223'. [ 501.700505][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.707263][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.185670][ T9731] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1228'. [ 502.550590][ T9736] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1229'. [ 503.636499][ T9752] syzkaller0: entered promiscuous mode [ 503.653960][ T9752] syzkaller0: entered allmulticast mode [ 508.131941][ T9760] ipvlan1: entered promiscuous mode [ 508.137408][ T9760] ipvlan1: entered allmulticast mode [ 508.142729][ T9760] veth0_vlan: entered allmulticast mode [ 508.237754][ T9764] netlink: 'syz.3.1239': attribute type 21 has an invalid length. [ 508.252202][ T9764] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1239'. [ 508.262855][ T9764] netlink: 'syz.3.1239': attribute type 5 has an invalid length. [ 508.270996][ T9764] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1239'. [ 508.536833][ T9777] netlink: 'syz.2.1242': attribute type 9 has an invalid length. [ 508.547354][ T9777] netlink: 160016 bytes leftover after parsing attributes in process `syz.2.1242'. [ 509.333953][ T9785] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1243'. [ 509.793540][ T9791] veth0_vlan: entered allmulticast mode [ 510.133601][ T9793] veth0_vlan: left promiscuous mode [ 510.186728][ T9793] veth0_vlan: entered promiscuous mode [ 510.298009][ T9789] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1244'. [ 513.671577][ T9803] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1247'. [ 516.623331][ T9808] netlink: 'syz.2.1248': attribute type 21 has an invalid length. [ 516.632232][ T9808] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1248'. [ 516.804016][ T9814] syzkaller0: entered promiscuous mode [ 516.812738][ T9814] syzkaller0: entered allmulticast mode [ 516.939920][ T9818] netlink: 'syz.2.1252': attribute type 22 has an invalid length. [ 516.948080][ T9818] netlink: 14380 bytes leftover after parsing attributes in process `syz.2.1252'. [ 517.658580][ T9825] FAULT_INJECTION: forcing a failure. [ 517.658580][ T9825] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 517.681502][ T9825] CPU: 0 PID: 9825 Comm: syz.1.1255 Not tainted syzkaller #0 [ 517.688966][ T9825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 517.699063][ T9825] Call Trace: [ 517.702380][ T9825] [ 517.705344][ T9825] dump_stack_lvl+0x18c/0x250 [ 517.710087][ T9825] ? show_regs_print_info+0x20/0x20 [ 517.715346][ T9825] ? load_image+0x420/0x420 [ 517.719903][ T9825] ? __might_fault+0xaa/0x120 [ 517.724630][ T9825] ? __lock_acquire+0x7d40/0x7d40 [ 517.729832][ T9825] should_fail_ex+0x39d/0x4d0 [ 517.734594][ T9825] _copy_from_iter+0x1d9/0x12e0 [ 517.740872][ T9825] ? slab_post_alloc_hook+0x8a/0x4b0 [ 517.746292][ T9825] ? __virt_addr_valid+0x18c/0x540 [ 517.751609][ T9825] ? __lock_acquire+0x7d40/0x7d40 [ 517.756757][ T9825] ? rcu_is_watching+0x15/0xb0 [ 517.761646][ T9825] ? copyout_mc+0x70/0x70 [ 517.766013][ T9825] ? __virt_addr_valid+0x18c/0x540 [ 517.771163][ T9825] ? __virt_addr_valid+0x18c/0x540 [ 517.776305][ T9825] ? __virt_addr_valid+0x469/0x540 [ 517.781446][ T9825] ? __check_object_size+0x506/0xa20 [ 517.786790][ T9825] netlink_sendmsg+0x76b/0xbf0 [ 517.791641][ T9825] ? netlink_getsockopt+0x590/0x590 [ 517.796889][ T9825] ? aa_sock_msg_perm+0x94/0x150 [ 517.802149][ T9825] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 517.807461][ T9825] ? security_socket_sendmsg+0x80/0xa0 [ 517.812946][ T9825] ? netlink_getsockopt+0x590/0x590 [ 517.818185][ T9825] ____sys_sendmsg+0x5ba/0x960 [ 517.822991][ T9825] ? __asan_memset+0x22/0x40 [ 517.827789][ T9825] ? __sys_sendmsg_sock+0x30/0x30 [ 517.832843][ T9825] ? __import_iovec+0x5f2/0x850 [ 517.837727][ T9825] ? import_iovec+0x73/0xa0 [ 517.842256][ T9825] ___sys_sendmsg+0x2a6/0x360 [ 517.846959][ T9825] ? get_pid_task+0x20/0x1e0 [ 517.851587][ T9825] ? __sys_sendmsg+0x2a0/0x2a0 [ 517.856417][ T9825] ? __lock_acquire+0x7d40/0x7d40 [ 517.861491][ T9825] __se_sys_sendmsg+0x1c2/0x2b0 [ 517.866374][ T9825] ? __x64_sys_sendmsg+0x80/0x80 [ 517.871344][ T9825] ? syscall_enter_from_user_mode+0x20/0x80 [ 517.877275][ T9825] ? lockdep_hardirqs_on+0x98/0x150 [ 517.882510][ T9825] do_syscall_64+0x55/0xa0 [ 517.886951][ T9825] ? clear_bhb_loop+0x40/0x90 [ 517.891656][ T9825] ? clear_bhb_loop+0x40/0x90 [ 517.896374][ T9825] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 517.902304][ T9825] RIP: 0033:0x7fbc6399cdd9 [ 517.906746][ T9825] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 517.928899][ T9825] RSP: 002b:00007fbc647d9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 517.937342][ T9825] RAX: ffffffffffffffda RBX: 00007fbc63c15fa0 RCX: 00007fbc6399cdd9 [ 517.945343][ T9825] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 517.953343][ T9825] RBP: 00007fbc647d9090 R08: 0000000000000000 R09: 0000000000000000 [ 517.961339][ T9825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 517.969345][ T9825] R13: 00007fbc63c16038 R14: 00007fbc63c15fa0 R15: 00007ffcf48969e8 [ 517.977362][ T9825] [ 518.346795][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 519.387149][ T9827] veth0_vlan: entered allmulticast mode [ 519.393596][ T9829] veth0_vlan: left promiscuous mode [ 519.399892][ T9829] veth0_vlan: entered promiscuous mode [ 519.723469][ T9835] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1258'. [ 520.530418][ T9844] netlink: 'syz.3.1262': attribute type 21 has an invalid length. [ 520.567945][ T9844] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1262'. [ 522.187354][ T1000] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 523.363695][ T9856] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1265'. [ 523.434282][ T9855] syzkaller0: entered promiscuous mode [ 523.490956][ T9855] syzkaller0: entered allmulticast mode [ 523.777945][ T9865] syzkaller0: entered promiscuous mode [ 523.790160][ T9865] syzkaller0: entered allmulticast mode [ 526.173681][ T9868] netlink: 'syz.0.1270': attribute type 21 has an invalid length. [ 526.181888][ T9868] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1270'. [ 526.191449][ T9868] netlink: 'syz.0.1270': attribute type 5 has an invalid length. [ 526.201049][ T9868] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1270'. [ 527.872834][ T9876] netlink: 'syz.1.1272': attribute type 10 has an invalid length. [ 527.881067][ T9876] hsr_slave_0: left promiscuous mode [ 527.887527][ T9876] hsr_slave_1: left promiscuous mode [ 528.233970][ T9887] netlink: 'syz.1.1273': attribute type 21 has an invalid length. [ 528.260052][ T9887] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1273'. [ 531.439763][ T9897] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.1277'. [ 531.501335][ T9897] netlink: 6324 bytes leftover after parsing attributes in process `syz.2.1277'. [ 531.814607][ T9908] netlink: 'syz.3.1279': attribute type 9 has an invalid length. [ 531.873364][ T9908] netlink: 160016 bytes leftover after parsing attributes in process `syz.3.1279'. [ 532.635189][ T9911] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1280'. [ 532.958997][ T9913] FAULT_INJECTION: forcing a failure. [ 532.958997][ T9913] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 533.065754][ T9913] CPU: 1 PID: 9913 Comm: syz.1.1282 Not tainted syzkaller #0 [ 533.073233][ T9913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 533.083392][ T9913] Call Trace: [ 533.086716][ T9913] [ 533.089690][ T9913] dump_stack_lvl+0x18c/0x250 [ 533.094430][ T9913] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 533.100646][ T9913] ? show_regs_print_info+0x20/0x20 [ 533.105907][ T9913] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 533.112123][ T9913] ? dump_stack+0x9/0x20 [ 533.116419][ T9913] should_fail_ex+0x39d/0x4d0 [ 533.121163][ T9913] copyin+0x1a/0x90 [ 533.125071][ T9913] _copy_from_iter+0x404/0x12e0 [ 533.129985][ T9913] ? copyin+0x70/0x90 [ 533.134033][ T9913] ? copyout_mc+0x70/0x70 [ 533.138440][ T9913] ? copyout_mc+0x70/0x70 [ 533.142839][ T9913] ? page_copy_sane+0x16a/0x270 [ 533.147755][ T9913] copy_page_from_iter+0x7b/0x100 [ 533.152871][ T9913] skb_copy_datagram_from_iter+0x2e4/0x6e0 [ 533.158754][ T9913] packet_sendmsg+0x33ff/0x4c30 [ 533.163702][ T9913] ? __might_sleep+0xe0/0xe0 [ 533.165429][ T9916] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1281'. [ 533.168336][ T9913] ? verify_lock_unused+0x140/0x140 [ 533.168368][ T9913] ? aa_sk_perm+0x83c/0x970 [ 533.168401][ T9913] ? __perf_event_overflow+0x4f8/0x630 [ 533.168425][ T9913] ? packet_getsockopt+0xad0/0xad0 [ 533.168461][ T9913] ? tomoyo_gc_thread+0x7d0/0x1410 [ 533.168486][ T9913] ? aa_sock_msg_perm+0x94/0x150 [ 533.168515][ T9913] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 533.168542][ T9913] ? security_socket_sendmsg+0x80/0xa0 [ 533.168565][ T9913] ? packet_getsockopt+0xad0/0xad0 [ 533.168599][ T9913] ____sys_sendmsg+0x5ba/0x960 [ 533.168621][ T9913] ? __lock_acquire+0x7d40/0x7d40 [ 533.168649][ T9913] ? __asan_memset+0x22/0x40 [ 533.168679][ T9913] ? __sys_sendmsg_sock+0x30/0x30 [ 533.168699][ T9913] ? __import_iovec+0x3fa/0x850 [ 533.248934][ T9913] ? import_iovec+0x73/0xa0 [ 533.253489][ T9913] ___sys_sendmsg+0x2a6/0x360 [ 533.258218][ T9913] ? __sys_sendmsg+0x2a0/0x2a0 [ 533.263082][ T9913] __se_sys_sendmsg+0x1c2/0x2b0 [ 533.267996][ T9913] ? __x64_sys_sendmsg+0x80/0x80 [ 533.273002][ T9913] ? syscall_enter_from_user_mode+0x2e/0x80 [ 533.278952][ T9913] do_syscall_64+0x55/0xa0 [ 533.283414][ T9913] ? clear_bhb_loop+0x40/0x90 [ 533.288150][ T9913] ? clear_bhb_loop+0x40/0x90 [ 533.292907][ T9913] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 533.298855][ T9913] RIP: 0033:0x7fbc6399cdd9 [ 533.303311][ T9913] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 533.322969][ T9913] RSP: 002b:00007fbc647d9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 533.331474][ T9913] RAX: ffffffffffffffda RBX: 00007fbc63c15fa0 RCX: 00007fbc6399cdd9 [ 533.339539][ T9913] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 533.347742][ T9913] RBP: 00007fbc647d9090 R08: 0000000000000000 R09: 0000000000000000 [ 533.355771][ T9913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 533.363823][ T9913] R13: 00007fbc63c16038 R14: 00007fbc63c15fa0 R15: 00007ffcf48969e8 [ 533.371887][ T9913] [ 534.764409][ T5789] Bluetooth: hci2: unexpected subevent 0x03 length: 150 > 9 [ 538.351259][ T9941] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1291'. [ 538.821413][ T9951] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1294'. [ 539.113451][ T9950] netlink: 'syz.2.1295': attribute type 29 has an invalid length. [ 539.169441][ T9950] netlink: 'syz.2.1295': attribute type 29 has an invalid length. [ 539.214483][ T9953] netlink: 'syz.2.1295': attribute type 29 has an invalid length. [ 539.270110][ T9950] netlink: 'syz.2.1295': attribute type 29 has an invalid length. [ 539.356863][ T9953] netlink: 'syz.2.1295': attribute type 29 has an invalid length. [ 539.903243][ T9965] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1296'. [ 539.991194][ T9968] netlink: 'syz.0.1298': attribute type 19 has an invalid length. [ 540.001612][ T9968] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1298'. [ 543.066709][ T9983] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1302'. [ 543.107138][ T9983] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1302'. [ 543.567233][ T9983] team0: Port device team_slave_0 removed [ 543.580015][ T9983] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 543.665476][ T9994] netlink: 'syz.0.1306': attribute type 19 has an invalid length. [ 543.673613][ T9994] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1306'. [ 543.958897][T10002] netlink: 'syz.1.1310': attribute type 9 has an invalid length. [ 544.018364][T10002] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1310'. [ 544.068894][T10003] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1308'. [ 544.173915][T10007] FAULT_INJECTION: forcing a failure. [ 544.173915][T10007] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 544.235897][T10004] netlink: 'syz.1.1310': attribute type 9 has an invalid length. [ 544.250001][T10007] CPU: 0 PID: 10007 Comm: syz.2.1311 Not tainted syzkaller #0 [ 544.257585][T10007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 544.267738][T10007] Call Trace: [ 544.271072][T10007] [ 544.274071][T10007] dump_stack_lvl+0x18c/0x250 [ 544.278845][T10007] ? show_regs_print_info+0x20/0x20 [ 544.284123][T10007] ? load_image+0x420/0x420 [ 544.288708][T10007] ? __might_fault+0xaa/0x120 [ 544.293446][T10007] should_fail_ex+0x39d/0x4d0 [ 544.298203][T10007] copyin+0x1a/0x90 [ 544.302125][T10007] _copy_from_iter+0x404/0x12e0 [ 544.307048][T10007] ? copyin+0x70/0x90 [ 544.307780][T10004] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1310'. [ 544.311083][T10007] ? copyout_mc+0x70/0x70 [ 544.311123][T10007] ? copyout_mc+0x70/0x70 [ 544.329152][T10007] ? __virt_addr_valid+0x18c/0x540 [ 544.334328][T10007] ? page_copy_sane+0x16a/0x270 [ 544.339239][T10007] copy_page_from_iter+0x7b/0x100 [ 544.344325][T10007] skb_copy_datagram_from_iter+0x2e4/0x6e0 [ 544.350202][T10007] packet_sendmsg+0x33ff/0x4c30 [ 544.355155][T10007] ? __might_sleep+0xe0/0xe0 [ 544.359804][T10007] ? mark_lock+0x94/0x320 [ 544.364194][T10007] ? __lock_acquire+0x1273/0x7d40 [ 544.369290][T10007] ? aa_sk_perm+0x83c/0x970 [ 544.373869][T10007] ? packet_getsockopt+0xad0/0xad0 [ 544.379049][T10007] ? tomoyo_gc_thread+0x7d0/0x1410 [ 544.384224][T10007] ? aa_sock_msg_perm+0x94/0x150 [ 544.389221][T10007] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 544.394558][T10007] ? security_socket_sendmsg+0x80/0xa0 [ 544.400074][T10007] ? packet_getsockopt+0xad0/0xad0 [ 544.405253][T10007] ____sys_sendmsg+0x5ba/0x960 [ 544.410076][T10007] ? __lock_acquire+0x7d40/0x7d40 [ 544.415162][T10007] ? __asan_memset+0x22/0x40 [ 544.419806][T10007] ? __sys_sendmsg_sock+0x30/0x30 [ 544.424883][T10007] ? __import_iovec+0x3fa/0x850 [ 544.429805][T10007] ? import_iovec+0x73/0xa0 [ 544.434542][T10007] ___sys_sendmsg+0x2a6/0x360 [ 544.439363][T10007] ? __sys_sendmsg+0x2a0/0x2a0 [ 544.444291][T10007] ? __lock_acquire+0x7d40/0x7d40 [ 544.449495][T10007] __se_sys_sendmsg+0x1c2/0x2b0 [ 544.454410][T10007] ? __x64_sys_sendmsg+0x80/0x80 [ 544.459508][T10007] ? lockdep_hardirqs_on+0x98/0x150 [ 544.464770][T10007] do_syscall_64+0x55/0xa0 [ 544.469233][T10007] ? clear_bhb_loop+0x40/0x90 [ 544.473973][T10007] ? clear_bhb_loop+0x40/0x90 [ 544.478717][T10007] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 544.484661][T10007] RIP: 0033:0x7fd257b9cdd9 [ 544.489123][T10007] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 544.508874][T10007] RSP: 002b:00007fd2589ac028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 544.517358][T10007] RAX: ffffffffffffffda RBX: 00007fd257e15fa0 RCX: 00007fd257b9cdd9 [ 544.525383][T10007] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 544.533401][T10007] RBP: 00007fd2589ac090 R08: 0000000000000000 R09: 0000000000000000 [ 544.541420][T10007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 544.549439][T10007] R13: 00007fd257e16038 R14: 00007fd257e15fa0 R15: 00007ffd8c7e2b78 [ 544.557478][T10007] [ 544.844434][T10009] FAULT_INJECTION: forcing a failure. [ 544.844434][T10009] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 544.864946][T10009] CPU: 1 PID: 10009 Comm: syz.1.1312 Not tainted syzkaller #0 [ 544.872483][T10009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 544.882585][T10009] Call Trace: [ 544.885902][T10009] [ 544.888875][T10009] dump_stack_lvl+0x18c/0x250 [ 544.893613][T10009] ? show_regs_print_info+0x20/0x20 [ 544.898861][T10009] ? load_image+0x420/0x420 [ 544.903401][T10009] ? __lock_acquire+0x7d40/0x7d40 [ 544.908462][T10009] ? snprintf+0xe9/0x140 [ 544.912739][T10009] should_fail_ex+0x39d/0x4d0 [ 544.917459][T10009] _copy_to_user+0x2f/0xa0 [ 544.921911][T10009] simple_read_from_buffer+0xe7/0x150 [ 544.927322][T10009] proc_fail_nth_read+0x1e8/0x260 [ 544.932383][T10009] ? proc_fault_inject_write+0x360/0x360 [ 544.938051][T10009] ? fsnotify_perm+0x271/0x5e0 [ 544.942845][T10009] ? proc_fault_inject_write+0x360/0x360 [ 544.948514][T10009] vfs_read+0x28b/0x970 [ 544.952715][T10009] ? kernel_read+0x1e0/0x1e0 [ 544.957337][T10009] ? __fget_files+0x28/0x4b0 [ 544.962053][T10009] ? __fget_files+0x28/0x4b0 [ 544.966677][T10009] ? __fget_files+0x43d/0x4b0 [ 544.971393][T10009] ? __fdget_pos+0x2a3/0x330 [ 544.976011][T10009] ? ksys_read+0x75/0x260 [ 544.980404][T10009] ksys_read+0x150/0x260 [ 544.984680][T10009] ? vfs_write+0x990/0x990 [ 544.989129][T10009] ? lockdep_hardirqs_on+0x98/0x150 [ 544.994370][T10009] do_syscall_64+0x55/0xa0 [ 544.998817][T10009] ? clear_bhb_loop+0x40/0x90 [ 545.003523][T10009] ? clear_bhb_loop+0x40/0x90 [ 545.008228][T10009] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 545.014158][T10009] RIP: 0033:0x7fbc6395d60e [ 545.018600][T10009] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 545.038271][T10009] RSP: 002b:00007fbc647d8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 545.046709][T10009] RAX: ffffffffffffffda RBX: 00007fbc647d96c0 RCX: 00007fbc6395d60e [ 545.054707][T10009] RDX: 000000000000000f RSI: 00007fbc647d90a0 RDI: 0000000000000004 [ 545.062733][T10009] RBP: 00007fbc647d9090 R08: 0000000000000000 R09: 0000000000000000 [ 545.070734][T10009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 545.078724][T10009] R13: 00007fbc63c16038 R14: 00007fbc63c15fa0 R15: 00007ffcf48969e8 [ 545.086738][T10009] [ 548.778086][T10042] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1320'. [ 548.967112][T10045] €Â0: renamed from batadv_slave_1 (while UP) [ 549.140678][T10048] netlink: 52711 bytes leftover after parsing attributes in process `syz.3.1325'. [ 549.208150][T10049] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1324'. [ 550.331746][T10066] tap0: tun_chr_ioctl cmd 1074025677 [ 550.348156][ T991] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 550.360102][T10066] tap0: linktype set to 270 [ 553.420978][T10072] netlink: 'syz.0.1332': attribute type 16 has an invalid length. [ 553.442075][T10072] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1332'. [ 553.485487][T10072] veth1_macvtap: entered allmulticast mode [ 553.537608][ T991] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 553.800317][T10084] netlink: 'syz.3.1333': attribute type 19 has an invalid length. [ 553.835622][T10084] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1333'. [ 553.872459][T10085] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1334'. [ 554.336985][T10095] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1338'. [ 555.226681][ T5789] Bluetooth: hci1: unexpected event 0x16 length: 15 > 6 [ 558.919853][T10129] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.1348'. [ 558.974962][T10129] netlink: 'syz.0.1348': attribute type 10 has an invalid length. [ 559.314028][T10142] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1352'. [ 559.401763][T10146] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1351'. [ 562.843858][ T5789] Bluetooth: hci0: unexpected event 0x16 length: 15 > 6 [ 562.963317][T10157] syzkaller0: entered promiscuous mode [ 562.983624][T10157] syzkaller0: entered allmulticast mode [ 563.146864][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.155613][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 567.713212][T10169] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.1361'. [ 567.755453][T10169] netlink: 8446 bytes leftover after parsing attributes in process `syz.1.1361'. [ 567.848657][T10176] netlink: 'syz.2.1362': attribute type 9 has an invalid length. [ 567.865646][T10176] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1362'. [ 568.129425][T10183] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1363'. [ 568.141200][T10176] netlink: 'syz.2.1362': attribute type 9 has an invalid length. [ 568.176267][T10176] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1362'. [ 568.276958][T10185] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1364'. [ 568.521132][T10189] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1365'. [ 569.701780][T10195] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 569.731205][T10195] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 569.992629][ T5789] Bluetooth: hci2: unexpected event 0x16 length: 15 > 6 [ 573.024697][T10195] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 573.062820][T10195] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 573.091543][T10195] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 573.101132][T10195] batman_adv: batadv0: Removing interface: virt_wifi0 [ 573.160686][T10195] bond0: (slave batadv0): Releasing backup interface [ 573.271485][T10208] syzkaller0: entered promiscuous mode [ 573.277188][T10208] syzkaller0: entered allmulticast mode [ 576.333497][T10217] netlink: 'syz.1.1375': attribute type 21 has an invalid length. [ 576.345767][T10217] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1375'. [ 576.734627][T10226] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1376'. [ 576.859368][T10227] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1377'. [ 584.265757][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 585.540471][ T1123] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 585.944098][T10239] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 585.952093][T10239] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 585.963033][T10239] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 585.970765][T10239] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 586.023947][T10239] bond0: (slave batadv0): Releasing backup interface [ 586.052588][T10246] netlink: 'syz.3.1385': attribute type 21 has an invalid length. [ 586.080806][T10246] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1385'. [ 586.474393][T10260] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1388'. [ 586.780920][T10263] netlink: 'syz.0.1389': attribute type 3 has an invalid length. [ 586.789712][T10255] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 586.815222][T10263] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1389'. [ 590.172048][T10274] netlink: 'syz.3.1393': attribute type 25 has an invalid length. [ 590.181244][T10274] netlink: 'syz.3.1393': attribute type 12 has an invalid length. [ 590.589586][T10276] syzkaller0: entered promiscuous mode [ 590.619972][T10276] syzkaller0: entered allmulticast mode [ 590.689034][T10283] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1396'. [ 593.126861][T10289] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 593.135721][T10289] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 593.145504][T10289] batman_adv: batadv0: Interface deactivated: €Â0 [ 593.154650][T10289] batman_adv: batadv0: Removing interface: €Â0 [ 593.163279][T10289] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 593.171965][T10289] batman_adv: batadv0: Removing interface: virt_wifi0 [ 593.395054][T10296] netlink: 'syz.2.1400': attribute type 2 has an invalid length. [ 593.486391][T10299] netlink: 'syz.0.1399': attribute type 21 has an invalid length. [ 593.494724][T10299] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1399'. [ 593.515932][T10296] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1400'. [ 593.839610][T10305] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1401'. [ 593.972115][T10311] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1403'. [ 595.206374][T10316] netlink: 'syz.1.1406': attribute type 25 has an invalid length. [ 595.224643][T10316] netlink: 'syz.1.1406': attribute type 12 has an invalid length. [ 597.210779][T10328] FAULT_INJECTION: forcing a failure. [ 597.210779][T10328] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 597.224308][T10328] CPU: 1 PID: 10328 Comm: syz.2.1410 Not tainted syzkaller #0 [ 597.231820][T10328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 597.241926][T10328] Call Trace: [ 597.245248][T10328] [ 597.248221][T10328] dump_stack_lvl+0x18c/0x250 [ 597.252968][T10328] ? show_regs_print_info+0x20/0x20 [ 597.258232][T10328] ? load_image+0x420/0x420 [ 597.262797][T10328] ? __might_fault+0xaa/0x120 [ 597.267528][T10328] ? __lock_acquire+0x7d40/0x7d40 [ 597.272376][T10321] syzkaller0: entered promiscuous mode [ 597.272596][T10328] should_fail_ex+0x39d/0x4d0 [ 597.281986][T10321] syzkaller0: entered allmulticast mode [ 597.282753][T10328] _copy_from_iter+0x1d9/0x12e0 [ 597.282788][T10328] ? __might_fault+0xaa/0x120 [ 597.297994][T10328] ? _copy_from_iter+0x24e/0x12e0 [ 597.303088][T10328] ? __virt_addr_valid+0x18c/0x540 [ 597.308264][T10328] ? __lock_acquire+0x7d40/0x7d40 [ 597.313351][T10328] ? copyout_mc+0x70/0x70 [ 597.317753][T10328] ? copyout_mc+0x70/0x70 [ 597.322140][T10328] ? __virt_addr_valid+0x18c/0x540 [ 597.327308][T10328] ? page_copy_sane+0x16a/0x270 [ 597.332313][T10328] copy_page_from_iter+0x7b/0x100 [ 597.337406][T10328] skb_copy_datagram_from_iter+0x2e4/0x6e0 [ 597.343318][T10328] tun_get_user+0x15db/0x3ca0 [ 597.348076][T10328] ? aa_file_perm+0x11b/0xee0 [ 597.352836][T10328] ? rcu_read_unlock+0xa0/0xa0 [ 597.357677][T10328] ? tun_get+0x1c/0x2e0 [ 597.361903][T10328] ? __lock_acquire+0x7d40/0x7d40 [ 597.367085][T10328] ? tun_get+0x1c/0x2e0 [ 597.371314][T10328] tun_chr_write_iter+0x119/0x200 [ 597.376416][T10328] vfs_write+0x46c/0x990 [ 597.380825][T10328] ? file_end_write+0x250/0x250 [ 597.385869][T10328] ? __fget_files+0x43d/0x4b0 [ 597.390724][T10328] ? __fdget_pos+0x1d8/0x330 [ 597.395371][T10328] ? ksys_write+0x75/0x260 [ 597.400055][T10328] ksys_write+0x150/0x260 [ 597.404478][T10328] ? __ia32_sys_read+0x90/0x90 [ 597.409340][T10328] ? lockdep_hardirqs_on+0x98/0x150 [ 597.414600][T10328] do_syscall_64+0x55/0xa0 [ 597.419070][T10328] ? clear_bhb_loop+0x40/0x90 [ 597.423852][T10328] ? clear_bhb_loop+0x40/0x90 [ 597.428597][T10328] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 597.434568][T10328] RIP: 0033:0x7fd257b9cdd9 [ 597.439291][T10328] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 597.458955][T10328] RSP: 002b:00007fd2589ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 597.467430][T10328] RAX: ffffffffffffffda RBX: 00007fd257e15fa0 RCX: 00007fd257b9cdd9 [ 597.475468][T10328] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 597.483478][T10328] RBP: 00007fd2589ac090 R08: 0000000000000000 R09: 0000000000000000 [ 597.491471][T10328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 597.499463][T10328] R13: 00007fd257e16038 R14: 00007fd257e15fa0 R15: 00007ffd8c7e2b78 [ 597.507476][T10328] [ 599.403542][T10337] netlink: 'syz.1.1412': attribute type 10 has an invalid length. [ 599.417269][T10337] veth1_macvtap: left promiscuous mode [ 599.492822][T10334] netlink: 'syz.2.1411': attribute type 21 has an invalid length. [ 599.505502][T10334] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1411'. [ 599.676978][T10348] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1413'. [ 599.777315][T10349] netlink: 'syz.3.1414': attribute type 2 has an invalid length. [ 599.828974][T10349] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1414'. [ 599.864641][T10351] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1415'. [ 600.666453][T10359] netlink: 'syz.0.1416': attribute type 25 has an invalid length. [ 600.674351][T10359] netlink: 'syz.0.1416': attribute type 12 has an invalid length. [ 603.591009][T10364] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 604.260433][ T5789] Bluetooth: hci2: unexpected event 0x16 length: 15 > 6 [ 604.377852][T10380] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1424'. [ 604.517609][T10374] syzkaller0: entered promiscuous mode [ 604.535054][T10374] syzkaller0: entered allmulticast mode [ 604.709245][T10390] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1427'. [ 605.120476][T10394] netlink: 52711 bytes leftover after parsing attributes in process `syz.1.1428'. [ 610.075772][T10393] €Â0: renamed from batadv_slave_1 (while UP) [ 610.202104][T10405] netlink: 'syz.2.1432': attribute type 25 has an invalid length. [ 610.222359][T10405] netlink: 'syz.2.1432': attribute type 12 has an invalid length. [ 610.387368][T10407] syzkaller0: entered promiscuous mode [ 610.393611][T10407] syzkaller0: entered allmulticast mode [ 613.410096][T10412] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 613.703953][ T5789] Bluetooth: hci2: unexpected event 0x16 length: 15 > 6 [ 613.883333][T10423] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1435'. [ 615.770957][T10430] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1437'. [ 615.847907][T10433] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1438'. [ 615.989367][T10436] €Â0: renamed from batadv_slave_1 (while UP) [ 616.124562][T10438] netlink: 52711 bytes leftover after parsing attributes in process `syz.0.1442'. [ 616.747718][T10441] netlink: 'syz.2.1443': attribute type 21 has an invalid length. [ 620.031108][T10451] FAULT_INJECTION: forcing a failure. [ 620.031108][T10451] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 620.045626][T10451] CPU: 1 PID: 10451 Comm: syz.3.1446 Not tainted syzkaller #0 [ 620.053160][T10451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 620.063259][T10451] Call Trace: [ 620.066586][T10451] [ 620.069561][T10451] dump_stack_lvl+0x18c/0x250 [ 620.074306][T10451] ? show_regs_print_info+0x20/0x20 [ 620.079567][T10451] ? load_image+0x420/0x420 [ 620.084326][T10451] ? __might_fault+0xaa/0x120 [ 620.089069][T10451] should_fail_ex+0x39d/0x4d0 [ 620.093796][T10451] copyin+0x1a/0x90 [ 620.097643][T10451] _copy_from_iter+0x404/0x12e0 [ 620.102723][T10451] ? copyin+0x70/0x90 [ 620.106841][T10451] ? copyout_mc+0x70/0x70 [ 620.111229][T10451] ? copyout_mc+0x70/0x70 [ 620.115593][T10451] ? __virt_addr_valid+0x18c/0x540 [ 620.120742][T10451] ? page_copy_sane+0x16a/0x270 [ 620.125637][T10451] copy_page_from_iter+0x7b/0x100 [ 620.130700][T10451] skb_copy_datagram_from_iter+0x2e4/0x6e0 [ 620.136551][T10451] unix_stream_sendmsg+0x562/0xbf0 [ 620.141698][T10451] ? unix_show_fdinfo+0x270/0x270 [ 620.146757][T10451] ? security_socket_sendmsg+0x70/0xa0 [ 620.152245][T10451] ? security_socket_sendmsg+0x80/0xa0 [ 620.157733][T10451] ? unix_show_fdinfo+0x270/0x270 [ 620.162801][T10451] ____sys_sendmsg+0x5ba/0x960 [ 620.167596][T10451] ? __sys_sendmsg_sock+0x30/0x30 [ 620.172649][T10451] ? __import_iovec+0x3fa/0x850 [ 620.177542][T10451] ? import_iovec+0x73/0xa0 [ 620.182078][T10451] ___sys_sendmsg+0x2a6/0x360 [ 620.186791][T10451] ? __sys_sendmsg+0x2a0/0x2a0 [ 620.191686][T10451] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 620.197982][T10451] __se_sys_sendmsg+0x1c2/0x2b0 [ 620.202859][T10451] ? hrtimer_interrupt+0x7bb/0x9c0 [ 620.208098][T10451] ? __x64_sys_sendmsg+0x80/0x80 [ 620.213403][T10451] ? lockdep_hardirqs_on+0x98/0x150 [ 620.218908][T10451] do_syscall_64+0x55/0xa0 [ 620.223380][T10451] ? clear_bhb_loop+0x40/0x90 [ 620.228147][T10451] ? clear_bhb_loop+0x40/0x90 [ 620.232879][T10451] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 620.238810][T10451] RIP: 0033:0x7fb30239cdd9 [ 620.243275][T10451] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 620.262926][T10451] RSP: 002b:00007fb303276028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 620.271382][T10451] RAX: ffffffffffffffda RBX: 00007fb302615fa0 RCX: 00007fb30239cdd9 [ 620.279381][T10451] RDX: 0000000000000000 RSI: 0000200000000b00 RDI: 0000000000000007 [ 620.287384][T10451] RBP: 00007fb303276090 R08: 0000000000000000 R09: 0000000000000000 [ 620.295386][T10451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 620.303387][T10451] R13: 00007fb302616038 R14: 00007fb302615fa0 R15: 00007fff9413a3b8 [ 620.311483][T10451] [ 620.337435][T10454] netlink: 'syz.0.1445': attribute type 25 has an invalid length. [ 620.350028][T10454] netlink: 'syz.0.1445': attribute type 12 has an invalid length. [ 620.642079][T10460] syzkaller0: entered promiscuous mode [ 620.661843][T10460] syzkaller0: entered allmulticast mode [ 620.751716][T10465] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1451'. [ 620.790022][ T5789] Bluetooth: hci2: unexpected event 0x16 length: 15 > 6 [ 621.119442][T10469] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1452'. [ 621.714805][T10475] netlink: 52711 bytes leftover after parsing attributes in process `syz.1.1453'. [ 624.579627][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.588173][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.535228][T10490] netlink: 'syz.2.1458': attribute type 25 has an invalid length. [ 629.554986][T10492] netlink: 'syz.1.1457': attribute type 21 has an invalid length. [ 629.574103][T10490] netlink: 'syz.2.1458': attribute type 12 has an invalid length. [ 629.936810][T10502] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1461'. [ 629.981671][T10503] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1462'. [ 630.427538][T10510] netlink: 'syz.3.1463': attribute type 21 has an invalid length. [ 630.463014][T10510] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1463'. [ 630.520014][T10514] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1464'. [ 631.201541][T10521] netlink: 52711 bytes leftover after parsing attributes in process `syz.0.1466'. [ 631.819200][T10527] syzkaller0: entered promiscuous mode [ 631.824849][T10527] syzkaller0: entered allmulticast mode [ 635.512608][T10533] netlink: 'syz.3.1470': attribute type 25 has an invalid length. [ 635.536427][T10533] netlink: 'syz.3.1470': attribute type 12 has an invalid length. [ 635.691208][T10541] netlink: 'syz.2.1472': attribute type 10 has an invalid length. [ 635.743276][T10541] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1472'. [ 635.765008][T10545] netlink: 'syz.3.1473': attribute type 21 has an invalid length. [ 635.800223][T10547] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1474'. [ 635.814786][T10541] caif0: entered promiscuous mode [ 635.852475][T10541] caif0: entered allmulticast mode [ 635.881836][T10541] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 636.588274][T10554] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1475'. [ 637.057123][T10565] netlink: 'syz.0.1477': attribute type 21 has an invalid length. [ 637.078084][T10562] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1476'. [ 637.125592][T10565] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1477'. [ 637.278800][T10569] netlink: 52711 bytes leftover after parsing attributes in process `syz.1.1478'. [ 637.811103][T10577] netlink: 'syz.0.1481': attribute type 25 has an invalid length. [ 637.819323][T10577] netlink: 'syz.0.1481': attribute type 12 has an invalid length. [ 637.848855][ T5789] Bluetooth: hci3: unexpected event 0x16 length: 15 > 6 [ 637.943280][T10579] syzkaller0: entered promiscuous mode [ 637.965610][T10579] syzkaller0: entered allmulticast mode [ 638.319175][T10588] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1486'. [ 638.824352][T10597] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1488'. [ 640.892224][T10593] netlink: 'syz.0.1487': attribute type 21 has an invalid length. [ 640.900931][T10593] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1487'. [ 640.911060][T10601] netlink: 16182 bytes leftover after parsing attributes in process `syz.2.1489'. [ 641.050641][T10604] netlink: 'syz.0.1491': attribute type 25 has an invalid length. [ 641.059235][T10604] netlink: 'syz.0.1491': attribute type 12 has an invalid length. [ 641.093000][T10606] €Â0: renamed from batadv_slave_1 (while UP) [ 641.156865][T10606] netlink: 52711 bytes leftover after parsing attributes in process `syz.2.1490'. [ 641.270101][T10612] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1492'. [ 641.283445][T10610] netlink: 'syz.0.1493': attribute type 21 has an invalid length. [ 641.425533][ T5789] Bluetooth: hci0: unexpected event 0x16 length: 15 > 6 [ 641.502561][T10616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 641.859828][T10620] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1496'. [ 642.083956][T10624] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1497'. [ 642.328870][T10626] netlink: 16182 bytes leftover after parsing attributes in process `syz.0.1498'. [ 642.816825][T10634] netlink: 'syz.1.1500': attribute type 21 has an invalid length. [ 642.825140][T10634] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1500'. [ 643.014545][T10639] syzkaller0: entered promiscuous mode [ 643.035591][T10639] syzkaller0: entered allmulticast mode [ 643.086696][T10643] netlink: 'syz.0.1503': attribute type 25 has an invalid length. [ 643.094595][T10643] netlink: 'syz.0.1503': attribute type 12 has an invalid length. [ 643.238657][T10650] netlink: 52711 bytes leftover after parsing attributes in process `syz.1.1505'. [ 644.006837][T10658] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1507'. [ 646.464686][T10664] __nla_validate_parse: 1 callbacks suppressed [ 646.464706][T10664] netlink: 16182 bytes leftover after parsing attributes in process `syz.1.1509'. [ 646.733054][T10675] netlink: 'syz.1.1513': attribute type 21 has an invalid length. [ 646.744727][T10678] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1512'. [ 646.771195][T10675] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1513'. [ 646.784789][T10679] netlink: 'syz.3.1514': attribute type 25 has an invalid length. [ 646.796756][T10679] netlink: 'syz.3.1514': attribute type 12 has an invalid length. [ 647.077939][T10687] netlink: 'syz.1.1515': attribute type 25 has an invalid length. [ 647.114089][T10687] netlink: 'syz.1.1515': attribute type 12 has an invalid length. [ 647.147443][T10686] netlink: 'syz.0.1523': attribute type 21 has an invalid length. [ 647.178584][T10686] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1523'. [ 647.390134][T10693] netlink: 52711 bytes leftover after parsing attributes in process `syz.3.1516'. [ 647.739052][T10696] netlink: 'syz.1.1517': attribute type 21 has an invalid length. [ 647.787804][T10696] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1517'. [ 647.814950][T10702] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1518'. [ 648.030133][T10706] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1519'. [ 648.404420][T10710] netlink: 'syz.1.1521': attribute type 3 has an invalid length. [ 648.417999][T10710] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1521'. [ 648.684090][T10713] syzkaller0: entered promiscuous mode [ 648.706562][T10713] syzkaller0: entered allmulticast mode [ 648.734093][T10718] netlink: 'syz.3.1525': attribute type 25 has an invalid length. [ 648.743312][T10718] netlink: 'syz.3.1525': attribute type 12 has an invalid length. [ 649.090931][T10726] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1526'. [ 651.718855][T10743] __nla_validate_parse: 4 callbacks suppressed [ 651.718893][T10743] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1532'. [ 651.979539][T10749] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1533'. [ 652.132459][T10754] validate_nla: 3 callbacks suppressed [ 652.132480][T10754] netlink: 'syz.1.1535': attribute type 25 has an invalid length. [ 652.148609][T10755] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1534'. [ 652.225747][T10754] netlink: 'syz.1.1535': attribute type 12 has an invalid length. [ 652.788035][T10763] netlink: 'syz.3.1537': attribute type 21 has an invalid length. [ 652.816888][T10763] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1537'. [ 653.304376][T10772] syzkaller0: entered promiscuous mode [ 653.311550][T10772] syzkaller0: entered allmulticast mode [ 653.363642][T10778] netlink: 'syz.3.1541': attribute type 21 has an invalid length. [ 653.372383][T10778] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1541'. [ 653.669921][ T5789] Bluetooth: hci1: unexpected event 0x17 length: 15 > 6 [ 653.723709][T10787] netlink: 'syz.2.1543': attribute type 3 has an invalid length. [ 653.738809][T10787] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1543'. [ 655.208967][T10786] netlink: 'syz.3.1544': attribute type 25 has an invalid length. [ 655.216975][T10786] netlink: 'syz.3.1544': attribute type 12 has an invalid length. [ 655.538090][T10797] netlink: 52711 bytes leftover after parsing attributes in process `syz.1.1546'. [ 655.548722][T10799] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1545'. [ 655.621489][T10796] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1547'. [ 655.817788][T10804] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1548'. [ 656.302107][T10809] netlink: 'syz.1.1549': attribute type 21 has an invalid length. [ 656.827492][T10819] netlink: 'syz.1.1552': attribute type 21 has an invalid length. [ 656.845534][T10819] __nla_validate_parse: 1 callbacks suppressed [ 656.845552][T10819] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1552'. [ 656.904804][T10822] netlink: 'syz.0.1553': attribute type 3 has an invalid length. [ 656.964382][T10822] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1553'. [ 657.076765][ T5789] Bluetooth: hci0: unexpected event 0x16 length: 15 > 6 [ 657.166406][T10834] validate_nla: 2 callbacks suppressed [ 657.166424][T10834] netlink: 'syz.2.1557': attribute type 2 has an invalid length. [ 657.225721][T10834] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1557'. [ 657.239336][T10832] syzkaller0: entered promiscuous mode [ 657.244907][T10832] syzkaller0: entered allmulticast mode [ 657.285021][T10836] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1558'. [ 657.601888][T10846] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1559'. [ 658.322469][T10852] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1561'. [ 660.277367][T10847] netlink: 'syz.2.1560': attribute type 21 has an invalid length. [ 660.285253][T10847] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1560'. [ 660.436142][T10866] netlink: 'syz.2.1565': attribute type 25 has an invalid length. [ 660.466093][T10866] netlink: 'syz.2.1565': attribute type 12 has an invalid length. [ 660.558389][T10867] netlink: 'syz.3.1564': attribute type 21 has an invalid length. [ 660.571263][T10867] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1564'. [ 660.759083][ T5789] Bluetooth: hci2: unexpected event 0x16 length: 15 > 6 [ 660.794325][T10872] netlink: 'syz.1.1566': attribute type 3 has an invalid length. [ 660.814002][T10872] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1566'. [ 660.856350][T10876] netlink: 'syz.2.1568': attribute type 2 has an invalid length. [ 660.864148][T10876] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1568'. [ 662.524828][T10907] syzkaller0: entered promiscuous mode [ 662.538169][T10907] syzkaller0: entered allmulticast mode [ 662.546296][T10903] netlink: 'syz.3.1574': attribute type 21 has an invalid length. [ 662.556390][T10903] __nla_validate_parse: 3 callbacks suppressed [ 662.556426][T10903] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1574'. [ 662.624341][T10914] netlink: 'syz.2.1577': attribute type 21 has an invalid length. [ 662.645594][T10914] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1577'. [ 662.761455][ T5789] Bluetooth: hci2: unexpected event 0x16 length: 15 > 6 [ 662.970366][T10922] netlink: 'syz.3.1579': attribute type 3 has an invalid length. [ 662.987962][T10922] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.1579'. [ 664.467225][T10920] netlink: 'syz.2.1580': attribute type 25 has an invalid length. [ 664.475129][T10920] netlink: 'syz.2.1580': attribute type 12 has an invalid length. [ 664.831062][T10928] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1582'. [ 664.952054][T10936] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1583'. [ 664.972849][T10934] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1584'. [ 665.272050][T10940] netlink: 'syz.3.1585': attribute type 2 has an invalid length. [ 665.344210][T10940] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1585'. [ 665.966521][T10947] netlink: 'syz.3.1587': attribute type 21 has an invalid length. [ 665.966990][T10943] netlink: 'syz.2.1586': attribute type 3 has an invalid length. [ 665.992636][T10947] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1587'. [ 666.015164][T10943] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1586'. [ 666.023064][T10952] netlink: 'syz.1.1588': attribute type 21 has an invalid length. [ 666.023148][T10952] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1588'. [ 666.248758][T10954] netlink: 'syz.0.1589': attribute type 3 has an invalid length. [ 666.428180][T10961] syzkaller0: entered promiscuous mode [ 666.434773][T10961] syzkaller0: entered allmulticast mode [ 666.534608][ T5789] Bluetooth: hci3: unexpected event 0x17 length: 15 > 6 [ 667.737472][T10975] __nla_validate_parse: 2 callbacks suppressed [ 667.737580][T10975] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1596'. [ 668.372089][T10979] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1597'. [ 669.495688][T10982] validate_nla: 3 callbacks suppressed [ 669.495728][T10982] netlink: 'syz.0.1598': attribute type 21 has an invalid length. [ 669.514799][T10982] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1598'. [ 669.748809][T10992] netlink: 'syz.2.1600': attribute type 21 has an invalid length. [ 669.753598][T10990] FAULT_INJECTION: forcing a failure. [ 669.753598][T10990] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 669.778659][T10990] CPU: 0 PID: 10990 Comm: syz.3.1599 Not tainted syzkaller #0 [ 669.786204][T10990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 669.796314][T10990] Call Trace: [ 669.797648][T10992] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1600'. [ 669.799635][T10990] [ 669.799647][T10990] dump_stack_lvl+0x18c/0x250 [ 669.799691][T10990] ? show_regs_print_info+0x20/0x20 [ 669.799726][T10990] ? load_image+0x420/0x420 [ 669.799758][T10990] ? __might_fault+0xaa/0x120 [ 669.799782][T10990] ? __lock_acquire+0x7d40/0x7d40 [ 669.799813][T10990] should_fail_ex+0x39d/0x4d0 [ 669.799853][T10990] _copy_from_user+0x2f/0xe0 [ 669.799883][T10990] inet6_ioctl+0x1ad/0x2d0 [ 669.799909][T10990] ? inet6_getname+0x650/0x650 [ 669.854942][T10990] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 669.860482][T10990] sock_do_ioctl+0xfc/0x310 [ 669.865048][T10990] ? sock_show_fdinfo+0xb0/0xb0 [ 669.869986][T10990] sock_ioctl+0x5ba/0x7e0 [ 669.874382][T10990] ? sock_poll+0x3e0/0x3e0 [ 669.874787][T10996] netlink: 'syz.1.1601': attribute type 25 has an invalid length. [ 669.878854][T10990] ? bpf_lsm_file_ioctl+0x9/0x10 [ 669.878886][T10990] ? security_file_ioctl+0x80/0xa0 [ 669.878919][T10990] ? sock_poll+0x3e0/0x3e0 [ 669.878942][T10990] __se_sys_ioctl+0xfd/0x170 [ 669.906063][T10990] do_syscall_64+0x55/0xa0 [ 669.910542][T10990] ? clear_bhb_loop+0x40/0x90 [ 669.915279][T10990] ? clear_bhb_loop+0x40/0x90 [ 669.920012][T10990] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 669.925966][T10990] RIP: 0033:0x7fb30239cdd9 [ 669.930441][T10990] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 669.930621][T10996] netlink: 'syz.1.1601': attribute type 12 has an invalid length. [ 669.950200][T10990] RSP: 002b:00007fb303276028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 669.950234][T10990] RAX: ffffffffffffffda RBX: 00007fb302615fa0 RCX: 00007fb30239cdd9 [ 669.950249][T10990] RDX: 0000200000000000 RSI: 000000000000890b RDI: 000000000000000e [ 669.950262][T10990] RBP: 00007fb303276090 R08: 0000000000000000 R09: 0000000000000000 [ 669.950275][T10990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 669.950287][T10990] R13: 00007fb302616038 R14: 00007fb302615fa0 R15: 00007fff9413a3b8 [ 669.950320][T10990] [ 670.092986][T10990] sit0: entered promiscuous mode [ 670.226514][T10995] netlink: 'syz.0.1602': attribute type 3 has an invalid length. [ 670.262893][T10995] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1602'. [ 670.439786][T11004] netlink: 'syz.1.1604': attribute type 2 has an invalid length. [ 670.450611][T11004] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1604'. [ 670.622252][T11009] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1605'. [ 670.652798][T11010] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1606'. [ 671.563535][T11016] syzkaller0: entered promiscuous mode [ 671.581765][ T5789] Bluetooth: hci1: unexpected event 0x17 length: 15 > 6 [ 671.606456][T11016] syzkaller0: entered allmulticast mode [ 671.734742][T11020] netlink: 'syz.3.1610': attribute type 21 has an invalid length. [ 671.743587][T11020] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1610'. [ 671.804064][T11018] netlink: 'syz.0.1607': attribute type 3 has an invalid length. [ 671.847179][T11018] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1607'. [ 673.691279][T11031] netlink: 'syz.1.1611': attribute type 21 has an invalid length. [ 673.699334][T11031] __nla_validate_parse: 1 callbacks suppressed [ 673.699349][T11031] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1611'. [ 673.952524][T11042] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1614'. [ 674.024402][T11045] netlink: 'syz.2.1616': attribute type 2 has an invalid length. [ 674.032252][T11044] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1615'. [ 674.214162][T11045] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1616'. [ 674.567774][T11052] netlink: 'syz.0.1617': attribute type 21 has an invalid length. [ 674.609344][T11052] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1617'. [ 674.757585][T11057] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1618'. [ 675.142774][ T5789] Bluetooth: hci2: unexpected event 0x16 length: 15 > 6 [ 675.398243][T11064] netlink: 'syz.1.1620': attribute type 21 has an invalid length. [ 675.418479][T11064] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1620'. [ 675.605114][T11070] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1621'. [ 675.665929][T11072] netlink: 52711 bytes leftover after parsing attributes in process `syz.3.1622'. [ 675.912141][T11079] netlink: 'syz.1.1623': attribute type 21 has an invalid length. [ 675.925986][T11079] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1623'. [ 676.051900][T11081] syzkaller0: entered promiscuous mode [ 676.073702][T11081] syzkaller0: entered allmulticast mode [ 676.337009][T11088] netlink: 'syz.1.1626': attribute type 2 has an invalid length. [ 676.554626][T11091] netlink: 'syz.3.1627': attribute type 3 has an invalid length. [ 676.751928][ T5789] Bluetooth: hci2: unexpected event 0x16 length: 15 > 6 [ 678.957759][T11099] netlink: 'syz.1.1630': attribute type 21 has an invalid length. [ 678.972827][T11099] __nla_validate_parse: 3 callbacks suppressed [ 678.972843][T11099] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1630'. [ 679.246456][T11116] netlink: 52711 bytes leftover after parsing attributes in process `syz.1.1633'. [ 679.404801][T11119] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1632'. [ 679.428695][T11115] netlink: 'syz.2.1634': attribute type 21 has an invalid length. [ 679.460376][T11115] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1634'. [ 679.508292][T11117] netlink: 'syz.3.1631': attribute type 21 has an invalid length. [ 679.556323][T11117] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1631'. [ 679.860313][T11126] netlink: 'syz.3.1636': attribute type 2 has an invalid length. [ 679.890915][T11126] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1636'. [ 680.200814][T11135] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1638'. [ 680.220700][T11133] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1637'. [ 680.389460][T11140] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1639'. [ 680.496317][ T5789] Bluetooth: hci2: unexpected event 0x16 length: 15 > 6 [ 681.214789][T11145] netlink: 'syz.0.1641': attribute type 3 has an invalid length. [ 681.248733][T11145] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1641'. [ 681.551880][T11147] syzkaller0: entered promiscuous mode [ 681.557701][T11147] syzkaller0: entered allmulticast mode [ 681.741601][T11156] netlink: 'syz.1.1643': attribute type 21 has an invalid length. [ 681.770771][T11154] netlink: 'syz.0.1644': attribute type 21 has an invalid length. [ 682.093449][T11168] netlink: 'syz.0.1647': attribute type 2 has an invalid length. [ 683.428665][ T5789] Bluetooth: hci2: unexpected event 0x16 length: 15 > 6 [ 684.558834][T11177] __nla_validate_parse: 5 callbacks suppressed [ 684.558878][T11177] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1651'. [ 684.630319][T11179] syzkaller0: entered promiscuous mode [ 684.645459][T11179] syzkaller0: entered allmulticast mode [ 684.668512][T11182] netlink: 'syz.3.1652': attribute type 25 has an invalid length. [ 684.685495][T11182] netlink: 'syz.3.1652': attribute type 12 has an invalid length. [ 686.025526][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.033332][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.988604][T11196] netlink: 'syz.1.1654': attribute type 21 has an invalid length. [ 686.996617][T11196] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1654'. [ 687.007521][T11198] netlink: 'syz.0.1653': attribute type 21 has an invalid length. [ 687.015603][T11198] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1653'. [ 687.025925][T11197] netlink: 'syz.3.1655': attribute type 21 has an invalid length. [ 687.033807][T11197] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1655'. [ 687.130468][T11203] netlink: 'syz.1.1656': attribute type 2 has an invalid length. [ 687.170280][T11203] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1656'. [ 687.441593][ T5789] Bluetooth: hci3: unexpected event 0x16 length: 15 > 6 [ 687.563098][T11213] netlink: 52711 bytes leftover after parsing attributes in process `syz.3.1659'. [ 687.639382][T11212] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1657'. [ 688.739229][T11231] netlink: 'syz.3.1665': attribute type 21 has an invalid length. [ 688.777069][T11231] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1665'. [ 688.931393][T11233] sit0: entered promiscuous mode [ 689.166698][T11238] syzkaller0: entered promiscuous mode [ 689.173548][T11238] syzkaller0: entered allmulticast mode [ 689.329093][T11246] netlink: 'syz.0.1669': attribute type 2 has an invalid length. [ 689.344492][T11246] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1669'. [ 689.629792][ T5789] Bluetooth: hci1: unexpected event 0x16 length: 15 > 6 [ 689.810665][T11252] netlink: 52711 bytes leftover after parsing attributes in process `syz.0.1671'. [ 691.205009][T11243] netlink: 'syz.2.1668': attribute type 21 has an invalid length. [ 691.213080][T11243] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1668'. [ 691.477785][T11262] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1672'. [ 691.653816][T11265] netlink: 'syz.1.1675': attribute type 21 has an invalid length. [ 691.681957][T11265] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1675'. [ 692.140648][T11274] netlink: 'syz.3.1677': attribute type 21 has an invalid length. [ 692.166198][T11274] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1677'. [ 692.439963][T11279] netlink: 'syz.1.1679': attribute type 2 has an invalid length. [ 692.465836][T11279] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1679'. [ 692.788250][T11284] netlink: 'syz.3.1680': attribute type 21 has an invalid length. [ 692.803457][T11284] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1680'. [ 692.867281][ T5789] Bluetooth: hci2: unexpected event 0x16 length: 15 > 6 [ 692.893016][T11288] syzkaller0: entered promiscuous mode [ 692.906944][T11288] syzkaller0: entered allmulticast mode [ 692.967648][T11293] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1681'. [ 693.188154][T11298] netlink: 52711 bytes leftover after parsing attributes in process `syz.3.1684'. [ 695.293463][T11306] netlink: 'syz.2.1686': attribute type 21 has an invalid length. [ 695.303829][T11306] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1686'. [ 695.516524][T11317] netlink: 'syz.0.1690': attribute type 2 has an invalid length. [ 695.531235][T11317] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1690'. [ 695.765814][T11324] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1689'. [ 695.957626][T11327] netlink: 'syz.2.1692': attribute type 21 has an invalid length. [ 695.995682][T11327] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1692'. [ 696.107978][ T5789] Bluetooth: hci2: unexpected event 0x16 length: 15 > 6 [ 696.568753][T11336] netlink: 'syz.0.1694': attribute type 21 has an invalid length. [ 696.619175][T11339] netlink: 52711 bytes leftover after parsing attributes in process `syz.2.1695'. [ 696.640860][T11336] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1694'. [ 696.873074][T11342] syzkaller0: entered promiscuous mode [ 696.878966][T11342] syzkaller0: entered allmulticast mode [ 697.074797][T11349] netlink: 'syz.3.1696': attribute type 21 has an invalid length. [ 697.084339][T11349] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1696'. [ 698.833117][T11353] netlink: 'syz.3.1699': attribute type 21 has an invalid length. [ 698.842480][T11353] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1699'. [ 698.852701][T11360] netlink: 'syz.2.1707': attribute type 21 has an invalid length. [ 698.865555][T11360] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1707'. [ 699.032440][T11365] netlink: 'syz.3.1701': attribute type 2 has an invalid length. [ 699.047678][T11365] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1701'. [ 699.080746][ T5789] Bluetooth: hci3: unexpected event 0x16 length: 15 > 6 [ 699.196639][T11369] netlink: 'syz.1.1703': attribute type 21 has an invalid length. [ 700.613738][T11403] netlink: 'syz.3.1711': attribute type 21 has an invalid length. [ 700.635599][T11403] __nla_validate_parse: 3 callbacks suppressed [ 700.635651][T11403] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1711'. [ 700.814396][T11409] netlink: 'syz.0.1713': attribute type 2 has an invalid length. [ 700.832460][T11407] syzkaller0: entered promiscuous mode [ 700.834246][T11409] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1713'. [ 700.874450][T11407] syzkaller0: entered allmulticast mode [ 701.202782][ T5789] Bluetooth: hci0: unexpected event 0x16 length: 15 > 6 [ 704.830344][T11417] netlink: 'syz.0.1715': attribute type 21 has an invalid length. [ 704.856420][T11417] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1715'. [ 705.099547][T11440] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1718'. [ 708.450868][T11454] netlink: 52711 bytes leftover after parsing attributes in process `syz.1.1721'. [ 708.548721][T11456] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1720'. [ 708.577392][T11456] openvswitch: netlink: Tunnel attr 2548 out of range max 16 [ 710.165838][T11450] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 710.183866][T11449] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 710.202660][T11455] netlink: 'syz.0.1722': attribute type 21 has an invalid length. [ 710.211100][T11455] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1722'. [ 710.588678][T11464] netlink: 'syz.3.1725': attribute type 21 has an invalid length. [ 710.596755][T11464] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1725'. [ 710.634558][T11469] syzkaller0: entered promiscuous mode [ 710.641510][T11469] syzkaller0: entered allmulticast mode [ 710.871235][ T5789] Bluetooth: hci1: unexpected event 0x16 length: 15 > 6 [ 710.913140][T11475] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1729'. [ 712.138913][T11483] netlink: 52711 bytes leftover after parsing attributes in process `syz.0.1731'. [ 716.099248][T11486] netlink: 'syz.3.1732': attribute type 21 has an invalid length. [ 716.108644][T11486] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1732'. [ 716.653026][T11504] netlink: 'syz.3.1737': attribute type 21 has an invalid length. [ 716.697729][T11504] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1737'. [ 716.764224][T11501] netlink: 'syz.0.1738': attribute type 10 has an invalid length. [ 716.772916][T11501] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1738'. [ 717.272119][T11520] netlink: 52711 bytes leftover after parsing attributes in process `syz.0.1742'. [ 718.011086][T11531] netlink: 'syz.3.1743': attribute type 21 has an invalid length. [ 718.031165][T11531] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1743'. [ 718.135023][T11532] syzkaller0: entered promiscuous mode [ 718.142570][T11532] syzkaller0: entered allmulticast mode [ 720.333437][ T5789] Bluetooth: hci2: unexpected event 0x16 length: 15 > 6 [ 724.865475][T11547] netlink: 'syz.3.1749': attribute type 21 has an invalid length. [ 724.895816][T11547] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1749'. [ 725.287358][T11555] syzkaller0: entered promiscuous mode [ 725.336264][T11555] syzkaller0: entered allmulticast mode [ 725.348733][T11552] netlink: 'syz.1.1750': attribute type 10 has an invalid length. [ 725.359713][T11552] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1750'. [ 725.678090][T11568] netlink: 52711 bytes leftover after parsing attributes in process `syz.1.1753'. [ 730.883516][T11574] netlink: 'syz.3.1754': attribute type 21 has an invalid length. [ 730.891585][T11574] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1754'. [ 730.901279][T11585] netlink: 'syz.2.1760': attribute type 21 has an invalid length. [ 730.912272][T11585] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1760'. [ 731.200657][T11593] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1762'. [ 731.422602][T11595] netlink: 52711 bytes leftover after parsing attributes in process `syz.1.1764'. [ 731.798531][T11597] netlink: 'syz.2.1763': attribute type 10 has an invalid length. [ 731.835738][T11597] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1763'. [ 731.847925][T11597] hsr0: entered promiscuous mode [ 731.905886][T11597] bridge0: port 3(hsr0) entered blocking state [ 731.917814][T11597] bridge0: port 3(hsr0) entered disabled state [ 731.937256][T11597] hsr0: entered allmulticast mode [ 731.946079][T11597] hsr_slave_0: entered allmulticast mode [ 731.957707][T11597] hsr_slave_1: entered allmulticast mode [ 732.002445][T11597] bridge0: port 3(hsr0) entered blocking state [ 732.009220][T11597] bridge0: port 3(hsr0) entered forwarding state [ 734.341737][T11597] syz.2.1763 (11597) used greatest stack depth: 17864 bytes left [ 735.339625][T11620] netlink: 'syz.0.1770': attribute type 21 has an invalid length. [ 735.376299][T11620] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1770'. [ 735.405817][T11619] netlink: 'syz.1.1769': attribute type 21 has an invalid length. [ 735.433241][T11619] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1769'. [ 735.505775][T11627] syzkaller0: entered promiscuous mode [ 735.511423][T11627] syzkaller0: entered allmulticast mode [ 735.978063][T11632] netlink: 52711 bytes leftover after parsing attributes in process `syz.1.1774'. [ 736.453273][T11638] netlink: 'syz.1.1776': attribute type 3 has an invalid length. [ 736.461486][T11638] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1776'. [ 737.931027][T11640] netlink: 'syz.3.1777': attribute type 3 has an invalid length. [ 737.946614][T11640] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.1777'. [ 738.300851][T11653] netlink: 'syz.3.1781': attribute type 21 has an invalid length. [ 738.357664][T11653] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1781'. [ 738.420477][T11655] netlink: 'syz.0.1782': attribute type 21 has an invalid length. [ 738.448344][T11655] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1782'. [ 741.447893][T11670] netlink: 52711 bytes leftover after parsing attributes in process `syz.3.1784'. [ 741.543779][T11667] syzkaller0: entered promiscuous mode [ 741.549610][T11667] syzkaller0: entered allmulticast mode [ 741.559153][T11665] netlink: 'syz.2.1786': attribute type 10 has an invalid length. [ 742.058039][T11682] netlink: 'syz.3.1789': attribute type 3 has an invalid length. [ 742.075869][T11682] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.1789'. [ 744.039490][T11687] netlink: 'syz.2.1792': attribute type 21 has an invalid length. [ 744.048364][T11687] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1792'. [ 744.449675][T11696] netlink: 'syz.3.1793': attribute type 21 has an invalid length. [ 744.501507][T11696] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1793'. [ 747.460636][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.467127][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.786788][T11714] netlink: 52711 bytes leftover after parsing attributes in process `syz.0.1797'. [ 748.331561][T11704] netlink: 'syz.1.1799': attribute type 3 has an invalid length. [ 748.353140][T11704] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1799'. [ 748.739236][T11728] syzkaller0: entered promiscuous mode [ 748.754057][T11728] syzkaller0: entered allmulticast mode [ 748.763904][T11727] netlink: 'syz.3.1802': attribute type 21 has an invalid length. [ 748.775730][T11727] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1802'. [ 756.239983][T11747] netlink: 'syz.3.1810': attribute type 3 has an invalid length. [ 756.247989][T11747] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.1810'. [ 756.787413][T11740] netlink: 'syz.1.1806': attribute type 21 has an invalid length. [ 756.795746][T11740] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1806'. [ 757.019035][T11755] netlink: 52711 bytes leftover after parsing attributes in process `syz.1.1811'. [ 757.629812][T11766] netlink: 'syz.0.1815': attribute type 21 has an invalid length. [ 757.645598][T11766] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1815'. [ 757.930000][T11772] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1817'. [ 758.023435][T11774] netlink: 'syz.0.1818': attribute type 25 has an invalid length. [ 758.055499][T11774] netlink: 'syz.0.1818': attribute type 12 has an invalid length. [ 758.497937][T11780] netlink: 'syz.0.1819': attribute type 21 has an invalid length. [ 758.526742][T11780] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1819'. [ 758.747961][T11783] syzkaller0: entered promiscuous mode [ 758.753524][T11783] syzkaller0: entered allmulticast mode [ 759.132438][ T5789] Bluetooth: hci1: unexpected event 0x14 length: 15 > 6 [ 759.370014][T11794] netlink: 'syz.0.1823': attribute type 3 has an invalid length. [ 759.395476][T11794] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1823'. [ 761.214271][T11801] netlink: 52711 bytes leftover after parsing attributes in process `syz.0.1825'. [ 763.028758][T11809] netlink: 'syz.3.1827': attribute type 25 has an invalid length. [ 763.037229][T11809] netlink: 'syz.3.1827': attribute type 12 has an invalid length. [ 763.144593][T11810] netlink: 'syz.0.1826': attribute type 21 has an invalid length. [ 763.188017][T11810] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1826'. [ 763.503078][T11820] netlink: 'syz.3.1830': attribute type 21 has an invalid length. [ 763.545699][T11820] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1830'. [ 763.905924][T11826] netlink: 'syz.0.1832': attribute type 3 has an invalid length. [ 763.942233][T11826] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1832'. [ 764.133697][T11834] netlink: 52711 bytes leftover after parsing attributes in process `syz.3.1834'. [ 767.167821][ T5789] Bluetooth: hci0: unexpected event 0x14 length: 15 > 6 [ 767.194543][T11842] syzkaller0: entered promiscuous mode [ 767.235404][T11842] syzkaller0: entered allmulticast mode [ 767.244157][T11847] netlink: 'syz.1.1838': attribute type 25 has an invalid length. [ 767.265371][T11847] netlink: 'syz.1.1838': attribute type 12 has an invalid length. [ 772.027391][T11858] netlink: 'syz.1.1839': attribute type 21 has an invalid length. [ 772.035489][T11858] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1839'. [ 772.044823][T11863] netlink: 'syz.2.1842': attribute type 21 has an invalid length. [ 772.054379][T11863] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1842'. [ 772.264677][T11869] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1843'. [ 772.636323][T11878] netlink: 52711 bytes leftover after parsing attributes in process `syz.0.1845'. [ 773.593186][T11885] netlink: 'syz.1.1847': attribute type 3 has an invalid length. [ 773.601431][T11885] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1847'. [ 775.445638][T11887] netlink: 'syz.0.1849': attribute type 25 has an invalid length. [ 775.500476][T11887] netlink: 'syz.0.1849': attribute type 12 has an invalid length. [ 775.864651][ T5789] Bluetooth: hci3: unexpected event 0x14 length: 15 > 6 [ 775.932282][T11902] netlink: 'syz.1.1852': attribute type 21 has an invalid length. [ 775.951930][T11902] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1852'. [ 778.904676][T11905] syzkaller0: entered promiscuous mode [ 778.926616][T11905] syzkaller0: entered allmulticast mode [ 779.017727][T11911] netlink: 'syz.1.1854': attribute type 21 has an invalid length. [ 779.067438][T11911] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1854'. [ 779.209110][T11920] netlink: 52711 bytes leftover after parsing attributes in process `syz.2.1857'. [ 779.760247][T11925] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1858'. [ 780.741636][T11933] netlink: 'syz.1.1861': attribute type 3 has an invalid length. [ 780.751766][T11933] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1861'. [ 784.547419][T11935] netlink: 'syz.3.1862': attribute type 21 has an invalid length. [ 784.561501][T11935] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1862'. [ 784.826607][T11947] netlink: 'syz.3.1865': attribute type 25 has an invalid length. [ 784.868557][T11947] netlink: 'syz.3.1865': attribute type 12 has an invalid length. [ 784.993079][T11953] netlink: 'syz.0.1866': attribute type 21 has an invalid length. [ 785.026865][T11953] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1866'. [ 788.218834][T11966] netlink: 'syz.2.1870': attribute type 3 has an invalid length. [ 788.237065][T11966] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1870'. [ 788.545760][T11973] netlink: 52711 bytes leftover after parsing attributes in process `syz.0.1871'. [ 788.827888][T11980] netlink: 'syz.2.1872': attribute type 3 has an invalid length. [ 788.851231][T11980] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1872'. [ 791.643039][T11983] netlink: 'syz.2.1875': attribute type 25 has an invalid length. [ 791.671082][T11983] netlink: 'syz.2.1875': attribute type 12 has an invalid length. [ 791.842075][T11991] syzkaller0: entered promiscuous mode [ 791.875474][T11991] syzkaller0: entered allmulticast mode [ 791.889839][T11995] netlink: 'syz.0.1873': attribute type 21 has an invalid length. [ 791.898290][T11995] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1873'. [ 791.910398][T11994] netlink: 'syz.1.1876': attribute type 21 has an invalid length. [ 791.924403][T11994] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1876'. [ 792.340250][T12011] netlink: 'syz.0.1881': attribute type 3 has an invalid length. [ 792.349152][T12011] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1881'. [ 792.460331][T12013] netlink: 52711 bytes leftover after parsing attributes in process `syz.1.1882'. [ 794.230598][T12022] netlink: 'syz.2.1886': attribute type 25 has an invalid length. [ 794.245415][T12022] netlink: 'syz.2.1886': attribute type 12 has an invalid length. [ 794.642014][T12028] netlink: 'syz.0.1887': attribute type 21 has an invalid length. [ 794.681596][T12028] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1887'. [ 794.776519][T12031] netlink: 'syz.2.1888': attribute type 21 has an invalid length. [ 794.808196][T12031] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1888'. [ 797.584038][T12043] syzkaller0: entered promiscuous mode [ 797.636247][T12043] syzkaller0: entered allmulticast mode [ 797.754878][T12046] netlink: 52711 bytes leftover after parsing attributes in process `syz.0.1891'. [ 798.301258][T12054] netlink: 'syz.1.1895': attribute type 3 has an invalid length. [ 798.310540][T12054] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1895'. [ 799.833746][T12057] netlink: 'syz.0.1896': attribute type 25 has an invalid length. [ 799.841951][T12057] netlink: 'syz.0.1896': attribute type 12 has an invalid length. [ 800.158070][T12069] netlink: 'syz.3.1899': attribute type 21 has an invalid length. [ 800.198024][T12069] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1899'. [ 800.264350][T12068] netlink: 'syz.0.1898': attribute type 21 has an invalid length. [ 800.285522][T12068] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1898'. [ 801.204459][T12091] netlink: 52711 bytes leftover after parsing attributes in process `syz.0.1904'. [ 801.280483][T12092] netlink: 'syz.1.1906': attribute type 25 has an invalid length. [ 801.301937][T12092] netlink: 'syz.1.1906': attribute type 12 has an invalid length. [ 801.552764][T12095] syzkaller0: entered promiscuous mode [ 801.570311][T12095] syzkaller0: entered allmulticast mode [ 801.887489][ T5789] Bluetooth: hci1: unexpected event 0x16 length: 15 > 6 [ 808.893231][T12106] netlink: 'syz.2.1911': attribute type 21 has an invalid length. [ 808.908634][T12106] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1911'. [ 808.918373][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.924914][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.084014][T12125] netlink: 'syz.3.1916': attribute type 25 has an invalid length. [ 809.112936][T12125] netlink: 'syz.3.1916': attribute type 12 has an invalid length. [ 809.508208][T12133] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1918'. [ 809.927263][ T5789] Bluetooth: hci0: unexpected event 0x16 length: 15 > 6 [ 812.761365][T12146] syzkaller0: entered promiscuous mode [ 812.774924][T12146] syzkaller0: entered allmulticast mode [ 812.796246][T12155] netlink: 'syz.2.1924': attribute type 21 has an invalid length. [ 812.804596][T12155] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1924'. [ 812.898619][T12160] netlink: 'syz.1.1928': attribute type 25 has an invalid length. [ 812.907171][T12160] netlink: 'syz.1.1928': attribute type 12 has an invalid length. [ 814.235437][ T5789] Bluetooth: hci3: unexpected event 0x16 length: 15 > 6 [ 815.227011][T12171] netlink: 'syz.0.1937': attribute type 21 has an invalid length. [ 815.242193][T12171] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1937'. [ 815.251709][T12175] netlink: 'syz.1.1932': attribute type 39 has an invalid length. [ 815.592276][T12190] netlink: 'syz.2.1939': attribute type 25 has an invalid length. [ 815.600636][T12190] netlink: 'syz.2.1939': attribute type 12 has an invalid length. [ 815.705506][T12192] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1936'. [ 818.884384][T12207] netlink: 'syz.3.1943': attribute type 21 has an invalid length. [ 818.918321][T12207] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1943'. [ 819.243588][T12214] syzkaller0: entered promiscuous mode [ 819.265671][T12214] syzkaller0: entered allmulticast mode [ 819.273755][T12215] netlink: 'syz.1.1944': attribute type 21 has an invalid length. [ 819.309578][T12215] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1944'. [ 819.679327][T12225] netlink: 'syz.1.1948': attribute type 3 has an invalid length. [ 819.687386][T12225] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1948'. [ 821.300086][T12222] netlink: 'syz.3.1947': attribute type 39 has an invalid length. [ 821.371961][T12228] netlink: 'syz.0.1949': attribute type 25 has an invalid length. [ 821.380216][T12228] netlink: 'syz.0.1949': attribute type 12 has an invalid length. [ 821.728600][T12240] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1953'. [ 821.913405][T12241] netlink: 'syz.1.1954': attribute type 21 has an invalid length. [ 821.931687][T12241] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1954'. [ 825.059124][T12256] netlink: 'syz.3.1956': attribute type 21 has an invalid length. [ 825.077511][T12256] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1956'. [ 825.267440][T12258] syzkaller0: entered promiscuous mode [ 825.286908][T12258] syzkaller0: entered allmulticast mode [ 825.317659][T12263] netlink: 'syz.1.1959': attribute type 25 has an invalid length. [ 825.334796][T12263] netlink: 'syz.1.1959': attribute type 12 has an invalid length. [ 825.463798][T12268] netlink: 'syz.3.1960': attribute type 3 has an invalid length. [ 825.494222][T12268] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.1960'. [ 825.841334][ T5789] Bluetooth: hci1: unexpected event 0x16 length: 15 > 6 [ 827.506248][T12276] netlink: 'syz.2.1963': attribute type 21 has an invalid length. [ 827.525362][T12276] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1963'. [ 827.872875][ T5789] Bluetooth: hci3: unexpected event 0x14 length: 15 > 6 [ 828.049873][T12290] netlink: 'syz.0.1968': attribute type 21 has an invalid length. [ 828.068645][T12290] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1968'. [ 828.580649][T12298] netlink: 'syz.3.1969': attribute type 25 has an invalid length. [ 828.590401][T12298] netlink: 'syz.3.1969': attribute type 12 has an invalid length. [ 831.231705][T12306] netlink: 'syz.3.1972': attribute type 3 has an invalid length. [ 831.246266][T12306] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.1972'. [ 831.346254][T12311] netlink: 'syz.1.1973': attribute type 21 has an invalid length. [ 831.364886][T12311] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1973'. [ 831.801530][T12317] syzkaller0: entered promiscuous mode [ 831.821137][T12317] syzkaller0: entered allmulticast mode [ 832.184450][ T5789] Bluetooth: hci1: unexpected event 0x14 length: 15 > 6 [ 833.771685][T12331] netlink: 'syz.2.1980': attribute type 25 has an invalid length. [ 833.787266][T12331] netlink: 'syz.2.1980': attribute type 12 has an invalid length. [ 833.795377][T12332] netlink: 'syz.0.1979': attribute type 21 has an invalid length. [ 833.803247][T12332] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1979'. [ 833.918203][T12336] netlink: 'syz.3.1983': attribute type 3 has an invalid length. [ 833.935529][T12336] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.1983'. [ 834.123515][T12344] netlink: 'syz.1.1984': attribute type 21 has an invalid length. [ 834.137953][T12344] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1984'. [ 837.271514][T12359] netlink: 'syz.0.1989': attribute type 25 has an invalid length. [ 837.290657][T12359] netlink: 'syz.0.1989': attribute type 12 has an invalid length. [ 837.480975][ T5789] Bluetooth: hci0: unexpected event 0x14 length: 15 > 6 [ 837.498480][T12364] syzkaller0: entered promiscuous mode [ 837.511289][T12364] syzkaller0: entered allmulticast mode [ 837.519810][T12366] netlink: 'syz.1.1990': attribute type 21 has an invalid length. [ 837.528497][T12366] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1990'. [ 837.608663][T12372] netlink: 'syz.0.1993': attribute type 3 has an invalid length. [ 837.618183][T12372] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1993'. [ 839.379114][T12377] netlink: 'syz.1.1995': attribute type 10 has an invalid length. [ 839.410598][T12377] team0: Device wg1 is of different type [ 839.422939][T12384] netlink: 'syz.0.1998': attribute type 21 has an invalid length. [ 839.448667][T12384] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1998'. [ 839.602506][T12391] netlink: 'syz.0.2001': attribute type 25 has an invalid length. [ 839.627217][T12391] netlink: 'syz.0.2001': attribute type 12 has an invalid length. [ 839.921532][T12401] netlink: 'syz.3.2002': attribute type 21 has an invalid length. [ 839.952268][T12401] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2002'. [ 842.891950][T12405] netlink: 'syz.1.2005': attribute type 3 has an invalid length. [ 842.902029][T12405] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.2005'. [ 843.178011][T12412] syzkaller0: entered promiscuous mode [ 843.184530][T12412] syzkaller0: entered allmulticast mode [ 843.363082][T12423] netlink: 15743 bytes leftover after parsing attributes in process `syz.1.2010'. [ 843.374608][T12420] netlink: 'syz.3.2009': attribute type 21 has an invalid length. [ 843.394589][T12420] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2009'. [ 847.098742][T12442] netlink: 'syz.3.2016': attribute type 3 has an invalid length. [ 847.106763][T12442] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.2016'. [ 848.306949][T12425] netlink: 'syz.2.2011': attribute type 25 has an invalid length. [ 848.314967][T12425] netlink: 'syz.2.2011': attribute type 12 has an invalid length. [ 848.323394][T12435] netlink: 'syz.1.2015': attribute type 21 has an invalid length. [ 848.332604][T12435] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2015'. [ 848.559477][T12451] netlink: 'syz.0.2020': attribute type 3 has an invalid length. [ 848.568769][T12451] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.2020'. [ 848.949252][T12460] netlink: 'syz.1.2021': attribute type 21 has an invalid length. [ 848.981722][T12460] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2021'. [ 849.034723][T12463] netpci0: tun_chr_ioctl cmd 2147767519 [ 849.057047][T12463] netlink: 'syz.3.2024': attribute type 21 has an invalid length. [ 849.090012][T12463] netpci0: tun_chr_ioctl cmd 1074025680 [ 849.119007][T12463] netpci0: tun_chr_ioctl cmd 35108 [ 849.159110][ C0] [ 849.159119][ C0] ================================ [ 849.159125][ C0] WARNING: inconsistent lock state [ 849.159137][ C0] syzkaller #0 Not tainted [ 849.159147][ C0] -------------------------------- [ 849.159152][ C0] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 849.159161][ C0] syz.3.2024/12463 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 849.159183][ C0] ffff88807566aa38 (&trie->lock){....}-{2:2}, at: trie_delete_elem+0x96/0x6a0 [ 849.159251][ C0] {INITIAL USE} state was registered at: [ 849.159263][ C0] lock_acquire+0x19e/0x420 [ 849.159288][ C0] _raw_spin_lock_irqsave+0xb4/0x100 [ 849.159312][ C0] trie_update_elem+0xcd/0xea0 [ 849.159337][ C0] bpf_map_update_value+0x660/0x720 [ 849.159354][ C0] generic_map_update_batch+0x5ec/0x810 [ 849.159371][ C0] bpf_map_do_batch+0x3d7/0x610 [ 849.159391][ C0] __sys_bpf+0x381/0x890 [ 849.159409][ C0] __x64_sys_bpf+0x7c/0x90 [ 849.159426][ C0] do_syscall_64+0x55/0xa0 [ 849.159442][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 849.159466][ C0] irq event stamp: 2486 [ 849.159472][ C0] hardirqs last enabled at (2485): [] syscall_enter_from_user_mode+0x25/0x80 [ 849.159504][ C0] hardirqs last disabled at (2486): [] exc_debug+0x73/0x140 [ 849.159527][ C0] softirqs last enabled at (2220): [] bpf_prog_load+0x1266/0x1670 [ 849.159554][ C0] softirqs last disabled at (2218): [] bpf_ksym_add+0x2d/0x340 [ 849.159580][ C0] [ 849.159580][ C0] other info that might help us debug this: [ 849.159586][ C0] Possible unsafe locking scenario: [ 849.159586][ C0] [ 849.159591][ C0] CPU0 [ 849.159594][ C0] ---- [ 849.159598][ C0] lock(&trie->lock); [ 849.159609][ C0] [ 849.159613][ C0] lock(&trie->lock); [ 849.159625][ C0] [ 849.159625][ C0] *** DEADLOCK *** [ 849.159625][ C0] [ 849.159629][ C0] no locks held by syz.3.2024/12463. [ 849.159637][ C0] [ 849.159637][ C0] stack backtrace: [ 849.159644][ C0] CPU: 0 PID: 12463 Comm: syz.3.2024 Not tainted syzkaller #0 [ 849.159662][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 849.159674][ C0] Call Trace: [ 849.159682][ C0] <#DB> [ 849.159688][ C0] dump_stack_lvl+0x18c/0x250 [ 849.159723][ C0] ? show_regs_print_info+0x20/0x20 [ 849.159759][ C0] ? print_usage_bug+0x475/0x690 [ 849.159782][ C0] ? verify_lock_unused+0x18/0x140 [ 849.159807][ C0] lock_acquire+0x2c2/0x420 [ 849.159832][ C0] ? trie_delete_elem+0x96/0x6a0 [ 849.159858][ C0] ? read_lock_is_recursive+0x20/0x20 [ 849.159890][ C0] ? get_user_pages_fast_only+0xa0/0xa0 [ 849.159922][ C0] _raw_spin_lock_irqsave+0xb4/0x100 [ 849.159947][ C0] ? trie_delete_elem+0x96/0x6a0 [ 849.159973][ C0] ? _raw_spin_lock+0x40/0x40 [ 849.159997][ C0] ? perf_prepare_sample+0x156d/0x1df0 [ 849.160022][ C0] trie_delete_elem+0x96/0x6a0 [ 849.160048][ C0] ? __cant_sleep+0x220/0x220 [ 849.160081][ C0] bpf_prog_2c29ac5cdc6b1842+0x42/0x46 [ 849.160102][ C0] bpf_overflow_handler+0x1fc/0x510 [ 849.160133][ C0] ? bpf_overflow_handler+0xde/0x510 [ 849.160162][ C0] ? tp_perf_event_destroy+0x20/0x20 [ 849.160194][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 849.160219][ C0] __perf_event_overflow+0x447/0x630 [ 849.160246][ C0] perf_swevent_event+0x319/0x570 [ 849.160271][ C0] ? perf_tp_event+0x1520/0x1520 [ 849.160301][ C0] perf_bp_event+0x319/0x430 [ 849.160327][ C0] ? perf_event_free_bpf_prog+0x120/0x120 [ 849.160368][ C0] ? lock_acquire+0x2c2/0x420 [ 849.160394][ C0] hw_breakpoint_exceptions_notify+0x23e/0x670 [ 849.160429][ C0] notifier_call_chain+0x197/0x380 [ 849.160456][ C0] ? atomic_notifier_call_chain+0x26/0x180 [ 849.160483][ C0] atomic_notifier_call_chain+0xda/0x180 [ 849.160509][ C0] notify_die+0x145/0x1a0 [ 849.160535][ C0] ? srcu_init_notifier_head+0x90/0x90 [ 849.160565][ C0] ? rcu_is_watching+0x15/0xb0 [ 849.160593][ C0] notify_debug+0x2e/0x50 [ 849.160612][ C0] exc_debug+0xde/0x140 [ 849.160632][ C0] asm_exc_debug+0x1e/0x40 [ 849.160656][ C0] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 849.160679][ C0] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 849.160696][ C0] RSP: 0018:ffffc9000d097c30 EFLAGS: 00050206 [ 849.160713][ C0] RAX: ffffffff842a1f01 RBX: 0000000000000e40 RCX: 0000000000000dff [ 849.160726][ C0] RDX: 0000000000000001 RSI: 0000200000000301 RDI: ffff888079c84081 [ 849.160740][ C0] RBP: ffff888079c84000 R08: ffff888079c84e7f R09: 1ffff1100f3909cf [ 849.160754][ C0] R10: dffffc0000000000 R11: ffffed100f3909d0 R12: 0000200000001100 [ 849.160769][ C0] R13: ffff888079c84040 R14: ffff888079c84040 R15: 00002000000002c0 [ 849.160787][ C0] ? rcuref_put_slowpath+0x141/0x150 [ 849.160818][ C0] [ 849.160823][ C0] [ 849.160829][ C0] _copy_from_user+0x8b/0xe0 [ 849.160855][ C0] bpf_prog_test_run_skb+0x266/0x12b0 [ 849.160882][ C0] ? __fget_files+0x28/0x4b0 [ 849.160907][ C0] ? __fget_files+0x28/0x4b0 [ 849.160932][ C0] ? __fget_files+0x43d/0x4b0 [ 849.160956][ C0] ? cpu_online+0x60/0x60 [ 849.160972][ C0] bpf_prog_test_run+0x321/0x390 [ 849.160990][ C0] __sys_bpf+0x49d/0x890 [ 849.161007][ C0] ? bpf_link_show_fdinfo+0x390/0x390 [ 849.161029][ C0] ? lock_chain_count+0x20/0x20 [ 849.161049][ C0] __x64_sys_bpf+0x7c/0x90 [ 849.161065][ C0] do_syscall_64+0x55/0xa0 [ 849.161077][ C0] ? clear_bhb_loop+0x40/0x90 [ 849.161096][ C0] ? clear_bhb_loop+0x40/0x90 [ 849.161116][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 849.161135][ C0] RIP: 0033:0x7fb30239cdd9 [ 849.161147][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 849.161159][ C0] RSP: 002b:00007fb303276028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 849.161173][ C0] RAX: ffffffffffffffda RBX: 00007fb302615fa0 RCX: 00007fb30239cdd9 [ 849.161184][ C0] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a [ 849.161194][ C0] RBP: 00007fb302432d69 R08: 0000000000000000 R09: 0000000000000000 [ 849.161203][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 849.161211][ C0] R13: 00007fb302616038 R14: 00007fb302615fa0 R15: 00007fff9413a3b8 [ 849.161228][ C0]