last executing test programs: 25.507681934s ago: executing program 1 (id=2522): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x8, 0x400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, @perf_config_ext={0xffffffffffffff7f}, 0x111311, 0x1, 0x0, 0x1, 0x20000, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x5}, 0x94) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x2}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x21, 0x2, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b00)={r2, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000840)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000880)=[0x0], &(0x7f00000008c0)=[0x0, 0x0], 0x0, 0xaa, &(0x7f0000000900)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000940), &(0x7f0000000980), 0x8, 0x4d, 0x8, 0x8, &(0x7f00000009c0)}}, 0x10) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000006000000080000000000000e043ae4222161e4d9cd648700000000070000000000000000000e0100000001000000002e00302e00"], &(0x7f0000000b80)=""/74, 0x3e, 0x4a, 0x1, 0x3}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x7, 0x3, &(0x7f00000002c0)=@raw=[@exit, @map_val={0x18, 0xa, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x2, '\x00', r5, @fallback=0x2e, r6, 0x8, &(0x7f0000000c40)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000c80)={0x1, 0xd, 0x3, 0x1a7}, 0x10, 0xffffffffffffffff, r2, 0x0, &(0x7f0000000cc0)=[r1], 0x0, 0x10, 0x101}, 0x94) setsockopt$sock_attach_bpf(r4, 0x110, 0x4, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x6e, 0xa, 0xa, 0x0, 0x0, 0x61, 0x10, 0x20}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xffffff7f, 0x0, 0x1}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000006000000000000000200001302000000040000000000000000000000000000800000000000000000000000005f"], 0x0, 0x42}, 0x28) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xd, 0x4, &(0x7f0000000380)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x39}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) close(r7) socket$kcm(0x29, 0x5, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000340)={0x0, &(0x7f0000000200)=""/105, 0x0, &(0x7f0000000580)="bca13f58108937270789108abef62fc69699d33b5b5ef0def2fb77dbb117902c28122e2f2fb8ac793c47db676efd92aeacef4f223cdb490d7eaa0860b0f1abaaad5a58cd7e5855b48a7272e2854fda05f41a005d555f788cac0ce588812f48ec13a49b934fcfa64f4862f43adc0335ee9a202360de774f6123ff", 0x7, r7, 0x4}, 0x38) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x50101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={&(0x7f0000000180), 0x3}, 0x0, 0x80000, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x4864}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8b1a, &(0x7f0000000000)={'macvlan0\x00', @random="0000230c1100"}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815000100e000000103600e12080005007a010401a8001600200003400400", 0x3a}], 0x1}, 0x4000000) socket$kcm(0x10, 0x2, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a8001600a400014020000500feffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) 24.420049701s ago: executing program 1 (id=2523): socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000010000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x136e54520700452d, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000780850000000f"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x3, 0x8, 0x2, 0x8, 0x2020005, 0xb, 0x0, 0x2, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB], 0x17) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000, 0x8001}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="08fb7f00040000000400000022bf000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32], 0x50) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000001c0)}], 0x1}, 0x0) 23.888676914s ago: executing program 1 (id=2526): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000005c0)=r2, 0x12) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x1, 0x12) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020642500000000002020207b1af8ff00"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703320000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r7, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8000000000000000, 0x8000}, 0x4105, 0x0, 0x3}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 7.421261998s ago: executing program 0 (id=2565): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000b40)=""/4110, 0x100e}], 0x1}, 0x10100) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7f, 0x7}, 0x104101, 0x4, 0x7fff, 0x1, 0x10, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f91424fc60100005", 0x17}], 0x1}, 0x0) 7.418657158s ago: executing program 2 (id=2566): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x80000001, 0x7, 0x6, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000fcfeffff8500000013000000850000005000000095"], 0x0, 0x423, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) socket$kcm(0xa, 0x2, 0x0) (async) r2 = socket$kcm(0xa, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) setsockopt$sock_attach_bpf(r2, 0x29, 0x37, &(0x7f0000000040), 0xcf) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1805000000000000000000000000000085000000a8"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r3}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0xc, &(0x7f0000003f80)=ANY=[@ANYBLOB="18020000feffffff00000000000000008500000041000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010400000850000007200000095"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0xc, &(0x7f0000003f80)=ANY=[@ANYBLOB="18020000feffffff00000000000000008500000041000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010400000850000007200000095"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 6.693013555s ago: executing program 0 (id=2568): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x0, 0xca, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) syz_clone(0x5080200, &(0x7f0000000000), 0x0, 0x0, 0x0, &(0x7f0000000240)="9e3d624d6a5165d84a9c832afac3a69eedcfcdc6d9266de9eefcbfcb277010b0bb22fbf563720b73b099b97332ce230b12e6a737071123a947bcd3f527123258161e6d4440f23abdf9fe0fdfabb0205816eadf7456e1d66ec99627") r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x2}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x15, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="180800000000050000000000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000003009500000000000000b7080000000100007b9a00fe00000000b509ffffff1f0000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b700"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0xf, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r7) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0x22f, 0x10, 0x0, 0xff6a}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r8, 0x300f000, 0x0, 0x0, 0x0, 0x0, 0x48b8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0xc00000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r9 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r9, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xfffd, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xca}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r11) recvmsg$unix(r10, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r12, 0x541b, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85feff0fc9"], 0x0}, 0x94) write$cgroup_subtree(r3, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r2], 0x12) 4.711123074s ago: executing program 2 (id=2569): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xe, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="06000000040000000800000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000005000085000000b000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000a80)="d80000001d0081044e81f777db44b904021d080201f00000040000a1bc0001000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c16fb4007134cf6ee08000a0e408e8d8ef075c11503c6bbace801bcb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322107c9fd6", 0x81}, {&(0x7f00000006c0)="54f6d4d87eb3f140c5", 0x9}, {&(0x7f0000000980)="027a64c0072ebbb1512b328dda11b4efd4ba07fc642b7e012bea071dbbdea51e41958755533ccce04d3e635cbe848495e723490d8e93db224d82d4fbfe76bd22fd358cd467795ad7febfc220d72f", 0x4e}], 0x3, 0x0, 0x0, 0x7400}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x210}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000400)={r3, &(0x7f0000000340)}, 0x20) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x3, 0x25, 0x4000, 0x0, 0x0, 0x119, 0x0, 0xffffffffffffffa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x40) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000008c0)={0xffffffffffffffff, &(0x7f00000007c0)="01f0576ccf7e4efb7fccff8f7b57591e7e15e3e4fca707a45b0321da95b88acd3bf2afeaf3e73a400fc5965684b37568f7572b5c77ab7197e69fafe28398ec0c4a19e16aeda3dff56f7cd58626e84532cff6c91c6877709fdb21d5323420ed698abe0a61d79026815eb6403a8131defe00a7a0a13fd0a6ef06787f0f1b06452ce56b977f02150abc0d478c9b3ab251c5e9129b6c632bbb72fad39bb274201daf0a4e07bc442ee14f61e8c9de9f4e93fbf7315b4f5f2bafe7648f2dc2a144743b0b006fb18529aea4050a29f40200b08830b76be6058677e7b39336f89f087126ac768a47262e23f373534b9290379dcbf73e0f19"}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014000089bbc7a46e363e4a79e37988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0f56a20ff27f", 0x87}], 0x1}, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0xf1, 0x7, 0x4, 0x0, 0x6, 0x91, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x105, 0x0, 0x5, 0x2, 0xffff0000, 0x0, 0x0, 0x102ff, 0x0, 0xffffffffffffffff}, 0x0, 0x1, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x12}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2, 0xffffffff}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x11, 0xe, 0x0, &(0x7f0000000700)="0300000000000000a139d475c695", 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x2}, 0x50) 4.680000355s ago: executing program 3 (id=2570): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x0, 0xca, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) syz_clone(0x5080200, &(0x7f0000000000), 0x0, 0x0, 0x0, &(0x7f0000000240)="9e3d624d6a5165d84a9c832afac3a69eedcfcdc6d9266de9eefcbfcb277010b0bb22fbf563720b73b099b97332ce230b12e6a737071123a947bcd3f527123258161e6d4440f23abdf9fe0fdfabb0205816eadf7456e1d66ec99627") r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x2}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x15, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="180800000000050000000000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000003009500000000000000b7080000000100007b9a00fe00000000b509ffffff1f0000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b700"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0xf, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r7) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0x22f, 0x10, 0x0, 0xff6a}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r8, 0x300f000, 0x0, 0x0, 0x0, 0x0, 0x48b8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0xc00000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r9 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r9, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xfffd, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xca}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r11) recvmsg$unix(r10, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r12, 0x541b, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85feff0fc9"], 0x0}, 0x94) write$cgroup_subtree(r3, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r2], 0x12) 4.420443481s ago: executing program 0 (id=2571): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000005c0)=r2, 0x12) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x1, 0x12) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703320000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r7, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8000000000000000, 0x8000}, 0x4105, 0x0, 0x3}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 4.201732466s ago: executing program 2 (id=2572): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000005c0)=r2, 0x12) r7 = openat$cgroup_ro(r5, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000040)=0x1, 0x12) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r10, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8000000000000000, 0x8000}, 0x4105, 0x0, 0x3}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.149732772s ago: executing program 3 (id=2573): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x17, &(0x7f00000006c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}], {{0x6, 0x1, 0xd, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000500)="b9ffe4306844ebe99b554e0fe9ad", 0x0, 0x4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$kcm(0x2, 0x922000000001, 0x106) sendmsg$kcm(r2, 0x0, 0x20000000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x6, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0xd3, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0xa0}, 0x4004881) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r3}, 0x8) recvmsg$kcm(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000400)=""/244, 0xf4}], 0x1, &(0x7f00000009c0)=""/145, 0x91}, 0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x3e1, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081084e81f782db44b904021d080006067c09e8fe55a10a0015400800142603600e120800160000001001a8001600a400014003000000036004fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x6000}, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0xa16, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./cgroup/file0/file0\x00', 0x81) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c0000000000002020207b1af8ff00000000bfa100000000000007010000daffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x24000, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x12, 0x27, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x5}, {}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf8b6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ringbuf_query, @initr0={0x18, 0x0, 0x0, 0x0, 0xc}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffe}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000680)='syzkaller\x00', 0x2, 0xf, &(0x7f0000000780)=""/15, 0x40f00, 0x40, '\x00', 0x0, @cgroup_sock_addr=0x34, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r1, 0x0, &(0x7f00000007c0)=[r0, r0], 0x0, 0x10, 0xd}, 0x94) ioctl$TUNSETSTEERINGEBPF(r8, 0x800454e0, &(0x7f00000008c0)=r9) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000000212000000", &(0x7f0000000300)=""/8, 0xd00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 3.043784565s ago: executing program 0 (id=2574): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8922, &(0x7f0000000080)) 2.162560936s ago: executing program 2 (id=2575): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000b40)=""/4110, 0x100e}], 0x1}, 0x10100) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7f, 0x7}, 0x104101, 0x4, 0x7fff, 0x1, 0x10, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f91424fc60100005", 0x17}], 0x1}, 0x0) 2.124217848s ago: executing program 3 (id=2576): r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000001340)=@hci={0x1f, 0xc00, 0x3}, 0x80, 0x0, 0x5c8}, 0x40180) 1.799336056s ago: executing program 1 (id=2530): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x8, 0x400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, @perf_config_ext={0xffffffffffffff7f}, 0x111311, 0x1, 0x0, 0x1, 0x20000, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x5}, 0x94) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x2}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x21, 0x2, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b00)={r2, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000840)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000880)=[0x0], &(0x7f00000008c0)=[0x0, 0x0], 0x0, 0xaa, &(0x7f0000000900)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000940), &(0x7f0000000980), 0x8, 0x4d, 0x8, 0x8, &(0x7f00000009c0)}}, 0x10) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000006000000080000000000000e043ae4222161e4d9cd648700000000070000000000000000000e0100000001000000002e00302e00"], &(0x7f0000000b80)=""/74, 0x3e, 0x4a, 0x1, 0x3}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x7, 0x3, &(0x7f00000002c0)=@raw=[@exit, @map_val={0x18, 0xa, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x2, '\x00', r5, @fallback=0x2e, r6, 0x8, &(0x7f0000000c40)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000c80)={0x1, 0xd, 0x3, 0x1a7}, 0x10, 0xffffffffffffffff, r2, 0x0, &(0x7f0000000cc0)=[r1], 0x0, 0x10, 0x101}, 0x94) setsockopt$sock_attach_bpf(r4, 0x110, 0x4, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x6e, 0xa, 0xa, 0x0, 0x0, 0x61, 0x10, 0x20}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xffffff7f, 0x0, 0x1}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000006000000000000000200001302000000040000000000000000000000000000800000000000000000000000005f"], 0x0, 0x42}, 0x28) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xd, 0x4, &(0x7f0000000380)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x39}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) close(r7) socket$kcm(0x29, 0x5, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000340)={0x0, &(0x7f0000000200)=""/105, 0x0, &(0x7f0000000580)="bca13f58108937270789108abef62fc69699d33b5b5ef0def2fb77dbb117902c28122e2f2fb8ac793c47db676efd92aeacef4f223cdb490d7eaa0860b0f1abaaad5a58cd7e5855b48a7272e2854fda05f41a005d555f788cac0ce588812f48ec13a49b934fcfa64f4862f43adc0335ee9a202360de774f6123ff", 0x7, r7, 0x4}, 0x38) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x50101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={&(0x7f0000000180), 0x3}, 0x0, 0x80000, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x4864}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8b1a, &(0x7f0000000000)={'macvlan0\x00', @random="0000230c1100"}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815000100e000000103600e12080005007a010401a8001600200003400400", 0x3a}], 0x1}, 0x4000000) socket$kcm(0x10, 0x2, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a8001600a400014020000500feffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) 1.787993725s ago: executing program 2 (id=2577): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x8, 0xf33, 0x100, 0x7fff, 0xb37ad2df95e71b7, 0xffffffffffffffff, 0x800, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5}, 0x50) (fail_nth: 1) 1.730078357s ago: executing program 3 (id=2578): r0 = socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffff0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x800, 0x0, 0x80000000}, {0x1000000a, 0x4}], 0x10, 0x40004}, 0x94) close(0x3) r1 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) close(0x3) socket$kcm(0xa, 0x5, 0x0) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, 0x6, 0x10000}, 0x80, 0x0}, 0xd0a0) setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000)=r4, 0x1c) sendmsg$kcm(r0, &(0x7f00000017c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x80fe, 0x7, @dev={0xfe, 0x80, '\x00', 0x33}, 0x12, 0x2}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000004c0)="7f", 0x4d0}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000084000000070000007f00000000000000b8"], 0xd0}, 0x480c4) 1.728774687s ago: executing program 0 (id=2579): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xe, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="06000000040000000800000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000005000085000000b000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000a80)="d80000001d0081044e81f777db44b904021d080201f00000040000a1bc0001000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c16fb4007134cf6ee08000a0e408e8d8ef075c11503c6bbace801bcb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322107c9fd6", 0x81}, {&(0x7f00000006c0)="54f6d4d87eb3f140c5", 0x9}, {&(0x7f0000000980)="027a64c0072ebbb1512b328dda11b4efd4ba07fc642b7e012bea071dbbdea51e41958755533ccce04d3e635cbe848495e723490d8e93db224d82d4fbfe76bd22fd358cd467795ad7febfc220d72f", 0x4e}], 0x3, 0x0, 0x0, 0x7400}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x210}) bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0x3, 0x25, 0x4000, 0x0, 0x0, 0x119, 0x0, 0xffffffffffffffa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x40) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000008c0)={0xffffffffffffffff, &(0x7f00000007c0)="01f0576ccf7e4efb7fccff8f7b57591e7e15e3e4fca707a45b0321da95b88acd3bf2afeaf3e73a400fc5965684b37568f7572b5c77ab7197e69fafe28398ec0c4a19e16aeda3dff56f7cd58626e84532cff6c91c6877709fdb21d5323420ed698abe0a61d79026815eb6403a8131defe00a7a0a13fd0a6ef06787f0f1b06452ce56b977f02150abc0d478c9b3ab251c5e9129b6c632bbb72fad39bb274201daf0a4e07bc442ee14f61e8c9de9f4e93fbf7315b4f5f2bafe7648f2dc2a144743b0b006fb18529aea4050a29f40200b08830b76be6058677e7b39336f89f087126ac768a47262e23f373534b9290379dcbf73e0f19"}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014000089bbc7a46e363e4a79e37988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0f56a20ff27f", 0x87}], 0x1}, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0xf1, 0x7, 0x4, 0x0, 0x6, 0x91, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x105, 0x0, 0x5, 0x2, 0xffff0000, 0x0, 0x0, 0x102ff, 0x0, 0xffffffffffffffff}, 0x0, 0x1, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x12}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2, 0xffffffff}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x11, 0xe, 0x0, &(0x7f0000000700)="0300000000000000a139d475c695", 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x2}, 0x50) 1.026490904s ago: executing program 2 (id=2580): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socket$kcm(0x2, 0x1, 0x84) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{}, 0x0, &(0x7f00000003c0)}, 0x20) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x821, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000080)) r5 = socket$kcm(0xa, 0x3, 0x73) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff99, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) sendmsg$inet(r5, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x3c, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c068c0a7d2eaebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d574256ef7f75552ff087a819e", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838029f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e}}, @ip_tos_u8={{0x14, 0x29, 0x43}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x50}, 0x9fc) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x8, 0xf33, 0x100, 0x7fff, 0xb37ad2df95e71b7, 0xffffffffffffffff, 0x800, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5}, 0x50) 1.023582194s ago: executing program 3 (id=2581): socket$kcm(0x23, 0x5, 0x0) close(0x3) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x5000) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}, 0x86bf2056334f3ae6, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100), 0x4) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000"], 0x0, 0x26}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x1}, 0x10}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000940)={0x1, 0x58, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x5}, 0x50) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a80)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, r0, 0x2, 0x0, 0x5}, 0x50) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b00)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xe, '\x00', 0x0, r0, 0x2, 0x4, 0x5}, 0x50) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000cc0)=@bpf_lsm={0x1d, 0x25, &(0x7f0000000d80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffcc9b}, {}, {}, [@tail_call, @map_fd={0x18, 0x8}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x3}, @ldst={0x0, 0x1, 0x0, 0x5, 0xa, 0x0, 0x1}, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @ldst={0x2, 0x3, 0x1, 0xa, 0x4, 0x39345425a8aa77bb, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000880)='syzkaller\x00', 0x1e70, 0x0, 0x0, 0x41000, 0xa, '\x00', r2, 0x1b, r0, 0x8, &(0x7f0000000980)={0x9, 0x4}, 0x8, 0x10, &(0x7f00000009c0)={0x2, 0x1, 0x10001, 0x4}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000b80)=[0x1, r3, r4, 0x1, r5], &(0x7f0000000c80)=[{0x5, 0x1, 0x0, 0x3}], 0x10, 0x5}, 0x94) r6 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r6, 0x107, 0x8, &(0x7f00000000c0), 0x8) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r7, 0x1, 0x31, &(0x7f0000000000), 0x4) recvmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f260006d2688a84c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r9 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r9, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r9, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b8825fe80000000000000dc8466cc00007a000000ad6e911b51818462b40000000000", 0x28}], 0x1}, 0x0) 929.811086ms ago: executing program 1 (id=2582): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000021000000850000002e000000850000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x2000, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x2, 0x0) socketpair(0x1, 0x801, 0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800000000009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, r1, 0x0) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x84, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2980, 0x2, 0x0, 0x0, 0x712c, 0xd}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x9) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x9) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000003000000000000000100000d0300000000ffffe6020000000100000b0c01000000002e00"], 0x0, 0x3b, 0x0, 0x1}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000002000000000000000000"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x85160, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x82c00, 0x8, 0x3, 0x0, 0x5, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xb6e, 0x8}, 0x420}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x5, 0x42, 0x7, 0x0, 0x0, 0x9d6d1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x10137f, 0x7ff, 0x7, 0x0, 0x81, 0x2, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) 798.56703ms ago: executing program 0 (id=2583): bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x2, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="0401020028000b05d25a806f8c6394f90424fc600d00030009230100ff3582c137153e370248018002000000d1bd", 0x33fe0}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000000000000610000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r3, 0x18000000000002a0, 0x36, 0x0, &(0x7f00000002c0)="740300005f03ed8bb89e08f086dd96bbc59d8f37f30c63c489d23eafdce458f21a4d8d457abf08e67639aea332608ea55f71661f645e", 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f00000002c0)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000500eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e45", 0x54}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20004080) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair(0x1a, 0x0, 0xbeee, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f0000000100)) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x10, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f0000000040)=0x700, 0x0}, 0x20) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 162.766336ms ago: executing program 1 (id=2584): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9c, 0x1, 0x0, 0x0, 0x0, 0x300000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001380)={{r1, 0xffffffffffffffff}, &(0x7f00000012c0), &(0x7f0000001340)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b70a000000000000631184000000000007000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xb579, &(0x7f000000cf3d)=""/195}, 0x23) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x19, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000d1000c000000000001000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000b0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000b7080000000000007b8af8ff00000000b70800000b0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r8, 0x0, 0xe, 0x0, &(0x7f00000000c0)="9dbaac999f69835fc48373a1ee57", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="180100001100000000000000001b98a1020ba635", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702", @ANYRES16=r10, @ANYRESDEC, @ANYRESDEC=r3, @ANYRES8=r9], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc81e9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4846, 0x0, 0xfffffffe, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r11, 0x40042408, r12) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000300)={@map=r4, 0xffffffffffffffff, 0x2f}, 0x20) 0s ago: executing program 3 (id=2585): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000b40)=""/4110, 0x100e}], 0x1}, 0x10100) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7f, 0x7}, 0x104101, 0x4, 0x7fff, 0x1, 0x10, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f91424fc60100005000a000200053582c137153e", 0x23}], 0x1}, 0x0) kernel console output (not intermixed with test programs): 8][T12118] proc_fail_nth_read+0x1e8/0x260 [ 526.813692][T12118] ? proc_fault_inject_write+0x360/0x360 [ 526.819403][T12118] ? fsnotify_perm+0x271/0x5e0 [ 526.824222][T12118] ? proc_fault_inject_write+0x360/0x360 [ 526.829905][T12118] vfs_read+0x298/0x990 [ 526.834119][T12118] ? kernel_read+0x1e0/0x1e0 [ 526.838792][T12118] ? __fget_files+0x28/0x460 [ 526.843440][T12118] ? __fget_files+0x3fc/0x460 [ 526.848216][T12118] ? __fdget_pos+0x2a3/0x330 [ 526.852848][T12118] ? ksys_read+0x74/0x260 [ 526.857212][T12118] ksys_read+0x151/0x260 [ 526.861510][T12118] ? vfs_write+0x9a0/0x9a0 [ 526.865979][T12118] ? lockdep_hardirqs_on+0x98/0x150 [ 526.871234][T12118] do_syscall_64+0x55/0xb0 [ 526.875692][T12118] ? clear_bhb_loop+0x40/0x90 [ 526.880409][T12118] ? clear_bhb_loop+0x40/0x90 [ 526.885142][T12118] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 526.891080][T12118] RIP: 0033:0x7f8ed455e90e [ 526.895543][T12118] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 526.915207][T12118] RSP: 002b:00007f8ed5506fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 526.923681][T12118] RAX: ffffffffffffffda RBX: 00007f8ed55076c0 RCX: 00007f8ed455e90e [ 526.931685][T12118] RDX: 000000000000000f RSI: 00007f8ed55070a0 RDI: 000000000000000b [ 526.939688][T12118] RBP: 00007f8ed5507090 R08: 0000000000000000 R09: 0000000000000000 [ 526.947682][T12118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 526.955713][T12118] R13: 00007f8ed4826128 R14: 00007f8ed4826090 R15: 00007ffc05a5b838 [ 526.963745][T12118] [ 526.972582][T12119] syzkaller0: entered promiscuous mode [ 526.988535][T12119] syzkaller0: entered allmulticast mode [ 527.781295][T12132] netlink: 'syz.1.1921': attribute type 10 has an invalid length. [ 527.811206][T12132] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1921'. [ 528.021097][T12143] syzkaller0: entered promiscuous mode [ 528.031868][T12143] syzkaller0: entered allmulticast mode [ 528.072039][T12150] netlink: 'syz.2.1924': attribute type 10 has an invalid length. [ 528.100264][T12150] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1924'. [ 529.014456][T12163] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1933'. [ 532.335665][T12172] netlink: 'syz.1.1936': attribute type 10 has an invalid length. [ 532.344088][T12172] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1936'. [ 532.491883][T12177] syzkaller0: entered promiscuous mode [ 532.504863][T12177] syzkaller0: entered allmulticast mode [ 532.607503][T12178] netlink: 'syz.0.1938': attribute type 10 has an invalid length. [ 532.647549][T12178] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1938'. [ 532.731307][T12187] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1940'. [ 532.765886][T12187] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1940'. [ 532.779570][T12187] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1940'. [ 533.022727][T12197] netlink: 'syz.2.1939': attribute type 10 has an invalid length. [ 533.033829][T12197] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1939'. [ 533.500792][T12205] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1945'. [ 533.590260][T12203] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1944'. [ 533.689396][T12203] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 534.261551][T12217] syzkaller0: entered promiscuous mode [ 534.275575][T12217] syzkaller0: entered allmulticast mode [ 536.543497][T12224] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1950'. [ 536.913781][T12232] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1954'. [ 536.988248][T12232] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 537.106950][T12239] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1957'. [ 537.446472][T12241] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1958'. [ 537.552985][T12241] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 537.686539][T12250] netlink: 'syz.2.1955': attribute type 10 has an invalid length. [ 537.746629][T12250] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1955'. [ 540.752872][T12259] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1962'. [ 540.849715][T12256] netlink: 'syz.1.1969': attribute type 10 has an invalid length. [ 540.872540][T12256] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1969'. [ 541.382656][T12276] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1967'. [ 541.549418][T12276] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 541.611691][T12284] netlink: 206468 bytes leftover after parsing attributes in process `syz.1.1971'. [ 541.651541][T12284] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1971'. [ 541.857363][T12293] netlink: 'syz.2.1970': attribute type 10 has an invalid length. [ 541.887537][T12293] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1970'. [ 542.227946][T12300] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1973'. [ 542.820725][T12314] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1974'. [ 542.852766][T12314] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 543.223035][T12316] netlink: 'syz.1.1978': attribute type 10 has an invalid length. [ 543.276231][T12316] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1978'. [ 543.378144][T12324] netlink: 206468 bytes leftover after parsing attributes in process `syz.2.1980'. [ 543.658302][T12330] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 544.142699][T12343] netlink: 'syz.2.1984': attribute type 10 has an invalid length. [ 544.807727][T12346] netlink: 'syz.1.1988': attribute type 10 has an invalid length. [ 545.400421][T12364] netlink: 'syz.0.1993': attribute type 10 has an invalid length. [ 545.528156][T12369] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 546.394397][T12402] __nla_validate_parse: 10 callbacks suppressed [ 546.394424][T12402] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2003'. [ 546.465348][T12395] netlink: 'syz.2.1998': attribute type 10 has an invalid length. [ 546.473305][T12395] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1998'. [ 547.113864][T12406] netlink: 'syz.3.2005': attribute type 10 has an invalid length. [ 547.233069][T12406] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2005'. [ 547.273910][T12408] netlink: 'syz.2.2006': attribute type 10 has an invalid length. [ 547.280792][T12416] FAULT_INJECTION: forcing a failure. [ 547.280792][T12416] name failslab, interval 1, probability 0, space 0, times 0 [ 547.305634][T12408] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2006'. [ 547.310336][T12416] CPU: 0 PID: 12416 Comm: syz.1.2008 Not tainted syzkaller #0 [ 547.322363][T12416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 547.330971][T12417] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2007'. [ 547.332476][T12416] Call Trace: [ 547.332489][T12416] [ 547.347817][T12416] dump_stack_lvl+0x18c/0x250 [ 547.352555][T12416] ? show_regs_print_info+0x20/0x20 [ 547.357803][T12416] ? lockdep_hardirqs_on+0x98/0x150 [ 547.363039][T12416] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 547.369238][T12416] should_fail_ex+0x394/0x4c0 [ 547.373959][T12416] should_failslab+0x9/0x20 [ 547.378501][T12416] slab_pre_alloc_hook+0x59/0x300 [ 547.383559][T12416] ? ktime_get_real_ts64+0x440/0x440 [ 547.388876][T12416] kmem_cache_alloc+0x5a/0x2c0 [ 547.393674][T12416] ? getname_flags+0xbb/0x500 [ 547.398387][T12416] getname_flags+0xbb/0x500 [ 547.402927][T12416] do_sys_openat2+0xda/0x1d0 [ 547.407558][T12416] ? do_sys_open+0xe0/0xe0 [ 547.412004][T12416] ? lockdep_hardirqs_on+0x98/0x150 [ 547.417249][T12416] __x64_sys_openat+0x139/0x160 [ 547.422155][T12416] do_syscall_64+0x55/0xb0 [ 547.426593][T12416] ? clear_bhb_loop+0x40/0x90 [ 547.431293][T12416] ? clear_bhb_loop+0x40/0x90 [ 547.436011][T12416] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 547.441948][T12416] RIP: 0033:0x7f34c615e90e [ 547.446389][T12416] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 547.466027][T12416] RSP: 002b:00007f34c70d3ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 547.474465][T12416] RAX: ffffffffffffffda RBX: 00007f34c70d46c0 RCX: 00007f34c615e90e [ 547.482465][T12416] RDX: 0000000000000000 RSI: 00007f34c70d3f90 RDI: ffffffffffffff9c [ 547.490458][T12416] RBP: 00007f34c70d4090 R08: 0000000000000000 R09: 0000000000000000 [ 547.498453][T12416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 547.506451][T12416] R13: 00007f34c6426038 R14: 00007f34c6425fa0 R15: 00007ffe43cc70a8 [ 547.514465][T12416] [ 547.548147][T12417] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 547.710986][T12419] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2009'. [ 547.942380][T12429] netlink: 206468 bytes leftover after parsing attributes in process `syz.1.2013'. [ 547.965302][T12429] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2013'. [ 548.512175][T12439] netlink: 'syz.0.2017': attribute type 10 has an invalid length. [ 548.522572][T12439] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2017'. [ 548.802233][T12449] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2022'. [ 549.053077][T12451] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 549.418913][T12447] netlink: 'syz.2.2020': attribute type 10 has an invalid length. [ 550.084278][T12481] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 550.374011][T12492] FAULT_INJECTION: forcing a failure. [ 550.374011][T12492] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 550.394751][T12492] CPU: 0 PID: 12492 Comm: syz.3.2039 Not tainted syzkaller #0 [ 550.402337][T12492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 550.412446][T12492] Call Trace: [ 550.415775][T12492] [ 550.418755][T12492] dump_stack_lvl+0x18c/0x250 [ 550.423488][T12492] ? show_regs_print_info+0x20/0x20 [ 550.428731][T12492] ? load_image+0x420/0x420 [ 550.433295][T12492] ? __lock_acquire+0x7d80/0x7d80 [ 550.438369][T12492] ? snprintf+0xe9/0x140 [ 550.442674][T12492] should_fail_ex+0x394/0x4c0 [ 550.447415][T12492] _copy_to_user+0x2f/0xa0 [ 550.451886][T12492] simple_read_from_buffer+0xe7/0x150 [ 550.457311][T12492] proc_fail_nth_read+0x1e8/0x260 [ 550.462379][T12492] ? proc_fault_inject_write+0x360/0x360 [ 550.468060][T12492] ? fsnotify_perm+0x271/0x5e0 [ 550.472854][T12492] ? proc_fault_inject_write+0x360/0x360 [ 550.478524][T12492] vfs_read+0x298/0x990 [ 550.482725][T12492] ? kernel_read+0x1e0/0x1e0 [ 550.487357][T12492] ? __fget_files+0x28/0x460 [ 550.491982][T12492] ? __fget_files+0x3fc/0x460 [ 550.496715][T12492] ? __fdget_pos+0x2a3/0x330 [ 550.501355][T12492] ? ksys_read+0x74/0x260 [ 550.505733][T12492] ksys_read+0x151/0x260 [ 550.510027][T12492] ? vfs_write+0x9a0/0x9a0 [ 550.514490][T12492] ? lockdep_hardirqs_on+0x98/0x150 [ 550.519726][T12492] do_syscall_64+0x55/0xb0 [ 550.524169][T12492] ? clear_bhb_loop+0x40/0x90 [ 550.528873][T12492] ? clear_bhb_loop+0x40/0x90 [ 550.533582][T12492] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 550.539502][T12492] RIP: 0033:0x7f8ed455e90e [ 550.543946][T12492] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 550.563593][T12492] RSP: 002b:00007f8ed5527fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 550.572032][T12492] RAX: ffffffffffffffda RBX: 00007f8ed55286c0 RCX: 00007f8ed455e90e [ 550.580026][T12492] RDX: 000000000000000f RSI: 00007f8ed55280a0 RDI: 0000000000000004 [ 550.588057][T12492] RBP: 00007f8ed5528090 R08: 0000000000000000 R09: 0000000000000000 [ 550.596056][T12492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 550.604052][T12492] R13: 00007f8ed4826038 R14: 00007f8ed4825fa0 R15: 00007ffc05a5b838 [ 550.612072][T12492] [ 550.730106][T12497] sock: sock_set_timeout: `syz.0.2040' (pid 12497) tries to set negative timeout [ 551.016487][T12505] netlink: 'syz.2.2043': attribute type 21 has an invalid length. [ 551.134142][T12508] netlink: 'syz.3.2042': attribute type 9 has an invalid length. [ 551.503477][T12513] __nla_validate_parse: 12 callbacks suppressed [ 551.503599][T12513] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2047'. [ 551.604820][T12513] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 551.977999][T12525] netlink: 206468 bytes leftover after parsing attributes in process `syz.3.2049'. [ 552.018733][T12525] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2049'. [ 552.324479][T12534] FAULT_INJECTION: forcing a failure. [ 552.324479][T12534] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 552.375446][T12534] CPU: 1 PID: 12534 Comm: syz.1.2054 Not tainted syzkaller #0 [ 552.383000][T12534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 552.393113][T12534] Call Trace: [ 552.396446][T12534] [ 552.399417][T12534] dump_stack_lvl+0x18c/0x250 [ 552.404161][T12534] ? show_regs_print_info+0x20/0x20 [ 552.409421][T12534] ? load_image+0x420/0x420 [ 552.413979][T12534] ? __might_fault+0xaa/0x120 [ 552.418688][T12534] ? __lock_acquire+0x7d80/0x7d80 [ 552.423736][T12534] ? __might_fault+0xaa/0x120 [ 552.428468][T12534] should_fail_ex+0x394/0x4c0 [ 552.433198][T12534] _copy_from_iter+0x1cd/0x1290 [ 552.438082][T12534] ? __might_fault+0xaa/0x120 [ 552.442787][T12534] ? copyout_mc+0x70/0x70 [ 552.447147][T12534] ? copyout_mc+0x70/0x70 [ 552.451507][T12534] ? __virt_addr_valid+0x10c/0x380 [ 552.456647][T12534] ? page_copy_sane+0x16a/0x270 [ 552.461524][T12534] copy_page_from_iter+0x7b/0x100 [ 552.466678][T12534] skb_copy_datagram_from_iter+0x2ea/0x6f0 [ 552.472553][T12534] tun_get_user+0xc84/0x3d70 [ 552.477244][T12534] ? aa_file_perm+0x3e3/0xee0 [ 552.481949][T12534] ? rcu_read_unlock+0xa0/0xa0 [ 552.486775][T12534] ? tun_get+0x1c/0x2e0 [ 552.490974][T12534] ? __lock_acquire+0x7d80/0x7d80 [ 552.496031][T12534] ? tun_get+0x1c/0x2e0 [ 552.500217][T12534] tun_chr_write_iter+0x119/0x200 [ 552.505280][T12534] vfs_write+0x474/0x9a0 [ 552.509561][T12534] ? file_end_write+0x250/0x250 [ 552.514448][T12534] ? __fget_files+0x3fc/0x460 [ 552.519190][T12534] ? __fdget_pos+0x1d8/0x330 [ 552.523813][T12534] ? ksys_write+0x74/0x260 [ 552.528262][T12534] ksys_write+0x151/0x260 [ 552.532637][T12534] ? __ia32_sys_read+0x90/0x90 [ 552.537518][T12534] ? lockdep_hardirqs_on+0x98/0x150 [ 552.542747][T12534] do_syscall_64+0x55/0xb0 [ 552.547195][T12534] ? clear_bhb_loop+0x40/0x90 [ 552.551918][T12534] ? clear_bhb_loop+0x40/0x90 [ 552.556650][T12534] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 552.562575][T12534] RIP: 0033:0x7f34c619e0d9 [ 552.567014][T12534] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 552.586641][T12534] RSP: 002b:00007f34c70d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 552.595075][T12534] RAX: ffffffffffffffda RBX: 00007f34c6425fa0 RCX: 00007f34c619e0d9 [ 552.603073][T12534] RDX: 000000000000ffc0 RSI: 0000200000000000 RDI: 00000000000000c8 [ 552.611089][T12534] RBP: 00007f34c70d4090 R08: 0000000000000000 R09: 0000000000000000 [ 552.619088][T12534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 552.627086][T12534] R13: 00007f34c6426038 R14: 00007f34c6425fa0 R15: 00007ffe43cc70a8 [ 552.635113][T12534] [ 552.693245][T12539] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2055'. [ 553.103304][T12551] netlink: 'syz.0.2056': attribute type 10 has an invalid length. [ 553.142026][T12551] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2056'. [ 553.150601][T12550] netlink: 'syz.1.2058': attribute type 9 has an invalid length. [ 553.185317][T12550] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2058'. [ 553.710898][T12559] netlink: 206468 bytes leftover after parsing attributes in process `syz.2.2061'. [ 553.730588][T12559] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2061'. [ 554.532486][T12580] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2069'. [ 554.899550][ T27] page_pool_release_retry() stalled pool shutdown 1 inflight 60 sec [ 555.385463][T12605] netlink: 'syz.1.2073': attribute type 10 has an invalid length. [ 555.393360][T12605] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2073'. [ 555.705501][T12617] netlink: 'syz.0.2080': attribute type 9 has an invalid length. [ 556.293981][T12627] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 556.488194][T12629] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 556.514499][T12635] __nla_validate_parse: 4 callbacks suppressed [ 556.514516][T12635] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.2086'. [ 556.860188][T12645] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2093'. [ 557.219525][T12643] netlink: 'syz.0.2091': attribute type 10 has an invalid length. [ 557.272810][T12643] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2091'. [ 557.485072][T12656] netlink: 'syz.3.2092': attribute type 10 has an invalid length. [ 557.493852][T12656] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2092'. [ 558.772824][T12671] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2098'. [ 558.858635][T12671] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 558.885816][T12676] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.2098'. [ 559.139154][T12683] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2102'. [ 559.300510][T12690] netlink: 'syz.0.2103': attribute type 10 has an invalid length. [ 559.420579][T12690] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2103'. [ 559.750009][T12696] netlink: 'syz.3.2104': attribute type 10 has an invalid length. [ 559.776826][T12696] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2104'. [ 560.649788][T12699] netlink: 'syz.1.2106': attribute type 21 has an invalid length. [ 560.666270][T12699] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2106'. [ 560.950780][T12707] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 561.041152][T12716] FAULT_INJECTION: forcing a failure. [ 561.041152][T12716] name failslab, interval 1, probability 0, space 0, times 0 [ 561.062259][T12716] CPU: 1 PID: 12716 Comm: syz.2.2113 Not tainted syzkaller #0 [ 561.069873][T12716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 561.080187][T12716] Call Trace: [ 561.083594][T12716] [ 561.086665][T12716] dump_stack_lvl+0x18c/0x250 [ 561.091499][T12716] ? show_regs_print_info+0x20/0x20 [ 561.096846][T12716] ? load_image+0x420/0x420 [ 561.101478][T12716] ? verify_lock_unused+0x140/0x140 [ 561.106777][T12716] ? perf_trace_lock_acquire+0x342/0x400 [ 561.112552][T12716] should_fail_ex+0x394/0x4c0 [ 561.117370][T12716] should_failslab+0x9/0x20 [ 561.121973][T12716] slab_pre_alloc_hook+0x59/0x300 [ 561.127128][T12716] kmem_cache_alloc+0x5a/0x2c0 [ 561.132016][T12716] ? skb_clone+0x1eb/0x370 [ 561.136564][T12716] skb_clone+0x1eb/0x370 [ 561.140931][T12716] __netlink_deliver_tap+0x411/0x7f0 [ 561.146391][T12716] ? netlink_deliver_tap+0x2e/0x1b0 [ 561.151705][T12716] netlink_deliver_tap+0x19c/0x1b0 [ 561.156926][T12716] netlink_unicast+0x77b/0x930 [ 561.161859][T12716] netlink_sendmsg+0x8d0/0xbf0 [ 561.166775][T12716] ? netlink_getsockopt+0x590/0x590 [ 561.172083][T12716] ? apparmor_socket_sendmsg+0x8e/0x330 [ 561.177737][T12716] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 561.183121][T12716] ? security_socket_sendmsg+0x80/0xa0 [ 561.188660][T12716] ? netlink_getsockopt+0x590/0x590 [ 561.193966][T12716] ____sys_sendmsg+0x61b/0x980 [ 561.198863][T12716] ? __asan_memset+0x22/0x40 [ 561.203559][T12716] ? __sys_sendmsg_sock+0x30/0x30 [ 561.208666][T12716] ? __import_iovec+0x5f2/0x850 [ 561.213669][T12716] ? import_iovec+0x73/0xa0 [ 561.218297][T12716] ___sys_sendmsg+0x2a6/0x360 [ 561.223066][T12716] ? get_pid_task+0x20/0x1e0 [ 561.227792][T12716] ? __sys_sendmsg+0x2b0/0x2b0 [ 561.232797][T12716] ? __lock_acquire+0x7d80/0x7d80 [ 561.238095][T12716] __se_sys_sendmsg+0x1d0/0x2c0 [ 561.243058][T12716] ? __x64_sys_sendmsg+0x80/0x80 [ 561.248209][T12716] ? lockdep_hardirqs_on+0x98/0x150 [ 561.253535][T12716] do_syscall_64+0x55/0xb0 [ 561.258039][T12716] ? clear_bhb_loop+0x40/0x90 [ 561.262809][T12716] ? clear_bhb_loop+0x40/0x90 [ 561.267609][T12716] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 561.273587][T12716] RIP: 0033:0x7fc41a99e0d9 [ 561.278095][T12716] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 561.297781][T12716] RSP: 002b:00007fc41b8e4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 561.306307][T12716] RAX: ffffffffffffffda RBX: 00007fc41ac25fa0 RCX: 00007fc41a99e0d9 [ 561.314361][T12716] RDX: 0000000000048050 RSI: 00002000000001c0 RDI: 0000000000000006 [ 561.322410][T12716] RBP: 00007fc41b8e4090 R08: 0000000000000000 R09: 0000000000000000 [ 561.330473][T12716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 561.338531][T12716] R13: 00007fc41ac26038 R14: 00007fc41ac25fa0 R15: 00007ffed17aa2c8 [ 561.346696][T12716] [ 561.522830][T12719] __nla_validate_parse: 2 callbacks suppressed [ 561.522895][T12719] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2114'. [ 561.718137][T12727] FAULT_INJECTION: forcing a failure. [ 561.718137][T12727] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 561.747227][T12727] CPU: 1 PID: 12727 Comm: syz.0.2117 Not tainted syzkaller #0 [ 561.754769][T12727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 561.764877][T12727] Call Trace: [ 561.768222][T12727] [ 561.771192][T12727] dump_stack_lvl+0x18c/0x250 [ 561.775924][T12727] ? show_regs_print_info+0x20/0x20 [ 561.781184][T12727] ? load_image+0x420/0x420 [ 561.785751][T12727] ? __might_fault+0xaa/0x120 [ 561.790479][T12727] ? __lock_acquire+0x7d80/0x7d80 [ 561.795559][T12727] ? __virt_addr_valid+0x10c/0x380 [ 561.800733][T12727] should_fail_ex+0x394/0x4c0 [ 561.805464][T12727] _copy_from_user+0x2f/0xe0 [ 561.810111][T12727] btf_new_fd+0x366/0x9e0 [ 561.814517][T12727] ? bpf_btf_show_fdinfo+0x80/0x80 [ 561.819723][T12727] ? capable+0x88/0xe0 [ 561.823878][T12727] __sys_bpf+0x670/0x890 [ 561.828171][T12727] ? bpf_link_show_fdinfo+0x390/0x390 [ 561.833609][T12727] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 561.839837][T12727] __x64_sys_bpf+0x7c/0x90 [ 561.844301][T12727] do_syscall_64+0x55/0xb0 [ 561.848782][T12727] ? clear_bhb_loop+0x40/0x90 [ 561.853514][T12727] ? clear_bhb_loop+0x40/0x90 [ 561.858246][T12727] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 561.864185][T12727] RIP: 0033:0x7f4b2d99e0d9 [ 561.868646][T12727] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 561.888313][T12727] RSP: 002b:00007f4b2e8c8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 561.896782][T12727] RAX: ffffffffffffffda RBX: 00007f4b2dc25fa0 RCX: 00007f4b2d99e0d9 [ 561.904804][T12727] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 0000000000000012 [ 561.912879][T12727] RBP: 00007f4b2e8c8090 R08: 0000000000000000 R09: 0000000000000000 [ 561.920977][T12727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 561.928999][T12727] R13: 00007f4b2dc26038 R14: 00007f4b2dc25fa0 R15: 00007ffd24dbf498 [ 561.937034][T12727] [ 562.459006][T12733] netlink: 'syz.3.2119': attribute type 10 has an invalid length. [ 562.473426][T12733] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2119'. [ 562.733992][T12744] netlink: 'syz.1.2118': attribute type 10 has an invalid length. [ 562.742054][T12744] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2118'. [ 563.084032][T12749] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2122'. [ 563.141895][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.148391][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.190304][T12749] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 563.258627][T12757] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.2122'. [ 563.530837][T12761] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2126'. [ 563.857703][T12766] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2128'. [ 563.934446][T12766] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 564.822793][T12776] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2130'. [ 564.891680][T12781] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2131'. [ 565.383856][T12792] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2135'. [ 565.423906][T12792] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 565.512910][T12799] netlink: 'syz.0.2133': attribute type 10 has an invalid length. [ 566.463290][T12816] netlink: 'syz.2.2141': attribute type 10 has an invalid length. [ 566.893094][T12818] FAULT_INJECTION: forcing a failure. [ 566.893094][T12818] name failslab, interval 1, probability 0, space 0, times 0 [ 566.907066][T12818] CPU: 0 PID: 12818 Comm: syz.3.2143 Not tainted syzkaller #0 [ 566.914579][T12818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 566.924684][T12818] Call Trace: [ 566.928007][T12818] [ 566.931060][T12818] dump_stack_lvl+0x18c/0x250 [ 566.935803][T12818] ? show_regs_print_info+0x20/0x20 [ 566.941043][T12818] ? load_image+0x420/0x420 [ 566.945603][T12818] ? __might_sleep+0xe0/0xe0 [ 566.950253][T12818] ? __lock_acquire+0x7d80/0x7d80 [ 566.955316][T12818] ? iov_iter_get_pages_alloc2+0xc0/0xc0 [ 566.961027][T12818] should_fail_ex+0x394/0x4c0 [ 566.965759][T12818] should_failslab+0x9/0x20 [ 566.970313][T12818] slab_pre_alloc_hook+0x59/0x300 [ 566.975424][T12818] kmem_cache_alloc_node+0x5e/0x310 [ 566.980684][T12818] ? __alloc_skb+0x103/0x2c0 [ 566.985326][T12818] __alloc_skb+0x103/0x2c0 [ 566.989801][T12818] __ip_append_data+0x2acf/0x3bf0 [ 566.994938][T12818] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 566.999866][T12818] ? ip_setup_cork+0x840/0x840 [ 567.004676][T12818] ? __local_bh_enable_ip+0x13a/0x1c0 [ 567.010087][T12818] ? lockdep_hardirqs_on+0x98/0x150 [ 567.015343][T12818] ip_append_data+0x10d/0x180 [ 567.020076][T12818] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 567.024973][T12818] udp_sendmsg+0x5f6/0x23d0 [ 567.029619][T12818] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 567.034531][T12818] ? udp_cmsg_send+0x350/0x350 [ 567.039365][T12818] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 567.045599][T12818] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 567.052095][T12818] ? aa_sock_msg_perm+0x94/0x150 [ 567.057084][T12818] ? sock_rps_record_flow+0x19/0x3f0 [ 567.062424][T12818] ? inet_sendmsg+0x7e/0x2a0 [ 567.067065][T12818] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 567.072427][T12818] sock_write_iter+0x2dc/0x420 [ 567.077263][T12818] ? sock_read_iter+0x3f0/0x3f0 [ 567.082195][T12818] ? common_file_perm+0x198/0x1f0 [ 567.087278][T12818] vfs_write+0x474/0x9a0 [ 567.091589][T12818] ? file_end_write+0x250/0x250 [ 567.096514][T12818] ? __fget_files+0x3fc/0x460 [ 567.101271][T12818] ? __fdget_pos+0x1d8/0x330 [ 567.105915][T12818] ? ksys_write+0x74/0x260 [ 567.110394][T12818] ksys_write+0x151/0x260 [ 567.114791][T12818] ? __ia32_sys_read+0x90/0x90 [ 567.119611][T12818] ? lockdep_hardirqs_on+0x98/0x150 [ 567.124872][T12818] do_syscall_64+0x55/0xb0 [ 567.129374][T12818] ? clear_bhb_loop+0x40/0x90 [ 567.134095][T12818] ? clear_bhb_loop+0x40/0x90 [ 567.138815][T12818] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 567.144774][T12818] RIP: 0033:0x7f8ed459e0d9 [ 567.149231][T12818] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 567.168898][T12818] RSP: 002b:00007f8ed5528028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 567.177372][T12818] RAX: ffffffffffffffda RBX: 00007f8ed4825fa0 RCX: 00007f8ed459e0d9 [ 567.185388][T12818] RDX: 000000000000fe33 RSI: 00002000000001c0 RDI: 0000000000000005 [ 567.193397][T12818] RBP: 00007f8ed5528090 R08: 0000000000000000 R09: 0000000000000000 [ 567.201492][T12818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 567.209588][T12818] R13: 00007f8ed4826038 R14: 00007f8ed4825fa0 R15: 00007ffc05a5b838 [ 567.217709][T12818] [ 567.686023][ T27] page_pool_release_retry() stalled pool shutdown 1 inflight 60 sec [ 567.723228][T12836] __nla_validate_parse: 4 callbacks suppressed [ 567.723270][T12836] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2149'. [ 567.759414][T12833] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2148'. [ 567.860090][T12833] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 567.919639][T12839] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.2148'. [ 568.297150][T12855] 0: renamed from pim6reg1 [ 569.110976][T12865] IPv6: NLM_F_CREATE should be specified when creating new route [ 569.145550][T12865] FAULT_INJECTION: forcing a failure. [ 569.145550][T12865] name failslab, interval 1, probability 0, space 0, times 0 [ 569.179973][T12865] CPU: 0 PID: 12865 Comm: syz.0.2159 Not tainted syzkaller #0 [ 569.187518][T12865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 569.197626][T12865] Call Trace: [ 569.200947][T12865] [ 569.203915][T12865] dump_stack_lvl+0x18c/0x250 [ 569.208644][T12865] ? show_regs_print_info+0x20/0x20 [ 569.213886][T12865] ? load_image+0x420/0x420 [ 569.218454][T12865] ? __might_sleep+0xe0/0xe0 [ 569.223095][T12865] ? __lock_acquire+0x7d80/0x7d80 [ 569.228169][T12865] ? __asan_memset+0x22/0x40 [ 569.232818][T12865] should_fail_ex+0x394/0x4c0 [ 569.237584][T12865] should_failslab+0x9/0x20 [ 569.242137][T12865] slab_pre_alloc_hook+0x59/0x300 [ 569.247217][T12865] ? fib6_info_alloc+0x30/0xf0 [ 569.252114][T12865] ? fib6_info_alloc+0x30/0xf0 [ 569.256922][T12865] __kmem_cache_alloc_node+0x53/0x250 [ 569.262364][T12865] ? fib6_info_alloc+0x30/0xf0 [ 569.267172][T12865] __kmalloc+0xa7/0x240 [ 569.271402][T12865] fib6_info_alloc+0x30/0xf0 [ 569.276020][T12865] ip6_route_info_create+0x455/0x1260 [ 569.281446][T12865] ? inet6_rtm_newroute+0x3cc/0x1d00 [ 569.286765][T12865] ? nla_find+0x131/0x150 [ 569.291126][T12865] inet6_rtm_newroute+0x5bc/0x1d00 [ 569.296275][T12865] ? ipv6_route_sysctl_table_size+0x50/0x50 [ 569.302198][T12865] ? verify_lock_unused+0x140/0x140 [ 569.307435][T12865] ? rcu_is_watching+0x15/0xb0 [ 569.312253][T12865] ? trace_contention_end+0x39/0xe0 [ 569.317500][T12865] ? ipv6_route_sysctl_table_size+0x50/0x50 [ 569.323427][T12865] rtnetlink_rcv_msg+0x843/0xf90 [ 569.328397][T12865] ? rtnetlink_rcv_msg+0x220/0xf90 [ 569.333548][T12865] ? rtnetlink_bind+0x80/0x80 [ 569.338256][T12865] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 569.344254][T12865] ? lock_chain_count+0x20/0x20 [ 569.349137][T12865] ? __local_bh_enable_ip+0x13a/0x1c0 [ 569.354550][T12865] ? lockdep_hardirqs_on+0x98/0x150 [ 569.359780][T12865] ? __local_bh_enable_ip+0x13a/0x1c0 [ 569.365193][T12865] ? _local_bh_enable+0xa0/0xa0 [ 569.370078][T12865] ? __dev_queue_xmit+0x275/0x3630 [ 569.375229][T12865] ? __dev_queue_xmit+0x1bc2/0x3630 [ 569.380486][T12865] ? __dev_queue_xmit+0x275/0x3630 [ 569.385660][T12865] ? ref_tracker_free+0x686/0x830 [ 569.390719][T12865] netlink_rcv_skb+0x235/0x4c0 [ 569.395509][T12865] ? rtnetlink_bind+0x80/0x80 [ 569.400238][T12865] ? netlink_ack+0x1160/0x1160 [ 569.405034][T12865] ? __lock_acquire+0x7d80/0x7d80 [ 569.410092][T12865] ? netlink_deliver_tap+0x2e/0x1b0 [ 569.415320][T12865] netlink_unicast+0x7b1/0x930 [ 569.420125][T12865] netlink_sendmsg+0x8d0/0xbf0 [ 569.424914][T12865] ? netlink_getsockopt+0x590/0x590 [ 569.430137][T12865] ? apparmor_socket_sendmsg+0x8e/0x330 [ 569.435710][T12865] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 569.441023][T12865] ? security_socket_sendmsg+0x80/0xa0 [ 569.446528][T12865] ? netlink_getsockopt+0x590/0x590 [ 569.451764][T12865] ____sys_sendmsg+0x61b/0x980 [ 569.456579][T12865] ? __asan_memset+0x22/0x40 [ 569.461201][T12865] ? __sys_sendmsg_sock+0x30/0x30 [ 569.466263][T12865] ? __import_iovec+0x5f2/0x850 [ 569.471152][T12865] ? import_iovec+0x73/0xa0 [ 569.475699][T12865] ___sys_sendmsg+0x2a6/0x360 [ 569.480398][T12865] ? get_pid_task+0x20/0x1e0 [ 569.485024][T12865] ? __sys_sendmsg+0x2b0/0x2b0 [ 569.489833][T12865] ? __lock_acquire+0x7d80/0x7d80 [ 569.494904][T12865] __se_sys_sendmsg+0x1d0/0x2c0 [ 569.499785][T12865] ? __x64_sys_sendmsg+0x80/0x80 [ 569.504767][T12865] ? lockdep_hardirqs_on+0x98/0x150 [ 569.510024][T12865] do_syscall_64+0x55/0xb0 [ 569.514476][T12865] ? clear_bhb_loop+0x40/0x90 [ 569.519195][T12865] ? clear_bhb_loop+0x40/0x90 [ 569.523899][T12865] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 569.529822][T12865] RIP: 0033:0x7f4b2d99e0d9 [ 569.534269][T12865] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 569.553904][T12865] RSP: 002b:00007f4b2e8c8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 569.562355][T12865] RAX: ffffffffffffffda RBX: 00007f4b2dc25fa0 RCX: 00007f4b2d99e0d9 [ 569.570349][T12865] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 569.578359][T12865] RBP: 00007f4b2e8c8090 R08: 0000000000000000 R09: 0000000000000000 [ 569.586364][T12865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 569.594356][T12865] R13: 00007f4b2dc26038 R14: 00007f4b2dc25fa0 R15: 00007ffd24dbf498 [ 569.602367][T12865] [ 569.642121][T12866] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2160'. [ 569.722135][T12871] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2161'. [ 569.800646][T12871] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 569.829195][T12875] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.2161'. [ 570.043525][T12880] netlink: 'syz.1.2157': attribute type 10 has an invalid length. [ 570.053357][T12880] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2157'. [ 570.348934][T12883] IPv6: NLM_F_CREATE should be specified when creating new route [ 570.370320][T12883] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2163'. [ 570.727825][ T790] page_pool_release_retry() stalled pool shutdown 1 inflight 60 sec [ 571.540338][T12906] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2171'. [ 571.562415][T12906] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2171'. [ 571.641551][T12903] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 571.737233][T12913] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 573.270408][T12937] __nla_validate_parse: 4 callbacks suppressed [ 573.270447][T12937] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2180'. [ 573.346655][T12937] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 573.712253][T12945] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2184'. [ 573.838127][T12945] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 573.876414][T12948] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.2184'. [ 573.890962][T12946] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2183'. [ 574.276888][T12953] netlink: 'syz.1.2182': attribute type 10 has an invalid length. [ 574.284826][T12953] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2182'. [ 574.489589][T12958] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2193'. [ 574.563786][T12958] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 574.706676][T12964] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.2193'. [ 574.725059][T12967] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2186'. [ 574.753530][T12967] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 575.935917][T12990] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2195'. [ 576.556328][T12999] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2197'. [ 576.623599][T12999] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 576.758277][T13006] netlink: 'syz.0.2199': attribute type 27 has an invalid length. [ 577.007702][T13007] netlink: 'syz.0.2199': attribute type 153 has an invalid length. [ 577.300503][T13017] netlink: 'syz.3.2198': attribute type 10 has an invalid length. [ 577.802215][T13021] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 578.683029][T13039] netlink: 'syz.2.2203': attribute type 10 has an invalid length. [ 578.707639][T13039] __nla_validate_parse: 6 callbacks suppressed [ 578.707657][T13039] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2203'. [ 579.578400][T13050] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2209'. [ 579.664594][T13050] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 579.682535][T13051] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.2209'. [ 580.140765][T13063] FAULT_INJECTION: forcing a failure. [ 580.140765][T13063] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 580.156535][T13053] netlink: 'syz.3.2210': attribute type 10 has an invalid length. [ 580.165202][T13053] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2210'. [ 580.183530][T13063] CPU: 1 PID: 13063 Comm: syz.0.2213 Not tainted syzkaller #0 [ 580.191041][T13063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 580.201136][T13063] Call Trace: [ 580.204452][T13063] [ 580.207444][T13063] dump_stack_lvl+0x18c/0x250 [ 580.212174][T13063] ? show_regs_print_info+0x20/0x20 [ 580.217413][T13063] ? load_image+0x420/0x420 [ 580.221966][T13063] ? __might_fault+0xaa/0x120 [ 580.226687][T13063] ? __lock_acquire+0x7d80/0x7d80 [ 580.231848][T13063] should_fail_ex+0x394/0x4c0 [ 580.236576][T13063] _copy_from_user+0x2f/0xe0 [ 580.241227][T13063] __sys_bpf+0x23e/0x890 [ 580.245523][T13063] ? bpf_link_show_fdinfo+0x390/0x390 [ 580.250962][T13063] ? lock_chain_count+0x20/0x20 [ 580.255880][T13063] __x64_sys_bpf+0x7c/0x90 [ 580.260344][T13063] do_syscall_64+0x55/0xb0 [ 580.264853][T13063] ? clear_bhb_loop+0x40/0x90 [ 580.269581][T13063] ? clear_bhb_loop+0x40/0x90 [ 580.274308][T13063] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 580.280269][T13063] RIP: 0033:0x7f4b2d99e0d9 [ 580.284725][T13063] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 580.304388][T13063] RSP: 002b:00007f4b2e8c8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 580.312862][T13063] RAX: ffffffffffffffda RBX: 00007f4b2dc25fa0 RCX: 00007f4b2d99e0d9 [ 580.320869][T13063] RDX: 0000000000000050 RSI: 00002000000000c0 RDI: 000000000000000a [ 580.328874][T13063] RBP: 00007f4b2e8c8090 R08: 0000000000000000 R09: 0000000000000000 [ 580.336889][T13063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 580.344901][T13063] R13: 00007f4b2dc26038 R14: 00007f4b2dc25fa0 R15: 00007ffd24dbf498 [ 580.352965][T13063] [ 580.806520][T13077] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2215'. [ 582.002897][T13100] netlink: 'syz.1.2220': attribute type 10 has an invalid length. [ 582.025398][T13100] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2220'. [ 582.049517][T13101] netlink: 'syz.0.2219': attribute type 10 has an invalid length. [ 582.065466][T13101] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2219'. [ 583.316151][T13113] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2227'. [ 583.459140][T13110] netlink: 'syz.3.2226': attribute type 10 has an invalid length. [ 583.486017][T13110] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2226'. [ 586.653678][T13208] netlink: 'syz.1.2236': attribute type 10 has an invalid length. [ 586.671472][T13208] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2236'. [ 587.295835][ T27] page_pool_release_retry() stalled pool shutdown 1 inflight 60 sec [ 587.508904][T13216] netlink: 'syz.2.2240': attribute type 10 has an invalid length. [ 587.546771][T13216] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2240'. [ 587.664916][T13225] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2243'. [ 587.718798][T13225] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2243'. [ 588.007570][T13232] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2246'. [ 588.116264][T13232] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 590.896446][T13269] netlink: 'syz.2.2253': attribute type 10 has an invalid length. [ 590.920999][T13269] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2253'. [ 590.944215][T13261] netlink: 'syz.3.2255': attribute type 10 has an invalid length. [ 590.975646][T13261] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2255'. [ 591.266936][T13281] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2258'. [ 591.331005][T13281] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 591.575562][T13289] syzkaller0: entered promiscuous mode [ 591.581126][T13289] syzkaller0: entered allmulticast mode [ 591.737946][T13294] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2263'. [ 591.891748][T13294] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 591.975958][T13297] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.2263'. [ 592.293716][T13309] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2266'. [ 592.995357][T13313] netlink: 'syz.0.2267': attribute type 10 has an invalid length. [ 593.020788][T13313] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2267'. [ 593.447584][T13329] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2272'. [ 593.489683][T13331] netlink: 'syz.0.2271': attribute type 1 has an invalid length. [ 593.519542][T13331] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2271'. [ 593.562142][T13329] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 593.595356][T13332] netlink: 'syz.3.2269': attribute type 10 has an invalid length. [ 593.628736][T13332] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2269'. [ 594.073232][T13339] syzkaller0: entered promiscuous mode [ 594.085527][T13339] syzkaller0: entered allmulticast mode [ 597.217224][T13356] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2278'. [ 597.268273][T13356] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 597.295925][T13357] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.2278'. [ 597.469228][T13366] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2279'. [ 597.640194][T13365] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2282'. [ 597.721563][T13365] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 597.779609][T13361] netlink: 'syz.0.2280': attribute type 10 has an invalid length. [ 597.815236][T13361] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2280'. [ 598.194179][T13382] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2287'. [ 598.310832][T13382] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 598.360048][T13385] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.2287'. [ 598.498440][T13387] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2288'. [ 599.020570][T13395] syzkaller0: entered promiscuous mode [ 599.026849][T13395] syzkaller0: entered allmulticast mode [ 599.395778][T13400] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2292'. [ 599.428726][T13400] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 599.693293][T13408] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2294'. [ 599.844285][T13405] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 600.137367][T13411] netlink: 'syz.0.2296': attribute type 10 has an invalid length. [ 600.333102][T13418] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 600.355378][T13421] netlink: 'syz.2.2299': attribute type 10 has an invalid length. [ 600.395227][T13421] 8021q: adding VLAN 0 to HW filter on device team0 [ 600.688645][T13426] syzkaller0: entered promiscuous mode [ 600.721266][T13426] syzkaller0: entered allmulticast mode [ 601.753722][T13450] FAULT_INJECTION: forcing a failure. [ 601.753722][T13450] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 601.775047][T13448] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 601.801781][T13450] CPU: 0 PID: 13450 Comm: syz.3.2309 Not tainted syzkaller #0 [ 601.809343][T13450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 601.819454][T13450] Call Trace: [ 601.822797][T13450] [ 601.825780][T13450] dump_stack_lvl+0x18c/0x250 [ 601.830519][T13450] ? show_regs_print_info+0x20/0x20 [ 601.835778][T13450] ? load_image+0x420/0x420 [ 601.840347][T13450] ? __might_fault+0xaa/0x120 [ 601.845084][T13450] ? __lock_acquire+0x7d80/0x7d80 [ 601.850173][T13450] ? __virt_addr_valid+0x10c/0x380 [ 601.855347][T13450] should_fail_ex+0x394/0x4c0 [ 601.860174][T13450] _copy_to_user+0x2f/0xa0 [ 601.864651][T13450] bpf_test_finish+0x4e7/0x650 [ 601.869510][T13450] ? bpf_test_run+0x174/0x870 [ 601.874252][T13450] ? convert_skb_to___skb+0x420/0x420 [ 601.879726][T13450] bpf_prog_test_run_skb+0x1135/0x18f0 [ 601.885275][T13450] ? cpu_online+0x60/0x60 [ 601.889676][T13450] bpf_prog_test_run+0x31f/0x390 [ 601.894680][T13450] __sys_bpf+0x49d/0x890 [ 601.898982][T13450] ? bpf_link_show_fdinfo+0x390/0x390 [ 601.904434][T13450] ? lock_chain_count+0x20/0x20 [ 601.909359][T13450] __x64_sys_bpf+0x7c/0x90 [ 601.913834][T13450] do_syscall_64+0x55/0xb0 [ 601.918324][T13450] ? clear_bhb_loop+0x40/0x90 [ 601.923060][T13450] ? clear_bhb_loop+0x40/0x90 [ 601.927797][T13450] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 601.933774][T13450] RIP: 0033:0x7f8ed459e0d9 [ 601.938241][T13450] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 601.957909][T13450] RSP: 002b:00007f8ed5528028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 601.966392][T13450] RAX: ffffffffffffffda RBX: 00007f8ed4825fa0 RCX: 00007f8ed459e0d9 [ 601.974422][T13450] RDX: 000000000000004c RSI: 0000200000000640 RDI: 000000000000000a [ 601.982467][T13450] RBP: 00007f8ed5528090 R08: 0000000000000000 R09: 0000000000000000 [ 601.990488][T13450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 601.998507][T13450] R13: 00007f8ed4826038 R14: 00007f8ed4825fa0 R15: 00007ffc05a5b838 [ 602.006548][T13450] [ 602.193676][T13453] netlink: 'syz.1.2310': attribute type 10 has an invalid length. [ 602.386171][T13460] __nla_validate_parse: 8 callbacks suppressed [ 602.386256][T13460] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2312'. [ 602.448705][T13460] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 602.497141][T13462] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2313'. [ 602.516837][T13466] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.2312'. [ 602.693878][T13475] netlink: 'syz.3.2316': attribute type 10 has an invalid length. [ 602.714088][T13475] bridge0: port 3(team0) entered disabled state [ 602.742536][T13475] team0: left allmulticast mode [ 602.748828][T13475] team_slave_0: left allmulticast mode [ 602.754756][T13475] team_slave_1: left allmulticast mode [ 602.764078][T13475] bond0: left allmulticast mode [ 602.770399][T13475] bond_slave_0: left allmulticast mode [ 602.780593][T13475] bond_slave_1: left allmulticast mode [ 602.787713][T13475] team0: left promiscuous mode [ 602.792987][T13475] team_slave_0: left promiscuous mode [ 602.803278][T13475] team_slave_1: left promiscuous mode [ 602.811112][T13475] bond0: left promiscuous mode [ 602.816318][T13475] bond_slave_0: left promiscuous mode [ 602.822223][T13475] bond_slave_1: left promiscuous mode [ 602.828530][T13475] bridge0: port 3(team0) entered disabled state [ 603.097071][T13485] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2320'. [ 603.184313][T13485] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 603.533340][T13499] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2326'. [ 603.694115][T13499] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 603.715652][T13495] netlink: 'syz.0.2324': attribute type 10 has an invalid length. [ 603.729825][T13495] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2324'. [ 603.762104][T13502] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.2326'. [ 605.109566][T13525] netlink: 'syz.2.2331': attribute type 10 has an invalid length. [ 605.131926][T13525] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2331'. [ 605.250866][T13529] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2333'. [ 605.321868][T13529] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 605.591732][T13540] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2338'. [ 606.016705][T13556] FAULT_INJECTION: forcing a failure. [ 606.016705][T13556] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 606.049088][T13556] CPU: 0 PID: 13556 Comm: syz.0.2341 Not tainted syzkaller #0 [ 606.056749][T13556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 606.066954][T13556] Call Trace: [ 606.070284][T13556] [ 606.073269][T13556] dump_stack_lvl+0x18c/0x250 [ 606.078011][T13556] ? show_regs_print_info+0x20/0x20 [ 606.083274][T13556] ? load_image+0x420/0x420 [ 606.087856][T13556] ? __lock_acquire+0x7d80/0x7d80 [ 606.092947][T13556] ? snprintf+0xe9/0x140 [ 606.097257][T13556] should_fail_ex+0x394/0x4c0 [ 606.102026][T13556] _copy_to_user+0x2f/0xa0 [ 606.106498][T13556] simple_read_from_buffer+0xe7/0x150 [ 606.111933][T13556] proc_fail_nth_read+0x1e8/0x260 [ 606.117024][T13556] ? proc_fault_inject_write+0x360/0x360 [ 606.122764][T13556] ? fsnotify_perm+0x271/0x5e0 [ 606.127596][T13556] ? proc_fault_inject_write+0x360/0x360 [ 606.133284][T13556] vfs_read+0x298/0x990 [ 606.137509][T13556] ? kernel_read+0x1e0/0x1e0 [ 606.142158][T13556] ? __fget_files+0x28/0x460 [ 606.146824][T13556] ? __fget_files+0x3fc/0x460 [ 606.151570][T13556] ? __fdget_pos+0x2a3/0x330 [ 606.156227][T13556] ? ksys_read+0x74/0x260 [ 606.160638][T13556] ksys_read+0x151/0x260 [ 606.164953][T13556] ? vfs_write+0x9a0/0x9a0 [ 606.169440][T13556] ? lockdep_hardirqs_on+0x98/0x150 [ 606.174711][T13556] do_syscall_64+0x55/0xb0 [ 606.179188][T13556] ? clear_bhb_loop+0x40/0x90 [ 606.183916][T13556] ? clear_bhb_loop+0x40/0x90 [ 606.188653][T13556] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 606.194604][T13556] RIP: 0033:0x7f4b2d95e90e [ 606.199064][T13556] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 606.218732][T13556] RSP: 002b:00007f4b2e8c7fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 606.227224][T13556] RAX: ffffffffffffffda RBX: 00007f4b2e8c86c0 RCX: 00007f4b2d95e90e [ 606.235248][T13556] RDX: 000000000000000f RSI: 00007f4b2e8c80a0 RDI: 0000000000000005 [ 606.243281][T13556] RBP: 00007f4b2e8c8090 R08: 0000000000000000 R09: 0000000000000000 [ 606.251306][T13556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 606.259362][T13556] R13: 00007f4b2dc26038 R14: 00007f4b2dc25fa0 R15: 00007ffd24dbf498 [ 606.267411][T13556] [ 606.940089][T13575] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 606.976699][T13581] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 607.122178][T13583] netlink: 'syz.0.2344': attribute type 10 has an invalid length. [ 607.630030][T13593] netlink: 'syz.2.2352': attribute type 29 has an invalid length. [ 607.653979][T13593] netlink: 'syz.2.2352': attribute type 29 has an invalid length. [ 607.794293][T13593] netlink: 'syz.2.2352': attribute type 27 has an invalid length. [ 607.803520][T13593] netlink: 'syz.2.2352': attribute type 3 has an invalid length. [ 608.178906][T13616] __nla_validate_parse: 7 callbacks suppressed [ 608.178946][T13616] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2358'. [ 608.248181][T13616] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 608.278604][T13618] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.2358'. [ 608.346921][T13619] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2359'. [ 608.402146][T13619] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 608.497236][T13623] FAULT_INJECTION: forcing a failure. [ 608.497236][T13623] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 608.518995][T13623] CPU: 0 PID: 13623 Comm: syz.3.2361 Not tainted syzkaller #0 [ 608.526716][T13623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 608.536969][T13623] Call Trace: [ 608.540331][T13623] [ 608.543337][T13623] dump_stack_lvl+0x18c/0x250 [ 608.548107][T13623] ? show_regs_print_info+0x20/0x20 [ 608.553389][T13623] ? load_image+0x420/0x420 [ 608.557989][T13623] ? __might_fault+0xaa/0x120 [ 608.562877][T13623] ? __lock_acquire+0x7d80/0x7d80 [ 608.567992][T13623] ? __virt_addr_valid+0x10c/0x380 [ 608.573197][T13623] should_fail_ex+0x394/0x4c0 [ 608.577988][T13623] _copy_from_user+0x2f/0xe0 [ 608.582675][T13623] ____sys_sendmsg+0x329/0x980 [ 608.587557][T13623] ? __sys_sendmsg_sock+0x30/0x30 [ 608.592656][T13623] ? __import_iovec+0x3fa/0x850 [ 608.597655][T13623] ? import_iovec+0x73/0xa0 [ 608.602281][T13623] ___sys_sendmsg+0x2a6/0x360 [ 608.607069][T13623] ? __sys_sendmsg+0x2b0/0x2b0 [ 608.612010][T13623] ? __lock_acquire+0x7d80/0x7d80 [ 608.617207][T13623] __se_sys_sendmsg+0x1d0/0x2c0 [ 608.622175][T13623] ? __x64_sys_sendmsg+0x80/0x80 [ 608.627259][T13623] ? lockdep_hardirqs_on+0x98/0x150 [ 608.632569][T13623] do_syscall_64+0x55/0xb0 [ 608.637073][T13623] ? clear_bhb_loop+0x40/0x90 [ 608.641826][T13623] ? clear_bhb_loop+0x40/0x90 [ 608.646584][T13623] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 608.652559][T13623] RIP: 0033:0x7f8ed459e0d9 [ 608.657055][T13623] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 608.676747][T13623] RSP: 002b:00007f8ed5528028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 608.685263][T13623] RAX: ffffffffffffffda RBX: 00007f8ed4825fa0 RCX: 00007f8ed459e0d9 [ 608.693310][T13623] RDX: 0000000000000084 RSI: 00002000000000c0 RDI: 0000000000000006 [ 608.701363][T13623] RBP: 00007f8ed5528090 R08: 0000000000000000 R09: 0000000000000000 [ 608.709411][T13623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 608.717453][T13623] R13: 00007f8ed4826038 R14: 00007f8ed4825fa0 R15: 00007ffc05a5b838 [ 608.725580][T13623] [ 608.885328][T13625] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2362'. [ 609.043990][T13632] netlink: 206468 bytes leftover after parsing attributes in process `syz.3.2365'. [ 609.079188][T13632] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2365'. [ 609.463409][T13650] netlink: 'syz.0.2363': attribute type 10 has an invalid length. [ 609.503208][T13650] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2363'. [ 609.836741][T13659] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2369'. [ 609.879325][T13659] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 609.912603][T13660] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.2369'. [ 610.218927][T13662] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2370'. [ 610.288581][T13662] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 610.960172][T13689] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 611.005063][T13681] syzkaller0: entered promiscuous mode [ 611.015059][T13681] syzkaller0: entered allmulticast mode [ 611.556303][T13691] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 611.641910][T13696] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 611.668115][T13696] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 611.687433][T13696] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 611.701453][T13696] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 611.715565][T13696] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 611.725536][T13696] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 612.257129][T13707] netlink: 'syz.1.2382': attribute type 10 has an invalid length. [ 612.502586][T13694] chnl_net:caif_netlink_parms(): no params data found [ 612.686578][T13694] bridge0: port 1(bridge_slave_0) entered blocking state [ 612.700306][T13694] bridge0: port 1(bridge_slave_0) entered disabled state [ 612.709416][T13694] bridge_slave_0: entered allmulticast mode [ 612.723362][T13694] bridge_slave_0: entered promiscuous mode [ 612.734775][T13694] bridge0: port 2(bridge_slave_1) entered blocking state [ 612.748499][T13694] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.759512][T13694] bridge_slave_1: entered allmulticast mode [ 612.772975][T13694] bridge_slave_1: entered promiscuous mode [ 612.842034][T13694] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 612.862162][T13694] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 612.941126][T13694] team0: Port device team_slave_0 added [ 612.956501][T13694] team0: Port device team_slave_1 added [ 613.032448][T13694] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 613.044823][T13694] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 613.074479][T13694] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 613.094956][T13694] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 613.114067][T13694] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 613.183137][T13694] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 613.706697][T13694] hsr_slave_0: entered promiscuous mode [ 613.734543][T13694] hsr_slave_1: entered promiscuous mode [ 613.750752][T13694] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 613.771333][T13694] Cannot create hsr debugfs directory [ 613.852276][ T5779] Bluetooth: hci4: command tx timeout [ 613.866804][T13721] __nla_validate_parse: 9 callbacks suppressed [ 613.866822][T13721] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2386'. [ 613.905878][T13721] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 613.972435][T13725] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2387'. [ 613.982322][T13726] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2388'. [ 614.017042][T13726] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 614.106365][T13723] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.2388'. [ 614.308211][T11149] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.364156][T13731] syzkaller0: entered promiscuous mode [ 614.370348][T13731] syzkaller0: entered allmulticast mode [ 614.415112][T11149] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.504160][T11149] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.664793][T13734] netlink: 'syz.1.2392': attribute type 29 has an invalid length. [ 614.702374][T13734] netlink: 'syz.1.2392': attribute type 29 has an invalid length. [ 614.776645][T13736] netlink: 'syz.0.2391': attribute type 10 has an invalid length. [ 614.794009][T13734] netlink: 'syz.1.2392': attribute type 27 has an invalid length. [ 614.806688][T13736] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2391'. [ 614.831281][T13734] netlink: 'syz.1.2392': attribute type 3 has an invalid length. [ 615.925548][ T5779] Bluetooth: hci4: command tx timeout [ 616.138341][T13759] netlink: 'syz.1.2395': attribute type 10 has an invalid length. [ 616.162723][T13759] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2395'. [ 616.423007][T13776] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2397'. [ 616.581913][T13778] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2396'. [ 616.625823][T13778] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 617.185116][T13792] netlink: 'syz.1.2401': attribute type 10 has an invalid length. [ 617.194985][T13792] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2401'. [ 617.255074][T13794] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2399'. [ 617.278327][T13794] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 617.399449][T13694] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 617.439749][T13694] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 617.477330][T13793] syzkaller0: entered promiscuous mode [ 617.483046][T13793] syzkaller0: entered allmulticast mode [ 617.562690][T13694] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 617.814501][T13694] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 618.005372][ T5779] Bluetooth: hci4: command tx timeout [ 618.442687][T13822] netlink: 'syz.2.2404': attribute type 10 has an invalid length. [ 618.661761][T13826] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 618.750702][T13694] 8021q: adding VLAN 0 to HW filter on device bond0 [ 618.844297][T13694] 8021q: adding VLAN 0 to HW filter on device team0 [ 618.957010][T12359] bridge0: port 1(bridge_slave_0) entered blocking state [ 618.964278][T12359] bridge0: port 1(bridge_slave_0) entered forwarding state [ 619.059119][T13830] __nla_validate_parse: 3 callbacks suppressed [ 619.059139][T13830] netlink: 206468 bytes leftover after parsing attributes in process `syz.1.2408'. [ 619.076447][T11149] hsr_slave_0: left promiscuous mode [ 619.089440][T11149] hsr_slave_1: left promiscuous mode [ 619.096169][T13830] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2408'. [ 619.114003][T11149] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 619.125363][T11149] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 619.148463][T11149] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 619.165400][T11149] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 619.204660][T11149] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 619.226366][T11149] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 619.277184][T11149] bridge_slave_1: left allmulticast mode [ 619.282923][T11149] bridge_slave_1: left promiscuous mode [ 619.338580][T11149] bridge0: port 2(bridge_slave_1) entered disabled state [ 619.390336][T11149] bridge_slave_0: left allmulticast mode [ 619.415336][T11149] bridge_slave_0: left promiscuous mode [ 619.421373][T11149] bridge0: port 1(bridge_slave_0) entered disabled state [ 619.549249][T11149] veth1_macvtap: left promiscuous mode [ 619.556923][T11149] veth0_macvtap: left promiscuous mode [ 620.087399][ T5779] Bluetooth: hci4: command tx timeout [ 620.328958][T13860] netlink: 'syz.0.2415': attribute type 29 has an invalid length. [ 620.384081][T13862] netlink: 'syz.0.2415': attribute type 27 has an invalid length. [ 620.397403][T13862] netlink: 'syz.0.2415': attribute type 3 has an invalid length. [ 620.460386][T11149] team0 (unregistering): Port device team_slave_1 removed [ 620.504766][T11149] team0 (unregistering): Port device team_slave_0 removed [ 620.551993][T11149] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 620.606915][T11149] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 620.941774][T11149] team0 (unregistering): Port device bond0 removed [ 620.975563][T11149] bond0 (unregistering): Released all slaves [ 621.072053][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 621.079336][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 621.092160][T13835] netlink: 'syz.2.2410': attribute type 10 has an invalid length. [ 621.100343][T13835] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2410'. [ 621.146600][T13860] netlink: 'syz.0.2415': attribute type 29 has an invalid length. [ 621.386368][T13870] netlink: 'syz.2.2416': attribute type 10 has an invalid length. [ 621.425337][T13870] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2416'. [ 621.441965][T13870] batman_adv: batadv0: Adding interface: virt_wifi0 [ 621.476317][T13870] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 621.554438][T13870] batman_adv: batadv0: Interface activated: virt_wifi0 [ 621.604375][T13875] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2417'. [ 621.651098][T13875] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 621.954241][T13694] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 622.108511][T13694] veth0_vlan: entered promiscuous mode [ 622.235471][T13694] veth1_vlan: entered promiscuous mode [ 622.416314][T13694] veth0_macvtap: entered promiscuous mode [ 622.460360][T13694] veth1_macvtap: entered promiscuous mode [ 622.550526][T13886] netlink: 'syz.1.2422': attribute type 10 has an invalid length. [ 622.668076][T13886] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2422'. [ 622.753706][T13694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 622.794895][T13694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.821919][T13694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 622.832766][T13694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.843047][T13694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 622.854212][T13694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.866452][T13694] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 622.894189][T13889] netlink: 'syz.0.2423': attribute type 10 has an invalid length. [ 622.937150][T13889] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2423'. [ 622.970848][T13694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 622.990597][T13694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 623.007591][T13694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 623.025989][T13694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 623.041571][T13694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 623.053543][T13694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 623.076356][T13694] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 623.109456][T13694] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.125407][T13694] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.140056][ T5814] page_pool_release_retry() stalled pool shutdown 1 inflight 60 sec [ 623.149813][T13694] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.163696][T13694] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.532220][T11149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 623.556091][T11149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 623.635825][T13897] syzkaller0: entered promiscuous mode [ 623.675242][T13897] syzkaller0: entered allmulticast mode [ 623.731800][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 623.751687][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 623.806407][T13900] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2426'. [ 623.894273][T13900] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 623.936979][T13898] netlink: 'syz.0.2424': attribute type 10 has an invalid length. [ 623.992875][T13898] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2424'. [ 624.616729][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.623131][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.651250][T13917] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2430'. [ 624.778879][T13917] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 624.807347][T13920] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.2430'. [ 624.878769][T13916] netlink: 'syz.1.2431': attribute type 10 has an invalid length. [ 624.895956][T13916] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2431'. [ 625.334014][T13925] syzkaller0: entered promiscuous mode [ 625.394289][T13925] syzkaller0: entered allmulticast mode [ 625.440401][T13927] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2435'. [ 625.582071][T13927] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 625.608963][T13696] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 625.619997][T13696] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 625.628986][T13696] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 625.638327][T13696] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 625.646283][T13696] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 625.653937][T13696] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 626.767391][T13943] netlink: 7295 bytes leftover after parsing attributes in process `syz.0.2438'. [ 626.891546][T13948] netlink: 'syz.1.2439': attribute type 10 has an invalid length. [ 626.932580][T13948] netlink: 'syz.1.2439': attribute type 4 has an invalid length. [ 626.940508][T13948] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2439'. [ 626.972282][T13948] : renamed from team0 (while UP) [ 626.999888][T13948] bridge0: port 4() entered disabled state [ 627.028631][T13948] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 627.149694][T12359] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.173689][T13930] chnl_net:caif_netlink_parms(): no params data found [ 627.283382][T13952] syzkaller0: entered promiscuous mode [ 627.291689][T13952] syzkaller0: entered allmulticast mode [ 627.328542][T12359] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.502696][T12359] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.573232][T13959] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2441'. [ 627.633610][T13959] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 627.743780][T13955] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.2441'. [ 627.777440][T13958] netlink: 'syz.0.2442': attribute type 10 has an invalid length. [ 627.808155][T13958] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2442'. [ 627.866456][T13930] bridge0: port 1(bridge_slave_0) entered blocking state [ 627.881158][T13930] bridge0: port 1(bridge_slave_0) entered disabled state [ 627.911746][T13930] bridge_slave_0: entered allmulticast mode [ 627.928667][T13930] bridge_slave_0: entered promiscuous mode [ 627.947100][T13930] bridge0: port 2(bridge_slave_1) entered blocking state [ 627.954644][T13930] bridge0: port 2(bridge_slave_1) entered disabled state [ 627.969151][T13930] bridge_slave_1: entered allmulticast mode [ 627.980988][T13930] bridge_slave_1: entered promiscuous mode [ 628.052161][T13930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 628.074041][T13930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 628.150396][T13930] team0: Port device team_slave_0 added [ 628.162793][T13930] team0: Port device team_slave_1 added [ 628.228060][T13930] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 628.240939][T13930] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 628.278236][T13930] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 628.284444][T13696] Bluetooth: hci2: command tx timeout [ 628.295977][T13930] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 628.303195][T13930] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 628.334176][T13930] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 628.614722][T13930] hsr_slave_0: entered promiscuous mode [ 628.625650][T13930] hsr_slave_1: entered promiscuous mode [ 628.685666][T13930] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 628.697963][T13930] Cannot create hsr debugfs directory [ 628.914798][T13968] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2444'. [ 628.958724][T13968] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 629.747472][T13976] netlink: 'syz.1.2447': attribute type 10 has an invalid length. [ 629.763185][T13976] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2447'. [ 630.336237][T13696] Bluetooth: hci2: command tx timeout [ 630.645630][T13996] netlink: 'syz.3.2448': attribute type 10 has an invalid length. [ 630.664954][T13996] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2448'. [ 630.696392][T13996] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 630.703512][T13996] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 630.757110][T13996] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 631.090961][T14013] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2451'. [ 631.117081][T14013] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 631.300095][T14016] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.2451'. [ 631.604958][T14020] netlink: 'syz.3.2454': attribute type 10 has an invalid length. [ 631.622358][T14020] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2454'. [ 631.645979][T14022] syzkaller0: entered promiscuous mode [ 631.657769][T14022] syzkaller0: entered allmulticast mode [ 631.860697][T14033] netlink: 'syz.3.2458': attribute type 49 has an invalid length. [ 631.921445][T14033] netlink: 'syz.3.2458': attribute type 49 has an invalid length. [ 632.014724][T13930] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 632.066141][T13930] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 632.188062][T14036] IPv6: Can't replace route, no match found [ 632.217412][T13930] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 632.264538][T13930] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 632.406504][T13696] Bluetooth: hci2: command tx timeout [ 633.285885][T14049] netlink: 'syz.1.2461': attribute type 10 has an invalid length. [ 633.293792][T14049] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2461'. [ 633.406288][T12359] hsr_slave_0: left promiscuous mode [ 633.418588][T12359] hsr_slave_1: left promiscuous mode [ 633.441935][T12359] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 633.460844][T12359] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 633.496260][T12359] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 633.503743][T12359] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 633.528196][T12359] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 633.536693][T12359] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 633.556646][T12359] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 633.565308][T12359] batman_adv: batadv0: Removing interface: virt_wifi0 [ 633.580742][T12359] bridge_slave_1: left allmulticast mode [ 633.608594][T12359] bridge_slave_1: left promiscuous mode [ 633.645177][T12359] bridge0: port 2(bridge_slave_1) entered disabled state [ 633.681726][T12359] bridge_slave_0: left allmulticast mode [ 633.687844][T12359] bridge_slave_0: left promiscuous mode [ 633.693756][T12359] bridge0: port 1(bridge_slave_0) entered disabled state [ 633.776771][T12359] veth1_macvtap: left promiscuous mode [ 633.790765][T12359] veth0_macvtap: left promiscuous mode [ 633.807889][T12359] veth1_vlan: left promiscuous mode [ 633.827268][T12359] veth0_vlan: left promiscuous mode [ 634.485304][T13696] Bluetooth: hci2: command tx timeout [ 635.190851][T12359] team0 (unregistering): Port device team_slave_1 removed [ 635.239998][T12359] team0 (unregistering): Port device team_slave_0 removed [ 635.284830][T12359] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 635.334284][T12359] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 635.639823][T12359] team0 (unregistering): Port device bond0 removed [ 635.678523][T12359] bond0 (unregistering): Released all slaves [ 635.776755][T14054] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2463'. [ 635.791846][T14054] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 635.814513][T14061] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.2463'. [ 635.825050][T14060] netlink: 'syz.1.2465': attribute type 10 has an invalid length. [ 635.844698][T14060] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2465'. [ 635.860399][T14073] netlink: 'syz.3.2467': attribute type 10 has an invalid length. [ 635.869675][T14073] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2467'. [ 636.061406][T13930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 636.171339][T13930] 8021q: adding VLAN 0 to HW filter on device team0 [ 636.259248][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 636.266501][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 636.330083][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 636.337525][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 636.358720][T14089] FAULT_INJECTION: forcing a failure. [ 636.358720][T14089] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 636.404767][T14089] CPU: 0 PID: 14089 Comm: syz.1.2472 Not tainted syzkaller #0 [ 636.412349][T14089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 636.422461][T14089] Call Trace: [ 636.425796][T14089] [ 636.428777][T14089] dump_stack_lvl+0x18c/0x250 [ 636.433526][T14089] ? show_regs_print_info+0x20/0x20 [ 636.438784][T14089] ? load_image+0x420/0x420 [ 636.443362][T14089] ? __might_fault+0xaa/0x120 [ 636.448108][T14089] ? __lock_acquire+0x7d80/0x7d80 [ 636.453206][T14089] should_fail_ex+0x394/0x4c0 [ 636.457941][T14089] _copy_from_iter+0x1cd/0x1290 [ 636.462833][T14089] ? rcu_is_watching+0x15/0xb0 [ 636.467648][T14089] ? copyout_mc+0x70/0x70 [ 636.472013][T14089] ? __virt_addr_valid+0x10c/0x380 [ 636.477168][T14089] ? __virt_addr_valid+0x10c/0x380 [ 636.482329][T14089] ? __virt_addr_valid+0x10c/0x380 [ 636.487480][T14089] ? __check_object_size+0x4fc/0xa40 [ 636.492799][T14089] kcm_sendmsg+0xddc/0x27b0 [ 636.497403][T14089] ? kcm_getsockopt+0x280/0x280 [ 636.502287][T14089] ? apparmor_socket_sendmsg+0x8e/0x330 [ 636.507874][T14089] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 636.513192][T14089] ? security_socket_sendmsg+0x80/0xa0 [ 636.518679][T14089] sock_write_iter+0x2dc/0x420 [ 636.523483][T14089] ? sock_read_iter+0x3f0/0x3f0 [ 636.528384][T14089] ? common_file_perm+0x198/0x1f0 [ 636.533544][T14089] vfs_write+0x474/0x9a0 [ 636.537835][T14089] ? file_end_write+0x250/0x250 [ 636.542724][T14089] ? __fget_files+0x3fc/0x460 [ 636.547444][T14089] ? __fdget_pos+0x1d8/0x330 [ 636.552063][T14089] ? ksys_write+0x74/0x260 [ 636.556515][T14089] ksys_write+0x151/0x260 [ 636.560876][T14089] ? __ia32_sys_read+0x90/0x90 [ 636.565678][T14089] ? lockdep_hardirqs_on+0x98/0x150 [ 636.570915][T14089] do_syscall_64+0x55/0xb0 [ 636.575356][T14089] ? clear_bhb_loop+0x40/0x90 [ 636.580067][T14089] ? clear_bhb_loop+0x40/0x90 [ 636.584777][T14089] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 636.590703][T14089] RIP: 0033:0x7f34c619e0d9 [ 636.595143][T14089] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 636.614787][T14089] RSP: 002b:00007f34c70d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 636.623234][T14089] RAX: ffffffffffffffda RBX: 00007f34c6425fa0 RCX: 00007f34c619e0d9 [ 636.631230][T14089] RDX: 00000000fffffdef RSI: 0000200000000140 RDI: 0000000000000004 [ 636.639227][T14089] RBP: 00007f34c70d4090 R08: 0000000000000000 R09: 0000000000000000 [ 636.647231][T14089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 636.655231][T14089] R13: 00007f34c6426038 R14: 00007f34c6425fa0 R15: 00007ffe43cc70a8 [ 636.663245][T14089] [ 637.504430][T13930] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 637.666547][T13930] veth0_vlan: entered promiscuous mode [ 637.696173][T13930] veth1_vlan: entered promiscuous mode [ 637.761848][T13930] veth0_macvtap: entered promiscuous mode [ 637.794875][T13930] veth1_macvtap: entered promiscuous mode [ 637.874794][T14112] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2475'. [ 637.944898][T14112] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 637.992578][T14114] netlink: 'syz.0.2473': attribute type 10 has an invalid length. [ 638.051023][T14114] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2473'. [ 638.074028][T13930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 638.095939][T13930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.115192][T13930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 638.135252][T13930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.158920][T13930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 638.180851][T13930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.205472][T13930] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 638.221007][T14116] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.2475'. [ 638.244691][T14119] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2474'. [ 638.274938][T14119] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 638.307968][T13930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 638.333449][T13930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.343742][T13930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 638.354777][T13930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.365041][T13930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 638.385245][T13930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.419316][T13930] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 638.474794][T13930] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.494871][T13930] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.515273][T13930] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.534300][T13930] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.984823][T11149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 639.055213][T11149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 639.104810][T14128] netlink: 'syz.0.2477': attribute type 10 has an invalid length. [ 639.134961][T14128] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2477'. [ 639.284435][T13190] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 639.340753][T13190] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 641.356406][T14177] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2483'. [ 641.509052][T14177] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 641.601062][T14180] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.2483'. [ 641.763958][ T5779] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 641.803321][ T5779] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 641.829912][ T5779] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 641.849077][ T5779] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 641.884599][ T5779] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 641.892481][ T5779] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 642.497969][T14186] chnl_net:caif_netlink_parms(): no params data found [ 642.685889][T13190] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.722648][T14193] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2486'. [ 642.785809][T14193] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 642.863478][T13190] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.882560][T14199] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2485'. [ 642.895762][T14199] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 642.973367][T13190] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.047196][T14186] bridge0: port 1(bridge_slave_0) entered blocking state [ 643.075662][T14186] bridge0: port 1(bridge_slave_0) entered disabled state [ 643.083280][T14186] bridge_slave_0: entered allmulticast mode [ 643.123311][T14186] bridge_slave_0: entered promiscuous mode [ 643.145197][T14201] tap0: tun_chr_ioctl cmd 35111 [ 643.151477][T14186] bridge0: port 2(bridge_slave_1) entered blocking state [ 643.174902][T14186] bridge0: port 2(bridge_slave_1) entered disabled state [ 643.199223][T14186] bridge_slave_1: entered allmulticast mode [ 643.214615][T14186] bridge_slave_1: entered promiscuous mode [ 643.737459][T14213] syzkaller0: entered promiscuous mode [ 643.749149][T14213] syzkaller0: entered allmulticast mode [ 643.777951][T14186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 643.880852][T14186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 644.076410][T14186] team0: Port device team_slave_0 added [ 644.091667][T14186] team0: Port device team_slave_1 added [ 644.219509][T14186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 644.294204][T14186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 644.325556][T13696] Bluetooth: hci1: command tx timeout [ 644.336112][T13696] Bluetooth: hci4: unexpected event 0x05 length: 15 > 4 [ 644.491870][T14186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 644.544551][T14186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 644.581065][T14186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 644.691827][T14186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 644.829726][T14225] netlink: 'syz.2.2493': attribute type 10 has an invalid length. [ 644.840618][T14225] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2493'. [ 644.900759][T14225] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 644.925481][T14225] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 645.001562][T14225] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 645.472947][T14186] hsr_slave_0: entered promiscuous mode [ 645.510329][T14186] hsr_slave_1: entered promiscuous mode [ 645.850594][T14254] netlink: 'syz.2.2499': attribute type 10 has an invalid length. [ 645.865777][T14254] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2499'. [ 646.405710][T13696] Bluetooth: hci1: command tx timeout [ 646.648769][T14256] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2497'. [ 646.667318][T14256] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 647.043095][T14268] syzkaller0: entered promiscuous mode [ 647.051350][T14268] syzkaller0: entered allmulticast mode [ 647.382529][T14273] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2503'. [ 647.895127][T14280] netlink: 'syz.1.2504': attribute type 10 has an invalid length. [ 647.915481][T14280] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2504'. [ 648.487647][T13696] Bluetooth: hci1: command tx timeout [ 649.340908][T13190] hsr_slave_0: left promiscuous mode [ 649.356644][T13190] hsr_slave_1: left promiscuous mode [ 649.371962][T13190] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 649.392367][T13190] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 649.407743][T13190] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 649.425342][T13190] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 649.434875][T13190] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 649.450089][T13190] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 649.482324][T13190] veth1_macvtap: left promiscuous mode [ 649.493258][T13190] veth0_macvtap: left promiscuous mode [ 650.231155][T13190] team0 (unregistering): Port device team_slave_1 removed [ 650.313291][T13190] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 650.364056][T13190] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 650.565686][T13696] Bluetooth: hci1: command tx timeout [ 650.668664][T13190] bond0 (unregistering): (slave team0): Releasing backup interface [ 650.701295][T13190] bond0 (unregistering): Released all slaves [ 650.740216][T14306] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2509'. [ 650.920103][T14306] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 650.998105][T14186] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 651.048095][T14186] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 651.087189][T14186] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 651.117764][T14186] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 651.142668][T14331] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.2513'. [ 651.441828][T14331] syzkaller0: entered promiscuous mode [ 651.458173][T14331] syzkaller0: entered allmulticast mode [ 651.483386][T14337] Q6`Ҙ: renamed from lo (while UP) [ 653.683275][T14341] netlink: 'syz.3.2516': attribute type 10 has an invalid length. [ 653.693409][T14341] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2516'. [ 653.914159][T14186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 654.069893][T14186] 8021q: adding VLAN 0 to HW filter on device team0 [ 654.150877][T11153] bridge0: port 1(bridge_slave_0) entered blocking state [ 654.158124][T11153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 654.388994][T13190] bridge0: port 2(bridge_slave_1) entered blocking state [ 654.396273][T13190] bridge0: port 2(bridge_slave_1) entered forwarding state [ 654.662551][T14370] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2522'. [ 654.742191][T14370] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 655.104867][T14186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 655.195455][T14186] veth0_vlan: entered promiscuous mode [ 655.222049][T14186] veth1_vlan: entered promiscuous mode [ 655.288261][T14186] veth0_macvtap: entered promiscuous mode [ 655.327750][T14186] veth1_macvtap: entered promiscuous mode [ 655.449123][T14186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 655.475303][T14186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.501500][T14186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 655.535247][T14186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.564366][T14186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 655.599869][T14186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.620845][T14186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 655.650879][T14186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 655.685422][T14186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.700211][T14186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 655.711329][T14186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.721929][T14186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 655.744858][T14186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.792298][T14186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 655.846282][T14186] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.865447][T14186] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.885613][T14186] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.894437][T14186] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.919801][T14400] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2525'. [ 656.322664][T11154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 656.391751][T11154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 656.694866][T14405] netlink: 'syz.1.2526': attribute type 10 has an invalid length. [ 656.709342][T11160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 656.725823][T11160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 656.736240][T14405] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2526'. [ 657.856851][T14428] syzkaller0: entered promiscuous mode [ 657.885422][T14428] syzkaller0: entered allmulticast mode [ 658.438284][ T5779] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 658.448225][ T5779] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 658.466787][ T5779] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 658.487184][ T5779] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 658.496583][ T5779] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 658.504597][ T5779] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 658.835674][ T5774] bond0: (slave syz_tun): Releasing backup interface [ 658.844035][ T5774] syz_tun (unregistering): left allmulticast mode [ 659.187426][T11149] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.480646][T11149] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.794770][T11149] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.944700][T14462] netlink: 'syz.0.2534': attribute type 10 has an invalid length. [ 659.974626][T14462] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2534'. [ 660.018869][T14462] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 660.028532][T14462] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 660.060423][T14462] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 660.116971][T11149] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.745728][T14444] chnl_net:caif_netlink_parms(): no params data found [ 660.822655][T13696] Bluetooth: hci3: command tx timeout [ 660.849067][T14480] netlink: 'syz.2.2538': attribute type 10 has an invalid length. [ 660.960592][T14480] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2538'. [ 661.698379][T14444] bridge0: port 1(bridge_slave_0) entered blocking state [ 661.733221][T14444] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.753968][T14444] bridge_slave_0: entered allmulticast mode [ 661.765669][T14444] bridge_slave_0: entered promiscuous mode [ 661.774972][T14444] bridge0: port 2(bridge_slave_1) entered blocking state [ 661.782504][T14444] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.790001][T14444] bridge_slave_1: entered allmulticast mode [ 661.797793][T14444] bridge_slave_1: entered promiscuous mode [ 661.872703][T14444] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 661.892871][T14444] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 661.987222][T14444] team0: Port device team_slave_0 added [ 662.000323][T14444] team0: Port device team_slave_1 added [ 662.125925][T14444] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 662.132969][T14444] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 662.173517][T14444] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 662.198577][T14444] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 662.219854][T14444] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 662.274493][T14444] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 662.889747][T13696] Bluetooth: hci3: command tx timeout [ 663.331254][T14444] hsr_slave_0: entered promiscuous mode [ 663.349226][T14444] hsr_slave_1: entered promiscuous mode [ 663.367189][T14444] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 663.380230][T14444] Cannot create hsr debugfs directory [ 663.489692][T14534] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2543'. [ 664.965716][T13696] Bluetooth: hci3: command tx timeout [ 665.993756][T14567] netlink: 'syz.3.2550': attribute type 10 has an invalid length. [ 666.026236][T14567] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2550'. [ 666.200480][T14577] syzkaller0: entered promiscuous mode [ 666.206254][T14577] syzkaller0: entered allmulticast mode [ 667.061954][T13696] Bluetooth: hci3: command tx timeout [ 668.813192][T11149] hsr_slave_0: left promiscuous mode [ 668.820693][T11149] hsr_slave_1: left promiscuous mode [ 668.827493][T11149] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 668.834958][T11149] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 668.844573][T11149] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 668.858972][T11149] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 668.867789][T11149] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 668.876182][T11149] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 668.886359][T11149] hsr0: left allmulticast mode [ 668.891391][T11149] bridge0: port 3(hsr0) entered disabled state [ 668.906781][T11149] bridge_slave_1: left allmulticast mode [ 668.912489][T11149] bridge_slave_1: left promiscuous mode [ 668.935464][T11149] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.955499][T11149] bridge_slave_0: left allmulticast mode [ 668.961277][T11149] bridge_slave_0: left promiscuous mode [ 668.981005][T14611] FAULT_INJECTION: forcing a failure. [ 668.981005][T14611] name failslab, interval 1, probability 0, space 0, times 0 [ 669.005627][T11149] bridge0: port 1(bridge_slave_0) entered disabled state [ 669.032324][T14611] CPU: 0 PID: 14611 Comm: syz.0.2557 Not tainted syzkaller #0 [ 669.039891][T14611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 669.050056][T14611] Call Trace: [ 669.053390][T14611] [ 669.056375][T14611] dump_stack_lvl+0x18c/0x250 [ 669.061108][T14611] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 669.067330][T14611] ? show_regs_print_info+0x20/0x20 [ 669.072584][T14611] ? load_image+0x420/0x420 [ 669.077163][T14611] should_fail_ex+0x394/0x4c0 [ 669.081899][T14611] should_failslab+0x9/0x20 [ 669.086460][T14611] slab_pre_alloc_hook+0x59/0x300 [ 669.091554][T14611] kmem_cache_alloc_node+0x5e/0x310 [ 669.096851][T14611] ? __alloc_skb+0x103/0x2c0 [ 669.101502][T14611] __alloc_skb+0x103/0x2c0 [ 669.105976][T14611] netlink_dump+0x1ee/0xec0 [ 669.110540][T14611] ? rcu_is_watching+0x15/0xb0 [ 669.115366][T14611] ? __mutex_lock+0x30d/0xc80 [ 669.120221][T14611] ? netlink_lookup+0x200/0x200 [ 669.125136][T14611] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 669.131341][T14611] ? netlink_lookup+0x30/0x200 [ 669.136154][T14611] ? netlink_lookup+0x30/0x200 [ 669.140979][T14611] __netlink_dump_start+0x57c/0x7a0 [ 669.146253][T14611] packet_diag_handler_dump+0x1da/0x2a0 [ 669.151961][T14611] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 669.158183][T14611] ? packet_sendmsg_spkt+0x1120/0x1120 [ 669.163690][T14611] ? packet_diag_handler_dump+0x2a0/0x2a0 [ 669.169467][T14611] ? packet_sendmsg_spkt+0x1120/0x1120 [ 669.174983][T14611] sock_diag_rcv_msg+0x3d3/0x5f0 [ 669.179990][T14611] netlink_rcv_skb+0x235/0x4c0 [ 669.184802][T14611] ? sock_diag_bind+0xb0/0xb0 [ 669.189537][T14611] ? netlink_ack+0x1160/0x1160 [ 669.194364][T14611] ? __lock_acquire+0x7d80/0x7d80 [ 669.199455][T14611] ? netlink_deliver_tap+0x2e/0x1b0 [ 669.204703][T14611] sock_diag_rcv+0x2a/0x40 [ 669.209179][T14611] netlink_unicast+0x7b1/0x930 [ 669.214008][T14611] netlink_sendmsg+0x8d0/0xbf0 [ 669.218835][T14611] ? netlink_getsockopt+0x590/0x590 [ 669.224081][T14611] ? apparmor_socket_sendmsg+0x8e/0x330 [ 669.229691][T14611] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 669.235041][T14611] ? security_socket_sendmsg+0x80/0xa0 [ 669.240571][T14611] ? netlink_getsockopt+0x590/0x590 [ 669.245821][T14611] ____sys_sendmsg+0x61b/0x980 [ 669.250646][T14611] ? __asan_memset+0x22/0x40 [ 669.255296][T14611] ? __sys_sendmsg_sock+0x30/0x30 [ 669.260373][T14611] ? __import_iovec+0x5f2/0x850 [ 669.265307][T14611] ? import_iovec+0x73/0xa0 [ 669.269873][T14611] ___sys_sendmsg+0x2a6/0x360 [ 669.274601][T14611] ? __sys_sendmsg+0x2b0/0x2b0 [ 669.279419][T14611] ? perf_trace_preemptirq_template+0x269/0x330 [ 669.285762][T14611] __se_sys_sendmsg+0x1d0/0x2c0 [ 669.290664][T14611] ? __x64_sys_sendmsg+0x80/0x80 [ 669.295669][T14611] ? syscall_enter_from_user_mode+0x2e/0x80 [ 669.301652][T14611] do_syscall_64+0x55/0xb0 [ 669.306132][T14611] ? clear_bhb_loop+0x40/0x90 [ 669.310858][T14611] ? clear_bhb_loop+0x40/0x90 [ 669.315589][T14611] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 669.321540][T14611] RIP: 0033:0x7efefbf9e0d9 [ 669.326000][T14611] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 669.345657][T14611] RSP: 002b:00007efefce50028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 669.354129][T14611] RAX: ffffffffffffffda RBX: 00007efefc225fa0 RCX: 00007efefbf9e0d9 [ 669.362192][T14611] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000007 [ 669.370207][T14611] RBP: 00007efefce50090 R08: 0000000000000000 R09: 0000000000000000 [ 669.378213][T14611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 669.386213][T14611] R13: 00007efefc226038 R14: 00007efefc225fa0 R15: 00007ffd81c42a08 [ 669.394279][T14611] [ 669.442711][T11149] veth1_macvtap: left promiscuous mode [ 669.455738][T11149] veth0_macvtap: left promiscuous mode [ 669.461573][T11149] veth1_vlan: left promiscuous mode [ 669.473012][T11149] veth0_vlan: left promiscuous mode [ 670.187905][T11149] team_slave_1 (unregistering): left promiscuous mode [ 670.195043][T11149] team_slave_1 (unregistering): left allmulticast mode [ 670.209345][T11149]  (unregistering): Port device team_slave_1 removed [ 670.252060][T11149] team_slave_0 (unregistering): left promiscuous mode [ 670.261180][T11149] team_slave_0 (unregistering): left allmulticast mode [ 670.272385][T11149]  (unregistering): Port device team_slave_0 removed [ 670.318094][T11149] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 670.334033][T11149] bond_slave_1 (unregistering): left promiscuous mode [ 670.341328][T11149] bond_slave_1 (unregistering): left allmulticast mode [ 670.658716][T11149] bond0 (unregistering): left promiscuous mode [ 670.664992][T11149] bond0 (unregistering): left allmulticast mode [ 670.673378][T11149]  (unregistering): Port device bond0 removed [ 670.704210][T11149] bond0 (unregistering): Released all slaves [ 670.941734][T14444] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 670.984323][T14444] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 671.029363][T14444] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 671.195978][T14444] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 671.519977][T14622] netlink: 'syz.3.2561': attribute type 10 has an invalid length. [ 671.629336][T14622] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2561'. [ 672.254740][T14444] 8021q: adding VLAN 0 to HW filter on device bond0 [ 672.358190][T14444] 8021q: adding VLAN 0 to HW filter on device team0 [ 672.407101][T14650] FAULT_INJECTION: forcing a failure. [ 672.407101][T14650] name failslab, interval 1, probability 0, space 0, times 0 [ 672.421886][T13190] bridge0: port 1(bridge_slave_0) entered blocking state [ 672.429189][T13190] bridge0: port 1(bridge_slave_0) entered forwarding state [ 672.472497][T14650] CPU: 1 PID: 14650 Comm: syz.3.2564 Not tainted syzkaller #0 [ 672.480077][T14650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 672.490306][T14650] Call Trace: [ 672.493647][T14650] [ 672.496642][T14650] dump_stack_lvl+0x18c/0x250 [ 672.501394][T14650] ? show_regs_print_info+0x20/0x20 [ 672.506664][T14650] ? load_image+0x420/0x420 [ 672.511252][T14650] ? verify_lock_unused+0x140/0x140 [ 672.516546][T14650] should_fail_ex+0x394/0x4c0 [ 672.521312][T14650] should_failslab+0x9/0x20 [ 672.525885][T14650] slab_pre_alloc_hook+0x59/0x300 [ 672.530994][T14650] kmem_cache_alloc+0x5a/0x2c0 [ 672.535830][T14650] ? skb_clone+0x1eb/0x370 [ 672.540339][T14650] skb_clone+0x1eb/0x370 [ 672.544689][T14650] __netlink_deliver_tap+0x411/0x7f0 [ 672.550082][T14650] ? netlink_deliver_tap+0x2e/0x1b0 [ 672.555343][T14650] netlink_deliver_tap+0x19c/0x1b0 [ 672.560508][T14650] netlink_sendskb+0x68/0x130 [ 672.565236][T14650] rtnl_unicast+0x4e/0x60 [ 672.569620][T14650] inet6_rtm_getroute+0x1141/0x17b0 [ 672.574872][T14650] ? inet6_rtm_delroute+0x600/0x600 [ 672.580187][T14650] ? inet6_rtm_delroute+0x600/0x600 [ 672.585448][T14650] ? inet6_rtm_delroute+0x600/0x600 [ 672.590690][T14650] rtnetlink_rcv_msg+0x892/0xf90 [ 672.595669][T14650] ? rtnetlink_rcv_msg+0x220/0xf90 [ 672.600847][T14650] ? rtnetlink_bind+0x80/0x80 [ 672.605582][T14650] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 672.611432][T14650] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 672.617505][T14650] ? __dev_queue_xmit+0x275/0x3630 [ 672.622669][T14650] ? __dev_queue_xmit+0x275/0x3630 [ 672.627854][T14650] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 672.633625][T14650] ? perf_trace_lock+0x303/0x3b0 [ 672.638634][T14650] netlink_rcv_skb+0x235/0x4c0 [ 672.643446][T14650] ? rtnetlink_bind+0x80/0x80 [ 672.648164][T14650] ? netlink_ack+0x1160/0x1160 [ 672.652987][T14650] ? __lock_acquire+0x7d80/0x7d80 [ 672.658079][T14650] ? netlink_deliver_tap+0x2e/0x1b0 [ 672.663322][T14650] netlink_unicast+0x7b1/0x930 [ 672.668159][T14650] netlink_sendmsg+0x8d0/0xbf0 [ 672.672971][T14650] ? netlink_getsockopt+0x590/0x590 [ 672.678211][T14650] ? apparmor_socket_sendmsg+0x8e/0x330 [ 672.683818][T14650] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 672.689141][T14650] ? security_socket_sendmsg+0x80/0xa0 [ 672.694630][T14650] ? netlink_getsockopt+0x590/0x590 [ 672.699866][T14650] ____sys_sendmsg+0x61b/0x980 [ 672.704680][T14650] ? __asan_memset+0x22/0x40 [ 672.709315][T14650] ? __sys_sendmsg_sock+0x30/0x30 [ 672.714374][T14650] ? __import_iovec+0x5f2/0x850 [ 672.719286][T14650] ? import_iovec+0x73/0xa0 [ 672.723836][T14650] ___sys_sendmsg+0x2a6/0x360 [ 672.728567][T14650] ? __sys_sendmsg+0x2b0/0x2b0 [ 672.733416][T14650] ? __lock_acquire+0x7d80/0x7d80 [ 672.738520][T14650] __se_sys_sendmsg+0x1d0/0x2c0 [ 672.743431][T14650] ? __x64_sys_sendmsg+0x80/0x80 [ 672.748439][T14650] ? lockdep_hardirqs_on+0x98/0x150 [ 672.753716][T14650] do_syscall_64+0x55/0xb0 [ 672.758165][T14650] ? clear_bhb_loop+0x40/0x90 [ 672.762874][T14650] ? clear_bhb_loop+0x40/0x90 [ 672.767591][T14650] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 672.773558][T14650] RIP: 0033:0x7f7a5519e0d9 [ 672.778109][T14650] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 672.797756][T14650] RSP: 002b:00007f7a56116028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 672.806231][T14650] RAX: ffffffffffffffda RBX: 00007f7a55425fa0 RCX: 00007f7a5519e0d9 [ 672.814235][T14650] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000004 [ 672.822249][T14650] RBP: 00007f7a56116090 R08: 0000000000000000 R09: 0000000000000000 [ 672.830251][T14650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 672.838256][T14650] R13: 00007f7a55426038 R14: 00007f7a55425fa0 R15: 00007fff6a3b0c68 [ 672.846290][T14650] [ 672.938099][T14444] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 672.948691][T14444] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 672.967432][T11160] bridge0: port 2(bridge_slave_1) entered blocking state [ 672.974684][T11160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 673.394033][T14667] netlink: 'syz.3.2567': attribute type 10 has an invalid length. [ 673.717622][T13696] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4 [ 675.010358][T14667] 8021q: adding VLAN 0 to HW filter on device bond0 [ 675.053780][T14667] team0: Port device bond0 added [ 675.258930][T14444] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 675.401459][T14444] veth0_vlan: entered promiscuous mode [ 675.486370][T14444] veth1_vlan: entered promiscuous mode [ 675.553822][T14444] veth0_macvtap: entered promiscuous mode [ 675.590353][T14444] veth1_macvtap: entered promiscuous mode [ 675.657718][T14444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 675.690505][T14444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 675.729703][T14444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 675.761589][T14444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 675.792327][T14444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 675.846405][T14444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 675.884233][T14444] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 675.901443][T13696] Bluetooth: hci4: unexpected event 0x05 length: 15 > 4 [ 675.960935][T14444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 676.036383][T14444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 676.110738][T14444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 676.185281][T14444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 676.215302][T14444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 676.295209][T14444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 676.334810][T14444] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 676.410088][T14444] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.475351][T14444] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.484329][T14444] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.503693][T14444] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.602333][T14695] netlink: 'syz.0.2571': attribute type 10 has an invalid length. [ 676.626214][T14695] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2571'. [ 677.403857][T14716] netlink: 'syz.3.2573': attribute type 21 has an invalid length. [ 677.644068][T11149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 677.667175][T14714] syzkaller0: entered promiscuous mode [ 677.691517][T14714] syzkaller0: entered allmulticast mode [ 677.705196][T11149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 677.911107][T12359] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 677.938125][T12359] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 678.237570][T14734] FAULT_INJECTION: forcing a failure. [ 678.237570][T14734] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 678.321105][T14734] CPU: 0 PID: 14734 Comm: syz.2.2577 Not tainted syzkaller #0 [ 678.328668][T14734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 678.338778][T14734] Call Trace: [ 678.342104][T14734] [ 678.345083][T14734] dump_stack_lvl+0x18c/0x250 [ 678.349825][T14734] ? show_regs_print_info+0x20/0x20 [ 678.355091][T14734] ? load_image+0x420/0x420 [ 678.359672][T14734] ? __might_fault+0xaa/0x120 [ 678.364412][T14734] ? __lock_acquire+0x7d80/0x7d80 [ 678.369549][T14734] should_fail_ex+0x394/0x4c0 [ 678.374303][T14734] _copy_from_user+0x2f/0xe0 [ 678.379122][T14734] __sys_bpf+0x23e/0x890 [ 678.383421][T14734] ? bpf_link_show_fdinfo+0x390/0x390 [ 678.388865][T14734] ? lock_chain_count+0x20/0x20 [ 678.393822][T14734] __x64_sys_bpf+0x7c/0x90 [ 678.398302][T14734] do_syscall_64+0x55/0xb0 [ 678.402764][T14734] ? clear_bhb_loop+0x40/0x90 [ 678.407489][T14734] ? clear_bhb_loop+0x40/0x90 [ 678.412223][T14734] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 678.418176][T14734] RIP: 0033:0x7fde84d9e0d9 [ 678.422645][T14734] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 678.442313][T14734] RSP: 002b:00007fde85c16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 678.450833][T14734] RAX: ffffffffffffffda RBX: 00007fde85025fa0 RCX: 00007fde84d9e0d9 [ 678.458943][T14734] RDX: 0000000000000050 RSI: 0000200000000380 RDI: 0000000000000000 [ 678.466969][T14734] RBP: 00007fde85c16090 R08: 0000000000000000 R09: 0000000000000000 [ 678.474996][T14734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 678.483009][T14734] R13: 00007fde85026038 R14: 00007fde85025fa0 R15: 00007ffedf8a5fd8 [ 678.491051][T14734] [ 678.664365][T14732] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2530'. [ 678.766419][T14732] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 679.158012][T14746] bridge0: port 2(bridge_slave_1) entered disabled state [ 679.168577][T14746] bridge0: port 1(bridge_slave_0) entered disabled state [ 679.219038][T14746] bridge0: entered allmulticast mode [ 679.383001][T14752] netlink: 'syz.0.2583': attribute type 1 has an invalid length. [ 679.408784][T14752] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.2583'. [ 679.428124][T14752] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2583'. [ 679.568507][T14748] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 679.607379][T14748] syzkaller0: entered promiscuous mode [ 679.665258][T14748] syzkaller0: entered allmulticast mode [ 680.072281][ C0] [ 680.072290][ C0] ================================ [ 680.072295][ C0] WARNING: inconsistent lock state [ 680.072318][ C0] syzkaller #0 Not tainted [ 680.072329][ C0] -------------------------------- [ 680.072334][ C0] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 680.072342][ C0] syz.1.2584/14757 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 680.072365][ C0] ffff888030fe8a38 (&trie->lock){....}-{2:2}, at: trie_delete_elem+0x94/0x630 [ 680.072428][ C0] {INITIAL USE} state was registered at: [ 680.072435][ C0] lock_acquire+0x19e/0x420 [ 680.072458][ C0] _raw_spin_lock_irqsave+0xb4/0x100 [ 680.072488][ C0] trie_update_elem+0xc4/0xd60 [ 680.072513][ C0] bpf_map_update_value+0x64b/0x710 [ 680.072531][ C0] generic_map_update_batch+0x5de/0x800 [ 680.072549][ C0] bpf_map_do_batch+0x3f2/0x600 [ 680.072570][ C0] __sys_bpf+0x381/0x890 [ 680.072587][ C0] __x64_sys_bpf+0x7c/0x90 [ 680.072605][ C0] do_syscall_64+0x55/0xb0 [ 680.072625][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 680.072651][ C0] irq event stamp: 672 [ 680.072657][ C0] hardirqs last enabled at (671): [] syscall_enter_from_user_mode+0x25/0x80 [ 680.072695][ C0] hardirqs last disabled at (672): [] exc_debug+0x73/0x140 [ 680.072729][ C0] softirqs last enabled at (624): [] bpf_prog_load+0x1204/0x1610 [ 680.072756][ C0] softirqs last disabled at (622): [] bpf_ksym_add+0x2c/0x330 [ 680.072783][ C0] [ 680.072783][ C0] other info that might help us debug this: [ 680.072789][ C0] Possible unsafe locking scenario: [ 680.072789][ C0] [ 680.072794][ C0] CPU0 [ 680.072797][ C0] ---- [ 680.072801][ C0] lock(&trie->lock); [ 680.072814][ C0] [ 680.072817][ C0] lock(&trie->lock); [ 680.072828][ C0] [ 680.072828][ C0] *** DEADLOCK *** [ 680.072828][ C0] [ 680.072832][ C0] no locks held by syz.1.2584/14757. [ 680.072841][ C0] [ 680.072841][ C0] stack backtrace: [ 680.072846][ C0] CPU: 0 PID: 14757 Comm: syz.1.2584 Not tainted syzkaller #0 [ 680.072865][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 680.072876][ C0] Call Trace: [ 680.072884][ C0] <#DB> [ 680.072892][ C0] dump_stack_lvl+0x18c/0x250 [ 680.072917][ C0] ? show_regs_print_info+0x20/0x20 [ 680.072945][ C0] ? print_usage_bug+0x43d/0x6a0 [ 680.072969][ C0] ? verify_lock_unused+0x15/0x140 [ 680.072995][ C0] lock_acquire+0x2c2/0x420 [ 680.073022][ C0] ? trie_delete_elem+0x94/0x630 [ 680.073052][ C0] ? read_lock_is_recursive+0x20/0x20 [ 680.073076][ C0] ? put_callchain_entry+0xb0/0xb0 [ 680.073102][ C0] ? kvm_guest_state+0xb7/0xf0 [ 680.073164][ C0] _raw_spin_lock_irqsave+0xb4/0x100 [ 680.073193][ C0] ? trie_delete_elem+0x94/0x630 [ 680.073219][ C0] ? _raw_spin_lock+0x40/0x40 [ 680.073246][ C0] ? perf_prepare_sample+0x1558/0x1db0 [ 680.073275][ C0] trie_delete_elem+0x94/0x630 [ 680.073310][ C0] bpf_prog_b23e3725e72cf264+0x4a/0x4e [ 680.073332][ C0] bpf_overflow_handler+0x1fc/0x510 [ 680.073367][ C0] ? bpf_overflow_handler+0xde/0x510 [ 680.073395][ C0] ? tp_perf_event_destroy+0x20/0x20 [ 680.073431][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 680.073459][ C0] __perf_event_overflow+0x461/0x660 [ 680.073489][ C0] perf_swevent_event+0x319/0x570 [ 680.073517][ C0] ? perf_tp_event+0x1550/0x1550 [ 680.073551][ C0] perf_bp_event+0x319/0x430 [ 680.073581][ C0] ? perf_event_free_bpf_prog+0x120/0x120 [ 680.073613][ C0] ? rep_movs_alternative+0x33/0x90 [ 680.073654][ C0] ? lock_acquire+0x2c2/0x420 [ 680.073685][ C0] hw_breakpoint_exceptions_notify+0x23e/0x670 [ 680.073724][ C0] notifier_call_chain+0x18f/0x380 [ 680.073756][ C0] ? atomic_notifier_call_chain+0x26/0x180 [ 680.073786][ C0] atomic_notifier_call_chain+0xda/0x180 [ 680.073814][ C0] notify_die+0x145/0x1a0 [ 680.073843][ C0] ? srcu_init_notifier_head+0x90/0x90 [ 680.073877][ C0] ? rcu_is_watching+0x15/0xb0 [ 680.073907][ C0] notify_debug+0x2e/0x50 [ 680.073936][ C0] exc_debug+0xde/0x140 [ 680.073962][ C0] asm_exc_debug+0x1e/0x40 [ 680.073983][ C0] RIP: 0010:rep_movs_alternative+0x33/0x90 [ 680.074007][ C0] Code: 40 83 f9 08 73 21 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb [ 680.074023][ C0] RSP: 0018:ffffc9000458fd50 EFLAGS: 00040216 [ 680.074040][ C0] RAX: ffffffff00000000 RBX: 0000000000000020 RCX: 0000000000000020 [ 680.074054][ C0] RDX: 0000000000000001 RSI: 0000200000000300 RDI: ffffc9000458fdc0 [ 680.074067][ C0] RBP: ffffc9000458fee8 R08: ffffc9000458fddf R09: 1ffff920008b1fbb [ 680.074082][ C0] R10: dffffc0000000000 R11: fffff520008b1fbc R12: 0000200000000320 [ 680.074096][ C0] R13: 0000000000000020 R14: ffffc9000458fdc0 R15: 0000200000000300 [ 680.074124][ C0] [ 680.074130][ C0] [ 680.074135][ C0] _copy_from_user+0x8b/0xe0 [ 680.074161][ C0] __sys_bpf+0x23e/0x890 [ 680.074185][ C0] ? bpf_link_show_fdinfo+0x390/0x390 [ 680.074221][ C0] ? lock_chain_count+0x20/0x20 [ 680.074252][ C0] __x64_sys_bpf+0x7c/0x90 [ 680.074274][ C0] do_syscall_64+0x55/0xb0 [ 680.074295][ C0] ? clear_bhb_loop+0x40/0x90 [ 680.074316][ C0] ? clear_bhb_loop+0x40/0x90 [ 680.074359][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 680.074381][ C0] RIP: 0033:0x7fea9a19e0d9 [ 680.074396][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 680.074412][ C0] RSP: 002b:00007fea9b100028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 680.074431][ C0] RAX: ffffffffffffffda RBX: 00007fea9a426090 RCX: 00007fea9a19e0d9 [ 680.074445][ C0] RDX: 0000000000000020 RSI: 0000200000000300 RDI: 000000000000001c [ 680.074457][ C0] RBP: 00007fea9a235024 R08: 0000000000000000 R09: 0000000000000000 [ 680.074474][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 680.074485][ C0] R13: 00007fea9a426128 R14: 00007fea9a426090 R15: 00007ffd4faada48 [ 680.074513][ C0] [ 686.008626][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.015034][ T1296] ieee802154 phy1 wpan1: encryption failed: -22