last executing test programs: 5.45168088s ago: executing program 2 (id=2592): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x101002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x304) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000800000000000000000000001801000000646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x37e2f4aba9289b81, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$ENABLE_STATS(0x20, &(0x7f0000000280), 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') 4.673533589s ago: executing program 2 (id=2599): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x13, 0x2000000000000216, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x72, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f0000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x40, 0x0, 0xa, 0x0, 0x0, 0xe1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0xa100, 0xc8, 0x3, 0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001700)={0x2, 0x80, 0x66, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffdfffd}, [@call={0x85, 0x0, 0x0, 0x27}, @printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x70}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e09f547ed3f02dc1fd3d6487775b", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xfe, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x100, 0x7}, 0x481a, 0x0, 0x0, 0x2, 0x0, 0x0, 0xf792, 0x0, 0x5, 0x0, 0x8eea}, 0x0, 0x0, r1, 0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) close(r3) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x5452, &(0x7f0000000500)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|C\b\x00\x00\x00\x00\x00\x00\x00\xe3\xd8\x19k\xdd\x85\xaac{\x8c\x8ffp`-\xcd\xf6jh\xbf\x9c\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\\\x00|pT\x15\xbc\f*d\x8b\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca^\xf9\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\xc7\r\x00\x00\xd3\x01\xb2\xc7\xf8G\x069\x90,\xda\xf6\xc5\xcd\xec\xa3B\xc3\"4\xab\xf4\xa7\x83\xaa\x8d\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\x93\xc7\x7f\xec\xb2\xc5E\x00\xdd\xf2e\xa8\xf1<\xb2\xc82\xbf=o\x00`\xc1A\'\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x92\x80\xe3Y\x97\xc2\x80\xbe\x8e\xc8\xb0\xc6\x1c\xaez\xb5dm\xe3R\xead\x1e\xc1d\xa7\x12\xc2\xd2\xfd{\xa0\xc4\x0e*k\xda\x9eH\xb9\xe5\x19\xff8\x9b\x10h\xb0\x97\xc1\x13') r4 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r4, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) sendmsg$inet(r4, &(0x7f0000000500)={&(0x7f0000000040)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="cd", 0x1}], 0x1}, 0x2400c885) write$cgroup_type(r3, &(0x7f0000000080), 0x11ffffce1) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000080)=r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r6, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r5, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r8 = openat$cgroup(r7, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_int(r8, &(0x7f0000000040)='io.latency\x00', 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63f580fc02082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc02082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000a460d744bec0d28400000000850000002f0000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) write$cgroup_subtree(r7, &(0x7f00000004c0)=ANY=[], 0xfdef) 4.598515751s ago: executing program 4 (id=2601): socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000e80)={&(0x7f0000000340)=@nfc_llcp={0x27, 0x0, 0x1, 0x7, 0x8, 0x7f, "a0d1c45c959597649055384763ec019bd7ada7daaf315c89708b50d957cd7264c517244d8a49de47bc3fc9a237db2200bcdecb7b922e42c9bf0ce43641d4af", 0x39}, 0x80, 0x0, 0x0, &(0x7f0000000c80)=[{0x100, 0x1, 0xb5, "338c044f6423f1d85c83ee9d1b921f1c1d310499fa3892251296b8bb6578a908a1098071024bcbb37b6a5ba284ecf699cec5ddc37d65d1cef4a4bd9ad9cc263cb710224aa67e1da341d9f077d3ce176298fadf8eeb99f8f926e9de60a9b96d7bf58a0263119c0f4e8654aead4a34fac7b8d01b8bafe6bef1536e984e816d46de354865ecfd870cde4c82b4c839a9e9a365bf6127a77eb48257b3a3d5a072b407d26275ec94ab827ea52ee80badcbb064449ca55dc2525abff18724c87288ed8e98cfee9dafeaf1c3fec56c60c8847e6233f920b81bc4035552e52bd894a89071eb985d9fe493370365"}, {0xd0, 0x103, 0x3, "8cb137729e5e5d48c0dc7c8c9717b48686f7c3990ff429d961398956d3bee21e92022e878ed95df3c9cf5f1570d3964e71f13c96c3d99997961cab969481188d5b0f0cf89b771365f2ee8139a088622bc018ed7b11a49ffe43c4631801cb42bccd4c9f001cc32f00b83a6d5e463e42111bb3e3e45495198e8242ae0f5469ecf33704c49f9c67d8d6862ab4b8d3fd8ecb61cc11c5d71ba2a8b367916b65f25778ca783836a7d1ea168e6a764069efe5fefa1c14334a8315cb8f86ad9487"}], 0x1d0}, 0x4040181) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x19, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_devices(r3, 0x0, 0x9) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x8004) sendmsg$inet(r6, &(0x7f0000002d40)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r5, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001440)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffd}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x2000002, 0xe, 0x0, &(0x7f0000000740)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.314257881s ago: executing program 3 (id=2607): socket$kcm(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0xb68, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000) socket$kcm(0xa, 0x2, 0x3a) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r1, 0x0, 0x0, 0x0) bpf$LINK_DETACH(0x22, 0x0, 0x0) r2 = socket$kcm(0x2c, 0x3, 0x0) close(r2) r3 = socket$kcm(0x2, 0x6, 0x0) sendmsg$inet(r3, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 3.158089235s ago: executing program 0 (id=2609): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x101002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x304) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x37e2f4aba9289b81, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$ENABLE_STATS(0x20, &(0x7f0000000280), 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') 3.015868609s ago: executing program 4 (id=2610): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x208, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$kcm(0x2, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg(r1, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f00000002c0)=""/34, 0x56}], 0x1}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x0, 0x0, 0x3, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000080), &(0x7f0000000200)=r4}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000480)={r4}, 0xc) close(0xffffffffffffffff) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xc, 0x7}, 0x8601, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000001000)=ANY=[@ANYBLOB="1000000004000000040000000700000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000100"], 0x48) r5 = socket$kcm(0xa, 0x3, 0x106) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r4, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8e, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x16, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x541b, &(0x7f0000000180)) 2.826627953s ago: executing program 2 (id=2611): r0 = socket$kcm(0x2, 0x922000000001, 0x106) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02002200356bd25a806f8c6394f96b24fc60050011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0xc, &(0x7f00000002c0)=r1, 0x4) 2.825996863s ago: executing program 3 (id=2612): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x28209, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200, 0xffff, 0x0, 0x0, 0x0, 0x73ae}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffb, 0x81}, 0x100c, 0x0, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa35"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.720340455s ago: executing program 0 (id=2613): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001580)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018200000000000006c0000006c0000000200000000000000000000070000000000000000070000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d700000000000000000000000000000000a1d8faf5bd23dd800008"], 0x0, 0x86}, 0x28) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="dc32f7f28ff7af7bcc38ca7e477afe6da96803c8e5efc84a4f29df8100a6328d5a4fe07c32cbc210f5bccb94e85ccad5bd6c5a5874ad6293923075c84fe0aa8054c3a6169bdbd971585eb4b7f2082967b5264fac893b57c552df184528be21517bb181fa03cae9da0df281a1e40cb416da3b526966b378f8bc1c9f86e0c2f98f23f3b0188447276e582667f76094c27b68bf374af2ed60fdad4a453ccb251eb602a2868963ed6065fdc8e610a91c125c72980ce2bfcc7a840d5230cff469787b9b5edf6f3775c049334fdda225fb6b9eee252708c027c769b4f7428b0a07fefd77fa55ba0854004f9690c19d9b07bf52d9fd9ad557b8d5"], 0x31) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x120a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2b8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="07000000040000001800000003"], 0x50) socket$kcm(0xa, 0x6, 0x0) socket$kcm(0x21, 0x2, 0x2) socket$kcm(0x2, 0x3, 0x2) socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa0}, 0x10022) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r7 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, &(0x7f00000002c0)=r6, 0x161) sendmsg$inet(r7, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x0) 2.444916962s ago: executing program 3 (id=2614): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000001c80)={0x0, 0x0, 0x0}, 0x2000) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0xe}, 0x80, &(0x7f0000002540)=[{&(0x7f0000000100)="6203a105590500000000002f1eafbcf704e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca", 0xd4}], 0x1}, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0xfffffffc, 0x0, 0xb6eb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="61123000000000006113100000000000bf20000000000000160002000ee600f03d030100000000009500000000000000bc26000000000000bf67000000000000070200000fff07276702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x28, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xe328}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @generic={0x1, 0x9, 0x4, 0xb5, 0x7f}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xd, 0x4, 0x4, 0x3, 0x0, r4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371600000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 2.225003747s ago: executing program 0 (id=2616): socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x1d, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000500)="7c5331fc9356b5b1000600008100", 0x0, 0xd5a2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x31) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r3, &(0x7f00000010c0)={&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000480)='\\', 0x1}], 0x1}, 0x4000040) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x90) r6 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x29, 0x1a, &(0x7f0000000140), 0x4) sendmsg$inet(r6, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xfb}}, 0x10, 0x0}, 0x83ee) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1007f}, 0x94) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040)=r8, 0x4) socket$kcm(0x10, 0x2, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000003400)=@generic={&(0x7f00000033c0)='./file0\x00', 0x0, 0x18}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000003500)={0x5, 0x16, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000009000000000000000010000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000000033070000600000d7812000fcffffff851000000500000018140000", @ANYRES32=r8, @ANYBLOB="0000000000000000852000000200000004010d9703000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f00000007c0)='GPL\x00', 0x8, 0x1000, &(0x7f0000002340)=""/4096, 0x20980, 0x0, '\x00', 0x0, @fallback=0x2, r8, 0x8, &(0x7f0000003340)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000003380)={0x3, 0x9, 0x81, 0x64}, 0x10, 0x0, r7, 0x6, &(0x7f0000003440)=[r8, r9], &(0x7f0000003480)=[{0x0, 0x3, 0x5, 0xc}, {0x5, 0x5, 0x10, 0x9}, {0x4, 0x4, 0x6, 0xf2fbbf15e5439d8c}, {0x2, 0x4, 0xc, 0x4}, {0x0, 0x3, 0x10, 0x3}, {0x0, 0x2, 0x0, 0x7}], 0x10, 0x9}, 0x94) close(0xffffffffffffffff) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x34) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="1c0000001a006bb12214b594e9a36f9e5c4eb100103fe3dc6e080000", 0x1c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000011008b88040f80ec59acbc0413a1f8480f0000005e2900421803001825000a001400000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x60}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.224570937s ago: executing program 1 (id=2617): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x5, 0xff, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x3f00}, 0x50) 2.154600549s ago: executing program 2 (id=2618): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) r1 = socket$kcm(0x29, 0x0, 0x0) recvmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x33, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000400)={0x0, 0xfffffebf, &(0x7f00000001c0)=[{&(0x7f0000001640)=""/4081, 0x1000}, {&(0x7f0000000080)=""/51, 0x25}], 0x2}, 0x0) 1.951291113s ago: executing program 4 (id=2619): perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1c100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x105880, 0x0, 0x0, 0x7, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0xa, 0x1, 0x106) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5d21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x2c0000000}, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffe}, 0x0, 0x8, 0xffffffffffffffff, 0x8) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x1, 0x8a, 0x0, 0x0, 0x0, 0x0, 0x68020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x204, 0x2000000000, 0x3, 0x3, 0x9, 0x100002, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x7, r0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x23, &(0x7f0000000040), 0xcf) sendmsg$inet(r2, &(0x7f00000004c0)={&(0x7f00000001c0)={0x2, 0x4e23, @remote}, 0x10, 0x0}, 0x80) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000010000180100002020702500000000002020207b1af8ff00000000bfa10000000000000701000078ffffffb702000008000000b70300000008000085000000a0000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa10000", @ANYRES32], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000ac0)="4c000000150097f87059ae08060c040002ff0f020000000000001a350182fa73a69d35a21429b17cd02941601d60ffc0cca84708f7abca1b4e7d06a60300000072f750375ed08a5604000000", 0x4c}], 0x1}, 0x0) socketpair(0x1, 0x1, 0x1, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="0600"}) recvmsg$unix(r4, &(0x7f0000002900)={&(0x7f0000000000), 0x6e, 0x0, 0x0, &(0x7f0000002780)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x128}, 0x12000) r5 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x467, 0x1, @perf_config_ext={0xfff, 0x280}, 0x14, 0x3, 0x0, 0x7, 0xffffffff, 0x200, 0x1}, 0x0, 0x10, r1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x51, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703360000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x541b, &(0x7f0000000080)={'batadv_slave_1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}}) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000001340)=@hci={0x1f, 0x300, 0x37}, 0x80, &(0x7f00000002c0)=[{0x0}], 0x1}, 0x4000080) 1.949043233s ago: executing program 1 (id=2629): bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e00000004000000080000000200000000000000", @ANYRES32, @ANYBLOB="000000003100000040bede1800000000cb9c0c64bd34880300000000000000ea1a", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e00000004000000080000000200000000000000", @ANYRES32, @ANYBLOB="000000003100000040bede1800000000cb9c0c64bd34880300000000000000ea1a", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="06000000040000000400000001"], 0x50) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004460bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac09c51c268811000096859fc57a00000000000000002571cd53b9851b30", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000) recvmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000300)=""/206, 0xce}, {&(0x7f0000000a80)=""/4088, 0xff8}, {&(0x7f0000000500)=""/116, 0x74}, {&(0x7f00000006c0)=""/227, 0xe3}, {&(0x7f0000002980)=""/4090, 0xffa}, {&(0x7f0000000200)=""/24, 0x18}], 0x6}, 0x12000) (async) recvmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000300)=""/206, 0xce}, {&(0x7f0000000a80)=""/4088, 0xff8}, {&(0x7f0000000500)=""/116, 0x74}, {&(0x7f00000006c0)=""/227, 0xe3}, {&(0x7f0000002980)=""/4090, 0xffa}, {&(0x7f0000000200)=""/24, 0x18}], 0x6}, 0x12000) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2a}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x9, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRESOCT=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x279, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) recvmsg$kcm(r2, &(0x7f0000000900)={0x0, 0xffc3, 0x0}, 0x80) (async) recvmsg$kcm(r2, &(0x7f0000000900)={0x0, 0xffc3, 0x0}, 0x80) r5 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000000800000000000003000000850000002c00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000000800000000000003000000850000002c00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe8, 0xe8, 0x5, [@struct={0x9, 0x9, 0x0, 0x4, 0x1, 0xfffffffd, [{0xf, 0x3}, {0x8, 0x1, 0x5}, {0x8, 0x4, 0x4}, {0x6, 0x1, 0x1}, {0xd, 0x0, 0x1}, {0x6, 0x1, 0x1}, {0x4, 0x0, 0x100}, {0x7, 0x4, 0xfffff8e0}, {0xb, 0x3, 0xdd3}]}, @int={0x8, 0x0, 0x0, 0x1, 0x0, 0x70, 0x0, 0x1, 0x1}, @fwd={0xa}, @struct={0x8, 0x6, 0x0, 0x4, 0x0, 0x10000, [{0xb, 0x5, 0x7fffffff}, {0x7, 0x2, 0x5}, {0xc, 0x3, 0xf8}, {0x10, 0x0, 0x70}, {0x7, 0x4, 0x7}, {0xd, 0x5, 0x200}]}]}, {0x0, [0x61, 0x2e, 0x0]}}, &(0x7f00000003c0)=""/174, 0x105, 0xae, 0x0, 0x6}, 0x28) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r7) (async) close(r7) r8 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000100)={&(0x7f0000000000)=@ax25={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x7}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}, 0x80, 0x0}, 0x2004b761) (async) sendmsg$kcm(r8, &(0x7f0000000100)={&(0x7f0000000000)=@ax25={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x7}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}, 0x80, 0x0}, 0x2004b761) ioctl$SIOCSIFHWADDR(r7, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @link_local}) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) 1.746740638s ago: executing program 2 (id=2620): socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000e80)={&(0x7f0000000340)=@nfc_llcp={0x27, 0x0, 0x1, 0x7, 0x8, 0x7f, "a0d1c45c959597649055384763ec019bd7ada7daaf315c89708b50d957cd7264c517244d8a49de47bc3fc9a237db2200bcdecb7b922e42c9bf0ce43641d4af", 0x39}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000c80)=[{0x100, 0x1, 0xb5, "338c044f6423f1d85c83ee9d1b921f1c1d310499fa3892251296b8bb6578a908a1098071024bcbb37b6a5ba284ecf699cec5ddc37d65d1cef4a4bd9ad9cc263cb710224aa67e1da341d9f077d3ce176298fadf8eeb99f8f926e9de60a9b96d7bf58a0263119c0f4e8654aead4a34fac7b8d01b8bafe6bef1536e984e816d46de354865ecfd870cde4c82b4c839a9e9a365bf6127a77eb48257b3a3d5a072b407d26275ec94ab827ea52ee80badcbb064449ca55dc2525abff18724c87288ed8e98cfee9dafeaf1c3fec56c60c8847e6233f920b81bc4035552e52bd894a89071eb985d9fe493370365"}, {0xd0, 0x103, 0x3, "8cb137729e5e5d48c0dc7c8c9717b48686f7c3990ff429d961398956d3bee21e92022e878ed95df3c9cf5f1570d3964e71f13c96c3d99997961cab969481188d5b0f0cf89b771365f2ee8139a088622bc018ed7b11a49ffe43c4631801cb42bccd4c9f001cc32f00b83a6d5e463e42111bb3e3e45495198e8242ae0f5469ecf33704c49f9c67d8d6862ab4b8d3fd8ecb61cc11c5d71ba2a8b367916b65f25778ca783836a7d1ea168e6a764069efe5fefa1c14334a8315cb8f86ad9487"}], 0x1d0}, 0x4040181) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x19, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_devices(r3, 0x0, 0x9) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x8004) sendmsg$inet(r6, &(0x7f0000002d40)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r5, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001440)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffd}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x2000002, 0xe, 0x0, &(0x7f0000000740)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.507541654s ago: executing program 3 (id=2621): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000200142603600e1208000f", 0x2b}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="563f00001a00599c6d0c000091d028ef80a3ce2bda0b9abf195b9fa02897225b2a6a2c7a8b8aed7e9f8674c9146a06e6cde7da7d97"], 0xfe33) 970.452437ms ago: executing program 1 (id=2622): recvmsg$unix(0xffffffffffffffff, &(0x7f0000001a00)={0x0, 0x0, 0x0}, 0x2) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r0, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x30}, 0xc981) recvmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x100) close(0xffffffffffffffff) 858.695829ms ago: executing program 1 (id=2623): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x101002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x304) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x37e2f4aba9289b81, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$ENABLE_STATS(0x20, &(0x7f0000000280), 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') 780.417971ms ago: executing program 4 (id=2624): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000c00)="c1c56126a5bcb63304839c395ae195b2db635ced4b6290d66ea77831409a96dea0bbd76e55790bf3763c1a0f202b4b2eb605ad11e87014731a00ec7f3c66a28d78727d01d73396d22aa6888d606577c159e732632a1bcf3fb0c97f314ba49d23acc9a22e0707a390644f24d93569d562591c1d2c8a422bfadc222a08d390848e3b05a531a864cb6e4b54f76d593510cac0399d8fdd3e1cadc03950ac257e7fb47fb388c3f1aa92c5aa27479d3fca786ecedc8592a8de1ded9e116f904c035520e5b63a00e1b4b87d464d53fd85d0d9c70ee41e532b5e0c9a49dfd62a74e167bf009da9662f00b0", 0xe7}], 0x1, 0x0, 0x20}, 0x50) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffedc, &(0x7f0000000080)=[{&(0x7f00000000c0)="c018030040000b12d25a80648c2594f90224fc60100c074002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080006000000e8fe55a1180015000600142603600e120800110000000401a80016000500014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 700.158203ms ago: executing program 0 (id=2625): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000b80)={r0, 0x58, &(0x7f0000000b00)}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r2, 0x26}, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[], 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8b0b, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00 \x00'}) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = perf_event_open$cgroup(&(0x7f0000000100)={0x4, 0x80, 0xf, 0x2, 0x75, 0x9, 0x0, 0x100, 0x50001, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xe80, 0x0, @perf_config_ext={0x8000, 0x7}, 0x1, 0x1, 0x4ef, 0xcb8a40a0f04a13bf, 0x2, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, r1, 0x9, r4, 0x4) ioctl$PERF_EVENT_IOC_RESET(r6, 0x2403, 0x101) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x400c4) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r7 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r7, 0x29, 0x42, 0x0, 0x0) 699.613543ms ago: executing program 3 (id=2626): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x2000009, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext, 0x100080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000a116000b63d25a80648c2594f92624fc60", 0x14}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, 0x0, 0xfe33) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = getpid() perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x1008d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x5}, 0x100e64, 0xc78}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair(0x2, 0x6, 0x31, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8946, 0x0) close(0xffffffffffffffff) 474.571329ms ago: executing program 0 (id=2627): perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x5, 0x9, 0x27, 0x7, 0x0, 0x7ff, 0x102, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0xc250, 0x0, @perf_bp={&(0x7f0000000040), 0x8}, 0x118, 0x101, 0x2, 0x4, 0x4, 0xfffff001, 0x1a1e, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1f, 0x11, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000feffffff850000007b000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9e, 0x9e, 0x5, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x4, 0x98}}, @datasec={0xe, 0x8, 0x0, 0xf, 0x2, [{0x4, 0x6, 0xe6}, {0x4, 0x8, 0xc343}, {0x4, 0x3}, {0x3, 0x7, 0x3}, {0x3, 0x286, 0x9}, {0x1, 0x3, 0x3}, {0x1, 0x1, 0x9}, {0x2, 0x0, 0x3}], '&2'}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x5}}]}, {0x0, [0x5f, 0x3e, 0x30]}}, &(0x7f00000001c0)=""/48, 0xbd, 0x30, 0x1, 0x800}, 0x28) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1, r0}, 0xc) 441.52661ms ago: executing program 1 (id=2628): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x3, 0x8, &(0x7f0000000bc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r0}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001400)={{r0}, &(0x7f0000001380), &(0x7f00000013c0)=r2}, 0x20) 416.16869ms ago: executing program 3 (id=2630): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c25b3aa450ffc60", 0x14}], 0x1}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1f, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000b7020000000000008500000086000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b00000001700"/96], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x101002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x304) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000080)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x6, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x2e, &(0x7f0000000000)=r5, 0x4) recvmsg(r5, &(0x7f0000000f40)={0x0, 0x0, 0x0}, 0x40002002) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000100), 0x1001) ioctl$SIOCSIFHWADDR(r6, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc, 0x8}}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x30, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000008c0)=@o_path={&(0x7f00000001c0)='./file0\x00', 0xffffffffffffffff, 0x4000, r5}, 0x18) 354.629412ms ago: executing program 4 (id=2631): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x100010, 0x0, 0x8, 0x0, 0x4000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x456c4997c6f4bb71, 0x0) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xa8640, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r2, 0x4004743b, &(0x7f0000001200)) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 286.143823ms ago: executing program 0 (id=2632): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000001c80)={0x0, 0x0, 0x0}, 0x2000) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0xe}, 0x80, &(0x7f0000002540)=[{&(0x7f0000000100)="6203a105590500000000002f1eafbcf704e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca", 0xd4}], 0x1}, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0xfffffffc, 0x0, 0xb6eb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="61123000000000006113100000000000bf20000000000000160002000ee600f03d030100000000009500000000000000bc26000000000000bf67000000000000070200000fff07276702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x28, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xe328}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @generic={0x1, 0x9, 0x4, 0xb5, 0x7f}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xd, 0x4, 0x4, 0x3, 0x0, r4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371600000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 246.668394ms ago: executing program 1 (id=2633): socket$kcm(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0xb68, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703100000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f6", 0x5a}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000) socket$kcm(0xa, 0x2, 0x3a) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r1, 0x0, 0x0, 0x0) bpf$LINK_DETACH(0x22, 0x0, 0x0) r2 = socket$kcm(0x2c, 0x3, 0x0) close(r2) r3 = socket$kcm(0x2, 0x6, 0x0) sendmsg$inet(r3, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r4}, 0xc) 143.192797ms ago: executing program 2 (id=2634): socket$kcm(0x21, 0x2, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000100000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="19"], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x106080, 0x0, 0x4000000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="060000"], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f00000003c0)=ANY=[], 0xfe33) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x400000000000000}, 0x100, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000540)}, 0x10100) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000002a40)='blkio.bfq.io_merged\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000340)=ANY=[@ANYBLOB="01000700000000000000000000000000bbbbbbbbbbbbbbbbbbbbbbbbaaaaaaaaaa1aaaaaaaaaaa2100000000000010899b5456c9fdeac54f78fd0b2b5829c6343b64dbe21c58e81be41a8f331e9abb90ffa7cf38ed8424ad0c07e7b8467ce2fcb361fee167f697cbad075caaa4b8391a63f74dbb4c46b784262b1535c0fafd74c42dd62786d1d97a6dd4cc3163a8ebe6212292d7b48913e92d6840c910610002454be59160e656028d0ec49239f760d1c928985f56a7766563471074460248a62133aeef85de0ecec46b5703f253aadf12a9ef56d42a19f45a2cd4ae3bfdf986868c5932796b838a97cee9100c153ce7"]) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f3, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000c80)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000300)='\xb8\x9f\xd1)OV\x8d$A\xd3\x1e:\x8b\x885\xcf\x82\x0f\x94)[oB\xc8\xf6k\x9d\x83{\xbe}\xe6\xec\xf1\xb6O\xbf>\xd6@\xee9\xb0\xc0\xe6\xbaT\x17\x95\xf7M\xcc\xb7\x02\x1dV\xd8-=\x8d\xb7\xd77\xe4Lv\xafO*\xc0\x87\x00\x04\x00t\xce\x98\xe6\xef\xbc\xeehh9\x0fSM\xfc\x93K\xd0\xfe.\xfd[\a\x9e\xe3') perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x80, 0xcd, 0x7, 0x0, 0xb, 0x0, 0x7, 0xbfdd8f1a0c27d45a, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x7, 0x130}, 0x410, 0x9, 0xfffffff8, 0x3, 0x1, 0x5, 0x2, 0x0, 0x2, 0x0, 0x7fffffff}, r2, 0x5, r2, 0xa) 0s ago: executing program 4 (id=2635): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./cgroup.cpu/cpuset.cpus\x00'}, 0x18) perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x100, 0x0, 0x0, 0x5, 0x2}, 0xffffffffffffffff, 0x0, r0, 0x1) kernel console output (not intermixed with test programs): 7.603101][ T8322] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 307.612638][ T8322] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 307.622124][ T8322] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 307.631615][ T8322] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 307.641157][ T8322] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 307.650685][ T8322] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 307.660228][ T8322] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 307.669786][ T8322] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 308.388918][ T8330] netlink: 'syz.1.1372': attribute type 10 has an invalid length. [ 308.440401][ T8329] delete_channel: no stack [ 308.538923][ T8334] netlink: 'syz.3.1363': attribute type 27 has an invalid length. [ 308.852847][ T8341] netlink: 'syz.0.1367': attribute type 21 has an invalid length. [ 308.874507][ T8341] netlink: 'syz.0.1367': attribute type 6 has an invalid length. [ 308.882363][ T8341] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1367'. [ 308.920914][ T8343] netlink: 'syz.1.1365': attribute type 10 has an invalid length. [ 308.940887][ T8343] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1365'. [ 308.977385][ T8343] device team0 entered promiscuous mode [ 308.995919][ T8343] device team_slave_0 entered promiscuous mode [ 309.059522][ T8343] device team_slave_1 entered promiscuous mode [ 309.077717][ T8343] device bridge0 entered promiscuous mode [ 309.085948][ T8343] device geneve1 entered promiscuous mode [ 309.098080][ T8343] bridge0: port 3(team0) entered blocking state [ 309.105059][ T8343] bridge0: port 3(team0) entered disabled state [ 309.538826][ T8354] netlink: 'syz.4.1370': attribute type 33 has an invalid length. [ 309.583599][ T8354] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1370'. [ 310.177016][ T8376] device bond_slave_1 entered promiscuous mode [ 310.216680][ T1195] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 310.607826][ T8387] validate_nla: 2 callbacks suppressed [ 310.607847][ T8387] netlink: 'syz.0.1381': attribute type 21 has an invalid length. [ 310.643265][ T8387] netlink: 'syz.0.1381': attribute type 6 has an invalid length. [ 310.655662][ T8387] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1381'. [ 310.969569][ T8396] netlink: 'syz.3.1385': attribute type 10 has an invalid length. [ 310.987808][ T8396] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1385'. [ 311.039492][ T8396] 8021q: adding VLAN 0 to HW filter on device team0 [ 311.054513][ T8396] bridge0: port 2(team0) entered blocking state [ 311.074714][ T8396] bridge0: port 2(team0) entered disabled state [ 311.226634][ T8398] netlink: 60519 bytes leftover after parsing attributes in process `syz.0.1384'. [ 311.388826][ T8407] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1387'. [ 311.711840][ T8409] netlink: 'syz.1.1389': attribute type 33 has an invalid length. [ 311.776097][ T8409] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1389'. [ 312.039114][ T8425] netlink: 'syz.4.1394': attribute type 21 has an invalid length. [ 312.083806][ T8425] netlink: 'syz.4.1394': attribute type 6 has an invalid length. [ 312.113355][ T8425] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1394'. [ 312.205520][ T8427] netlink: 'syz.1.1395': attribute type 10 has an invalid length. [ 312.569415][ T8437] netlink: 'syz.4.1399': attribute type 10 has an invalid length. [ 312.621162][ T8437] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1399'. [ 312.677357][ T8437] bridge0: port 3(team0) entered blocking state [ 312.693932][ T8437] bridge0: port 3(team0) entered disabled state [ 312.731977][ T8437] net_ratelimit: 1916 callbacks suppressed [ 312.731998][ T8437] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 312.810316][ T8441] netlink: 'syz.2.1401': attribute type 10 has an invalid length. [ 312.820797][ T8441] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1401'. [ 313.472025][ T8460] device syzkaller0 entered promiscuous mode [ 313.483187][ T8464] netlink: 'syz.1.1410': attribute type 21 has an invalid length. [ 313.491702][ T8464] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1410'. [ 313.576479][ T8462] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1409'. [ 316.323618][ T8480] validate_nla: 2 callbacks suppressed [ 316.323638][ T8480] netlink: 'syz.0.1414': attribute type 10 has an invalid length. [ 316.342004][ T8480] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1414'. [ 316.351896][ T8480] bridge0: port 3(team0) entered blocking state [ 316.364041][ T8480] bridge0: port 3(team0) entered disabled state [ 316.401855][ T8480] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 316.437196][ T8493] netlink: 'syz.1.1419': attribute type 10 has an invalid length. [ 316.453769][ T8493] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1419'. [ 316.462961][ T8493] bridge0: port 3(team0) entered blocking state [ 316.493833][ T8493] bridge0: port 3(team0) entered disabled state [ 316.539490][ T8493] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 316.661615][ T8495] device syzkaller0 entered promiscuous mode [ 317.204329][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.210731][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.000455][ T8512] netlink: 'syz.4.1426': attribute type 21 has an invalid length. [ 320.008905][ T8512] netlink: 'syz.4.1426': attribute type 6 has an invalid length. [ 320.016792][ T8512] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1426'. [ 320.033916][ T8533] netlink: 'syz.2.1432': attribute type 10 has an invalid length. [ 320.041887][ T8533] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1432'. [ 320.056038][ T8540] netlink: 'syz.1.1434': attribute type 10 has an invalid length. [ 320.077969][ T8540] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1434'. [ 320.095864][ T8540] bridge0: port 3(team0) entered blocking state [ 320.133849][ T8540] bridge0: port 3(team0) entered disabled state [ 320.145005][ T8540] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 321.300349][ T8571] netlink: 'syz.4.1445': attribute type 3 has an invalid length. [ 321.352921][ T8571] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1445'. [ 321.567946][ T8578] netlink: 'syz.3.1447': attribute type 39 has an invalid length. [ 321.661801][ T8582] netlink: 'syz.0.1448': attribute type 10 has an invalid length. [ 321.673366][ T8582] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1448'. [ 321.692096][ T8582] bridge0: port 3(team0) entered blocking state [ 321.699674][ T8582] bridge0: port 3(team0) entered disabled state [ 321.797585][ T8582] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 321.827054][ T8585] netlink: 'syz.1.1449': attribute type 21 has an invalid length. [ 321.852554][ T8585] netlink: 'syz.1.1449': attribute type 6 has an invalid length. [ 321.914666][ T8585] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1449'. [ 322.334847][ T8599] netlink: 'syz.2.1454': attribute type 10 has an invalid length. [ 322.765432][ T8607] netlink: 1010 bytes leftover after parsing attributes in process `syz.4.1457'. [ 322.839791][ T8608] netlink: 'syz.4.1457': attribute type 10 has an invalid length. [ 322.906476][ T8610] netlink: 'syz.2.1458': attribute type 6 has an invalid length. [ 322.930081][ T8610] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1458'. [ 323.239775][ T8621] FAULT_INJECTION: forcing a failure. [ 323.239775][ T8621] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 323.275693][ T8623] netlink: 'syz.0.1461': attribute type 10 has an invalid length. [ 323.288862][ T8621] CPU: 1 PID: 8621 Comm: syz.3.1463 Not tainted syzkaller #0 [ 323.296339][ T8621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 323.306452][ T8621] Call Trace: [ 323.309821][ T8621] [ 323.312803][ T8621] dump_stack_lvl+0x188/0x24e [ 323.317563][ T8621] ? show_regs_print_info+0x12/0x12 [ 323.322836][ T8621] ? load_image+0x410/0x410 [ 323.327410][ T8621] ? __lock_acquire+0x7c40/0x7c40 [ 323.332513][ T8621] ? snprintf+0xe5/0x140 [ 323.336827][ T8621] should_fail_ex+0x390/0x4c0 [ 323.341588][ T8621] _copy_to_user+0x2c/0x130 [ 323.346153][ T8621] simple_read_from_buffer+0xe3/0x150 [ 323.351607][ T8621] proc_fail_nth_read+0x1a6/0x220 [ 323.356806][ T8621] ? proc_fault_inject_write+0x310/0x310 [ 323.362573][ T8621] ? fsnotify_perm+0x248/0x550 [ 323.367417][ T8621] ? proc_fault_inject_write+0x310/0x310 [ 323.373123][ T8621] vfs_read+0x2db/0x960 [ 323.377382][ T8621] ? kernel_read+0x1e0/0x1e0 [ 323.382058][ T8621] ? __fget_files+0x28/0x460 [ 323.386756][ T8621] ? __fget_files+0x3fc/0x460 [ 323.391547][ T8621] ? __fdget_pos+0x2ae/0x360 [ 323.396223][ T8621] ? ksys_read+0x70/0x260 [ 323.400724][ T8621] ksys_read+0x14d/0x260 [ 323.405039][ T8621] ? vfs_write+0x9a0/0x9a0 [ 323.409539][ T8621] ? lockdep_hardirqs_on+0x94/0x140 [ 323.414805][ T8621] do_syscall_64+0x4c/0xa0 [ 323.419266][ T8621] ? clear_bhb_loop+0x60/0xb0 [ 323.423989][ T8621] ? clear_bhb_loop+0x60/0xb0 [ 323.428705][ T8621] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 323.434814][ T8621] RIP: 0033:0x7f8a5255e84e [ 323.439266][ T8621] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 323.458926][ T8621] RSP: 002b:00007f8a53421fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 323.467376][ T8621] RAX: ffffffffffffffda RBX: 00007f8a534226c0 RCX: 00007f8a5255e84e [ 323.475407][ T8621] RDX: 000000000000000f RSI: 00007f8a534220a0 RDI: 0000000000000007 [ 323.483410][ T8621] RBP: 00007f8a53422090 R08: 0000000000000000 R09: 0000000000000000 [ 323.491414][ T8621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 323.499438][ T8621] R13: 00007f8a52826038 R14: 00007f8a52825fa0 R15: 00007fff047fe9a8 [ 323.507455][ T8621] [ 323.589172][ T8623] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1461'. [ 323.633904][ T8623] bridge0: port 3(team0) entered blocking state [ 323.655953][ T8623] bridge0: port 3(team0) entered disabled state [ 323.766617][ T8623] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 323.796851][ T8631] netlink: 'syz.1.1465': attribute type 39 has an invalid length. [ 324.141062][ T8646] netlink: 'syz.0.1469': attribute type 10 has an invalid length. [ 325.227305][ T8654] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.1473'. [ 325.340733][ T8662] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.1475'. [ 325.375057][ T8662] netlink: zone id is out of range [ 325.622728][ T8662] netlink: del zone limit has 4 unknown bytes [ 326.361684][ T8682] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1482'. [ 326.431615][ T8682] bridge0: port 3(team0) entered blocking state [ 326.497706][ T8682] bridge0: port 3(team0) entered disabled state [ 326.549313][ T8682] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 326.585722][ T8684] validate_nla: 1 callbacks suppressed [ 326.585770][ T8684] netlink: 'syz.2.1483': attribute type 10 has an invalid length. [ 326.623899][ T8684] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1483'. [ 326.733563][ T8684] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 326.757401][ T8692] netlink: 'syz.3.1485': attribute type 39 has an invalid length. [ 326.916957][ T8695] netlink: 'syz.4.1486': attribute type 10 has an invalid length. [ 327.312423][ T8708] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 327.319054][ T8708] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 330.630238][ T8740] netlink: 'syz.3.1501': attribute type 10 has an invalid length. [ 330.751499][ T8751] netlink: 'syz.4.1505': attribute type 39 has an invalid length. [ 332.836563][ T8790] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1516'. [ 332.869866][ T8790] ksmbd: Daemon and kernel module version mismatch. ksmbd: 2, kernel module: 1. User-space ksmbd should terminate. [ 332.886830][ T8790] FAULT_INJECTION: forcing a failure. [ 332.886830][ T8790] name failslab, interval 1, probability 0, space 0, times 0 [ 332.924622][ T8790] CPU: 1 PID: 8790 Comm: syz.2.1516 Not tainted syzkaller #0 [ 332.932128][ T8790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 332.942277][ T8790] Call Trace: [ 332.945625][ T8790] [ 332.948629][ T8790] dump_stack_lvl+0x188/0x24e [ 332.953407][ T8790] ? show_regs_print_info+0x12/0x12 [ 332.958678][ T8790] ? load_image+0x410/0x410 [ 332.963378][ T8790] ? perf_trace_lock_acquire+0x101/0x3f0 [ 332.969087][ T8790] ? verify_lock_unused+0x140/0x140 [ 332.974373][ T8790] ? perf_trace_lock_acquire+0x101/0x3f0 [ 332.980081][ T8790] should_fail_ex+0x390/0x4c0 [ 332.984841][ T8790] should_failslab+0x5/0x20 [ 332.989405][ T8790] slab_pre_alloc_hook+0x59/0x300 [ 332.994533][ T8790] kmem_cache_alloc+0x56/0x2f0 [ 332.999357][ T8790] ? skb_clone+0x1e7/0x370 [ 333.003851][ T8790] skb_clone+0x1e7/0x370 [ 333.008163][ T8790] __netlink_deliver_tap+0x3e4/0x7e0 [ 333.013527][ T8790] ? netlink_deliver_tap+0x2e/0x1b0 [ 333.018801][ T8790] netlink_deliver_tap+0x19c/0x1b0 [ 333.023994][ T8790] netlink_sendskb+0x64/0x130 [ 333.028756][ T8790] netlink_ack+0xcd1/0x1160 [ 333.033365][ T8790] ? netlink_dump+0xcd0/0xcd0 [ 333.038126][ T8790] netlink_rcv_skb+0x26d/0x440 [ 333.042996][ T8790] ? genl_bind+0x360/0x360 [ 333.047475][ T8790] ? netlink_ack+0x1160/0x1160 [ 333.052317][ T8790] ? down_read+0x1a8/0x2d0 [ 333.056816][ T8790] genl_rcv+0x24/0x40 [ 333.060868][ T8790] netlink_unicast+0x7ad/0x920 [ 333.065715][ T8790] netlink_sendmsg+0x8ad/0xbd0 [ 333.070565][ T8790] ? netlink_getsockopt+0x550/0x550 [ 333.075843][ T8790] ? apparmor_socket_sendmsg+0x8a/0x330 [ 333.081458][ T8790] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 333.086848][ T8790] ? security_socket_sendmsg+0x7c/0xa0 [ 333.092366][ T8790] ? netlink_getsockopt+0x550/0x550 [ 333.097633][ T8790] ____sys_sendmsg+0x5ed/0x9a0 [ 333.102478][ T8790] ? __sys_sendmsg_sock+0x30/0x30 [ 333.107608][ T8790] ? __import_iovec+0x306/0x510 [ 333.112563][ T8790] ? import_iovec+0x6f/0xa0 [ 333.117140][ T8790] ___sys_sendmsg+0x2a2/0x360 [ 333.121891][ T8790] ? __sys_sendmsg+0x2a0/0x2a0 [ 333.126836][ T8790] ? trace_call_bpf+0xbf/0x6b0 [ 333.131705][ T8790] __se_sys_sendmsg+0x1c3/0x2b0 [ 333.136625][ T8790] ? ct_nmi_exit+0x145/0x1c0 [ 333.141288][ T8790] ? __x64_sys_sendmsg+0x80/0x80 [ 333.146314][ T8790] ? lockdep_hardirqs_on+0x94/0x140 [ 333.151576][ T8790] do_syscall_64+0x4c/0xa0 [ 333.156054][ T8790] ? clear_bhb_loop+0x60/0xb0 [ 333.160790][ T8790] ? clear_bhb_loop+0x60/0xb0 [ 333.165530][ T8790] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 333.171480][ T8790] RIP: 0033:0x7fca0139e019 [ 333.175951][ T8790] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 333.195618][ T8790] RSP: 002b:00007fca02193028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 333.204131][ T8790] RAX: ffffffffffffffda RBX: 00007fca01626090 RCX: 00007fca0139e019 [ 333.212202][ T8790] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 333.220240][ T8790] RBP: 00007fca02193090 R08: 0000000000000000 R09: 0000000000000000 [ 333.228266][ T8790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 333.236316][ T8790] R13: 00007fca01626128 R14: 00007fca01626090 R15: 00007ffcdc114a38 [ 333.244405][ T8790] [ 336.001663][ T8762] netlink: 'syz.4.1509': attribute type 21 has an invalid length. [ 336.009829][ T8762] netlink: 14548 bytes leftover after parsing attributes in process `syz.4.1509'. [ 336.022754][ T8763] netlink: 'syz.4.1509': attribute type 21 has an invalid length. [ 336.031146][ T8763] netlink: 14548 bytes leftover after parsing attributes in process `syz.4.1509'. [ 336.061291][ T8798] netlink: 'syz.2.1519': attribute type 39 has an invalid length. [ 336.319293][ T8807] netlink: 'syz.2.1524': attribute type 10 has an invalid length. [ 336.356857][ T8807] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1524'. [ 337.903163][ T8831] netlink: 'syz.3.1532': attribute type 10 has an invalid length. [ 337.918827][ T8831] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1532'. [ 337.938086][ T8831] bridge0: port 2(team0) entered blocking state [ 337.948279][ T8831] bridge0: port 2(team0) entered disabled state [ 338.019665][ T8831] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 338.044241][ T8833] netlink: 'syz.2.1531': attribute type 10 has an invalid length. [ 338.064257][ T8833] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1531'. [ 338.204897][ T8843] netlink: 192 bytes leftover after parsing attributes in process `syz.0.1535'. [ 338.720738][ T8852] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1540'. [ 338.995154][ T8862] netlink: 'syz.3.1541': attribute type 10 has an invalid length. [ 339.003337][ T8862] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1541'. [ 339.046401][ T8862] bridge0: port 2(team0) entered blocking state [ 339.140818][ T8862] bridge0: port 2(team0) entered disabled state [ 339.232712][ T8862] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 341.071121][ T8897] netlink: 'syz.1.1549': attribute type 10 has an invalid length. [ 341.134054][ T8897] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1549'. [ 341.201502][ T8897] bridge0: port 3(team0) entered blocking state [ 341.257748][ T8897] bridge0: port 3(team0) entered disabled state [ 342.560421][ T8897] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 343.280234][ T8923] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1559'. [ 345.046798][ T8928] netlink: 'syz.4.1558': attribute type 10 has an invalid length. [ 345.066392][ T8928] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1558'. [ 345.115566][ T8928] bridge0: port 3(team0) entered blocking state [ 345.124028][ T8928] bridge0: port 3(team0) entered disabled state [ 345.182585][ T8928] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 347.280930][ T8968] FAULT_INJECTION: forcing a failure. [ 347.280930][ T8968] name failslab, interval 1, probability 0, space 0, times 0 [ 347.303714][ T8968] CPU: 1 PID: 8968 Comm: syz.0.1570 Not tainted syzkaller #0 [ 347.311226][ T8968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 347.321403][ T8968] Call Trace: [ 347.324774][ T8968] [ 347.327907][ T8968] dump_stack_lvl+0x188/0x24e [ 347.332718][ T8968] ? show_regs_print_info+0x12/0x12 [ 347.338001][ T8968] ? load_image+0x410/0x410 [ 347.342572][ T8968] ? __might_sleep+0xd0/0xd0 [ 347.347218][ T8968] ? __lock_acquire+0x7c40/0x7c40 [ 347.352326][ T8968] should_fail_ex+0x390/0x4c0 [ 347.357087][ T8968] should_failslab+0x5/0x20 [ 347.361647][ T8968] slab_pre_alloc_hook+0x59/0x300 [ 347.366737][ T8968] ? __get_vm_area_node+0x122/0x330 [ 347.372011][ T8968] __kmem_cache_alloc_node+0x4f/0x270 [ 347.377450][ T8968] ? __get_vm_area_node+0x122/0x330 [ 347.382714][ T8968] kmalloc_node_trace+0x22/0xe0 [ 347.387652][ T8968] __get_vm_area_node+0x122/0x330 [ 347.392751][ T8968] ? perf_trace_lock_acquire+0x101/0x3f0 [ 347.398514][ T8968] __vmalloc_node_range+0x357/0x1380 [ 347.403875][ T8968] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 347.409489][ T8968] ? trace_event_raw_event_lock+0x230/0x230 [ 347.415493][ T8968] ? aa_get_newest_label+0xf9/0x5b0 [ 347.420742][ T8968] ? free_vm_area+0x50/0x50 [ 347.425293][ T8968] ? end_current_label_crit_section+0x170/0x170 [ 347.431584][ T8968] ? __lock_acquire+0x7c40/0x7c40 [ 347.436748][ T8968] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 347.442340][ T8968] __vmalloc+0x76/0x80 [ 347.446461][ T8968] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 347.452055][ T8968] bpf_prog_alloc_no_stats+0x37/0x3a0 [ 347.457481][ T8968] ? bpf_prog_alloc+0x13/0x1b0 [ 347.462302][ T8968] bpf_prog_alloc+0x1c/0x1b0 [ 347.466953][ T8968] bpf_prog_load+0x7d4/0x1530 [ 347.471701][ T8968] ? map_freeze+0x390/0x390 [ 347.476254][ T8968] ? __might_fault+0xa6/0x120 [ 347.480986][ T8968] ? __might_fault+0xa6/0x120 [ 347.485741][ T8968] ? __might_fault+0xc2/0x120 [ 347.490494][ T8968] ? __might_fault+0xa6/0x120 [ 347.495241][ T8968] ? bpf_lsm_bpf+0x5/0x10 [ 347.499683][ T8968] ? security_bpf+0x7a/0xa0 [ 347.504276][ T8968] __sys_bpf+0x5b8/0x780 [ 347.508628][ T8968] ? bpf_link_show_fdinfo+0x380/0x380 [ 347.514102][ T8968] ? lock_chain_count+0x20/0x20 [ 347.519179][ T8968] __x64_sys_bpf+0x78/0x90 [ 347.523686][ T8968] do_syscall_64+0x4c/0xa0 [ 347.528160][ T8968] ? clear_bhb_loop+0x60/0xb0 [ 347.533015][ T8968] ? clear_bhb_loop+0x60/0xb0 [ 347.537759][ T8968] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 347.543698][ T8968] RIP: 0033:0x7fe95919e019 [ 347.548177][ T8968] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 347.568076][ T8968] RSP: 002b:00007fe959fc8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 347.576565][ T8968] RAX: ffffffffffffffda RBX: 00007fe959426090 RCX: 00007fe95919e019 [ 347.584592][ T8968] RDX: 0000000000000094 RSI: 0000200000000380 RDI: 0000000000000005 [ 347.592632][ T8968] RBP: 00007fe959fc8090 R08: 0000000000000000 R09: 0000000000000000 [ 347.600696][ T8968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 347.608833][ T8968] R13: 00007fe959426128 R14: 00007fe959426090 R15: 00007fffb348a828 [ 347.616891][ T8968] [ 347.681802][ T8968] syz.0.1570: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 347.708959][ T8968] CPU: 0 PID: 8968 Comm: syz.0.1570 Not tainted syzkaller #0 [ 347.716457][ T8968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 347.726562][ T8968] Call Trace: [ 347.729885][ T8968] [ 347.732868][ T8968] dump_stack_lvl+0x188/0x24e [ 347.737614][ T8968] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 347.744091][ T8968] ? show_regs_print_info+0x12/0x12 [ 347.749353][ T8968] ? load_image+0x410/0x410 [ 347.753918][ T8968] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 347.760389][ T8968] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 347.766952][ T8968] warn_alloc+0x242/0x330 [ 347.771349][ T8968] ? __get_vm_area_node+0x122/0x330 [ 347.776619][ T8968] ? zone_watermark_ok_safe+0x270/0x270 [ 347.782248][ T8968] ? rcu_is_watching+0x11/0xa0 [ 347.787094][ T8968] ? __get_vm_area_node+0x318/0x330 [ 347.792369][ T8968] ? perf_trace_lock_acquire+0x101/0x3f0 [ 347.798126][ T8968] __vmalloc_node_range+0x37c/0x1380 [ 347.803491][ T8968] ? trace_event_raw_event_lock+0x230/0x230 [ 347.809467][ T8968] ? aa_get_newest_label+0xf9/0x5b0 [ 347.814745][ T8968] ? free_vm_area+0x50/0x50 [ 347.819304][ T8968] ? end_current_label_crit_section+0x170/0x170 [ 347.825613][ T8968] ? __lock_acquire+0x7c40/0x7c40 [ 347.830710][ T8968] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 347.836326][ T8968] __vmalloc+0x76/0x80 [ 347.840454][ T8968] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 347.846065][ T8968] bpf_prog_alloc_no_stats+0x37/0x3a0 [ 347.851591][ T8968] ? bpf_prog_alloc+0x13/0x1b0 [ 347.856421][ T8968] bpf_prog_alloc+0x1c/0x1b0 [ 347.861077][ T8968] bpf_prog_load+0x7d4/0x1530 [ 347.865838][ T8968] ? map_freeze+0x390/0x390 [ 347.870419][ T8968] ? __might_fault+0xa6/0x120 [ 347.875164][ T8968] ? __might_fault+0xa6/0x120 [ 347.879908][ T8968] ? __might_fault+0xc2/0x120 [ 347.884646][ T8968] ? __might_fault+0xa6/0x120 [ 347.889520][ T8968] ? bpf_lsm_bpf+0x5/0x10 [ 347.893957][ T8968] ? security_bpf+0x7a/0xa0 [ 347.898544][ T8968] __sys_bpf+0x5b8/0x780 [ 347.902885][ T8968] ? bpf_link_show_fdinfo+0x380/0x380 [ 347.908355][ T8968] ? lock_chain_count+0x20/0x20 [ 347.913304][ T8968] __x64_sys_bpf+0x78/0x90 [ 347.917798][ T8968] do_syscall_64+0x4c/0xa0 [ 347.922290][ T8968] ? clear_bhb_loop+0x60/0xb0 [ 347.927044][ T8968] ? clear_bhb_loop+0x60/0xb0 [ 347.931786][ T8968] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 347.937761][ T8968] RIP: 0033:0x7fe95919e019 [ 347.942258][ T8968] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 347.962030][ T8968] RSP: 002b:00007fe959fc8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 347.970541][ T8968] RAX: ffffffffffffffda RBX: 00007fe959426090 RCX: 00007fe95919e019 [ 347.978588][ T8968] RDX: 0000000000000094 RSI: 0000200000000380 RDI: 0000000000000005 [ 347.986628][ T8968] RBP: 00007fe959fc8090 R08: 0000000000000000 R09: 0000000000000000 [ 347.994687][ T8968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 348.002717][ T8968] R13: 00007fe959426128 R14: 00007fe959426090 R15: 00007fffb348a828 [ 348.010759][ T8968] [ 348.053656][ T8968] Mem-Info: [ 348.056915][ T8968] active_anon:26477 inactive_anon:0 isolated_anon:0 [ 348.056915][ T8968] active_file:22654 inactive_file:40065 isolated_file:0 [ 348.056915][ T8968] unevictable:768 dirty:366 writeback:0 [ 348.056915][ T8968] slab_reclaimable:20939 slab_unreclaimable:94614 [ 348.056915][ T8968] mapped:31060 shmem:20351 pagetables:654 [ 348.056915][ T8968] sec_pagetables:0 bounce:0 [ 348.056915][ T8968] kernel_misc_reclaimable:0 [ 348.056915][ T8968] free:1301937 free_pcp:10538 free_cma:0 [ 348.103800][ T8968] Node 0 active_anon:105908kB inactive_anon:0kB active_file:90616kB inactive_file:160056kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:124240kB dirty:1464kB writeback:0kB shmem:79868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10580kB pagetables:2616kB sec_pagetables:0kB all_unreclaimable? no [ 348.139061][ T8968] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 348.174359][ T8968] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 348.206847][ T8968] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 348.212874][ T8968] Node 0 DMA32 free:1297384kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:105908kB inactive_anon:0kB active_file:90616kB inactive_file:160056kB unevictable:1536kB writepending:1464kB present:3129332kB managed:2592912kB mlocked:0kB bounce:0kB free_pcp:21268kB local_pcp:19608kB free_cma:0kB [ 348.254608][ T8968] lowmem_reserve[]: 0 0 1 1 1 [ 348.259467][ T8968] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 348.291236][ T8968] lowmem_reserve[]: 0 0 0 0 0 [ 348.297410][ T8968] Node 1 Normal free:3894528kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:20512kB local_pcp:6720kB free_cma:0kB [ 348.332557][ T8968] lowmem_reserve[]: 0 0 0 0 0 [ 348.337826][ T8968] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 348.359657][ T8968] Node 0 DMA32: 869*4kB (UME) 989*8kB (UME) 1247*16kB (UME) 1003*32kB (UME) 212*64kB (UME) 41*128kB (UME) 1*256kB (E) 17*512kB (UME) 17*1024kB (ME) 10*2048kB (UM) 285*4096kB (UM) = 1296460kB [ 348.383781][ T8968] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 348.400280][ T8968] Node 1 Normal: 260*4kB (UE) 58*8kB (U) 28*16kB (UME) 35*32kB (UME) 16*64kB (UME) 6*128kB (UME) 2*256kB (UM) 4*512kB (UME) 0*1024kB 2*2048kB (UE) 948*4096kB (M) = 3894528kB [ 348.422786][ T8968] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 348.432911][ T8968] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 348.447376][ T8968] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 348.457591][ T8968] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 348.476343][ T8968] 83070 total pagecache pages [ 348.481230][ T8968] 0 pages in swap cache [ 348.488452][ T8968] Free swap = 124996kB [ 348.492697][ T8968] Total swap = 124996kB [ 348.500529][ T8968] 2097051 pages RAM [ 348.506301][ T8968] 0 pages HighMem/MovableOnly [ 348.511271][ T8968] 415222 pages reserved [ 348.518756][ T8968] 0 pages cma reserved [ 348.930030][ T8976] netlink: 'syz.1.1572': attribute type 10 has an invalid length. [ 348.961259][ T8976] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1572'. [ 348.978390][ T8976] bridge0: port 3(team0) entered blocking state [ 348.988664][ T8976] bridge0: port 3(team0) entered disabled state [ 349.055232][ T8984] netlink: 'syz.3.1574': attribute type 2 has an invalid length. [ 349.246270][ T8976] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 350.057444][ T9006] netlink: 'syz.0.1580': attribute type 10 has an invalid length. [ 350.085867][ T9006] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1580'. [ 350.132226][ T9006] bridge0: port 3(team0) entered blocking state [ 350.203298][ T9006] bridge0: port 3(team0) entered disabled state [ 350.286727][ T9009] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1581'. [ 350.849605][ T9006] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 350.899125][ T9009] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1581'. [ 350.944921][ T9010] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1581'. [ 352.172308][ T9032] netlink: 'syz.1.1587': attribute type 10 has an invalid length. [ 352.348599][ T9032] device team0 left promiscuous mode [ 352.360733][ T9032] device team_slave_0 left promiscuous mode [ 352.372534][ T9032] device team_slave_1 left promiscuous mode [ 352.384543][ T9032] device bridge0 left promiscuous mode [ 352.390442][ T9032] device geneve1 left promiscuous mode [ 352.548230][ T9034] netlink: 'syz.3.1589': attribute type 10 has an invalid length. [ 352.567799][ T9034] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1589'. [ 352.591381][ T9034] bridge0: port 2(team0) entered blocking state [ 352.652061][ T9034] bridge0: port 2(team0) entered disabled state [ 352.749147][ T9034] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 353.142127][ T9051] sctp: [Deprecated]: syz.4.1595 (pid 9051) Use of struct sctp_assoc_value in delayed_ack socket option. [ 353.142127][ T9051] Use struct sctp_sack_info instead [ 354.608979][ T9071] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 354.695166][ T9071] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 354.704449][ T9071] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 354.713717][ T9071] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 354.722863][ T9071] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 354.732036][ T9071] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 354.741215][ T9071] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 354.750403][ T9071] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 355.296937][ T9068] delete_channel: no stack [ 356.815153][ T9110] netlink: 'syz.4.1613': attribute type 21 has an invalid length. [ 356.868692][ T9110] netlink: 'syz.4.1613': attribute type 6 has an invalid length. [ 356.889609][ T9110] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1613'. [ 357.486750][ T9119] netlink: 'syz.4.1617': attribute type 10 has an invalid length. [ 357.592622][ T9119] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1617'. [ 357.708412][ T9119] bridge0: port 3(team0) entered blocking state [ 357.784460][ T9119] bridge0: port 3(team0) entered disabled state [ 357.896353][ T9119] net_ratelimit: 3258 callbacks suppressed [ 357.896394][ T9119] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 358.400392][ T9137] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 358.409668][ T9137] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 358.418870][ T9137] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 358.428032][ T9137] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 358.437207][ T9137] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 358.446414][ T9137] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 358.455599][ T9137] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 358.464776][ T9137] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 358.473971][ T9137] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 358.584942][ T9142] netlink: 'syz.4.1621': attribute type 39 has an invalid length. [ 358.969632][ T9151] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1626'. [ 359.269242][ T9162] netlink: 'syz.1.1628': attribute type 3 has an invalid length. [ 359.278314][ T9162] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1628'. [ 359.781852][ T9167] netlink: 'syz.0.1640': attribute type 10 has an invalid length. [ 359.836795][ T9167] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1640'. [ 359.964029][ T9167] bridge0: port 3(team0) entered blocking state [ 360.042876][ T9167] bridge0: port 3(team0) entered disabled state [ 361.480288][ T9195] netlink: 'syz.1.1635': attribute type 39 has an invalid length. [ 361.769280][ T9205] netlink: 'syz.4.1641': attribute type 10 has an invalid length. [ 361.792397][ T9205] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1641'. [ 361.830005][ T9205] bridge0: port 3(team0) entered blocking state [ 361.851738][ T9205] bridge0: port 3(team0) entered disabled state [ 361.946976][ T9204] netlink: 'syz.2.1639': attribute type 10 has an invalid length. [ 361.978882][ T9204] netlink: 'syz.2.1639': attribute type 25 has an invalid length. [ 362.290102][ T9219] netlink: 'syz.2.1645': attribute type 10 has an invalid length. [ 362.325274][ T9219] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1645'. [ 364.301900][ T9253] netlink: 'syz.0.1655': attribute type 10 has an invalid length. [ 364.331831][ T9253] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1655'. [ 364.382418][ T9253] bridge0: port 3(team0) entered blocking state [ 364.395695][ T9253] bridge0: port 3(team0) entered disabled state [ 364.477375][ T9253] net_ratelimit: 3322 callbacks suppressed [ 364.477420][ T9253] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 364.513623][ T9259] netlink: 'syz.3.1656': attribute type 39 has an invalid length. [ 364.659251][ T9262] netlink: 'syz.4.1657': attribute type 10 has an invalid length. [ 364.669117][ T9262] netlink: 'syz.4.1657': attribute type 25 has an invalid length. [ 365.106021][ T9275] netlink: 'syz.0.1660': attribute type 10 has an invalid length. [ 365.160317][ T9275] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1660'. [ 365.180014][ T9274] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 365.253940][ T9275] bridge0: port 3(team0) entered blocking state [ 365.305566][ T9275] bridge0: port 3(team0) entered disabled state [ 365.460649][ T9275] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 366.784649][ T9296] netlink: 'syz.0.1667': attribute type 29 has an invalid length. [ 366.804039][ T9296] netlink: 'syz.0.1667': attribute type 29 has an invalid length. [ 367.127228][ T9312] validate_nla: 2 callbacks suppressed [ 367.127274][ T9312] netlink: 'syz.3.1672': attribute type 10 has an invalid length. [ 367.161666][ T9312] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1672'. [ 367.271287][ T9312] bridge0: port 2(team0) entered blocking state [ 367.282244][ T9312] bridge0: port 2(team0) entered disabled state [ 367.290339][ T9318] FAULT_INJECTION: forcing a failure. [ 367.290339][ T9318] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 367.308363][ T9318] CPU: 0 PID: 9318 Comm: syz.1.1675 Not tainted syzkaller #0 [ 367.315821][ T9318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 367.325925][ T9318] Call Trace: [ 367.329250][ T9318] [ 367.332217][ T9318] dump_stack_lvl+0x188/0x24e [ 367.336962][ T9318] ? show_regs_print_info+0x12/0x12 [ 367.342223][ T9318] ? load_image+0x410/0x410 [ 367.346782][ T9318] ? __lock_acquire+0x7c40/0x7c40 [ 367.351861][ T9318] ? trace_call_bpf+0x5d6/0x6b0 [ 367.356776][ T9318] should_fail_ex+0x390/0x4c0 [ 367.361522][ T9318] _copy_from_user+0x2c/0x170 [ 367.366296][ T9318] __sys_bpf+0x2ea/0x780 [ 367.370594][ T9318] ? bpf_link_show_fdinfo+0x380/0x380 [ 367.376013][ T9318] ? lock_chain_count+0x20/0x20 [ 367.380913][ T9318] __x64_sys_bpf+0x78/0x90 [ 367.385392][ T9318] do_syscall_64+0x4c/0xa0 [ 367.389843][ T9318] ? clear_bhb_loop+0x60/0xb0 [ 367.394558][ T9318] ? clear_bhb_loop+0x60/0xb0 [ 367.399266][ T9318] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 367.405198][ T9318] RIP: 0033:0x7f204259e019 [ 367.409640][ T9318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 367.429316][ T9318] RSP: 002b:00007f20433ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 367.437768][ T9318] RAX: ffffffffffffffda RBX: 00007f2042825fa0 RCX: 00007f204259e019 [ 367.445769][ T9318] RDX: 0000000000000010 RSI: 0000200000000280 RDI: 000000000000000f [ 367.453766][ T9318] RBP: 00007f20433ac090 R08: 0000000000000000 R09: 0000000000000000 [ 367.461766][ T9318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 367.469937][ T9318] R13: 00007f2042826038 R14: 00007f2042825fa0 R15: 00007ffe97f6dd08 [ 367.477949][ T9318] [ 367.538012][ T9312] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 367.618863][ T9314] netlink: 'syz.4.1673': attribute type 39 has an invalid length. [ 370.396687][ T9373] netlink: 'syz.3.1691': attribute type 39 has an invalid length. [ 372.994183][ T9410] netlink: 'syz.0.1702': attribute type 10 has an invalid length. [ 373.002237][ T9410] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 373.038455][ T9410] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 373.046430][ T9407] FAULT_INJECTION: forcing a failure. [ 373.046430][ T9407] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 373.075593][ T9407] CPU: 0 PID: 9407 Comm: syz.4.1703 Not tainted syzkaller #0 [ 373.083078][ T9407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 373.093201][ T9407] Call Trace: [ 373.096531][ T9407] [ 373.099524][ T9407] dump_stack_lvl+0x188/0x24e [ 373.104258][ T9407] ? show_regs_print_info+0x12/0x12 [ 373.109525][ T9407] ? load_image+0x410/0x410 [ 373.114083][ T9407] ? __lock_acquire+0x7c40/0x7c40 [ 373.119181][ T9407] should_fail_ex+0x390/0x4c0 [ 373.123932][ T9407] _copy_from_user+0x2c/0x170 [ 373.128683][ T9407] bpf_prog_test_run_skb+0x263/0x18e0 [ 373.134135][ T9407] ? __fget_files+0x28/0x460 [ 373.138788][ T9407] ? __fget_files+0x3fc/0x460 [ 373.143549][ T9407] ? cpu_online+0xa0/0xa0 [ 373.147936][ T9407] bpf_prog_test_run+0x31c/0x390 [ 373.152989][ T9407] __sys_bpf+0x62b/0x780 [ 373.157298][ T9407] ? bpf_link_show_fdinfo+0x380/0x380 [ 373.162761][ T9407] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 373.169014][ T9407] __x64_sys_bpf+0x78/0x90 [ 373.173539][ T9407] do_syscall_64+0x4c/0xa0 [ 373.178021][ T9407] ? clear_bhb_loop+0x60/0xb0 [ 373.182778][ T9407] ? clear_bhb_loop+0x60/0xb0 [ 373.187574][ T9407] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 373.193768][ T9407] RIP: 0033:0x7fb748b9e019 [ 373.198235][ T9407] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 373.217895][ T9407] RSP: 002b:00007fb749af7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 373.226369][ T9407] RAX: ffffffffffffffda RBX: 00007fb748e25fa0 RCX: 00007fb748b9e019 [ 373.234401][ T9407] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 373.242424][ T9407] RBP: 00007fb749af7090 R08: 0000000000000000 R09: 0000000000000000 [ 373.250446][ T9407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 373.258475][ T9407] R13: 00007fb748e26038 R14: 00007fb748e25fa0 R15: 00007ffe9c491a38 [ 373.266535][ T9407] [ 373.288538][ T9410] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 373.313921][ T9409] netlink: 'syz.0.1702': attribute type 10 has an invalid length. [ 373.806475][ T9430] netlink: 'syz.3.1708': attribute type 39 has an invalid length. [ 375.491386][ T9462] FAULT_INJECTION: forcing a failure. [ 375.491386][ T9462] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 375.547283][ T9462] CPU: 1 PID: 9462 Comm: syz.0.1720 Not tainted syzkaller #0 [ 375.554780][ T9462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 375.564889][ T9462] Call Trace: [ 375.568210][ T9462] [ 375.571170][ T9462] dump_stack_lvl+0x188/0x24e [ 375.575900][ T9462] ? show_regs_print_info+0x12/0x12 [ 375.581137][ T9462] ? load_image+0x410/0x410 [ 375.585677][ T9462] ? __lock_acquire+0x7c40/0x7c40 [ 375.590753][ T9462] ? __might_sleep+0xd0/0xd0 [ 375.595381][ T9462] should_fail_ex+0x390/0x4c0 [ 375.600104][ T9462] _copy_from_user+0x2c/0x170 [ 375.604816][ T9462] generic_map_update_batch+0x4dc/0x7f0 [ 375.610421][ T9462] ? rcu_read_unlock+0xa0/0xa0 [ 375.615232][ T9462] ? __fdget+0x17c/0x200 [ 375.619513][ T9462] ? rcu_read_unlock+0xa0/0xa0 [ 375.624312][ T9462] bpf_map_do_batch+0x475/0x5f0 [ 375.629229][ T9462] ? bpf_lsm_xfrm_state_delete_security+0x10/0x10 [ 375.635710][ T9462] __sys_bpf+0x6f7/0x780 [ 375.640057][ T9462] ? bpf_link_show_fdinfo+0x380/0x380 [ 375.645539][ T9462] ? lock_chain_count+0x20/0x20 [ 375.650449][ T9462] __x64_sys_bpf+0x78/0x90 [ 375.654914][ T9462] do_syscall_64+0x4c/0xa0 [ 375.659397][ T9462] ? clear_bhb_loop+0x60/0xb0 [ 375.664110][ T9462] ? clear_bhb_loop+0x60/0xb0 [ 375.668853][ T9462] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 375.674802][ T9462] RIP: 0033:0x7fe95919e019 [ 375.679256][ T9462] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 375.698921][ T9462] RSP: 002b:00007fe959fe9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 375.707397][ T9462] RAX: ffffffffffffffda RBX: 00007fe959425fa0 RCX: 00007fe95919e019 [ 375.715425][ T9462] RDX: 0000000000000038 RSI: 0000200000000300 RDI: 000000000000001a [ 375.723470][ T9462] RBP: 00007fe959fe9090 R08: 0000000000000000 R09: 0000000000000000 [ 375.731482][ T9462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 375.739510][ T9462] R13: 00007fe959426038 R14: 00007fe959425fa0 R15: 00007fffb348a828 [ 375.747531][ T9462] [ 375.919425][ T9467] netlink: 'syz.4.1722': attribute type 29 has an invalid length. [ 375.928056][ T9467] netlink: 'syz.4.1722': attribute type 29 has an invalid length. [ 375.938439][ T9467] netlink: 'syz.4.1722': attribute type 29 has an invalid length. [ 375.950560][ T9467] netlink: 'syz.4.1722': attribute type 29 has an invalid length. [ 375.971685][ T9467] netlink: 'syz.4.1722': attribute type 29 has an invalid length. [ 376.029334][ T9472] netlink: 'syz.4.1722': attribute type 29 has an invalid length. [ 376.238000][ T9477] netlink: 'syz.0.1724': attribute type 39 has an invalid length. [ 376.276165][ T9477] device macvlan0 entered promiscuous mode [ 377.756752][ T9507] sctp: [Deprecated]: syz.2.1734 (pid 9507) Use of struct sctp_assoc_value in delayed_ack socket option. [ 377.756752][ T9507] Use struct sctp_sack_info instead [ 378.099860][ T9517] validate_nla: 1 callbacks suppressed [ 378.099907][ T9517] netlink: 'syz.0.1739': attribute type 21 has an invalid length. [ 378.128980][ T9517] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1739'. [ 378.578267][ T9533] netlink: 'syz.3.1742': attribute type 39 has an invalid length. [ 378.683128][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.689629][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.870344][ T9538] IPv6: Can't replace route, no match found [ 381.088038][ T9561] netlink: 'syz.0.1753': attribute type 10 has an invalid length. [ 381.109738][ T9561] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1753'. [ 381.135726][ T9561] bridge0: port 3(team0) entered blocking state [ 381.163921][ T9561] bridge0: port 3(team0) entered disabled state [ 381.248134][ T9561] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 382.915210][ T9601] : renamed from pim6reg1 [ 383.355959][ T9612] netlink: 'syz.4.1771': attribute type 29 has an invalid length. [ 383.399289][ T9612] netlink: 'syz.4.1771': attribute type 29 has an invalid length. [ 385.092416][ T9648] netlink: 'syz.4.1783': attribute type 21 has an invalid length. [ 385.123771][ T9648] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1783'. [ 385.702046][ T9659] netlink: 'syz.1.1786': attribute type 39 has an invalid length. [ 385.859528][ T9659] device macvlan0 entered promiscuous mode [ 386.344196][ T9672] netlink: 'syz.2.1790': attribute type 39 has an invalid length. [ 386.728402][ T9679] netlink: 'syz.0.1802': attribute type 10 has an invalid length. [ 386.761171][ T9679] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1802'. [ 386.795423][ T9679] bridge0: port 3(team0) entered blocking state [ 386.856616][ T9679] bridge0: port 3(team0) entered disabled state [ 386.968338][ T9679] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 387.542946][ T9703] netlink: 'syz.2.1801': attribute type 21 has an invalid length. [ 387.590950][ T9703] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1801'. [ 388.185147][ T9709] netlink: 'syz.0.1804': attribute type 10 has an invalid length. [ 388.216776][ T9709] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1804'. [ 388.248457][ T9709] bridge0: port 3(team0) entered blocking state [ 388.286457][ T9709] bridge0: port 3(team0) entered disabled state [ 388.360402][ T9709] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 388.500897][ T9716] netlink: 'syz.3.1805': attribute type 39 has an invalid length. [ 388.856737][ T9725] netlink: 'syz.2.1808': attribute type 8 has an invalid length. [ 388.877132][ T9725] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1808'. [ 388.906881][ T9723] netlink: 'syz.1.1807': attribute type 39 has an invalid length. [ 389.251031][ T9732] netlink: 'syz.0.1811': attribute type 10 has an invalid length. [ 389.259885][ T9732] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1811'. [ 389.272953][ T9732] bridge0: port 3(team0) entered blocking state [ 389.281714][ T9732] bridge0: port 3(team0) entered disabled state [ 389.299623][ T9732] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 389.661817][ T9743] netlink: 'syz.3.1824': attribute type 39 has an invalid length. [ 391.048280][ T9758] netlink: 'syz.3.1820': attribute type 10 has an invalid length. [ 391.078981][ T9758] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1820'. [ 391.136181][ T9758] bridge0: port 2(team0) entered blocking state [ 391.155446][ T9758] bridge0: port 2(team0) entered disabled state [ 391.271975][ T9758] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 391.687167][ T9774] netlink: 'syz.1.1826': attribute type 10 has an invalid length. [ 391.717685][ T9774] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1826'. [ 391.748976][ T9774] device team0 entered promiscuous mode [ 391.777821][ T9774] device team_slave_0 entered promiscuous mode [ 391.812937][ T9774] device team_slave_1 entered promiscuous mode [ 391.828056][ T9774] device bridge0 entered promiscuous mode [ 391.839640][ T9774] device geneve1 entered promiscuous mode [ 391.861029][ T9782] FAULT_INJECTION: forcing a failure. [ 391.861029][ T9782] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 391.894188][ T9782] CPU: 1 PID: 9782 Comm: syz.3.1828 Not tainted syzkaller #0 [ 391.898320][ T9774] 8021q: adding VLAN 0 to HW filter on device team0 [ 391.901638][ T9782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 391.901684][ T9782] Call Trace: [ 391.901693][ T9782] [ 391.901703][ T9782] dump_stack_lvl+0x188/0x24e [ 391.929410][ T9782] ? show_regs_print_info+0x12/0x12 [ 391.934672][ T9782] ? load_image+0x410/0x410 [ 391.939237][ T9782] ? __lock_acquire+0x7c40/0x7c40 [ 391.944320][ T9782] ? snprintf+0xe5/0x140 [ 391.948655][ T9782] should_fail_ex+0x390/0x4c0 [ 391.953402][ T9782] _copy_to_user+0x2c/0x130 [ 391.957960][ T9782] simple_read_from_buffer+0xe3/0x150 [ 391.963391][ T9782] proc_fail_nth_read+0x1a6/0x220 [ 391.968471][ T9782] ? proc_fault_inject_write+0x310/0x310 [ 391.974156][ T9782] ? fsnotify_perm+0x248/0x550 [ 391.979025][ T9782] ? proc_fault_inject_write+0x310/0x310 [ 391.980747][ T9774] bridge0: port 3(team0) entered blocking state [ 391.984701][ T9782] vfs_read+0x2db/0x960 [ 391.984741][ T9782] ? kernel_read+0x1e0/0x1e0 [ 391.984773][ T9782] ? __fget_files+0x28/0x460 [ 391.984806][ T9782] ? __fget_files+0x3fc/0x460 [ 391.984844][ T9782] ? __fdget_pos+0x2ae/0x360 [ 391.984871][ T9782] ? ksys_read+0x70/0x260 [ 391.984903][ T9782] ksys_read+0x14d/0x260 [ 391.984937][ T9782] ? vfs_write+0x9a0/0x9a0 [ 391.984971][ T9782] ? lockdep_hardirqs_on+0x94/0x140 [ 391.984998][ T9782] do_syscall_64+0x4c/0xa0 [ 391.985027][ T9782] ? clear_bhb_loop+0x60/0xb0 [ 391.985057][ T9782] ? clear_bhb_loop+0x60/0xb0 [ 392.046128][ T9782] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 392.052081][ T9782] RIP: 0033:0x7f8a5255e84e [ 392.056622][ T9782] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 392.076273][ T9782] RSP: 002b:00007f8a53421fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 392.084752][ T9782] RAX: ffffffffffffffda RBX: 00007f8a534226c0 RCX: 00007f8a5255e84e [ 392.092766][ T9782] RDX: 000000000000000f RSI: 00007f8a534220a0 RDI: 0000000000000004 [ 392.100777][ T9782] RBP: 00007f8a53422090 R08: 0000000000000000 R09: 0000000000000000 [ 392.108783][ T9782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 392.116792][ T9782] R13: 00007f8a52826038 R14: 00007f8a52825fa0 R15: 00007fff047fe9a8 [ 392.124811][ T9782] [ 392.150692][ T9774] bridge0: port 3(team0) entered disabled state [ 392.192938][ T9774] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 392.479774][ T9792] netlink: 'syz.0.1832': attribute type 39 has an invalid length. [ 393.278205][ T9807] netlink: 'syz.1.1838': attribute type 10 has an invalid length. [ 393.397500][ T9807] device wg1 entered promiscuous mode [ 393.404693][ T9807] team0: Device wg1 is of different type [ 393.801094][ T9810] netlink: 'syz.4.1839': attribute type 10 has an invalid length. [ 393.815074][ T9810] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1839'. [ 393.853677][ T9810] bridge0: port 3(team0) entered blocking state [ 393.864770][ T9810] bridge0: port 3(team0) entered disabled state [ 393.933023][ T9810] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 394.192352][ T9819] device syzkaller0 entered promiscuous mode [ 396.453350][ T9861] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 396.483108][ T9861] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 396.492465][ T9861] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 396.502000][ T9861] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 396.511676][ T9861] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 396.521190][ T9861] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 396.530581][ T9861] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 396.540239][ T9861] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 397.200217][ T9861] net_ratelimit: 3001 callbacks suppressed [ 397.200247][ T9861] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 397.215921][ T9861] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 397.225550][ T9861] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 397.235085][ T9861] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 397.244309][ T9861] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 397.253487][ T9861] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 397.262604][ T9861] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 397.271799][ T9861] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 397.280962][ T9861] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 397.290156][ T9861] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 397.632999][ T9870] netlink: 'syz.1.1855': attribute type 29 has an invalid length. [ 398.023511][ T9852] netlink: 'syz.4.1850': attribute type 39 has an invalid length. [ 398.032029][ T9869] netlink: 'syz.1.1855': attribute type 10 has an invalid length. [ 398.044743][ T9870] netlink: 'syz.1.1855': attribute type 29 has an invalid length. [ 399.021095][ T9900] netlink: 'syz.0.1866': attribute type 10 has an invalid length. [ 400.099231][ T9914] netlink: 'syz.1.1867': attribute type 39 has an invalid length. [ 400.865876][ T9925] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1870'. [ 400.927472][ T9925] netlink: 'syz.4.1870': attribute type 8 has an invalid length. [ 401.164358][ T9933] netlink: 'syz.2.1875': attribute type 10 has an invalid length. [ 401.189178][ T9933] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1875'. [ 401.537581][ T9937] netlink: 'syz.0.1876': attribute type 4 has an invalid length. [ 401.577010][ T9937] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1876'. [ 402.283516][ T9941] net_ratelimit: 632 callbacks suppressed [ 402.283583][ T9941] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 402.299753][ T9941] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 402.310069][ T9941] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 402.320313][ T9941] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 402.330694][ T9941] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 402.340542][ T9941] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 402.350595][ T9941] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 402.360630][ T9941] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 402.370663][ T9941] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 402.380860][ T9941] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 402.512986][ T9951] device syzkaller0 entered promiscuous mode [ 402.525530][ T9951] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 402.820883][ T9962] netlink: 'syz.2.1880': attribute type 10 has an invalid length. [ 402.835705][ T9961] netlink: 'syz.0.1881': attribute type 39 has an invalid length. [ 402.907880][ T9964] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1882'. [ 403.210322][ T9970] netlink: 'syz.3.1885': attribute type 3 has an invalid length. [ 403.230164][ T9970] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1885'. [ 403.640897][ T9979] netlink: 'syz.0.1889': attribute type 3 has an invalid length. [ 403.678613][ T9981] netlink: 196 bytes leftover after parsing attributes in process `syz.2.1891'. [ 403.706856][ T9979] netlink: 'syz.0.1889': attribute type 4 has an invalid length. [ 403.748848][ T9979] netlink: 9067 bytes leftover after parsing attributes in process `syz.0.1889'. [ 404.440252][ T9995] netlink: 'syz.3.1896': attribute type 10 has an invalid length. [ 405.444512][ T9995] device wg1 entered promiscuous mode [ 405.451862][ T9995] team0: Device wg1 is of different type [ 405.619323][T10011] netlink: 'syz.1.1894': attribute type 10 has an invalid length. [ 406.084159][T10026] netlink: 'syz.0.1899': attribute type 39 has an invalid length. [ 408.205679][T10057] netlink: 'syz.4.1909': attribute type 10 has an invalid length. [ 408.257951][T10057] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1909'. [ 408.442546][T10057] bridge0: port 3(team0) entered blocking state [ 408.467384][T10057] bridge0: port 3(team0) entered disabled state [ 408.545902][T10057] net_ratelimit: 6201 callbacks suppressed [ 408.545971][T10057] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 408.609065][T10058] netlink: 'syz.2.1908': attribute type 21 has an invalid length. [ 408.643675][T10058] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1908'. [ 408.673823][T10058] netlink: 'syz.2.1908': attribute type 4 has an invalid length. [ 408.688202][T10058] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1908'. [ 408.724186][T10070] netlink: 'syz.0.1912': attribute type 10 has an invalid length. [ 408.748565][T10070] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1912'. [ 408.802745][T10070] bridge0: port 3(team0) entered blocking state [ 408.845733][T10070] bridge0: port 3(team0) entered disabled state [ 408.904493][T10070] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 409.135007][T10083] netlink: 'syz.1.1915': attribute type 39 has an invalid length. [ 409.251997][T10090] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1918'. [ 410.064104][T10113] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 410.073875][T10113] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 410.083580][T10113] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 410.093375][T10113] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 410.103360][T10113] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 410.113208][T10113] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 410.123116][T10113] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 410.132818][T10113] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 410.556122][T10120] netlink: 'syz.2.1926': attribute type 10 has an invalid length. [ 410.616833][T10120] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1926'. [ 411.304246][T10130] netlink: 'syz.4.1928': attribute type 21 has an invalid length. [ 411.325339][T10130] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1928'. [ 411.374232][T10130] netlink: 'syz.4.1928': attribute type 4 has an invalid length. [ 411.394524][T10130] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1928'. [ 411.711783][T10142] netlink: 196 bytes leftover after parsing attributes in process `syz.4.1932'. [ 411.801080][T10148] netlink: 'syz.2.1931': attribute type 39 has an invalid length. [ 412.671281][T10170] netlink: 'syz.3.1941': attribute type 10 has an invalid length. [ 412.700659][T10170] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1941'. [ 412.768110][T10170] bridge0: port 2(team0) entered blocking state [ 412.945956][T10170] bridge0: port 2(team0) entered disabled state [ 413.748877][T10195] netlink: 'syz.2.1947': attribute type 13 has an invalid length. [ 413.771882][T10195] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1947'. [ 413.802950][T10195] erspan0: refused to change device tx_queue_len [ 413.823261][T10195] net_ratelimit: 6651 callbacks suppressed [ 413.823280][T10195] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 413.899765][T10197] netlink: 'syz.1.1942': attribute type 21 has an invalid length. [ 413.973639][T10197] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1942'. [ 413.992056][T10197] netlink: 'syz.1.1942': attribute type 4 has an invalid length. [ 414.006322][T10197] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1942'. [ 414.251071][T10208] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1949'. [ 414.548395][T10214] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 414.662953][T10214] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 414.673151][T10214] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 414.683775][T10214] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 414.693993][T10214] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 414.704193][T10214] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 414.714484][T10214] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 414.724981][T10214] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 414.735367][T10214] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 415.021579][T10221] raw_sendmsg: syz.3.1957 forgot to set AF_INET. Fix it! [ 415.536940][T10227] netlink: 'syz.1.1958': attribute type 10 has an invalid length. [ 415.564114][T10227] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1958'. [ 415.637420][T10227] bridge0: port 3(team0) entered blocking state [ 415.664638][T10227] bridge0: port 3(team0) entered disabled state [ 415.899065][T10238] netlink: 'syz.0.1961': attribute type 7 has an invalid length. [ 417.551800][T10274] netlink: 'syz.3.1974': attribute type 29 has an invalid length. [ 417.565067][T10274] netlink: 'syz.3.1974': attribute type 29 has an invalid length. [ 417.601224][T10274] netlink: 'syz.3.1974': attribute type 29 has an invalid length. [ 418.027222][T10284] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1977'. [ 418.596023][T10304] netlink: 'syz.0.1983': attribute type 39 has an invalid length. [ 419.999052][T10330] netlink: 'syz.3.1992': attribute type 12 has an invalid length. [ 420.078289][T10330] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1992'. [ 420.147737][T10338] netlink: 'syz.3.1992': attribute type 13 has an invalid length. [ 420.267521][T10338] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1992'. [ 420.404071][T10338] erspan0: refused to change device tx_queue_len [ 420.443937][T10338] net_ratelimit: 2553 callbacks suppressed [ 420.443958][T10338] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 420.772067][T10350] netlink: 'syz.1.1996': attribute type 39 has an invalid length. [ 421.125385][T10358] netlink: 'syz.2.1999': attribute type 39 has an invalid length. [ 421.336311][T10364] netlink: 'syz.0.2001': attribute type 21 has an invalid length. [ 421.371013][T10364] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2001'. [ 421.549203][T10369] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2004'. [ 422.085905][ T49] Bluetooth: hci4: SCO packet for unknown connection handle 0 [ 423.576873][T10427] netlink: 'syz.1.2022': attribute type 2 has an invalid length. [ 423.614088][T10427] netlink: 'syz.1.2022': attribute type 8 has an invalid length. [ 423.649405][T10427] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2022'. [ 423.692595][T10429] netlink: 'syz.4.2021': attribute type 39 has an invalid length. [ 424.117600][T10439] netlink: 'syz.0.2024': attribute type 12 has an invalid length. [ 424.176727][T10439] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2024'. [ 424.219557][T10443] netlink: 'syz.0.2024': attribute type 13 has an invalid length. [ 424.269744][T10443] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2024'. [ 424.643743][T10443] erspan0: refused to change device tx_queue_len [ 424.663058][T10443] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 425.687096][T10466] netlink: 'syz.1.2036': attribute type 10 has an invalid length. [ 425.715599][T10466] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2036'. [ 425.748819][T10466] bridge0: port 3(team0) entered blocking state [ 425.771985][T10466] bridge0: port 3(team0) entered disabled state [ 426.128136][T10466] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 426.376916][T10481] netlink: 'syz.2.2040': attribute type 10 has an invalid length. [ 426.567969][T10490] netlink: 'syz.4.2043': attribute type 12 has an invalid length. [ 426.576174][T10490] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2043'. [ 426.594006][T10490] netlink: 'syz.4.2043': attribute type 13 has an invalid length. [ 426.602087][T10490] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2043'. [ 426.694020][T10490] erspan0: refused to change device tx_queue_len [ 426.702207][T10490] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 427.967685][T10521] netlink: 'syz.0.2052': attribute type 10 has an invalid length. [ 428.065582][T10521] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2052'. [ 428.188709][T10521] bridge0: port 3(team0) entered blocking state [ 428.294210][T10521] bridge0: port 3(team0) entered disabled state [ 429.186718][T10521] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 429.240882][T10532] netlink: 'syz.4.2056': attribute type 10 has an invalid length. [ 429.664466][T10537] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2057'. [ 431.622300][T10580] netlink: 'syz.2.2071': attribute type 10 has an invalid length. [ 431.645679][T10580] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2071'. [ 431.702057][T10585] FAULT_INJECTION: forcing a failure. [ 431.702057][T10585] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 431.814026][T10585] CPU: 0 PID: 10585 Comm: syz.3.2072 Not tainted syzkaller #0 [ 431.821610][T10585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 431.831763][T10585] Call Trace: [ 431.835106][T10585] [ 431.838102][T10585] dump_stack_lvl+0x188/0x24e [ 431.842882][T10585] ? show_regs_print_info+0x12/0x12 [ 431.848156][T10585] ? load_image+0x410/0x410 [ 431.852755][T10585] ? __lock_acquire+0x7c40/0x7c40 [ 431.857884][T10585] should_fail_ex+0x390/0x4c0 [ 431.862654][T10585] _copy_from_user+0x2c/0x170 [ 431.867448][T10585] iovec_from_user+0x143/0x360 [ 431.872315][T10585] __import_iovec+0x6c/0x510 [ 431.877018][T10585] import_iovec+0x6f/0xa0 [ 431.881448][T10585] ___sys_sendmsg+0x252/0x360 [ 431.886229][T10585] ? __sys_sendmsg+0x2a0/0x2a0 [ 431.891159][T10585] ? __lock_acquire+0x7c40/0x7c40 [ 431.896354][T10585] __se_sys_sendmsg+0x1c3/0x2b0 [ 431.901300][T10585] ? __x64_sys_sendmsg+0x80/0x80 [ 431.906382][T10585] ? lockdep_hardirqs_on+0x94/0x140 [ 431.911766][T10585] do_syscall_64+0x4c/0xa0 [ 431.916262][T10585] ? clear_bhb_loop+0x60/0xb0 [ 431.921016][T10585] ? clear_bhb_loop+0x60/0xb0 [ 431.925786][T10585] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 431.931753][T10585] RIP: 0033:0x7f8a5259e019 [ 431.936243][T10585] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 431.955971][T10585] RSP: 002b:00007f8a53401028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 431.964472][T10585] RAX: ffffffffffffffda RBX: 00007f8a52826090 RCX: 00007f8a5259e019 [ 431.972512][T10585] RDX: 0000000000000000 RSI: 0000200000003680 RDI: 0000000000000004 [ 431.980547][T10585] RBP: 00007f8a53401090 R08: 0000000000000000 R09: 0000000000000000 [ 431.988591][T10585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 431.996634][T10585] R13: 00007f8a52826128 R14: 00007f8a52826090 R15: 00007fff047fe9a8 [ 432.004720][T10585] [ 432.327107][T10581] netlink: 'syz.4.2070': attribute type 10 has an invalid length. [ 434.685534][T10622] netlink: 'syz.3.2084': attribute type 10 has an invalid length. [ 434.767377][T10622] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 434.863365][T10627] netlink: 'syz.0.2086': attribute type 10 has an invalid length. [ 434.880668][T10627] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2086'. [ 434.919364][T10627] bridge0: port 3(team0) entered blocking state [ 434.927667][T10627] bridge0: port 3(team0) entered disabled state [ 434.960644][T10627] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 435.034918][T10632] netlink: 'syz.2.2087': attribute type 10 has an invalid length. [ 435.968022][T10655] netlink: 14975 bytes leftover after parsing attributes in process `syz.2.2093'. [ 436.266875][T10661] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2095'. [ 436.303566][T10661] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2095'. [ 436.320551][ T49] Bluetooth: hci4: ISO packet for unknown connection handle 3843 [ 437.971336][T10668] netlink: 'syz.4.2098': attribute type 10 has an invalid length. [ 437.989505][T10668] netlink: 'syz.4.2098': attribute type 4 has an invalid length. [ 438.012866][T10668] netlink: 116 bytes leftover after parsing attributes in process `syz.4.2098'. [ 438.029943][T10682] netlink: 'syz.0.2100': attribute type 10 has an invalid length. [ 438.157462][T10688] netlink: 'syz.2.2101': attribute type 10 has an invalid length. [ 438.184871][T10688] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2101'. [ 438.427502][T10693] netlink: 'syz.4.2102': attribute type 3 has an invalid length. [ 438.496473][T10693] netlink: 13435 bytes leftover after parsing attributes in process `syz.4.2102'. [ 438.734563][T10691] delete_channel: no stack [ 439.063054][T10701] can: request_module (can-proto-0) failed. [ 440.195727][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.202127][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.220822][T10722] netlink: 'syz.3.2111': attribute type 39 has an invalid length. [ 440.509231][T10731] netlink: 'syz.3.2114': attribute type 10 has an invalid length. [ 440.785518][T10734] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.793216][T10734] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.932243][T10741] device bridge_slave_1 left promiscuous mode [ 440.977607][T10741] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.016556][T10741] device bridge_slave_0 left promiscuous mode [ 441.023125][T10741] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.059716][T10741] device bridge0 left promiscuous mode [ 441.071891][T10741] team0: Port device bridge0 removed [ 441.240020][T10744] netlink: 'syz.0.2119': attribute type 10 has an invalid length. [ 441.321139][T10744] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2119'. [ 441.352565][T10744] bridge0: port 3(team0) entered blocking state [ 441.384173][T10744] bridge0: port 3(team0) entered disabled state [ 441.413072][T10744] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 441.431504][T10746] netlink: 'syz.2.2120': attribute type 10 has an invalid length. [ 441.458679][T10746] device macvlan0 entered promiscuous mode [ 441.498475][T10750] syzkaller0: tun_chr_ioctl cmd 2147767519 [ 441.553764][T10740] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 441.592019][T10740] syzkaller0: linktype set to 272 [ 441.671511][T10758] netlink: 'syz.1.2121': attribute type 9 has an invalid length. [ 441.701544][T10758] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2121'. [ 441.770725][T10765] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.2123'. [ 443.064186][T10795] validate_nla: 2 callbacks suppressed [ 443.064227][T10795] netlink: 'syz.2.2132': attribute type 10 has an invalid length. [ 443.153567][T10795] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2132'. [ 444.042179][T10822] netlink: 'syz.3.2142': attribute type 10 has an invalid length. [ 444.177465][T10820] device sit0 entered promiscuous mode [ 444.467326][T10826] netlink: 'syz.4.2143': attribute type 39 has an invalid length. [ 448.349524][T10867] netlink: 'syz.4.2156': attribute type 10 has an invalid length. [ 448.960759][T10878] device sit0 entered promiscuous mode [ 449.634363][T10889] netlink: 'syz.3.2164': attribute type 10 has an invalid length. [ 450.031554][T10898] netlink: 'syz.1.2166': attribute type 29 has an invalid length. [ 450.098649][T10900] netlink: 'syz.2.2167': attribute type 3 has an invalid length. [ 450.126007][T10898] netlink: 'syz.1.2166': attribute type 29 has an invalid length. [ 450.139702][T10900] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2167'. [ 450.227236][T10895] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2166'. [ 450.820751][T10914] netlink: 'syz.4.2173': attribute type 10 has an invalid length. [ 451.734025][T10927] device sit0 entered promiscuous mode [ 452.109048][T10937] netlink: 'syz.1.2178': attribute type 39 has an invalid length. [ 453.649737][T10957] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2183'. [ 453.708121][T10959] netlink: 'syz.0.2185': attribute type 10 has an invalid length. [ 453.920647][T10969] netlink: 'syz.2.2190': attribute type 10 has an invalid length. [ 453.984249][T10969] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2190'. [ 455.427940][T11002] FAULT_INJECTION: forcing a failure. [ 455.427940][T11002] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 455.552782][T11002] CPU: 0 PID: 11002 Comm: syz.2.2199 Not tainted syzkaller #0 [ 455.560338][T11002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 455.570472][T11002] Call Trace: [ 455.573799][T11002] [ 455.576772][T11002] dump_stack_lvl+0x188/0x24e [ 455.581503][T11002] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 455.587709][T11002] ? show_regs_print_info+0x12/0x12 [ 455.592960][T11002] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 455.599173][T11002] ? dump_stack+0x5/0x12 [ 455.603479][T11002] should_fail_ex+0x390/0x4c0 [ 455.608215][T11002] _copy_from_user+0x2c/0x170 [ 455.612949][T11002] mptcp_setsockopt+0xcef/0x2f90 [ 455.617942][T11002] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 455.624159][T11002] ? pm_nl_exit_net+0x220/0x220 [ 455.629052][T11002] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 455.635303][T11002] ? security_socket_setsockopt+0x7a/0xa0 [ 455.641085][T11002] ? __sanitizer_cov_trace_pc+0xc/0x60 [ 455.646590][T11002] ? sock_common_setsockopt+0x32/0xb0 [ 455.652019][T11002] ? sock_common_recvmsg+0x190/0x190 [ 455.657360][T11002] __sys_setsockopt+0x2bf/0x3d0 [ 455.662274][T11002] __x64_sys_setsockopt+0xb1/0xc0 [ 455.667357][T11002] do_syscall_64+0x4c/0xa0 [ 455.671822][T11002] ? clear_bhb_loop+0x60/0xb0 [ 455.676546][T11002] ? clear_bhb_loop+0x60/0xb0 [ 455.681278][T11002] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 455.687224][T11002] RIP: 0033:0x7fca0139e019 [ 455.691704][T11002] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 455.711391][T11002] RSP: 002b:00007fca02193028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 455.719868][T11002] RAX: ffffffffffffffda RBX: 00007fca01626090 RCX: 00007fca0139e019 [ 455.727896][T11002] RDX: 0000000000000006 RSI: 0000000000000006 RDI: 0000000000000006 [ 455.735905][T11002] RBP: 00007fca02193090 R08: 0000000000000004 R09: 0000000000000000 [ 455.743909][T11002] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 455.751907][T11002] R13: 00007fca01626128 R14: 00007fca01626090 R15: 00007ffcdc114a38 [ 455.759923][T11002] [ 456.477730][T11009] netlink: 'syz.0.2201': attribute type 10 has an invalid length. [ 457.631599][T11038] FAULT_INJECTION: forcing a failure. [ 457.631599][T11038] name failslab, interval 1, probability 0, space 0, times 0 [ 457.704199][T11038] CPU: 1 PID: 11038 Comm: syz.3.2209 Not tainted syzkaller #0 [ 457.711790][T11038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 457.721922][T11038] Call Trace: [ 457.725259][T11038] [ 457.728243][T11038] dump_stack_lvl+0x188/0x24e [ 457.733004][T11038] ? show_regs_print_info+0x12/0x12 [ 457.738291][T11038] ? load_image+0x410/0x410 [ 457.742891][T11038] ? __might_sleep+0xd0/0xd0 [ 457.747550][T11038] ? __lock_acquire+0x7c40/0x7c40 [ 457.752651][T11038] should_fail_ex+0x390/0x4c0 [ 457.757422][T11038] should_failslab+0x5/0x20 [ 457.761982][T11038] slab_pre_alloc_hook+0x59/0x300 [ 457.767112][T11038] kmem_cache_alloc_lru+0x49/0x2e0 [ 457.772319][T11038] ? __d_alloc+0x2e/0x6e0 [ 457.776734][T11038] __d_alloc+0x2e/0x6e0 [ 457.780970][T11038] d_alloc_parallel+0xdc/0x1590 [ 457.785908][T11038] ? __d_lookup+0x8b/0x7c0 [ 457.790402][T11038] ? __lock_acquire+0x7c40/0x7c40 [ 457.795519][T11038] ? __d_lookup+0x8b/0x7c0 [ 457.800072][T11038] ? d_hash_and_lookup+0x1b0/0x1b0 [ 457.805253][T11038] ? clear_nonspinnable+0x60/0x60 [ 457.810347][T11038] path_openat+0x949/0x2f10 [ 457.814949][T11038] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 457.820730][T11038] ? do_filp_open+0x420/0x420 [ 457.825479][T11038] do_filp_open+0x1ee/0x420 [ 457.830034][T11038] ? vfs_tmpfile+0x470/0x470 [ 457.834705][T11038] ? _raw_spin_unlock+0x24/0x40 [ 457.839600][T11038] ? alloc_fd+0x590/0x640 [ 457.843995][T11038] do_sys_openat2+0x14b/0x4f0 [ 457.848715][T11038] ? ct_nmi_exit+0x145/0x1c0 [ 457.853361][T11038] ? do_sys_open+0xe0/0xe0 [ 457.857849][T11038] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 457.863905][T11038] ? lock_chain_count+0x20/0x20 [ 457.868818][T11038] __x64_sys_openat+0x135/0x160 [ 457.873728][T11038] do_syscall_64+0x4c/0xa0 [ 457.878191][T11038] ? clear_bhb_loop+0x60/0xb0 [ 457.882917][T11038] ? clear_bhb_loop+0x60/0xb0 [ 457.887640][T11038] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 457.893575][T11038] RIP: 0033:0x7f8a5259e019 [ 457.898185][T11038] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 457.917853][T11038] RSP: 002b:00007f8a53422028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 457.926316][T11038] RAX: ffffffffffffffda RBX: 00007f8a52825fa0 RCX: 00007f8a5259e019 [ 457.934332][T11038] RDX: 000000000000275a RSI: 00002000000002c0 RDI: 0000000000000003 [ 457.942613][T11038] RBP: 00007f8a53422090 R08: 0000000000000000 R09: 0000000000000000 [ 457.950624][T11038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 457.958631][T11038] R13: 00007f8a52826038 R14: 00007f8a52825fa0 R15: 00007fff047fe9a8 [ 457.966668][T11038] [ 458.310091][T11047] netlink: 'syz.4.2210': attribute type 2 has an invalid length. [ 458.378648][T11047] netlink: 'syz.4.2210': attribute type 8 has an invalid length. [ 458.449204][T11047] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2210'. [ 459.132975][T11064] netlink: 'syz.3.2216': attribute type 10 has an invalid length. [ 459.481156][T11061] netlink: 'syz.2.2215': attribute type 21 has an invalid length. [ 459.511170][T11061] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2215'. [ 459.562504][T11061] netlink: 'syz.2.2215': attribute type 5 has an invalid length. [ 459.634242][T11061] netlink: 'syz.2.2215': attribute type 6 has an invalid length. [ 459.660037][T11061] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2215'. [ 459.794630][T11060] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.2217'. [ 460.707088][T11079] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.2222'. [ 460.759237][T11092] netlink: 'syz.0.2226': attribute type 22 has an invalid length. [ 461.206024][T11105] netlink: 'syz.0.2230': attribute type 2 has an invalid length. [ 461.260838][T11105] netlink: 'syz.0.2230': attribute type 8 has an invalid length. [ 461.291656][T11105] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2230'. [ 461.312565][T11110] netlink: 'syz.1.2231': attribute type 10 has an invalid length. [ 461.793880][T11122] netlink: 'syz.0.2234': attribute type 21 has an invalid length. [ 461.878050][T11122] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2234'. [ 461.953561][T11122] netlink: 'syz.0.2234': attribute type 5 has an invalid length. [ 461.998274][T11122] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2234'. [ 462.050400][T11123] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2233'. [ 462.097356][T11123] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2233'. [ 463.779702][T11164] __nla_validate_parse: 4 callbacks suppressed [ 463.779725][T11164] netlink: 180900 bytes leftover after parsing attributes in process `syz.2.2250'. [ 463.933524][T11164] openvswitch: netlink: Flow actions attr not present in new flow. [ 464.335142][T11169] validate_nla: 10 callbacks suppressed [ 464.335166][T11169] netlink: 'syz.1.2254': attribute type 10 has an invalid length. [ 464.461170][T11177] netlink: 'syz.0.2256': attribute type 10 has an invalid length. [ 464.469589][T11177] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.2256'. [ 464.521005][T11170] netlink: 'syz.4.2253': attribute type 10 has an invalid length. [ 464.853316][T11174] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.2255'. [ 465.111942][T11188] netlink: 'syz.3.2259': attribute type 2 has an invalid length. [ 465.187174][T11188] netlink: 'syz.3.2259': attribute type 8 has an invalid length. [ 465.228704][T11188] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2259'. [ 465.245153][T11189] netlink: 'syz.1.2260': attribute type 39 has an invalid length. [ 467.878262][T11200] netlink: 'syz.3.2264': attribute type 25 has an invalid length. [ 467.949414][T11200] netlink: 'syz.3.2264': attribute type 3 has an invalid length. [ 469.195919][T11237] netlink: 'syz.4.2276': attribute type 39 has an invalid length. [ 469.892645][T11250] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.2279'. [ 471.109197][T11272] netlink: 'syz.0.2288': attribute type 13 has an invalid length. [ 471.120662][T11272] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2288'. [ 471.171537][T11272] erspan0: refused to change device tx_queue_len [ 471.184071][T11272] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 471.279880][T11276] device pim6reg1 entered promiscuous mode [ 471.869326][T11288] sock: sock_set_timeout: `syz.0.2293' (pid 11288) tries to set negative timeout [ 473.064199][T11313] FAULT_INJECTION: forcing a failure. [ 473.064199][T11313] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 473.105640][T11313] CPU: 0 PID: 11313 Comm: syz.4.2302 Not tainted syzkaller #0 [ 473.113200][T11313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 473.123314][T11313] Call Trace: [ 473.126633][T11313] [ 473.129600][T11313] dump_stack_lvl+0x188/0x24e [ 473.134339][T11313] ? show_regs_print_info+0x12/0x12 [ 473.139594][T11313] ? load_image+0x410/0x410 [ 473.144158][T11313] ? __lock_acquire+0x7c40/0x7c40 [ 473.149264][T11313] should_fail_ex+0x390/0x4c0 [ 473.154015][T11313] _copy_from_user+0x2c/0x170 [ 473.158755][T11313] map_update_elem+0x473/0x6a0 [ 473.163592][T11313] __sys_bpf+0x4ec/0x780 [ 473.167907][T11313] ? bpf_link_show_fdinfo+0x380/0x380 [ 473.173390][T11313] ? lock_chain_count+0x20/0x20 [ 473.178339][T11313] __x64_sys_bpf+0x78/0x90 [ 473.182822][T11313] do_syscall_64+0x4c/0xa0 [ 473.187293][T11313] ? clear_bhb_loop+0x60/0xb0 [ 473.192022][T11313] ? clear_bhb_loop+0x60/0xb0 [ 473.196759][T11313] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 473.202735][T11313] RIP: 0033:0x7fb748b9e019 [ 473.207203][T11313] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 473.226851][T11313] RSP: 002b:00007fb749af7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 473.235297][T11313] RAX: ffffffffffffffda RBX: 00007fb748e25fa0 RCX: 00007fb748b9e019 [ 473.243305][T11313] RDX: 0000000000000020 RSI: 0000200000001100 RDI: 0000000000000002 [ 473.251311][T11313] RBP: 00007fb749af7090 R08: 0000000000000000 R09: 0000000000000000 [ 473.259313][T11313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 473.267320][T11313] R13: 00007fb748e26038 R14: 00007fb748e25fa0 R15: 00007ffe9c491a38 [ 473.275343][T11313] [ 473.320851][T11308] netlink: 'syz.2.2300': attribute type 19 has an invalid length. [ 473.366652][T11308] netlink: 14552 bytes leftover after parsing attributes in process `syz.2.2300'. [ 473.746964][T11324] netlink: 'syz.2.2304': attribute type 39 has an invalid length. [ 475.739649][T11348] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.2313'. [ 475.761699][T11356] netlink: 'syz.0.2315': attribute type 19 has an invalid length. [ 475.793798][T11356] netlink: 14552 bytes leftover after parsing attributes in process `syz.0.2315'. [ 475.926653][T11361] FAULT_INJECTION: forcing a failure. [ 475.926653][T11361] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 475.996771][T11361] CPU: 1 PID: 11361 Comm: syz.1.2317 Not tainted syzkaller #0 [ 476.004320][T11361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 476.014411][T11361] Call Trace: [ 476.017716][T11361] [ 476.020676][T11361] dump_stack_lvl+0x188/0x24e [ 476.025394][T11361] ? show_regs_print_info+0x12/0x12 [ 476.030627][T11361] ? load_image+0x410/0x410 [ 476.035168][T11361] ? __lock_acquire+0x7c40/0x7c40 [ 476.040230][T11361] should_fail_ex+0x390/0x4c0 [ 476.044944][T11361] _copy_from_user+0x2c/0x170 [ 476.049650][T11361] dev_ethtool+0xc2/0x12f0 [ 476.054119][T11361] ? ethtool_get_module_eeprom_call+0x170/0x170 [ 476.060397][T11361] ? __lock_acquire+0x7c40/0x7c40 [ 476.065454][T11361] ? __kmem_cache_free+0xb6/0x200 [ 476.070510][T11361] ? full_name_hash+0x8e/0xe0 [ 476.075220][T11361] ? dev_load+0x1d/0x1e0 [ 476.079494][T11361] ? dev_load+0x1d/0x1e0 [ 476.083770][T11361] dev_ioctl+0x474/0xe80 [ 476.088057][T11361] sock_do_ioctl+0x245/0x320 [ 476.092695][T11361] ? sock_show_fdinfo+0xb0/0xb0 [ 476.097592][T11361] sock_ioctl+0x48a/0x700 [ 476.101952][T11361] ? sock_poll+0x420/0x420 [ 476.106420][T11361] ? bpf_lsm_file_ioctl+0x5/0x10 [ 476.111396][T11361] ? security_file_ioctl+0x7c/0xa0 [ 476.116538][T11361] ? sock_poll+0x420/0x420 [ 476.120982][T11361] __se_sys_ioctl+0xfa/0x170 [ 476.125607][T11361] do_syscall_64+0x4c/0xa0 [ 476.130055][T11361] ? clear_bhb_loop+0x60/0xb0 [ 476.134767][T11361] ? clear_bhb_loop+0x60/0xb0 [ 476.139498][T11361] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 476.145420][T11361] RIP: 0033:0x7f204259e019 [ 476.149861][T11361] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 476.169489][T11361] RSP: 002b:00007f20433ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 476.177935][T11361] RAX: ffffffffffffffda RBX: 00007f2042825fa0 RCX: 00007f204259e019 [ 476.185937][T11361] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000004 [ 476.193933][T11361] RBP: 00007f20433ac090 R08: 0000000000000000 R09: 0000000000000000 [ 476.201925][T11361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 476.209919][T11361] R13: 00007f2042826038 R14: 00007f2042825fa0 R15: 00007ffe97f6dd08 [ 476.217928][T11361] [ 476.588091][T11373] netlink: 'syz.1.2321': attribute type 39 has an invalid length. [ 478.611601][T11407] netlink: 'syz.3.2331': attribute type 19 has an invalid length. [ 478.644950][T11407] netlink: 14552 bytes leftover after parsing attributes in process `syz.3.2331'. [ 478.929423][T11419] netlink: 'syz.0.2335': attribute type 10 has an invalid length. [ 481.340704][T11463] device batadv0 entered promiscuous mode [ 481.365003][T11467] FAULT_INJECTION: forcing a failure. [ 481.365003][T11467] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 481.381867][T11467] CPU: 0 PID: 11467 Comm: syz.0.2352 Not tainted syzkaller #0 [ 481.389463][T11467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 481.399582][T11467] Call Trace: [ 481.402902][T11467] [ 481.405878][T11467] dump_stack_lvl+0x188/0x24e [ 481.410627][T11467] ? show_regs_print_info+0x12/0x12 [ 481.415944][T11467] ? load_image+0x410/0x410 [ 481.420524][T11467] ? lockdep_hardirqs_on+0x94/0x140 [ 481.425782][T11467] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 481.432002][T11467] should_fail_ex+0x390/0x4c0 [ 481.436759][T11467] copyin+0x1b/0x120 [ 481.440899][T11467] _copy_from_iter+0x447/0x1130 [ 481.445832][T11467] ? copyout_mc+0x110/0x110 [ 481.450386][T11467] ? __phys_addr+0x47/0x170 [ 481.454959][T11467] ? __sanitizer_cov_trace_cmp8+0x4/0x80 [ 481.460662][T11467] ? __phys_addr_symbol+0x2b/0x70 [ 481.465747][T11467] ? __check_object_size+0x4f6/0xa70 [ 481.471102][T11467] netlink_sendmsg+0x755/0xbd0 [ 481.475942][T11467] ? lockdep_hardirqs_on+0x94/0x140 [ 481.481202][T11467] ? netlink_getsockopt+0x550/0x550 [ 481.486474][T11467] ? netlink_getsockopt+0x550/0x550 [ 481.491737][T11467] ____sys_sendmsg+0x5ed/0x9a0 [ 481.496554][T11467] ? __sys_sendmsg_sock+0x30/0x30 [ 481.501640][T11467] ? __import_iovec+0x306/0x510 [ 481.506536][T11467] ? import_iovec+0x6f/0xa0 [ 481.511077][T11467] ___sys_sendmsg+0x2a2/0x360 [ 481.515791][T11467] ? __sys_sendmsg+0x2a0/0x2a0 [ 481.520610][T11467] ? rcu_is_watching+0x11/0xa0 [ 481.525429][T11467] __se_sys_sendmsg+0x1c3/0x2b0 [ 481.530313][T11467] ? perf_trace_preemptirq_template+0x268/0x320 [ 481.536592][T11467] ? __x64_sys_sendmsg+0x80/0x80 [ 481.541581][T11467] ? lockdep_hardirqs_on+0x94/0x140 [ 481.546810][T11467] do_syscall_64+0x4c/0xa0 [ 481.551262][T11467] ? clear_bhb_loop+0x60/0xb0 [ 481.555974][T11467] ? clear_bhb_loop+0x60/0xb0 [ 481.560725][T11467] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 481.566681][T11467] RIP: 0033:0x7fe95919e019 [ 481.571130][T11467] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 481.590780][T11467] RSP: 002b:00007fe959fe9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 481.599235][T11467] RAX: ffffffffffffffda RBX: 00007fe959425fa0 RCX: 00007fe95919e019 [ 481.607255][T11467] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 481.615274][T11467] RBP: 00007fe959fe9090 R08: 0000000000000000 R09: 0000000000000000 [ 481.623284][T11467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 481.631288][T11467] R13: 00007fe959426038 R14: 00007fe959425fa0 R15: 00007fffb348a828 [ 481.639313][T11467] [ 481.662026][T11460] netlink: 'syz.1.2349': attribute type 19 has an invalid length. [ 481.673656][T11460] netlink: 14552 bytes leftover after parsing attributes in process `syz.1.2349'. [ 483.924390][T11504] device syzkaller0 entered promiscuous mode [ 484.162990][T11513] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.2378'. [ 484.183148][T11508] netlink: 'syz.2.2365': attribute type 3 has an invalid length. [ 484.254080][T11508] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2365'. [ 484.342047][T11513] netlink: 6955 bytes leftover after parsing attributes in process `syz.3.2378'. [ 485.582968][T11541] FAULT_INJECTION: forcing a failure. [ 485.582968][T11541] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 485.611978][T11541] CPU: 1 PID: 11541 Comm: syz.0.2375 Not tainted syzkaller #0 [ 485.619533][T11541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 485.629641][T11541] Call Trace: [ 485.632965][T11541] [ 485.635936][T11541] dump_stack_lvl+0x188/0x24e [ 485.640694][T11541] ? show_regs_print_info+0x12/0x12 [ 485.646083][T11541] ? load_image+0x410/0x410 [ 485.650699][T11541] ? __lock_acquire+0x7c40/0x7c40 [ 485.655800][T11541] should_fail_ex+0x390/0x4c0 [ 485.660558][T11541] strncpy_from_user+0x32/0x340 [ 485.665584][T11541] bpf_prog_load+0x200/0x1530 [ 485.670348][T11541] ? map_freeze+0x390/0x390 [ 485.674926][T11541] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 485.681142][T11541] ? lockdep_hardirqs_on+0x94/0x140 [ 485.686412][T11541] ? bpf_lsm_audit_rule_free+0x10/0x10 [ 485.691939][T11541] ? bpf_lsm_bpf+0x5/0x10 [ 485.696325][T11541] ? security_bpf+0x7a/0xa0 [ 485.700884][T11541] __sys_bpf+0x5b8/0x780 [ 485.705261][T11541] ? bpf_link_show_fdinfo+0x380/0x380 [ 485.710723][T11541] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 485.716958][T11541] __x64_sys_bpf+0x78/0x90 [ 485.721453][T11541] do_syscall_64+0x4c/0xa0 [ 485.725943][T11541] ? clear_bhb_loop+0x60/0xb0 [ 485.730700][T11541] ? clear_bhb_loop+0x60/0xb0 [ 485.735421][T11541] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 485.741376][T11541] RIP: 0033:0x7fe95919e019 [ 485.745857][T11541] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 485.765485][T11541] RSP: 002b:00007fe959fe9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 485.773942][T11541] RAX: ffffffffffffffda RBX: 00007fe959425fa0 RCX: 00007fe95919e019 [ 485.781972][T11541] RDX: 0000000000000018 RSI: 0000200000000800 RDI: 0000000000000005 [ 485.789979][T11541] RBP: 00007fe959fe9090 R08: 0000000000000000 R09: 0000000000000000 [ 485.797992][T11541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 485.806012][T11541] R13: 00007fe959426038 R14: 00007fe959425fa0 R15: 00007fffb348a828 [ 485.814056][T11541] [ 487.863565][T11562] netlink: 'syz.0.2382': attribute type 3 has an invalid length. [ 487.871379][T11562] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2382'. [ 487.898049][T11561] netlink: 4068 bytes leftover after parsing attributes in process `syz.0.2382'. [ 487.954489][T11561] netlink: 'syz.0.2382': attribute type 49 has an invalid length. [ 487.962543][T11561] netlink: 'syz.0.2382': attribute type 49 has an invalid length. [ 488.062265][T11565] netlink: 'syz.2.2383': attribute type 10 has an invalid length. [ 488.634634][T11576] netlink: 'syz.1.2385': attribute type 39 has an invalid length. [ 488.889949][T11584] netlink: 'syz.4.2389': attribute type 1 has an invalid length. [ 488.913318][T11584] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.2389'. [ 490.194561][T11595] netlink: 'syz.4.2392': attribute type 10 has an invalid length. [ 491.829862][T11615] device syzkaller0 entered promiscuous mode [ 491.927379][T11615] device pim6reg1 entered promiscuous mode [ 492.472453][T11628] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.2400'. [ 492.889205][T11623] netlink: 'syz.1.2398': attribute type 10 has an invalid length. [ 492.986521][T11628] netlink: 6955 bytes leftover after parsing attributes in process `syz.0.2400'. [ 493.576888][T11642] netlink: 'syz.3.2407': attribute type 10 has an invalid length. [ 493.958202][T11657] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 493.993999][T11657] syzkaller0: linktype set to 8 [ 495.405705][T11676] netlink: 'syz.3.2416': attribute type 10 has an invalid length. [ 497.900086][T11718] netlink: 'syz.1.2430': attribute type 10 has an invalid length. [ 498.933846][T11736] sctp: [Deprecated]: syz.2.2432 (pid 11736) Use of struct sctp_assoc_value in delayed_ack socket option. [ 498.933846][T11736] Use struct sctp_sack_info instead [ 500.128340][T11747] FAULT_INJECTION: forcing a failure. [ 500.128340][T11747] name failslab, interval 1, probability 0, space 0, times 0 [ 500.192488][T11747] CPU: 0 PID: 11747 Comm: syz.1.2439 Not tainted syzkaller #0 [ 500.200059][T11747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 500.210209][T11747] Call Trace: [ 500.213528][T11747] [ 500.216496][T11747] dump_stack_lvl+0x188/0x24e [ 500.221281][T11747] ? show_regs_print_info+0x12/0x12 [ 500.226541][T11747] ? load_image+0x410/0x410 [ 500.231134][T11747] ? __lock_acquire+0x7c40/0x7c40 [ 500.236225][T11747] ? trace_event_raw_event_lock+0x230/0x230 [ 500.242162][T11747] ? perf_trace_lock+0xf8/0x390 [ 500.247072][T11747] should_fail_ex+0x390/0x4c0 [ 500.251813][T11747] should_failslab+0x5/0x20 [ 500.256399][T11747] slab_pre_alloc_hook+0x59/0x300 [ 500.261478][T11747] ? bpf_prog_test_run_skb+0x23e/0x18e0 [ 500.267085][T11747] __kmem_cache_alloc_node+0x4f/0x270 [ 500.272514][T11747] ? bpf_prog_test_run_skb+0x23e/0x18e0 [ 500.278116][T11747] __kmalloc+0xa3/0x240 [ 500.282339][T11747] bpf_prog_test_run_skb+0x23e/0x18e0 [ 500.287766][T11747] ? __fget_files+0x28/0x460 [ 500.292412][T11747] ? __fget_files+0x3fc/0x460 [ 500.297162][T11747] ? cpu_online+0xa0/0xa0 [ 500.301542][T11747] bpf_prog_test_run+0x31c/0x390 [ 500.306542][T11747] __sys_bpf+0x62b/0x780 [ 500.310843][T11747] ? bpf_link_show_fdinfo+0x380/0x380 [ 500.316290][T11747] ? lock_chain_count+0x20/0x20 [ 500.321202][T11747] __x64_sys_bpf+0x78/0x90 [ 500.325681][T11747] do_syscall_64+0x4c/0xa0 [ 500.330157][T11747] ? clear_bhb_loop+0x60/0xb0 [ 500.334889][T11747] ? clear_bhb_loop+0x60/0xb0 [ 500.339627][T11747] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 500.345583][T11747] RIP: 0033:0x7f204259e019 [ 500.350070][T11747] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 500.369711][T11747] RSP: 002b:00007f20433ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 500.378156][T11747] RAX: ffffffffffffffda RBX: 00007f2042825fa0 RCX: 00007f204259e019 [ 500.386162][T11747] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 500.394162][T11747] RBP: 00007f20433ac090 R08: 0000000000000000 R09: 0000000000000000 [ 500.402195][T11747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 500.410218][T11747] R13: 00007f2042826038 R14: 00007f2042825fa0 R15: 00007ffe97f6dd08 [ 500.418240][T11747] [ 500.487802][T11745] netlink: 'syz.3.2437': attribute type 7 has an invalid length. [ 500.510799][T11745] netlink: 'syz.3.2437': attribute type 7 has an invalid length. [ 500.532323][T11745] netlink: 173648 bytes leftover after parsing attributes in process `syz.3.2437'. [ 501.229696][T11764] netlink: 'syz.1.2444': attribute type 10 has an invalid length. [ 501.560149][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.566633][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.010934][T11781] FAULT_INJECTION: forcing a failure. [ 502.010934][T11781] name failslab, interval 1, probability 0, space 0, times 0 [ 502.143174][T11781] CPU: 1 PID: 11781 Comm: syz.2.2450 Not tainted syzkaller #0 [ 502.150782][T11781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 502.160896][T11781] Call Trace: [ 502.164224][T11781] [ 502.167198][T11781] dump_stack_lvl+0x188/0x24e [ 502.171953][T11781] ? show_regs_print_info+0x12/0x12 [ 502.177221][T11781] ? load_image+0x410/0x410 [ 502.181787][T11781] ? __might_sleep+0xd0/0xd0 [ 502.186433][T11781] ? __lock_acquire+0x7c40/0x7c40 [ 502.191526][T11781] should_fail_ex+0x390/0x4c0 [ 502.196282][T11781] should_failslab+0x5/0x20 [ 502.200837][T11781] slab_pre_alloc_hook+0x59/0x300 [ 502.205918][T11781] ? do_syscall_64+0x4c/0xa0 [ 502.210577][T11781] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 502.216718][T11781] kmem_cache_alloc_node+0x5a/0x310 [ 502.221984][T11781] ? __alloc_skb+0xf9/0x7d0 [ 502.226648][T11781] __alloc_skb+0xf9/0x7d0 [ 502.231057][T11781] netlink_dump+0x1e1/0xcd0 [ 502.235634][T11781] ? apparmor_capable+0x12c/0x190 [ 502.240732][T11781] ? netlink_lookup+0x200/0x200 [ 502.245677][T11781] ? __inet_diag_dump_start+0x805/0x970 [ 502.251292][T11781] __netlink_dump_start+0x52c/0x6f0 [ 502.256598][T11781] inet_diag_rcv_msg_compat+0x207/0x420 [ 502.262288][T11781] ? __inet_diag_dump+0x380/0x380 [ 502.267375][T11781] ? sock_diag_rcv_msg+0x137/0x5e0 [ 502.272546][T11781] ? inet_diag_rcv_msg_compat+0x420/0x420 [ 502.278313][T11781] ? inet_diag_dump_start_compat+0x20/0x20 [ 502.284155][T11781] ? inet_diag_dump+0x50/0x50 [ 502.288864][T11781] ? trace_raw_output_contention_end+0xd0/0xd0 [ 502.295057][T11781] ? __inet_diag_dump+0x380/0x380 [ 502.300111][T11781] sock_diag_rcv_msg+0x3c7/0x5e0 [ 502.305082][T11781] netlink_rcv_skb+0x1ef/0x440 [ 502.309893][T11781] ? sock_diag_bind+0xa0/0xa0 [ 502.314647][T11781] ? netlink_ack+0x1160/0x1160 [ 502.319460][T11781] ? netlink_deliver_tap+0x2e/0x1b0 [ 502.324698][T11781] sock_diag_rcv+0x26/0x40 [ 502.329144][T11781] netlink_unicast+0x7ad/0x920 [ 502.333955][T11781] netlink_sendmsg+0x8ad/0xbd0 [ 502.338759][T11781] ? netlink_getsockopt+0x550/0x550 [ 502.343994][T11781] ? apparmor_socket_sendmsg+0x8a/0x330 [ 502.349584][T11781] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 502.354908][T11781] ? security_socket_sendmsg+0x7c/0xa0 [ 502.360397][T11781] ? netlink_getsockopt+0x550/0x550 [ 502.365633][T11781] ____sys_sendmsg+0x5ed/0x9a0 [ 502.370443][T11781] ? __sys_sendmsg_sock+0x30/0x30 [ 502.375508][T11781] ? __import_iovec+0x306/0x510 [ 502.380407][T11781] ? import_iovec+0x6f/0xa0 [ 502.384959][T11781] ___sys_sendmsg+0x2a2/0x360 [ 502.389677][T11781] ? __sys_sendmsg+0x2a0/0x2a0 [ 502.394492][T11781] ? __lock_acquire+0x7c40/0x7c40 [ 502.399626][T11781] __se_sys_sendmsg+0x1c3/0x2b0 [ 502.404603][T11781] ? __x64_sys_sendmsg+0x80/0x80 [ 502.409590][T11781] ? lockdep_hardirqs_on+0x94/0x140 [ 502.414824][T11781] do_syscall_64+0x4c/0xa0 [ 502.419280][T11781] ? clear_bhb_loop+0x60/0xb0 [ 502.423994][T11781] ? clear_bhb_loop+0x60/0xb0 [ 502.428704][T11781] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 502.434628][T11781] RIP: 0033:0x7fca0139e019 [ 502.439072][T11781] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 502.458700][T11781] RSP: 002b:00007fca021b4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 502.467146][T11781] RAX: ffffffffffffffda RBX: 00007fca01625fa0 RCX: 00007fca0139e019 [ 502.475168][T11781] RDX: 0000000004004010 RSI: 0000200000000240 RDI: 0000000000000003 [ 502.483170][T11781] RBP: 00007fca021b4090 R08: 0000000000000000 R09: 0000000000000000 [ 502.491248][T11781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 502.499249][T11781] R13: 00007fca01626038 R14: 00007fca01625fa0 R15: 00007ffcdc114a38 [ 502.507268][T11781] [ 502.617640][T11782] device syzkaller0 entered promiscuous mode [ 503.571384][T11816] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.2461'. [ 505.599272][T11807] netlink: 'syz.3.2458': attribute type 10 has an invalid length. [ 505.626890][T11816] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 505.643551][T11816] CPU: 1 PID: 11816 Comm: syz.2.2461 Not tainted syzkaller #0 [ 505.651108][T11816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 505.661211][T11816] Call Trace: [ 505.664541][T11816] [ 505.667516][T11816] dump_stack_lvl+0x188/0x24e [ 505.672258][T11816] ? show_regs_print_info+0x12/0x12 [ 505.677518][T11816] ? load_image+0x410/0x410 [ 505.682096][T11816] sysfs_warn_dup+0x8a/0xa0 [ 505.686663][T11816] sysfs_do_create_link_sd+0xc0/0x110 [ 505.692097][T11816] device_add+0x83b/0x1050 [ 505.696589][T11816] wiphy_register+0x1d8b/0x2aa0 [ 505.701521][T11816] ? cfg80211_event_work+0x40/0x40 [ 505.706686][T11816] ? minstrel_ht_alloc+0x894/0xa20 [ 505.711861][T11816] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 505.717980][T11816] ieee80211_register_hw+0x2d48/0x39f0 [ 505.723649][T11816] ? ieee80211_register_hw+0xee1/0x39f0 [ 505.729288][T11816] ? ieee80211_register_hw+0xee1/0x39f0 [ 505.734920][T11816] ? ieee80211_tasklet_handler+0x20/0x20 [ 505.740629][T11816] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 505.746605][T11816] ? __debug_object_init+0xed/0x440 [ 505.751864][T11816] ? memset+0x1e/0x40 [ 505.755885][T11816] ? __hrtimer_init+0x189/0x270 [ 505.760769][T11816] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 505.766535][T11816] ? memcpy+0x3c/0x60 [ 505.770615][T11816] hwsim_new_radio_nl+0xab7/0xc90 [ 505.775766][T11816] genl_family_rcv_msg_doit+0x22f/0x350 [ 505.781356][T11816] ? end_current_label_crit_section+0x170/0x170 [ 505.787653][T11816] ? trace_call_bpf+0xbf/0x6b0 [ 505.792461][T11816] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 505.798397][T11816] ? bpf_lsm_capable+0x5/0x10 [ 505.803122][T11816] ? security_capable+0x85/0xb0 [ 505.808053][T11816] genl_rcv_msg+0x601/0x790 [ 505.812625][T11816] ? genl_bind+0x360/0x360 [ 505.817066][T11816] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 505.823478][T11816] netlink_rcv_skb+0x1ef/0x440 [ 505.828294][T11816] ? genl_bind+0x360/0x360 [ 505.832753][T11816] ? netlink_ack+0x1160/0x1160 [ 505.837564][T11816] ? down_read+0x1a8/0x2d0 [ 505.842029][T11816] genl_rcv+0x24/0x40 [ 505.846084][T11816] netlink_unicast+0x7ad/0x920 [ 505.850935][T11816] netlink_sendmsg+0x8ad/0xbd0 [ 505.855760][T11816] ? netlink_getsockopt+0x550/0x550 [ 505.861006][T11816] ? apparmor_socket_sendmsg+0x8a/0x330 [ 505.866591][T11816] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 505.871936][T11816] ? security_socket_sendmsg+0x7c/0xa0 [ 505.877431][T11816] ? netlink_getsockopt+0x550/0x550 [ 505.882697][T11816] ____sys_sendmsg+0x5ed/0x9a0 [ 505.887527][T11816] ? __sys_sendmsg_sock+0x30/0x30 [ 505.892590][T11816] ? __import_iovec+0x306/0x510 [ 505.897502][T11816] ? import_iovec+0x6f/0xa0 [ 505.902086][T11816] ___sys_sendmsg+0x2a2/0x360 [ 505.906850][T11816] ? __sys_sendmsg+0x2a0/0x2a0 [ 505.911713][T11816] __se_sys_sendmsg+0x1c3/0x2b0 [ 505.916620][T11816] ? ct_nmi_exit+0x145/0x1c0 [ 505.921266][T11816] ? __x64_sys_sendmsg+0x80/0x80 [ 505.926268][T11816] ? lockdep_hardirqs_on+0x94/0x140 [ 505.931506][T11816] do_syscall_64+0x4c/0xa0 [ 505.935961][T11816] ? clear_bhb_loop+0x60/0xb0 [ 505.940678][T11816] ? clear_bhb_loop+0x60/0xb0 [ 505.945400][T11816] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 505.951330][T11816] RIP: 0033:0x7fca0139e019 [ 505.955769][T11816] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 505.975417][T11816] RSP: 002b:00007fca02193028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 505.983866][T11816] RAX: ffffffffffffffda RBX: 00007fca01626090 RCX: 00007fca0139e019 [ 505.991882][T11816] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 505.999897][T11816] RBP: 00007fca0143500c R08: 0000000000000000 R09: 0000000000000000 [ 506.007902][T11816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 506.015899][T11816] R13: 00007fca01626128 R14: 00007fca01626090 R15: 00007ffcdc114a38 [ 506.023915][T11816] [ 506.397081][T11830] FAULT_INJECTION: forcing a failure. [ 506.397081][T11830] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 506.623871][T11830] CPU: 0 PID: 11830 Comm: syz.1.2465 Not tainted syzkaller #0 [ 506.631462][T11830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 506.641588][T11830] Call Trace: [ 506.644910][T11830] [ 506.647885][T11830] dump_stack_lvl+0x188/0x24e [ 506.652628][T11830] ? show_regs_print_info+0x12/0x12 [ 506.657900][T11830] ? load_image+0x410/0x410 [ 506.662480][T11830] ? __lock_acquire+0x7c40/0x7c40 [ 506.667589][T11830] should_fail_ex+0x390/0x4c0 [ 506.672340][T11830] strncpy_from_user+0x32/0x340 [ 506.677259][T11830] bpf_prog_load+0x200/0x1530 [ 506.682010][T11830] ? map_freeze+0x390/0x390 [ 506.686578][T11830] ? __might_fault+0xa6/0x120 [ 506.691322][T11830] ? __might_fault+0xa6/0x120 [ 506.696048][T11830] ? __might_fault+0xc2/0x120 [ 506.700762][T11830] ? __might_fault+0xa6/0x120 [ 506.705500][T11830] ? bpf_lsm_bpf+0x5/0x10 [ 506.709951][T11830] ? security_bpf+0x7a/0xa0 [ 506.714540][T11830] __sys_bpf+0x5b8/0x780 [ 506.718848][T11830] ? bpf_link_show_fdinfo+0x380/0x380 [ 506.724284][T11830] ? lock_chain_count+0x20/0x20 [ 506.729199][T11830] __x64_sys_bpf+0x78/0x90 [ 506.733684][T11830] do_syscall_64+0x4c/0xa0 [ 506.738142][T11830] ? clear_bhb_loop+0x60/0xb0 [ 506.742875][T11830] ? clear_bhb_loop+0x60/0xb0 [ 506.747601][T11830] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 506.753540][T11830] RIP: 0033:0x7f204259e019 [ 506.758086][T11830] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 506.777760][T11830] RSP: 002b:00007f20433ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 506.786254][T11830] RAX: ffffffffffffffda RBX: 00007f2042825fa0 RCX: 00007f204259e019 [ 506.794322][T11830] RDX: 0000000000000094 RSI: 0000200000002c80 RDI: 0000000000000005 [ 506.802355][T11830] RBP: 00007f20433ac090 R08: 0000000000000000 R09: 0000000000000000 [ 506.810389][T11830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 506.818404][T11830] R13: 00007f2042826038 R14: 00007f2042825fa0 R15: 00007ffe97f6dd08 [ 506.826438][T11830] [ 507.431206][T11852] netlink: 'syz.3.2473': attribute type 10 has an invalid length. [ 507.602845][T11853] FAULT_INJECTION: forcing a failure. [ 507.602845][T11853] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 507.640828][T11853] CPU: 0 PID: 11853 Comm: syz.1.2472 Not tainted syzkaller #0 [ 507.648384][T11853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 507.658495][T11853] Call Trace: [ 507.661823][T11853] [ 507.664798][T11853] dump_stack_lvl+0x188/0x24e [ 507.669546][T11853] ? show_regs_print_info+0x12/0x12 [ 507.674813][T11853] ? load_image+0x410/0x410 [ 507.679381][T11853] ? __lock_acquire+0x7c40/0x7c40 [ 507.684506][T11853] should_fail_ex+0x390/0x4c0 [ 507.689245][T11853] _copy_from_user+0x2c/0x170 [ 507.693982][T11853] __sys_bpf+0x2ea/0x780 [ 507.698285][T11853] ? bpf_link_show_fdinfo+0x380/0x380 [ 507.703741][T11853] ? lock_chain_count+0x20/0x20 [ 507.708660][T11853] __x64_sys_bpf+0x78/0x90 [ 507.713136][T11853] do_syscall_64+0x4c/0xa0 [ 507.717609][T11853] ? clear_bhb_loop+0x60/0xb0 [ 507.722346][T11853] ? clear_bhb_loop+0x60/0xb0 [ 507.727085][T11853] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 507.733040][T11853] RIP: 0033:0x7f204259e019 [ 507.737507][T11853] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 507.757270][T11853] RSP: 002b:00007f204338b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 507.765756][T11853] RAX: ffffffffffffffda RBX: 00007f2042826090 RCX: 00007f204259e019 [ 507.773795][T11853] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 507.781842][T11853] RBP: 00007f204338b090 R08: 0000000000000000 R09: 0000000000000000 [ 507.789875][T11853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 507.797919][T11853] R13: 00007f2042826128 R14: 00007f2042826090 R15: 00007ffe97f6dd08 [ 507.806487][T11853] [ 511.692976][T11894] netlink: 'syz.3.2486': attribute type 10 has an invalid length. [ 512.532592][T11907] netlink: 'syz.1.2490': attribute type 39 has an invalid length. [ 516.207755][T11930] bY4`Ҙ: renamed from lo [ 517.067080][T11945] netlink: 'syz.4.2503': attribute type 10 has an invalid length. [ 517.433420][T11953] netlink: 'syz.2.2504': attribute type 39 has an invalid length. [ 517.688384][T11959] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2507'. [ 518.565977][T11974] netlink: 'syz.1.2512': attribute type 29 has an invalid length. [ 518.603519][T11974] netlink: 'syz.1.2512': attribute type 29 has an invalid length. [ 518.896839][T11978] netlink: 'syz.2.2514': attribute type 10 has an invalid length. [ 519.029604][T11986] netlink: 'syz.0.2516': attribute type 21 has an invalid length. [ 519.071514][T11986] netlink: 'syz.0.2516': attribute type 6 has an invalid length. [ 519.106150][T11986] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2516'. [ 519.279760][T11995] netlink: 'syz.2.2518': attribute type 10 has an invalid length. [ 519.535714][T12000] netlink: 'syz.0.2521': attribute type 39 has an invalid length. [ 519.777957][T12003] device syzkaller0 entered promiscuous mode [ 521.238365][T12042] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.2532'. [ 524.028084][T12046] netlink: 'syz.4.2533': attribute type 10 has an invalid length. [ 524.460965][T12057] netlink: 'syz.2.2538': attribute type 39 has an invalid length. [ 524.613319][T12067] FAULT_INJECTION: forcing a failure. [ 524.613319][T12067] name failslab, interval 1, probability 0, space 0, times 0 [ 524.631976][T12067] CPU: 0 PID: 12067 Comm: syz.1.2542 Not tainted syzkaller #0 [ 524.639537][T12067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 524.649663][T12067] Call Trace: [ 524.653016][T12067] [ 524.656008][T12067] dump_stack_lvl+0x188/0x24e [ 524.660789][T12067] ? show_regs_print_info+0x12/0x12 [ 524.666084][T12067] ? load_image+0x410/0x410 [ 524.670674][T12067] ? __might_sleep+0xd0/0xd0 [ 524.675332][T12067] ? __lock_acquire+0x7c40/0x7c40 [ 524.680490][T12067] should_fail_ex+0x390/0x4c0 [ 524.685264][T12067] should_failslab+0x5/0x20 [ 524.689833][T12067] slab_pre_alloc_hook+0x59/0x300 [ 524.694934][T12067] ? trace_probe_init+0x2af/0x380 [ 524.700037][T12067] __kmem_cache_alloc_node+0x4f/0x270 [ 524.705492][T12067] ? trace_probe_init+0x2af/0x380 [ 524.710592][T12067] __kmalloc_node_track_caller+0xa0/0x240 [ 524.716435][T12067] ? rcu_is_watching+0x11/0xa0 [ 524.721295][T12067] kstrdup+0x37/0x70 [ 524.725283][T12067] trace_probe_init+0x2af/0x380 [ 524.730236][T12067] create_local_trace_uprobe+0x17f/0x660 [ 524.735966][T12067] ? bpf_get_uprobe_info+0x520/0x520 [ 524.741359][T12067] perf_uprobe_init+0xef/0x190 [ 524.746199][T12067] perf_uprobe_event_init+0xe2/0x170 [ 524.751552][T12067] perf_try_init_event+0x12b/0x3d0 [ 524.756745][T12067] ? perf_event_alloc+0xb28/0x21e0 [ 524.761939][T12067] perf_event_alloc+0xea0/0x21e0 [ 524.766950][T12067] ? _raw_spin_unlock+0x24/0x40 [ 524.771874][T12067] ? find_lively_task_by_vpid+0x19/0x290 [ 524.777580][T12067] ? find_lively_task_by_vpid+0x19/0x290 [ 524.783293][T12067] __se_sys_perf_event_open+0x701/0x1ec0 [ 524.789004][T12067] ? __fget_files+0x3fc/0x460 [ 524.793779][T12067] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 524.799526][T12067] ? lockdep_hardirqs_on+0x94/0x140 [ 524.804790][T12067] ? __x64_sys_perf_event_open+0x1c/0xc0 [ 524.810504][T12067] do_syscall_64+0x4c/0xa0 [ 524.815004][T12067] ? clear_bhb_loop+0x60/0xb0 [ 524.819755][T12067] ? clear_bhb_loop+0x60/0xb0 [ 524.824506][T12067] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 524.830472][T12067] RIP: 0033:0x7f204259e019 [ 524.834957][T12067] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 524.854634][T12067] RSP: 002b:00007f20433ac028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 524.863133][T12067] RAX: ffffffffffffffda RBX: 00007f2042825fa0 RCX: 00007f204259e019 [ 524.871173][T12067] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000001080 [ 524.879211][T12067] RBP: 00007f20433ac090 R08: 0000000000000000 R09: 0000000000000000 [ 524.887255][T12067] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 524.895308][T12067] R13: 00007f2042826038 R14: 00007f2042825fa0 R15: 00007ffe97f6dd08 [ 524.903467][T12067] [ 524.969688][T12067] trace_uprobe: Failed to allocate trace_uprobe.(-12) [ 525.665849][T12087] netlink: 'syz.4.2546': attribute type 3 has an invalid length. [ 525.694453][T12087] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2546'. [ 526.754422][T12120] netlink: 'syz.0.2554': attribute type 39 has an invalid length. [ 528.252852][T12153] bond0: (slave dummy0): Error: Slave device does not support XDP [ 528.449393][T12160] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2566'. [ 528.478168][T12167] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.2572'. [ 528.632498][T12160] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 528.710596][T12160] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 529.907234][T12160] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 530.062926][T12160] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 530.101313][T12160] bond0 (unregistering): Released all slaves [ 530.276309][T12182] netlink: 'syz.4.2576': attribute type 39 has an invalid length. [ 531.088212][T12202] netlink: 'syz.0.2583': attribute type 39 has an invalid length. [ 533.123196][T12216] netlink: 'syz.4.2587': attribute type 3 has an invalid length. [ 533.199937][T12216] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2587'. [ 533.269849][T12214] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 533.374463][T12214] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 533.384283][T12214] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 533.393938][T12214] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 533.403661][T12214] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 533.413295][T12214] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 533.422971][T12214] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 533.432651][T12214] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 533.442280][T12214] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 533.452687][T12214] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 537.129366][T12239] netlink: 'syz.0.2594': attribute type 39 has an invalid length. [ 537.451133][T12250] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2595'. [ 537.465941][T12250] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2595'. [ 537.496238][T12250] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2595'. [ 537.543537][T12250] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2595'. [ 538.032325][T12266] netlink: 'syz.1.2602': attribute type 10 has an invalid length. [ 538.078954][T12266] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2602'. [ 538.340202][T12266] net_ratelimit: 823 callbacks suppressed [ 538.340307][T12266] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 540.007516][T12303] netlink: 'syz.3.2614': attribute type 39 has an invalid length. [ 540.252267][T12305] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2616'. [ 540.433754][T12312] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2629'. [ 540.755607][T12305] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 540.852965][T12305] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 540.947230][T12305] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 541.034481][T12305] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 541.068640][T12305] bond0 (unregistering): Released all slaves [ 541.142980][T12312] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2629'. [ 541.156632][T12321] netlink: 'syz.4.2619': attribute type 10 has an invalid length. [ 541.177379][T12321] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2619'. [ 541.222509][T12321] bridge0: port 3(veth0_vlan) entered blocking state [ 541.246776][T12321] bridge0: port 3(veth0_vlan) entered disabled state [ 541.389847][T12321] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 541.418535][T12326] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2621'. [ 541.651472][T12333] netlink: 'syz.4.2624': attribute type 7 has an invalid length. [ 541.698166][T12333] netlink: 'syz.4.2624': attribute type 7 has an invalid length. [ 541.702793][T12338] netlink: 'syz.4.2624': attribute type 17 has an invalid length. [ 541.733820][T12333] netlink: 198580 bytes leftover after parsing attributes in process `syz.4.2624'. [ 542.081239][T12346] device syzkaller0 entered promiscuous mode [ 542.255591][T12352] netlink: 'syz.0.2632': attribute type 39 has an invalid length. [ 569.353801][ T4317] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 1-.... } 2651 jiffies s: 39897 root: 0x2/. [ 569.372172][ T4317] rcu: blocking rcu_node structures (internal RCU debug): [ 569.379452][ T4317] Sending NMI from CPU 0 to CPUs 1: [ 569.384993][ C1] NMI backtrace for cpu 1 [ 569.385002][ C1] CPU: 1 PID: 12358 Comm: syz.2.2634 Not tainted syzkaller #0 [ 569.385019][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 569.385029][ C1] RIP: 0010:lock_acquire+0x1/0x4a0 [ 569.385058][ C1] Code: 0f 8c 3a fb ff ff 48 c7 c7 a8 3f 21 8e e8 57 62 6f 00 e9 29 fb ff ff 66 90 65 8b 05 c1 76 9e 7e a9 00 ff ff 00 0f 95 c0 c3 55 <48> 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 48 81 ec e0 00 00 [ 569.385073][ C1] RSP: 0018:ffffc900001e07a8 EFLAGS: 00000046 [ 569.385088][ C1] RAX: ffffffff818bd4df RBX: 0000000000000000 RCX: 0000000000000002 [ 569.385099][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8cb2db60 [ 569.385109][ C1] RBP: ffffc900001e08b8 R08: 0000000000000000 R09: 0000000000000000 [ 569.385119][ C1] R10: dffffc0000000000 R11: ffffed10171e6b02 R12: ffffffff8cb803a0 [ 569.385139][ C1] R13: 1ffff9200003c104 R14: ffff8880b8f35558 R15: 0000000000000000 [ 569.385150][ C1] FS: 00007fca021b46c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 569.385165][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 569.385176][ C1] CR2: 00007fca02192ff8 CR3: 000000002e960000 CR4: 00000000003506e0 [ 569.385191][ C1] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 569.385201][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 569.385211][ C1] Call Trace: [ 569.385216][ C1] [ 569.385223][ C1] trace_call_bpf+0xe0/0x6b0 [ 569.385247][ C1] ? trace_call_bpf+0xbf/0x6b0 [ 569.385270][ C1] ? trace_call_bpf+0xbf/0x6b0 [ 569.385295][ C1] ? __bpf_trace_bpf_trace_printk+0x20/0x20 [ 569.385321][ C1] ? kvm_sched_clock_read+0x14/0x40 [ 569.385337][ C1] ? sched_clock_cpu+0x6e/0x260 [ 569.385360][ C1] perf_trace_run_bpf_submit+0x79/0x1c0 [ 569.385389][ C1] perf_trace_preemptirq_template+0x268/0x320 [ 569.385414][ C1] ? asm_sysvec_irq_work+0x16/0x20 [ 569.385437][ C1] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 569.385463][ C1] ? __irq_exit_rcu+0x147/0x230 [ 569.385478][ C1] ? irq_exit_rcu+0x20/0x20 [ 569.385496][ C1] ? asm_sysvec_irq_work+0x16/0x20 [ 569.385518][ C1] trace_irq_enable_rcuidle+0xd3/0x140 [ 569.385543][ C1] trace_hardirqs_on+0x24/0x40 [ 569.385564][ C1] asm_sysvec_irq_work+0x16/0x20 [ 569.385585][ C1] RIP: 0010:rcu_read_unlock_special+0x7f/0x510 [ 569.385604][ C1] Code: eb 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 2b 42 c7 44 2b 08 f8 f3 f3 f3 65 44 8b 35 a2 7c 95 7e 41 f7 c6 00 00 f0 00 74 40 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 42 c7 44 2b 08 [ 569.385619][ C1] RSP: 0018:ffffc900001e0ae0 EFLAGS: 00000206 [ 569.385632][ C1] RAX: ae0cab6905367800 RBX: 1ffff9200003c164 RCX: ae0cab6905367800 [ 569.385645][ C1] RDX: dffffc0000000000 RSI: ffffffff8a8c17a0 RDI: ffffffff8adf5de0 [ 569.385657][ C1] RBP: ffffc900001e0bd0 R08: ffffffff90b10247 R09: 1ffffffff2162048 [ 569.385669][ C1] R10: dffffc0000000000 R11: fffffbfff2162049 R12: 0000000000000246 [ 569.385681][ C1] R13: dffffc0000000000 R14: ffff8880b8f3bb00 R15: 0000000000000002 [ 569.385704][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 569.385729][ C1] ? __rcu_read_unlock+0xd0/0xd0 [ 569.385753][ C1] __rcu_read_unlock+0x78/0xd0 [ 569.385768][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170 [ 569.385794][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 569.385813][ C1] ieee80211_iterate_active_interfaces_atomic+0x156/0x170 [ 569.385840][ C1] mac80211_hwsim_beacon+0xb7/0x1b0 [ 569.385869][ C1] __hrtimer_run_queues+0x522/0xc90 [ 569.385892][ C1] ? hw_scan_work+0xf00/0xf00 [ 569.385922][ C1] ? hrtimer_interrupt+0x980/0x980 [ 569.385946][ C1] hrtimer_run_softirq+0x173/0x290 [ 569.385968][ C1] handle_softirqs+0x291/0x910 [ 569.385987][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 569.386005][ C1] ? do_softirq+0x210/0x210 [ 569.386019][ C1] ? hrtimer_interrupt+0x775/0x980 [ 569.386043][ C1] __irq_exit_rcu+0x13b/0x230 [ 569.386059][ C1] ? irq_exit_rcu+0x20/0x20 [ 569.386081][ C1] irq_exit_rcu+0x5/0x20 [ 569.386095][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 569.386113][ C1] [ 569.386117][ C1] [ 569.386130][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 569.386152][ C1] RIP: 0010:insn_get_prefixes+0x1bd/0x16d0 [ 569.386177][ C1] Code: 49 8d 45 04 4c 39 f8 0f 96 c0 44 84 f0 0f 85 f4 00 00 00 e8 35 3d 5e f7 4d 8d 65 01 48 b8 00 00 00 00 00 fc ff df 0f b6 04 03 <84> c0 0f 85 56 11 00 00 4c 39 fd 0f 96 c3 41 0f b6 75 00 83 fe 0f [ 569.386191][ C1] RSP: 0018:ffffc9000c767458 EFLAGS: 00000287 [ 569.386203][ C1] RAX: 0000000000000005 RBX: 1ffffffff1f23a68 RCX: 0000000000080000 [ 569.386214][ C1] RDX: ffffc9000c7a9000 RSI: 00000000000096a8 RDI: 00000000000096a9 [ 569.386226][ C1] RBP: ffffffff8f91d342 R08: ffffc9000c767797 R09: ffffc9000c767740 [ 569.386238][ C1] R10: dffffc0000000000 R11: fffff520018ecef3 R12: ffffffff8f91d341 [ 569.386250][ C1] R13: ffffffff8f91d340 R14: ffffc9000c767700 R15: ffffffff8f91d34f [ 569.386272][ C1] ? insn_get_prefixes+0x114/0x16d0 [ 569.386299][ C1] ? mark_lock+0x94/0x320 [ 569.386325][ C1] insn_get_opcode+0x1ac/0xa30 [ 569.386358][ C1] insn_get_modrm+0x214/0x760 [ 569.386386][ C1] insn_get_displacement+0x146/0x9d0 [ 569.386410][ C1] ? insn_get_immediate+0x7d/0x11b0 [ 569.386436][ C1] insn_get_immediate+0x2f8/0x11b0 [ 569.386464][ C1] insn_decode+0x386/0x520 [ 569.386489][ C1] text_poke_loc_init+0x105/0x560 [ 569.386512][ C1] ? trace_sched_wake_idle_without_ipi+0x10c/0x160 [ 569.386536][ C1] ? text_poke_finish+0x30/0x30 [ 569.386564][ C1] ? trace_raw_output_contention_end+0xd0/0xd0 [ 569.386587][ C1] ? trace_sched_wake_idle_without_ipi+0x10c/0x160 [ 569.386609][ C1] text_poke_bp+0xc0/0x160 [ 569.386627][ C1] ? __mutex_lock+0x1ab/0xae0 [ 569.386653][ C1] ? text_poke_queue+0x180/0x180 [ 569.386677][ C1] __static_call_transform+0x2f2/0x510 [ 569.386696][ C1] ? trace_sched_wake_idle_without_ipi+0x10c/0x160 [ 569.386716][ C1] ? trace_event_raw_event_sched_wake_idle_without_ipi+0x190/0x190 [ 569.386737][ C1] ? text_poke_bp+0x160/0x160 [ 569.386755][ C1] ? rcu_read_lock_any_held+0xb0/0x130 [ 569.386776][ C1] ? rcu_read_lock_bh_held+0xf0/0xf0 [ 569.386797][ C1] ? trace_sched_wake_idle_without_ipi+0x10c/0x160 [ 569.386818][ C1] ? trace_event_raw_event_sched_wake_idle_without_ipi+0x190/0x190 [ 569.386839][ C1] arch_static_call_transform+0x1a2/0x260 [ 569.386865][ C1] ? trace_sched_wake_idle_without_ipi+0x10c/0x160 [ 569.386886][ C1] __static_call_update+0x3b2/0x5c0 [ 569.386910][ C1] ? trace_event_raw_event_sched_wake_idle_without_ipi+0x190/0x190 [ 569.386933][ C1] ? __static_call_return0+0x10/0x10 [ 569.386954][ C1] ? __kmem_cache_alloc_node+0x19d/0x270 [ 569.386973][ C1] ? tracepoint_add_func+0x2f1/0xa10 [ 569.386999][ C1] ? rcu_is_watching+0x11/0xa0 [ 569.387024][ C1] ? tracepoint_add_func+0x4b2/0xa10 [ 569.387050][ C1] ? trace_event_raw_event_sched_wake_idle_without_ipi+0x190/0x190 [ 569.387070][ C1] tracepoint_add_func+0x946/0xa10 [ 569.387100][ C1] ? trace_event_raw_event_sched_wake_idle_without_ipi+0x190/0x190 [ 569.387120][ C1] tracepoint_probe_register+0x5a/0x90 [ 569.387151][ C1] ? trace_event_raw_event_sched_wake_idle_without_ipi+0x190/0x190 [ 569.387173][ C1] perf_trace_event_init+0x41e/0x940 [ 569.387196][ C1] perf_trace_init+0x234/0x2d0 [ 569.387216][ C1] perf_tp_event_init+0x89/0x110 [ 569.387235][ C1] perf_try_init_event+0x12b/0x3d0 [ 569.387255][ C1] ? perf_event_alloc+0xb28/0x21e0 [ 569.387271][ C1] perf_event_alloc+0xea0/0x21e0 [ 569.387288][ C1] ? _raw_spin_unlock+0x24/0x40 [ 569.387306][ C1] ? find_lively_task_by_vpid+0x19/0x290 [ 569.387325][ C1] ? find_lively_task_by_vpid+0x19/0x290 [ 569.387348][ C1] __se_sys_perf_event_open+0x701/0x1ec0 [ 569.387381][ C1] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 569.387417][ C1] ? syscall_enter_from_user_mode+0x2a/0x80 [ 569.387433][ C1] ? __x64_sys_perf_event_open+0x1c/0xc0 [ 569.387460][ C1] do_syscall_64+0x4c/0xa0 [ 569.387482][ C1] ? clear_bhb_loop+0x60/0xb0 [ 569.387503][ C1] ? clear_bhb_loop+0x60/0xb0 [ 569.387526][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 569.387547][ C1] RIP: 0033:0x7fca0139e019 [ 569.387562][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 569.387575][ C1] RSP: 002b:00007fca021b4028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 569.387591][ C1] RAX: ffffffffffffffda RBX: 00007fca01625fa0 RCX: 00007fca0139e019 [ 569.387603][ C1] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000000 [ 569.387614][ C1] RBP: 00007fca0143500c R08: 0000000000000000 R09: 0000000000000000 [ 569.387624][ C1] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 569.387636][ C1] R13: 00007fca01626038 R14: 00007fca01625fa0 R15: 00007ffcdc114a38 [ 569.387657][ C1]